JP2000101565A - Contents utilization device and recording medium recording contents utilization program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To omit the time and labor for inputting user authentication information by a user and to prevent unauthorized use of contents without limiting use by a normal user by ciphering the first decoding key of ciphered contents with the terminal identification information of a used terminal and the user authentication information respectively as keys and obtaining and storing second and third decoding keys. SOLUTION: The user operates a user terminal 1, downloads ciphered digital contents from a shop terminal 5 and simultaneously purchases the decoding key. Then, the decoding key is respectively ciphered with the two of 'the combination of a user ID and a user password' and the 'terminal identification number' of the user terminal 1 taken out by using a user authentication information obtaining part 11 as the keys and is preserved. In the case of utilizing the ciphered digital contents, the decoding key ciphered with one of the 'terminal identification number' and the 'combination of the user ID and the user password' as the key is decoded and the digital contents are decoded.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a content use method and apparatus suitable for distributing and distributing encrypted digital contents, and a recording medium on which a content use program is recorded.

[0002]

2. Description of the Related Art In recent years, all kinds of information including programs have been distributed and distributed as so-called contents via media such as the Internet and CD-ROMs. Such content may be digitized and further distributed as a digital content for distribution and distribution.

[0003] When distributing and distributing the encrypted digital content in this way, it is assumed that the decryption key of the encrypted digital content is encrypted using only the "terminal unique number" extracted using the terminal identification device. Is done. In this case, it is possible to prevent unauthorized use, but there is a problem that it is impossible for an authorized user to copy digital contents to another terminal.

On the other hand, the decryption key of the encrypted digital content is referred to as “a combination of a user ID and a user password”.
It is assumed that only the key is used for encryption. In this case, it is possible for anyone other than the authorized user to copy to another terminal, and when using digital contents, the user must input a "combination of user ID and user password" without fail. There is a problem that it does not.

[0005]

That is, in the distribution and distribution of encrypted digital contents, there are the following problems to be solved.

[0006] 1. Allows legitimate users to copy digital content to other terminals by inputting a "combination of user ID and user password", and at the same time, other users cannot copy digital content to other terminals To prevent unauthorized use.

[0007] 2. If the decryption key of the encrypted digital content has been decrypted even once by the "combination of user ID and user password", the "user I" is again stored as long as it is stored in the same terminal as when it was decrypted thereafter.
Eliminate the need to enter "D and user password combination".

SUMMARY OF THE INVENTION The present invention has been made in view of the above problems, and has as its object to provide a content use method and apparatus capable of solving these problems and a recording medium on which a content use program is recorded.

[0009]

In order to achieve the above object, according to the present invention, when decrypting an encrypted content, a decryption key for the encrypted content is used. It is the gist of the present invention that each of the user authentication information and the terminal identification information of the user terminal is encrypted using the two keys as keys, and the two decryption keys obtained by the encryption are selectively used.

According to the first aspect of the present invention, the decryption key of the encrypted content is extracted, for example, by using the terminal identification device and the terminal identification information of the user terminal, for example, the user ID.
And the user authentication information based on the combination of the user password and the user password.

When the encrypted content is used, the decryption key of the encrypted content is decrypted using either the terminal identification information or the user authentication information as a key, thereby enabling the decryption of the content.

According to a second aspect of the present invention, an encrypted content and a first decryption key for decrypting the encrypted content are obtained, and predetermined terminal identification information and a provided user are obtained. A terminal of a use terminal that encrypts the first decryption key with authentication information to prepare second and third decryption keys, and decrypts the encrypted content when decrypting the encrypted content. It is determined whether or not the encrypted second decryption key can be decrypted based on the identification information, and when decryption is possible, the second decryption key is decrypted with the terminal identification information and the first decryption key is determined. If it is not possible, the gist is to obtain the first decryption key by decrypting the third decryption key using the user authentication information.

According to the second aspect of the present invention, predetermined terminal identification information (terminal identification number / terminal unique number) obtained by extracting the decryption key of the encrypted content by using the terminal identification device.
And user authentication information, for example, a user ID and a user password, a credit card number and its password, a bank account number and its password are individually or appropriately combined and encrypted as a key. When using the encrypted content, the decryption key of the encrypted content is decrypted using either the terminal identification information or the user authentication information as a key, thereby enabling the decryption of the content.

[0014] The problem that even a legitimate user cannot copy to another terminal is that the encrypted content can be copied, and when the legitimate user decrypts for the first time after copying, he or she inputs user authentication information and enters the legitimate user authentication information. The problem is solved by decrypting only when the user is authenticated. Thus, copying to another terminal other than the authorized user can be prevented.

At this time, it is determined whether the input user authentication information is correct. If not correct, error processing is performed to inform that the decryption key cannot be decrypted correctly. If the input user authentication information is correct, the decryption key is correctly decrypted, and the encrypted content is decrypted. If the encrypted content can be decrypted, the decryption key of the content encrypted with the newly stored terminal identification number is re-encrypted, and the content encrypted with the previous terminal identification number is decrypted. Overwrite the key.

[0016] Further, for the content that has been authenticated by the user even once with the user authentication information, the user authentication information is input each time the content is used by decoding using the terminal unique number. Solve the problem of having to.

As a result, for copying to another terminal,
The authorized content is made possible by decrypting the decryption key by inputting the user authentication information to the copied encrypted content, and at the same time, preventing the unauthorized user from copying the content to another terminal. Further, in a terminal in which the decryption key of the encrypted content has been decrypted at least once with the user authentication information, there is no need to input the user authentication information to decrypt the decryption key using the terminal unique number thereafter. .

According to a third aspect of the present invention, an encrypted content and a first decryption key for decrypting the encrypted content are obtained, and predetermined terminal identification information and a provided user are obtained. The first and second decryption keys are respectively encrypted with authentication information to prepare second and third decryption keys and an encryption value obtained by encrypting an arbitrary predetermined value with the terminal identification information. When decrypting the encrypted content, the arbitrary predetermined value is encrypted with the terminal identification information of the user terminal that decrypts the encrypted content, and this value is compared with the encrypted value. The first decryption key is obtained by decrypting the encrypted second decryption key according to the information. When the first decryption key does not match, the third decryption key encrypted by the user authentication information is decrypted to obtain the first decryption key. Get the decryption key of It is the gist of.

Further, the invention according to claim 4 is characterized in that the user authentication information according to claims 1 to 3 is a combination of a user ID and a user password.

Further, the invention according to claim 5 is characterized in that the terminal identification information according to claims 1 to 3 is an ID assigned to each terminal for each terminal.

According to a sixth aspect of the present invention, an encrypted content and a first decryption key for decrypting the encrypted content are obtained, and predetermined terminal identification information and a provided user are obtained. Storage means for storing second and third decryption keys obtained by encrypting the decryption keys with authentication information, and a user terminal for decrypting the encrypted contents when decrypting the encrypted contents Determining means for determining whether or not the second decryption key stored in the storage means can be decrypted based on the terminal identification information, and when the determination means determines that decryption is possible, the terminal identification information The encrypted second decryption key is decrypted to obtain the first decryption key. When it is determined that the first decryption key is not possible, the encrypted third decryption key is decrypted by the user authentication information. That it has a decryption means for obtaining a first decryption key and gist.

According to a seventh aspect of the present invention, an encrypted content and a first decryption key for decrypting the encrypted content are obtained, and predetermined terminal identification information and a provided user are obtained. Storage means for storing second and third decryption keys obtained by encrypting the decryption key with authentication information, and an encryption value obtained by encrypting an arbitrary predetermined value with the terminal identification information; When decrypting the encrypted content, the arbitrary predetermined value is encrypted by the terminal identification information of the use terminal that decrypts the encrypted content, and this value is compared with the encrypted value stored in the storage unit. When it is determined by the determination means that the two match, the first decryption key is obtained by decrypting the encrypted second decryption key based on the terminal identification information, and when it is determined that the two do not match. To , And summarized in that and a decoding means for obtaining a first decryption key by decrypting the third decryption key the encrypted by said user authentication information.

Further, the invention according to claim 8 is characterized in that the user authentication information according to claim 6 or 7 is a combination of a user ID and a user password.

Further, the invention according to claim 9 is characterized in that the terminal identification information according to claim 6 or 7 is an ID assigned to each terminal for each terminal.

According to a tenth aspect of the present invention, an encrypted content and a first decryption key for decrypting the encrypted content are obtained on a recording medium, and predetermined terminal identification information and provision are provided. The decryption key is respectively encrypted with the user authentication information to be prepared, and second and third decryption keys are prepared. When decrypting the encrypted content, the user terminal decrypts the encrypted content. It is determined whether or not the encrypted second decryption key can be decrypted based on the terminal identification information. If the decryption is possible, the encrypted second decryption key is decrypted by using the terminal identification information and the second decryption key is decrypted. 1 is obtained, and when it is not possible, the third decryption key encrypted by the user authentication information is decrypted to obtain a first decryption key. And summary that was.

According to the tenth aspect of the present invention, since the content use program is recorded as a recording medium, the distribution of the content use program can be enhanced by using the recording medium.

[0027] According to an eleventh aspect of the present invention, an encrypted content and a first decryption key for decrypting the encrypted content are obtained on a recording medium, and predetermined terminal identification information and provision are provided. The decryption keys are respectively encrypted with the user authentication information to be provided, and second and third decryption keys, and an encryption value obtained by encrypting an arbitrary predetermined value with the terminal identification information are prepared. When decrypting the encrypted content, the arbitrary predetermined value is encrypted by the terminal identification information of the use terminal that decrypts the encrypted content, and the value is compared with the encrypted value. The first decryption key is obtained by decrypting the encrypted second decryption key according to the identification information. When the first decryption key does not match, the third decryption key encrypted according to the user authentication information is decrypted. One return And summarized in that recording the content utilization program characterized by obtaining the key.

According to the eleventh aspect of the present invention, since the content use program is recorded as a recording medium, the distribution of the content use program can be enhanced by using the recording medium.

[0029]

Embodiments of the present invention will be described below with reference to the drawings.

FIG. 1 is a block diagram showing a configuration of a system including a content using apparatus to which a content using method according to one embodiment of the present invention is applied.

In FIG. 1, reference numeral 1 denotes a user terminal used by an authorized user, and the user terminal 1 is configured so as to be connected to a computer network 3 as appropriate. In addition, this computer network 3
Is connected to the shop terminal 5 at all times, and the computer network 3 is connected to user terminals 7 other than the authorized user.
Are connected as appropriate.

In this embodiment, the user terminal 1
Includes a user authentication information acquisition unit 11, a content acquisition unit 1
3, terminal identification number acquisition unit 15, encryption unit 17, storage unit 1
9, a determination unit 21, a decryption unit 23, and a content use unit 25 are configured, and a card reader 31 is built in or connected detachably.

The content acquisition unit 13 includes an encrypted content acquisition unit 13a and a decryption key acquisition unit 13b, and the encryption unit 17 includes a decryption key encryption unit 17a and a predetermined value encryption unit 17b. The decryption unit 23 includes an encryption decryption key decryption unit 23a and a content decryption unit 23b.

The storage unit 19 stores “encrypted decryption key”, “encrypted content”, “user authentication information”, “user authentication information encrypted value”, and “terminal identification number”.
A file for storing the “terminal identification number encrypted value” is provided as appropriate. Usually, files of “user authentication information” and “terminal identification number” or “encryption value of user authentication information” and “terminal identification number encryption value” are appropriately provided.

Further, these user authentication information acquisition units 11,
The content acquisition unit 13, the terminal identification number acquisition unit 15, the encryption unit 17, the storage unit 19, the determination unit 21, the decryption unit 23, and the content use unit 25 are usually provided in the user terminal 1 in advance. However, when the content is used, the content may be constructed in advance by a program provided from a content distribution / distribution company via communication (wireless or wired) or via a recording medium.

Hereinafter, an embodiment of a system including an encrypted digital content using apparatus will be described in detail with reference to FIG.

First, the terminal identification number acquiring section 15 will be described.

The storage unit 19 of the user terminal 1 may or may not hold a "terminal identification number" as terminal identification information for identifying the terminal itself. When holding the “terminal identification number”, the terminal identification number acquisition unit 15
The “terminal identification number” in the file in the storage unit 19 is obtained. On the other hand, if not stored, the terminal identification number acquisition unit 1
5 acquires the OS product number, the serial ID of the boot disk partition, the volume name of the boot disk partition, the boot disk partition capacity, or information obtained by combining these pieces of information as an alternative to the “terminal identification number”.

Next, the processing in the judgment section 21 will be described. Here, in the user authentication information acquisition unit 11,
It is assumed that user authentication information, for example, a user ID and a user password, more specifically, a credit card number, a bank account number, and a personal identification number, respectively, are obtained individually or in any combination.

A) When the user authentication information, for example, the user ID and the user password are stored as they are (FIG. 2A)
Reference) For example, a “combination of a user ID and a user password” of an authorized user is stored in advance in a “user authentication information” file in the storage unit 19. The determination unit 21 determines the “combination of the user ID and the user password” input via the user authentication information acquisition unit 11 and the “combination of the user ID and the user password” stored in the storage unit 19. And judges whether or not the judgment is correct, and outputs the judgment result as a voice / screen display.

B) When a predetermined value A0 is encrypted and stored using user authentication information, for example, a user ID and a user password as keys (see FIG. 2B), a predetermined value encryption unit of the encryption unit 17 17b, the predetermined value A0 arbitrarily set in advance is set to the "user I
The combination of "D and the user password" is used as a key, and the encryption result is stored in the storage unit 19 as the user authentication information encrypted value A1. When a “combination of user ID and user password” is input via the user authentication information acquisition unit 11, the “combination of user ID and user password” is used as a key.
The predetermined value A0 is encrypted. This encryption result is defined as A2.
The determination unit 21 compares A1 and A2, determines whether or not it is correct, and outputs the determination result as a voice / screen display.

Next, with reference to FIGS. 3 to 5, a method of using digital content in a type in which a key file is added to an encrypted digital content file will be described in detail.

In FIG. 3, in step S11, the user operates the user terminal 1 to download the encrypted digital content from the store terminal 5 via the computer network 3. Also, at the same time as the download, or with reference to the unencrypted table of contents or heading information of the encrypted digital content and when the purchase of the digital content is determined, the digital content encrypted in step S13 is deleted. Purchase a decryption key.

In step S15, the decryption key of the purchased encrypted digital content is changed to "User I".
D and the user password ”and the“ terminal identification number ”of the user terminal 1 extracted by using the user authentication information acquisition unit 11 as keys. The encrypted decryption key is added to the digital content encrypted in step S17, and the digital content is stored in the user terminal 1 in step S19.

Referring to FIG. 4, when the digital content encrypted at the user terminal 1 at the time of purchase is decrypted and used, the "terminal unique number" is used in step S21.
Is used to decrypt the decryption key of the digital content, and the decrypted key is used to decrypt the digital content encrypted in step S23.

Further, referring to FIG. 5, copying to the user terminal 7 other than the user terminal at the time of purchase is performed in step S31.
This is performed by copying the encrypted digital content attached with the decryption key encrypted in step 2 to another terminal.

When using the encrypted digital content for the first time on the copied terminal, the user inputs "combination of user ID and user password" in step S33. A determination is made from the user ID and the user password using the determination unit 21 (step S35). If the input “combination of the user ID and the user password” is correct, the process proceeds to step S39, and the encryption is performed. The decrypted key of the digital content is decrypted, and in step S41, the encrypted digital content is decrypted using the decrypted key. Furthermore, the decryption key is encrypted again using the “terminal unique number” of the copied terminal as a key, and the decryption key encrypted using the terminal unique number of the previous terminal attached to the encrypted digital content as a key. Overwrite

On the other hand, if the "combination of the user ID and the user password" is not correct in step S35, the process proceeds to step S37, where an error message is transmitted indicating that the encrypted digital content could not be correctly decrypted. Returns and exits.

Next, a method of using digital contents in a type in which a key file and an encrypted digital contents file are separated will be specifically described with reference to FIGS.

In FIG. 6, in step S51, the user operates the user terminal 1 to download the encrypted digital content from the store terminal 5 via the computer network 3. Also, at the same time as this download or when referring to the unencrypted table of contents or heading information of the encrypted digital content and deciding to purchase the digital content,
In step S53, a decryption key for the encrypted digital content is purchased.

Then, in step S55, the decryption key of the encrypted digital content purchased is changed to "User I
D and the user password ”and the“ terminal identification number of the user terminal ”extracted using the user authentication information acquisition unit 11 are used as keys for encryption. Step S57
Then, the encrypted decryption key is used as a file, and the file is stored in the storage unit 1 of the user terminal 1 together with the encrypted digital content.
Save to 9.

Referring to FIG. 7, when the digital content encrypted by the user terminal 1 at the time of purchase is decrypted and used, the "terminal unique number" is used in step S61.
Is used as a key to decrypt the decryption key of the digital content, and in step S63, the encrypted digital content is decrypted using the decryption key.

Further, referring to FIG. 8, copying to the user terminal 7 other than the user terminal at the time of purchase is performed in step S71.
This is performed by copying all of the encrypted digital content and the two encrypted decryption key files to the target terminal.

When using the encrypted digital content for the first time on the copied terminal, the user inputs "combination of user ID and user password" in step S73. A determination is made from the user ID and the user password using the determination unit 21 (step S75). If the input “combination of the user ID and the user password” is correct, the process proceeds to step S79, and the encryption is performed. The decryption key for the digital content thus decrypted is decrypted, and in step S79, the encrypted digital content is decrypted using the decryption key. Furthermore, the decryption key is encrypted again using the “terminal unique number” of the copied terminal as a key, and the decryption key file encrypted using the terminal unique number of the previous terminal as a key is overwritten.

On the other hand, if the "combination of user ID and user password" is not correct in step S75, the flow advances to step S77 to issue an error message indicating that the encrypted digital content could not be correctly decrypted. Returns and exits.

Next, with reference to FIGS. 9 to 11, a method of using digital contents in a type in which a decryption key encrypted with a combination of a user ID and a user password is inserted into an IC card will be described.

Here, as shown in FIG. 1B, a card reader 31 is connected to the user terminal 1, and when the user uses digital contents, information is input via the card reader 31. Is possible.

In FIG. 9, in step S 91, the user operates the user terminal 1 to download the encrypted digital content from the shop terminal 5 via the computer network 3. Also, at the same time as this download or when referring to the unencrypted table of contents or heading information of the encrypted digital content and deciding to purchase the digital content,
In step S93, a decryption key for the encrypted digital content is purchased. At the time of this purchase, the card reader 31 is connected to the user terminal 1 in advance, and an IC card in which the “user ID” of the user is recorded is inserted.

In step S95, the decryption key for the purchased encrypted digital content is set to "User I
D and the user password ”and the“ terminal unique number of the user terminal ”extracted using the user authentication information acquisition unit 11 are used as keys for encryption.

Further, in step S97, of the two decrypted keys thus encrypted, the decryption key encrypted with the “terminal unique number of the user terminal” is stored in the storage unit 19 of the user terminal 1 together with the encrypted digital contents. To save. Then, the decryption key encrypted with the "combination of user ID and user password" is stored in the IC card inserted in the card reader in step S99.

Referring to FIG. 10, when the encrypted digital content is used in the user terminal 1 at the time of purchase, the decryption key of the digital content is set in step S101 using the “terminal unique number” as a key. Is decrypted, and step S1
At 03, the encrypted digital content is decrypted using the decryption key.

Further, referring to FIG. 11, copying to the user terminal 7 other than the user terminal at the time of purchase is performed in step S1.
At 11, this is done by copying only the encrypted digital content.

When using the encrypted digital content for the first time on the copied terminal, in step S113, the card reader 31 is connected to the copied terminal and the user's I
The C card is inserted, and the user inputs "combination of user ID and user password". In step S115, a determination is made using the determination unit 21. If the input "combination of user ID and user password" is correct, the process proceeds to step S119, where the encrypted digital data stored in the IC card is stored. A decryption key for the content is decrypted, and the encrypted digital content is decrypted using the decryption key. Further, in step S121, a decryption key file is generated by encrypting the decryption key again using the “terminal unique number” of the copied terminal as a key.

On the other hand, in step S 115, “user ID
If the “combination of password and user password” is not correct, the process proceeds to step S117, and returns an error message indicating that the encrypted digital content could not be correctly decrypted, and ends.

As described above, in the present embodiment, the decryption key of the encrypted digital content is obtained by using the “terminal unique number” extracted using the terminal identification device and the “combination of user ID and user password”. ”Is used as a key for encryption.

When using the encrypted digital content, a decryption key of the digital content encrypted using either “terminal identification information” or “combination of user ID and user password” as a key is used. Decrypt and enable the decryption of digital content.

The problem that even a legitimate user cannot copy to another terminal is that the encrypted digital content can be copied, and when the legitimate user decrypts for the first time after the copy, the "user ID and user Password Combination "
And decrypting only when the user is authenticated as a valid user. Thus, copying to another terminal other than the authorized user can be prevented.

At this time, it is determined whether or not the input “combination of user ID and user password” is correct using the “user ID and user password determination device”. If not correct, error processing is performed to inform that the decryption key cannot be decrypted correctly. The entered "User ID
If the "combination of password and user password" is correct,
The decryption key is decrypted correctly, and the encrypted digital content is decrypted. If the encrypted digital content can be decrypted, the decryption key of the digital content encrypted with the newly stored terminal identification number is again encrypted, and the digital key encrypted with the previous terminal identification number is re-encrypted. Overwrite the content decryption key.

Further, the digital content which has been authenticated by the user at least once with the “combination of the user ID and the user password” is decrypted using the “terminal unique number” thereafter, so that the digital content can be used. This solves the problem that the user has to input the "combination of user ID and user password" every time.

According to the above-described means, for copying to another terminal, a legitimate user inputs a “combination of user ID and user password” for the copied encrypted digital content. This is made possible by decrypting the decryption key, and at the same time, copying to other terminals by users other than authorized users is prevented. In a terminal that has decrypted the decrypted key of the encrypted digital content at least once with the “combination of user ID and user password”, the decryption key is decrypted using the “terminal unique number” thereafter. It is no longer necessary to input "combination of user ID and user password".

Note that such content use is realized by a content use program, and the program is provided by being recorded on a recording medium.

As described above, according to the present embodiment, the decryption key of the encrypted digital content is extracted using the “combination of user ID and user password” and the “terminal-specific Since the two “numbers” are encrypted as keys and the two encrypted decryption keys are selectively used, the method of using the encrypted digital content has the following effects.

1. Using either one of the "combination of user ID and user password" or the "terminal unique number" as a key, decrypts the decryption key of the encrypted digital content and enables the decryption of the encrypted digital content. .

2. When the encrypted digital content is copied to another terminal, it is enabled only by the user inputting a “combination of user ID and user password” at the first decryption of the copied digital content. This makes it possible to duplicate a valid user and at the same time, prevents unauthorized use.

3. In a terminal that has decrypted the encrypted digital content decryption key at least once with the “combination of user ID and user password,” the decryption key of the digital content encrypted with the “terminal unique number” is thereafter decrypted. By doing so, it is possible to save the user the trouble of inputting the “combination of user ID and user password”.

[0076]

As described above, according to the present invention, a decryption key of an encrypted content is encrypted using two keys, namely, user authentication information and terminal identification information of a user terminal. Since the two decryption keys obtained by the encryption are properly used, the terminal that decrypts the decryption key of the encrypted digital content at least once with the user authentication information,
After that, the digital content is decrypted with the decryption key of the digital content encrypted with the terminal identification information of the user terminal, thereby making it possible to save the user from inputting the user authentication information.

[Brief description of the drawings]

FIG. 1 is a block diagram showing a schematic configuration of a system to which a digital content using method according to the present invention is applied.

FIG. 2 is a block diagram for clarifying the outline of the present invention.

FIG. 3 is a flowchart showing a procedure for preventing unauthorized use of encrypted digital content in a type in which a key file is added to a capsule.

FIG. 4 is a flowchart showing a decryption processing procedure in a purchase terminal.

FIG. 5 is a flowchart showing a decryption processing procedure in a duplicated terminal.

FIG. 6 is a flowchart showing a procedure for preventing unauthorized use of encrypted digital content in a type in which a key file is separated.

FIG. 7 is a flowchart showing a decryption processing procedure in the purchase terminal.

FIG. 8 is a flowchart showing a decryption processing procedure in a copied terminal.

FIG. 9 is a flowchart showing a procedure for preventing unauthorized use of encrypted digital content in a type in which a decryption key encrypted with a combination of a user ID and a user password is inserted into an IC card.

FIG. 10 is a flowchart showing a decryption processing procedure in a purchase terminal.

FIG. 11 is a flowchart illustrating a decryption processing procedure in a terminal that has duplicated data.

[Explanation of symbols]

 Reference Signs List 1 user terminal (authorized user) 3 computer network 5 store terminal 7 user terminal (other than authorized user) 11 user authentication information acquisition unit 13 content acquisition unit 13a encrypted content acquisition unit 13b decryption key acquisition unit 15 terminal identification Number acquisition unit 17 Encryption unit 17a Decryption key encryption unit 17b Predetermined value encryption unit 19 Storage unit 21 Judgment unit 23 Decryption unit 23a Encryption decryption key decryption unit 23b Content decryption unit 25 Content utilization unit 31 Card reader

────────────────────────────────────────────────── ───

[Procedure amendment]

[Submission date] August 12, 1999 (1999.8.1)
2)

[Procedure amendment 1]

[Document name to be amended] Statement

[Correction target item name] Name of invention

[Correction method] Change

[Correction contents]

Patent application title: CONTENT USING APPARATUS AND RECORDING MEDIUM CONTAINING CONTENT USING PROGRAM

[Procedure amendment 2]

[Document name to be amended] Statement

[Correction target item name] Claims

[Correction method] Change

[Correction contents]

[Claims]

[Procedure amendment 3]

[Document name to be amended] Statement

[Correction target item name] 0001

[Correction method] Change

[Correction contents]

[0001]

[0001] 1. Field of the Invention [0002] The present invention relates to a content use apparatus suitable for distributing and distributing encrypted digital content and a recording medium storing a content use program.

[Procedure amendment 4]

[Document name to be amended] Statement

[Correction target item name] 0008

[Correction method] Change

[Correction contents]

The present invention has been made in view of the above problems, and has as its object to provide a content use apparatus and a recording medium on which a content use program is recorded, which can solve these problems.

[Procedure amendment 5]

[Document name to be amended] Statement

[Correction target item name] 0009

[Correction method] Change

[Correction contents]

[0009]

In order to achieve the above-mentioned object, the invention according to claim 1 of the present invention provides an encrypted content and a first content for decrypting the encrypted content. Storage means for obtaining a decryption key, and storing second and third decryption keys obtained by encrypting the decryption key with predetermined terminal identification information and provided user authentication information, respectively; Determining a second decryption key stored in the storage unit based on terminal identification information of a use terminal that decrypts the encrypted content when decrypting the encrypted content; When it is determined that the decryption is possible by the means, the encrypted second decryption key is decrypted by the terminal identification information to obtain a first decryption key. Use And summarized in that the authentication information and a decoding means for obtaining a first decryption key by decrypting the third decryption key the encryption.

[Procedure amendment 6]

[Document name to be amended] Statement

[Correction target item name] 0010

[Correction method] Change

[Correction contents]

According to the first aspect of the present invention, the first decryption key of the encrypted content is obtained, for example, by using the terminal identification device, the terminal identification information of the user terminal, for example, the user ID and the user password And encrypts each of the user authentication information obtained by the combination of the above as a key, obtains second and third decryption keys, and stores them in the storage means.

[Procedure amendment 7]

[Document name to be amended] Statement

[Correction target item name] 0011

[Correction method] Change

[Correction contents]

When the encrypted content is used, the first or second decryption key of the encrypted content is stored in the storage means using either the terminal identification information or the user authentication information as a key. 3 to decrypt the content.

[Procedure amendment 8]

[Document name to be amended] Statement

[Correction target item name] 0012

[Correction method] Change

[Correction contents]

According to a second aspect of the present invention, an encrypted content, an encrypted content, and a first decryption key for decrypting the encrypted content are obtained, and a predetermined terminal identification is obtained. Information and second and third decryption keys obtained by encrypting the decryption key with provided user authentication information, and an encryption value obtained by encrypting an arbitrary predetermined value with the terminal identification information. Storage means for decrypting the encrypted content, and encrypting the arbitrary predetermined value with terminal identification information of a use terminal for decrypting the encrypted content, and storing this value and the storage means in the storage means. Determining means for comparing the encrypted second decryption key with the encrypted second decryption key and decrypting the encrypted second decryption key with the terminal identification information to obtain a first decryption key; one If it is determined not as is summarized in that and a decoding means for obtaining a first decryption key by decrypting the third decryption key the encrypted by said user authentication information.

[Procedure amendment 9]

[Document name to be amended] Statement

[Correction target item name] 0013

[Correction method] Change

[Correction contents]

According to the present invention, the first decryption key of the encrypted content is obtained by using predetermined terminal identification information (terminal identification number / terminal unique number) extracted using the terminal identification device and the user. Authentication information, for example, a user ID and a user password, a credit card number and its password, a bank account number and its password are individually or appropriately combined and encrypted as a key. When using the encrypted content, the first decryption key of the encrypted content is decrypted by using either the terminal identification information or the user authentication information as a key, thereby enabling the decryption of the content.

[Procedure amendment 10]

[Document name to be amended] Statement

[Correction target item name] 0014

[Correction method] Change

[Correction contents]

[0014] The problem that even a legitimate user cannot copy to another terminal is that the encrypted content can be copied, and the legitimate user inputs user authentication information when decrypting for the first time after copying. The problem is solved by decrypting the first decryption key only when the user is authenticated.
Thus, copying to another terminal other than the authorized user can be prevented.

[Procedure amendment 11]

[Document name to be amended] Statement

[Correction target item name] 0015

[Correction method] Change

[Correction contents]

At this time, it is determined whether the input user authentication information is correct. If not correct, error processing is performed to notify that the first decryption key cannot be decrypted correctly. If the input user authentication information is correct, the first decryption key is correctly decrypted, and the encrypted content is decrypted. If the encrypted content can be decrypted, the first decryption key of the content encrypted with the newly stored terminal identification number is again encrypted, and the content is encrypted with the previous terminal identification number. Overwrite the content decryption key.

[Procedure amendment 12]

[Document name to be amended] Statement

[Correction target item name] 0016

[Correction method] Change

[Correction contents]

[0016] In addition, after the user has at least once authenticated the content with the user authentication information, the user decrypts the first decryption key using the terminal unique number, so that the content is used every time the content is used. Solves the problem of having to enter user authentication information.

[Procedure amendment 13]

[Document name to be amended] Statement

[Correction target item name] 0017

[Correction method] Change

[Correction contents]

As a result, for copying to another terminal,
For the copied encrypted content, the authorized user can input the user authentication information to decrypt the first decryption key, and at the same time, copy the encrypted content to another terminal by a user other than the authorized user. To prevent. In a terminal in which the first decryption key of the encrypted content has been decrypted at least once with the user authentication information, the user decrypts the first decryption key using the terminal unique number. You do not need to enter

[Procedure amendment 14]

[Document name to be amended] Statement

[Correction target item name] 0018

[Correction method] Deleted

[Procedure amendment 15]

[Document name to be amended] Statement

[Correction target item name] 0019

[Correction method] Deleted

[Procedure amendment 16]

[Document name to be amended] Statement

[Correction target item name] 0020

[Correction method] Deleted

[Procedure amendment 17]

[Document name to be amended] Statement

[Correction target item name] 0021

[Correction method] Deleted

[Procedure amendment 18]

[Document name to be amended] Statement

[Correction target item name] 0022

[Correction method] Deleted

[Procedure amendment 19]

[Document name to be amended] Statement

[Correction target item name] 0023

[Correction method] Change

[Correction contents]

Further, the invention according to claim 3 is characterized in that the user authentication information according to claim 1 or 2 is a combination of a user ID and a user password.

[Procedure amendment 20]

[Document name to be amended] Statement

[Correction target item name] 0024

[Correction method] Change

[Correction contents]

[0024] The invention according to claim 4 is characterized in that the terminal identification information according to claim 1 or 2 is an ID assigned to each terminal for each terminal.

[Procedure amendment 21]

[Document name to be amended] Statement

[Correction target item name] 0025

[Correction method] Change

[Correction contents]

According to a fifth aspect of the present invention, an encrypted content and a first decryption key for decrypting the encrypted content are acquired on a recording medium, and predetermined terminal identification information and provision are provided. The decryption key is respectively encrypted with the user authentication information to be prepared, and second and third decryption keys are prepared. When decrypting the encrypted content, the user terminal decrypts the encrypted content. It is determined whether or not the encrypted second decryption key can be decrypted based on the terminal identification information. If the decryption is possible, the encrypted second decryption key is decrypted with the terminal identification information to determine Recording a content use program, wherein the first decryption key is obtained by decrypting the encrypted third decryption key using the user authentication information when the first decryption key is obtained. And summarized in that it was.

[Procedure amendment 22]

[Document name to be amended] Statement

[Correction target item name] 0026

[Correction method] Change

[Correction contents]

According to the fifth aspect of the present invention, since the content utilization program is recorded as a recording medium, the distribution of the content utilization program can be enhanced by using the recording medium.

[Procedure amendment 23]

[Document name to be amended] Statement

[Correction target item name] 0027

[Correction method] Change

[Correction contents]

According to a sixth aspect of the present invention, an encrypted content and a first decryption key for decrypting the encrypted content are acquired on a recording medium, and predetermined terminal identification information and provision are provided. The decryption keys are respectively encrypted with the user authentication information to be provided, and second and third decryption keys, and an encryption value obtained by encrypting an arbitrary predetermined value with the terminal identification information are prepared. When decrypting the encrypted content, the arbitrary predetermined value is encrypted with the terminal identification information of the user terminal that decrypts the encrypted content, and the value is compared with the encrypted value. The first decryption key is obtained by decrypting the encrypted second decryption key using the identification information, and when the first decryption key does not match, the third decryption key is decrypted using the user authentication information to decrypt the second decryption key. Decryption of 1 To obtain a summary by recording a content utilization program characterized.

[Procedure amendment 24]

[Document name to be amended] Statement

[Correction target item name] 0028

[Correction method] Change

[Correction contents]

According to the sixth aspect of the present invention, since the content use program is recorded as a recording medium, the distribution of the content use program can be enhanced by using the recording medium.

[Procedure amendment 25]

[Document name to be amended] Statement

[Correction target item name] 0030

[Correction method] Change

[Correction contents]

FIG. 1 is a block diagram showing a configuration of a system including a content using apparatus according to an embodiment of the present invention.

[Procedure amendment 26]

[Document name to be amended] Statement

[Correction target item name] Fig. 1

[Correction method] Change

[Correction contents]

FIG. 1 is a block diagram showing a schematic configuration of a digital content using system according to the present invention.

 ──────────────────────────────────────────────────続 き Continuing on the front page (72) Inventor Nobuhisa Miyake 3-19-2 Nishi-Shinjuku, Shinjuku-ku, Tokyo Japan Telegraph and Telephone Corporation (72) Inventor Akinao Soneoka 3-19 Nishishinjuku, Shinjuku-ku, Tokyo No. 2 Nippon Telegraph and Telephone Corporation

Claims (11)

[Claims] When decrypting an encrypted content, a decryption key of the encrypted content is encrypted using two keys, namely, user authentication information and terminal identification information of a user terminal. A content utilization method characterized by using two decryption keys obtained by encryption. 2. Obtaining encrypted content and a first decryption key for decrypting the encrypted content,
The first decryption key is respectively encrypted with predetermined terminal identification information and provided user authentication information to prepare second and third decryption keys. When the encrypted content is decrypted, this encryption is performed. It is determined whether or not the encrypted second decryption key can be decrypted based on the terminal identification information of the use terminal that decrypts the encrypted content. A method for decrypting the key to obtain a first decryption key, and when impossible, decrypting the third decryption key with the user authentication information to obtain a first decryption key. . 3. Obtaining the encrypted content and a first decryption key for decrypting the encrypted content,
It is obtained by encrypting the first decryption key with predetermined terminal identification information and provided user authentication information and encrypting second and third decryption keys and an arbitrary predetermined value with the terminal identification information. When an encrypted value is prepared, when decrypting the encrypted content, the arbitrary predetermined value is encrypted by terminal identification information of a use terminal that decrypts the encrypted content. Are compared, and if they match, the encrypted second decryption key is decrypted with this terminal identification information to obtain a first decryption key. If they do not match, the encrypted second decryption key is A content utilization method comprising: decrypting a third decryption key to obtain a first decryption key. 4. The content use method according to claim 1, wherein the user authentication information is a combination of a user ID and a user password. 5. The terminal according to claim 1, wherein the terminal identification information is an ID assigned to each terminal.
How to use the described content. 6. Obtaining an encrypted content and a first decryption key for decrypting the encrypted content,
Storage means for storing second and third decryption keys obtained by encrypting the decryption keys with predetermined terminal identification information and provided user authentication information; and when decrypting the encrypted content, Determining means for determining whether or not the second decryption key stored in the storage means can be decrypted based on the terminal identification information of the use terminal which decrypts the encrypted content; and determining that the decryption can be performed by the determining means. When judged,
The first decryption key is obtained by decrypting the encrypted second decryption key based on the terminal identification information. When it is determined that the first decryption key is impossible, the third decryption key encrypted by the user authentication information is used. And a decryption means for decrypting the decryption key to obtain a first decryption key. 7. Obtaining encrypted content and a first decryption key for decrypting the encrypted content,
Second and third decryption keys obtained by encrypting the decryption keys with predetermined terminal identification information and provided user authentication information, and encryption obtained by encrypting an arbitrary predetermined value with the terminal identification information. A storage unit for storing a value and, when decrypting the encrypted content, encrypting the arbitrary predetermined value with terminal identification information of a use terminal that decrypts the encrypted content; Determining means for comparing an encrypted value stored in the means, and when the determining means determines that they match, decrypting the encrypted second decryption key using the terminal identification information to perform first decryption When it is determined that the key does not match, the third key encrypted by the user authentication information is used.
And a decryption means for decrypting the decryption key to obtain a first decryption key. 8. The content use apparatus according to claim 6, wherein the user authentication information is a combination of a user ID and a user password. 9. The content use apparatus according to claim 6, wherein the terminal identification information is an ID assigned to each terminal. 10. An encrypted content and a first decryption key for decrypting the encrypted content are obtained, and the decryption keys are respectively determined by predetermined terminal identification information and provided user authentication information. The second and third decryption keys are prepared by encryption, and when decrypting the encrypted content, the encrypted second content is decrypted by the terminal identification information of the use terminal that decrypts the encrypted content. It is determined whether the decryption key can be decrypted. If decryption is possible, the encrypted second decryption key is decrypted using the terminal identification information to obtain a first decryption key. And a recording medium storing a content use program, wherein the first decryption key is obtained by decrypting the encrypted third decryption key using the user authentication information. 11. An encrypted content and a first decryption key for decrypting the encrypted content are obtained, and the decryption keys are respectively determined by predetermined terminal identification information and provided user authentication information. An encrypted second and third decryption key and an encrypted value obtained by encrypting an arbitrary predetermined value with the terminal identification information are prepared. When decrypting the encrypted content, the encrypted The predetermined value is encrypted with the terminal identification information of the user terminal that decrypts the content, and the value is compared with the encrypted value. If they match, the second decryption encrypted with the terminal identification information is performed. Decrypting the key to obtain a first decryption key, and when the keys do not match, decrypting the encrypted third decryption key using the user authentication information to obtain a first decryption key. Profit Recording medium on which an application program is recorded.