METHOD AND SYSTEM FOR TRANSFERRING CONTENT INFORMATION AND SUPPLEMENTAL INFORMATION RELATING THERETO

The overall concept of this invention is to give the watermarked encoded signal plus a control mode, at the same time the use of a one-way function to produce the watermark from the control mode. This watermark signal can be the ultimate locations of the watermark and the concomitant check the integrity of the control mode. This has a number of advantages, for example, the watermark can be relatively short and does not need its own integrity check bit, it can be in the signal to every few seconds so as to repeat the editing after distinction between each part of the signal, and so on. Because the watermark must be and a generated by using a one-way function of the processing of the control pattern is matched, therefore it will not be possible to by calculation from a watermark "reverse" this control mode is calculated. Tamper control mode and only in the two watermarks are totally substituted be possible, and to do so could result in significant deterioration in the quality of the content. If not effectively control mode, then in the playback device and/or recording device for reproduction or recording in the encoded signal according to the copy-protected which may be subject to control or prevent. Is the best the apparatus can be used for all consumers check the watermark pattern and in the absence of the control signal does not receive any signal. Many applications can benefit from this kind of control, for example, copy control, copyright royalty payment, such as of music and video. Copy control can be similar to the DCC copy bit. A may be required to enable playback control mode, and/or a specified copyright state, such as allowing such as a generation of a replica. The issued after a certain date different control mode and realize the version after that date. Furthermore, any relevant information can be separated in to additional, such as the author, lyrics, name, such as a performer or the use of period can all be included in this control mode.

One embodiment of the present invention is a allow the generation of the copy of the copy protection system (this is also called copied once). Professional audio stream in (audio   stream) containing embedded copyright data, it authorizes allow one-time copy. This is through the audio stream for a watermark embedded in and Yco. Furthermore, professional disc containing a special allow mark Xco, in addition Yco=H (Xco) and H ( ) is a cryptographic one-way function. Yco the mark during playback in the audio frequency of the (possibly embedded). However, it is the consumer of the recording device. Copies made by the recording device is thus no longer contains the allow the mark can not be copied.

An embodiment of the system, said-bit graphics Y of X between the watermark and the control mode of a suitable relationship is a one-way function. A one-way function can be a kind of embodiment of is Y= X² modN, N is the analog (Public   modulus). Here are two N the confidentiality of the product of the large prime numbers (N=pq). N is actually embedded in the watermark can be a portion of the data, that is, the of which is connected to the Y on. Another possible and Diffie Hellman is a discrete logarithm one-way function that (see document D4): the GF (P) in F (x) = α^x, GF this is α (P) a element Yuan (Primitive   element). Here, P is a large prime number, and to make the P-1 having a large quality factor. The above-mentioned two kinds of embodiments have the following disadvantages, in other words self-variable or to the size of the number of bits required is relatively large. Based on the actual system with fewer bits can be applied to an appropriate security key encryption algorithm, such as DES (data encryption standard), and make the Y=F (X) =XDES (X). This in Figure 3 by the line in. Figure 3 said security key encryption algorithm according to one embodiment of the function generator. The input terminal 31, control mode X and in encryptor 32 from key input use in 33 a key to be addressed. An encryptor 32 by the output of logic unit 34 and the input X for bitwise XOR operation, the result is the output 35 of the bit pattern on Y. In this circuit, the key can be made into an open or contained in the watermark, is connected to the Y on that.

To the DSD format (see document D3) suitable for the audio signal of the watermark is a small part through forcing (0.01% to 1%)of W is determined by the bits has particular value whereas the embedded. This can make the detection can be simplified, because the reproducing apparatus or recording apparatus only at a predetermined position on the predetermined value of the bit. In order to show the watermark by those are forced to form the of bits can be man-made interference caused by noise shaping to be minimized. We have found that, for the purposes of the DSD to 1% of bits of watermark in the signal-to-noise ratio of more than 110 dB signal-to-noise/distortion reduction than 1 decibel. On the contrary, if pirated person changing the value of these bits, the signal-to-noise ratio will sharply deteriorates dozens of decibels. The video signal, the appropriate watermark is embedded in the compression in MPEG, for example, in the picture type (D1 in the watermark PTY of the note).

Another of this invention is to allow replication n embodiment of generation of copy-protected system, also known having copy n times of copy control. In this embodiment prevents recording signal is copied to a limited number of copying. In our dsto, professional release of the title comprises at least two types of copy control mark: in the watermark of the content is embedded in, and additional the content by the recording device but can be removed and modified copycontrol (authentication/authorization) control mode. The above-mentioned control mode called copycontrol visanet. In a digital signal stream of the ticket by the signal every time when the recording apparatus or reproducing apparatus is modified. Each time the playback and each time authentication watermark on during recording the encrypted relations and visanet between. One optional 3rd types of copy control mark, said identification medium (disk/tape /, and so on) of the carrier mode the medium, can be used alone or may also be associated with a watermark. Medium markers can be used such as an eccentric slot or pit jitter modulation to represent, but preferably it is visible to the naked eye. The medium may be capable of recording with a fixed pre-determined marking to identify the medium of the medium is recordable, or from known sources is the professional disc. The medium alone can carry out a check mark, this mark can the value or is is a predetermined through the encryption function of the watermark and/or visanet related to a value of. In the overall system concept, we distinguish between:

Seed · U:by the content owners generating a random number.

P · medium mark, it appears in the professional release the disk/storage medium; the medium capable of recording with a pre-determined value P.

· Watermark W, in the content which is embedded in. W can be simultaneously present in all in a format to digital representations (the audio frequency in DSD format, bit stream, PCM, or video such as MPEG) and in the analog version. If such a concept used in video Image, analog watermark can for example, in the vertical blanking interval of the combination of the ticket. The digital watermark can be MPEG   PTY (picture type) sequence and can be expressed in the pixel areas, visanet can be stored in a GOP (pictures) in the user data area of the title. User's home recording (Image) (not subject to copyright restrictions) can be pre-determined through the does not exist and the W value difference.

· Copycontrol visanet T, it plays the role of the encryption counter. Exist in the data T in the title is a small data area, for example it can be like the said DCC copy control bits added to the signal in the similar manner. T generally comprises 40 to 4000 bits.

In the overall system concept, the ticket in the stream each time T in the recording or reproducing operation of the T ' =F (T) the substituted, here is an open and F known cryptographic one-way function, that is to say, whether or not playback device or recording device are not transparent by the T, but to F through the function. Our proposal to play the role of this invention, can be considered that the counter T is encrypted, it can be easily increment instead of decrement, unless the pirate can make the F reverse. From the point of view of the encrypted, there is no need for the confidentiality F to potential pirates. Our goal here is to limit the length of the copy means, such as the restrictions on the copies of the copy of the copy of the algebra, algebraic copying is limited. Only with the watermark in the data stream F^m (T) is a match between the playback is permitted, is still m is allowed in the order of the number of times of recording or playback operation. Normal circumstances m is odd. Only with the watermark in the data stream F^m (T) record is matched is permitted only when, this is still m is permitted at the order of the number of times of recording or playback operation. Is m general circumstances. In the described above, m can be clearly provides, also can be in the case of a relatively small m (for example, when the no matter how the maximum allowable the number of times for copying was a case m <4) by the apparatus m. to inspect all of the The encrypted one-way function may be one of the examples in binding above Figure 3 and as described.

In one embodiment the obtained from one original the number of copies of in parallel. The above concept is extended and applied to the disc from a limit of the number of parallel are, for example, the customer is allowed to he can only be bought from the Publishers of original plate to duplication, and the number of such copies is restricted. To this end we need in each of the professional Publishing, in the heading with a small recording area for storing and modifying t. The basic concept is, each time when the reproducing device permitted the recording device to a time T when copying to the playback device for repairing F (T). In this case by Publishers during production, the primitive disk sold initially U to produce a seed. This seed is calculated according to the following variable: P=F (U) and T=F (F (U)), the latter we used F² (U) to express. To allow customer parallel copy n times of the disc, to produce a watermark W, here W=Fⁿ⁺¹ (U). When the reproducing device in normal operation the output of its content, but not output t. At the time of recording, recording device requires reproducing device provides a ticket the T W=F (T), this T also to be recorded on the disc can be recorded. Playback device for reading F T and (T) to replace it. If the reproducing device from the original disk read-out, a namely plate matches that of the T T, the playback device to the recording device is only F (T). Recording device for repeatedly F (T) W=F replaced until T (T). T W and corresponding with embedded in the content recorded on the disk. If the recording device reading of the disc is recordable, then T will never release to the outside.

Discloses a replication control concepts, it depends on the physical recording medium, cryptophyta is embedded in the watermark of the content of a digital representation and the duplication control visanet. It should be noted that, this concept embodies two independent mechanism: watermarked content and control visanet T and medium mark combining narrow P. Obviously, with the watermark using control visanet and the concept of combining the signal can be individually for delivery of the content in the system, for example, in the broadcast system or the Internet. From the principle, control visanet provide a can only increment but not decrement of the counter. Control visanet concept is particularly suitable for the DSD audio watermarking, such as document D3 stated. The data into the low bits and the use of the noise shaping to reduce their concept of human factors can also be used for pulse code modulation audio. This concept also can be used for the DVD MPEG video memory. Watermark can PTY sequence by modifying stored in the GOP structure. Furthermore, recording device identification code can include in the W in the watermark or an independent in Wi. Preferably each household recording device in the information in the record mark comprising such an identifier. This identifier can be merely the factory code for the same recording apparatus, model and Serial number.

Figure 1 in accordance with the present invention that a duplication control system. The record carrier 11 with a music content on a watermark pattern W add the watermark a, at the same time, the record carrier 11 is also contains a control mode, that is, copy control visanet t. Reproducing device 12 includes a generally used for known from for example the CD player music reproducing a record carrier of the parts and authentication device, verification device comprises a one-way function F (see reference Figure 3 by of) comprised of three one-way function unit 121,123, 124 and two comparators 122,125, it can be composed of one single computing unit to realize, for example, a microprocessor and a program. Watermark W and visanet T is from the original record carrier 11 derived. Visanet T coupled to the one-way function unit 121 to get T ', the T' coupled to the 1st comparison unit 122 and a 2nd single direction unit 123, its output is coupled to T ", T" to get single 3rd T to the unit, which is coupled to the 2nd comparison unit 125. Two comparison unit in its 2nd input end receives the watermark W in order to for comparison. If 1st comparator 122 is equal to two is found, playback is allowed, but not allow copying (further). If the 2nd comparator 125 also discovered that is equal to two, and can be then playback is permitted to carry out a copy. If two comparators are not find the condition of equal, does not allow the playback, the playback device is provided with an attached to a digital interface 13 of the output, for example, IEC   958 and P1394 digital interface, so that the output includes the watermark W and treated visanet T ' content information. Recording device 14 receives from the digital interface 13 to the input terminal of the above-mentioned signal. Watermark W coupled to the 3rd comparison unit 133. Visanet T ' coupled to the 4th one-way function unit 131, processed visanet T ", the T" coupled to the 5th one-way function unit 132, the result T  coupled to the 3rd comparison unit 133. If the 3rd comparison unit 133 is equal to T  and W between found, copying is allowed, includes the watermark W and the ticket treatment two times T " of the music content is recorded in the recordable record carrier 15 on. In this way, when the control mode of processing three times is equal to W to allow the copy generation. The obtained containing the copies of the control mode of the secondary treatment T ", it allows this 1st generation of replay, because the reproducing apparatus will be the first to produce a processing once mode, that is, (T") ', and this matching of the watermark W is now. The further copying of the music content will be recording device prevents the, because after 5 the visanet and watermark no longer match. Even if the pirate use a kind of tampering with the recording device, the obtained copies may also appear on the recording device through the 4 the visanet T "". This can not be a copy of a recording apparatus in the compatible reproducing, because the 1st and 2nd comparator cannot find equal. Therefore, in order to set up and the use of illicit duplicate thereof, recording apparatus and reproducing apparatus are subject to tampering.

In a transmission system of the embodiment of the primary treatment n the control mode of the counter of a cryptographic protection. This counter can be used for to a certain encoded signal is allowed in for example an audio or video leasing system counts the number of times of playback, or, for example, the so-called parallel copies of the recorded number of times of counting. In this kind of application control signal on the recording medium itself is preferably stored or modified. However, it may in addition be stored separately, such as in playback and/or recording device on or in the chip card. In addition can also be stored to a plurality of control signal, but also to each of the role of the to be controlled, can be by, for example, by adding or removing the optical disk of the ink on the corresponding areas on, so as to damage one of the control signals can be read out or not.

Figure 2 contains two part of said to the control mode T^n-1 one-way processing. 1st part 21 is a seed and 2nd part is information part, include additional information, such as the name of the author, owner, date of Publication. The two parts 21, 22 in the combined unit 23 are combined in, for example, by serially connecting, added or exclusive-or operation, the result is coupled to the 1st one-way function unit 24. Control mode Tⁿ also comprises two parts, part 1st 25 1st one-way function unit is 24 output, and 2nd part 26 is and the information portion 22 the same. In the next one-way process cycle using the same function, that is, another combination unit 27 and on the other a one-way function unit 28, the result is in addition a control mode of the two part Tⁿ⁺¹. After a predetermined number of times after one cycle of the output of the one-way unit derived from the mode described and the front part of the 1st embodiment of matching watermark and the like. This has the advantage of this, each control mode information part 22, 26 can be directly read out and is also protected and disposal of modified by the-free, because the portion of the information at any point of the modification when the output end of the one-way unit of the pattern is completely changed. In the encryption of the circumstances of the encoded signal, information portion can include the decryption key. Information portion 22 may also include a clear counter value, in processing the subsequent (n+ 1) time before the control mode of the need to reduce this value. In this way, the counter value of the one-way unit on said treatment cycle. This has such an advantage, in other words only the treatment of the P control mode compared to the needs and watermark pattern. Of course, a predetermined variation, includes, for example, in the information portion in the counter value of the generating and verifying must be changed in the same manner. Therefore for such a pre-determined change value tamper can be effectively prevented.

Figure 4 mark using the medium P that the duplication control system. Medium of the playback before the mark allows for the original disc can verify the situation of two separate. Record carrier 41, such as a CD, comprising in addition a physical parameter variation of the modulation mode, the physical parameter correlated with watermark W mark the recording medium P, another modulation mode of the original modulation mode and another different types. In D2 this can be found in the modulation mode of another kind, for example, is an eccentric swinging of the tracking. In accordance with the present invention, medium mark P is coupled to a one-way unit 421, its output is connected to the 1st comparator 423 and/or 2nd comparator 424. Each of the one-way unit comprises an encrypted one-way function, for example, with reference to Figure 3, as illustrated. 1st comparator 423 also receives the watermark W, is equal to the detected copy-free conditions of the primitive disk of 1st. 2nd the comparator receives control visanet T, is equal to the detection to allow the copied once 1st condition of the disc. Visanet T at the same time also coupled to the 2nd single direction unit 425 to get T ', this T' coupled to the 3rd comparator 426, it also receives the watermark W, is equal to the detected copy-free conditions of the primitive disk of the 2nd, or 1st detected generation of copies of the appropriate (in this case may not exist medium mark P or it has a pre-determined value). After 1 the visanet T ' also coupled to the digital interface 43 on one output end of the recording device, and the single 3rd to the unit 427, the latter and then connected to a section 4 one-way unit 428, to obtain a 3 the visanet T, and it is also connected to the section 4 comparator 429, the comparator also receives the watermark W. When the equal to the copied once the 2nd condition of the plate. When the playback of the condition to satisfy, includes the watermark W, on the music content from the playback device 42 output to the digital interface 43. The digital interface 43 is connected to a recording device 44 so that the recorded music. From the interface to the watermark W and visanet T ' reference to Figure 1 the recording device of the note for authentication in the same manner.

In one embodiment the playback device 42 and recording device 44 is used for the input end of the household watermark WH 431,441. In the playback device coupled to the 5th household watermark WH comparator 430, it also receives the watermark. In the equal to the family is detected at the time of creation of the individual. Input 431 preferably by the other a one-way unit is coupled to the above 5th comparator 431, in this case the domestic seed have values which is applied to the input terminal of a one-way unit. Household seed value or the watermark recording/reproducing can be stored in memory of the device, or in a separate memory module is, for example, chip card, or can be written by the user on the paper by the keyboard for inputting and, like the same (PIN) a personal identification number. Furthermore, the audio frequency of the individual consumers is the recognition and distinction is recorded, because their watermark is a fixed watermark, such as the zero of a word.

The system in one embodiment, the coded signal is encrypted, and P is used for decryption, expressed as is connected to the read-out signal and comprising W and visanet T, each signal of the content between the tags optional decryption unit 422. This to prevent the disc from uncontrolled data recovery or bit to bit copy is favourable, for example, in the computer the copy. Carrier mode can be P from manufacturing master in the apparatus to produce the one-way function, this kind of disc is used for copied disc. The master device can be used on the carrier mode of another one-way function to generate and output the watermark pattern. This has the advantage of that, in other words carrier mode P is not possible to be utilized outside the master device, the master device is not provided with a pre-determined control to produce the disc carrier mode (for example by the pirate from to be duplicated in the mode of taking out the hardware).

Control mode and visanet and recording the content information, or another way is recorded in a separate location, the purposes of the pirates can not be directly access is local, such as the title of the document or CD or DVD lead-in section. Copycontrol visanet can be concealed in the MPEG video stream. In one embodiment this data is located in the GOP, in the extended and user data area (see MPEG video compression standards).

Figure 5 for processing coded signal that a kind of device. The device shown is used for reproducing the optical disk 51 playback device 52. Reproducing device is supplied with the read-out device, which comprises a reading head and the servo/control unit 58 in order to from a disc 51 on read-out information. Reproducing device has a digital output to the digital bus 53 for output includes the watermark W and processed, control visanet T the content signal is resumed. Can also provide an analog output 54 in order to connect a headset or other audio equipment to the d/a converter (optional , not shown) then output the music content. From the disc 51 of the signal read out by the readout unit 55 processing, the unit can be the reference Figure 4 the decryption function of the note. Readout unit 55 is coupled to the recovery unit 61 in order to restore the watermark pattern W, also coupled to another recovery unit 60 in order to resume control mode t. Watermark W and the control mode is connected to the control unit T 62. The control unit 62 has a F include encrypted one-way function (top-reference chart 3 of the) of the one-way unit, this function can be applied n times n times in order to produce a control mode Tⁿ, also has a comparator unit, for comparing the control mode of the processed Tⁿ and a watermark. In the control unit 62 the output end 57 of the 1 control visanet T the ' and add the watermark to the content signal through the switch 56 and switch to the digital output 53 on, this switch 56 is composed of a control unit 62 of the operation according to the verification process. Therefore, the output signal of the said content information by the watermark can only be based on the combination of the control coupons and the representative can be the additional information in the output terminal 53 is obtained on. When the verification check for the following: W=F (T) or W= F³ (T) expressed allow playback, or also it is possible to further repeat the test to W=F²ⁿ⁺¹ (T). The control mode of processing n, T^m 1st with the watermark W equal success of the test shows that the counter value of the control mode m. The counter value can be used to verify the m permits n-generation copies of copies of the system in the algebra, or a permitted number of times of the role of action (for example, in the software program in the pay per use), or to any application of an encryption counter. In the reproducing device of one embodiment of the invention provides a carrier mode readout unit 59, is used to from the record carrier recovery medium mark P, for example, in the D2 described in from the servo unit 58 of the servo signal read-out eccentric swinging mode. Medium mark P is connected to the control unit 62, in which a further check implementation T=F (P) in order to verify the control mode and the physical mark P T. Medium mark P may be coupled to the read-out unit 55 of in an optional decryption unit. If the disc content has been encrypted, the playback device decrypts the information using P.

Fig. 6 displays a recording device. The device is used for the disc can be recorded 66 recorded recording device 65. With the recording device from the digital bus to the digital input 72 in order to receive the need to be recorded includes the watermark W and control visanet T of the signal. Input end 72 coupled to the for restoring the watermark pattern W recovery unit 69, is coupled to another control mode for recovery in the recovery unit of the T 70. Watermark W and the control mode is connected to the control unit T 71. The control unit 71 has a comprises encrypting the one-way function of the one-way unit F (top-reference Figure 3 the description), the function F can be used in order to produce a n time control mode of n time Tⁿ, and has a used for comparing the control pattern after processing Tⁿ and a comparator unit of the watermark. In the control unit 71 of the output 67, 1 T the control ticket ' and add the watermark to the content signal through the switch 68 to switch to the recording device 73 is, the switch 68 is composed of a control unit 71 of the operation according to the verification process. Therefore said recording the content information of the output of the device that only the authentication process can be carried out but also that the situation of copying can be in the recording disc 66 it on. Recording device in the copying control visanet T is always transmitted to the disc before it is first through the control unit 71 of a one-way function. If in the information flow and of a watermark in a W=F² (T) phase matching, allows the recording of copyrighted audio. In allow more copies of the algebra of the embodiment, to check the W =F²ⁿ (T). If the pirate wants to revise his recording device in order to even in the absence of the corresponding audio recorded under the condition of T. Then normal playback device for playback of the disc will be refused. When the professional Publishing, professional title is to initially produce a U and the production of seeds. This seed is calculated according to the following variable: P=G (U) and T= (F (F (U))), the latter we used F² (U) to express. Allow a user to copy n times the disc is concerned, the watermark W is W =F²ⁿ⁺¹ (T) and generating. G and variable P one-way function can be such requirements, in other words P also contains a publisher of the identification code of the disc or the manufacturing Serial number of the machine. If pirated of the publisher of an attempt to write a specific P to a copyright all of the disc is the replication of the bits, then he must revise the pirates master disc producing machine. Professional release of the disc using the above-mentioned encryption relations containing P, T, W and there may be n. Professional release (copyright all) of the legitimate copies of the content in the recording medium containing watermark W and visanet T, make W=F^m (T), the m = 1, 3, 5, 7 the [...]. In m= 1 under the condition, the content of the disc/medium cannot be further copied. Sent to the recording device to the professional release (copyright all) of the content data stream containing watermark W and visanet T, make W=F^m (T), the m= 2, 4, 6... In m= 2 under the condition of, content can be a one-time recording and reproducing.

Although the present invention is used for the implementation of the disc as a recording medium of example, however, very clearly, the invention also can be used for other system for transfer of information. For example, encoded signal and the control signal may be passed through as the Internet, to transmit the data network.

Although the present invention is conducted with reference to the description of the preferred embodiments, but it should be understood, these are not restrictive examples. Therefore, for those people who are familiar with the purposes of the technology, various amendments can become very obvious, and will not deviate from the required by the rights scope of the invention. For example, the coded signal in the read-only disk or tape can be circulated, and the control signal can be distributed separately. Furthermore, in the analog domain may be also used in the watermark, however generally speaking such a watermark more difficult to restore. Through the use of a key of the target are, for example, in particular in a regeneration apparatus with built-in key, or using a by the public-key system by the target (such as RSA) provided to the public key encryption to the control signal, can prevent the unrestricted use the control signal. Furthermore, coding signal and/or control signal may be passed through scrambling or encryption method to get additional protection, or may be applied a digital signature. Can utilize a free copy visanet R, it is the content and/or the watermark (or a part thereof) of a digital signature. Furthermore, this invention is that each and every new feature or a combination of each characteristic, including those in the application of or related to the content of the description in the document.

List of related documents

(D1) WO   97/13248-A1 (PHN   15391)

Watermark encoded signal.

(D2) (PHN   13922) EP-0545472

With physical copy protection information system is closed.

(D3) EP-A   97200197.8, on submission 27.01.97 (PHN applicants refer to   16209)

The watermark of the bit stream or DSD signal (such as A.A.M.Bruekers)

(D4) the encrypted new direction (and Diffie Hellman), IEEE   Transaction   on information   theory, vol   IT-22, No.6, Nov. 1976, P.644-654