Two kinds of watermark information, private information and public information, are embedded into the host signal using a private key and a public key.