JP2005148971A - Contents using system and contents copyright protecting method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a contents using system and a contents copyright protecting method available on a plurality of PC while protecting the copyrights of contents on a removable recording device. <P>SOLUTION: When a removable HDD 4 is connected (602), a personal computer 3 acquires a removable HDD number from the removable HDD 4 (604), and issues an authentication request accompanied with the removable HDD number and user ID and a password received from a user (606) to a removable management server (608). A removable HDD management server 17 authenticates the combination of the user ID and the password and the removable HDD number (610), and when the authentication is successful, transmits authentication data for authenticating the personal computer 3 in the removable HDD 4 to the personal computer 3 (612). <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

  The present invention relates to a technology for protecting the copyright of music and other contents recorded in a removable storage device.

  Conventionally, an in-vehicle audio apparatus using a removable HDD for recording an audio file is known. Also, in such an in-vehicle audio apparatus, an audio file is recorded on a removable HDD connected to itself, or an audio file recorded on the removable HDD is read and reproduced. Also, the removable HDD can be removed from the in-vehicle audio device and connected to the personal computer, so that the personal computer can copy the audio file from the personal computer to the removable HDD or copy the audio file from the removable HDD to the personal computer. It is like that.

  In such a system, the copyright protection of the audio file stored in the removable HDD is performed by authenticating the connected personal computer in the removable HDD and transferring the audio file only to a predetermined specific personal computer. This is done by granting access. In addition, when changing a personal computer that can use the removable HDD, all audio files copied from the personal computer before the change are deleted from the removable HDD.

In addition, as a technology related to the protection of such files, when creating a file, include the definition of the range of users etc. who are allowed to access the file, and can operate the file according to the definition in each file A technique for controlling the range of users and the like is known (for example, Patent Document 1).
JP 2003-122615 A

  According to the technology for authenticating the connected personal computer in the removable HDD and permitting access to the audio file only to a predetermined specific personal computer, the audio file recorded in the removable HDD It can be prevented that the audio file is copied to an unspecified user's personal computer other than the user who owns the removable HDD that is permitted to use the audio file and used illegally.

  However, when the authorized removable HDD owns a plurality of personal computers, even if the authorized removable HDD owning user, only one personal computer of his / her personal computer can remove the removable HDD. The problem that it becomes impossible to use is generated. In addition, when a legitimate user of a removable HDD purchases a personal computer, the user can use the new personal computer to use the removable HDD or an audio file copied from the personal computer before the replacement to the removable HDD. The problem of disappearing arises.

  Therefore, the present invention enables an authorized user of a removable HDD to use the removable HDD in a plurality of personal computers in the same manner while protecting the effective copyright of the content recorded on the removable HDD. Is an issue.

  In order to achieve the above object, the present invention provides a content including a removable recording device that records a content file, a user device that can be connected to the removable recording device, and a center system that the user device can access via communication. Provide usage system. Here, in the center system, for each of the removable recording devices, user authentication information for authenticating a user of the removable recording device and a content file recorded in the removable recording device can be used in the user device. Authentication information storing means for storing user management information registered by associating key information for registration with identification information of the removable recording device, and authentication processing means. On the other hand, when the removable recording device is connected to the user device, identification information acquisition means for acquiring identification information of the removable recording device from the removable recording device, and when the removable recording device is connected User authentication information acquisition means for receiving input of user authentication information of the user from the user, identification information of the removable recording device acquired by the identification information acquisition means, and user authentication information received by the user authentication information acquisition means An authentication request means for issuing an authentication request to the center system via the communication, and the key information received from the center system as a response to the authentication request issued by the authentication request means. Content use means for using a content file on the removable recording device Provided. When the authentication processing means of the center system receives the authentication request from the user device, the authentication processing means associates the user management information with the identification information of the removable recording device accompanying the authentication request, and responds to the authentication request. When the accompanying user authentication information is registered, the key information registered in the user management information in association with the identification information of the removable recording device is transmitted to the user device.

  According to such a content use system, when the removable recording device is connected to the user device and used, the user authentication information of the removable recording device is required. Therefore, the use of the content file recorded on the removable recording device on the user device can be restricted only to an authorized user of the removable recording device. On the other hand, if the user is a valid user of the removable recording device, the content file recorded in the removable recording device can be used on any user device.

Here, in such a content use system, the user management information includes a plurality of pieces of device authentication information for authenticating the user devices that are permitted to use the removable recording device. It can be registered in association with the identification information of the removable recording device, and the authentication request means of the user device issues an authentication request accompanied by the device authentication information of the user device to the center system via the communication. When the authentication processing means of the center system receives the authentication request from the user device, the authentication request is associated with the user management information in association with the identification information of the removable recording device accompanying the authentication request. When the user authentication information accompanying the authentication request and the device authentication information accompanying the authentication request are registered The key information in association with the identification information of the removable recording device is registered in the user management information may be transmitted to the user equipment.
By doing so, the use of the content file recorded in the removable recording device on the user device can be restricted to only the removable recording device and the user device registered in advance for the legitimate user. . On the other hand, if the user is an authorized user of the removable recording device, the content recorded in the removable recording device on any user device among the registered plurality of user devices by registering the plurality of user devices. You will be able to use the file.

In this case, the authentication processing of the center system is further performed by setting the number of the device authentication information that can be registered for each removable recording device in the user management information as a predetermined number that is a maximum of a plurality. In the means, when the authentication request is received from the user device, user authentication information accompanying the authentication request is registered in the user management information in association with identification information of the removable recording device accompanying the authentication request. And the device authentication information associated with the authentication request is included in the user management information when the device authentication information registered in association with the identification information of the removable recording device is equal to or less than a predetermined number. The user management information is registered in association with the identification information of the apparatus, and is associated with the identification information of the removable recording apparatus. The key information registered in may be transmitted to the user equipment.
In this way, the number of user devices that can use the content file recorded in the removable recording device can be limited to a predetermined number or less. By providing such a restriction, a legitimate user of the removable recording device lends the removable recording device to another user and teaches his / her user authentication information to the other user. It is possible to suppress the occurrence of fraud that causes the content file recorded in the removable recording device to be used on the device.

Further, in this case, when the authentication processing means of the center system receives the authentication request from the user device, the user management information includes the removable recording device identification information associated with the authentication request. If the user authentication information associated with the authentication request is registered and the device authentication information registered in association with the identification information of the removable recording device is the predetermined number, the authentication request issuer In response to a request from the user device or unconditionally, the registration of any device authentication information registered in association with the identification information of the removable recording device is unregistered in the user management information. In addition, the device authentication information accompanying the authentication request is registered in the user management information in association with the identification information of the removable recording device. The key information in association with the identification information of the removable recording device is registered in the user management information may be transmitted to the user equipment.
In this way, when a legitimate user of the removable recording device replaces the user device, the removable recording device is replaced with the newly purchased user device instead of the user device that has been used so far. The content file recorded in can be used.

  Here, in the content use system described above, the content file may be an audio file storing audio data. Further, the content use system described above includes an in-vehicle device that can be connected to the removable recording device and can use the content file recorded in the connected removable recording device without requiring the key information. Also good.

  As described above, according to the present invention, an effective user of a removable HDD can use the removable HDD in his / her personal computers in the same manner while protecting the effective copyright of the content recorded on the removable HDD. Can be able to.

Hereinafter, embodiments of the present invention will be described by taking application of audio files to copyright protection as an example.
FIG. 1 shows the configuration of an audio file utilization system according to this embodiment.
As shown in the figure, the audio file utilization system is owned by the management center system 1, the personal computer 3 owned by the individual user connected to the management center system 1 via the WAN 2 such as the Internet, and the individual user. It includes a removable HDD 4 and an in-vehicle audio system 5 installed in each user's car. Here, the removable HDD 4 can be detachably connected to both the in-vehicle audio system 5 and the personal computer 3.

Next, FIG. 2 shows an internal configuration of the management center system 1, the personal computer 3, the removable HDD 4, and the in-vehicle audio system 5.
As shown in the figure, the management center system 1 includes an audio file storage unit 11 that stores an audio file, an audio file providing server 12 that provides the audio file stored in the audio file storage unit 11 to the personal computer 3 via the WAN 2, Billing system 13 that performs billing processing for users, user management database 14 that records user management information that is user management information of the management center system 1, and user information registration that registers and updates user management information in the user management database 14 The processing unit 15 includes an authentication processing unit 16 that performs authentication processing using user management information registered in the user management database 14, and a removable HDD management server 17.

  Next, the personal computer 3 functionally includes a CD drive 31, an HDD 32, a download client 33, and a removable HDD active that are drive devices for various CD media such as CD-ROM and CD-RAM including at least CD-DA. The data processing unit 34, the audio player 35, the CD ripping processing unit 36, an input / output interface 37 suitable for the removable HDD 4, an operating system 38, and the like are provided. In such a configuration, the operating system 38 accesses the download client 33, the removable HDD activation processing unit 34, the audio player 35, and the CD ripping processing unit 36 for file access to the HDD 32 and the removable HDD 4 and management via the WAN 2. It provides functions for communication with the center system 1 and access to CD-DA recording data via the CD drive 31. However, in terms of hardware, the personal computer 3 has a configuration as a normal computer such as a CPU, a memory, an input device, and a display device.

Next, the removable HDD 4 includes an HD access unit 42 that performs information recording and playback processing on the HD 41, an HDD controller 43 that controls recording and playback processing by the HD access unit 42, and an authentication control unit 44. I have.
The in-vehicle audio system 5 includes a CD-DA drive 51, an audio source 52 such as an audio broadcast receiver and a DVD playback device, an audio playback processing unit 53, a CD ripping processing unit 54, an input / output interface 55 adapted to the removable HDD 4, An operating system 56 is included. Here, the operating system 56 accesses the CD ripping processing unit 54 and the audio reproduction processing unit 53 for file access to the removable HDD 4, access to the recorded data of the CD-DA via the CD-DA drive 51, and the audio source 52. Provides the function of accessing the output signal.

Next, user management information stored in the user management database 14 of the management center system 1 will be described.
As shown in FIG. 3, the user management database 14 stores user records provided for each user of the management center system 1.
The user record stores the user ID and password of the user. In the user record, when the user is the owner of the removable HDD 4, the registered removable HDD number and authentication data of the removable HDD 4 are registered for each removable HDD owned by the user. The registered removable HDD number is an identification number such as a MAC address serving as an identifier of the removable HDD 4, and the authentication data is authentication data used by the removable HDD 4 for authentication of the personal computer 3. Also, it is set in a form hidden from the user.

  In this user record, the identification information of up to three personal computers 3 can be registered as PC identification information for each registered removable HDD 4. The personal computer 3 in which the PC identification information is registered is a personal computer 3 that is permitted to use the removable HDD 4. The PC identification information includes the name given to the personal computer 3 by the user and the hardware of the personal computer 3. Information such as configuration information, software configuration information, user information, etc. that can be estimated with a certain probability that the personal computers 3 having the same PC identification information are the same personal computer 3 is registered. In the user record, history information indicating a history of deregistration of PC identification information is stored for each registered removable HDD 4.

  Returning to FIG. 2, in such an audio file utilization system, a user registered in advance in the management center system 1, that is, a user in which the corresponding user management table is registered in the user management database 14 is stored in the personal computer 3 in the management center. An audio file can be downloaded from the system 1 and recorded on the HDD 32. That is, in this case, the user first accesses the audio file providing server 12 via the download client 33. Upon receiving the access, the audio file providing server 12 returns a user ID and password input menu to the download client 33, and the download client displays this input menu and accepts the user ID and password input from the user. . Then, a session start request with the input user ID and password is transmitted to the audio file providing server 12. Upon receiving the session start request, the audio file providing server 12 requests the authentication processing unit 16 to authenticate the user ID and password received together with the session start request, and the authentication processing unit 16 receives the user ID received together with the session start request, If the user management record in which the password pair is registered is registered in the user management database 14, the authentication success is returned to the audio file providing server 12, and if it is not registered, the authentication failure is indicated as the audio file providing server 12. Respond to.

When the audio file providing server 12 receives the authentication failure, the audio file providing server 12 responds to the download client that the user ID or password is invalid, and the download client 33 displays the fact to the user.
On the other hand, if the audio file providing server 12 receives a successful authentication, the audio file providing server 12 sets a protected session with the download client 33. Then, the download menu of the audio file stored in the audio file storage unit 11 is returned to the download client 33. The download client displays this download menu, receives designation of an audio file to be downloaded from the user, and requests the audio file providing server 12 to download the audio file whose designation is accepted. Upon receiving the download request, the audio file providing server 12 reads out the designated audio file from the audio file storage unit 11 and transmits it to the download client 33. The download client 33 stores the transmitted audio file in the HDD 32. When the audio file providing server 12 completes the transmission of the audio file, it notifies the charging system 13 of the user ID for which the session is set and the identifier of the transmitted audio file. An audio file provision fee for which the identifier is notified is charged to the user with the notified user ID.

  In such an audio file utilization system, the CD ripping processing unit 36 of the personal computer 3 receives the data of each track read from the CD-DA via the CD drive 31 as an audio file in response to a user request. And processing for recording in the connected removable HDD 4. In addition, the operating system performs copying of an audio file between the HDD 32 and the removable HDD 4 according to a user operation. Further, the audio player 35 performs a process of reproducing and outputting an audio file recorded on the CD-DA, the HDD 32, or the removable HDD 4 in accordance with a user operation.

  However, the file access to the removable HDD 4 of the personal computer 3 is permitted by the removable HDD 4 only when the personal computer 3 is authenticated by the removable HDD 4 connected to the personal computer 3. Therefore, among the operations described above, operations requiring file access to the removable HDD 4 can be executed only when the personal computer 3 is authenticated by the removable HDD 4 connected to the personal computer 3.

  On the other hand, in the in-vehicle system, the audio reproduction processing unit 53 reproduces and outputs an audio file recorded on the CD-DA or the removable HDD 4 or reproduces and outputs the audio output of the audio source 52 according to a user operation. . Also, the CD ripping processing unit 54 performs processing for recording the data of each track read from the CD-DA via the CD-DA drive 51 in the removable HDD 4 connected as an audio file in response to a user request.

  Here, access to the removable HDD 4 to which the in-vehicle audio system 5 is connected is always permitted by the removable HDD 4. For this reason, in this embodiment, the removable HDD 4 is connected in advance to the in-vehicle audio system in such a manner that authentication data common to each in-vehicle audio system for authenticating that the in-vehicle audio system 5 is connected is concealed to the user. They are stored in the system 5 and the removable HDD 4. When the removable HDD 4 is connected to the in-vehicle audio system 5, the in-vehicle audio system 5 issues an authentication processing request with this authentication data to the removable HDD 4. Also, in the removable HDD 4 that has received the authentication processing request, the authentication control unit 44 receives and authenticates the authentication data via the HDD controller 43 and can verify that the removable HDD 4 is connected to the in-vehicle audio system 5. Only, the HDD controller 43 is permitted to accept the access request to the HD recording audio file data and responds to the authentication processing request issuer to the authentication processing request issue source. In other cases, the HDD controller 43 returns to the HD recording audio file data. The access request is rejected and an authentication failure is returned to the authentication processing request issuer. If the HDD controller 43 is permitted to accept the access request, it accepts and processes the access request from the device to which the removable HDD 4 is connected until the connection is disconnected or the power is cut off, and accepts the access request. If it is prohibited, the access request is rejected until the connection is disconnected or the power is cut off.

Hereinafter, the authentication operation of the personal computer 3 of the removable HDD 4 in such an audio file utilization system will be described.
This authentication operation is realized by a removable HDD activation process performed by the removable HDD activation processing unit 34 of the personal computer 3, a PC authentication process performed by the removable HDD management server 17 of the management center system 1, and an authentication process performed by the removable HDD 4. Is done.
First, the removable HDD activation process performed by the removable HDD activation processing unit 34 of the personal computer 3 will be described.
FIG. 4 shows the processing procedure of the removable HDD activation process.
As shown in the figure, in this process, when the connection of the removable HDD 4 to the personal computer is detected via the operation system (step 402), first, the removable HDD number of the removable HDD 4 is acquired (step 404). Here, the removable HDD number is a value registered as a registered removable HDD number of the removable HDD 4 in the user management record of the management center system 1.

Then, an appropriate input menu is displayed to accept input of a user ID and password from the user (step 406). Next, the personal computer is investigated and PC identification information of the personal computer is acquired (step 408).
Then, an authentication request including the input user ID, password, acquired removable HDD number, and PC identification information is issued to the removable HDD management server 17 via WAN 2 (step 410).
If an authentication error is returned from the removable HDD management server 17 in response to this authentication request (step 412), an error is displayed (step 422), and the user ID and password are discarded (step 436). The process ends.
On the other hand, when authentication data is received from the removable HDD management server 17 in response to this authentication request (step 416), an authentication processing request with the received authentication data is issued to the removable HDD 4 (step 418), and authentication processing is performed. If the authentication success is accepted from the removable HDD 4 in response to the request (step 420), the process ends. If the authentication failure is responded to the authentication process request from the removable HDD 4 (step 420), an error is indicated. It is displayed (step 422), the user ID, password and authentication data are discarded (step 436), and the process is terminated.

  Here, in the removable HDD 4 that has received the authentication processing request, the authentication control unit 44 performs the authentication processing. That is, the authentication control unit 44 receives the authentication data via the HDD controller 43, performs authentication based on the consistency with the authentication data for personal computer authentication recorded in the removable HDD 4 in advance, and the authentication is successful. Only in this case, the HDD controller 43 is permitted to accept access requests to the HD recorded audio file data. In other cases, the HDD controller 43 is prohibited from accepting access requests to the HD recorded audio file data. As described above, when the HDD controller 43 is permitted to accept the access request, the HDD controller 43 receives and processes the access request from the device to which the removable HDD 4 is connected until the connection is disconnected or the power is cut off. If acceptance of the access request is prohibited, the acceptance of the access request is refused until the connection disconnection or the power interruption occurs.

  Next, in the removable HDD activation process, when a deregistration PC designation request is received from the removable HDD management server 17 in response to the authentication request (step 414), the personal transmitted with the deregistration PC designation request is received. A list of names of the computers 3 is displayed, and designation of the name of the personal computer 3 whose registration is to be canceled or designation of cancellation is accepted (step 424). If a cancel designation is accepted (step 426), the cancel is transmitted to the removable HDD management server 17 (step 434), and the process is terminated. On the other hand, when the name of one of the personal computers 3 is designated (step 428), a registration PC update request accompanied by identification of the name of the personal computer 3 or the name on the list is sent to the removable HDD management server 17. (Step 430), the authentication data is received as a response (step 432), the process proceeds to step 418 and subsequent steps, an authentication processing request is issued to the removable HDD 4, and the authentication success or failure is confirmed. The password and authentication data are discarded and the process ends.

Heretofore, the removable HDD activation process has been described.
Next, a PC authentication process performed by the removable HDD management server 17 of the management center system 1 will be described.
Here, this PC authentication process is executed when an authentication request is received from the personal computer 3. FIG. 5 shows the procedure of the PC authentication process.
As shown in the figure, in this process, first, the authentication processing unit 16 is made to authenticate the combination of the user ID, password, and removable HDD number received together with the authentication request. The authentication processing unit 16 searches the user management information database for a user management record in which a combination of the received user ID and password is registered, and the received removable HDD number is registered as a registered removable HDD number. (Step 500), and if it can be acquired (step 502), the acquisition success is returned to the removable HDD management server 17. On the other hand, when such a user management record does not exist in the user management information database (step 502), an authentication error is notified to the removable HDD management server 17, and the received removable HDD management server 17 reports an authentication error. In response to the personal computer 3 (step 510), the process is terminated.

  On the other hand, when the user management record can be acquired in step 500 (step 502), the history information for the registered removable HDD number corresponding to the received removable HDD number of the acquired user management record is received together with the authentication request in the past. It is checked whether the registration of the registered PC identification information has been canceled. If registered (step 504), an authentication error is returned to the personal computer 3 (step 510), and the process is performed. finish.

  On the other hand, if such information is not registered in the history information, the authentication processing unit 16 is made to authenticate the PC identification information received together with the authentication request. The authentication processing unit 16 checks whether or not the received PC identification information is registered for the registered removable HDD number corresponding to the received removable HDD number in the previously acquired user management record (step 506). If so, the authentication data registered for the registered removable HDD number is returned to the removable HDD management server 17, and the removable HDD management server 17 receiving the response returns the authentication data to the personal computer 3 ( Step 508), the process ends.

  On the other hand, if the received PC identification information is not registered for the registered removable HDD number corresponding to the received removable HDD number in the previously acquired user management record, the authentication processing unit 16 (step 506). Then, it is checked whether or not the number of PC identification information registered for the registered removable HDD number corresponding to the received removable HDD number is 2 or less (step 512). The received PC identification information is additionally registered for the registered removable HDD number corresponding to the received removable HDD number in the management record (step 522). Then, the authentication data registered for the registered removable HDD number is returned to the removable HDD management server 17, and the removable HDD management server 17 receiving the response returns the authentication data to the personal computer 3 (step 508). The process is terminated.

  On the other hand, when the number of PC identification information registered with respect to the registered removable HDD number corresponding to the received removable HDD number is larger than 2 (step 512), that is, when it is 3, the received removable HDD number is changed to the received removable HDD number. Responding to the removable HDD management server 17 with a deregistration PC designation request including a list of names of the personal computers 3 in the three PC identification information registered for the corresponding registered removable HDD number, the removable management server This deregistration PC designation request is issued to the personal computer 3 (step 514).

  If a cancellation is received as a response to the deregistration PC designation request (step 516), the process is terminated as it is. On the other hand, as a response to the deregistration PC designation request, the name of the personal computer 3 corresponding to one of the three PC identification information registered for the registered removable HDD number corresponding to the received removable HDD number or the name If a registration update request including identification on the list is received (step 518), it is registered for the registered removable HDD number corresponding to the received removable HDD number in the user management record acquired in step. The PC identification information corresponding to the received name of the personal computer 3 or the identification on the list of the names is deleted by the user information registration processing unit 15 (step 520) and registration cancellation of the PC identification information is registered in the history information. To do. Then, the PC identification information received together with the authentication request is registered in the registered removable HDD number corresponding to the received removable HDD number in the user management record acquired in the step (step 522).

  Then, the authentication processing unit 16 is requested for authentication data registered for the received removable HDD number of the user management record acquired in step 500, and the authentication data transferred from the authentication processing unit 16 is sent to the personal computer. 3 is answered (step 508), and the process is terminated.

The PC authentication process has been described above.
Here, FIG. 6 shows an example of the authentication operation of the personal computer 3 of the removable HDD 4 realized by such processing.
As shown in the figure, when the removable HDD 4 is connected (602), the personal computer 3 acquires a removable HDD number from the removable HDD 4 (604). Next, an input of a user ID and password is received from the user (606), and an authentication request including the input user ID and password, the acquired removable HDD number, and its own PC identification information is issued to the removable management server. (608).

  The removable HDD management server 17 that has received the authentication request performs PC authentication processing (610). In this authentication process, first, it is checked whether or not the combination of the received user ID, password, and removable HDD number is registered in the user management information. If the combination is not registered, the user of the personal computer 3 registers with the personal computer 3. It is determined that the user is not an authorized user of the connected removable HDD 4 and authentication is rejected. As a result, the personal computer 3 is not authenticated by the removable HDD, and the removable HDD 4 cannot be used in the personal computer 3.

  On the other hand, if the combination of the received user ID, password, and removable HDD number is registered in the user management information, the received PC identification information is a personal computer that has been previously unregistered with respect to the removable HDD 4 indicated by the removable HDD number. If the personal computer 3 has been deregistered in the past, the authentication is rejected. As a result, the personal computer 3 is not authenticated by the removable HDD, and the removable HDD 4 cannot be used in the personal computer 3.

  If the received PC identification information is not the personal computer 3 that has been previously unregistered with respect to the removable HDD 4 indicated by the removable HDD number, then the received PC identification information is the personal computer to which the removable HDD 4 is connected. 3 indicates whether the personal computer 3 registered for the user with the received user ID is present. If so, the authentication data for authenticating the personal computer 3 in the removable HDD 4 is stored in the personal computer 3. Transmit (612).

  The personal computer 3 that has received the authentication data uses the received authentication data to authenticate the removable HDD 4 (614), and then receives the user ID and password input by the user and the authentication data received from the removable HDD management server 17. Is discarded (616).

Then, after receiving the authentication of the removable HDD 4 in this way, the various processes described above relating to the audio file of the removable HDD 4 can be appropriately performed (618).
On the other hand, in the PC authentication process (610) in the removable HDD management server 17, the personal computer 3 to which the received PC identification information is connected to the removable HDD 4 indicates the personal computer 3 registered for the user with the received user ID. If it is determined not to be shown, the following processing is performed. That is, if the number of personal computers registered for the user of the received user ID is 2 or less, the personal computer 3 indicated by the received PC identification information is additionally registered for the user of the received user ID. The authentication data is transmitted to the personal computer 3 (612).

  If the number of personal computers registered for the user with the received user ID has reached 3, the user is registered via the personal computer 3 with one of the personal computers 3 currently registered. It cancels and inquires whether to newly register the personal computer 3 currently used. If the user selects not to newly register, the process ends without transmitting authentication data to the personal computer 3. As a result, the personal computer 3 to which the removable HDD is currently connected cannot use the removable HDD 4. On the other hand, when the user selects to cancel one of the currently registered personal computers 3 and register a new personal computer 3, the personal computer 3 selected to cancel the registration is selected. The registration of the received user ID with respect to the user is canceled, the personal computer 3 indicated by the received PC identification information is additionally registered with respect to the user with the received user ID, and then the authentication data is transmitted to the personal computer 3.

As a result, the number of personal computers 3 that can be used by connecting a specific removable HDD 4 is always limited to three or less.
On the other hand, a legitimate user of the removable HDD 4 can use the removable HDD 4 in three or less arbitrary personal computers 3.
The embodiment of the present invention has been described above.
Thus, according to this embodiment, when the removable HDD 4 is connected to the personal computer 3 and used, the user ID and password of the user of the removable HDD 4 are required. Therefore, the use of the audio file recorded on the removable HDD 4 can be restricted to only authorized users of the removable HDD 4. In addition, the number of personal computers 3 that can use the removable HDD 4 can be limited to a certain number or less of registered personal computers 3, and once the registration is canceled, the Persol computer is prohibited from re-registration. Unauthorized use of the audio file recorded in the removable HDD 4 can be suppressed. That is, the user of the removable HDD 4 teaches the other user's own user ID and password and rents the removable HDD 4 to allow the other person to illegally use the audio file recorded on the removable HDD 4. Since it is possible to accompany the disadvantage of reducing the number of personal computers that can be used, such illegal acts can be effectively suppressed.

  By the way, in the above-described embodiment, a persol computer once deregistered with respect to a removable HDD 4 is prohibited from re-registration with respect to the removable HDD 4. However, even a persol computer once deregistered is re-registered. May be allowed to be re-registered a predetermined number of times or until re-registration reaches a predetermined frequency.

  Alternatively, if three personal computers 3 are registered in the removable HDD 4, the registration of the already registered personal computer 3 and the additional registration of other personal computers 3 are performed thereafter. Instead, the use of the removable HDD 4 in other personal computers 3 may be prohibited. Alternatively, if three personal computers 3 are registered in the removable HDD 4, the registration of the registered personal computer 3 to the removable HDD 4 and the registration or re-registration of other personal computers 3 are performed in the management center system. In step 1, this may be performed according to a separate procedure that is more burdensome for the user. That is, for example, deregistration of the registered personal computer 3 to the removable HDD 4 and additional registration of another personal computer 3 with a certain frequency or more may be charged services. Even in such a case, the user of the removable HDD 4 teaches another user's own user ID and password and rents the removable HDD 4 to allow the other person to illegally use the audio file of the removable HDD 4. The disadvantage of the user of the HDD 4 can be accompanied, and such illegal acts can be effectively suppressed.

  In the above description, the user of the removable HDD 4 limits the number of personal computers 3 that can be used by connecting the removable HDD 4. However, this limitation may not be performed. In this case, the personal computer 3 received the authentication request in the PC authentication process of the removable HDD management server 17 without acquiring the PC identification information and transmitting it to the removable HDD management server 17 when issuing the authentication request. If a combination of a user ID, a password, and a removable HDD number is registered in the user management information, authentication data may be transmitted unconditionally to the personal computer 3. In this case, the registered PC identification information in the user management record is not necessary.

  Even in this case, the use of the audio file recorded in the removable HDD 4 due to theft of the removable HDD 4 can be suppressed. Further, when the user ID and password are shared as the user ID and password for the download service from the paid audio file center system as in the present embodiment, the user of the removable HDD 4 has another user's own user ID. Therefore, it is possible to suppress the unauthorized use of the audio file in the removable HDD 4 by teaching the user ID and password to another person and lending the removable HDD 4 to the other person. . The user ID and password may be shared as the user ID and password of any service other than the download service from the audio file center system.

Further, the above removable HDD 4 may be provided with a function of reproducing an audio file recorded on the HD 41.
In the above description, the audio file is stored in the removable HDD 4 and used in the in-vehicle audio system 5 or the personal computer 3. However, in the present embodiment, contents other than audio, such as video and pictures, are stored in the removable HDD 4. The same applies to a case where game software is stored and used in the in-vehicle audio system 5 or the personal computer 3.

  In the above embodiment, instead of the removable HDD 4, a removable recording device that uses any recording medium other than the HD 41 for recording may be used.

It is a block diagram which shows the structure of the audio file utilization system which concerns on embodiment of this invention. It is a block diagram which shows the structure of the management center system, personal computer, removable HDD, and vehicle-mounted audio system which concern on embodiment of this invention. It is a figure which shows the user management information which the management center system which concerns on embodiment of this invention manages. It is a flowchart which shows the removable HDD activation process which the personal computer which concerns on embodiment of this invention performs. It is a flowchart which shows the PC authentication process which the management center system which concerns on embodiment of this invention performs. It is a sequence diagram which shows the authentication operation example of the personal computer which concerns on embodiment of this invention.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 1 ... Management center system, 2 ... WAN, 3 ... Personal computer, 4 ... Removable HDD, 5 ... In-vehicle audio system, 11 ... Audio file storage part, 12 ... Audio file provision server, 13 ... Billing system, 14 ... User management database , 15 ... User information registration processing unit, 16 ... Authentication processing unit, 17 ... Removable HDD management server, 31 ... CD drive, 32 ... HDD, 33 ... Download client, 34 ... Removable HDD activation processing unit, 35 ... Audio player, 36 ... CD ripping processing unit, 37 ... input / output interface, 38 ... operating system, 41 ... HD, 42 ... HD access unit, 43 ... HDD controller, 44 ... authentication control unit, 51 ... CD-DA drive, 52 ... audio source 53 ... Audio reproduction processing unit, 54... CD ripping processing unit, 55... Input / output interface, 56.

Claims (7)

A plurality of removable recording devices that record content files, a plurality of user devices that can be connected to the removable recording device, and a center system that the user devices can access via communication,
The center system is
For each removable recording device, user authentication information for authenticating a user of the removable recording device, and key information for making the content file recorded in the removable recording device available to the user device, Authentication information storage means for storing user management information registered in association with identification information of the removable recording device;
Authentication processing means,
The user equipment is
Identification information acquisition means for acquiring identification information of the removable recording device from the removable recording device when the removable recording device is connected;
User authentication information acquisition means for accepting input of user authentication information of the user from the user when the removable recording device is connected;
Authentication request means for issuing an authentication request to the center system via the communication, including the identification information of the removable recording device acquired by the identification information acquisition means and the user authentication information received by the user authentication information acquisition means; ,
Using the key information received from the center system as a response to the authentication request issued by the authentication request means, and using a content file on the connected removable recording device,
When the authentication processing means of the center system receives the authentication request from the user device, the authentication processing means associates the user management information with the identification information of the removable recording device accompanying the authentication request, and the user accompanying the authentication request A content usage system, wherein authentication information is registered, and the key information registered in the user management information in association with identification information of the removable recording device is transmitted to the user device. The content use system according to claim 1,
In the user management information, a plurality of pieces of device authentication information for authenticating user devices that are permitted to use the removable recording device are associated with identification information of the removable recording device. Can register,
The authentication request means of the user device further issues an authentication request accompanied by device authentication information of the user device to the center system via the communication,
The authentication processing means of the center system includes:
When the authentication request is received from the user device, the user management information is associated with the identification information of the removable recording device accompanying the authentication request, and the user authentication information accompanying the authentication request and the device accompanying the authentication request When the authentication information is registered, the content use system transmits the key information registered in the user management information in association with the identification information of the removable recording device to the user device. The content use system according to claim 2,
In the user management information, the maximum number of the device authentication information that can be registered for each removable recording device is a predetermined number that is plural,
The authentication processing means of the center system includes:
When the authentication request is received from the user device, user authentication information associated with the authentication request is registered in the user management information in association with identification information of a removable recording device associated with the authentication request, and When the device authentication information registered in association with the identification information of the removable recording device is equal to or less than the predetermined number, the device management information accompanying the authentication request is included in the user management information. A content use system characterized by registering in association with identification information and transmitting the key information registered in the user management information in association with identification information of the removable recording device to the user device. The content utilization system according to claim 3,
When the authentication processing unit of the center system receives the authentication request from the user device, the authentication processing unit associates the user management information with the identification information of the removable recording device accompanying the authentication request, and accompanies the authentication request. In response to a request from the user device that issued the authentication request, when user authentication information is registered and the device authentication information registered in association with the identification information of the removable recording device is the predetermined number Or unconditionally unregister any device authentication information registered in the user management information in association with the identification information of the removable recording device, and instead, device authentication accompanying the authentication request Information is registered in the user management information in association with the identification information of the removable recording device, and the identification information of the removable recording device is registered. Content use system and transmits the key information registered in the user management information to the user device in association with the. The content use system according to claim 1, 2, 3 or 4,
The content use system according to claim 1, wherein the content file is an audio file storing audio data. The content use system according to claim 1, 2, 3, 4 or 5,
A content usage system comprising an in-vehicle device that can be connected to the removable recording device and can use a content file recorded in the connected removable recording device without requiring the key information. A content copyright protection method for preventing unauthorized use of a content file recorded in a removable recording device in a computer to which the removable recording device can be connected using a server accessible by the computer via communication. ,
In the computer, when the removable recording device is connected, obtaining identification information of the removable recording device from the removable recording device, and receiving input of user authentication information of the user from the user;
In the computer, issuing an authentication request with the acquired identification information of the removable recording device and user authentication information that has received an input to the server via the communication;
In the server that has received the authentication request, when the user authentication information associated with the authentication request is registered in the user management information in association with the identification information of the removable recording device associated with the authentication request, the removable recording is performed. Transmitting the key information registered in the user management information in association with identification information of a device to the computer;
In the computer, using the key information received from the center system as a response to the issued authentication request, using a content file on the connected removable recording device,
The user management information includes user authentication information for previously authenticating a user of the removable recording device, and key information for making the content file recorded in the removable recording device available in the user device. A content copyright protection method, wherein the content copyright protection method is registered in association with identification information of the removable recording device.

Images