Recording system, storage device, image receiving device, and program

Abstract

To provide a recording system, a storage device, an image receiving device, and a program capable of protecting recorded image data even if power is interrupted during transfer.SOLUTION: In a recording system, when an image receiving device 10 capable of receiving television programs transfers recorded image data from a first storage device 20 to a second storage device 30, the image receiving device sets a predetermined password for the second storage device 30. When the second storage device 30 is powered off, or disconnected from the image receiving device 10, the second storage device is locked with the set password.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present invention relates to a recording system, a storage device, an image receiving apparatus, and a program. [Background technology]

[0002] When moving content (Move), from the viewpoint of copyright protection of the content, it is necessary to make the content unavailable at the destination until the transfer from the source to the destination is completed.

[0003] Patent document 1 discloses a technology in which encrypted content is transmitted from a source to a destination, and when the transmission is complete, the source and destination share an encryption key to validate the content at the destination. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] JP 2007-272862 A Summary of the Invention [Problem to be solved by the invention]

[0005] However, the above conventional technology does not take into consideration the case where the power of the storage device storing the recorded data, etc. is turned off during the movement of the recorded data, etc. In other words, the conventional technology does not guarantee operation when the power is interrupted during the execution of the process of verifying a file after transfer, for example.

[0006] The present invention has been made in consideration of the above-mentioned circumstances, and one of its objects is to provide a recording system, a storage device, an image receiving apparatus, and a program that can protect recorded data even if the power is interrupted during transfer. [Means for solving the problem]

[0007] One aspect of the present invention which solves the problems of the above-mentioned conventional examples is a recording system including a receiving device capable of receiving television programs, a first storage device, and a second storage device, wherein when the receiving device moves recorded data from the first storage device to the second storage device, it sets a predetermined password in a recording section of the second storage device in which the recorded data is recorded, and when the second storage device is powered off or disconnected from the receiving device, it restricts the reading of recorded data from the recording section using the set password.

[0008] In addition, the recording data moved to the second storage device may be set as unreadable data during the movement of the recording data. Furthermore, the recording unit may be a bare drive, and the reading of the recording data may be restricted by locking with an ATA password.

[0009] Another aspect of this embodiment is a storage device connected to a receiving device capable of receiving television programs, the storage device having a means for accepting recorded data of the received television program from a source storage device, a means for accepting the setting of a predetermined password when accepting the recorded data, and a means for accepting the password setting and setting the accepted password in a recording unit that records the recorded data, and when a password is set in the recording unit, when the power is turned off or the recording unit is disconnected from the receiving device, the set password restricts the reading of the recorded data from the recording unit.

[0010] Yet another aspect of this embodiment is a receiving device capable of receiving television programs, which is connected to a first storage device and a second storage device capable of recording recorded data of the received television programs, and when the recorded data is moved from the first storage device to the second storage device, a predetermined password is set for a recording section of the second storage device in which the recorded data is recorded, and when the second storage device is powered off or disconnected from the receiving device, the password is used to restrict reading of the recorded data from the recording section of the second storage device.

[0011] Yet another aspect of the present invention is a program that causes a receiving device capable of receiving television programs, the receiving device being connected to a first storage device and a second storage device capable of recording recorded data of the received television programs, to function as: means for copying and moving the recorded data from the first storage device to the second storage device; and means for setting a predetermined password for a recording section of the second storage device in which the recorded data is recorded when moving the recorded data from the first storage device to the second storage device, and for restricting reading of the recorded data from the recording section of the second storage device using the password when the second storage device is powered off or disconnected from the receiving device.

[0012] According to each aspect of the present invention, even if power is interrupted during transfer, the recorded data is protected because an ATA password lock or the like is set on the second storage device to which the data is transferred. Effect of the Invention

[0013] According to the present invention, recorded data is protected even if the power is interrupted during transfer. [Brief description of the drawings]

[0014] [Figure 1] 1 is a configuration block diagram illustrating an example of a data recording system according to an embodiment of the present invention. [Diagram 2] FIG. 1 is a functional block diagram illustrating an example of an image receiving device according to an embodiment of the present invention. [Diagram 3] 3 is an explanatory diagram illustrating an example of an information table used in the data recording system according to the embodiment of the present invention. FIG. [Figure 4] 4 is a flowchart illustrating an example of the operation of the data recording system according to the embodiment of the present invention. [Diagram 5] 4 is a flowchart illustrating an example of a migration process of the data recording system according to the embodiment of the present invention. [Figure 6] 5 is a flowchart illustrating an example of a transfer process in the data recording system according to the embodiment of the present invention. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0015] The following describes an embodiment of the present invention with reference to the drawings. As shown in Fig. 1, a data recording system 1 according to the embodiment of the present invention includes a receiving device 10, a first storage device 20 for recording recorded data, and a second storage device 30.

[0016] Here, the first and second storage devices 20, 30 are information recording devices such as hard disk drives and SSD (Solid State Disk) drives, and at least the second storage device 30 includes a bear drive that functions as a recording unit for recording video data, etc. At least the second storage device 30 is assumed to be compatible with the ATA password lock function. Note that the ATA password lock function is widely known, so a description thereof will be omitted here.

[0017] The receiving device 10 is a receiving device capable of receiving television programs, and as shown in FIG. 1, includes a control unit 11, a memory unit 12, an operation unit 13, an output unit 14, an interface unit 15, and a receiving circuit unit 16.

[0018] Here, the control unit 11 is a program-controlled device such as a CPU, and operates according to a program stored in the storage unit 12. In one example of the present embodiment, the control unit 11 executes a program of the Android (registered trademark) OS, and executes various application programs under the management of this OS.

[0019] Specifically, the control unit 11 of this embodiment performs processing such as setting the file system for the storage device connected via the interface unit 15 and storing the recorded data (a data file in which a received program is recorded). In this embodiment, the control unit 11 executes a program stored in the storage unit 12 to acquire product-related information related to the manufacturer of the image receiving device 10. The control unit 11 also refers to the acquired product-related information to execute a predetermined process including a process of moving the recorded data from one storage device (first storage device) to another storage device (second storage device). When performing a process of moving the recorded data, the control unit 11 also sets an ATA password lock using a predetermined ATA password for the second storage device 30. As a result, when the power supply of the second storage device 30 is turned off or the connection from the image receiving device is released, the ATA password lock is applied, and the device is controlled not to accept a request to read the recorded data until the predetermined ATA password is input again. The detailed operation of the control unit 11 will be described later.

[0020] The storage unit 12 is a memory device or the like, and holds a program executed by the control unit 11. This program may be provided by being stored in a computer-readable and non-transitory recording medium and copied to the storage unit 12, or may be received via a network or the like and stored in the storage unit 12. The storage unit 12 also operates as a work memory for the control unit 11.

[0021] The operation unit 13 accepts operations by a user. The output unit 14 follows instructions from the control unit 11 and outputs images and sounds of a received program.

[0022] The interface unit 15 includes, for example, a USB (Universal Serial Bus) interface, and is connected to the first storage device 20 and the second storage device 30. The interface unit 15 may also include a network interface, and transmits and receives information via a network according to instructions input from the control unit 11.

[0023] The image receiving circuit section 16 includes a tuner circuit for receiving a television program, etc. In the present embodiment, the image receiving circuit section 16 outputs the video and audio of the received television program to the output section 14 and also to the control section 11 for processing such as generating recorded data.

[0024] Next, the operation of the control unit 11 of the image receiving device of this embodiment will be described. In this embodiment, the control unit 11 executes a program stored in the storage unit 12, and thereby functionally includes an information acquisition unit 21, a movement processing unit 22, and a lock processing unit 23, as exemplified in FIG.

[0025] The information acquisition unit 21 acquires product-related information related to the manufacturer of the image receiving device 10. The product-related information may include information that identifies the manufacturer of the image receiving device 10, as well as information that indicates the model of the image receiving device 10.

[0026] The movement processing unit 22 moves the recording data from the first storage device 20 to the second storage device 30 in accordance with an instruction input by a user. Specifically, the movement processing unit 22 executes a sector copy (movement process) from the first storage device 20 to the second storage device 30.

[0027] In one example of this embodiment, the movement processing unit 22 may copy each sector in a predetermined order, for example, in the order of sector numbers, in the same way as in a general sector copy. In this case, the movement processing unit 22 records the last successfully copied sector number in a storage area (such as a system storage area or non-volatile memory) that is not erased by rebooting.

[0028] Furthermore, the movement processing unit 22 may copy sectors in a predetermined unit rather than in the order of sector numbers for partitions that hold recorded data and partitions that hold corresponding management data (data including information such as the file name of the recorded data, a list of sectors in which the data constituting the file is stored, and access rights for the file). Here, the unit of copying may be, for example, a predetermined amount of data (sector size, buffer size, etc.), or it may be in units of one minute of recording time, or in units of one piece of recorded data. In the following, the unit of data copied at one time when copying data is referred to as a block for convenience.

[0029] The movement processing unit 22 performs a process of identifying a sector in which data constituting each block of data stored in the first storage device 20 is held, and writing the contents of the sector to a corresponding sector in the second storage device 30. That is, the movement processing unit 22 refers to the management data, obtains a list of information identifying the sectors holding the blocks, and generates a list of information (such as sector numbers) identifying the sectors that indicate the order of copying. The movement processing unit 22 records this list in a storage area that is not erased by rebooting (such as a system storage area or non-volatile memory).

[0030] Then, the movement processing unit 22 reads data in sectors from the first storage device 20 in the order shown in this list, and writes it to the corresponding sectors in the second storage device 30. Each time writing is completed, the movement processing unit 22 deletes information identifying the sector for which writing has been completed from the list. Also, in this case, when copying of the sector of the management data corresponding to the block to be copied is completed, the movement processing unit 22 sets the access authority data represented by the management data to a "read-unavailable" state. However, this is only one example, and as another example, when starting the movement process to the second storage device 30, the entire contents of the second storage device 30 may be set to "read-unavailable".

[0031] Then, after the copying of the corresponding block is completed (which may be immediately after the copying of all sectors that hold the data constituting the corresponding block of recorded data is completed, or after the copying of all sectors in which data is held, out of all sectors of the first storage device 20, is completed), the movement processing unit 22 sets the access authority data of the corresponding management data to a "readable" state.

[0032] In this example, sectors of blocks that do not contain data are not copied.

[0033] In this embodiment, in the sector copy process, the last copied sector number (when copying is performed in the order of sector numbers) or a list of information identifying the sector is recorded in a storage area (such as a system storage area or non-volatile memory) that is not erased by reboot. When the movement processing unit 22 receives an instruction to resume processing from the lock processing unit 23 (described later), if the last copied sector number is held in the storage area, the movement processing unit 22 resumes the copying process from the sector with the next sector number to the sector number.

[0034] In addition, when the movement processing unit 22 receives an instruction to resume processing from the lock processing unit 23 described later, if a list of information identifying a sector is held in the above-mentioned memory area, the movement processing unit 22 resumes the copying process from the sector identified by the information at the top of the list.

[0035] After completing the sector copy, the movement processing unit 22 verifies the file system of the second storage device 30. This verification may be a general file system verification process, for example, a process executed by the fsck command in Linux (registered trademark).

[0036] If the file system verification is successful, the move processing unit 22 performs a process of making the recorded data stored in the first storage device 20 unplayable. In this embodiment, the move processing unit 22 executes a process of making the recorded data stored in the first storage device 20 unplayable, using a method that is determined in advance according to the product-related information acquired by the information acquisition unit 21.

[0037] As an example here, it is assumed that the memory unit 12 of the image receiving device 10 of this embodiment stores an information table (hereinafter referred to as processing information) that records the file system type (T), information regarding partitions (N), and information regarding post-processing (P) in association with product-related information (A), as illustrated in FIG. 3.

[0038] Here, the information about the partitions includes, for example, information about the partition structure, and information indicating in which partitions the recording data and management data (such as data recording the storage positions of blocks) are to be stored, respectively.

[0039] From this processing information, the move processing unit 22 acquires the type of file system (T), information about partitions (N), and information about post-processing (P) recorded in association with the product-related information acquired by the information acquisition unit 21. Then, the move processing unit 22 checks whether the partition in which the recorded data is stored and the partition in which the management data is stored, which are indicated by the acquired information about partitions, are different partitions, and if they are different partitions, the move processing unit 22 deletes the partition containing the management data, making it impossible to play back the recorded data.

[0040] The method of deletion here may be, for example, a method of overwriting the partition with predetermined data such as "00" or "FF" or random data (hereinafter referred to as a complete deletion method). For example, a method stipulated in the UK HMG Infosec Standard 5, Baseline Standard is known as such a process.

[0041] Furthermore, if the partition in which the recording data is to be stored and the partition in which the management data is to be stored, as indicated by the acquired information on the partition, are not different partitions, the movement processing unit 22 deletes the data in the partition in which the recording data and the management data are stored, for example, by a complete erasure method, thereby making it impossible to play back the recording data.

[0042] Furthermore, if the acquired information regarding the partition includes information indicating the existence of a partition that is backing up data including management data, the movement processing unit 22 also deletes the contents of the partition that is backing up data including the management data by a complete erasure method.

[0043] Furthermore, when the product-related information acquired by the information acquisition unit 21 satisfies a predetermined condition, the movement processing unit 22 may execute a process of expanding the recording area of ​​the video recording data in the second storage device 30 in a predetermined manner according to the product-related information.

[0044] When the movement processing unit 22 executes the movement processing, specifically, immediately before the movement processing unit 22 starts to execute the movement processing, the lock processing unit 23 issues a SECURITY SET PASSWORD command to the second storage device 30 to set an ATA password lock using a specific, predetermined ATA password, and executes the movement processing of the recording data in an unlocked state in which the disk can be accessed.

[0045] As a result, when the second storage device 30 is powered off or disconnected from the image receiving device 10 during the transfer process of the recorded data (when the connection is released by pulling out the USB cable, etc.), the second storage device 30 goes from an unlocked state to a locked state, and even if the second storage device 30 is connected to another device, reading of the recorded data is restricted until the above-mentioned predetermined ATA password is input again (the state becomes ATA password locked). The ATA password lock is set in the bare drive, which is the recording unit. Therefore, even if the bare drive, which is the recording unit, is pulled out from the second storage device 30 and put into the case of another storage device and used as the recording unit of the other storage device, the locked state is maintained. This makes it possible to prevent the data being removed during the data transfer from being used illegally.

[0046] Furthermore, when the connected second storage device 30 is in an ATA password locked state, the lock processing unit 23 releases the ATA password lock using the above-mentioned specified ATA password, and issues an instruction to resume the process of transferring the recorded data.

[0047] In addition, when the movement processing unit 22 completes the movement processing, or when the movement processing unit 22 completes disabling playback of the recorded data in the first storage device 20, the lock processing unit 23 disables the ATA password lock by, for example, issuing a SECURITY DISABLE PASSWORD command to the second storage device 30.

[0048] As a result, even if the second storage device 30 is powered off or disconnected from the image receiving device 10 after the recording data transfer process or during the transfer process and the recording data stored in the first storage device 20 becomes unplayable, the recording data can be accessed by turning the power on again or reconnecting, without entering an ATA password.

[0049] [Operation] The data recording system 1 of this embodiment operates as follows. The receiver 10 generates recording data based on the video and audio of a television program received by its receiver circuit section 16, and stores the data in the first storage device 20 according to a user's instruction. At this time, the second storage device 30 does not necessarily have to be connected.

[0050] The image receiving device 10 stores the recording data in the first storage device 20 in a method defined by the manufacturer of the image receiving device 10. As an example, one manufacturer records the recording data in a partition of the Microsoft NTFS file system, while another manufacturer records the recording data in a partition of the ext4 file system used by Linux (registered trademark).

[0051] In the following example, it is assumed that the memory unit 12 of the image receiving device 10 stores processing information that records the file system type (T), information about partitions (N), information about post-processing (P), and the like, in association with product-related information (A) including manufacturer information, as illustrated in FIG. 3.

[0052] When a user replaces the first storage device 20 with the second storage device 30 due to insufficient capacity or the like, connects the second storage device 30 to the image receiving device 10 and starts a program for migration processing, the image receiving device 10 operates as follows.

[0053] First, the image receiving device 10 checks whether the second storage device 30 has suspended migration processing (S1), and if the second storage device 30 has not suspended migration processing (S1: No), starts normal migration processing (S2). The details of this normal migration processing will be described later.

[0054] On the other hand, if the second storage device 30 is in the middle of migration (S1: Yes), it is checked whether the first storage device 20 is connected (S3), and if the first storage device 20 is connected (S3: Yes), the migration process is resumed (S4). This process will also be described later. Note that if the first storage device 20 is not connected in process S3 (S3: No), the process ends.

[0055] When the normal transition process is started, the image receiving device 10 acquires product-related information related to its own manufacturer (S11), as shown in Fig. 5. The image receiving device 10 records this information in a storage area that is not erased by rebooting.

[0056] The image receiving device 10 then issues a SECURITY SET PASSWORD command to the second storage device 30 to set an ATA password lock using a specific, predetermined ATA password (S12), and starts copying sectors (movement process) from the first storage device 20 to the second storage device 30 (S13).

[0057] In this process, as shown in FIG. 6, for each partition formed in the first storage device 20, the image receiving device 10 determines whether the partition is a partition that holds recording data or corresponding management data (S131), and if not (S131: No), that is, if the partition contains GPT or the like, copies each sector in a predetermined order, for example, in the order of sector number, as in general sector copying.

[0058] That is, the image receiving device 10 reads the data in the sectors of the first storage device 20 in the order of the sector numbers, writes the data to the corresponding sectors of the second storage device 30 (S132), and records the numbers of the sectors to which the data was successfully written in a memory area that will not be erased by reboot (S133).

[0059] When copying of all sectors in one partition is completed, the image receiving device 10 starts processing for the next partition for which copying has not been completed. If there is no next partition for which copying has not been completed (if sector copy processing has been completed for all partitions), the transfer processing ends.

[0060] On the other hand, in process S131, if the partition is a partition that holds recorded data or corresponding management data (S131: Yes), the image receiving device 10 refers to the management data to identify the sectors that hold the data that constitutes each recorded data file, and generates, for each recorded data, a list of information that identifies the sectors that hold the management data for that recorded data file and a list of information that identifies the sectors that hold the recorded data, concatenates these together, and generates a list of information (sector numbers, etc.) that identifies the sectors that indicate the order of copying (S134).

[0061] The image receiving device 10 records this list in a memory area that will not be erased by reboot (S135), and reads data in sectors from the first storage device 20 in the order indicated in the list, and writes it to the corresponding sectors of the second storage device 30 (S136).

[0062] Each time writing to a sector is completed, the image receiving device 10 deletes information identifying the sector to which writing has been completed from the top of the list (S137).

[0063] The image receiving device 10 checks whether copying of the partition is complete (S138), and sets the access authority data to an unrestorable state (S139).

[0064] Furthermore, when copying of all sectors included in the list generated in process S134 is complete, the image receiving device 10 sets the access authority for the management data of each copied block to "read allowed" (S1310). The image receiving device 10 then starts processing the next partition for which copying has not been completed. If there is no next partition for which copying has not been completed (if sector copy processing has been completed for all partitions), the move processing ends. Note that after processing of all partitions is complete, the access authority for the management data of each copied file may be set to "read allowed".

[0065] When the image receiving device 10 has not completed copying the sectors of the management data of one file in step S138, that is, when the image receiving device 10 is in the process of copying the sectors that hold the data constituting the management data, or when the image receiving device 10 is in the process of copying the recorded data (S138: No), the image receiving device 10 skips step S139.

[0066] When the sector copy is completed, the image receiving device 10 verifies the file system of the second storage device 30 (S14), and if the verification fails (S14: failure), it notifies the error (S15) and ends the process.

[0067] On the other hand, if the verification is successful in process S14 (S14: successful), the image receiving device 10 acquires (S16) the type of file system (T), information about the partition (N), and information about post-processing (P) recorded in the processing information in association with the product-related information acquired in process S11.

[0068] The image receiving device 10 then checks whether the partition in which the recorded data is to be stored and the partition in which the management data is to be stored are different partitions, as indicated by the acquired information on the partition (S17).

[0069] If the partition in which the recorded data is stored and the partition in which the management data is stored are different (S17: Yes), the partition including the management data recorded in the first storage device 20 is erased by a complete erasure method, making it impossible to play the recorded data in the first storage device 20 (S18). At this time, if the information on the partition acquired in process S16 includes information indicating the existence of a partition (backup partition) that backs up data including the management data, the image receiving device 10 also deletes the contents of the backup partition by the complete erasure method.

[0070] When the image receiving device 10 completes the process of disabling playback of the recorded data stored in the first storage device 20, it disables the ATA password lock by, for example, issuing a SECURITY DISABLE PASSWORD command to the second storage device 30 (S19).

[0071] As a result, even if the second storage device 30 is powered off or disconnected from the image receiving device 10 after the recording data transfer process or during the transfer process and the recording data stored in the first storage device 20 becomes unplayable, the recording data can be accessed by turning the power on again or reconnecting, without entering an ATA password.

[0072] When the image receiving device 10 resumes the transfer process in step S4, it releases the ATA password lock using a predetermined ATA password. If the sector number for which copying has been completed is stored in a storage area that will not be erased by rebooting, the image receiving device 10 proceeds to step S132 in Fig. 6 and resumes the transfer process from the sector next to the sector number (A). If the list of sectors to be transferred is stored in a storage area that will not be erased by rebooting, the image receiving device proceeds to step S136 in Fig. 6 and continues the process (B).

[0073] [Example] Therefore, if a user of the receiving device 10 of this embodiment cuts off the power to the second storage device 30 while the recorded data is being transferred from the first storage device 20 to the second storage device 30 for the purpose of illegally obtaining a copy of the recorded data, the following state will occur.

[0074] In this embodiment, an ATA password is set in the second storage device 30 when the transfer of recording data from the first storage device 20 to the second storage device 30 begins, and therefore, if the power to the second storage device 30 is cut off during the transfer, an ATA password lock is set.

[0075] Therefore, even if a user connects this second storage device 30 to a personal computer or another type of image receiving device and attempts to obtain the recorded data, the ATA password lock has been set and the recorded data cannot be played back.

[0076] Furthermore, even if the ATA password lock is released for some reason, at least the recording data being copied will have unreadable permissions set, so reading will be restricted.

[0077] On the other hand, when the transfer of the recorded data is completed and the recorded data in the first storage device 20 becomes unplayable, the ATA password is invalidated, and thereafter the recorded data in the second storage device 30 can be played back, etc., even on other types of image receiving devices.

[0078] [Storage manufacturer restrictions] Furthermore, in this embodiment, the control unit 11 performing the transfer process of the recorded data may obtain manufacturer information (which may further include model information) of the first storage device 20, which is the source storage device, and manufacturer information (which may further include model information) of the second storage device 30, which is the destination storage device, prior to the transfer process, and may control the transfer process not to be executed if these do not satisfy specified conditions.

[0079] This condition may be, for example, that the manufacturers of the first and second storage devices 20, 30 are both predetermined manufacturers. Another condition may be that the model of the second storage device 30 is a newer model than the model of the first storage device 20.

[0080] Also, although the manufacturer and model information are used as conditions here, the control unit 11 may determine the condition that the recording capacity of the second storage device 30 is equal to or greater than the recording capacity of the first storage device 20 in place of or in addition to the above manufacturer conditions, etc., and may control the migration process not to be executed if any of the conditions is not satisfied.

[0081] [Resuming processing if processing is interrupted] In this embodiment, if the first storage device 20 is removed or the power of the television receiver 10 is turned off during the process of making the recorded data in the first storage device 20 unplayable in process S18 or process S23 in Figure 5, and the process is interrupted, the process of making the data unplayable is re-executed when the first storage device 20 is subsequently reattached.

[0082] Alternatively, for example, if there are multiple partitions that need to be completely erased in order to make them unplayable, information identifying those partitions will be recorded as a list of partitions to be erased in a storage area that will not be erased by reboot (such as a system storage area or non-volatile memory), and information identifying partitions that have been completely erased will be removed from the list of partitions to be erased.

[0083] In this way, when the first storage device 20 is attached again, the list of partitions to be erased can be referenced and the process of completely erasing the partitions that should be completely erased in order to make them unplayable can be continued.

[0084] In the above examples of this embodiment, an example using an ATA password lock has been shown, but other methods may be adopted as long as the data in the recording section of the second storage device 30 cannot be retrieved when the power is turned off or the connection is released from the image receiving device 10, and for example, a hardware function such as data encryption using a bridge IC may be used. In this case, too, even if the product is disassembled and the recording section such as a bare drive is removed, it is possible to prevent the data from being read.

[0085] In the above embodiment, an ATA password lock is set only for the second storage device, but an ATA password lock may also be set for the first storage device. In this example, the timing for setting the ATA password lock for the first storage device may be the same as that for the second storage device. However, it is preferable that the ATA password lock is set at least before data is deleted from the first storage device. [Explanation of symbols]

[0086] 1 data recording system, 10 image receiving device, 11 control unit, 12 memory unit, 13 operation unit, 14 output unit, 15 interface unit, 16 image receiving circuit unit, 20 first storage device, 21 information acquisition unit, 22 movement processing unit, 23 lock processing unit, 30 second storage device.

Claims

1. A recording system including a receiving device capable of receiving television programs, a first storage device, and a second storage device, when transferring the recorded data from the first storage device to the second storage device, the image receiving device sets a predetermined password in a recording section of the second storage device in which the recorded data is recorded; A recording system in which the second storage device restricts reading of recorded data from the recording unit using a set password when the second storage device is powered off or disconnected from the image receiving device.

2. 2. The recording system of claim 1, The recording system, wherein the recorded data moved to the second storage device is set as unreadable data during the movement of the recorded data.

3. A recording system according to claim 1 or 2, A recording system in which the recording unit is a bear drive, and reading of the recorded data is restricted by locking with an ATA password.

4. A storage device connected to a receiving device capable of receiving television programs, comprising: means for receiving the recorded data of the television program from a source storage device; a means for accepting a predetermined password when accepting the recorded data; means for accepting the setting of the password and setting the accepted password in a recording unit that records the video recording data; A storage device in which, when a password is set for the recording unit, when the power is turned off or the connection to the receiving device is disconnected, the reading of recorded data from the recording unit is restricted by the set password.

5. A receiving device capable of receiving television programs, a first storage device and a second storage device that are connected to the first storage device and the second storage device that are capable of recording the recorded data of the received television program; When transferring the recorded data from the first storage device to the second storage device, a predetermined password is set for the recording section of the second storage device in which the recorded data is recorded, and when the second storage device is powered off or disconnected from the receiving device, the receiving device restricts the reading of the recorded data from the recording section of the second storage device using the password.

6. A receiving device capable of receiving a television program, the receiving device being connected to a first storage device and a second storage device capable of recording recorded data of the received television program, A means for copying and transferring the recording data from the first storage device to a second storage device; a means for setting a predetermined password for a recording section of said second storage device in which said video recording data is recorded when said video recording data is transferred from said first storage device to said second storage device, and restricting reading of said video recording data from said recording section of said second storage device by said password when said second storage device is powered off or disconnected from a video receiving device; A program that functions as a

Images