JP2005149229A - Server, terminal, content authentication method, content distribution and reproduction system and content distribution and reproduction method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To protect the copyright of electronic data without using an ID and the like likely to be leaked and lowering the convenience of a user. <P>SOLUTION: A server 10 comprises an authentication information addition part 12 for adding, to content data, biometric data usable in personal authentication and authentication procedure data about a procedure for personal authentication using the data, to create electronic data. A terminal 20 comprises a data extraction part 22 for extracting each piece of data from the electronic data, a content data holding part 23, an authentication data holding part 24, an authentication procedure analysis part 25 for analyzing the procedure for personal authentication from the authentication procedure data, a biometric data acquisition part 27, an authentication execution part 26 for executing personal authentication by collating the biometric data according to the analyzed procedure for personal authentication, and a reproduction function control part 28 for controlling the reproduction of the content data according to the result of authentication. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

  The present invention relates to a server, a terminal having a content data playback function, a content authentication method in the terminal, a content distribution playback system including the server and the terminal, and a content distribution playback method in the content distribution playback system. About. Note that the “server” in the present application does not mean only a content server installed in a so-called content provider (hereinafter referred to as “CP”), but widely includes information processing apparatuses in general (including user terminals, for example). That means.

  There are the following conventional techniques related to copyright protection and prevention of unauthorized use in electronic data distribution.

  As a technique applied when a user makes an electronic data acquisition request to an electronic data provider (for example, CP) (operation (1) in FIG. 1), whether or not the user is a legitimate user is determined. In order to make a determination, for example, there is an authentication using an ID and a password or an authentication using a PKI (Public Key Infrastructure) (Prior Art 1). In this case, the CP distributes the requested electronic data only when the user is successfully authenticated.

  In order to use the electronic data by embedding information such as ID and password in the electronic data itself as a technique applied to the electronic data itself (data (2) in FIG. 1) acquired by the user from the CP. There is a method of inputting a correct ID and password (prior art 2).

  As a technique applied to a terminal itself (terminal (3) in FIG. 1) that acquires and stores electronic data, first, external output of external data from the terminal is disabled. That is, the electronic data cannot be used at all other than the terminal that first acquired the electronic data. There is also a method of limiting the number of times electronic data can be externally output from the terminal (prior art 3).

  Biometric data such as ID and password input or fingerprint data to activate the terminal as a technology applied when the user uses electronic data using the terminal (operation (4) in Fig. 1). (Prior Art 4) (For example, see Patent Document 1 below for the conventional technique using biometric data).

As a technology applied to the memory for storing electronic data ((5) in FIG. 1), the electronic data can be read, executed and reproduced only by the terminal that has written the electronic data in the external memory. (Prior Art 5).
JP 2003-186836 A

  However, in the above prior art 1, only a legitimate user knows the correct ID and password, or only a legitimate user possesses the correct private key for the public key certificate. It is established. Therefore, once the ID, password, and private key are known to other users, the copyright protection effect is lost. Even if electronic data is correctly distributed to a legitimate user, there is no way for the CP to know how to use the subsequent electronic data. For example, the user who acquired the electronic data can copy it to other users. It is not possible to prevent illegal acts such as passing.

  Further, even in the conventional technique 2, it is impossible to prevent unauthorized use when an ID or password is leaked to other than a legitimate user. As a specific example, the shareware license key leakage problem is new in memory.

  In the prior art 3, if a user who is the owner of a terminal that uses electronic data lends the terminal to another person, the terminal is used by an unauthorized user. For a legitimate user, in order to use the electronic data, the terminal must be used without fail, and the convenience is significantly impaired.

  In the prior art 4, when the electronic data can be taken out of the terminal, there is no means for protecting the copyright after the electronic data is output to the outside. You cannot protect your rights. If the electronic data cannot be output externally in order to prevent the above problem, the same problem as in the prior art 3 occurs and the convenience for the user is impaired.

  In the prior art 5, the electronic data can be used only for the terminal that has written the electronic data in the external memory, which impairs the convenience for the user. There is also a technology to limit the number of copies from the external memory. However, if the upper limit of the number of copies that can be made is reached, no more copies can be made, which also impairs user convenience. Become.

  The present invention has been made to solve the above-mentioned problems, and does not depend on IDs or passwords that may be leaked, or protects the copyright of electronic data without causing a decrease in user convenience. It is an object of the present invention to provide a server, a terminal, a content authentication method, a content distribution / playback system, and a content distribution / playback method that can prevent use.

  To achieve the above object, the server according to the present invention includes one or more biometric data that can be used for personal authentication, and one or more authentication procedure data related to a personal authentication procedure using the biometric data. Is provided with authentication information adding means for adding to the content data. Here, in the above “content data”, in addition to so-called normal content data such as text data, image data, music data, and video data, some playback / data such as data to be processed by the application program and the application program itself are included. Also includes data to be executed. The biometric data corresponds to, for example, fingerprint data, voiceprint data, face image data, retinal pattern data, and the like.

  In the server according to the present invention, one or more biometric data and one or more authentication procedure data related to a personal authentication procedure using the biometric data are added to the content data.

  In addition to the above data, data relating to the priority of the personal authentication procedure, the type of biometric data (for example, the type of fingerprint data, face image data, etc.), etc. are added as the data to be added to the content data. Data related to the person to be authenticated may be added to the metric data, and the data may be used in the authentication procedure.

  In order to achieve the above object, a terminal according to the present invention is a terminal having a function of reproducing content data, and one or more biometric data that can be used for personal authentication, and an individual using biometric data Data extraction means for extracting the content data, the biometrics data, and the authentication procedure data from which the additional data is removed from the content data to which one or more authentication procedure data related to the authentication procedure is added, and the data Content data holding means for holding the content data extracted by the extracting means, authentication data holding means for holding the biometrics data extracted by the data extracting means, and the authentication procedure extracted by the data extracting means From the data, use the above biometric data. Analyzed by the authentication procedure analyzing means for analyzing the personal authentication procedure, the biometric data acquiring means for acquiring the biometric data of the person who intends to reproduce the content data used for personal authentication, and the authentication procedure analyzing means. In addition, according to the personal authentication procedure, the biometric data acquired by the biometric data acquisition means and the biometric data held by the authentication data holding means are collated with an authentication execution means for performing personal authentication. And a reproduction function control means for controlling reproduction of the content data held by the content data holding means based on the result of authentication by the authentication execution means.

  Here, “reproduction” includes not only the reproduction of music data and video data, but also display of text data and image data, execution of data to be processed by the above-described application program, and the application program itself.

  The terminal according to the present invention reproduces one or more biometric data that can be used for personal authentication, and content data to which one or more authentication procedure data related to a personal authentication procedure using the biometric data is added. Processing is performed when it is about to be done.

  First, the data extraction means adds one or more biometric data that can be used for personal authentication, and content data to which one or more authentication procedure data related to a personal authentication procedure using biometric data is added. The content data, the biometric data, and the authentication procedure data from which the data has been removed are extracted.

  Subsequently, the content data holding unit holds the content data extracted by the data extraction unit. The authentication data holding unit holds the biometric data extracted by the data extraction unit. The authentication procedure analyzing means analyzes the personal authentication procedure using the biometric data from the authentication procedure data extracted by the data extracting means.

  Subsequently, the biometric data acquisition unit acquires biometric data of a person who intends to reproduce the content data.

  Subsequently, the biometric data acquired by the biometric data acquisition means and the biometric data held by the authentication data holding means according to the procedure of the personal authentication analyzed by the authentication procedure analysis means by the authentication execution means The personal authentication is performed by checking the above.

  Subsequently, the playback function control means controls the playback of the content data held by the content data holding means based on the result of authentication by the authentication execution means.

  In addition, when data such as data relating to the priority of the personal authentication procedure and the type of biometric data is further added to the content data, and further data related to the person to be authenticated is further added to the biometric data. If so, those data may be used for the personal authentication.

  As described above, according to the present invention, the user of content data is authenticated using biometric data that is free from leakage and the like. Further, by adding the biometric data and authentication procedure data to the content data, the terminal that reproduces the content data is not limited. Accordingly, it is possible to protect the copyright of electronic data and prevent unauthorized use without depending on an ID or password that may be leaked, or without reducing the convenience of the user.

  In addition, the present invention can provide a copyright protection function in accordance with the copyright protection policy unique to each CP by using the data related to the priority.

  By the way, the present invention can be described as an invention of a terminal as described above, and can also be described as an invention of a content authentication method as follows. This is the only invention that is different only in category, and has the same actions and effects.

  That is, the content authentication method according to the present invention is a content authentication method in a terminal having a content data reproduction function, and uses one or more biometric data that can be used for personal authentication, and the biometric data. A data extraction step of extracting the content data, the biometric data, and the authentication procedure data from which the additional data has been removed from the content data to which one or more authentication procedure data related to the personal authentication procedure is added; A content data holding step for holding the content data extracted by the data extraction step, an authentication data holding step for holding the biometrics data extracted by the data extraction step, and the above-mentioned data extracted by the data extraction step Recognition An authentication procedure analysis step for analyzing a personal authentication procedure using the biometric data from the procedure data, and a biometric data acquisition step for acquiring biometric data of a person who wants to reproduce the content data used for personal authentication And collating the biometric data acquired by the biometric data acquisition step with the biometric data held by the authentication data holding step according to the procedure of the personal authentication analyzed by the authentication procedure analysis step. And an authentication execution step for performing personal authentication, and a playback function control step for controlling the playback of the content data held by the content data holding step based on the result of authentication by the authentication execution step. To.

  The present invention can also be described as a content distribution / playback system including a server and a terminal. This has the same operation and effect as the above-described invention.

  That is, the content distribution / playback system according to the present invention is a content distribution / playback system including a server and a terminal having a content data playback function, and the server can be used for personal authentication. The biometrics data and the authentication information adding means for adding one or more authentication procedure data relating to the personal authentication procedure using the biometric data to the content data, and the authentication information adding means, the biometrics Distribution means for distributing the content data to which the data and the authentication procedure data are added to a terminal, wherein the terminal acquires the content data to which the biometrics data and the authentication procedure data are added. And the content data acquisition means Data extracting means for extracting the content data from which the additional data has been removed, the biometrics data, and the authentication procedure data from the content data that has been removed, and content that holds the content data extracted by the data extracting means Data holding means, authentication data holding means for holding the biometric data extracted by the data extracting means, and personal authentication using the biometric data from the authentication procedure data extracted by the data extracting means. Authentication procedure analysis means for analyzing a procedure, biometric data acquisition means for acquiring biometric data of a person who wants to reproduce the content data used for personal authentication, and the personal authentication analyzed by the authentication procedure analysis means Follow the steps in The biometric data acquired by the biometric data acquisition means and the biometric data held by the authentication data holding means are collated to authenticate the individual and perform authentication by the authentication execution means. And a reproduction function control means for controlling reproduction of the content data held by the content data holding means.

  Further, the present invention can be described as an invention of a content distribution / playback system as described above, and can also be described as an invention of a content distribution / playback method as follows. This is the only invention that is different only in category, and has the same actions and effects.

  That is, a content distribution / playback method according to the present invention is a content distribution / playback method in a content distribution / playback system including a server and a terminal having a content data playback function. An authentication information adding step of adding one or more biometric data usable for personal authentication and one or more authentication procedure data relating to a personal authentication procedure using the biometric data to the content data; A distribution step of distributing to the terminal the content data to which the biometric data and the authentication procedure data are added by the authentication information adding step, and the content distribution / playback method in the terminal includes the biometric data and the authentication With procedure data Content data acquisition step for acquiring the obtained content data, and the content data from which the additional data has been removed, the biometric data, and the authentication procedure data are extracted from the content data acquired by the content data acquisition step. A data extraction step, a content data holding step for holding the content data extracted by the data extraction step, an authentication data holding step for holding the biometric data extracted by the data extraction step, and the data extraction step An authentication procedure analysis step for analyzing a personal authentication procedure using the biometrics data from the authentication procedure data extracted by the method, and an attempt to reproduce the content data used for personal authentication Biometrics data acquisition step for acquiring biometrics data of the person, biometrics data acquired by the biometrics data acquisition step according to the personal authentication procedure analyzed by the authentication procedure analysis step, and the authentication data holding Control of reproduction of the content data held by the content data holding step according to the authentication execution step for performing personal authentication by collating with the biometric data held by the step, and the result of authentication by the authentication execution step And a reproduction function control step for performing the above.

  In addition to the above description, the present invention can also be described as an invention of a method for exchanging and reproducing content between users as described below. This is the only invention that is different only in category, and has the same actions and effects.

  A terminal owned by a certain user A has the same means as the server in the present invention, and a terminal owned by a different user B has the same means as the terminal in the present invention. In this state, the content exchange / playback method between users according to the present invention can be configured as follows. That is, a content exchange reproduction method in a content exchange reproduction system including a user A terminal and a user B terminal, and the content exchange reproduction method in the user A terminal can be used for personal authentication. 1 or 2 or more biometrics data, and 1 or 2 or more authentication procedure data regarding the procedure of the personal authentication using the said biometrics data, The authentication information addition step which adds to content data, The said authentication information addition step, A distribution step of distributing the content data to which the biometric data and the authentication procedure data are added to the terminal of the user B, and the content exchange reproduction method in the terminal of the user B includes the biometric data and the authentication procedure. Content data with added data A content data acquisition step for acquiring, and a data extraction step for extracting the content data from which the additional data has been removed, the biometric data, and the authentication procedure data from the content data acquired by the content data acquisition step; A content data holding step for holding the content data extracted by the data extraction step, an authentication data holding step for holding the biometrics data extracted by the data extraction step, and the above-mentioned data extracted by the data extraction step An authentication procedure analyzing step for analyzing a personal authentication procedure using the biometric data from the authentication procedure data, and a biometric data of a person who intends to reproduce the content data used for personal authentication. Biometric data acquired by the biometric data acquisition step and the authentication data holding step according to the personal authentication procedure analyzed by the authentication procedure analysis step and the biometric data acquisition step of acquiring the data. The authentication execution step for performing personal authentication by collating with the biometric data, and the playback function for controlling the playback of the content data held in the content data holding step based on the result of authentication in the authentication execution step And a control step.

  As described above, according to the present invention, the user of content data is authenticated using biometric data that is free from leakage and the like. Further, by adding the biometric data and authentication procedure data to the content data, the terminal that reproduces the content data is not limited. Accordingly, it is possible to protect the copyright of electronic data and prevent unauthorized use without depending on an ID or password that may be leaked, or without reducing the convenience of the user.

  Embodiments according to the present invention will be described below with reference to the drawings.

  FIG. 2 shows the overall configuration of the content distribution / playback system 1 including the server (CP) 10 and the terminals 20A, 20B, and 20C in the present embodiment. As shown in the figure, the server 10 can create electronic data 40 and communicate with the terminal 20 </ b> A via the network 60. The terminal 20 (generic name for the terminals 20A, 20B, and 20C) can reproduce the content data included in the electronic data 40 and is used by the user 30 (generic name for the users 30A and 30B). The electronic data 40 can also be stored in an external memory 50 that can be used by the terminals 20B and 20C. The external memory 50 is a medium capable of storing electronic data, and the network 60 is a connection target of the server 10 and the terminal 20A. Here, as the terminal 20, for example, a PC (Personal Computer), a PDA (Personal Digital Assistants), a mobile phone, and the like correspond. The network 60 corresponds to, for example, the Internet network and a mobile phone network.

  FIG. 3 shows the configuration of the server 10 and the terminal 20. As shown in the figure, the server 10 stores a content database 13 that stores content data, biometric data that can be used for personal authentication, and authentication procedure data related to a procedure for personal authentication using the biometric data. The authentication information database 14, the one or more biometric data, and the authentication information adding unit 12 that creates the electronic data 40 by adding the one or more authentication procedure data to the content data, and the electronic data And a distribution unit 11 that distributes 40 to the terminal 20. Here, in addition to data called normal contents such as text data, image data, music data, and video data, the content data includes some reproduction / execution such as data to be processed by the application program and the application program itself. Also includes data made. The biometric data corresponds to, for example, fingerprint data, voiceprint data, face image data, retinal pattern data, and the like.

  As shown in FIG. 3, the terminal 20 removes additional data from the playback function unit 29 that plays back content data, the reception unit 21 that receives the electronic data 40 distributed from the server 10, and the electronic data 40. Extraction by the data extraction unit 22 for extracting the extracted content data, the biometric data, and the authentication procedure data, the content data holding unit 23 for holding the content data extracted by the data extraction unit 22, and the data extraction unit 22 An authentication data holding unit 24 that holds the biometric data, an authentication procedure analysis unit 25 that analyzes a personal authentication procedure using the biometric data from the authentication procedure data extracted by the data extraction unit 22; Used for personal authentication by the person who wants to play the content data. The biometric data acquisition unit 27 that acquires the metrics data and the biometric data acquired by the biometric data acquisition unit 27 according to the personal authentication procedure analyzed by the authentication procedure analysis unit 25 and the authentication data holding unit 24 The authentication execution unit 26 for performing personal authentication by collating with the biometric data to be performed, and the content data holding unit 23 holds the reproduction function unit 29 based on the result of authentication by the authentication execution unit 26. And a playback function control unit 28 that controls playback of content data. Here, “reproduction” includes not only the reproduction of music data and video data, but also display of text data and image data, execution of data to be processed by the above-described application program, and the application program itself.

  The electronic data 40 created by the authentication information adding unit 12 of the server 10 has a data format shown in FIG. The electronic data 40 includes an authentication information part 41 and a content data part 42. Content data is stored in the content data section 42. The authentication information unit 41 includes an authentication procedure unit 41A and an authentication data unit 41B. The authentication data unit 41B stores authentication data that is biometric data used for authentication of the user 30 of the content data stored in the content data unit 42. The authentication data is given an identifier that uniquely identifies them. The data shown in FIG. 4 is given authentication data X / Y / Z and an identifier. Each authentication data includes an authentication data type code indicating the type of the authentication data (for example, a type of fingerprint data, face image data, etc.), and authentication data indicating which user the authentication data belongs to. Owner information is added. In the authentication procedure part 41A, authentication procedure data indicating what kind of procedure is executed for authentication using the biometric data stored in the authentication data part 41B is stored. Each authentication procedure data is added with a priority code indicating the priority of the authentication procedure and a use authentication data type code indicating the type of authentication data used in the authentication procedure. Note that the data stored in the authentication data unit 41B and the data stored in the authentication procedure unit 41A may both be one or more.

  Specific setting values of each information field shown in FIG. 4 will be described below. As authentication data, authentication data X, authentication data Y, and authentication data Z exist. The authentication data X stores user A's fingerprint data, the authentication data Y stores user B's voiceprint data, and the authentication data Z stores user A's face image data. As the authentication data type code, [fingerprint] is set in the authentication data X, [voice print] is set in the authentication data Y, and [face image] is set in the authentication data Z. As the authentication data owner information, “user A” is set in the authentication data X, “user B” is set in the authentication data Y, and “user A” is set in the authentication data Z. As the authentication procedure data, there are an authentication procedure α, an authentication procedure β, and an authentication procedure γ. In the authentication procedure α, information is set that “authentication data X is used to perform authentication at the start of each reproduction, and if the authentication is successful, content reproduction is permitted”. In the authentication procedure β, information is set that “authentication data X or authentication data Y is used to perform authentication at the start of each reproduction and if the authentication is successful, content reproduction is permitted”. In the authentication procedure γ, “authentication with the authentication data X is executed at the start of each reproduction, and if the authentication is successful, the reproduction of the content is permitted. During the reproduction of the content, the authentication with the authentication data Z is performed every 10 minutes, The information is set to “permit continuation of content playback if authentication is successful”. As a priority code, “002” is set in the authentication procedure α and authentication procedure β, and “001” is set in the authentication procedure γ. Here, the smaller the number, the higher the priority. As the use authentication data type code, [Fingerprint] is used for authentication procedure α because authentication data X that is fingerprint data is used, and [Voiceprint] is used for authentication procedure β because authentication data Y that is voiceprint data is used. In the procedure γ, [fingerprint] and [face image] are set in order to use authentication data X that is voiceprint data and authentication data Z that is a face image.

  Hereinafter, the processing executed by the content distribution / playback system 1 in the present embodiment will be described with reference to FIG. In the present embodiment, the processing includes two types of processing, that is, processing when electronic data 40 is created, distributed, and received, and processing when content data is reproduced.

  Processing at the time of distribution and reception of the electronic data 40 is as follows. First, in the server 10, the authentication information adding unit 12 acquires content data from the content database 13, and from the authentication information database 14, the biometric data of the user 30 of the content data and the individual using the biometric data. Acquire authentication procedure data related to the authentication procedure. Subsequently, the authentication information adding unit 12 adds the acquired biometric data and the authentication procedure data to the content data. At the time of addition, data such as authentication data owner information is further added, and electronic data 40 in the above format is created (S01).

  Subsequently, in the server 10, the distribution unit 11 distributes the electronic data 40 including the content data to the terminal 20A via the network 60 (S02).

  In the terminal 20A to which the electronic data 40 has been distributed, the receiving unit 21 receives the electronic data 40 (S03). The processing at the time of distribution and reception of the electronic data 40 is as described above.

  The processing at the time of reproducing content data is as follows. First, in the terminal 20, the data extraction unit 22 uses the electronic data 40 received by the receiving unit 21 to store content data stored in the content data unit 42, authentication data stored in the authentication data unit 41B, and authentication. Authentication procedure data stored in the procedure part 41A is extracted. The content data holding unit 23 holds the extracted content data, and the authentication data holding unit 24 holds the extracted authentication data (S04).

  Subsequently, the authentication procedure analysis unit 25 acquires the type information of biometric data that can be acquired by the terminal 20 from the biometric data acquisition unit 27, and is added to the type information and the extracted authentication procedure data. It is determined whether or not there is a procedure suitable for the own terminal 20 by comparing the use authentication data type code that is used (S05). Specifically, for example, if the type information of biometric data that can be acquired by the terminal 20 acquired from the biometric data acquisition unit 27 is only fingerprint data, only [fingerprint] is included in the use authentication data type code. The included authentication procedure α is determined as an authentication procedure suitable for the terminal 20 itself. Further, for example, if the type information of biometric data that can be acquired by the terminal 20 acquired from the biometric data acquisition unit 27 is fingerprint data and face image data, only [fingerprint] is included in the use authentication data type code. The authentication procedure α included and the authentication procedure γ including [fingerprint] and [face image] are determined as authentication procedures suitable for the terminal 20 itself.

  If it is determined in the above determination that there is no procedure suitable for the terminal 20, the electronic data 40 cannot be reproduced on the terminal 20.

  When there are a plurality of procedures that match the terminal 20 in the above determination, the authentication procedure analysis unit 25 refers to the priority code added to the extracted authentication procedure data and determines an authentication procedure having a higher priority. The authentication procedure is selected (S06). Specifically, for example, when the authentication procedure α and the authentication procedure γ are determined as the authentication procedures suitable for the terminal 20 in step S05, the authentication procedure γ has a higher priority than the authentication procedure α. Therefore, the authentication procedure γ is selected as the authentication procedure. Also, for example, when a plurality of authentication procedures having the same priority are discriminated, such as when the authentication procedure α and the authentication procedure β are discriminated as an authentication procedure suitable for the own terminal 20, automatically according to some rule. You may make it select, and you may make it make the user 30 select.

  When an authentication procedure is selected in step S06, the authentication procedure analysis unit 25 analyzes the selected personal authentication procedure from the extracted authentication procedure data (S07). Specifically, for example, when the authentication procedure α is selected in the step of S06, “authentication is performed at the start of each playback using the authentication data X set in the authentication procedure α, and if the authentication is successful, Analyze the information that "allows playback of content".

  Subsequently, according to the analyzed procedure, the biometric data acquisition unit 27 acquires biometric data necessary for the analyzed authentication procedure from the user 30. Subsequently, according to the analyzed procedure, personal authentication is performed by collating the acquired biometric data with the authentication data held by the authentication data holding unit 24 (S08). Specifically, when the authentication procedure α is analyzed in step S07, the following processing is performed at the start of each reproduction according to the authentication procedure α. First, the biometric data acquisition unit 27 acquires the fingerprint data of the user 30. Subsequently, the personal authentication is performed by comparing the acquired fingerprint data with the authentication data X held by the authentication data holding unit 24. Here, the authentication data owner information added to the authentication data X is referred to, and it is recognized that the authentication data X is user A's data. You may make it notify that "I want you to input".

  Subsequently, the authentication execution unit 26 determines whether the above authentication has succeeded or failed (S09).

  If the authentication fails, the authentication may be performed again (S13), or may end abnormally and stop the reproduction of the content data.

  When the verification is successful, the authentication execution unit 26 notifies the reproduction function control unit 28 of the success of authentication together with the content “permit content reproduction” according to the content of the authentication procedure α. Upon receiving the notification, the reproduction function control unit 28 controls the reproduction function unit 29 to reproduce the content data held in the content data holding unit 23 according to the content of the notification (S10).

  When the reproduction of the content data is finished (S11), the processing at the terminal 20 is finished. When the authentication is repeatedly performed during the reproduction of the content data according to the contents of the authentication procedure (S12), the authentication of S08 to S10 is performed again. Specifically, for example, when the authentication procedure α is selected, the authentication is performed only once at the start of reproduction. Therefore, after the reproduction of the content data is started, the processing at the terminal 20 is terminated when the reproduction of the content data is completed. For example, when the authentication procedure γ is selected, the process is the same as described above until the authentication is first performed using the authentication data X and the reproduction of the content data is started. Since the authentication procedure γ further includes authentication using the authentication data Z every 10 minutes, the authentication execution unit 26 performs authentication using the authentication data Z every 10 minutes. The authentication is continuously executed until the user 30 finishes the reproduction of the content data. The processing at the time of reproducing content data is as described above.

  As described above, according to the present embodiment, the user 30 of content data is authenticated using biometric data that does not have a risk of leakage or the like. Further, by adding the biometric data and authentication procedure data to the content data, the terminal that reproduces the content data is not limited. Accordingly, it is possible to protect the copyright and prevent unauthorized use of the electronic data 40 without depending on an ID or password that may be leaked or the like and without reducing the convenience of the user 30.

  In addition, the present invention can provide a copyright protection function in accordance with the copyright protection policy unique to each CP by using the data related to the priority.

  In the above-described embodiment, as shown in FIG. 2, the form in which the electronic data 40 is distributed from the server 10 to the terminal 20 </ b> A (mobile phone) via the network 60 has been described. It is not limited to form. For example, the electronic data 40 may be copied from the terminal 20A to the terminal 20B (PC), and the above-described processing may be performed at the terminal 20B. Alternatively, the terminal 20B may store the electronic data 40 in the external memory 50, and the terminal 20C may read the electronic data 40 from the external memory 50 and perform the above-described processing.

  Further, as in the above-described electronic data 40 format, the electronic data 40 includes authentication data and authentication procedure data corresponding to a plurality of users of the user A (user 30A) and the user B (user 30B). By using them, it is possible to set authority for a group instead of an individual.

It is the figure which showed the location which has conventionally performed the authentication regarding electronic data. 1 is an overall configuration diagram of a content distribution / playback system including a server (CP) and a terminal according to an embodiment of the present invention. It is a block diagram of a server and a terminal. It is a figure which shows an example of electronic data. It is a flowchart showing the process of embodiment of this invention.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 1 ... Content distribution reproduction system, 10 ... Server, 11 ... Distribution part, 12 ... Authentication information addition part, 13 ... Content database, 14 ... Authentication information database, 20, 20A, 20B, 20C ... Terminal, 21 ... Reception part, 22 ... Data extraction unit, 23 ... Content data holding unit, 24 ... Authentication data holding unit, 25 ... Authentication procedure analysis unit, 26 ... Authentication execution unit, 27 ... Biometric data acquisition unit, 28 ... Reproduction function control unit, 29 ... Reproduction Functional unit 30, 30A, 30B ... user, 40 ... electronic data, 41 ... authentication information unit, 41A ... authentication procedure unit, 41B ... authentication data unit, 42 ... content data unit, 50 ... external memory, 60 ... network.

Claims (5)

A server comprising authentication information adding means for adding one or more biometric data usable for personal authentication and one or more authentication procedure data related to a personal authentication procedure using the biometric data to content data . A terminal having a content data playback function,
Additional data has been removed from content data to which one or more biometric data that can be used for personal authentication and one or more authentication procedure data related to a personal authentication procedure using the biometric data is added. Data extraction means for extracting the content data, the biometrics data, and the authentication procedure data;
Content data holding means for holding the content data extracted by the data extraction means;
Authentication data holding means for holding the biometric data extracted by the data extraction means;
From the authentication procedure data extracted by the data extraction means, an authentication procedure analysis means for analyzing a personal authentication procedure using the biometric data,
Biometric data acquisition means for acquiring biometric data of a person who intends to reproduce the content data used for personal authentication;
In accordance with the procedure of personal authentication analyzed by the authentication procedure analysis means, by comparing biometric data acquired by the biometric data acquisition means and biometric data held by the authentication data holding means, An authentication execution means for performing personal authentication;
A playback function control unit that controls playback of content data held by the content data holding unit based on a result of authentication by the authentication execution unit. A content authentication method in a terminal having a content data playback function,
Additional data has been removed from content data to which one or more biometric data that can be used for personal authentication and one or more authentication procedure data related to a personal authentication procedure using the biometric data is added. A data extraction step for extracting the content data, the biometric data, and the authentication procedure data;
A content data holding step for holding the content data extracted by the data extraction step;
An authentication data holding step for holding the biometric data extracted by the data extraction step;
From the authentication procedure data extracted by the data extraction step, an authentication procedure analysis step for analyzing a personal authentication procedure using the biometric data,
A biometric data acquisition step for acquiring biometric data of a person who intends to reproduce the content data used for personal authentication;
According to the procedure of the personal authentication analyzed by the authentication procedure analysis step, by comparing the biometric data acquired by the biometric data acquisition step and the biometric data held by the authentication data holding step, An authentication execution step for performing personal authentication;
A content authentication method comprising: a reproduction function control step for controlling reproduction of the content data held by the content data holding step based on the result of authentication by the authentication execution step. A content distribution / playback system including a server and a terminal having a content data playback function,
The server
Authentication information adding means for adding one or more biometric data usable for personal authentication, and one or more authentication procedure data relating to a personal authentication procedure using the biometric data to content data;
A delivery means for delivering the content data to which the biometrics data and the authentication procedure data are added to the terminal by the authentication information addition means;
The terminal
Content data acquisition means for acquiring content data to which the biometrics data and the authentication procedure data are added;
Data extraction means for extracting the content data from which the additional data has been removed, the biometric data, and the authentication procedure data from the content data acquired by the content data acquisition means;
Content data holding means for holding the content data extracted by the data extraction means;
Authentication data holding means for holding the biometric data extracted by the data extraction means;
From the authentication procedure data extracted by the data extraction means, an authentication procedure analysis means for analyzing a personal authentication procedure using the biometric data,
Biometric data acquisition means for acquiring biometric data of a person who intends to reproduce the content data used for personal authentication;
In accordance with the procedure of personal authentication analyzed by the authentication procedure analysis means, by comparing biometric data acquired by the biometric data acquisition means and biometric data held by the authentication data holding means, An authentication execution means for performing personal authentication;
A content distribution reproduction system comprising: a reproduction function control unit that controls reproduction of content data held by the content data holding unit based on a result of authentication by the authentication execution unit. A content distribution / playback method in a content distribution / playback system including a server and a terminal having a content data playback function,
The content distribution / playback method in the server is:
An authentication information adding step of adding one or more biometric data that can be used for personal authentication and one or more authentication procedure data related to a personal authentication procedure using the biometric data to the content data;
A delivery step of delivering the content data to which the biometrics data and the authentication procedure data are added to the terminal by the authentication information adding step;
The content distribution playback method in the terminal is as follows:
A content data acquisition step of acquiring content data to which the biometric data and the authentication procedure data are added;
A data extraction step of extracting the content data from which the additional data has been removed, the biometrics data, and the authentication procedure data from the content data acquired by the content data acquisition step;
A content data holding step for holding the content data extracted by the data extraction step;
An authentication data holding step for holding the biometric data extracted by the data extraction step;
From the authentication procedure data extracted by the data extraction step, an authentication procedure analysis step for analyzing a personal authentication procedure using the biometric data,
A biometric data acquisition step for acquiring biometric data of a person who intends to reproduce the content data used for personal authentication;
According to the procedure of the personal authentication analyzed by the authentication procedure analysis step, by comparing the biometric data acquired by the biometric data acquisition step and the biometric data held by the authentication data holding step, An authentication execution step for performing personal authentication;
A content distribution playback method comprising: a playback function control step for controlling playback of the content data held in the content data holding step based on the result of authentication in the authentication execution step.

Images