Source: https://patents.google.com/patent/EP0906700B1/en
Timestamp: 2019-05-26 10:34:06
Document Index: 438778798

Matched Legal Cases: ['artz\n1998', 'art 21', 'art 22', 'arts 21', 'art 25', 'art 26', 'art 22', 'art 22', 'art 22']

EP0906700B1 - Method and system for transferring content information and supplemental information relating thereto - Google Patents
EP0906700B1
EP0906700B1 EP98900325A EP98900325A EP0906700B1 EP 0906700 B1 EP0906700 B1 EP 0906700B1 EP 98900325 A EP98900325 A EP 98900325A EP 98900325 A EP98900325 A EP 98900325A EP 0906700 B1 EP0906700 B1 EP 0906700B1
EP98900325A
EP0906700A2 (en
Johan Paul Marie Gerard Linnartz
1998-01-22 Priority to EP98900325A priority patent/EP0906700B1/en
1998-01-22 Priority to PCT/IB1998/000087 priority patent/WO1998033325A2/en
1998-01-22 Application filed by Koninklijke Philips NV filed Critical Koninklijke Philips NV
1999-04-07 Publication of EP0906700A2 publication Critical patent/EP0906700A2/en
2002-09-11 Publication of EP0906700B1 publication Critical patent/EP0906700B1/en
A system for transferring content information and supplemental information relating thereto is described, e.g. audio, video and supplementally author or copy-control status via an optical disc. An encoded signal is generated comprising a watermark pattern representing supplemental information. The watermark pattern cannot be changed without seriously affecting the quality of the content information after reproduction. According to the invention a control pattern is transferred also, while the watermark is generated by applying a one-way function to the control pattern. This has the advantage, that any change to the watermark or the control pattern can be detected easily, because it is computationally not feasible to calculate a new control pattern for a changed watermark. Therefore the supplemental information is well protected against manipulation. Alternatively a malicious party will be forced to fully replace the watermark pattern, thereby maximally affecting the quality of the reproduced content. In a copy control method allowing a first generation copy ('copy-once') the original control pattern is processed 3 times by the one-way function for generating the watermark, while each player or recorder processes the control pattern once before outputting/recording it, so forming a cryptographically protected down-counter.
The invention relates to a method of transferring content information and supplemental information relating thereto, in which method an encoded signal representing the content information and a watermark pattern representing supplemental information is transferred.
The invention further relates to a method of encoding content information and supplemental information relating thereto, in which an encoded signal is generated by encoding the content information in accordance with a watermark pattern representing supplemental information.
The invention further relates to a method of retrieving supplemental information related to content information, in which a watermark pattern representing supplemental information is retrieved from an encoded signal representing the content information and the watermark pattern.
The invention further relates to a system for transferring content information and related supplemental information, an arrangement for generating an encoded signal, an arrangement for processing an encoded signal, an encoded signal, a control signal and a record carrier.
Such methods and such a transfer system are described in patent application WO 97/13248 (PHN 15391), document D1 in the list of related documents. The document describes, that video and audio content is increasingly transmitted and recorded in a digitally encoded form, for example, an MPEG bitstream. There is a growing need to transfer supplemental information logically related to the content information, which supplemental information is intended for controlling the processing of the content information. The supplemental information should be protected against manipulation in order to remain in command of the controlling function. Supplemental information is particularly useful in copy protection applications.
Copy protection has a long history in audio publishing. The presently installed base of equipment, including PC's with audio cards, provide little protection against unauthorized copying. In any copy-protection scheme, the most difficult issue is that a pirate can always attempt to playback an original disc, he can treat the content as if it were an analog home recording and record it. It is desirable that consumer recorders are able to copy recordings of consumer's own creative productions without any limitation, but prohibit the recording of copy-right material. Thus, the copy protection mechanism must be able to distinguish between consumers' own creations and content that originates from professional music publishers. The equipment must make this distinction based on the audio or video signal only, as any reference to the physical source of content (e.g. disc or microphone) is unreliable. For digital storage media such as DCC, "copy bits" have been defined, which bits indicate a copyright status, e.g. "no copy allowed", "free copy" or "one generation of copy allowed". Other copy bits may indicate that the medium containing the information must be a "professional" medium manufactured by pressing and not a "recordable" disc.
Marking the digital content signal, for example by a marker accommodated in such an encoded signal so as to classify the encoded signal as authentic programme material, is referred to as watermarking. In our system the watermark takes the form of a multi-bit watermark pattern representing some supplemental information, e.g. indicating that the encoded signal constitutes copy protected content and/or indicate the origin of the content. A watermark usually has a fixed part to identify the bit pattern as a valid watermark and/or synchronising the retrieval process, and may comprise a variable part representing said supplemental information. A method is disclosed in D1 for embedding the watermark pattern in the encoded signal such that it is easy to detect, but difficult to erase or modify without serious degradation of the quality of the audio or video content after decoding. Moreover, the watermark pattern has to be relatively long to prevent an unmarked, encoded signal from being classified accidentally as marked. Also the watermark should be detectable in a relatively short time, e.g. 1 to 10 seconds, to enable a fast response when classifying a signal. Known watermarks have the disadvantage, that they represent only a limited amount of supplemental information. Manipulation of (parts of) the watermark by a malicious party is still possible with only a limited degradation of the content after decoding.
It is an object of the invention to provide means for transferring supplemental information related to content information such that manipulation of the supplemental information is countered more effectively.
For this purpose, the method of transferring according to the invention is characterized in that a control signal is transferred representing a control pattern, the watermark pattern and the control pattern in combination representing the supplemental information, and in that the watermark pattern comprises the result generated by applying a one-way function to the control pattern. The method of encoding according to the invention is characterized in that a control signal is generated representing a control pattern, the watermark pattern and the control pattern in combination representing the supplemental information, and in that the watermark pattern is generated by applying a one-way function to the control pattern. The method of retrieving is characterized in that the watermark pattern and a control pattern in combination represent the supplemental information, and in that the control pattern is processed by a one-way function, and in that the supplemental information is verified by comparing the watermark pattern and the processed control pattern. For this purpose, the arrangement for processing an encoded signal representing content information and a watermark pattern representing supplemental information, which arrangement comprises a retrieval unit for retrieving the watermark pattern according to the invention, is characterized in that the arrangement comprises a control unit for receiving a control signal representing a control pattern, the watermark pattern and the control pattern in combination representing supplemental information, and a one-way function unit for generating a processed control pattern and a comparator for verifying the supplemental information by comparing the watermark pattern and the processed control pattern. A record carrier according to the invention comprises the encoded signal and/or the control signal as recorded information.
The above measures according to the invention have the effect, that a small change in the control pattern will result in a totally different processed control pattern due to the nature of the one-way function. When a malicious party manipulates the control pattern, the watermark no longer corresponds to the changed control pattern, or needs to be fully replaced. Hence manipulation of the control pattern can easily be detected during watermark verification in a player a recorder. Also a small change to the watermark pattern cannot be matched by also modifying the control pattern due to the nature of the one-way function, which prohibits calculating the input data 'backwards' from a given output value. This is advantageous in that any changes to the control pattern or the watermark can be easily detected. If the malicious party wants to manipulate the supplemental information represented by the watermark and/or the accompanying control signal, he is forced to fully replace the watermark pattern, which will result in severe loss of quality in the reproduced content, whereas even minor changes to the watermark pattern cannot be matched by calculating a corresponding control patten and will be detected also.
An embodiment of the arrangement for generating and/or processing an encoded signal according to the invention is characterized in that the one-way function unit is arranged for generating a n-time processed control pattern by passing the control pattern n times through a cryptographic one-way function, n being an integer > 0. This has the effect, that the encoded signal comprises a watermark pattern and a control signal comprises a control pattern as a cryptographically controlled counter. The counter value implicitly represented by the control pattern is determined comparing n-time processed control patterns and the watermark pattern until a match is found (or no match is possible within a predetermined maximum count). The counter is cryptographically decreased in the player before outputting the processed control pattern to a recorder. The recorder verifies the counter and, if the count permits, decreases the counter again and makes a recording including the processed control pattern. This has the advantage, that a limited number of generations of copies can be allowed, whereas copy control is effected in the player and the recorder. The decreasing is performed by a cryptographic one-way function, which cannot be inverted without a huge, prohibitive computational effort, so increasing said counter value is virtually impossible. As soon as the counter is decreased too often, the processed control pattern no longer matches the watermark. The player and recorder will then block reproducing and/or recording the information.
Further advantageous, preferred embodiments of the system and arrangements according to the invention are given in the dependent claims.
Figure 1 shows a copy control system and
Figure 2 shows the one-way processing of a copy control pattern comprising two parts and
Figure 3 shows a one-way function,
Figure 4 shows a copy control system using a medium mark P and
Figure 5 shows an arrangement for processing an encoded signal and
Figure 6 shows a recording arrangement.
The general concept of the invention is adding a control pattern to a watermarked, encoded signal, while a one-way function is used for generating the watermark from the control pattern. This allows a check at the destination of the watermarked signal for the integrity of the watermark and the accompanying control pattern. This has several advantages, e.g. the watermark may be relatively short and does not need its own integrity check bits, it may be repeated every few seconds in the signal allowing a classification of parts of the signal after editing, etc. As the watermark has to match a processed control pattern generated by applying a one-way function, it is computationally not feasible to calculate the control pattern "backwards" from a watermark. Tampering with control pattern and watermark is only possible by fully replacing both, which will result in serious degradation of the quality of the reproduced content. If a valid control pattern is not available, reproduction or recording of the encoded signal may be controlled or blocked in players and/or recorders complying with the copy-protecting rules. Preferably all devices available to the consumer check the watermark pattern and do not accept any signal without the control signal. A lot of applications may benefit from this control, e.g. copy control, payment of copyright fees, music or video rental, etc. The copy control may be similar to said DCC copy bits. The presence of a control pattern may be required to allow playback, and/or to indicate the copyright status, e.g, allowing one generation of copies. Also a release after a certain date may be effected by distributing the control pattern separately after that date. Further any related information may be indissolubly attached, e.g. author, song text, titles, performers, or a period of use may be included in the control pattern.
An embodiment of the invention is a system for copy protection allowing one generation of copies, also called copy-once. A professional audio stream contains embedded copy-right data that grants permission to copy once. This is implemented by embedding a watermark yco in the audio stream. Moreover the professional disc contains a special permission mark xco where yco = H(xco) with H0 a cryptographic one-way function. The mark yco remains with the audio (possibly embedded) during playback, but it is removed by the consumer recorder. A copy made by the recorder therefore does not contain the permission mark and cannot be copied.
For the embodiments of the system a one-way function is used for generating the watermark representing a bitpattern y from the control pattern x. An implementation of the one-way function can be y = x2 mod N with N a public modulus. Here N is the product of two secret large primes (N = p q). In fact N can be part of the data that is embedded in the watermark, i.e., concatenated to y. Another possibility is the discrete-log one-way function conjectured by Diffie and Hellman [1976] (= document D4): F(x) = αx in GF(p) with a a primitive element of GF(p). Here p is a large prime such that p-1 has a large prime factor. The above two implementations bear the disadvantage that the size of the arguments, i.e., the number of bits needed to be secure, is quite large. A practical system based on fewer bits can be to apply an appropriate secret-key encryption algorithm, e.g. the DES, with y = F(x) = x @ DES(x). This is illustrated in the circuit of Figure 3. Figure 3 shows an implementation of a one-way function generator based on secret-key encryption algorithm. On the input 31 the control pattern x is applied and processed in the encryptor 32 by using a key from a key input 33. The output of encryptor 32 is bitwise EXOR'd to the input x by logic unit 34, resulting in bitpattern y on the output 35. In this circuit, the key can be made public or included in the watermark, i.e. concatenated to y.
A suitable watermark for an audio signal with the DSD format (see document D3) is embedded by forcing a small fraction (0.01 % to 1%) of the bits to specific values determined by W. This makes the detection simple, as a player or recorder only has to check the value of predetermined bits at predetermined locations. The artefacts caused by bits forced to represent a watermark can be minimized by noise shaping. We found for DSD that a watermark involving 1% of the bits will reduce the signal-to-noise / distortion ratio by one dB for a SNR in excess of 110 dB. On the other hand, if an attacker changes the value of these bits, the SNR dramatically deteriorates by several tens of dBs. For video a suitable watermark is embedded in the compressed MPEG, e.g. in the picture type (PTY watermarking, described in D1).
A further embodiment of the invention is a system for copy protection allowing one n generations of copies, also called copy-control with copy-n-times feature. This embodiment for copy protection of recorded signals allows a limited number of copies. In our concept, professionally released titles contain at least two different types of copy-control marks: a watermark embedded in the content, and a copy-control (validation/authorization) control pattern attached to the content but removable and modifiable by recorders. Said control pattern is called a copy-control ticket. The ticket in the digital signal stream is modified every time that the signal passes a record or playback device. A cryptographic relation between the watermark and ticket is verified during each playback and each recording. An optional third type of copy-control mark, a carrier pattern representing a medium mark identifying the medium (disc/tape/etc), may be applied separately or may also be related to the same watermark. A medium mark can be represented for instance by a wobble groove or a pit jitter modulation, and it preferably also is visually detectable. Recordable media may carry a fixed predetermined medium mark identifying the medium as recordable, or as a professional disc from a known source. A separate check may be made for the medium mark, which may be a predetermined value or a value related to the watermark and/or the ticket via a cryptographic function. In the total system concept, we distinguish
In the total system concept, Ticket T in the stream is replaced by T' = F(T) during each recording or playback operation, whereby F is a publicly known cryptographic one-way function. That is, neither the player nor the recorder pass T transparently but feed it through function F. Our scheme exploits the invention that T can be regarded as cryptographic counter, which can easily be incremented but cannot be decrement unless an attacker can invert F. From a cryptographic point of view it is not necessary that F is kept secret to potential attackers. Here we aim at restricting the length of the copy paths, e.g. to prohibit generation of copies of copies of copies, i.e. the number of generations. Playback is allowed only if the watermark in the stream matches Fm(T) where m is the number of sequential recording or playback operations that are still allowed. Typically m is odd. Recording is allowed only if the watermark in the stream matches Fm(T) where m is the number of sequential recording or playback operations that are still allowed. Typically m is even. In the above statements m may either be available explicitly, or the device may check all m which are reasonably small, e.g. m < 4 if copy once is the maximum number of copies allowed to made anyhow. An example of a possible cryptographic one-way function is described above with reference to Figure 3.
In an embodiment the number of parallel copies from one original is restricted. The above concept is extended and applied to restrict the number of parallel copies made from one disc, e.g. if customer is only allowed to copy directly from the original disc that he bought from the publisher, and the number such copies is restricted. To this end we need a small recordable area on each professionally released title to store and update T. The basic idea is that the player modifies T into F(T) every time that the player authorises a recorder to make a copy. In such case the original disc as sold by the publisher is produced by initially generating a seed U. From this seed, the following variables are computed: P= F(U), and T=F( F(U) ) which we denote as F2(U). For a disc that the customer is allowed to copy n-times in parallel, a watermark W is created as W = Fn+1(U). The player outputs the contents, but not T during normal operation. During recording the recorder asks the player to provide a ticket T such that W= F(T), which is also recorded on the recordable disc. The player reads T from and replaces it by F(T). The player only provides F(T) to the recorder if the player reads from an original disc, i.e., with a valid P matching T. The recorder iteratively replaces T by F(T) until W=F(T). The content with embedded W and appropriate T are recorded to disc. If the player reads a recordable disc, T is never released to the outside.
Figure 1 shows a copy control system according to the invention. The music content on a record carrier 11 is watermarked by a watermark pattern W, while the record carrier 11 further comprises a control pattern, the copy control ticket T. The player 12 comprises the usual elements for reproducing the music from the record carrier, e.g. known from a CD player, and verifying means comprising three one-way function units 121,123,124 comprising a one-way function F (see description with reference to Figure 3) and two comparators 122,125, which may be implemented in a single calculation unit, e.g. a microprocessor and a program. The watermark W and the ticket T are derived from the original record carrier 11. The ticket T is coupled to one-way function unit 121 resulting in T', which T' is coupled to first comparator unit 122 and a second one-way unit 123, which has its output T" coupled to a third one-way unit 124 resulting in T''' coupled to a second comparator unit 125. Both comparator units receive the watermark W on a second input for comparison. If the first comparator unit 122 finds equality, then playback is allowed, but no (further) copying. If the second comparator unit 125 finds equality, then playback is allowed and one copy generation is still possible. If both comparators find no equality no playback allowance is given. The player has an output to a digital interface 13, e.g. a IEC 958 or P-1394 digital interface, for outputting the content information comprising the watermark W and the processed ticket T'. The recorder 14 has an input for receiving said signals from the digital interface 13. The watermark W is coupled to a third comparator unit 133. The ticket T' is coupled to a fourth one-way function unit 131, resulting in a processed ticket T", which T" is coupled to a fifth one-way function unit 132, resulting in T"' coupled to the third comparator unit 133. If the third comparator unit 133 finds equality between T''' and W, copying is allowed and the music content comprising the watermark W and the two times processed ticket T" are recorded on a recordable record carrier 15. So one generation of copies is allowed when the 3-time processed control pattern T"' equals W. The resulting copy comprises a 2-time processed control pattern T", which allows playback of this first generation copy, as the player will first generate a 1-time processed pattern, i.e. (T")', which will now match the watermark pattern W. Further recording of the music content is blocked by the recorder, as the 5-time processed ticket does not match the watermark. Even if a tampered recorder is used by a malicious party, the resulting copy comprises a 4-times processed ticket T"" as presented by the player. Such a copy cannot be played on a compliant player, as the first and second comparators will not find equality. So both a recorder and a player need to be tampered with to create and use illegal copies.
Figure 2 shows the one-way processing of a control pattern Tn-1 comprising two parts. The first part 21 is a seed and the second part 22 is an info part comprising supplemental information, such as the name of the author, the owner, a release date, etc. Both parts 21,22 are combined in combination unit 23, e.g. concatenated, added or EXOR'd, and the result is coupled to a first one-way function unit 24. Control pattern Tn comprises again two parts, the first part 25 being the output of the first one-way function unit 24, and the second part 26 being the same as info part 22. For the next one-way processing cycle the same functions are applied, i.e. a further combination unit 27 and a further one-way function unit 28, resulting in a control pattern Tn+1 again comprising two parts. After a predetermined number of one-way cycles the first part of the pattern from the output of the one-way unit matches the watermark as with the previously described embodiments. This has the advantage, that the info part 22,26 of each generation control pattern is directly readable and also protected against manipulation, as any small change in the info part will completely change the resulting pattern at the output of the one-way units during the verification. In the event of an encrypted encoded signal, the info part may comprise the decryption key. The info part 22 may also comprise an explicit counter value, which has to be decreased before processing the next (n+1)-time processed control pattern. The explicit counter value p then indicates the number of processing cycles of the one-way unit. This has the advantage, that only the p-time processed control pattern needs to be compared to the watermark pattern. Of course a predetermined change, such as an explicit counter value included in the info part, has to be changed during generation and verification in the same way. Hence tampering with such predetermined changing values is effectively prevented.
Figure 4 shows a copy control system using a medium mark P. The medium mark allows two separate conditions to be verified for an original disc before playback is allowed. The record carrier 41, e.g. an optical disc, comprises a further modulation pattern of variations of a physical parameter representing a medium mark P related to the watermark pattern W, the further modulation pattern being of a different type than the modulation pattern. An example of further modulation pattern, such as a wobble of a track, can be found in D2. According to the invention, the medium mark P is coupled to a one-way unit 421 having an output coupled to a first comparator 423 and/or a second comparator 424. Each one-way units comprises a cryptographic one-way function, e.g. as described with reference to Figure 3. The first comparator 423 also receives the watermark W, and at equality the first condition for a no-copy original disc is detected. The second comparator 424 receives the control ticket T, and at equality a first condition for a copy-once allowed disc is detected. Ticket T is also coupled to a second one-way unit 425 resulting in T', which T' is coupled to a third comparator 426, which also receives the watermark W. At equality the second condition for a no-copy original disc detected, or a legal first generation copy is detected (in which case the medium mark P may be absent or has a predetermined value). The 1-time processed ticket T' is coupled also to an output of the recorder on digital interface 43, and to a third one-way unit 427, which is coupled to a fourth one-way unit 428, resulting in a 3-time processed ticket T"', which is coupled to a fourth comparator 429 also receiving the watermark W. At equality the second condition for a copy-once allowed disc is detected. When the conditions for playback are fulfilled, the music content including the watermark W is outputted from the player 42 to the digital interface 43. A recorder 44 may be coupled to the digital interface 43 for recording the music. The watermark W and the ticket T' from the interface are verified in the same way as in the recorder described with reference to Figure 1.
In an embodiment the player 42 and the recorder 44 have an input 431,441 for a home watermark WH. In the player the home watermark WH is coupled to a fifth comparator 430, which also receives the watermark. At equality a home personal creation is detected. The input 431 is preferably coupled to said fifth comparator 431 via a further one-way unit, in which case the home seed value is to be supplied to the input of the further one-way unit. The home seed value or watermark may be stored in a memory of the player/recorder, or on a separate memory module, e.g. a chipcard, or may be kept on paper and entered via a keyboard by the user like a PIN code. Alternatively recordings of consumer's personal audio creations can be recognized and distinguished, because their watermark is a fixed watermark, e.g. the all-zero word.
Figure 5 shows an arrangement for processing an encoded signal. The arrangement shown is player 52 for playing an optical disc 51. The player is provided with read means comprising a read head and a servo/control unit 58 for reading information from the disc 51. The player has a digital output 53 to a digital bus for outputting the retrieved content signal including the watermark W and a processed control ticket T. A further analog output 54 for connecting a headphone or other audio equipment may be provided for outputting the music content after processing by a D/A convertor (optional, not shown). The signal read from the disc 51 is processed by read unit 55, which may be provided with a decrypt function as described with reference to Figure 4. The read unit 55 is coupled to a retrieval unit 61 for retrieving the watermark pattern W, and to a further retrieval unit 60 for recovering the control pattern T. Watermark W and control pattern T are connected to control unit 62. The control unit 62 is provided with a one-way unit comprising the cryptographic one-way function F (described above with reference to Figure 3), which function F can be applied n times to generate an n-times control pattern T°, and a comparator unit for comparing the processed control pattern Tn and the watermark. The 1-time processed control ticket T' on output 57 of the control unit 62 is switched to the digital output 53 together with the watermarked content signal via a switch 56, which switch 56 is operated by the control unit 62 in dependence of a verification process. Hence the output signal representing the content information is only available on output 53 in dependence on the supplemental information represented by the watermark in combination with the control ticket. The following checks are performed in the verification: W = F(T) or W = F3(T) indicating that playback is allowed, or possibly further repeated tests up to W = F2n+1(T). The first successful test of a n-times processed control pattern Tm equals W indicates a counter value m of the control pattern. The counter value m can be used to verify the generation of a copy in a system allowing n generations of copies, or the number of times a certain act is allowed (e.g. pay per use for a software program), or any other application needing a secure counter. In an embodiment of the player a carrier pattern read unit 59 is provided for retrieving a medium mark P from the record carrier, e.g. from the servo signals of servo unit 58 for a wobble pattern as described in D2. The medium mark P is connected to the control unit 62, wherein a further check T = F(P) is performed for verifying the control pattern T and the physical mark P. The medium mark P may be coupled to an optional decryption unit in read unit 55. If encryption has been applied to the disc content, the player decrypts the stream, using P.
Figure 6 shows a recording arrangement. The arrangement is a recorder 65 for recording a recordable disc 66. The recorder has a digital input 72 from a digital bus for receiving a signal to be recorded including a watermark W and a control ticket T. The input 72 is coupled to a retrieval unit 69 for retrieving the watermark pattern W, and to a further retrieval unit 70 for recovering the control pattern T. Watermark W and control pattern T are connected to control unit 71. The control unit 71 is provided with a one-way unit comprising the cryptographic one-way function F (described above with reference to Figure 3), which function F can be applied n times to generate an n-times control pattern Tn, and a comparator unit for comparing the processed control pattern Tn and the watermark. The 1-time processed control ticket T' on output 67 of the control unit 71 is switched to a recording means 73 together with the watermarked content signal via a switch 68, which switch 68 is operated by the control unit 71 in dependence of a verification process. Hence the output of the recording means representing the content information is only available to the recordable disc 66, if the verification process is positive and indicates that a copy may be made. The recorder always passes the copy control ticket T through the one-way function in control unit 71 before transferring it to disc. Recording of copyrighted audio is allowed if the watermark in the stream matches W = F2(T). In an embodiment allowing more generations of copies, W = F2n(T) is checked. If an attacker manages to modify his recorder and record audio even if the appropriate T is not present, a normal player will reject to playback the disc. In professional publishing a professional title is produced by initially generating a seed U. From this seed, the following variables are computed: P= G(U), and T=(F(F(U)) which we denote as F2(U). For a disc that the customer is allowed to copy n-times, a watermark W is created as W = F2n+1(T). The one-way function G and variable P may be specified such that P also contains an identifier for the publisher or a serial number of the mastering machine. If a pirate publisher attempts to write a particular P, in order to make a bit-exact copy of a copyright disc, that pirate must tamper with his mastering equipment. The professionally released disc contains P, T, W and possibly also n, with the above cryptographic relation. Legal copies of professionally released (copyrighted) content on recordable media contain watermark W and a ticket T such that W = Fm(T), with m = 1, 3, 5, 7,... In case m = 1, the content of the disc/media may not be copied any further. Data streams of professionally released (copyrighted) content to a recorder contain watermark W and a ticket T such that W = Fm(T), with m = 2, 4, 6,... In case m = 2, the content may be recorded and played back one more time.
Whilst the invention has been described with reference to preferred embodiments thereof, it is to be understood that these are not limitative examples. Thus, various modifications may become apparent to those skilled in the art, without departing from the scope of the invention, as defined by the claims. For example, the encoded signal might be distributed on a read-only disc or tape, while the control signal might be distributed separately. Further a watermark in the analog domain may also be employed, although in general such watermarks are more difficult to retrieve. Unlimited use of the control signal might be prevented by encrypting the control signal by a key known to the destination only, e.g. a key build in specific reproducing devices or a public key supplied by the destination using a public key system (e.g. RSA). Also the encoded signal and/or the control signal may additionally be protected by scrambling or encryption methods, or may be additionally provided with a digital signature. A free-copy ticket R, which is a digital signature over (part of) the content and/or the watermark W may be employed.
WO 97/13248-A1 (PHN 15391)
Watermarking encoded signals.
EP-0545472 (PHN 13922)
Closed information system with physical copy protection
EP-A 97200197.8 filing date 27.01.97 (applicants ref PHN 16209)
Watermarking of Bitstream- or DSD-signals (A.A.M. Bruekers et al. )
New Directions in Cryptography (Diffie and Hellman), IEEE Transactions on information theory, Vol IT-22, No. 6, November 1976, p.644-654
Method of transferring content information and supplemental information relating thereto, in which:
an encoded signal representing the content information and a watermark pattern representing supplemental information is transferred, characterized in that a control signal is transferred representing a control pattern, the watermark pattern and the control pattern in combination representing the supplemental information, and in that the watermark pattern comprises the result generated by applying a one-way function to the control pattern.
Method of encoding content information and supplemental information relating thereto, in which:
an encoded signal is generated by embedding a watermark pattern representing supplemental information in the content information characterized in that a control signal is generated representing a control pattern, the watermark pattern and the control pattern in combination represent the supplemental information, and in that the watermark pattern is generated by applying a one-way function to the control pattern.
Method of retrieving supplemental information related to content information, in which:
a watermark pattern representing supplemental information is retrieved from an encoded signal representing the content information and the watermark pattern characterized in that the watermark pattern and a control pattern in combination represent the supplemental information, and in that the control pattern is processed by a one-way function to a processed control pattern, and in that the supplemental information is verified by comparing the watermark pattern and the processed control pattern.
System for transferring content information and related supplemental information via a transfer signal comprising an encoded signal, the system comprising a transmitter for transmitting the transfer signal, which transmitter comprises an encoding unit for generating the encoded signal by embedding a watermark pattern representing supplemental information in the content information, and a receiver for receiving the transfer signal, which receiver comprises a retrieval unit for retrieving the watermark pattern, characterized in that the transfer signal further comprises a control signal representing a control pattern, the watermark pattern and the control pattern in combination representing the supplemental information, and in that the transmitter comprises a one-way function unit for generating the watermark pattern from the control pattern, and in that the receiver comprises a further one-way function unit for generating a processed control pattern and a comparator for verifying the supplemental information by comparing the watermark pattern and the processed control pattern.
Arrangement for generating an encoded signal, which arrangement comprises an encoding unit for generating the encoded signal by embedding a watermark pattern representing supplemental information in content information, characterized in that the arrangement comprises a control unit for generating a control signal representing a control pattern, the watermark pattern and the control pattern in combination representing supplemental information, and a one-way function unit for generating the watermark pattern from the control pattern.
Arrangement as claimed in claim 5, characterized in that the arrangement comprises a transfer unit for generating a transfer signal comprising the encoded signal and the control signal.
Arrangement as claimed in claim 5, characterized in that the one-way function unit is arranged for generating a n-time processed control pattern by passing the control pattern n times through a cryptographic one-way function, n being an integer > 0.
Arrangement as claimed in claim 7, characterized in that n = 3 indicating that one generation of copies is allowed.
Arrangement as claimed in claim 5, characterized in that the arrangement comprises an identification unit for including a recorder identification code in the supplemental information.
Arrangement for processing an encoded signal representing content information and a watermark pattern representing supplemental information, which arrangement comprises a retrieval unit for retrieving the watermark pattern, characterized in that the arrangement comprises a control unit for receiving a control signal representing a control pattern, the watermark pattern and the control pattern in combination representing supplemental information, and a one-way function unit for generating a processed control pattern and a comparator for verifying the supplemental information by comparing the watermark pattern and the processed control pattern.
Arrangement as claimed in claim 10, characterized in that the one-way function unit is arranged for generating a n-time processed control pattern by passing the control pattern n times through a cryptographic one-way function, n being an integer > 0.
Arrangement as claimed in claim 11, characterized in that the control pattern comprises a first part and a second part, and in that the arrangement comprises a combination unit for combining the n-time processed control pattern and the second part of the (n-1)-time processed control pattern, the output of the combination unit being coupled to the input of the one-way unit.
Arrangement as claimed in claim 11, characterized in that the arrangement comprises a control unit for outputting a further control signal representing the n-time processed control pattern, n being equal to 1.
Arrangement as claimed in claim 11, characterized in that the comparator is arranged for determining a value m by a first comparison of the watermark pattern and the n-time processed control pattern at n=1 and at least one further comparison of the watermark pattern and the n-time processed control pattern at n>1, m being the value of n resulting in a successful comparison.
Arrangement as claimed in claim 10, characterized in that the arrangement comprises an output unit for outputting an output signal representing the content information in dependence on the supplemental information.
Arrangement as claimed in claim 15, characterized in that the output unit is a recording unit for recording the output signal on a record carrier.
Arrangement as claimed in claim 13 and 16, characterized in that the recording unit is arranged for recording the further control signal.
Arrangement as claimed in claim 14 and 15, characterized in that the output unit is arranged for outputting the output signal if m=1 or m=3.
Arrangement as claimed in claim 14 and 16, characterized in that the recording unit is arranged for recording if m=2.
Arrangement as claimed in claim 10, characterized in that the arrangement comprises a playback unit for inputting the encoded signal from a record carrier.
Arrangement as claimed in claim 10, characterized in that the arrangement comprises a carrier pattern read unit for retrieving a carrier pattern from the record carrier and a one-way function unit for generating a processed carrier pattern and a comparator for comparing the watermark pattern and the processed carrier pattern.
Encoded signal representing content information and a watermark pattern representing supplemental information, characterized in that the watermark pattern comprises the result of a control pattern processed by a one-way function, the watermark pattern and the control pattern in combination representing supplemental information.
Control signal for controlling reproduction and/or recording of content information, the control signal representing a control pattern for controlling an encoded signal, the encoded signal representing the content information and a watermark pattern, characterised in that the control pattern and the watermark pattern in combination represent supplemental information, which watermark pattern comprises the result of the control pattern processed by a one-way function.
Record carrier carrying thereon the encoded signal as claimed in claim 22 and/or the control signal as claimed in claim 23.
Record carrier as claimed in claim 24, characterized in that the watermark is indicative for a n-times control pattern, which n-times control pattern after processing n times through a cryptographic one-way function corresponds to the watermark, n being an integer > 0.
Record carrier comprising an encoded signal representing content information and a watermark pattern representing supplemental information, characterised in that the record carrier further comprises a carrier identification pattern, the watermark pattern comprising the result of the carrier identification pattern processed by a one-way function, the watermark pattern and the carrier identification pattern in combination representing supplemental information.
Record carrier comprising a control signal for controlling reproduction and/or recording of content information, characterised in that the control signal represents a carrier identification pattern for controlling an encoded signal, the watermark pattern comprising the result of the carrier identification pattern processed by a one-way function, the watermark pattern and the carrier identification pattern in combination representing supplemental information.
Record carrier as claimed in claim 26 or 27, wherein the encoded signal is represented by a modulation pattern of variations of a physical parameter, characterized in that the record carrier comprises a further pattern of variations of a physical parameter representing the carrier identification pattern in a different way than said representation of the encoded signal.
Record carrier as claimed in claim 26 or 27, characterized in that the watermark is indicative for a n-times control pattern, which n-times control pattern after processing n times through a cryptographic one-way function corresponds to the watermark, n being an integer > 0.
Record carrier as claimed in claim 24, characterized in that said record carrier is of an optically readable type, the encoded signal being represented by a modulation pattern of optically detectable marks in a track.
Control signal as claimed in claim 23, characterized in that the control pattern comprises copyright information.
EP98900325A 1997-01-27 1998-01-22 Method and system for transferring content information and supplemental information relating thereto Expired - Lifetime EP0906700B1 (en)
EP98900325A EP0906700B1 (en) 1997-01-27 1998-01-22 Method and system for transferring content information and supplemental information relating thereto
PCT/IB1998/000087 WO1998033325A2 (en) 1997-01-27 1998-01-22 Method and system for transferring content information and supplemental information relating thereto
EP0906700A2 EP0906700A2 (en) 1999-04-07
EP0906700B1 true EP0906700B1 (en) 2002-09-11
EP98900325A Expired - Lifetime EP0906700B1 (en) 1997-01-27 1998-01-22 Method and system for transferring content information and supplemental information relating thereto
TW440819B (en) * 1998-03-18 2001-06-16 Koninkl Philips Electronics Nv Copy protection schemes for copy protected digital material
JPH11339374A (en) * 1998-05-26 1999-12-10 Yamaha Corp Digital recording device
AU768185B2 (en) * 1998-10-08 2003-12-04 Matsushita Electric Industrial Co., Ltd. Data recording/reproducing device
JP2002093047A (en) * 2000-09-20 2002-03-29 Sony Corp Data recording medium, data recording device and method, data output device and method, data display method, content data as well as data reproducing device and method
WO2004070585A2 (en) * 2003-01-31 2004-08-19 Kaleidescape, Inc. Detecting collusion among multiple recipients of fingerprinted information
JP4557902B2 (en) 2006-02-09 2010-10-06 株式会社日立エルジーデータストレージ Data reproducing method and data reproducing apparatus
KR20070105031A (en) * 2006-04-25 2007-10-30 엘지전자 주식회사 Method for controling record of copy protection program
WO2007122574A2 (en) * 2006-04-25 2007-11-01 Koninklijke Philips Electronics N.V. Renewable watermark for theatrical content
KR101377952B1 (en) 2007-06-05 2014-03-25 엘지전자 주식회사 Broadcasting signal transmission method, the broadcast signal receiving method and a broadcast receiver
US6209092B1 (en) 2001-03-27
AU711643B2 (en) 1999-10-21 Copying and playing protection for digital programs
EP1282899B1 (en) 2004-07-14 Copy protection system
US7159089B2 (en) 2007-01-02 Outputting apparatus, outputting method, recording apparatus, recording method, reproduction apparatus, reproduction method and recording medium
CN1901067B (en) 2011-10-12 Copyright protection system, recording device and decryption device
US20080101604A1 (en) 2008-05-01 Self-protecting digital content
CN1140118C (en) 2004-02-25 Method and apparatus for copy protection for various recording media using video finger print
CN1185654C (en) 2005-01-19 Digital data copying controlling system and method and CD player
Ref document number: 224124
Ref document number: 69807807
2006-01-30 PGFP Postgrant: annual fees paid to national office