Patent ID: 7757101

Claim:
A data processing apparatus for performing rights processing of content data encrypted with content key data based on usage control policy data, and for decrypting the encrypted content key data, the data processing apparatus comprising within a tamper-resistant circuit module: an input circuit for receiving a secure container from a content provider, wherein the secure container contains a content file, a key file, and a signature data of the content provider, and for receiving license key data from an electronic distribution center, wherein the content file contains the encrypted content data, and wherein the key file contains the encrypted content key, the usage control policy data, and signature data of the electronic distribution center; a first bus; an arithmetic processing circuit connected to the first bus, for performing the rights processing of the content data based on the usage control policy data; a storage circuit connected to the first bus; a second bus; a first interface circuit interposed between the first bus and the second bus; an encryption processing circuit connected to the second bus, for decrypting the content key data using the license key data; a hash-value generating circuit that generates hash values of the content data, the content key data, and the usage control policy data; a public key encryption circuit that creates signature data of the data processing apparatus using the hash values and verifies the integrity of the signature data of the content provider and the signature data of the electronic distribution center; a common key encryption circuit; an external bus interface circuit connected to the second bus; and a usage monitor; wherein the arithmetic processing circuit determines at least one of a purchase mode and a usage mode of the content data based on a handling policy indicated by the usage control policy data, and creates log data which includes a unique identifier of the content data, discount information, and tracing information and indicates result of the determined mode; and the arithmetic processing circuit creates usage control status data in accordance with the determined purchase mode, and controls the use of the content data based on the usage control status data; the usage control status data comprising a content identification for the content data, the purchase mode, an identification for the tamper-resistant circuit module, and a user identification for a user who has purchased the content data; wherein the log data is transmitted to the electronic distribution center; wherein the usage monitor monitors the usage control policy data and the usage control status data to make sure that the content data is purchased and used as restricted by the usage control policy data and the usage control status data; and wherein the purchase mode is determined from one or more purchase mode options, and each purchase mode option has a different level of restriction imposed on a playback operation.