JP2005165816A - File use right management method, content usage apparatus, mobile terminal, generation method for validity period set file, recording medium recording validity period set file, and computer program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To realize management of a right to use a content file by acquiring a standard time from a portable telephone using the standard time which cannot be operated by a user. <P>SOLUTION: A use right manager 22 is provided in a content usage apparatus 20 which uses content data stored in a content file 100 having a preset validity period for use. The use right manager 22 requests the standard time to a portable telephone 30 using the standard time which cannot be operated by the user. The portable telephone 30 provides the content usage apparatus 20 with the standard time. The use right manager 22 compares the standard time received from the portable telephone 30 with the validity period for use of the content file 100. Thus, by deciding whether or not the content data is available, the use right manager 22 controls the use of the content data. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

  The present invention relates to a file usage right management method, a content use device, a mobile terminal, a method for creating an expiration date setting file, a recording medium recording the expiration date setting file, and a computer program.

  2. Description of the Related Art In recent years, a system has been developed in which a usage validity period and a usage validity period are set in a file storing content such as music, movies, and computer software and distributed to viewers for copyright protection. Then, when using the content stored in the content file, the content use device compares the use valid period or use valid period set in the content file with the current time by the built-in clock to determine whether or not the content can be used. ing. For example, when music data in a music file is played back on a personal computer, the music data can be played back if the current time by the internal clock of the personal computer is within the expiration date of use of the music file. As a result, the right to use the content file is managed.

Also, when receiving system time data transmitted from a base station through a control channel as standard time information in a code division multiple access (CDMA) mobile phone or the like, when reproducing content information In addition, it is determined whether or not the content information can be reproduced by comparing the reproduction expiration date set in the content information with the received standard time (for example, see Patent Document 1).
JP 2003-169376 A

  However, in the conventional technology described above, the user can freely set the time on the built-in clock of the personal computer, and the content file may be used illegally. In addition, it is conceivable that a personal computer is equipped with a GPS (Global Positioning System) receiver to acquire a standard time and determine whether or not it can be used by comparing the standard time with the expiration date. Since the personal computer does not need the GPS original position information acquisition function, it is not realistic to provide the personal computer with a GPS receiver. For this reason, there is a demand for obtaining a standard time from a CDMA mobile phone possessed by the user and using it for managing the right to use the content file.

  The present invention has been made in consideration of such circumstances, and its purpose is to acquire the standard time from a mobile phone that uses the standard time that cannot be operated by the user and obtain the right to use the content file. It is to provide a file usage right management method that can be managed.

  Another object of the present invention is to provide a content use device and a mobile terminal that can be used in the file usage right management method of the present invention.

  Another object of the present invention is to provide a method for creating an expiration date setting file that can be used in the file usage right management method of the present invention.

  Another object of the present invention is to provide a recording medium that records an expiration date setting file that can be used in the file usage right management method of the present invention.

  Another object of the present invention is to provide a computer program for realizing the content use device of the present invention using a computer.

In order to solve the above problems, a file usage right management method according to the present invention is a usage right management method for a content file in which a usage expiration date is set in advance, and uses content data stored in the content file. A request process for requesting the standard time to a mobile terminal using a standard time that cannot be operated by the user, and the mobile terminal receiving the request for the standard time Providing a standard time, and a step of determining whether or not the content data can be used by comparing the standard time received from the mobile terminal with the expiration date of use. It is characterized by.
According to this configuration, it is possible to manage the right to use the content file by acquiring a standard time that cannot be operated by the user from the mobile terminal.

In the file usage right management method of the present invention, the content usage device further includes a control process for controlling the use of the content data according to the determination result.
According to this configuration, reproduction of content data can be restricted based on management of content file usage rights.

In the file usage right management method of the present invention, the content file is preset with an effective period for specifying the use expiration date and an effective period setting interval. A challenge code is generated and supplied to the mobile terminal together with the valid period setting interval, and the mobile terminal normalizes the standard time according to the valid period setting interval received from the content using device in the providing process, Using the standard time after conversion as a key, a response code for the challenge code is generated by a one-way function, and in the determination process, the content use device performs the effective period setting interval from the start time to the end time of the effective period. Current time candidates are sequentially generated by width, and the current time candidates are used as keys to Generated by the one-way function the response candidate for responsible sales person, characterized by collating the response code received from the mobile terminal.
According to this configuration, since the standard time can be provided from the mobile terminal to the content using device as a disposable key, it is possible to prevent the standard time provided from the mobile terminal from being illegally used. For example, even if the standard time provided from the mobile terminal is recorded, it is not useful.

Also, in the file usage right management method of the present invention, when a mobile phone number for limiting users is set in the content file, the content use device is configured to send the mobile terminal in the request process. Requesting the mobile phone number of the mobile terminal, the mobile terminal providing its mobile phone number to the content using device in the providing step, and the content using device in the determining step The determination of whether or not the content data can be used is made by taking into account the coincidence or mismatch of the mobile phone numbers.
According to this configuration, it is possible to manage only a limited number of users.

In the file usage right management method of the present invention, the content file may include a computer program that causes the computer to execute the request process and the determination process, or the request process, the determination process, and the control process to the computer. A computer program to be executed is stored, and the content using device executes the computer program.
According to this configuration, the present invention can also be applied to a general-purpose content use device (for example, a personal computer).

In the file usage right management method of the present invention, the content data and the information on the usage restriction are encrypted and stored in the content file, and the content file is used for the encryption. Encryption information is stored, and the computer program includes storage location information of the encryption information and a decryption program.
According to this configuration, unauthorized use of the content file due to tampering or the like can be prevented.

  The content use device of the present invention is a content use device that uses content data stored in a content file in which a use expiration date is set in advance, for a mobile terminal that uses a standard time that cannot be operated by a user. Requesting means for requesting the standard time, and determination means for comparing the standard time received from the mobile terminal and the expiration date of use of the content file to determine whether or not the content data can be used. It is said.

  The mobile terminal according to the present invention acquires a standard time from a content use device that uses content data stored in a content file whose use expiration date is set in advance in a mobile terminal using a standard time that cannot be operated by a user. It is characterized by providing means for providing the standard time when a request is received.

  The method of creating an expiration date setting file of the present invention uses a process of storing content data in a file, a process of storing usage expiration date information of the content data in the file, and a standard time that cannot be operated by a user. The computer implements a function of requesting the mobile terminal to request the standard time and a function of comparing the standard time received from the mobile terminal with the expiration date of use and determining whether or not the content data can be used. And storing the computer program in the file.

  The recording medium recording the expiration date setting file of the present invention requests the standard time from the content data, the usage expiration date information of the content data, and the mobile terminal using the standard time that cannot be operated by the user. An expiration date setting file for storing a computer program for causing a computer to perform a function of comparing the standard time received from the mobile terminal with the usage expiration date and determining whether to use the content data. It is characterized by recording.

The computer program of the present invention includes a function for requesting a mobile terminal that uses a standard time that cannot be operated by a user, the standard time received from the mobile terminal, and a use expiration date of content data. In comparison, the computer is realized with a function of determining whether or not the content data can be used.
As a result, the above-described content using device can be realized using a computer.

  According to the present invention, it is possible to acquire the standard time that cannot be operated by the user from a mobile terminal (for example, a CDMA mobile phone) and manage the right to use the content file.

Hereinafter, an embodiment of the present invention will be described with reference to the drawings.
FIG. 1 is a block diagram showing a configuration of a file usage right management system according to an embodiment of the present invention.
In FIG. 1, a personal computer (PC) 10 functions as a file creation device, and creates a content file 100 storing content data as a file with an expiration date set (expiration date setting file). The PC 10 includes a file creation unit 11 that creates the content file 100 and an application storage unit 12 that stores in advance a computer program supplied to the file creation unit 11 as an application unit. The application part is a computer program for realizing the function of managing the right to use the content file 100. This application part is stored in the content file 100 and supplied to the content using device together with the content data.

The PC 20 is a content use device including a content use unit 21 that uses content data. For example, the content use unit 21 reproduces music data and movie data. Alternatively, computer software such as a computer game is executed.
Further, the PC 20 includes a usage right management unit 22 that manages the usage rights of the content file 100. The usage right management unit 22 is realized by the CPU of the PC 20 executing the application unit described above. The usage right management unit 22 requests at least the standard time from the mobile phone 30. This request is made using a challenge code.

  The cellular phone 30 is a terminal of a CDMA cellular phone system and communicates with the base station 40 by radio. Then, system time data transmitted from the base station 40 through the control channel is received as standard time information, and the standard time is acquired. This standard time cannot be operated by the user. Furthermore, the mobile phone 30 includes a response calculation unit 31 that generates a response code for the challenge code received from the PC 20. The response calculation unit 31 provides at least the standard time to the PC 20 using the response code.

  Note that the response calculation unit 31 described above is realized by the CPU of the mobile phone 30 executing a dedicated program. The dedicated program may be held in advance in the mobile phone 30 or may be downloaded and held via the mobile phone system.

Next, the operation of the file creation unit 11 of the PC 10 shown in FIG. 1 will be described with reference to FIG. FIG. 2 is a flowchart showing a flow of file creation processing performed by the file creation unit 11.
First, in order to limit the original file in which the content data is stored, the valid period of the content file (start time (date and time) and end time (date and time)), the set interval of the valid period, and the user by the content file provider Mobile phone number is entered. With this input, the file creation unit 11 starts the process of FIG. The mobile phone number is not an essential input item. In this embodiment, a valid period is specified as information for specifying a valid use period.

  In FIG. 2, the file creation unit 11 generates a random number and stores it as a key information unit (steps S101 and S102). Next, the random number (key information part) is converted by a predetermined function F1, and the converted value is held as an encryption key (steps S103 and S104). Next, it is determined whether or not a mobile phone number has been input. If there is an input, the input mobile phone number is used as mobile phone number information (steps S105 and S106). On the other hand, when there is no input, a predetermined character string indicating no designation by the user is set as the mobile phone number information (step S107).

  Then, the input valid period information, valid period setting interval information, and the mobile phone number information are connected to generate a decryption condition part (step S108). Next, the decryption condition part is encrypted by a predetermined function F2 using the held encryption key as a conversion parameter, and the encrypted decryption condition part is retained (steps S109 and S110).

  Next, the input original file is encrypted by a predetermined function F2 using the held encryption key as a conversion parameter (step S111). Next, the application unit is acquired from the application storage unit 12, and the content file (expiration date setting file) 100 is generated by connecting the application unit, the key information unit, the encryption / decryption condition unit, and the encrypted original file.

  FIG. 3 is a diagram illustrating a configuration example of the content file 100. In the application part, the start position of the key information part is set in advance. For example, an offset value (fixed value) from the beginning position of the file is set. In addition, padding is performed up to the start position of the key information part according to the size of the application part. As the padding data, for example, the random number generated in step S101 can be used. The sizes of the key information part and the encryption / decryption condition part are fixed.

A common key encryption algorithm is used for the function F2 used for the above encryption. For example, an AES (Advanced Encryption Standard) 128-bit function can be used.
Further, at the time of encryption, the hash function value of the data to be encrypted may be included in a part of the encrypted data. Thereby, it is possible to detect falsification of the decryption condition part and the original file. For example, 160-bit SHA-1 (Secure Hash Algorithm 1) can be used as the hash function.

  The content file 100 generated by the PC 10 may be transmitted to the PC 20 via a communication line, or may be recorded on a portable recording medium (DVD, MD, etc.) and provided to the user. .

Next, operations of the usage right management unit 22 of the PC 20 and the response calculation unit 31 of the mobile phone 30 will be described.
In the following description, the content file 100 described above is input to the PC 20, and the CPU of the PC 20 executes the application unit included in the content file 100 by the user's operation, thereby realizing the function of the usage right management unit 22. It shall be.

First, with reference to FIG. 4, an operation in which the usage right management unit 22 of the PC 20 requests at least the standard time from the mobile phone 30 will be described. FIG. 4 is a flowchart showing a flow of request processing performed by the usage right management unit 22 of the PC 20 shown in FIG.
In FIG. 4, the usage right management unit 22 acquires a key information unit from the content file 100 (step S201). Next, the key information part is converted by the same function F1 as in step S103 of FIG. 2, and the converted value is held as a decryption key (steps S202 and S203).

  Next, an encryption / decryption condition part is acquired from the content file 100 (step S204). Next, the encryption / decryption condition part is decrypted using “function-F2” which is an inverse function of the function F2 used in step S109 of FIG. 2 using the held decryption key as a conversion parameter (step S205). Next, the valid period setting interval and the mobile phone number information are acquired from the decryption condition part after decryption (step S206). Next, it is determined whether or not the mobile phone number information is a character string indicating that the user is not specified (step S207). If it is the character string, the user specified presence / absence information is set to “no user specified”. (Step S208). On the other hand, if it is not the character string, presence / absence of user designation is set in the user designation presence / absence information (step S209).

  Next, the user designation presence / absence information is linked to the effective period setting interval (step S210). Next, a random number is generated, and the concatenated data is incorporated into the random number by a predetermined function F3 (step S211). Next, the data after incorporation is output as a challenge code (step S212). This challenge code is retained.

  The challenge code generated by the PC 20 is displayed on the screen of the PC 20 and input to the mobile phone 30 by the user. Alternatively, it may be transmitted directly to the mobile phone 30 by communication (wired or wireless). The challenge code functions as a command that requests the mobile phone 30 for a standard time. Further, when the above-described user designation presence / absence information is designated by the user, it also functions as a command for requesting the cellular phone 30 for the cellular phone number of the cellular phone.

Next, with reference to FIG. 5, an operation in which the response calculation unit 31 of the mobile phone 30 provides at least the standard time as a response to the challenge code will be described. FIG. 5 is a flowchart showing the flow of the providing process performed by the response calculation unit 31 of the mobile phone 30 shown in FIG.
In the following description, it is assumed that the challenge code described above is input to the mobile phone 30, the CPU of the mobile phone 30 executes a dedicated program by the user's operation, and the function of the response calculation unit 31 is realized. To do.

  In FIG. 5, the response calculation unit 31 uses the input challenge code as an input value, and uses “function-F3”, which is the inverse function of the function F3 used in step S211 of FIG. Concatenated data including the set interval is acquired (step S301). Next, the user designation presence / absence information and the valid period setting interval are obtained from the linked data (step S302).

  Next, it is determined whether or not the user designation presence / absence information is designated by the user (step S303), and if the user designation is designated, the mobile phone number information is set to its own mobile phone number ( Step S304). On the other hand, if the user is not specified, a character string indicating that the user is not specified is set in the mobile phone number information (step S305).

  Next, the current standard time information is acquired (step S306) and normalized by the effective period setting interval (step S307). For example, when the effective period setting interval is 1 hour, the standard time is corrected to be expressed in time. Further, when the effective period setting interval is in units of one day, the standard time is corrected so as to be expressed in units of days.

  Next, the challenge code, standard time information after normalization (normalized time information) and mobile phone number information are concatenated (step S308), and the concatenated data is converted by a predetermined hash function H1 (step S309). Next, the converted data (hash value) is converted by a predetermined function F4 (step S310). Next, the converted data is output as a response code (step S311).

  The response code generated by the mobile phone 30 is displayed on the screen of the mobile phone 30 and input to the PC 20 by the user. Alternatively, it may be transmitted directly to the PC 20 by communication (wired or wireless). The response code functions as an information provision command for a request from the PC 20.

Next, with reference to FIG. 6, an operation in which the usage right management unit 22 of the PC 20 determines provided information from the mobile phone 30 and an operation for controlling the use of content will be described. FIG. 6 is a flowchart showing the flow of determination processing and control processing performed by the usage right management unit 22 of the PC 20 shown in FIG.
When the response code to the challenge code supplied to the mobile phone 30 is input, the usage right management unit 22 starts the process of FIG. In FIG. 6, the usage right management unit 22 acquires the start time and end time of the valid period from the decryption condition part obtained by decrypting the encryption / decryption condition part of the content file 100 (step S401). Next, the effective period start time is set as the current time candidate (step S402).

  Next, the challenge code, current time candidate and mobile phone number information (obtained from the decryption condition part obtained by decrypting the encryption / decryption condition part of the content file 100) supplied to the mobile phone 30 are concatenated (step S403). Next, the concatenated data is converted by the same hash function H1 as in step S309 in FIG. 5 (step S404), and the converted data (hash value) is converted by the same function F4 as in step S310 in FIG. (Step S405). Data converted by this function F4 becomes a response candidate.

  Next, the response candidate is compared with the input response code (step S406), and if they match, it is determined that the verification is successful (step S407). As a result, it is confirmed that at least the standard time acquired from the mobile phone 30 is within the expiration date of use of the content. In addition, when a mobile phone number for limiting the user is specified by the content file provider, it is confirmed that the user is an authorized person by matching the mobile phone number information. Become.

On the other hand, if the result of comparison in step S406 is a mismatch, it is determined whether the current time candidate matches the valid period end time (step S408). S409).
If there is a mismatch in step S408, a new current time candidate is generated by adding the effective period setting interval to the current time candidate (step S410), and the process returns to step S403.

In this way, current time candidates are sequentially generated from the start time to the end time of the effective period with the effective period setting interval width, and the response candidate for the challenge code supplied to the mobile phone 30 using the current time information as a key is a hash function ( The response code generated by the one-way function and received from the mobile phone 30 is verified.
The processing so far corresponds to the determination processing, and the subsequent processing corresponds to the control processing.

  Next, if the collation is successful in the determination process, the process proceeds to step S501, and an encrypted original file is acquired from the content file 100. Next, the encrypted original file is decrypted using the decryption key held in step S203 of FIG. 4 by “function-F2” which is the inverse function of the function F2 used in step S111 of FIG. 2 (step S502). . Next, the decrypted original file is output to the content use unit 21 of FIG. 1 (step S503). Accordingly, the content use unit 21 in FIG. 1 can use the original file.

  On the other hand, if the collation fails in the determination process, the encrypted original file is not decrypted. Accordingly, since the original file cannot be obtained, the content use unit 21 cannot use the original file. As a result, unauthorized use of the content can be prevented.

The embodiment of the present invention has been described in detail with reference to the drawings. However, the specific configuration is not limited to this embodiment, and includes design changes and the like within a scope not departing from the gist of the present invention.
For example, the content use device according to the present invention may be a general-purpose device such as a personal computer as in the above-described embodiment, or may be a dedicated player.

  Further, the mobile terminal according to the present invention may be a terminal that includes a GPS receiver and acquires a standard time, in addition to a mobile communication terminal such as a CDMA mobile phone in the above-described embodiment. For example, it may be a portable terminal called PDA (Personal Digital Assistants).

  In the present invention, the type of content is not limited. For example, various copyrighted works such as music software, movies, books, computer software such as computer games can be applied as content.

  Further, the present invention can be applied not only for the purpose of protecting the copyright of contents but also for business management purposes. For example, in a rental service system for content (music, movies, etc.), the present invention can be applied to management of a rental time limit after renting content. In this case, the rental store or the like is equipped with the file creation device according to the present invention, and when renting, the rental period may be set for the content file including the encrypted data of the original file of the content to be rented. Then, this content file (expiration date setting file) is transmitted to the user via the communication line. Alternatively, it is recorded on a portable recording medium (DVD, MD, etc.) and provided to the user. This makes it impossible to use the content after the rental deadline has expired, thereby simplifying rental management.

It is a block diagram which shows the structure of the file usage right management system which concerns on one Embodiment of this invention. It is a flowchart which shows the flow of the file creation process which the file creation part 11 shown in FIG. 1 performs. It is a figure which shows the structural example of the content file 100 (expiration date setting file) which concerns on one Embodiment of this invention. It is a flowchart which shows the flow of the request process which the usage right management part 22 shown in FIG. 1 performs. It is a flowchart which shows the flow of the provision process which the response calculation part 31 shown in FIG. 1 performs. It is a flowchart which shows the flow of the determination process and control process which the usage right management part 22 shown in FIG. 1 performs.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 ... PC (file creation apparatus), 11 ... File creation part, 12 ... Application memory | storage part, 20 ... PC (content use apparatus), 21 ... Content use part, 22 ... Usage right management part, 30 ... Mobile telephone (mobile terminal) ), 31... Response calculation unit, 100... Content file (expiration date setting file).

Claims (11)

It is a usage right management method for content files with a preset expiration date.
A request process in which a content using device using content data stored in the content file requests the standard time from a mobile terminal using a standard time that cannot be operated by a user;
The providing process in which the mobile terminal that has received the request for the standard time provides the standard time to the content use device;
A determination process in which the content use device compares the standard time received from the mobile terminal with the use expiration date and determines whether the content data can be used;
A file usage right management method comprising:   The file usage right management method according to claim 1, further comprising a control process in which the content use device controls use of the content data in accordance with the determination result. In the content file, an effective period for specifying the use expiration date and an effective period setting interval are set in advance,
In the request process, the content using device generates a challenge code and supplies the mobile terminal together with the valid period setting interval,
In the providing process, the mobile terminal normalizes a standard time based on an effective period setting interval received from the content using device, and generates a response code for the challenge code by a one-way function using the standard time after normalization as a key. And
In the determination process, the content using device sequentially generates current time candidates within the effective period setting interval from the start time to the end time of the effective period, and using the current time candidate as a key, a response candidate for the challenge code Is generated by the one-way function, and the response code received from the mobile terminal is verified.
The file usage right management method according to claim 1 or 2, characterized in that When a mobile phone number for limiting users is set in the content file, the content use device requests the mobile terminal of the mobile terminal from the mobile terminal in the request process. And
The mobile terminal provides its mobile phone number to the content use device in the providing process,
The content using device determines whether or not the content data can be used in consideration of the match / mismatch of the mobile phone numbers in the determination process.
The file usage right management method according to any one of claims 1 to 3, wherein the file usage right management method is provided. The content file stores a computer program that causes the computer to execute the request process and the determination process, or a computer program that causes the computer to execute the request process, the determination process, and the control process.
5. The file usage right management method according to claim 1, wherein the content use device executes the computer program. The content data and the information related to the use restriction are encrypted and stored in the content file,
The content file stores encryption information used for the encryption,
The computer program includes storage location information of the encryption information and a decryption program.
The file usage right management method according to claim 5, wherein: In a content using device that uses content data stored in a content file with a preset expiration date,
Request means for requesting the standard time to the mobile terminal using the standard time which cannot be operated by the user;
A determination unit that compares the standard time received from the mobile terminal with the expiration date of use of the content file and determines whether the content data can be used;
A content use device characterized by comprising: In a mobile terminal using a standard time that cannot be operated by the user,
When providing a standard time acquisition request from a content use device that uses content data stored in a content file whose use expiration date is set in advance, provision means for providing the standard time is provided. Mobile terminal. The process of storing content data in a file;
Storing the expiration date information of the content data in the file;
The function of requesting the standard time to the mobile terminal using the standard time that cannot be operated by the user is compared with the standard time received from the mobile terminal and the expiration date of use. A process of storing in the file a computer program that causes a computer to execute a function for determining whether or not to permit;
A method of creating an expiration date setting file characterized by including: Content data,
Use expiration date information of the content data;
The function of requesting the standard time to the mobile terminal using the standard time that cannot be operated by the user is compared with the standard time received from the mobile terminal and the expiration date of use. A computer program for causing a computer to execute a function for determining whether it is possible;
The recording medium which recorded the expiration date setting file which stores. A function of requesting the standard time to the mobile terminal using the standard time that cannot be operated by the user;
A function of comparing the standard time received from the mobile terminal with the expiration date of use of content data and determining whether the content data can be used;
A computer program for causing a computer to realize the above.

Images