JP2003006052A - Method and system for managing use right of digital data - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a method and a system capable of preventing unauthorized use by steadily managing a use right of reproduction of digital data. SOLUTION: Data individual information to unitarily identify the reproduction of the digital data stored in a storage medium 40 and additional information to unitarily identify a use terminal 20 are registered in a data base 13 of a host computer 10 and when the reproduction of the digital data is used by the use terminal 20, use of the reproduction is enabled only when the data individual information of the reproduction and the additional information of the use terminal 20 are registered in the data base 13.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a method and system for managing a right to use a copy of digital data distributed via a storage medium such as a CD-ROM or a communication medium such as a network.

[0002]

2. Description of the Related Art Digital data reproduction is FD, CD
-It is distributed in the market through storage media such as ROM and DVD and communication media such as the Internet. Here, the digital data includes programs, image data, dictionary data that can be used by a computer, digitalized music, movies, and the like. The duplicate of the digital data is used in the utilization device owned by the purchaser. The utilization device is a device for utilizing a copy of the digital data, and is, for example, a computer for operating a program or a reproducing device for reproducing music or a movie.

[0003]

By the way, in distributing a copy of digital data, the illegal use of the digital data is a serious problem because of the nature of the digital data that the copy can be performed easily and accurately. For example, a user who purchases a CD-ROM storing a program
There is a case where, after the program is installed on one's own computer, the CD-ROM is transferred to a third party, and both the user and the third party who have made a formal purchase use the program. In addition, for example, a user may newly create a duplicate from a CD-ROM that has been legally purchased and transfer this to a third party.

Conventionally, as a method for suppressing such fraud, for example, a number called a serial number is individually attached to a CD-ROM in which a program is recorded, and the input of this serial number is required when the program is installed. There is a method. However, even with this method, it was not possible to prevent the transfer of the duplicate of the digital data together with the serial number. Further, regarding content data such as music CDs, there is no effective method for suppressing such fraud.

The present invention has been made in view of the above circumstances, and an object of the present invention is to provide a method and a method for preventing illegal use by surely managing a right to use a copy of digital data. To provide a system.

[0006]

In order to achieve the above object, the present invention provides a right to use a copy of digital data distributed in a communication medium or a storage medium in a utilization device (hereinafter referred to as "utilization right"). Management is performed using a management device that can communicate with this utilization device via a network.
Then, the first identification information for uniquely identifying each duplicate is attached to the duplicate of the digital data in advance, and the second identifying uniquely for each subject having the usage right. The identification information is added and the first identification information and the second identification information are registered in association with each other in the storage device provided in the management device before using the duplicate of the digital data in the utilization device. Then, when the copy of the digital data is used in the utilization device, the first identification information is acquired from the copy of the digital data, and the second identification information is acquired from the object that owns the usage right. It is determined whether the set of the first identification information and the second identification information that has been registered is registered in the storage device provided in the management device, and only when it is registered, the copy of the digital data can be used. Characterize.

According to the present invention, the first identification information for identifying the duplicate of the digital data and the second identification information for identifying the object having the usage right of the duplicate are associated and managed. It is stored in a storage device provided in the device. Then, when using the digital data, it is determined whether or not the set of the first identification information and the second identification information acquired by the utilization device is registered in the storage device of the management device. Only available. This makes it possible to prevent the use of the duplicate of the digital data when the user does not have the usage right.

Here, the digital data may be in any form, such as a program / image data / dictionary data that can be used by a computer, or data obtained by digitizing music / movies.

[0009] Further, examples of the object for which the usage right is possessed are a utilization device and a user. That is, the right to use the copy of the digital data is owned by each use device or each user. At this time, in order to uniquely identify the utilization device, the utilization device individual information that can uniquely identify the utilization device, the MAC address of the interface device between the utilization device and the network, or the like is used as the first identification information. To use. In addition, in order to uniquely identify the user, the second
There is a method of storing the identification information of the above in a storage medium such as an IC card and reading it by a reading device, and a method of detecting biometric information of the user (for example, fingerprint, palm print, retina pattern, voice print, etc.).

[0010]

BEST MODE FOR CARRYING OUT THE INVENTION (First Embodiment) A digital data usage right management system (hereinafter referred to as "management system") according to a first embodiment of the present invention will be described with reference to the drawings. . FIG. 1 is a system configuration diagram of a management system, FIGS. 2 and 3 are diagrams for explaining the data structure of a database, and FIGS. 4 to 6 are flowcharts for explaining the operation of the management system.

In this embodiment, the case where the digital data is digital contents such as music and movies will be described. In addition, this digital data is distributed in the state of being copied in a storage medium such as a CD or a DVD. Therefore, the use of the copy of the digital data (hereinafter simply referred to as “copy”) means reproduction of music, viewing of a movie, and the like. Further, in the present embodiment, the object possessing the right to use the duplicate (hereinafter referred to as “usage right”) is
The terminal is used by the user who purchased the copy. That is, in the present embodiment, a copy of specific digital data can be used only by a specific use terminal.

As shown in FIG. 1, this management system is
A host computer 10 that manages the usage right of the copy,
It is provided with a utilization terminal 20 that uses the duplicate and a network 30 that connects them.

The host computer 10 includes a communication control unit 11 that is an interface with the network 30, a registration unit 12 that registers a usage right from the usage terminal 20, a database 13 that stores management information of the usage right, and a usage. Terminal 2
An inquiry unit 14 that receives an inquiry about the contents of the database 13 from 0 is provided.

The database 13 is provided with a purchaser registration table and a data price table. This purchaser registration table, as shown in FIG.
The additional information, the name and address of the purchaser, etc. are stored.
Here, the data individual number is a number that uniquely identifies the duplicate. In the present embodiment, the duplicate is stored in the storage medium 40.
The individual data number is a number that uniquely identifies the storage medium 40 because it is stored and distributed. Generally, this data individual number is a number that indicates the type of the data,
It contains a number that uniquely identifies each duplicate of that type of data. For example, the movie titled “A” is “12
The number "3798" is used to identify each storage medium 40 in the same movie. The additional information is information for identifying the usage right, and is a product number for individually identifying the usage terminal 20 in the present embodiment.
The data price table of the database 13 is shown in FIG.
As shown in, the price is registered in advance for each data type.

As shown in FIG. 1, the utilization terminal 20 has a communication control section 21 which is an interface with the network 30.
A registration unit 22 that registers the data individual number and the additional information in the database 13 of the host computer 10, an additional information acquisition unit 24 that acquires the additional information stored in the additional information storage unit 23, and Availability inquiry section 25 for controlling the operation of the reproduction section 28 based on the result, a data individual number acquisition section 27 for acquiring the data individual number of the copy from the input device 26, A reproduction unit 28 that reproduces a duplicate stored in the storage medium 40 and displays it on a display device 29 such as a CRT.
It has and.

Next, the operation of this management system will be described. First, the operation at the time of registration will be described with reference to the flowchart of FIG. The operation at the time of registration is started by activating the registration software in the usage terminal 20 (step S1).

First, the individual data number of the storage medium 40 is input from the input device 26 (step S2), and then the purchaser's name, address, etc. are input (step S3). Then
The additional information stored in the additional information storage unit 23 is acquired (step S4). Then, the input data individual information, name / address, and additional information are transferred to the host computer 10 via the network 30 (step S).
5).

The host computer 10 is a user terminal 20.
When the above information is received from, the purchaser first searches whether or not the received data individual number is already registered in the database 13 in order to prevent the purchaser from mistakenly registering again (step S6). If the same number is registered as a result of the search, the fact is notified to the utilization terminal 20 (steps S7 and S8). User terminal 20 that received this
Displays that it has already been registered (step S9). on the other hand,
If the same number is not registered as a result of the search, the information received from the use terminal 20 is registered in the database 13 (steps S7 and S10), and the use terminal 20 is notified of the completion of registration (step S11). Upon receiving this, the use terminal 20 displays a message that registration is completed (step S12).

When the third party who obtains the storage medium 40 by some means attempts to impersonate the purchaser and then performs registration after the purchaser has properly registered by the above steps,
Since the same individual data number has already been registered, the product number of the terminal owned by a third party cannot be registered as additional information.

Next, the operation of using a copy of the digital data stored in the storage medium 40 in the use terminal 20 will be described with reference to FIG. Generally, software called a viewer is used to view the duplicate, but in the present embodiment, the viewer can view only the storage medium 40 having the data individual number registered in the database 13. Has become. The operation of the utilization terminal 20 will be described below.

First, the viewer is started (step S2).
1) When the data individual number of the storage medium 40 is input from the input device 26 (step S22), the viewer acquires the additional information stored in the additional information storage unit 23 (step S23). Then, the data individual number and the additional information are transferred to the host computer 10 (step S2).
4).

The host computer 10 is a user terminal 20.
When the data individual number and the additional information are received from, the data individual number same as the received data individual number and the database 13 are searched (step S25). If not registered in the database 13, the user terminal 20 to that effect.
(Steps S26 and S27). User terminal 20
When the notification is received, the new registration process described above is performed (step S28).

When the same data individual number is registered in the search result database 13, the host computer 10 checks whether the additional information is matched with the matched data individual number (steps S26, S).
29). If the additional information matches, the user terminal 20 is notified of the browsing permission (step S3).
0, S31). Upon receiving the notification, the usage terminal 20 starts to use the copy of the digital data (step S3).
2). The permission notification may be the sending of the decryption key of the encrypted copy.

On the other hand, when the additional information does not match, the host computer 10 can regard it as a third party's (illegal) browsing, so that the user terminal 20 should stop the browsing process and start the re-registration process. To the user (step S3)
0, S33). Upon receiving the notification, the utilization terminal 20 carries out a re-registration process described later (step S34).

Next, the operation at the time of re-registration in step S34 will be described with reference to FIG. The operation at the time of registration is started by activating the re-registration software in the usage terminal 20 (step S41).

First, the individual data number of the storage medium 40 is input from the input device 26 (step S42), and then the name and address of the purchaser are input (step S43). Next, the additional information stored in the additional information storage unit 23 is acquired (step S44). Then, the input data individual information, name / address, and additional information are transferred to the host computer 10 via the network 30 (step S45).

The host computer 10 is a user terminal 20.
When the information is received from the database, the price of the received data individual number is retrieved from the database 13 (step S4
6), the charge is charged to the user terminal 20 (step S)
47).

Regarding the received bill, the utilization terminal 20 requests the settlement agency to settle the bill amount via the network 30 (step S48). The settlement organization performs settlement processing such as credit settlement and bank account transfer in response to the settlement request from the user terminal 20 (step S49), and notifies the host computer 10 of the settlement completion via the network 30 (step S50).

Upon receiving the settlement completion notification, the host computer 10 performs registration processing in the same procedure as described above (step S51) and notifies the user terminal 20 of registration completion (step S52). Finally, the utilization terminal 20 displays a message that registration is completed (step S53).

As described above, according to the management system of the present embodiment, the data individual information for identifying the duplicate of the digital data and the use terminal 2 which owns the use right of the duplicate.
Host computer 1 associated with 0 additional information
0 is stored in the database 13. Then, when using the digital data, it is determined whether the set of the data individual information input by the use terminal 20 and the additional information of the use terminal 20 is registered in the database 13, and only when it is registered. It will be available. Therefore, the duplicate of the digital data can be used only by the use terminal 20 registered in advance. Further, if the user terminal 20 that does not have the usage right tries to use the copy already registered by another person, the terminal 20 can be used by re-registering it via the network. Become.

In the present embodiment, the additional information storage unit 2 is used as the additional information for identifying the right to use the digital data.
The product number of the usage terminal 20 stored in FIG.
As shown in FIG.
MAC (Media Access) attached to 1a
Control) address may be used as additional information.

Further, in the present embodiment, the target of possession of the digital data usage right is the usage terminal 20, but the user may be the target. For example, an identification number that uniquely identifies the user is attached to the user in advance. Then, the identification number may be input when using. Further, as shown in FIG. 8, the identification number is stored in a storage medium 50 such as an IC card, and the user terminal 20
Alternatively, a reading device such as the card reader 51 may be provided. Further, as shown in FIG. 9, the user may be directly identified by providing a biosensor 52 that detects biometric information of the user (for example, fingerprint, palm print, retina pattern, voice print, etc.).

Further, the above-mentioned methods may be appropriately combined as means for uniquely identifying the usage right of these digital data.

(Second Embodiment) A management system according to a second embodiment of the present invention will be described with reference to the drawings. FIG. 10 is a block diagram of the utilization terminal and the gateway device, and FIGS. 11 and 12 are flowcharts for explaining the operation of the management system.

The management system according to the present embodiment is different from the management system according to the first embodiment, as shown in FIG.
The point is to connect to. Since the host computer 10 is the same as that of the first embodiment, its explanation is omitted here.

As shown in FIG. 10, the gateway device 60 includes a communication control unit 61 which is an interface with the network 30, and a registration unit 6 which registers a data individual number and additional information in the database 13 of the host computer 10.
2, an additional information acquisition unit 64 that acquires additional information stored in the additional information storage unit 63, and an availability inquiry unit 65 that inquires the host computer 10 about the availability of the duplicate.
And an I / O device 66 connected to the utilization terminal 70.

The utilization terminal 70 has a data individual number acquisition section 72 for acquiring the data individual number of the duplicate from the input device 71.
And reproducing the copy stored in the storage medium 40 to C
A playback unit 73 for displaying on a display device 74 such as an RT and an I / O device 75 connected to the gateway device 60 are provided.

That is, the gateway device 60 and the utilization terminal 70 according to the present embodiment are configured by dividing the utilization terminal 20 according to the first embodiment into a plurality of devices.

Next, the operation of this management system will be described. First, the operation at the time of registration will be described with reference to the flowchart in FIG. The operation at the time of registration is started by activating the registration software in the utilization terminal 70 (step S61).

First, the individual data number of the storage medium 40 is input from the input device 71 (step S62), and then the purchaser's name, address, etc. are input (step S63). Then, the input data individual information and the name / address are transferred to the gateway device 60 (step S64).

The gateway device 60 includes a user terminal 70.
When the information is received from, the additional information stored in the additional information storage unit 63 is acquired (step S65). Then, the acquired additional information and the data individual information and the name / address received from the user terminal 70 are transferred together to the host computer 10 via the network 30 (step S66).

When the host computer 10 receives the information from the gateway device 60, the host computer 10 first checks whether or not the received individual data number is already registered in the database 13 in order to prevent the purchaser from mistakenly registering again. Search (step S67). As a result of the search, when the same number is registered, the fact is notified to the gateway device 60 (steps S68 and S69). The gateway device 60 transfers the received notification to the utilization terminal 70 (step S70). Upon receiving this, the use terminal 70 displays that it is already registered (step S71).

On the other hand, as a result of the search, if the same number is not registered, the information received from the gateway device 60 is registered in the database 13 (steps S69, S7).
2) The gateway device 60 is notified of registration completion (step S73). The gateway device 60 transfers the received notification to the utilization terminal 70 (step S74). Upon receiving this, the utilization terminal 70 displays a message indicating that registration is completed (step S75).

By the above steps, as in the first embodiment, after the purchaser has officially registered, a third party who obtained the storage medium 40 by some means tried to pretend to be the purchaser. In this case, since the same data individual number has already been registered, the product number of the terminal owned by a third party cannot be registered as additional information.

Next, the operation when the duplicate of the digital data stored in the storage medium 40 is used in the use terminal 70 will be described with reference to FIG.

First, the viewer is started (step S8).
1) When the data individual number of the storage medium 40 is input from the input device 71 (step S82), the viewer transfers the data individual number to the gateway device 60 (step S83).

Upon receiving the data individual number from the utilization terminal 70, the gateway device 60 acquires the additional information stored in the additional information storage section 63 (step S8).
4). Then, the additional information is added to the data individual number and transferred to the host computer 10 (step S85).

When the host computer 10 receives the data individual number and the additional information from the gateway device 60, the host computer 10 retrieves from the database 13 the same data individual number as the received data individual number (step S86). If it is not registered in the database 13, the fact is notified to the gateway device 60 (steps S87, S8).
8). The gateway device 60 transfers the received notification to the utilization terminal 70 (step S89). Upon receiving the notification, the utilization terminal 70 performs the above-described new registration process (step S90).

When the same data individual number is registered in the search result database 13, the host computer 10 verifies whether the additional data of the matched data individual number further match (steps S87, S).
91). If the additional information matches, the gateway device 60 is notified of the browsing permission (steps S92 and S93). The gateway device 60 transfers the received notification to the utilization terminal 70 (step S94).
Upon receiving the notification, the usage terminal 70 starts to use the copy of the digital data (step S95). The permission notification may be the sending of the decryption key of the encrypted copy.

On the other hand, when the additional information does not match, the host computer 10 can regard it as a third party's (illegal) browsing, so the gateway device 60 stops the browsing process and starts the re-registration process. (Steps S92 and 96). The gateway device 60 transfers the received notification to the utilization terminal 70 (step S97). Upon receiving the notification, the utilization terminal 70 carries out re-registration processing (step S98).

According to such a management system, the data individual information for identifying the duplicate of the digital data and the additional information of the gateway device 60 which owns the use right of the duplicate are associated with each other, so that the host computer 10 can obtain the information. It is stored in the database 13. Then, when using the digital data, it is judged whether or not the set of the data individual information input by the use terminal 70 and the additional information of the gateway device 60 is registered in the database 13, and only when it is registered. It will be available. Therefore, the duplicate of the digital data can be used only by the use terminal 70 connected to the gateway device 60 registered in advance. Other functions and effects are the same as those in the first embodiment.

The same modification as that described in the first embodiment can also be applied to the management system according to the present embodiment. That is, as additional information,
Instead of the product number of the gateway device 60, the MAC address of the interface device of the communication control unit 61 may be used. Further, the gateway device 60 may be provided with a card read or a biosensor in order to uniquely identify the user. Moreover, you may combine these suitably.

Although the first and second embodiments of the present invention have been described above, the present invention is not limited thereto. The scope of the invention is indicated by the claims, and all modifications that come within the meaning of each claim are intended to be included in the invention.

For example, in the above-described embodiment, the case where the duplicate of the digital data is stored in the storage medium and distributed is described, but the present invention can be applied even when the duplicate is distributed via the network. . In this case, a data individual number that can uniquely identify the duplicate may be added when the duplicate is distributed via the network.

Further, in the above embodiment, the data individual number for uniquely identifying the duplicate of the digital data is inputted from the input device at the utilization terminal, but the data individual number should be included in the duplicate. Thus, the data individual number may be acquired from the duplicate.

Further, in the above embodiment, if the data individual information and the additional information are registered in the host computer,
After that, the number of times of use may be limited so that the copy related to the registration can be used at any time by the registered use terminal. Specifically, set an item for managing the maximum number of times in the customer registration table of the database, reduce the maximum number of times for each browsing request from the user terminal, and do not allow browsing when the maximum number of times reaches zero. To do. In this case,
It is preferable to prompt the user to perform a paid re-registration process when the upper limit number becomes zero.

[0057]

As described in detail above, according to the present invention,
First identifying information for identifying a duplicate of the digital data,
The second identification information for identifying the object that owns the usage right of the copy is associated and stored in the storage device provided in the management device. Then, when the digital data is used, the first identification information and the second identification information acquired by the use device are acquired.
It is judged whether or not the set of identification information of is registered in the storage device of the management device, and it can be used only when it is registered. This makes it possible to prevent the use of the duplicate of the digital data when the user does not have the usage right.

[Brief description of drawings]

FIG. 1 is a system configuration diagram of a management system according to a first embodiment.

FIG. 2 is a diagram illustrating a data structure of a database according to the first embodiment.

FIG. 3 is a diagram illustrating a data structure of a database according to the first embodiment.

FIG. 4 is a flowchart illustrating the operation of the management system according to the first embodiment.

FIG. 5 is a flowchart illustrating the operation of the management system according to the first embodiment.

FIG. 6 is a flowchart illustrating the operation of the management system according to the first embodiment.

FIG. 7 is a configuration diagram of a usage terminal according to another example of the first embodiment.

FIG. 8 is a configuration diagram of a usage terminal according to another example of the first embodiment.

FIG. 9 is a configuration diagram of a usage terminal according to another example of the first embodiment.

FIG. 10 is a system configuration diagram of a management system according to a second embodiment.

FIG. 11 is a flowchart illustrating the operation of the management system according to the first embodiment.

FIG. 12 is a flowchart illustrating the operation of the management system according to the first embodiment.

[Explanation of symbols]

10 ... Host computer, 12 ... Registration unit, 13 ... Database, 14 ... Inquiry unit, 20 ... Used terminal, 22 ... Registration unit, 23 ... Additional information storage unit, 24 ... Additional information acquisition unit, 2
5 ... Usability inquiry unit, 26 ... Input device, 27 ... Data individual information acquisition unit, 28 ... Playback unit, 29 ... Output device, 30 ...
Network, 40 ... Storage medium

   ─────────────────────────────────────────────────── ─── Continued front page    F term (reference) 5B017 AA06 BB09 BB10 CA09 CA16                 5B085 AC03 AE00 BG06                 5C053 FA13 FA23 FA24 GB06 JA21                       JA24 KA05 LA11 LA15                 5D044 BC04 CC04 DE29 DE49 DE50                       DE54 EF05 FG18 GK12 GK17                       HL02 HL07

Claims (16)

[Claims] 1. A management device capable of communicating a right to use a duplicate of digital data distributed in a communication medium or a storage medium in a utilization device (hereinafter referred to as "utilization right") with the utilization device via a network. A method of managing each object by attaching first identification information for uniquely identifying each copy to a copy of digital data in advance, and First identification information and second identification information are associated with the storage device provided in the management device before the use of the duplicate of the digital data in the utilization device by uniquely identifying the second identification information. When registering and using the duplicate of the digital data in the utilization device, the first identification information is obtained from the duplicate of the digital data and the second identification information is obtained from the object for which the usage right is owned. It is determined whether the obtained set of the first identification information and the second identification information is registered in the storage device provided in the management device, and the duplicate of the digital data can be used only when the set is registered. A method of managing usage rights of digital data, characterized by: 2. The digital device according to claim 1, wherein the object having the usage right is a utilization device, and the second identification information is utilization device individual information for uniquely identifying the utilization device. Data usage right management method. 3. The object for which the usage right is possessed is an interface device between the usage device and the network, and
2. The digital data usage right management method according to claim 1, wherein the identification information is the MAC address of the interface device. 4. The object possessing the usage right is a user, and the second identification information for uniquely identifying the user is acquired by the identification information acquisition means provided in the usage device. The method for managing the right to use digital data described in 1. 5. The second identification information is stored in a removable storage medium, and the second identification information is acquired by an identification information acquisition unit having a storage medium reading device. Digital data usage right management method. 6. The digital data usage right management method according to claim 4, wherein the identification information acquisition means acquires the second identification information based on the biometric information of the user detected from the user. 7. When the set of the first identification information and the second identification information is not registered in the storage device provided in the management device,
7. The first identification information and the second identification information are registered in association with each other in a storage device provided in the management device after payment is made via the network. Management method for digital data usage rights. 8. A right to use digital data, comprising a utilization device that uses a copy of digital data distributed through a communication medium or a storage medium, and a management device that can communicate with this utilization device via a network (hereinafter referred to as "right to use digital data"). In a digital data usage right management system that manages “usage rights”) in a management device, firstly attaches first identification information for uniquely identifying each copy to a copy of digital data, and uses A storage unit that attaches second identification information that uniquely identifies each object to the object that owns the right, and the management device stores the first identification information and the second identification information in association with each other. And a means for determining whether or not a set of the first identification information and the second identification information is registered in the storage means in response to an inquiry request from the utilization device and returning the determination result to the utilization device. The storage device includes a first identification information acquisition unit that acquires first identification information from a duplicate of digital data, and a second identification information unit that acquires second identification information from an object that owns the usage right. And a means for requesting the management device to determine whether the acquired set of the first identification information and the second identification information is registered in the storage device provided in the management device, and based on the determination result received from the management device. A digital data usage right management system comprising: a control unit that controls the availability of a copy of digital data. 9. An object having a usage right is a usage device, and the usage device individual information for uniquely identifying the usage device is used as the second identification information.
Digital data usage right management system described. 10. The utilization device comprises an interface device with a network, the interface device is used as an object having a usage right, and the MAC address of the interface device is used as second identification information. 9. The digital data usage right management system according to claim 8. 11. The usage right management of digital data according to claim 8, wherein the object having the usage right is a user, and the user is uniquely identified by the second identification information acquisition means. system. 12. The second identification information acquisition means comprises a second
12. The digital data usage right management system according to claim 11, further comprising a detachable storage medium reading device in which the identification information is stored. 13. The digital data usage right management system according to claim 11, wherein the second identification information acquisition unit includes a detection device that detects biometric information of the user. 14. The use of digital data according to claim 8, wherein the utilization device includes a utilization device main body that utilizes digital data, and an intermediary device that connects the utilization device main body and a network. Rights management system. 15. The intermediary device individual object that owns the usage right is the intermediary device, and intermediary device individual information for uniquely identifying the intermediary device is used as the second identification information. Digital data usage right management system. 16. The intermediary device is provided with an interface device with a network, the interface device is used as an object having a usage right, and the MAC address of the interface device is used as second identification information. The digital data usage right management system according to claim 14, wherein: