FORM 2
THE PATENTS ACT, 1970
(39 of 1970)
&
THE PATENTS RULES, 2003
COMPLETE SPECIFICATION
(See section 10, rule 13)
“INFORMATION PROCESSING DEVICE, SERVER
DEVICE, INFORMATION PROCESSING METHOD,
SERVER PROCESSING METHOD, AND PROGRAM”
SONY CORPORATION, of 1-7-1, Konan, Minato-ku, Tokyo
108-0075, Japan
The following specification particularly describes the invention and the manner in
which it is to be performed.

DESCRIPTION
INFORMATION PROCESSING APPARATUS, SERVER APPARATUS, INFORMATION PROCESSING METHOD, SERVER PROCESSING METHOD, AND PROGRAM
5
Technical Field
[0001] The present technology relates to an
information processing apparatus capable of executing
an application associated with broadcast content by
10 using an application management table, a server
apparatus that performs a service of supplying an
application management table, and an information
processing method, a server processing method, and a
program that are associated with those apparatuses.
15 Background Art
[0002] In recent years, there is known a technology
capable of executing an application delivered via a
network such as the Internet simultaneously with the
reproduction of broadcast content. As such a
20 technology, a technology called Hybrid Broadcast
Broadband TV (hereinafter, referred to as HbbTV) is
known. As the standard of the HbbTV, "ETSI TS 102 796"
(see Non-patent Document 1) is developed in Europe.
Additionally, also in Japan, a standard "ARIB STD-B23"
25 (see Non-patent Document 2) according to the "ETSI TS
102 796" is developed.
SP343262WO00
2
[0003] Non-patent Document 1: ETSI (European
Telecommunications Standards Institute), "ETSI TS 102
796 V1.1.1 (2010-06)",
http://www.etsi.org/deliver/etsi_ts/102700_102799/10279
5 6/01.01.01_60/ts_102796v010101p.pdf (browsed on October
21, 2011)
Non-patent Document 2: Association of Radio
Industries and Businesses, "Application Execution
Engine Platform for Digital Broadcasting standard ARIB
10 STD-B23 version 1.2",
http://www.arib.or.jp/english/html/overview/doc/2-STDB23v1_
2.pdf (browsed on October 21, 2011)
Summary of Invention
Problem to be solved by the Invention
15 [0004] For example, in a system in which an
application is executed simultaneously with the
reproduction of broadcast content, such as the HbbTV, a
life cycle from the activation to the end of the
application is managed by a data structure called AIT
20 (Application Information Table) section that is
superimposed on the broadcast content. An information
terminal that has acquired an AIT section controls the
application based on an application control code
included in the AIT section.
25 [0005] Further, an XML-AIT that is an AIT section
described in an XML format is exemplified as a format
SP343262WO00
3
that includes information equivalent to a broadcast AIT
section and is optimal to provide information on the
application to a receiver by using a communication
network such as the Internet.
5 [0006] However, the XML-AIT is a file provided over
the Internet and thus it can be said that the XML-AIT
is exposed to a risk such as a falsification by a
malicious third party. When the XML-AIT is falsified,
there arise possibilities that a user is leaded to
10 download an application of an unintended application
server, the control of an application different from a
normal one is executed, and the like.
[0007] Further, many applications can use various
functions such as receiving a program or data from
15 broadcast and presenting the program or data. However,
in order to prevent some functions that can be used by
such applications from being used, a huge amount of
time and effort is required, e.g., the applications
themselves are modified, and the like.
20 [0008] In view of the circumstances as described
above, it is an object of the present technology to
provide an information processing apparatus, a server
apparatus, an information processing method, a server
processing method, and a program that are capable of
25 improving the reliability of an application.
Means for solving the Problem
SP343262WO00
4
[0009] To solve the problems described above,
according to the present technology, there is provided
an information processing apparatus including: a
broadcast content processing unit that receives and
5 processes broadcast content; and a controller that is
capable of acquiring an application information table
to which an electronic signature is attached and in
which location information necessary for acquiring an
application processed together with the broadcast
10 content is stored, validating the electronic signature,
and acquiring the application based on the location
information in a case of succeeding at least in the
validation.
[0010] In the application information table, a first
15 representative value that is calculated from the
application by a predetermined calculation and
represents the application may be stored, and the
controller may calculate a second representative value
for the acquired application, the second representative
20 value representing the application by the predetermined
calculation, and may compare the first representative
value and the second representative value to validate
the application.
[0011] In the application information table, mode
25 information may be stored, and the controller may
control a function available to the application based
SP343262WO00
5
on the mode information described in the application
information table.
[0012] The controller may determine whether the
validation of the electronic signature is required or
5 not based on the mode information described in the
application information table.
[0013] According to the present technology, there is
provided a server apparatus including a generation unit
that generates an application information table to
10 which an electronic signature is attached and in which
location information necessary for causing an
information processing apparatus to acquire an
application processed together with broadcast content
is stored, and responds in response to an acquisition
15 request for the application information table from the
information processing apparatus.
[0014] The generation unit may add a first
representative value to the application information
table, the first representative value being calculated
20 from the application by a predetermined calculation and
representing the application.
[0015] The generation unit may add mode information
to the application information table, the mode
information controlling a function available to the
25 application.
[0016] According to the present technology, there is
SP343262WO00
6
provided an information processing method including: by
a controller, acquiring an application information
table to which an electronic signature is attached and
in which location information necessary for acquiring
5 an application processed together with broadcast
content is stored; validating the electronic signature;
and acquiring the application based on the location
information in a case of succeeding at least in the
validation.
10 [0017] According to the present technology, there is
provided a server processing method including:
generating, by a generation unit, an application
information table to which an electronic signature is
attached and in which location information necessary
15 for causing an information processing apparatus to
acquire an application processed together with
broadcast content is stored; and responding in response
to an acquisition request for the application
information table from the information processing
20 apparatus.
[0018] According to the present technology, there is
provided a program causing a computer to function as: a
broadcast content processing unit that receives and
processes broadcast content; and a controller that is
25 capable of acquiring an application information table
to which an electronic signature is attached and in
SP343262WO00
7
which location information necessary for acquiring an
application processed together with the broadcast
content is stored, validating the electronic signature,
and acquiring the application based on the location
5 information in a case of succeeding at least in the
validation.
Effect of the Invention
[0019] As described above, according to the present
technology, it is possible to improve the reliability
10 of an application.
Brief Description of Drawings
[0020] [Fig. 1] Fig. 1 is a diagram showing the
general outline of an information processing system of
this embodiment.
15 [Fig. 2] Fig. 2 is a diagram showing the data
structure of an AIT section.
[Fig. 3] Fig. 3 is a diagram showing the data
structure of an XML-AIT.
[Fig. 4] Fig. 4 is a diagram showing the data
20 structures of an application mode descriptor and an
application hash descriptor.
[Fig. 5] Fig. 5 is a diagram showing the definitions
of application control codes designated by the AIT
section and the XML-AIT.
25 [Fig. 6] Fig. 6 is a block diagram showing the
configuration of the information processing apparatus
SP343262WO00
8
of this embodiment.
[Fig. 7] Fig. 7 is a diagram showing the operation
example of the control of an application by using the
AIT section.
5 [Fig. 8] Fig. 8 is a flowchart of the operation
example shown in Fig. 7.
[Fig. 9] Fig. 9 is a diagram showing the operation
example of the activation of an application by using
the XML-AIT.
10 [Fig. 10] Fig. 10 is a flowchart of the operation
example shown in Fig. 9.
[Fig. 11] Fig. 11 is a diagram showing the operation
example in the case where an application is activated
from broadcast BML data.
15 [Fig. 12] Fig. 12 is a flowchart of the operation
example shown in Fig. 11.
[Fig. 13] Fig. 13 is a diagram showing the operation
example in the case where after a broadcast-linkingtype
application is activated, a broadcast-unlinking20
type application is activated by the XML-AIT.
[Fig. 14] Fig. 14 is a flowchart of the operation
example shown in Fig. 13.
[Fig. 15] Fig. 15 is a flowchart of the operation
example shown in Fig. 13.
25 [Fig. 16] Fig. 16 is a diagram showing an operation
example in the case where a broadcast-unlinking-type
SP343262WO00
9
application is activated from an application launcher.
[Fig. 17] Fig. 17 is a flowchart of the operation
example shown in Fig. 16.
[Fig. 18] Fig. 18 is a diagram for describing a method
5 of generating and validating an electronic signature
and a hash value.
[Fig. 19] Fig. 19 is a diagram for describing a
modified example of a method of generating and
validating an electronic signature and a hash value.
10 Mode(s) for Carrying Out the Invention
[0021] Hereinafter, an embodiment of the present
technology will be described with reference to the
drawings.

15 [Information Processing System]
Fig. 1 is a diagram showing the general outline of
an information processing system of this embodiment.
An information processing system 1 of this
embodiment includes a broadcast facility 100, a first
20 network 200 such as the Internet, an application server
300, an XML-AIT server 400, an edge router 500, a
second network 600 such as a LAN (Local Area Network),
and an information processing apparatus 700.
[0022] The broadcast facility 100 transmits a
25 digital broadcast signal via, for example,
communication media such as ground waves, satellite
SP343262WO00
10
waves, and an IP (Internet Protocol) network. The
broadcast facility 100 sends an AV stream, into which
streams of videos, voices, subtitles, and the like are
multiplexed, and a so-called broadcast stream, on which
5 data accompanying the AV stream and the like are
superimposed. The data accompanying the AV stream
includes markup languages such as HTML and BML, an
application described in a scripting language such as a
Java (registered trademark) script, an AIT (Application
10 Information Table) section constituted of information
for managing an application, and the like. Here, an
application that is broadcast by the broadcast facility
100 is referred to as a "broadcast application".
[0023] The application server 300 is capable of
15 being connected to the first network 200 and provides
an application, which is processed together with the
broadcast stream, to the information processing
apparatus 700 via the first network 200. Here, the
application processed together with the broadcast
20 stream includes a broadcast-linking-type application
that is associated with broadcast content and a
broadcast-unlinking-type application that is not
associated with the broadcast content. The broadcastlinking-
type application is an application capable of
25 being presented by acquiring various resources such as
a program and data from broadcast. On the other hand,
SP343262WO00
11
the broadcast-unlinking-type application is not
associated with the broadcast content and thus is an
application that does not access a broadcast resource.
[0024] The XML-AIT server 400 is capable of being
5 connected to the first network 200 and delivers an XML
(Extensible Markup Language)-AIT for managing an
application provided from the application server 300 to
the information processing apparatus 700 via the first
network 200.
10 [0025] It should be noted that the application
server 300 and the XML-AIT server 400 may be one
server.
[0026] The edge router 500 is a router for
connecting the first network 200 and the second network
15 600. The second network 600 may be wired or wireless.
[0027] The information processing apparatus 700 is,
for example, a personal computer, a mobile phone, a
smartphone, a television apparatus, a game device, a
tablet terminal, an audio-video reproduction device, or
20 the like, but a specific product form is not
determined.
The information processing apparatus 700 receives
the digital broadcast signal from the broadcast
facility 100 and modulates the digital broadcast signal
25 to acquire a transport stream. The information
processing apparatus 700 can separate a broadcast
SP343262WO00
12
stream from this transport stream and decode the
broadcast stream to be output to a display unit (not
shown) and a speaker unit (not shown), or a recording
apparatus (not shown) connected to the information
5 processing apparatus 700.
[0028] It should be noted that each of the display
unit, the speaker unit, and the recording apparatus may
be incorporated in the information processing apparatus
700 or may be connected, as devices independent from
10 each other, to the information processing apparatus 700
directly or via the second network 600. Alternatively,
a device (not shown) including the display unit and the
speaker unit may be connected to the information
processing apparatus 700 directly or via the second
15 network 600.
[0029] Further, the information processing apparatus
700 can extract an application and PSI/SI (Program
Specific Information/Service Information) including the
AIT section from the acquired transport stream and
20 interpret the AIT section to perform control of the
application. In the case where the application is a
visible application, the information processing
apparatus 700 can combine a video signal generated by
the execution of this application with video and
25 subtitle signals of the broadcast content described
above to be output to the display unit.
SP343262WO00
13
[0030] Furthermore, the information processing
apparatus 700 can acquire an application from the
application server 300 via the first network 200, the
edge router 500, and the second network 600. Similarly,
5 the information processing apparatus 700 can acquire a
file of the XML-AIT from the XML-AIT server 400. The
information processing apparatus 700 can interpret the
acquired XML-AIT to perform control on the application
acquired from the application server 300 or the
10 application acquired via the broadcast.
[0031] [Application]
Here, the application will be described. The
application is provided from the broadcast facility 100
and the application server 300 to the information
15 processing apparatus 700. The application is
constituted of, for example, an HTML (Hyper Text Markup
Language) document, a BML (Broadcast Markup Language)
document, an MHEG (Multimedia and Hypermedia
information coding) document, a Java (registered
20 trademark) script, a still-image file, and a movingimage
file.
[0032] The application may be visible or invisible.
A visible application is an application whose state can
be seen by a user through a screen. An invisible
25 application is an application whose state cannot be
seen by the user through the screen. For example, an
SP343262WO00
14
application used when a browser is being activated in a
transparent state that is invisible to the user, an
application to record a viewing time or information for
specifying broadcast content viewed in the information
5 processing apparatus and to deliver such viewing time
and information to a specific server for the purpose of
a rating survey or the like, and the like are
conceived.
[0033] Further, the application may be a bi10
directional-type application capable of changing
presented information or function according to an
operation of the user of the information processing
apparatus 700 or may be an application for unidirectionally
presenting information to the user.
15 Furthermore, the application includes a broadcastlinking-
type application that is linked with the
broadcast content and a broadcast-unlinking-type
application that is not linked with the broadcast
content.
20 [0034] [Data Structures of AIT Section and XML-AIT]
Here, the data structure of the AIT transmitted as
the AIT section from the broadcast facility 100 and the
data structure of the XML-AIT provided from the
application server 300 will be described. It should be
25 noted that when this specification describes "AIT"
simply, it means the AIT transmitted as the AIT section
SP343262WO00
15
from the broadcast facility 100.
[0035] Fig. 2 is a diagram showing the data
structure of the AIT of this embodiment.
The AIT is a table in which various types of
5 information on applications, application control codes
for controlling applications, and the like are stored.
Specifically, the AIT stores a table ID, a section
syntax indicator, a section length, an application
form, a version number, a current next indicator, a
10 section number, a last section number, a common
descriptor loop length, an application information loop
length, an application identifier, an application
control code 11, an application descriptor loop length,
an application descriptor, and the like.
15 [0036] Fig. 3 is a diagram showing the data
structure of the XML-AIT of this embodiment.
The XML-AIT stores, for each application, an
application name, an application identifier, an
application descriptor, an application type, an
20 application control code 21, an application visibility,
a flag indicating validity in only a current service,
an application priority, an application version, a
version conforming to a platform profile, an icon, a
storage function capability, a transport protocol
25 descriptor, an application location descriptor, an
application boundary descriptor, an application
SP343262WO00
16
specific descriptor, an application usage descriptor,
an application mode descriptor 22, an application hash
descriptor 23, and the like.
[0037] An electronic signature for detecting a
5 falsification is attached to the XML-AIT. As the
electronic signature, for example, an XML signature is
used. The form of the XML signature may be any of a
detached signature that is independent from the XMLAIT,
an enveloping signature having the form containing
10 the XML-AIT, and an enveloped signature having the form
contained in the XML-AIT. It should be noted that in
order to suppress the influence on the format of the
XML-AIT, it may be desirable to adopt the detached
signature.
15 [0038] An application controller 708 of the
information processing apparatus 700 validates the XML
signature according to a procedure of a core validation
including a reference validation and a signature
validation.
20 The reference validation is a method of applying a
normalization transformation process (Transform) and a
digest calculation algorithm (DigestMethod) to a
resource (XML-AIT) and thus validating a digest value
(DigestValue) of a reference (Reference). When a result
25 obtained by the reference validation and a registered
digest value (DigestValue) are compared with each other
SP343262WO00
17
and do not coincide with each other, the validation
fails.
The signature validation is a method of
serializing a signature information (SignatureInfo)
5 element by a normalization method designated by an XML
normalization algorithm (CanonicalizationMethod),
acquiring key data by using key information (KeyInfo)
and the like, and validating a signature by using a
method designated by a signature algorithm
10 (SignatureMethod).
[0039] In the above-mentioned data structure of the
XML-AIT, the application mode descriptor 22 and the
application hash descriptor 23 are information newly
implemented from the system according to the embodiment
15 of the present technology.
[0040] Fig. 4 is a diagram showing the data
structures of the application mode descriptor 22 and
the application hash descriptor 23.
The application mode descriptor 22 is constituted
20 of a descriptor tag for identifying the application
mode descriptor 22, a descriptor length, an application
mode indicating the mode of an application, and the
like.
[0041] The application mode is information for
25 controlling a function (API: Application Program
Interface) that is available to the application. As a
SP343262WO00
18
function whose use is limited depending on the
application, for example, a broadcast resource
presenting function of accessing and presenting various
broadcast resources such as broadcast programs and data
5 is exemplified. More specifically, the broadcastlinking-
type application is provided with a value of
the application mode, which is set so as to be capable
of using the broadcast resource presenting function,
and the broadcast-unlinking-type application that is
10 not related to (not linked with) broadcast is provided
with a value of the application mode, which is set so
as to be incapable of using the broadcast resource
presenting function. It should be noted that the
function of switching between availability and
15 unavailability depending on the application mode is not
limited to the broadcast resource presenting function.
[0042] Here, it is assumed that the application mode
that is set for the broadcast-linking-type application
is "mode 1" and the application mode that is set for
20 the broadcast-unlinking-type application is "mode 2".
In this assumption, the application mode can be
used as information for knowing whether the validation
of the electronic signature is required or not in the
information processing apparatus. That is, when the
25 application mode is the "mode 1", the information
processing apparatus determines that the validation of
SP343262WO00
19
the electronic signature is not required, and when the
application mode is the "mode 2", the information
processing apparatus determines that the validation of
the electronic signature is required. However, this is
5 merely one operation form, and it may be possible to
determine that the validation of the electronic
signature is also required for the broadcast-linkingtype
application.
[0043] The application hash descriptor 23 is
10 constituted of a descriptor tag, a descriptor length, a
hash algorithm indication a calculation method for a
hash value, a hash value length, a hash value, and the
like. The hash value is a hash value of the application
and a value generated from the substance of the
15 application by a predetermined hash function and the
like, and it can be said that the hash value is a value
that represents the application. The method of using
the hash value will be described later.
[0044] [Definition of Application Control Code]
20 The life cycle of the application is dynamically
controlled by the information processing apparatus 700
based on the application control codes 11 and 21 stored
in the AIT section and the XML-AIT, respectively.
Fig. 5 is a diagram showing the definitions of the
25 application control codes 11 and 21 stored in the AIT
section and the XML-AIT.
SP343262WO00
20
As shown in the figure, as the application control
codes, "AUTOSTART", "PRESENT", "DESTROY", "KILL",
"PREFETCH", "REMOTE", "DISABLED", and
"PLAYBACK_AUTOSTART" exist in the standard. The
5 definitions of those application control codes are as
follows.
[0045] The "AUTOSTART" is a code of an instruction
to automatically activate the application along with
the selection of a service. This is not applied to the
10 case where the application is already in execution.
The "PRESENT" is a code of an instruction to make
the application in an executable state while the
service is being selected. However, the target
application is not automatically activated along with
15 the selection of a service and is activated when an
activation instruction is received from the user.
The "DESTROY" is a code of an instruction to
permit the termination of the application.
The "KILL" is a code of an instruction to force20
quit the application.
The "PREFETCH" is a code of an instruction to
perform caching of the application.
The "REMOTE" is a code indicating an application
that cannot be acquired in the current transport
25 stream. Such an application can be acquired from a
different transport stream or cache to be used.
SP343262WO00
21
The "DISABLED" is a code indicating the
prohibition of the activation of the application.
The "PLAYBACK_AUTOSTART" is a code for activating
an application along with the reproduction of broadcast
5 content recorded in storage (recording apparatus).
[0046] [Configuration of First Information
Processing Apparatus]
Fig. 6 is a block diagram showing the
configuration of the information processing apparatus
10 700 of this embodiment.
The information processing apparatus 700 includes
a broadcast interface 701, a demultiplexer 702, an
output processing unit 703, a video decoder 704, a
voice decoder 705, a subtitle decoder 706, a
15 communication interface 707, and an application
controller 708 (controller).
[0047] The broadcast interface 701 includes an
antenna and a tuner and receives a signal of digital
broadcast whose channel is selected by the user using
20 those antenna and tuner. The broadcast interface 701
outputs a transport stream to the demultiplexer 702.
The transport stream is obtained by performing
demodulation processing or the like on the received
digital broadcast signal.
25 [0048] The demultiplexer 702 separates a stream
packet of the broadcast content, a packet of the
SP343262WO00
22
application, and a packet of the AIT section from the
transport stream. The demultiplexer 702 separates a
video ES (Elementary Stream), a voice ES, and a
subtitle ES from the stream packet of the broadcast
5 content. The demultiplexer 702 distributes the video ES
to the video decoder 704, the voice ES to the voice
decoder 705, the subtitle ES to the subtitle decoder
706, and the packet of the application and the packet
of the PSI/SI including the AIT section to the
10 application controller 708.
[0049] The video decoder 704 decodes the video ES to
generate a video signal and outputs the generated video
signal to the output processing unit 703. The voice
decoder 705 decodes the voice ES to generate a voice
15 signal and outputs the generated voice signal to the
output processing unit 703.
The subtitle decoder 706 decodes the subtitle ES
to generate a subtitle signal and outputs the generated
subtitle signal to the output processing unit 703.
20 [0050] The broadcast interface 701, the
demultiplexer 702, the output processing unit 703, the
video decoder 704, the voice decoder 705, and the
subtitle decoder 706 correspond to a broadcast content
processing unit that receives and processes the
25 broadcast content.
[0051] The communication interface 707 is an
SP343262WO00
23
interface for communicating with an external device via
the second network 600 such as a LAN. The communication
interface 707 may perform wireless or wired
communication.
5 [0052] The application controller 708 is a
controller that performs processing on the control of
the application.
[0053] The output processing unit 703 combines the
video signal from the video decoder 704, the voice
10 signal from the voice decoder 705, the subtitle signal
from the subtitle decoder 706, and the video signal,
the voice signal, and the like from the application
controller 708 with one another and outputs the
resultant signal to a recording apparatus (not shown),
15 and a display unit and a speaker unit (not shown),
which are connected to the information processing
apparatus 700.
[0054] A part or the whole of the configuration
including at least the application controller 708 of
20 the information processing apparatus 700 described
above can be provided by a computer including a CPU
(Central Processing Unit) and a memory and a program.
[0055] [Operation of Information Processing System
1]
25 Next, the operation of the information processing
system 1 of this embodiment will be described.
SP343262WO00
24
The operation will be described in the following
order.
1. Activation of Application by Using AIT Section
2. Activation of Application by Using XML-AIT
5 3. Activation of Application from Broadcast BML
Data
4. Activation of Broadcast-unlinking-type
Application
5. Activation of Broadcast-unlinking-type
10 Application from Application Launcher
6. Generation and Validation of Electronic
Signature and Hash Value
[0056] (1. Activation of Application by Using AIT
Section)
15 Fig. 7 is a diagram showing the operation example
of the activation of an application by using an AIT
section.
Fig. 8 is a flowchart of the operation example
shown in Fig. 7.
20 The information processing apparatus 700 receives
broadcast content from the broadcast facility 100 whose
channel is selected by the user by use of a remote
controller or the like and performs decoding processing
or the like on video data, voice data, subtitle data,
25 and the like to output the broadcast content to the
display unit and the speaker unit that are connected to
SP343262WO00
25
the information processing apparatus 700 (Step S101).
[0057] Specifically, the broadcast interface 701
receives a digital broadcast signal of the broadcast
content from the broadcast facility 100 whose channel
5 is selected by the user and outputs a transport stream
to the demultiplexer 702, the transport stream being
obtained by performing demodulation processing or the
like on the digital broadcast signal. The demultiplexer
702 separates a stream packet of the broadcast content
10 from the transport stream and further separates the
stream packet of the broadcast content into a video ES,
a voice ES, and a subtitle ES. The separated video ES,
voice ES, and subtitle ES are decoded in the video
decoder 704, the voice decoder 705, and the subtitle
15 decoder 706, respectively, and combined in the output
processing unit 703 to be output to the display unit
and the speaker unit.
[0058] In this example, at time T1, an AIT section
in which an AIT on a broadcast-linking-type application
20 App1 is stored is superimposed on the broadcast content
and transmitted from the broadcast facility 100. In
this AIT section, location information of the
broadcast-linking-type application App1 and an
application control code "AUTOSTART" instructing
25 activation are stored. Here, it is assumed that the
broadcast-linking-type application App1 is acquired
SP343262WO00
26
from the application server 300, and thus the location
information serves as information necessary for
acquiring the broadcast-linking-type application App1
from the application server 300 and is constituted of
5 communication protocol information such as HTTP
(Hypertext Transfer Protocol), a URL (Uniform Resource
Locator), and the like.
[0059] The demultiplexer 702 separates a packet of
the broadcast-linking-type application App1 and a
10 packet of the AIT section from the transport stream and
supplies the separated packets to the application
controller 708. When acquiring the AIT section (Step
S102), the application controller 708 analyzes the AIT
section (Step S103).
15 [0060] It should be noted that in this embodiment,
the validation of the electronic signature is not
required because a possibility that the AIT section is
falsified by a malicious third party is extremely low.
[0061] In this operation example, since the
20 "AUTOSTART" is designated as an application control
code for the AIT section, the application controller
708 accesses the application server 300 based on the
location information described in that AIT section to
acquire the broadcast-linking-type application App1 and
25 activates the broadcast-linking-type application App1
(N of Step S104, Y of Step S105, and Step S106). The
SP343262WO00
27
activated broadcast-linking-type application App1 is,
for example, visualized (presented) together with the
video of a broadcast program A displayed on the display
unit.
5 [0062] Subsequently, at time T2, it is assumed that
the update of the AIT section occurs. The application
controller 708 of the information processing apparatus
700 can be informed of the occurrence of the update of
the AIT section based on a version number in the data
10 structure of the AIT section. Here, it is assumed that
the application control code "DESTROY" or "KILL" that
instructs the termination of the broadcast-linking-type
application App1 and the application control code
"AUTOSTART" that instructs the activation of the next
15 broadcast-linking-type application App2 are described
in the updated AIT section.
[0063] When acquiring a new AIT section (Step S102),
the application controller 708 of the information
processing apparatus 700 terminates the broadcast20
linking-type application App1 according to the
application control code "DESTROY" or "KILL" for the
broadcast-linking-type application App1 that is
described in this AIT section (Y of Step S104 and End).
Further, the application controller 708 acquires a
25 broadcast-linking-type application App2 according to
the "AUTOSTART" that is stored in the AIT section as an
SP343262WO00
28
application control code for the broadcast-linking-type
application App2 (Y of Step S105 and S106) and
activates the broadcast-linking-type application App2
(Step S105). Consequently, the broadcast-linking-type
5 application App2 is presented together with the video
of the broadcast program A, instead of the broadcastlinking-
type application App1.
[0064] It should be noted that in the case where an
application control code other than the "AUTOSTART",
10 the "DESTROY", and the "KILL" is described in the
acquired AIT section, after the application controller
708 performs processing such as transferring the state
of the broadcast-linking-type application according to
that application control code (Step S107), the
15 application controller 708 waits for the next AIT
section.
[0065] In Fig. 7, although being displayed in an Lshaped
form while sharing the area with the video of
the broadcast program, each of the broadcast-linking20
type application App1 and the broadcast-linking-type
application App2 is not necessarily displayed
simultaneously with the video of the broadcast program
and may be displayed on the entire screen. Further, if
each of the broadcast-linking-type application App1 and
25 the broadcast-linking-type application App2 is
displayed while sharing the area with the video of the
SP343262WO00
29
broadcast program, each of the broadcast-linking-type
application App1 and the broadcast-linking-type
application App2 may be displayed to be separate from
the video of the broadcast program vertically or
5 horizontally. In the case where the application is
displayed on the entire screen, the video of the
broadcast program is not displayed, but also in this
state, the tuner of the broadcast interface 701 is in
the channel-selected state and the receiving state of
10 the broadcast stream including the AIT section is
continued.
[0066] As described above, as specific modes of a
service in which the broadcast-linking-type application
is switched by time and presented by the information
15 processing apparatus 700, for example, the following
modes are exemplified.
1. Application for providing, in the case where a
moving image showing the whole of a singer's concert is
transmitted as a main video through an AV stream, a
20 sub-video obtained by capturing the situation of the
concert from a different angle or zooming-in the singer
and information on the singer, character data on the
concert, and the like.
2. Application for providing voices and subtitles
25 of sports live in languages of various countries.
3. Application of audio description for explaining
SP343262WO00
30
the details of a video transmitted through an AV stream
by voice for a visually impaired person.
[0067] (2. Activation of Application by Using XMLAIT)
5 Fig. 9 is a diagram showing the operation example
of the activation of an application by using the XMLAIT.
Fig. 10 is a flowchart of the operation example
shown in Fig. 9.
10 [0068] The operation from the channel selection of
broadcast by an operation of a user using a remote
controller (Step S201) to the acquisition and
presentation of the broadcast-linking-type application
based on the AIT section (Step S208) is the same as in
15 "1. Activation of Application by Using AIT Section".
[0069] In this operation example, it is assumed a
case where a script containing a createApplication()
function and the like for causing the information
processing apparatus 700 to acquire the XML-AIT for a
20 broadcast-linking-type application App2 to be presented
next is incorporated in the broadcast-linking-type
application App1 being presented. In the
createApplication() function, information on a
communication protocol that is necessary to access the
25 XML-AIT for the broadcast-linking-type application
App2, location information of the XML-AIT, and the like
SP343262WO00
31
are described as parameters.
[0070] During the presentation of the broadcastlinking-
type application App1, when a predetermined
condition such as an instruction from the user or time
5 is established (Y of Step S209), the above-mentioned
script incorporated in the broadcast-linking-type
application App1 is executed, and thus the application
controller 708 of the information processing apparatus
700 acquires a new XML-AIT from the XML-AIT server 400
10 (Step S210) and analyzes the new XML-AIT (Step S211).
[0071] In this new XML-AIT, information on the
broadcast-linking-type application App1 being in
execution and information on a broadcast-linking-type
application App2 to be executed next are described.
15 Here, the application control code "DESTROY" or "KILL"
that instructs the termination of the broadcastlinking-
type application App1 and the application mode
"mode 1" are described as the information on the
broadcast-linking-type application App1, and the
20 application control code "AUTOSTART" that instructs the
activation of the broadcast-linking-type application
App2 and the application mode "mode 1" are described as
the information on that broadcast-linking-type
application App2. In other words, since each of the
25 applications App1 and App2 is a broadcast-linking-type
application, the application mode is set to the "mode
SP343262WO00
32
1".
[0072] Since the application mode of each of the
applications App1 and App2 is the "mode 1" in the
acquired XML-AIT, the application controller 708 does
5 not require the validation of the electronic signature
and starts control on the applications App1 and App2
according to the application control code described in
the XML-AIT.
[0073] That is, according to the application control
10 code "DESTROY" or "KILL" for the broadcast-linking-type
application App1 that is described in the XML-AIT, the
application controller 708 terminates the broadcastlinking-
type application App1. Furthermore, according
to the application control code "AUTOSTART" for the
15 broadcast-linking-type application App2 that is
described in the XML-AIT (Y of Step S212), the
application controller 708 acquires the broadcastlinking-
type application App2 from the application
server 300 based on the location information of the
20 broadcast-linking-type application App2 described in
that XML-AIT and activates the broadcast-linking-type
application App2 (Step S213). At that time, since the
application mode of the broadcast-linking-type
application App2 is set to the "mode 1", the
25 application controller 708 activates the broadcastlinking-
type application App2 in a mode capable of
SP343262WO00
33
using the broadcast resource presenting function and
the like.
[0074] (3. Activation of Application from Broadcast
BML Data)
5 Next, the operation in the case where the
application is activated from the broadcast BML data
will be described.
Fig. 11 is a diagram showing the operation example
in the case where an application is activated from the
10 broadcast BML data.
Fig. 12 is a flowchart of the operation example
shown in Fig. 11.
[0075] In this operation example, it is assumed a
case where a script for causing the information
15 processing apparatus 700 to acquire the XML-AIT for the
broadcast-linking-type application App1 is incorporated
in BML data broadcast. It should be noted that the data
broadcast is not limited to the BML data broadcast. For
example, data broadcast by another markup language
20 capable of handling multimedia, such as MHEG
(Multimedia and Hypermedia Experts Group), can also be
adopted.
[0076] The information processing apparatus 700
receives broadcast content from the broadcast facility
25 100 whose channel is selected by the user by use of a
remote controller or the like and performs decoding
SP343262WO00
34
processing or the like on video data, voice data,
subtitle data, and the like to output AV content
(broadcast program) to the display unit and the speaker
unit that are connected to the information processing
5 apparatus 700 (Step S301).
[0077] During the output of the AV content
(broadcast program), when an instruction to reproduce
the data broadcast is input by the user by use of the
remote controller or the like (Step S303), the BML data
10 broadcast transmitted accompanying the AV content
(broadcast program) being viewed is presented together
with the AV content (broadcast program) (Step S304).
[0078] During the presentation of the BML data
broadcast, when a predetermined condition such as an
15 instruction from the user or time is established (Y of
Step S305), the above-mentioned script incorporated in
the BML data broadcast is executed, and thus the
application controller 708 of the information
processing apparatus 700 acquires the XML-AIT for the
20 broadcast-linking-type application App1 from the XMLAIT
server 400 (Step S306) and analyzes the XML-AIT
(Step S307).
[0079] In this XML-AIT for the broadcast-linkingtype
application App1, the "AUTOSTART" is designated as
25 an application control code and the "mode 1" is
described as an application mode.
SP343262WO00
35
[0080] Since the application mode of the broadcastlinking-
type application App1 is the "mode 1", the
application controller 708 does not require the
validation of the electronic signature, accesses the
5 application server 300 based on the location
information described in that XML-AIT to acquire the
broadcast-linking-type application App1, and activates
the broadcast-linking-type application App1 (Y of Step
S308 and Step S309). At that time, since the
10 application mode of the broadcast-linking-type
application App1 is the "mode 1", the application
controller 708 activates the broadcast-linking-type
application App1 in a mode capable of using the
broadcast resource presenting function.
15 It should be noted that the determination on
whether the validation of the electronic signature is
required or not is not necessarily performed in only
the application mode. For example, in the case where
the acquired XML-AIT is one acquired based on a URL
20 described in a BML document that is less probably
falsified, it is determined that the validation of the
electronic signature is not required. Conversely, in
the case where the XML-AIT is one acquired via a
transmission system other than broadcast, such as an
25 application launcher to be described later, it is
determined that the validation of the electronic
SP343262WO00
36
signature is required.
[0081] After that, in the case where the application
control code "DESTROY" or "KILL" that instructs the
termination of the broadcast-linking-type application
5 App1 is described in the newly acquired XML-AIT, the
application controller 708 of the information
processing apparatus 700 terminates the broadcastlinking-
type application App1 according to this
application control code (Y of Step S302).
10 [0082] Further, in the case where an application
control code other than the "AUTOSTART", the "DESTROY",
and the "KILL" is described in the newly acquired XMLAIT,
after the application controller 708 of the
information processing apparatus 700 performs
15 processing such as transferring the state of the
broadcast-linking-type application App1 according to
that application control code (Step S310), the
application controller 708 waits for the next XML-AIT.
[0083] (4. Activation of Broadcast-unlinking-type
20 Application)
Next, the operation on the activation of a
broadcast-unlinking-type application will be described.
Fig. 13 is a diagram showing the operation example
in the case where after the broadcast-linking-type
25 application App1 is activated, a broadcast-unlinkingtype
application App3 is activated by the XML-AIT.
SP343262WO00
37
Figs. 14 and 15 are each a flowchart of the
operation example shown in Fig. 13.
[0084] The operation from the channel selection of
broadcast by an operation of a remote controller (Step
5 S401) to the acquisition and presentation of the
broadcast-linking-type application based on the AIT
section (Step S405) is the same as in "1. Activation of
Application by Using AIT Section".
[0085] In this operation example, it is assumed a
10 case where a script containing a createApplication()
function for causing the information processing
apparatus 700 to acquire the XML-AIT for the broadcastunlinking-
type application App3 is incorporated in the
broadcast-linking-type application App1.
15 [0086] During the presentation of the broadcastlinking-
type application App1, when a predetermined
condition such as an instruction from the user or time
is established (Y of Step S407), the above-mentioned
script incorporated in the broadcast-linking-type
20 application App1 is executed, and thus the application
controller 708 of the information processing apparatus
700 acquires the XML-AIT for the broadcast-unlinkingtype
application App3 from the XML-AIT server 400 and
analyzes the XML-AIT (Step S408).
25 [0087] Here, in general, the broadcast-unlinkingtype
application is provided by an application provider
SP343262WO00
38
that is different from a broadcaster. For that reason,
as an application mode, the "mode 2" is set for the
XML-AIT of the broadcast-unlinking-type application.
So, an electronic signature is normally supposed to be
5 attached to the XML-AIT, and when the XML-AIT is used
on the information processing apparatus 700 side, the
validation of the electronic signature is an
indispensable condition.
[0088] Further, in this XML-AIT, the application
10 control code "DESTROY" or "KILL" that instructs the
termination of the broadcast-linking-type application
App1 and the application mode "mode 1" are described as
the information on the broadcast-linking-type
application App1 being executed, and the application
15 control code "AUTOSTART" that instructs the activation
of the broadcast-unlinking-type application App3 and
the application mode "mode 2" are described as
information on the broadcast-unlinking-type application
App3 to be executed next. Furthermore, in this XML-AIT,
20 a hash value (first representative value) of the
broadcast-unlinking-type application App3 is described.
[0089] The application controller 708 of the
information processing apparatus 700 determines whether
an electronic signature is attached to the acquired
25 XML-AIT or not (Step S410). In the case where an
electronic signature is attached to the XML-AIT, the
SP343262WO00
39
application controller 708 determines that the
validation of the electronic signature is required and
validates the electronic signature (Step S411).
[0090] Alternatively, in the case where an
5 electronic signature is not attached to the XML-AIT (N
of Step S410), the application controller 708 checks
whether the application mode described in the XML-AIT
is the "mode 1" having a value of a mode in which the
validation of the electronic signature is not required
10 (Step S412). In the case where the application mode is
the "mode 1" in this check, it is determined that the
validation of the electronic signature is not required.
[0091] In the case where the validation of the
electronic signature fails, an error is displayed (Step
15 S423). In the case where the validation of the
electronic signature succeeds (Y of Step S411) or it is
determined that the validation of the electronic
signature is not required (Y of Step S412), the
application controller 708 determines whether the
20 application control code described in the XML-AIT is
the "AUTOSTART" or not (Step S413). In the case where
the application control code is the "AUTOSTART", the
application controller 708 determines whether the value
of the application mode and the hash value are
25 described in the XML-AIT or not (Steps S414 and S415).
In the case where the value of the application mode is
SP343262WO00
40
not set in the XML-AIT, an error is displayed (Step
S423). In the case where the value of the application
mode is described in the XML-AIT, the application
controller 708 holds the hash value (A) (first
5 representative value) described in the XML-AIT (Step
S416).
[0092] Next, the application controller 708 acquires
the broadcast-unlinking-type application App3 from the
application server 300 based on the location
10 information of the broadcast-unlinking-type application
App3 that is described in the XML-AIT and calculates a
hash value (B) (second representative value) of the
broadcast-unlinking-type application App3 by a hash
algorithm that indicates a method of calculating the
15 hash value described in the XML-AIT (Step S417).
[0093] Next, the application controller 708 compares
the hash value (A) with the hash value (B) (Step S418).
In the case where the hash value (A) coincides with the
hash value (B), since the application mode of the
20 broadcast-unlinking-type application App3 is the "mode
2", the application controller 708 activates the
broadcast-unlinking-type application App3 in a mode in
which the broadcast resource presenting function is
unavailable (Step S419). In the case where the hash
25 value (A) does not coincide with the hash value (B), an
error is displayed (Step S423). After that, according
SP343262WO00
41
to an application control code described in a new XMLAIT,
in addition to the control of the transfer of a
state or the termination of the broadcast-unlinkingtype
application App3, an operation of a remote
5 controller by the user and event processing by an event
message are performed (Steps S420, S421, and S422).
[0094] (5. Activation of Broadcast-unlinking-type
Application from Application Launcher)
Next, the operation in the case where the
10 broadcast-unlinking-type application is activated from
an application launcher will be described.
Fig. 16 is a diagram showing an operation example
in the case where the broadcast-unlinking-type
application is activated from the application launcher.
15 Fig. 17 is a flowchart of the operation example
shown in Fig. 16.
[0095] The information processing apparatus 700
displays an application launcher screen selected by the
user by use of a remote controller or the like. The
20 application launcher screen is achieved by a document
in HTML5 or the like presented by an HTML browser or a
so-called resident application, which is implemented in
the information processing apparatus 700. On the
application launcher screen, an application menu and
25 the like are displayed (Step S501). The user can select
an application desired to be presented by using a
SP343262WO00
42
remote controller, for example. In the individual menus
of the application, a script for causing the
information processing apparatus 700 to acquire an XMLAIT
for an application corresponding to the menu is
5 incorporated.
[0096] When an optional broadcast-unlinking-type
application App3 is selected by an operation of a user
using a remote controller on the application menu
displayed on the launcher screen (Step S502), the
10 above-mentioned script corresponding to that
application is executed, and thus the application
controller 708 of the information processing apparatus
700 acquires the XML-AIT for that application from the
XML-AIT server 400 and analyzes the XML-AIT (Step
15 S503).
[0097] Here, in general, the broadcast-unlinkingtype
application that can be selected from the
application launcher screen is provided by an
application provider that is different from a
20 broadcaster. For that reason, as an application mode,
the "mode 2" is set for the XML-AIT of the broadcastunlinking-
type application. So, an electronic signature
is normally supposed to be attached to the XML-AIT, and
when the XML-AIT is used on the information processing
25 apparatus 700 side, the validation of this electronic
signature is an indispensable condition.
SP343262WO00
43
[0098] Further, in this XML-AIT, the application
control code "AUTOSTART" that instructs the activation
of the broadcast-unlinking-type application App3 and
the application mode "mode 2" are described as
5 information on the broadcast-unlinking-type application
App3. Furthermore, in this XML-AIT, a hash value of the
broadcast-unlinking-type application App3 is described.
[0099] The application controller 708 of the
information processing apparatus 700 determines whether
10 an electronic signature is attached to the acquired
XML-AIT or not (Step S504). In the case where an
electronic signature is attached to the XML-AIT, the
application controller 708 determines that the
validation of the electronic signature is required.
15 Subsequent operations are the same as those in "4.
Activation of Broadcast-Unlinking-Type Application".
[0100] (6. Generation and Validation of Electronic
Signature and Hash Value)
Next, the generation and validation of the
20 electronic signature and the hash value will be
described.
[0101] The XML-AIT server 400 and the application
server 300 may be one server or separate servers. Here,
the XML-AIT server 400 and the application server 300
25 are collectively referred to as "server". The server is
a device having a configuration of a typical computer.
SP343262WO00
44
So, the server is constituted of a CPU, a main memory,
a storage device such as a HDD, input devices such as a
mouse and a keyboard, a display unit such as a liquid
crystal display, and the like. The main memory and the
5 storage device store an OS (Operating System), software
such as an application program for the server, an
application provided to the information processing
apparatus 700 (broadcast-linking-type application,
broadcast-unlinking-type application), an XML-AIT file
10 for each application, a signature generation key, and
the like. As the application program for the server, a
program for generating an electronic signature and a
hash value, and the like are included.
[0102] Fig. 18 is a diagram for describing a method
15 of generating an electronic signature and a hash value
in the server and a method of validating the electronic
signature and the hash value in the information
processing apparatus 700.
The server includes an AIT generation unit 350.
20 The AIT generation unit 350 is specifically achieved by
a program for generating an electronic signature and a
hash value, which is loaded to the main memory, and a
CPU that executes the program.
[0103] The AIT generation unit 350 performs the
25 following processing.
1. The AIT generation unit 350 uses a
SP343262WO00
45
predetermined hash calculator 352 to calculate a hash
value 353 from the substance (binary code) of the
application 351. As a hash algorithm, for example, an
SHA-1, an SHA-2, and the like that are standardized in
5 FIPS PUB 180-1 and 180-2 are exemplified.
[0104] 2. The AIT generation unit 350 combines (354)
the hash value 353 with an XML-AIT 362 of the
application 351 and generates a hash-value-added XMLAIT
355.
10 [0105] 3. The AIT generation unit 350 uses a hash
function for a signature to generate a digest for the
hash-value-added XML-AIT 355 in the signature generator
356, encrypts the digest with a signature generation
key (secret key) 357, and generates an XML signature
15 358.
[0106] 4. The AIT generation unit 350 adds (359) the
XML signature 358 to the hash-value-added XML-AIT 355
and generates an electronic-signature-added XML-AIT
360.
20 5. Subsequently, the electronic-signature-added
XML-AIT 360 is provided to the information processing
apparatus 700.
[0107] The controller 708 of the information
processing apparatus 700 performs the following
25 processing.
1. The controller 708 extracts an XML signature
SP343262WO00
46
from the electronic-signature-added XML-AIT 360
acquired from the server in the signature generator 753
and validates the XML signature with a signature
validation key (public key) 754 to acquire a signature
5 validation result 755.
[0108] 2. In the case of succeeding in the
validation of the XML signature, the controller 708
uses a predetermined hash calculator 751 (hash
function) to calculate a hash value 752 from the
10 substance (binary code) of the application 351 acquired
from the server. The hash function used here has to be
the same as that of the hash calculator 352 of the AIT
generation unit 350 of the server. So, the controller
708 checks the hash algorithm described in the
15 electronic-signature-added XML-AIT 360 acquired from
the server and determines whether that hash algorithm
has a consistency with the hash algorithm of the hash
calculator 751 (hash function). If the inconsistency of
the hash algorithm is determined, the controller 708
20 switches the hash calculator 751 (hash function) to
cause the hash algorithm to be consistent with that of
the hash calculator 352 of the AIT generation unit 350
of the server.
[0109] 3. The controller 708 uses a hash comparator
25 756 to compare the hash value 353 extracted from the
electronic-signature-added XML-AIT 360 acquired from
SP343262WO00
47
the server with the hash value 752 and obtains a result
of consistency/inconsistency 757.
[0110] 4. In the case of failing in the validation
of the XML signature or in the case of succeeding in
5 the validation of the XML signature but causing
inconsistency between the hash value 353 and the hash
value 752, the processing is considered to be an error
and terminated.
[0111] [Effects etc. of Embodiment]
10 In this embodiment, the following effects are
obtained.
1. For example, in the service in which an XML-AIT
and an application are transmitted through a
communication path such as an Internet network, the
15 XML-AIT and the application can be transmitted to the
information processing apparatus 700 while keeping
their reliability. This can prevent a falsification of
the XML-AIT and the application by a malicious third
party and allows the application to be safely used in
20 the information processing apparatus 700.
2. More specifically, since the hash value of the
application is described in the XML-AIT and provided to
the information processing apparatus 700, the
information processing apparatus 700 can determine the
25 correctness of the application by comparing the hash
value calculated for the application acquired from the
SP343262WO00
48
application server 300 with the hash value transmitted
by the XML-AIT.
3. Further, since the electronic signature is
attached to the XML-AIT containing the hash value and
5 the information processing apparatus 700 cannot acquire
the application if the information processing apparatus
700 does not succeed in the validation of this
electronic signature, it is possible to prevent an
unauthorized application from being executed in the
10 information processing apparatus 700 by the
falsification of the XML-AIT and the like.
4. Since the application mode can be described in
the XML-AIT, the function available to the application
can be controlled. Furthermore, the information
15 processing apparatus 700 can uniquely know whether the
validation of the electronic signature is required or
not based on the application mode and the like
described in the XML-AIT. Consequently, for example,
the validation of the electronic signature can be
20 skipped regarding the XML-AIT for an application
produced by a broadcaster, and thus the improvement in
total speed can be expected.
[0112]
It should be noted that although the hash function
25 is used to calculate the hash value of the application
in the above embodiment, as its modified example, a
SP343262WO00
49
method of using HMAC (Keyed-Hashing for Message
Authentication) calculators 352A and 751A is
exemplified as shown in Fig. 19. The HMAC calculators
352A and 751A use hash functions of an SHA-1 and an
5 SHA-2, and the like in combination with secret shared
keys (hash key) 361A and 758A to calculate hash values
353A and 752A. Other processing is the same as that in
the above embodiment.
[0113] Further, in the embodiment described above,
10 the case where the hash value is used as a
representative value of the application has been
described. However, a method other than the hash
calculation may be adopted as long as the value can be
obtained from a binary code of the application by a
15 predetermined calculation.
[0114] The embodiment in which the standard of the
HbbTV is assumed has been described, but the present
technology is not limited to the assumption of the
standard of the HbbTV.
20 [0115] In addition to the above, the present
technology is not limited to the above-mentioned
embodiment and can be variously modified without
departing from the gist of the present invention as a
matter of course.
25 Description of Symbols
[0116] 1 information processing system
SP343262WO00
50
11, 21 application control code
22 application mode descriptor
23 application hash descriptor
100 broadcast facility
5 200 first network
300 application server
350 AIT generation unit
351 application
352 hash calculator
10 353 hash value
355 AIT
356 signature generator
357 signature generation key
358 XML signature
15 360 AIT
400 AIT server
600 second network
700 information processing apparatus
701 broadcast interface
20 702 demultiplexer
703 output processing unit
704 video decoder
705 voice decoder
706 subtitle decoder
25 707 communication interface
708 application controller
SP343262WO00
51
751 hash calculator
752 hash value
753 signature generator
754 signature validation key
5 755 signature validation result
756 hash comparator
SP343262WO00
52
Claims
[1] An information processing apparatus, comprising:
a broadcast content processing unit that receives
and processes broadcast content; and
5 a controller that is capable of acquiring an
application information table to which an electronic
signature is attached and in which location information
necessary for acquiring an application processed
together with the broadcast content is stored,
10 validating the electronic signature, and acquiring the
application based on the location information in a case
of succeeding at least in the validation.
[2] The information processing apparatus according to
claim 1, wherein
15 in the application information table, a first
representative value that is calculated from the
application by a predetermined calculation and
represents the application is stored, and
the controller calculates a second representative
20 value for the acquired application, the second
representative value representing the application by
the predetermined calculation, and compares the first
representative value and the second representative
value to validate the application.
25 [3] The information processing apparatus according to
claim 2, wherein
SP343262WO00
53
in the application information table, mode
information is stored, and
the controller controls a function available to
the application based on the mode information described
5 in the application information table.
[4] The information processing apparatus according to
claim 3, wherein
the controller determines whether the validation
of the electronic signature is required or not based on
10 the mode information described in the application
information table.
[5] A server apparatus, comprising
a generation unit that generates an application
information table to which an electronic signature is
15 attached and in which location information necessary
for causing an information processing apparatus to
acquire an application processed together with
broadcast content is stored, and responds in response
to an acquisition request for the application
20 information table from the information processing
apparatus.
[6] The server apparatus according to claim 5, wherein
the generation unit adds a first representative
value to the application information table, the first
25 representative value being calculated from the
application by a predetermined calculation and
SP343262WO00
54
representing the application.
[7] The server apparatus according to claim 6, wherein
the generation unit adds mode information to the
application information table, the mode information
5 controlling a function available to the application.
[8] An information processing method, comprising: by a
controller,
acquiring an application information table to
which an electronic signature is attached and in which
10 location information necessary for acquiring an
application processed together with broadcast content
is stored;
validating the electronic signature; and
acquiring the application based on the location
15 information in a case of succeeding at least in the
validation.
[9] A server processing method, comprising:
generating, by a generation unit, an application
information table to which an electronic signature is
20 attached and in which location information necessary
for causing an information processing apparatus to
acquire an application processed together with
broadcast content is stored; and
responding in response to an acquisition request
25 for the application information table from the
information processing apparatus.
SP343262WO00
55
[10] A program causing a computer to function as:
a broadcast content processing unit that receives
and processes broadcast content; and
a controller that is capable of acquiring an
5 application information table to which an electronic
signature is attached and in which location information
necessary for acquiring an application processed
together with the broadcast content is stored,
validating the electronic signature, and acquiring the
10 application based on the location information in a case
of succeeding at least in the validation.