Data distribution system and method of same, data processing apparatus and method of same, and data recording medium

[0001] 1. Field of the Invention

[0002] The present invention relates to a data distribution system which data of various specifications, recording media, recording apparatuses, reproducing, apparatuses, and signals are mixed together and which various ownership rights are set, wherein data is distributed while suitably clearing rights, controlling copying, converting signals, distributing profits, and other performing processing, and a method of the same, a data processing apparatus preferred when applied to a data distribution system and a method of the same, and a data recording medium.

[0003] 2. Description of the Related Art

[0004] Due to the advances made in recording technology and signal processing technology in recent years, the systems for recording for example music data have diversified. For example, even looking at the recording media, there are now media of various forms, various systems, and various formats. Accordingly, there are also various types of recording apparatuses and reproducing apparatuses. Further, the music data itself comes in various signal parameters, various compression systems, and various specifications. Further, as additional functions, various signals are superimposed on the music data for use for prevention of illicit copying, for clearing of rights, etc.

[0005] Summarizing the disadvantages to be solved by the invention, due to the appearance of such a variety of systems and specifications, there is the disadvantage in that it is difficult to convert formats or achieve compatibility among them.

[0006] While various specifications of data and media have appeared, these are also connected by networks making the transfer of the data itself easy. While transfer is possible, however, there is the disadvantage that the data cannot be used since the data differs in the compression method, format, etc.

[0007] In recent years, the distribution of various forms of data via the network is now becoming commonplace as a business. Even in such a distribution system, such a disadvantage has occurred. Since there are various formats, the disadvantage easily arises of the format being mistaken or the data not being suitably converted and therefore the transmitted data not being able to be distributed in a suitable form. Further, the disadvantage also easily arises that important data, for example charge data, is destroyed or becomes clear to the outside due to unsuitable conversion.

[0008] An object of the present invention is to provide a data distribution system capable of suitably grasping an operating environment even in a system which various types of apparatuses are connected and thereby capable of suitably distributing data, of course, and also controlling copying of the data, conversion of signals, charge processing, distribution of profit, and other various processing, and a method of the same, a data processing apparatus preferred when applied to such a data distribution system and a method of same, and a data recording medium.

[0009] Accordingly to a first aspect of the present invention, there is provided a data distribution system comprising a reproducing apparatus for reproducing content data to be distributed from a mounted recording medium, a recording apparatus for recording the reproduced content data on a mounted recording medium, an examining means for examining the type of the content data recorded on the recording medium mounted in the reproducing apparatus, the recording medium mounted in the reproducing apparatus, the reproducing apparatus, the recording medium mounted in the recording apparatus, and the recording apparatus, and a controlling means for controlling transfer of the content data from the recording medium mounted in the reproducing apparatus to the recording medium mounted in the recording apparatus based on results of the examination.

[0010] Preferably, the examining means examines whether the content data to be distributed is content data of a first type which is distributed in an encrypted state or content data of a second type which is distributed in an unencrypted state, examines whether the recording medium is a recording medium of a first type having a configuration enabling recorded data to be effectively read out by performing authentication processing or a recording medium of a second type having no such configuration and enabling the recorded data to be read out freely, examines whether the reproducing apparatus is a reproducing apparatus of a first type for reproducing after the authentication processing or a reproducing apparatus of a second type for reproducing without that processing, and examines whether the recording apparatus is a recording apparatus of a first type for recording after the authentication processing or a recording apparatus of a second type for recording without that processing.

[0011] According to a second aspect of the present invention, there is provided another data distribution system comprising a reproducing apparatus for reproducing content data to be distributed from a mounted recording medium, a recording apparatus for recording the reproduced content data on a mounted recording medium, an examining means for examining owners of the recording medium mounted in the reproducing apparatus, the reproducing apparatus, a recording medium mounted in the recording apparatus, and the recording apparatus, and a controlling means for controlling a transfer of the content data from the recording medium mounted in the reproducing apparatus to the recording medium mounted in the recording apparatus based on results of the examination.

[0012] According to a third aspect of the present invention, there is provided another data distribution system comprising a reproducing apparatus for reproducing content data to be distributed from a mounted recording medium, a recording apparatus for recording the reproduced content data on a mounted recording medium, an examining means for examining elements for which some sort of profits should be distributed relating to the processing of the transfer of the content data from the recording medium mounted in the reproducing apparatus to the recording medium mounted in the recording apparatus, and a processing means for performing predetermined processing so that the profit is distributed to the elements based on results of the examination.

[0013] According to a fourth aspect of the present invention, there is provided a data communication system comprising a reproducing apparatus for reproducing content data to be distributed from a mounted recording medium, a recording apparatus for recording the reproduced content data on a mounted recording medium, an examining means for examining specifications of a signal of the content data recorded on the recording medium mounted in the reproducing apparatus, specifications of a signal of reproduction processing in the reproducing apparatus, and specifications of a signal of recording processing by the recording apparatus, and a signal converting means for converting a signal of the content data so that the transfer of the content data from the recording medium mounted in the reproducing apparatus to the recording medium mounted in the recording apparatus can be suitably carried out based on results of the examination.

[0014] According to a fifth aspect of the present invention, there is provided a data distribution method comprising the steps of examining types of content data to be distributed recorded on a recording medium mounted in a reproducing apparatus, a recording medium mounted in the reproducing apparatus, the reproducing apparatus, a recording medium mounted in the recording apparatus, and the recording apparatus and controlling the transfer of the content data from the recording medium mounted in the reproducing apparatus to the recording medium mounted in the recording apparatus based on results of the examination.

[0015] According to a sixth aspect of the present invention, there is provided a data distribution method comprising the steps of examining owners of a recording medium mounted in a reproducing apparatus and with content data to be distributed recorded thereon, the reproducing apparatus, a recording medium mounted in the recording apparatus, and the recording apparatus and controlling the transfer of the content data from the recording medium mounted in the reproducing apparatus to the recording medium mounted in the recording apparatus based on results of the examination.

[0016] According to a seventh aspect of the present invention, there is provided a data distribution method comprising the steps of examining elements for which some sort of profit should be distributed relating to processing for transfer of the content data from a recording medium mounted in a reproducing apparatus to a recording medium mounted in a recording apparatus and transmitting a list of elements for which the profit should be distributed based on the results of the examination to an organization for managing the profit relating to the distribution of the related content data.

[0017] According to an eighth aspect of the present invention, there is provided another data distribution method comprising the steps of examining specifications of a signal of content data recorded on a recording medium mounted in a reproducing apparatus, specifications of a signal of reproduction processing in the reproducing apparatus, and specifications of a signals of recording processing of a recording apparatus, converting the signal of the content data so that the transfer of the content data from the recording medium mounted in the reproducing apparatus to the recording medium mounted in the recording apparatus can be suitably carried out based on results of the examination, and recording the converted signal on the recording medium mounted in the recording apparatus.

[0018] According to a ninth aspect of the present invention, there is provided a data processing apparatus comprising a reproducing apparatus for reproducing content data to be distributed from a mounted recording medium, an examining means for examining types of the content data recorded on a recording medium mounted in the reproducing apparatus, a recording medium mounted in the reproducing apparatus, and the reproducing apparatus and a controlling means for controlling the reproduction of the content data from the recording medium mounted in the reproducing apparatus based on results of the examination.

[0019] According to a 10th aspect of the present invention, there is provided another data processing apparatus comprising an examining means for examining elements for which some sort of profit should be distributed relating to reproduction of content data to be distributed from a recording medium mounted in a reproducing apparatus and a transmitting means for transmitting a list of elements for which the profit should be distributed as a result of the examination to an organization managing the profit relating to the distribution of the related content data.

[0020] According to an 11th aspect of the present invention, there is provided a data processing method comprising the steps of examining the types of content data to be distributed recorded on a recording medium mounted in a reproducing apparatus, a recording medium mounted in the reproducing apparatus, and the reproducing apparatus and controlling the reproduction of content data from the recording medium mounted in the reproducing apparatus based on results of the examination.

[0021] According to a 12th aspect of the present invention, there is provided a data processing method comprising the steps of examining elements for which some sort of profit should be distributed relating to reproduction of content data to be distributed from a recording medium mounted in a reproducing apparatus and transmitting a list of the elements for which the profit should be distributed as the result of the examination to an organization for managing profit related to the distribution of the related content data.

[0022] According to a 13th aspect of the present invention, there is provided a data processing apparatus comprising a recording apparatus for recording content data to be distributed on a mounted recording medium, an examining means for examining types of the content data, the recording medium, and the recording apparatus, and a controlling means for controlling the recording of the content data onto the recording medium based on results of the examination.

[0023] According to a 14th aspect of the present invention, there is provided a data processing apparatus comprising an examining means for examining elements for which some sort of profit should be distributed relating to processing for recording content data to be distributed on a recording medium mounted in a recording apparatus and a transmitting means for transmitting a list of elements for which the profit should be distributed as a result of the examination to an organization for managing the profit relating to the distribution of the related content data.

[0024] According to a 15th aspect of the present invention, there is provided a data processing method comprising the steps of examining types of content data to be distributed, a recording medium, and a recording apparatus and controlling the recording of the content data onto the recording medium in the recording apparatus based on results of the examination.

[0025] According to a 16th aspect of the present invention, there is provided a data processing method comprising the steps of examining elements for which some sort of profit should be distributed relating to processing of recording content data to be distributed on a recording medium mounted in a recording apparatus and transmitting a list of elements for which the profit should be distributed as a result of the examination to an organization for managing the profit relating to the distribution of the related content data.

[0026] According to a 17th aspect of the present invention, there is provided a data recording medium having a configuration enabling effective read out of recorded data by authentication processing, comprising a switch for selecting whether the related recording medium is to be used as a recording medium having a configuration enabling effective read out of recorded data by authentication processing or used as a recording medium not having such a configuration and enabling free read out of the recorded data.

[0067] An embodiment of the present invention will be explained next by referring to FIG. 1 to FIG. 39.

[0068] In the present embodiment, an electronic music distribution system (EMD system) for distributing music via a network or package medium while suitably clearing rights. The present invention will be explained by explaining a method of distribution and a method of circulation of various forms of music data including music data of a form not based on the EMD system under the environment of the EMD system and systems and apparatuses relating to the same.

[0069] EMD System

[0070] Configuration of EMD system

[0071] First, an explanation will be given of the overall configuration of an EMD system 1 by referring to FIG. 1.

[0072] FIG. 1 is a block diagram of the configuration of the EMD system 1.

[0073] The EMD system 1 has an EMD service center 100, a content provider 200, a service provider 250, a delivery channel 300, and a user home network 400.

[0074] Note that the EMD system 1 shown in FIG. 1 is configured with one each EMD service center 100, content provider 200, and service provider 250 and two user home networks 400, but this is the configuration preferred for the explanation. As will be explained later, the number of each component is arbitrary.

[0075] EMD Service Center 100

[0076] The EMD service center 100 manages the entire EMD system 1 so that the content data is distributed while being suitably cleared for rights, in other words, while being suitably charged.

[0077] Namely, it stores and manages IDs of the content provider 200, service provider 250, user home network 400, and the apparatuses of the user home network 400 and manages the key data or certificate data used when these components send various data and certifies their legitimacy.

[0078] Specifically, for example, the EMD service center 100 distributes a distribution key for encrypting content and distributing the same to the content provider 200 and distributes a distribution key for decrypting the encryption to the user home network 400 in a state which it can be used conditional on proper clearing of the rights and thereby controls the distribution of the content.

[0079] Also, it receives information relating to the usage of the content in accordance with the usage of the content from the user home network 400, charges, and settles the charges. Namely, it collects the charge for the usage of content from the user and distributes the profit to concerned persons involved from the production to the circulation of the content such as the content provider 200 and the service provider 250 and, in certain cases, the provider of the apparatus of the user home network 400.

[0080] For such processing, the EMD service center 100 stores information such as the IDs and attributes of the apparatuses connected to the user home network 400 as a database. As will be explained later, various types of apparatuses are connected to the user home network 400. At least for EMD system compatible apparatuses mounting secure application modules (SAMs) and able to clear rights in a secure state (hereinafter sometimes also referred to as EMD hardware), however, basically the information of all these apparatuses are registered in the EMD service center 100 and managed by the EMD service center 100.

[0081] For processing to distribute profits, the EMD service center 100 stores information for specifying the concerned person and charging or paying for every distributed content data, data for determining a profit distribution rate per concerned person, various conversion data for determining a final usage price of content based on the usage information input from the user home network 400, and so on. The user home network 400 explained later successively transmits the usage information based on the usage of the content, so the purchase price is determined by referring to these stored data, the distribution of profit is determined, and the actual fees are collected and paid for.

[0082] Note that one EMD service center 100 preferably exists for every EMD system 1.

[0083] Content Provider 200

[0084] The content provider 200 is the copyright holder of the content data (music data in the present embodiment). It creates a content provider secure container as shown in FIG. 2 with respect to the content data to be distributed and supplies this to the distributor, that is, the service provider 250.

[0085] Specifically, the content provider 200 superimposes copyright information for certifying that the content is its own on the content data as watermark information (electronic watermark information). Further, it superimposes watermark information with a copy prohibition bit for prohibiting copying via an analog interface buried therein on that, compresses the content data, and encrypts the same by a content key created by itself.

[0086] Also, it creates a usage control policy (UCP) determining the policy for handling the content and encrypts the content key and UCP by the distribution key distributed from the EMD service center 100.

[0087] Then, it obtains hash values for the content encrypted by the content key and the content key encrypted by the distribution key and UCP and creates a signature by using the secret key of the content provider 200.

[0088] It adds this signature to each previous data to create the content provider secure container and supplies the same to the service provider 250.

[0089] Note that there is a content provider 200 for every group holding a copyright and managing content corresponding to for example a conventional record company. There are a large of content providers with respect to one EMD system 1.

[0090] Service Provider 250

[0091] The service provider 250 creates the service provider secure container as shown in FIG. 3 with respect to the content provider secure container supplied from the content provider 200 and distributes this via any delivery channel 300 to a user home network 400_-1.

[0092] Specifically, the service provider 250 verifies the signature of the content provider secure container by a public key of the content provider 200 supplied from the EMD service center 100.

[0093] Next, it adds new price information (PT: price tag) adding on an amount of profit for the distribution service it performs itself, obtains the hash value of each data, and creates a signature by using the secret key of the service provider 250.

[0094] It adds this signature to each previous data to create the service provider secure container and distributes the same via the delivery channel 300 to the user home network 400.

[0095] Note that there are also a large number of these service providers 250 for one EMD system 1.

[0096] Delivery Channel 300

[0097] The delivery channel 300 is any delivery channel. Specifically, it includes any distributing means, for example, distribution by a communication network such as the Internet, a cable television system, a satellite broadcast system, an ATM communication network, a mobile band communication network, and a package medium.

[0098] User Home Network 400

[0099] The user home networks 400_-1 and 400_-2 receive the service provider secure containers distributed from the service provider 250 and actually use the content data contained in them according to need.

[0100] The general configuration of a user home network 400 is shown in FIG. 4.

[0101] The user home network 400 is preferably thought of as the group of recording and/or reproducing apparatuses of music data in each home, but strictly speaking is comprised of any various apparatuses without regard as to being inside or outside of the home.

[0102] As the apparatuses to be connected there, there are data recording apparatuses, reproducing apparatuses, and recording and/or reproducing apparatuses. Here, however, they are shown classified to network apparatuses 410 having a communication function and simple recording and/or reproducing apparatuses 412 not having a communication function by themselves, but wherein recording and reproduction of the music data are carried out via a recording medium.

[0103] Namely, the first user home network 400_-1 shown in FIG. 4 has two network apparatuses 410_-1 and 410_-2 and two recording and/or reproducing apparatuses 412_-1, and 412_-2, while the second user home network 400_-2 has three network apparatuses 410_-3 to 410_-5 and four recording and/or reproducing apparatuses 412_-3 to 412_-6.

[0104] The content data can be transferred by the communication channel among the network apparatuses 410, but among the recording and/or reproducing apparatuses 412, the content data is moved via recording media 700.

[0105] All of these apparatuses carry chips, referred to as secure application module (SAM) chips explained later, for suitably clearing rights including the decryption of the encrypted content data and charging and copy control. The recording and reproduction of the music data are carried out while suitably clearing the rights by these chips. The distribution key distributed from the EMD service center 100 to the user home network 400 explained above is mounted in the SAM chip of each apparatus.

[0106] Also, each user home network 400 comprises at least one network apparatus 410 so that communication with the EMD service center 100 is possible. Information such as the state of usage of the content in this user home network 400 is notified to the EMD service center 100 via this network apparatus 410.

[0107] When any network apparatus 410 in such a user home network 400 receives a service provider secure container from the delivery channel 300, it stores this once in a download memory of the network apparatus and verifies the signature by the public key of the service provider 250 supplied from the EMD service center 100.

[0108] Then, when the type of purchase is determined in response to a request for reproduction from each apparatus etc., a usage control status (UCS) explained later is created, the distribution key is removed at the SAM, a usage log serving as the charging information is stored in the SAM, and the content is purchased.

[0109] The purchased content data is newly locked by a storage key depending upon for example the recording medium, added with signature data in the same way as the service provider secure container, and circulated in the user home network 400 after that in the type of a user home network secure container as shown in FIG. 5.

[0110] Secure Container

[0111] In this way, in the EMD system 1, content data is transmitted in the form of a secure container such as the content provider secure container shown in FIG. 2, service provider secure container shown in FIG. 3, and user home network secure container shown in FIG. 5.

[0112] The configuration of each secure container is as explained above. Here, however, an explanation will be given of the UCP and UCS contained in each secure container.

[0113] UCP

[0114] The UCP is data given by the content provider 200 and describing the distribution policy and handling policy of the content data.

[0115] A concrete content of the UCP is shown in FIG. 6.

[0116] As illustrated, the UCP contains information such as the ID for specifying content data, signature data of the content provider 200 and the EMD service center 100, various information relating to the distribution of the content data, various information concerning the content and attributes of the content, handling control information with respect to the usage space examination explained later, handling control information based on various conditions at the time of charging, and the usage form and the charge data of the content data.

[0117] Then, particularly, as the information relating to the present invention, information such as the signal parameters and the compression method of the content data, the handling control information with respect to the result of the usage space examination, and the usage control policy recording the handling policy and the price information with respect to each purchase type are recorded in this UCP.

[0118] Ucs

[0119] The UCS is data for indicating the state of usage created when purchasing the content data.

[0120] The concrete content of the UCS is shown in FIG. 7.

[0121] As illustrated, the UCS contains IDs and signatures of the content provider 200, EMD service center 100, and service provider 250, a purchaser ID concerning the purchase, settlement means, sales price, various information relating to discounts, etc.

[0122] Particularly, as information relating to the present invention, the result of examination of the usage space information explained later is recorded in this UCS.

[0123] Home Network Apparatus

[0124] Next, an explanation will be given of the configuration of typical apparatuses used in the user home network 400 of such an EMD system 1.

[0125] Note that the operations of these apparatuses will be explained at the explanation of the usage space examination later, so explanations are omitted.

[0126] FIG. 8 is a view of the configuration of principal portions of a recording and reproducing apparatus 414 for the recording and reproduction of data with respect to a recording medium 710 containing a SAM.

[0127] The recording and reproducing apparatus 414 has a host CPU 510, a system memory 512, a SAM 600, a flash EEPROM 514, a drive CPU 520, a media SAM I/F 522, an EMD system medium detector 524, and a medium detection switch 526.

[0128] The host CPU 510 is a CPU controlling the entire recording and reproducing apparatus 414.

[0129] The system memory 512 is a memory used for various processings in the host CPU 510. When a recording medium 710 is mounted, the file system of the content file is recorded.

[0130] The SAM 600 is a chip performing processing such as clearing of rights and decryption of content data. The SAM 600 is connected with the host CPU 510 by the medium detection switch 516 and controlled as an I/O from the host CPU 510. Namely, a task is requested to the SAM 600 by an I/O write operation, and the result of the task is sensed by an I/O read operation.

[0131] The flash EEPROM 514 is an externally attached memory of the SAM 600. When a recording medium 710 is mounted, the file system of the key file is recorded.

[0132] The drive CPU 520 is a control unit for controlling the entire read/write operation with respect to the recording medium. The drive CPU 520 is connected with the host CPU 510 by a dedicated bus.

[0133] The media SAM I/F522 is an interface for communicating with the media SAM 610 of the recording medium 710.

[0134] The EMD system medium detector 524 detects the position of the manual switch of the recording medium 710 to detects whether the recording medium 710 is used as an EMD system medium or used as a SCMS system medium.

[0135] The medium detection switch 526 is a switch for detecting that a recording medium 710 is mounted in the recording and reproducing apparatus 414.

[0136] As a recording medium 710 mounted in such a recording and reproducing apparatus 414, as illustrated, a recording medium 710 as an EMD system medium having a media SAM 610 is mounted.

[0137] In the recording medium 710, the media SAM 610 checks the legitimacy of the recording and reproducing apparatus 414, clears the rights in the recorded content data, etc. Also, the media SAM 610 stores the unique ID of the medium, storage key, file system of the key file, the key file, etc.

[0138] Also, a RAM region 716 of the recording medium 710 records a list of unsuitable apparatuses, that is, a revocation list, the file system of the content file, and the content file.

[0139] Also, this recording medium 710 comprises a manual switch 712 for designating whether it is used as an SCMS system medium or used as an EMD system medium.

[0140] Also, FIG. 9 is a view of the configuration of principal portions of a recording and reproducing apparatus 416 recording and reproducing data with respect to a recording medium 720 not mounting a SAM but having a secure RAM region.

[0141] The recording and reproducing apparatus 416 has a host CPU 510, system memory 512, SAM 600, flash EEPROM 514, drive CPU 520, and drive LSI 528.

[0142] The configurations of the host CPU 510, system memory 512, SAM 600, flash EEPROM 514, and the drive CPU 520 are the same as the configurations of the recording and reproducing apparatus 414.

[0143] The drive LSI 528 is a drive circuit for accessing a ROM region 722 and a secure RAM region 724 of the recording medium 720.

[0144] Then, by storing the unique ID of the medium, storage key, file system of the key file, key file, etc. in the ROM and secure RAM regions of the recording medium 720 via such a drive LSI 528, even if the media SAM 610 is not mounted, the recording medium 720 can be treated as an EMD system medium.

[0145] Also, the recording medium 720 cannot create the storage key, which requires generation of random numbers, so the drive LSI 528 also creates the storage key.

[0146] Note that such a home network apparatus, according to need, mounts a SAM 600 having the configuration as shown in FIG. 10, an AV codec SAM 620 as shown in FIG. 12, and a drive SAM 630 having the configuration as shown in FIG. 13.

[0147] Also, the recording medium 710 carries the media SAM 610 as shown in FIG. 11.

[0148] Usage Space Examination

[0149] Summary

[0150] In the EMD system 1 as explained above, it is assumed that SAMs are mounted in all apparatuses of the user home network 400 and that the rights are accordingly properly cleared and the content files handled.

[0151] In actuality, however, there are many analog apparatuses and SCMS apparatuses controlling copying by SCMS bits in homes or the like. Also, as the recording media, a large number of recording media with only simple RAM regions formed therein have spread in use.

[0152] As a result, actually, a user home network 400 is configured including also these apparatuses and recording media in many cases.

[0153] Also, on the other hand, even if viewing only the EMD system 1, this does not limit the signal parameters, compression and/or encoding methods, etc. of useable recording media and useable content data in any way. Accordingly, content data compressed and encoded by various signal parameters and various methods is used.

[0154] When it is intended to copy for example the content data of a certain package medium as shown in FIG. 14 to another recording medium under such an environment, the copy cannot be made under the optimum conditions until the reproduction side recording media, reproduction side apparatuses, recording side apparatuses, and recording side recording media and all specifications of apparatuses and media are grasped and further the signal parameters, compression and encoding methods, etc. of the recorded content data are grasped. Further, proper clearing of rights cannot be achieved unless having a full grasp of such conditions.

[0155] Therefore, in the EMD system 1 examines and obtains a grasp of the recording side and reproduction side apparatuses, recording media, signal parameters, compression and encoding methods, and further the method of clearing rights etc. before making a copy. This is referred to as the usage space examination.

[0156] Below, an explanation will be given of the method of this usage space examination and the processing such as the copying of the content data after the usage space examination.

[0157] Usage Space Examination

[0158] The EMD system 1 of the present embodiment carries out the usage space examination in the apparatuses and SAMs from following four viewpoints.

[0159] 1. Examination of EMD System or SCMS System

[0160] First of all, it is examined whether the content, hardware (apparatus), and the recording media to be processed are those of an EMD system compatible with the EMD system 1 or those of a conventional SCMS system not compatible with the EMD system 1, the recording/reproduction is controlled by this, and the rights thereby properly cleared and copying controlled.

[0161] Here, the EMD system and the SCMS system of the content, hardware, and the recording media are defined as follows:

[0162] The EMD system content is content encrypted and circulated together with the key file.

[0163] The SCMS system content is content circulated in the unencrypted state and a state which copying is controlled by the SCMS bit.

[0164] The EMD system hardware is an apparatus mounting an SAM and capable of clearing rights by the SAM.

[0165] The SCMS system hardware is an apparatus for controlling copying by the SCMS bit.

[0166] An EMD system medium is a recording medium having an authentication function in some form or another and includes two forms. One is a medium with an SAM (media SAM) mounted thereon and realizing an authentication function by this. The other is a medium having a secure RAM region on the medium and realizing an authentication function by processing from the outside using this secure RAM region.

[0167] An SCMS system medium is a medium having only an SCMS bit.

[0168] In order to suitably clear rights and control copying as explained heretofore, desirably the recording and reproduction among these content, hardwares, and recording media are prescribed as in the following Table 1.

[0169]

	TABLE 1
	SCMS system medium	EMD system medium
	EMD	SCMS	EMD	SCMS
	system	system	system	system
	content	content	content	content
SCMS	No	Yes	No	Yes
system
hardware
EMD	No	Yes	Yes	Yes
system
hardware

[0170] The items of Table 1 will be sequentially explained next.

[0171] First, when recording or reproducing the EMD system content comprised by the encrypted content and the key file under the conditions of the top left of the table, that is, the combination of an SCMS system medium and SCMS system hardware, the encrypted content of the EMD system content cannot be processed by the SCMS system hardware, therefore, even if the EMD system content had been recorded on the SCMS system medium, it cannot be reproduced. Further, EMD system content cannot be newly recorded either.

[0172] Next, when recording or reproducing EMD system content under the conditions of the bottom left, that is, a combination of an SCMS system medium and EMD system hardware, processing that simply records and reproduces the content is technically possible. However, performing such processing with respect to a medium such as an SCMS system medium not configured relating to clearing rights in any way or configured to handle secure processing invalidates the right clearing of the EMD system 1 and becomes a cause of occurrence of false processing or illicit circulation. Accordingly, it is sufficient to prevent recording of the EMD system content to an SCMS system medium or, even if it has been recorded, prevent the reproduction of the EMD system content from the SCMS system medium.

[0173] Next, when recording or reproducing SCMS system content with respect to a combination of an SCMS system medium and SCMS system hardware, this same happens as with the copy control system based on a conventional SCMS bit. Both reproduction and recording are possible according to the SCMS bit.

[0174] Also, when recording or reproducing SCMS system content when mounting SCMS system medium in EMD system hardware, it is possible to prevent recording or reproduction as part of the specifications of the EMD system hardware. Alternatively, it is possible not to prevent this, but enable both reproduction and recording from the viewpoint of compatibility of the recording medium.

[0175] Next, when recording or producing EMD system content with respect to a combination of an EMD system medium and SCMS system hardware, in the same way as the case of the recording/reproduction of the EMD system content with respect to an SCMS system medium and SCMS system hardware explained above, the encrypted content of the EMD system content cannot be processed by the SCMS system hardware, so both of the recording and reproduction are impossible.

[0176] Next, when recording or reproducing EMD system content with respect to a combination of an EMD system medium and EMD system hardware, this case is the typical type of circulation of the present EMD system. Both recording and reproduction are possible according to the right clearing rules of the EMD system.

[0177] Next, when recording or reproducing SCMS system content with respect to a combination of an EMD system medium and SCMS system hardware, it is sufficient to treat the EMD system medium as an SCMS system medium. Therefore, recording/reproduction are technically possible. Further, recording/reproduction must be enabled also from the viewpoint of the compatibility of media.

[0178] Also, when recording or reproducing SCMS system content with respect to a combination of an EMD system medium and EMD system hardware, also in this case, it is sufficient to treat the EMD system medium as an SCMS system medium in the EMD system hardware. Therefore, recording/reproduction are technically possible. Recording/reproduction should be enabled also from the viewpoint of the compatibility of media in the same way as the previous case For such usage space examination, the EMD system 1 uses the following configuration:

[0179] First, by setting conditions enabling recording/reproduction as shown in Table 1, when an EMD system medium is set in EMD system hardware, sometimes an EMD system medium is used as an EMD system medium and sometimes it is used as an SCMS system medium. Therefore, as explained above by referring to FIG. 8, the EMD system medium comprises a manual switch 127 indicating the type of usage, that is, whether it is to be used as an EMD system medium or used as an SCMS system medium. The EMD system hardware detects this by the EMD system medium detector 524.

[0180] Also, the content recorded on an EMD system medium is recorded as encrypted EMD system content when recorded by EMD system hardware, while is recorded as unencrypted SCMS system content when recorded by SCMS system hardware. Namely, this means that one EMD system medium records a mixture of different types of content.

[0181] Accordingly, when reproducing content, it is necessary to discriminate the form of recording form.

[0182] Therefore, the EMD system 1 records the type of content in the TOC of each EMD system medium.

[0183] Specifically, the TOC comprises a flag set to 0 when the content is SCMS system content or 1 when it is EMD system content.

[0184] By this, when the system is switched in accordance with the TOC information, the EMD system hardware can suitably carry out the reproduction.

[0185] 2. Examination of Ownership Rights

[0186] In an EMD system 1, even when copying is physically possible, copying is disabled or charged etc. in relation to the clearing of rights. Specifically, for copying of content data, it is necessary to discriminate if it is a copy free private recording or a personal transaction to be charged for.

[0187] Therefore, the owners of the recording medium and the hardware are examined so as to detect for example when one's own recording medium is mounted in hardware of another person.

[0188] Then, copying is restricted or charged for based on this.

[0189] 3. Usage Space Examination for Distributing Profits

[0190] In an EMD system 1, the profit obtained by the distribution of the content data is distributed by a predetermined rate among the concerned parties related to the distribution in the EMD service center 100. Further, sometimes the concerned parties include for example manufacturers of the apparatuses and persons having rights for specific processing such as the compression and encoding method. Accordingly, from the viewpoint of distribution of profits, it is necessary to examine and grasp all of the concerned parties.

[0191] 4. Usage Space Examination Concerning Format Conversion Coefficient

[0192] In the EMD system 1, due to the handling of content data of various signal parameters, it is sometimes necessary to convert the signal parameters such as a convert the rate when copying etc. Then, when charging, it is necessary to consider deterioration of the signal based on such conversion. Namely, it is preferable to set copies accompanied with deterioration of the quality cheap and set copies made at a high quality at a high price.

[0193] Therefore, these signal parameters are examined at the time of copying or the like and considered at the time of charging.

[0194] Also, examination relating to the conversion of signal parameters is also necessary for control of the processing for actual conversion of the signal.

[0195] Usage Space Examination Procedure

[0196] Then, when copying as shown in for example FIG. 14, a usage space examination is performed by the following procedure.

[0197] First, the reproduction side examines the usage space between the medium and the hardware.

[0198] For this purpose, first, the media SAM of the recording medium on the reproduction side sends its own information to the reproduction apparatus.

[0199] Next, the reproduction apparatus creates the usage space descriptor in the SAM and sets the data of the usage space such as the signal processing handled by the apparatus described in the SAM of the apparatus of the reproduction side in the usage space descriptor.

[0200] Next, it sets the information of the medium in the usage space descriptor. That is, it authenticates between the medium and the hardware and transfers all of the secure data for which the session keys are held at the two sides and described in the media SAM to the SAM of the hardware.

[0201] Due to this, the usage space examination of the reproduction side ends.

[0202] Next, the recording side as well similarly examines the usage space between the recording apparatus and the recording medium.

[0203] Then, finally, by sending the result of the usage space examination of the recording apparatus side to the reproduction side, the usage space descriptor is completed in the SAM of the apparatus of the reproduction side.

[0204] The usage space descriptor created in this way (also referred to as the usage space table) is shown in FIG. 15.

[0205] Note that, here, a one-to-one correspondence between the reproduction side and the recording side is shown, but there are also cases of copying from one reproduction side with respect to a plurality of recording apparatuses.

[0206] In such a case, a usage space examination table as shown in FIG. 16 comprised of information similar to that shown in FIG. 15 is created.

[0207] Initial Operation Including Usage Space Examination

[0208] Next, an explanation will be given of an initial operation including processing for the usage space examination before the actual copying operation when copying music data from one package medium to another package medium as shown in for example FIG. 14 by referring to the flowcharts of FIG. 17 to FIG. 24.

[0209] First, an explanation will be given of the flow of the entire processing of this initial operation by referring to the flowchart of FIG. 17.

[0210] First of all, the type of the mounted recording medium is discriminated (step S11). When the mounted recording medium is an EMD system medium (step S12), it is further inspected whether the medium is an active medium having an SAM and capable of creating a storage key by itself (step S13). When the recording medium is a medium not having an SAM, the storage key is created by the drive LSI 528 (step S14).

[0211] Next, the recording medium and the drive CPU 520 are authenticated by a public key method when the recording medium is an active medium, while by a common key method when the recording medium is a positive medium (step S15). (The following explanation will be given assuming that the recording medium is an active medium 710.)

[0212] Next, processing for updating the revocation list recorded on the recording medium is carried out (step S16). When the update is finished, first a revocation check is made from the media SAM 610 with respect to the SAM 600, then a revocation check is made to the SAM 600 to media SAM 610 (step S17).

[0213] Then, the physical address information of a key data block is transferred to and set in the SAM (step S18). Further, the key data block is transferred to the SAM 600 and an AV compression and expansion unit (step S19). Finally, the file system is transferred to the system memory 512 (step S20), then the series of initial processings before the transfer of the content data including the usage space examination is terminated (step S21).

[0214] Below, a detailed explanation will be given of the processing.

[0215] First, an explanation will be given of the processing for discrimination of the type of the recording medium of step S11 by referring to the flowchart of FIG. 19.

[0216] First, for example the medium detection switch 526 starts the processing by detecting the insertion of the recording medium 710 etc. (step S30), then the medium detection switch 526 notifies this to the drive CPU 520 (step S31). Also, the EMD system medium detector 524 detects the state at the manual switch 712 of the recording medium 710 (step S32) and notifies the result of discrimination of the recording medium 710 to the drive CPU 520 (step S33).

[0217] Then, when the recording medium 710 is an EMD system medium (step S34), the drive CPU 520 requests the generation of a random number via the media SAM I/F522 with respect to the media SAM 610 of the recording medium 710 (step S35).

[0218] Due to this, if the recording medium 710 is an active recording medium having a media SAM 610, a random number is created at the media SAM 610 (step S67), the created random number is stored in a register via the media SAM I/F 522 (step S37), and the fact that a random number was stored is notified from the media SAM I/F 522 to the drive CPU 520(step S38).

[0219] Namely, according to existence of these operations, the drive CPU 520 can discriminate whether the recording medium is an active medium or positive medium (step S39).

[0220] Then, the drive CPU 520 notifies the host CPU 510 of the type of the recording medium mounted (step S40). Simultaneously, the SAM 600 stacks the type information of the recording medium (step S41), whereby the processing for discrimination of the type of the recording medium ends (step S42).

[0221] Next, an explanation will be given of the processing for authentication of step S15 by referring to the flowchart of FIG. 15.

[0222] First, when the processing is started (step S90), the host CPU 510 sends a function call to the SAM 600 for authentication with the recording medium 710 (step S91).

[0223] Based on this, authentication is performed based on the public key encryption between the media SAM 610 and the SAM 600 (step S92). Then, the SAM 600 notifies the result to the host CPU 510 (step S93), whereby the mutual authentication is ended (step S94).

[0224] Next, an explanation will be given of the updating of the revocation list of step S16 by referring to the flowchart of FIG. 20.

[0225] First, when the processing is started (step S50), the revocation list stored in the media SAM 610 is decrypted by the storage key (step S51).

[0226] Next, the revocation list is encrypted by the public key of the SAM 600 (step S52), then it is transferred to the SAM 600 via the media SAM I/F 522, the drive CPU 520, and the host CPU 510 (step S53).

[0227] The transferred revocation list is decrypted in the SAM 600 by using the secret key of the SAM 600 (step S54).

[0228] Then, the revocation list stored in the SAM 600 is read out (step S55), decrypted by a MAC key, and compared with a MAC value stored in the SAM 600 to check that there has been no tampering (step S56).

[0229] Then, the version numbers of the revocation list read out from the recording medium 710 and the revocation list stored in the SAM 600 are compared (step S57). If the revocation list stored in the SAM 600 is newer (step S58), this revocation list is encrypted by the public key of the media SAM 610 (step S59) and transferred to a media SAM 610 via the host CPU 510, the drive CPU 520, and the media SAM I/F 522 (step S60), whereby the revocation list of the media SAM 610 is updated and the processing ended (step S61).

[0230] Next, an explanation will be given of the processing for checking the revocation list of step S17 by referring to the flowchart of FIG. 21.

[0231] First, when the processing for the checking is started (step S71), by sending a command from the media SAM 610 to the SAM 600 (step S72), the ID of the SAM 600 is transferred to the media SAM 610 (step S73).

[0232] The media SAM 610 checks whether or not this ID is contained in the revocation list. When it is contained therein, the apparatus having this SAM 600 is decided to be an unsuitable apparatus, for example, one for which some sort of illegitimate action has been performed. The media SAM 610 rejects the communication with the recording and reproducing apparatus 414 (step S76) and ends the processing (step S77).

[0233] When the ID of the SAM 600 is not contained in the revocation list (step S75), next the check from the SAM 600 to the media SAM 610 is started (step S78), a command is sent from the SAM 600 to the media SAM 610 (step S79), and the ID of the media SAM 610 is transferred to the SAM 600 (step S80).

[0234] The SAM 600 checks whether or not this ID is contained in the revocation list. When it is contained, it decides that this recording medium 710 is an unsuitable recording medium 710 for which for example some sort of illegitimate action has been performed, rejects the following communication (step S83), and ends the processing.

[0235] When the ID of the media SAM 610 is not contained in the revocation list (step S82), it is decided that both of the SAM 600 and the media SAM 610 are proper SAMs, that is, both of the recording and reproducing apparatus 414 and the recording medium 710 are a proper apparatus and medium, and the series of check processings is ended (step S85).

[0236] Next, an explanation will be given of the transfer of the physical address information of the key data block to the host controller at step S11 by referring to the flowchart of FIG. 22.

[0237] First, when the processing is started (step S100), the information of the physical address of the key data block is decrypted by the storage key (step S101), and the physical address information of the key data block is encrypted by the public key of the media SAM 610 (step S102).

[0238] Then, the media SAM 610 transfers this encrypted information via the media SAM I/F 522, drive CPU 520, and the host CPU 510 to the SAM 600 (step S103).

[0239] In the SAM 600, the hash value of the entire physical address information of the key data block is taken, it is checked if the entire data has been tampered with (step S104), and the physical address information is set in the SAM 600 if it is proper (step S105).

[0240] Next, authentication based on the AV codec SAM 620 and the common key encryption is carried out (step S106), the session key is shared (step S107), and the key data block information is transferred to the AV codec SAM 620 (step S108).

[0241] The AV codec SAM 620 decrypts this by using the session key (step S109), stores the key data in the memory (step S110), and ends the series of transfer processing (step S111).

[0242] Next, an explanation will be given of the transfer of the key data block to the host controller at step S19 by referring to the flowchart of FIG. 23.

[0243] First, when the processing is started (step S120), the key data block is decrypted by the storage key (step S121), and the key data block is encrypted by the public key of the media SAM 610 (step S122).

[0244] Then, the media SAM 610 transfers this encrypted information via the media SAM I/F 522, the drive CPU 520, and the host CPU 510 to the SAM 600 (step S123).

[0245] The SAM 600 obtains the hash value of the entire key data block and checks if the entire data has been tampered with (step S124).

[0246] When it is proper, authentication based on the common key encryption is carried out with the AV codec SAM 620 (step S125), the session key is shared (step S126), and the key data block is transferred to the AV codec SAM 620 (step S127).

[0247] The AV codec SAM 620 decrypts this by using the session key (step S128), stores the key data in the memory (step S129), and ends the series of transfer processing (step S130).

[0248] Then, finally, an explanation will be given of the transfer of the file system to the host controller shown in step S20 by referring to the flowchart of FIG. 24.

[0249] First, when the processing is started (step S140), the drive CPU 520 detects the file system of the content file managing the physical address information on the recording medium 710 and reads this from the recording medium 710 (step S141).

[0250] Next, the drive CPU 520 transfers this file system to the host CPU 510 (step S142), the host CPU 510 stores this on the system memory 512 (step S143), and the transfer of the file system is ended (step S144).

[0251] Distribution Operation Finally, an explanation will be given of the flow of the data and the state of the distribution of data in various types of home network apparatuses by referring to FIG. 25 to FIG. 39 together.

[0252] First, the relationships among the host CPU 500 and SAM 600 and medium 710 of the apparatus are shown in FIG. 25. As explained above, the SAM 600 is connected to the host as the I/O and controlled by an I/O command.

[0253] The SAM 600 becomes slaved with respect to the host CPU 500, while the SAM becomes a master and the medium becomes the slave between the SAM 600 and the medium 710.

[0254] The medium 710 is connected to the SAM 600 and advances the processing by the function call and the result. A function call is information containing a command and a number for specifying the content.

[0255] The key file is processed by the medium and SAM, while the content file is sometimes processed by the SAM and sometimes recorded by the host CPU.

[0256] As the file system, the file system of the key file is opened in the SAM and opened in the host CPU of the content file.

[0257] FIG. 26 is a view of the relationships among the host CPU, SAM, AV codec SAM, and the medium in an apparatus having an AV codec.

[0258] In this type of apparatus, at the point of time when the medium is inserted, the key files are opened in the SAM together and transferred to the medium together at the time of ejection including also the newly added key data.

[0259] In this case, authentication based on the public key method is carried out between the media SAM and the SAM to create the session key, the session is carried out, and the key file and the key file TOC are stocked on the SAM side.

[0260] As the content file, the file system is sent to the host CPU side. When the host CPU reads the file system by this and instructs to send a specific content file to the codec SAM, the SAM and the AV codec SAM perform authentication by triple DES to create the session key and thereby transfer the content key of the intended content, for example, the content 1, 4, and 5 from the SAM to the AV codec SAM.

[0261] Further, the watermark data for the analog output is encrypted by the session key and transferred to the AV codec SAM.

[0262] By this, the compressed data reproduced from the medium is decrypted in real time at the AV codec SAM, added with the watermark, and output.

[0263] FIG. 27 is a view for explaining the process of the content file encrypted on the hard disk being downloaded via a conditional access (CA), this is listened to on a trial basis and reproduced, then the type of usage is determined.

[0264] In this apparatus, the conditional access (CA) downloads 20 content files of for example CF-1 to CF-20 by a delivery service. Then, the content file is loaded on an AV hard disk 530, while the key file is loaded on the EEPROM 514 managed by the SAM.

[0265] The authentication is carried out by the SAM and the AV codec SAM by the triple DES, while the key file of the content to be reproduced is sent to the AV codec SAM and reproduced and output by the AV codec.

[0266] The host CPU sends the function call by the I/O read/write to the SAM and receives the result.

[0267] Also, it instructs the HDD by the I/O read/write and reads for example the content 7 to output the same to the AV codec.

[0268] The SAM stacks the file systems based on the file system by the memory read write and sends the same to the content key AV codec.

[0269] By pressing a button by a GUI, the host is interrupted and the download is started. When the download is started, the host asks the SAM to store the key file.

[0270] FIG. 28 is a view of a case that there is a secure region in the hard disk. In this case, the key file is entered in the hard disk, and the HDD becomes storage space shared by the host and SAM.

[0271] Only the SAM can access the key file stored in the HDD. The file system of the key file is stacked by the SAM, while the file system of the content file is stacked by the host CPU.

[0272] FIG. 29 is a view of a case that a package medium is introduced into the network apparatus.

[0273] In this case, the SAM and the media SAM authenticate each other and send the key file to the media SAM by the session key. Then, the media SAM side unlocks the session key, encrypts it by the storage key, changes the key, and records it on the media SAM. The SAM returns an OK to the host, while the host records the content file on the medium by the I/O read/write.

[0274] At this time, the usage space is examined, and if necessary, the parameters converted and then recorded.

[0275] FIG. 30 is an example of the typical copying in the EMD system 1 in the same way as that shown in FIG. 14.

[0276] In this configuration, there is a package apparatus separate from the network apparatus. These are connected by a physical line for downloads. Accordingly, authentication between one SAM and another becomes necessary.

[0277] The authentication is carried out between the host and SAM of both apparatuses and between the SAM and SAM.

[0278] The reproduction side fetches the key file from the memory, authenticates between the SAM and SAM, creates a session key, and sends the key file to the recording side.

[0279] The recording side authenticates with the media SAM and opens the key file of the medium.

[0280] The type of purchase may be determined on the sender side or may be determined on the recording side.

[0281] The usage space examination is carried out by the apparatuses of both sides.

[0282] The host CPU on the reproduction side holds the file system of the content file recorded on the hard disk. The file system of the key file held by the SAM is the file system of the key file recorded in the memory.

[0283] The host CPU of the recording side is the file system of the content file recorded on the package medium, while the key file and the file system held by the SAM are those of the package medium.

[0284] FIG. 31 is a view of the case of redistribution among the packages.

[0285] The usage space examination is carried out between the reproduction apparatus and medium, the medium space examination is carried out by the SAM and the recording system, the key file is opened in the SAM, and the content file is opened in the HDD. As the type of usage, only the UCP is shifted.

[0286] Accordingly, a session key is formed, only the UCP and key file are transferred, and the content file is transferred as it is.

[0287] Authentication is carried out by the SAM and the media SAM, the key file is sent, and the content file is recorded on the medium.

[0288] The UCS is formed on the reproduction side, and the type of purchase is determined.

[0289] When it is transferred to the recording side, it is KF1-UCP, but when it is recorded on the medium, it becomes KF1-UCP/UCS.

[0290] Note that, in this case, it is assumed that the usage space examination shows that the parameters are the same.

[0291] FIG. 32 is a view of an example of retransmission where the parameters are different.

[0292] While redistribution, the parameters are different. In this usage space, the reproduction side has conversion processing, so the content is decrypted by the content key and the content key is sent to the recording side by the session key.

[0293] Then, the signal is converted, sent by the session key, re-encrypted by the content key stacked on the recording side, and recorded on the medium.

[0294] The re-encryption is carried out by the drive. Since there is a DES in the drive, the content is recorded while being encrypted here.

[0295] FIG. 33 is a view of an example of purchase from the UCS.

[0296] It shows the case of a reproduction charge. The usage space examination and the operation for opening the key file are the same as the above case.

[0297] In this case, the parameters are the same, and the session key is possessed between the SAM and SAM, and between the SAM and the media SAM. Also, the key file of the UCS is sent by the session key.

[0298] FIG. 34 is a view of a case of sell through.

[0299] By a discrimination of who purchased or who has the recording medium in the usage space examination, it is discriminate whether the copying is private recording or private usage/sale.

[0300] Also, usage space examination of the ownership rights is necessary. The content is transferred from the owner recorded in the UCS if the same as the owner of the recording medium, while is charged for in other cases.

[0301] FIG. 35 is a view of copying from the EMD to the SCMS content.

[0302] Since the other party is found to be an SCMS by the usage space examination, a charge is levied at the SAM. The content is sent to the host CPU 2 and recorded on the medium by using the session key of a 1394 copy protection while releasing the encryption by the content key.

[0303] The protect mode at this time is a copy addition.

[0304] FIG. 36 is a view of a case that the SCMS apparatus is placed in the SAM apparatus by the usage space examination.

[0305] While a session between the EMD apparatuses, since the medium placed on the storage side is an SCMS medium, the processing is carried out as the EMD mode and parameters written in the UCP and the SCMS of the recording medium of the other party.

[0306] In this case, the report of recording on the SCMS medium written in the UCP is viewed, the price of each copy is viewed, and this is paid by the reproduction side EMD apparatus. It is also possible to unlock the same by the content key on the reproduction side and transfer it and record the same by the session key, but it is also possible to record the same on the recording side.

[0307] FIG. 37 is a case that the reproduction side is an SAM apparatus and SAM medium, but used as an SCMS medium by the manual switch, and where SCMS content is mounted thereon.

[0308] In this example, the SAM apparatus makes a copy to the apparatus used by the EMD medium in the EMD mode.

[0309] In this case, since the TOC information shows that the content is SCMS content, the processing is carried out as SCMS content.

[0310] When sending it, authentication is carried out between the SAM and SAM, the session key is formed, the SCMS content is encrypted by the session key and sent to the recording side, and the content unlocked by using the session key on the recording side.

[0311] Then, the recording side creates the content key, encrypts the content by this, and records the content on the medium.

[0312] Finally, the created content key is sent to the media SAM, and the session key is replaced by the storage key and stored.

[0313] FIG. 38 is a view of a single drive copy.

[0314] In this case, first, the ROM is entered, the key file is transferred to the SAM1, and the file system is opened. The content file is placed in the shared memory space.

[0315] Next, the ROM disk is removed. The RAM disk is then set.

[0316] Then, after determining the processing of the type of purchase by the SAM1, the determined key file (UCS key file) and the UCP key file of the product per se are recorded on the media SAM of the RAM.

[0317] Finally, the content is recorded in the RAM.

[0318] By doing this, two decks are not necessary. A copy can be made by a single deck.

[0319] FIG. 39 is a view of a type of purchase by a ROM disk.

[0320] When buying a ROM, the type of purchase has not been determined. Also, a hybrid of a ROM-RAM becomes necessary.

[0321] In this case, all key files existing in the media SAM are transferred to the SAM1, listened to on a trial basis, and the content to be purchased selected. Then, the UCS key file is formed and recorded on the media SAM. By this, it becomes a ROM disk enabling only purchased music to be listened to.

[0322] In the case of RAMs, there are cases of only secure RAMs, cases of secure RAMs and media SAMs, and cases of no secure RAMs, and doing everything by media SAMs.

[0323] Summarizing the effects of the invention, in this way, according to the present invention, even in a system comprised of a variety of types of apparatuses connected together, the operating environment can be suitably grasped. Due to this, it is possible to provide a data distribution system and method capable of not only the suitable distribution of data, but also suitable processing such as control of copying of data, conversion of signals, charging, and distribution of profits, a data processing apparatus and method preferred when applied to such a data distribution system, and a data recording medium.

[0324] While the invention has been described with reference to specific embodiment chosen for purpose of illustration, it should be apparent that numerous modifications could be made thereto by those skilled in the art without departing from the basic concept and scope of the invention.