JP2005202583A - Service using equipment, profile license issuing device, use right license issuing device, and ownership license issuing device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a service providing system capable of preventing leak of a profile showing the attribute of a user or using equipment to a third person. <P>SOLUTION: A using equipment profile storage part 11 and a user profile storage part 31 store a using equipment profile showing the attribute of service using equipment which requests a service and a user profile showing the attribute of a user who requests a service, respectively. Profile access determination parts 12 and 32 determine whether access of a service providing part 40 to the profile storage parts 11 and 31 is permitted or not based on profile licenses issued by a using equipment profile license issuing device 5 and a user profile license issuing device 4, respectively. The service providing part 40 provides services according to the profiles acquired from the profile storage parts 11 and 31. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

  The present invention relates to a service providing system, and more particularly to a service providing system that provides a service to a user according to a profile that represents an attribute of the user or a service using device.

2. Description of the Related Art Conventionally, there is a type in which a profile representing an attribute of a user or a service using device is stored in a recording medium such as an IC card or a memory card, and a service corresponding to the stored profile is provided. For example, the access control information including the date of birth of the user fixedly recorded on the IC card and the access request indicating the request for content are received, and the age of the user included in the received access control information is requested. Judging whether the registered age condition is satisfied according to the content of the content and the form of the provision, and providing the requested content is permitted only when the age of the user satisfies the registered age condition (For example, refer to Patent Document 1).
JP 2003-167785 A

  However, in the conventional technology as described above, since the profile of the user or the service using device is unconditionally transmitted to the content provider, the profile leaks to a third party such as a malicious content provider. There was a problem.

  The present invention has been made to solve such a problem, and its object is to provide a service using device and profile capable of preventing leakage of a profile representing an attribute of the user or the service using device to a third party. It is to provide a license issuing device, a usage right license issuing device, and an ownership license issuing device.

  According to the first aspect of the present invention, the service using device stores a profile storage unit that stores a profile representing an attribute of a request source of the service, and a service according to the profile acquired by accessing the profile storage unit. Whether to allow the service providing means to access the profile storage means based on the profile license issued by the service providing means provided to the request source and the profile license issuing device that issues the profile license for accessing the profile storage means Profile access determination means for determining whether or not.

  With this configuration, since reading and writing of the profile is restricted based on the profile license issued by the profile license issuing device, it is possible to prevent profile leakage to a third party.

  According to the embodiment of the present invention, the service using device stores a usage right storage unit that stores a usage right that represents a right to use the service, and a usage right that issues a usage right license for accessing the usage right storage unit. Based on the usage right license issued by the license issuing device, further comprising usage right access determining means for determining whether or not the service providing means accesses the usage right storage means, and the service providing means stores the usage right storage. It is configured to provide a service according to the usage right acquired by accessing the means.

  With this configuration, reading / writing of the usage right is restricted based on the usage right license issued by the usage right license issuing device, and thus leakage of the usage right to a third party can be prevented.

  According to the embodiment of the present invention, the service using device includes an ownership storage unit that stores ownership representing the ownership relationship between the user who uses the service and the device, and an ownership stored in the ownership storage unit. Ownership access determining means for determining whether or not to allow the service providing means to access the ownership storage means based on the ownership license issued by the ownership license issuing device that issues an ownership license for accessing And the service providing means is configured to provide a service further according to the ownership acquired by accessing the ownership storage means.

  With this configuration, since reading and writing of ownership is restricted based on the ownership license issued by the ownership license issuing device, it is possible to prevent leakage of ownership to a third party.

  According to the embodiment of the present invention, in the service using device, the profile storing unit has a user profile storing unit that stores a user profile indicating an attribute of the user who requests the service, and the profile license is used. A user profile license for accessing the user profile stored in the user profile storage unit. The profile license issuing device has user profile license issuing means for issuing a user profile license.

  With this configuration, since reading and writing of the user profile is restricted based on the user profile license issued by the user profile license issuing unit, it is possible to prevent leakage of the user profile to a third party.

  According to the embodiment of the present invention, in the service use device, the user profile storage unit and the profile access determination means are constituted by an IC card.

  With this configuration, since the user profile is stored in the tamper-resistant IC card, the leakage of the user profile to a third party can be prevented, and the user profile can be made portable.

  According to the embodiment of the present invention, in the service using device, the profile storage unit includes a using device profile storage unit that stores a using device profile that represents an attribute of the using device that requests the service, and the profile license is used. A used device profile license for accessing the used device profile stored in the device profile storage unit is included. The profile license issuing device has a used device profile license issuing unit that issues a used device profile license for accessing the used device profile stored in the used device profile storage unit.

  With this configuration, since reading / writing of the used device profile is restricted based on the used device profile license issued by the used device profile license issuing unit, it is possible to prevent leakage of the used device profile to a third party.

  According to the embodiment of the present invention, in the service use device, the use device profile storage unit and the profile access determination unit are configured by an IC chip provided in the use device.

  With this configuration, since the used device profile is stored in the IC chip controlled to be tamper resistant, leakage of the used device profile to a third party can be prevented.

  The present invention can provide a service providing system that can prevent leakage of a profile representing an attribute of a user or a device to be used to a third party.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

  FIG. 1 is a block diagram showing a configuration of a service providing system according to an embodiment of the present invention.

  The service providing system 1 includes a service using device 3, a user profile license issuing device 4, a using device profile license issuing device 5, an ownership license issuing device 6, a usage right license issuing device 7, respectively connected via a network 2. And an IC card 30 possessed by a user of the service providing system 1.

  The service providing system 1 includes a plurality of service using devices 3, a plurality of user profile license issuing devices 4, a plurality of used device profile license issuing devices 5, a plurality of ownership license issuing devices 6, and a plurality of usage right licenses. Although the apparatus 7 and the plurality of IC cards 30 can be provided, the following description will be given assuming that one device is provided for ease of explanation.

  Further, the service providing system of the present invention can be applied to various services. However, the service providing system 1 of the present embodiment is applied to a service for playing content such as video and music in the service using device 3. And

  The service using device 3 includes an input from a central processing unit (hereinafter simply referred to as “CPU”), a volatile storage medium such as a RAM, a non-volatile storage medium such as a ROM or a hard disk, a keyboard or a pointing device. The apparatus includes a device, a monitor device that displays an image, a speaker, and a network interface that performs communication via the network 2. Note that the service using device 3 may be configured by a computer device, a portable terminal, or a home appliance having a communication function as long as the content can be reproduced.

  The service using device 3 is provided with an IC chip 10 including a CPU and a non-volatile storage medium. The IC chip 10 stores a using device profile that stores a using device profile that represents an attribute of the service using device 3. Unit 11, profile access determination unit 12 that determines whether or not to access the used device profile storage unit 11 from the outside of the IC chip 10, and input / output of the used device profile based on the determination result by the profile access determination unit 12. And a communication unit 13.

  Here, the used device profile includes a generation source ID for identifying the generation source of the used device profile, a used device ID for identifying the service using device 3, and a manufacture for identifying the manufacturer of the service using device 3. The manufacturer ID, the model ID for identifying the model of the service using device 3, and the serial number of the service using device 3 are included, and signature information from the generation source of the using device profile for each of these pieces of information is further included.

  It should be noted that the hash information (summary) value of information obtained by combining the generator ID, the used device ID, the manufacturer ID, the model ID, the serial number, etc. is the signature information by the used device profile generator. It is encrypted with a private key. In the present embodiment, the used device profile is generated from the used device profile license issuing device 5, and the used device profile is falsified with the public key certified by the public key certificate of the used device profile license issuing device 5. It can be verified that this is not done.

  The profile access determination unit 12 determines whether to permit access to the used device profile storage unit 11 based on the used device profile license transmitted together with the access request. Here, the access to the used device profile storage unit 11 represents reading of the used device profile stored in the used device profile storage unit 11 and writing of the used device profile to the used device profile storage unit 11.

  The used device profile license is issued by the used device profile license issuing device 5, and the used device profile license is used to identify the issuer of the used device profile license, that is, the used device profile license issuing device 5. Issuing source ID, issuance destination ID for identifying the issuance destination of the used device profile license, expiration date, whether to allow writing of the used device profile, and whether to allow reading of the used device profile And the access permission information representing the information, and further includes signature information from the device profile license issuing device 5 for each of these pieces of information.

  The signature information by the used device profile license issuing device 5 is encrypted with the hash value of the information obtained by combining the issuer ID, issue destination ID, expiration date, and access permission information with the private key of the used device profile license issuing device 5. It has been done. Therefore, it can be verified that the used device profile license has not been falsified with the public key certified by the public key certificate of the used device profile license issuing device 5.

  Whether the access to the used device profile storage unit 11 is permitted or not is determined by the profile access determining unit 12 based on whether the access is accompanied by the used device profile license, the signature information of the used device profile license, or the used device profile license. Based on whether or not the public key of the issuing device 5 can be verified, whether or not the issue destination ID included in the used device profile license indicates the access request source, whether the access content is permitted by the access permission information, or the like. To be done.

  The IC chip 10 has an ownership storage unit 14 that stores ownership representing the owner of the service using device 3, and an ownership access determination that determines whether the ownership storage unit 14 is accessed from outside the IC chip 10. And a unit 15.

  Here, the ownership includes an issuer ID for identifying the issuer of ownership, and one or a plurality of user IDs for identifying the owner of the service using device 3. Further included is signature information from the issuer of ownership. The signature information by the ownership issuer is obtained by encrypting the hash value of the information obtained by combining the issuer ID and the user ID with the private key of the ownership issuer. In the present embodiment, the ownership issuer is the ownership license issuing device 6, and the ownership has not been tampered with the public key certified by the public key certificate of the ownership license issuing device 6. Can be verified.

  The ownership access determination unit 15 determines whether to permit access to the ownership storage unit 14 based on the ownership license transmitted together with the access request. Here, the access to the ownership storage unit 14 represents reading of the ownership stored in the ownership storage unit 14 and writing of the ownership to the ownership storage unit 14.

  The ownership license is issued by the ownership license issuing device 6, and the ownership license includes an issuer ID for identifying the ownership license issuing source, that is, the ownership license issuing device 6, and Issuing destination ID for identifying the issuing destination of the ownership license, whether to permit writing of ownership to the ownership storage unit 14, and whether to allow reading of ownership from the ownership storage unit 14 And access permission information indicating whether or not, and further includes signature information by the ownership license issuing device 6 for each of these pieces of information.

  The signature information by the ownership license issuing device 6 is obtained by encrypting the hash value of information obtained by combining the issuer ID, the issue destination ID, and the access permission information with the private key of the ownership license issuing device 6. . Therefore, it can be verified that the ownership license has not been falsified with the public key certified by the public key certificate of the ownership license issuing device 6.

  Whether the access to the ownership storage unit 14 is permitted or not is determined by the ownership access determining unit 15 based on whether the access is accompanied by an ownership license, the signature information of the ownership license, and the ownership license issuing device 6. Whether or not the public key can be verified, whether or not the issuer ID included in the ownership license indicates the access request source, whether or not the user profile license has expired, and the access contents This is performed based on whether it is permitted by the access permission information.

  The communication unit 13 inputs and outputs ownership based on the determination result by the ownership access determination unit 15.

  The IC chip 10 stores a usage right storage unit 16 that stores a usage right that represents a right to use a service provided by the service providing unit 40 described later, and whether or not the usage right storage unit 16 is accessed from outside the IC chip 10. And a usage right access determination unit 17 for determining whether or not.

  Here, the usage right includes a generation source ID for identifying the issuer of the usage right, a usage right ID for identifying the usage right, a content ID for identifying the content to be serviced, Distribution information on distribution, exercise condition information indicating conditions for exercising usage rights, and a decryption key for decrypting the target content. The signature information by the issuer of the usage rights for each piece of information is further included. included.

  Note that the signature information from the issuer of the usage right is the secret of the usage right issuer, which is a hash value of information obtained by combining the generation ID, the usage right ID, the content ID, the distribution permission information, the exercise condition information, the decryption key, and the like It is encrypted with a key. In this embodiment, the issuer of the usage right is the usage right license issuing device 7 and the usage right has not been falsified with the public key certified by the public key certificate of the usage right license issuing device 7. Can be verified.

  Here, the distribution permission / inhibition information represents a restriction when the use right is transferred to another use device or an IC card or copied. Exercise condition information includes conditions that limit users such as the age at which content can be played, conditions that limit used devices such as specifying used devices, and expiration dates that allow content to be played. include.

  The usage right access determination unit 17 determines whether to permit access to the usage right storage unit 16 based on the usage right license transmitted together with the usage right access request. Here, the access to the usage right storage unit 16 represents reading of the usage right stored in the usage right storage unit 16 and writing of the usage right to the usage right storage unit 16.

  The usage right license is issued by the usage right license issuing device 7. The usage right license includes an issuer ID for identifying the usage right license issuing source, that is, the usage right license issuing device 7, and Includes issuer ID for identifying issuer of usage right license, expiration date, access permission information indicating whether usage right writing is permitted, and usage right reading is permitted In addition, signature information by the usage right license issuing device 7 for each piece of information is further included.

  The signature information by the usage right license issuing device 7 is obtained by encrypting the hash value of information obtained by combining the issuing source ID, the issuing destination ID, the expiration date, and the access permission information with the private key of the usage right license issuing device 7. Is. Therefore, it can be verified that the usage right license has not been tampered with the public key certified by the public key certificate of the usage right license issuing device 7.

  Whether the access to the usage right storage unit 16 is permitted or not is determined by the usage right access determination unit 17 based on whether or not the access is accompanied by a usage right license and the signature information of the usage right license. Whether the issuer ID included in the usage right license indicates the access request source, whether the usage right license has expired, and the contents of the access This is performed based on whether or not it is permitted by the permission information.

  The communication unit 13 inputs and outputs usage rights based on the determination result by the usage right access determination unit 17.

  The service using device 3 further includes an IC card interface (not shown) that detachably holds the IC card 30 and an IC card interface 20 that communicates with the IC card 30 held by the IC card holder. .

  For example, when the IC card 30 transmits and receives information by wireless communication, the IC card interface 20 transmits an electromagnetic wave to the IC card 30 held in the IC card holder, and the IC card 30 driven by the transmitted electromagnetic wave. It is designed to communicate wirelessly. In addition, the IC card interface 20 has a connector for connecting to the contact of the IC card 30 when the IC card 30 has a contact for transmitting and receiving information.

  The IC card 30 includes a CPU and a non-volatile storage medium, and a user profile storage unit 31 that stores a user profile that represents a user attribute, and accesses the user profile storage unit 31 from outside the IC card 30. A profile access determination unit 32 that determines whether or not to perform the access, and a communication unit 33 that inputs and outputs a user profile via the IC card interface 20 based on a determination result by the profile access determination unit 32. The IC card 30 includes a CPU and a non-volatile storage medium, and may be anything that can be carried by a user. The shape of the IC card 30 is not limited to a card type.

  Here, the user profile includes a generation source ID for identifying the generation source of the user profile, a user ID for identifying the user, and user information such as the date of birth and nationality of the user. In addition, signature information by a user profile generation source for each of these pieces of information is further included.

  The signature information by the user profile generation source is obtained by encrypting the hash value of the information obtained by combining the generation source ID and the user information with the private key of the user profile generation source. In the present embodiment, the user profile is generated by the user profile license issuing device 4, and the user profile is falsified with the public key certified by the public key certificate of the user profile license issuing device 4. It can be verified that this is not done.

  The profile access determination unit 32 determines whether to permit access to the user profile storage unit 31 based on the user profile license transmitted together with the access request. Here, the access to the user profile storage unit 31 represents reading of the user profile stored in the user profile storage unit 31 and writing of the user profile to the user profile storage unit 31.

  Here, the user profile license is issued by the user profile license issuing device 4, and the user profile license is used to identify the user profile license issuer, that is, the user profile license issuing device 4. Issuer ID, issuer ID for identifying the user profile license issuer, expiration date, whether to allow writing of the user profile, and whether to allow reading of the user profile Access permission information representing the above, and signature information by the user profile license issuing device 4 for each of these pieces of information is further included.

  The signature information by the user profile license issuing device 4 is encrypted with the hash value of information obtained by combining the issuer ID, issue destination ID, expiration date, and access permission information with the private key of the user profile license issuing device 4. It has been done. Therefore, it can be verified that the user profile license has not been tampered with the public key certified by the public key certificate of the user profile license issuing device 4.

  Whether the access to the user profile storage unit 31 is permitted or not is determined by the profile access determination unit 32 whether the access is accompanied by a user profile license, the signature information of the user profile license is used as the user profile license. Whether the public key of the issuing device 4 can be verified, whether the issue destination ID included in the user profile license indicates an access request source, whether the user profile license has expired, and The access is performed based on whether the access is permitted by the access permission information.

  In the present embodiment, the use device profile storage unit 11 of the IC chip 10 and the user profile storage unit 31 of the IC card 30 constitute a profile storage unit that stores a profile representing the attribute of the service request source.

  In the present embodiment, the profile access determination unit 12 of the IC chip 10 and the profile access determination unit 32 of the IC card 30 determine whether to access the profile storage unit based on the use device profile license and the user profile license, respectively. A profile access judging means for judging

  The IC card 30 has an ownership storage unit 34 that stores ownership representing the device owned by the owner of the IC card 30, and possession that determines whether the ownership storage unit 34 is accessed from outside the IC card 30. And a right access determination unit 35.

  Here, the ownership includes an issuer ID for identifying the issuer of ownership, and one or more device IDs for identifying devices owned by the owner of the IC card 30. Signature information by the issuer of ownership for each information is further included. The signature information by the ownership issuer is obtained by encrypting the hash value of information obtained by combining the issuer ID and the device ID with the private key of the ownership issuer. In the present embodiment, the ownership issuer is the ownership license issuing device 6, and the ownership has not been tampered with the public key certified by the public key certificate of the ownership license issuing device 6. Can be verified.

  The ownership access determination unit 35 determines whether to permit access to the ownership storage unit 34 based on the ownership license transmitted together with the access request. Here, the access to the ownership storage unit 34 represents reading of the ownership stored in the ownership storage unit 34 and writing of the ownership to the ownership storage unit 34.

  Whether the access to the ownership storage unit 34 is permitted or not is determined by the ownership access determination unit 35 based on whether the access is accompanied by the ownership license or not, the signature information of the ownership license is used. Whether it can be verified with the public key, whether the issuer ID included in the ownership license indicates the access request source, whether the access content is permitted by the access permission information, etc. It has become.

  The communication unit 33 inputs and outputs ownership based on the determination result by the ownership access determination unit 35.

  In the present embodiment, at least one of the ownership storage unit 14 of the IC chip 10 and the ownership storage unit 34 of the IC card 30 stores the ownership representing the ownership relationship between the user who uses the service and the device. The ownership storage means is configured.

  In the present embodiment, the ownership access determination unit 15 of the IC chip 10 and the ownership access determination unit 35 of the IC card 30 determine whether to access the ownership storage unit based on the ownership license. The right access judging means is configured.

  The IC card 30 further includes a usage right storage unit 36 that stores a usage right, and a usage right access determination unit 37 that determines whether the usage right storage unit 36 is accessed from outside the IC card 30. The usage right storage unit 36 is configured in the same manner as the usage right storage unit 16 of the IC chip 10 and the usage right access determination unit 37 is configured in the same manner as the usage right access determination unit 17 of the IC chip 10. Omitted.

  The communication unit 33 inputs and outputs usage rights based on the determination result by the usage right access determination unit 37.

  In the present embodiment, the usage right storage unit 16 of the IC chip 10 and the usage right storage unit 36 of the IC card 30 constitute a usage right storage unit that stores a usage right representing the right to use the service. In the present embodiment, the usage right access determination unit 17 of the IC chip 10 and the usage right access determination unit 37 of the IC card 30 determine whether to access the usage right storage unit based on the usage right license. The right access judging means is configured.

  The service using device 3 includes a service providing unit 40 that provides a service for reproducing content. The service providing unit 40 is configured by the CPU of the service using device 3, and provides a service for decrypting the content encrypted and stored in the RAM, the hard disk or the like and outputting it via a monitor device or a speaker. ing.

  The service providing unit 40 accesses the usage right storage unit 16 and the usage right storage unit 36 with the usage right license issued by the usage right license issuing device 7 and includes a content ID representing content to be serviced. In order to acquire the use right and determine whether or not the exercise condition represented in the exercise condition information included in the acquired use right is satisfied, the use device profile storage unit 11, the ownership storage unit 14, the user profile The storage unit 31 and the ownership storage unit 34 are accessed according to the exercise conditions.

  Here, the service providing unit 40 accesses the used device profile storage unit 11 with the used device profile license issued by the used device profile license issuing device 5, and the use issued by the user profile license issuing device 4. The user profile storage unit 31 is accessed with the user profile license, and the ownership storage unit 14 and the ownership storage unit 34 are accessed with the ownership license issued by the ownership license issuing device 6. It has become.

  The service providing unit 40 stores a usage right license, a used device profile license, a user profile license, and an ownership license in advance. Specifically, the license may be incorporated into a program that is executed by a CPU that constitutes the service providing unit 40.

  The service providing unit 40 satisfies the exercise conditions based on the access device profile, user profile, ownership, and environmental information such as time information acquired from the CPU of the service use device 3 and the like. If it is determined whether or not the exercise conditions are satisfied, the user is provided with a service that decrypts and plays back the encrypted content using the decryption key included in the usage right. If the device profile, user profile, ownership, and environmental information cannot be obtained, or if it is determined that the exercise conditions are not met, the content playback service will not be provided to the user. Yes.

  If the service providing unit 40 determines that the device profile, user profile, ownership, environmental information, etc. satisfy some of the exercise conditions, the service providing unit 40 plays a part of the content, For example, the service provision mode may be changed according to the determination result.

  The user profile license issuing device 4 is constituted by a computer device having a CPU, and has user profile license issuing means for issuing a user profile license. The user profile license issuing means uses the service providing system 1 such as the program for configuring the service providing unit 40 determined to be reliable by the administrator of the user profile license issuing device 4 and the usage right license issuing device 7. A user profile license is issued via the network 2 or the like to another device that constitutes the device.

  Note that the user profile license issuing device 4 may generate or change a user profile stored in the user profile storage unit 31. By collecting authority related to the user profile in the user profile license issuing device 4, the reliability of the user profile in the service providing system 1 can be improved.

  Further, when the user profile license issuing device 4 generates or changes the user profile stored in the user profile storage unit 31, the user profile license issuing device 4 issues the user profile to itself. The user profile storage unit 31 is accessed with a user profile license.

  The used device profile license issuing device 5 is constituted by a computer device having a CPU, and has used device profile license issuing means for issuing a used device profile license. The use device profile license issuing means includes a service providing system 1 such as a program or a use right license issuing device 7 for configuring the service providing unit 40 determined to be reliable by the administrator of the use device profile license issuing device 5. The used device profile license is issued to the other devices to be configured via the network 2 or the like.

  The used device profile license issuing device 5 may generate or change the used device profile stored in the used device profile storage unit 11. By collecting the authority related to the used device profile in the used device profile license issuing device 5, the reliability of the used device profile in the service providing system 1 can be improved.

  In addition, when the used device profile license issuing device 5 generates or changes the used device profile stored in the used device profile storage unit 11, the used device profile license issuing device 5 issues it to itself. The used device profile storage unit 11 is accessed with the used device profile license.

  The ownership license issuing device 6 is constituted by a computer device having a CPU, and has ownership license issuing means for issuing an ownership license. The ownership license issuing means configures the service providing system 1 such as the program for configuring the service providing unit 40 determined to be reliable by the administrator of the ownership license issuing apparatus 6 and the usage right license issuing apparatus 7. An ownership license is issued to another apparatus via the network 2 or the like.

  Note that the ownership license issuing device 6 may generate or change the ownership stored in the ownership storage unit 14 and the ownership storage unit 34. By consolidating the authority relating to the ownership in the ownership license issuing device 6, the reliability of the ownership in the service providing system 1 can be improved.

  Further, when the ownership license issuing device 6 generates or changes the ownership stored in the ownership storage unit 14 and the ownership storage unit 34, the ownership license issuing device 6 self-registers. The ownership storage unit 14 and the ownership storage unit 34 are accessed with the issued ownership license.

  The usage right license issuing device 7 is constituted by a computer device having a CPU, and has usage right license issuing means for issuing a usage right license. The usage right license issuing means issues a usage right license to the program for configuring the service providing unit 40 that is determined to be reliable by the administrator of the usage right license issuing device 7 via the network 2 or the like. It has become.

  In addition, the usage right license issuing device 7 generates and issues a usage right in response to a usage right issuance request by the service using device 3. When the usage right license issuing device 7 issues the usage right stored in the usage right storage unit 16 and the usage right storage unit 36, the usage right storage unit 16 uses the usage right license issued to itself. The access right storage unit 36 is accessed.

  The usage right license issuing device 7 is connected between the usage right storage unit 16 and the usage right storage unit 36 and the usage right storage unit 16 of the other service using device 3 and the usage right storage unit 36 of the other IC card 30. You may make it distribute the usage right. When the usage right license issuing device 7 distributes the usage right, the usage right license issuing device 7 refers to the distribution permission information included in the distributed usage right and determines whether or not the usage right can be distributed. Configure as follows. Here, the usage right license issuing device 7 refers to the exercise condition information included in the usage right to be distributed, and determines whether or not the usage right can be distributed based on the usage device profile, the user profile, and the ownership profile of the distribution destination. You may make it judge.

  Further, the usage right license issuing device 7 issues a usage right (hereinafter referred to as a membership card) that permits the usage right license issuing device 7 to issue or distribute the usage right, and the membership card is issued. A request for issuing a usage right and a distribution request may be allowed, and a request for issuing a usage right and a distribution request without a membership card may be prohibited.

  When referring to the exercise condition information included in the usage rights distributed by the usage right license issuing device 7 or issuing a membership card, the usage right license issuing device 7 is issued by the usage device profile license issuing device 5. The user device profile storage unit 11 is accessed with the user device profile license, the user profile storage unit 31 is accessed with the user profile license issued by the user profile license issuing device 4, and the ownership license is obtained. The ownership storage unit 14 and the ownership storage unit 34 are accessed with the ownership license issued by the issuing device 6.

  As described above, the communication unit 13 of the IC chip 10, the communication unit 33 of the IC card 30, the service providing unit 40, the user profile license issuing device 4, the used device profile license issuing device 5, the ownership license issuing device 6, and The transmission / reception of information performed between the components of the usage right license issuing device 7 authenticates each other's public key by using public key authentication, and leakage or falsification of communication information established by the authenticated public key. This is done via a safe communication path that is prevented.

  For this reason, each component described above stores a public key certificate for proving the public key of the communication partner. The public key certificate for proving the public key of the communication partner may be a certificate that can certify the public key of the communication partner in a chain manner, such as a root certificate of a certification authority.

  The communication unit 13 of the IC chip 10 may store a public key corresponding to each of the usage device profile storage unit 11, the ownership storage unit 14, and the usage right storage unit 16. The communication unit 33 may store the public key corresponding to the user profile storage unit 31, the ownership storage unit 34, and the usage right storage unit 36, respectively.

  Next, the operation of the service providing system 1 will be described with reference to FIGS. In the following, the operation of the service providing system 1 will be described by describing the operation of the service providing unit 40.

  2 and 3 are flowcharts showing the operation of the service providing unit 40.

  First, when a content reproduction request is input via the input device of the service usage device 3 (step 101), the usage right license issued by the usage right license issuing device 7 and stored in the service providing unit 40 is used. The usage right stored in the usage right storage unit 16 and the usage right storage unit 36 is requested by the service providing unit 40 (step 102).

  When a usage right is acquired by the service providing unit 40 in response to this request (step 103), it is determined whether or not a user profile needs to be acquired based on the acquired usage right (step 103). 104). If it is determined that the user profile needs to be acquired, the user profile storage unit 31 uses the user profile license issued by the user profile license issuing device 4 and stored in the service providing unit 40. The user profile stored in is requested by the service providing unit 40 (step 105).

  When the user profile is acquired by the service providing unit 40 in response to this request (step 106) or when it is determined that the user profile does not need to be acquired (step 104), the service providing unit 40 acquires the user profile. It is determined whether or not it is necessary to acquire the use device profile based on the obtained use right (step 107). When it is determined that it is necessary to acquire the used device profile, the used device profile storage unit 11 uses the used device profile license issued by the used device profile license issuing device 5 and stored in the service providing unit 40. Is used by the service providing unit 40 (step 108).

  When the usage device profile is acquired by the service providing unit 40 in response to this request (step 109) or when it is determined that it is not necessary to acquire the usage device profile (step 107), the acquisition is performed by the service providing unit 40. It is determined whether or not it is necessary to acquire ownership based on the obtained usage right (step 110). If it is determined that the ownership needs to be acquired, the ownership storage unit 14 or the ownership storage is stored with the ownership license issued by the ownership license issuing device 6 and stored in the service providing unit 40. The ownership stored in the unit 34 is requested by the service providing unit 40 (step 111).

  When the ownership is acquired by the service providing unit 40 in response to this request (step 112) or when it is determined that it is not necessary to acquire the ownership (step 110), the ownership is acquired by the service providing unit 40. It is determined whether it is necessary to acquire environmental information based on the usage right (step 113). If it is determined that it is necessary to acquire environmental information, the environmental information is requested by the service providing unit 40 to the CPU of the service using device 3 (step 114).

  When the environmental information is acquired by the service providing unit 40 in response to this request (step 115) or when it is determined that the environmental information does not need to be acquired (step 113), the environmental information is acquired by the service providing unit 40. Whether or not the exercise conditions indicated in the exercise condition information included in the usage rights are satisfied is provided based on the device profile, user profile, ownership, and environmental information acquired by the service providing unit 40 The determination is made by the unit 40 (step 116). If it is determined that the exercising condition is satisfied, the decryption key included in the usage right acquired by the service providing unit 40 is the content that is the target of the service encrypted and stored in the RAM, the hard disk, or the like. And is reproduced via a monitor device or a speaker.

  On the other hand, when the usage right, the usage device profile, the user profile, the ownership, and the environment information cannot be acquired, or when the service providing unit 40 determines that the exercise condition is not satisfied, the content reproduction is performed. Instead, the service providing unit 40 waits for input of a content reproduction request (step 101).

  As described above, according to the service providing system 1, reading and writing of the user profile and the used device profile are restricted based on the profile license issued by the user profile license issuing unit and the used device profile license issuing unit. It is possible to prevent leakage and falsification of the user profile and the used device profile to a third party.

  Further, according to the service providing system 1, since reading / writing of the usage right is restricted based on the usage right license issued by the usage right license issuing means, it is possible to prevent the leakage of the usage right to a third party and tampering. it can.

  Further, according to the service providing system 1, since reading / writing of the usage right is restricted based on the ownership license issued by the ownership license issuing means, it is possible to prevent leakage of ownership and falsification to the third party. it can.

  In the present embodiment, the user profile license issuing unit, the used device profile license issuing unit, the ownership license issuing unit, and the usage right license issuing unit are each configured by one device. You may make it comprise said each means by one apparatus.

It is a block diagram which shows the structure of the service provision system by one embodiment of this invention. It is a flowchart which shows operation | movement of the service provision part which comprises the service provision system by one embodiment of this invention. FIG. 3 is a flowchart continued from FIG. 2.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Service provision system 2 Network 3 Service use apparatus 4 User profile license issue apparatus 5 Use apparatus profile license issue apparatus 6 Ownership license issue apparatus 7 Use right license issue apparatus 10 IC chip 11 Use apparatus profile memory | storage part 12, 32 Profile access Judgment unit 13, 33 Communication unit 14, 34 Ownership storage unit 15, 35 Ownership access judgment unit 16, 36 Usage right storage unit 17, 37 Usage right access judgment unit 20 IC card interface 30 IC card 31 User profile storage Department 40 Service Provision Department

Claims (12)

Profile storage means for storing a profile representing an attribute of the requester of the service;
Service providing means for providing a service corresponding to a profile acquired by accessing the profile storage means to a request source of the service;
Profile access determination for determining whether to allow the service providing means to access the profile storage means based on the profile license issued by a profile license issuing device that issues a profile license for accessing the profile storage means Means,
Service using equipment. Usage right storage means for storing a usage right representing a right to use the service;
Whether to allow the service providing unit to access the usage right storage unit based on the usage right license issued by the usage right license issuing device that issues a usage right license for accessing the usage right storage unit. Use right access judgment means to judge,
Further comprising
The service providing means provides a service according to the usage right acquired by accessing the usage right storage means;
The service using device according to claim 1. Ownership storage means for storing ownership representing the ownership relationship between the user using the service and the device;
Based on the ownership license issued by an ownership license issuing device that issues an ownership license for accessing the ownership stored in the ownership storage means, the service providing means is provided with the ownership storage means. Ownership access determination means for determining whether to allow access;
Further comprising
The service providing means provides a service according to the ownership acquired by accessing the ownership storage means;
The service using device according to claim 1 or 2. The profile storage means includes a user profile storage unit for storing a user profile representing an attribute of a user who requests the service;
The profile license includes a user profile license for accessing a user profile stored in the user profile storage unit.
The service utilization apparatus in any one of Claims 1-3.   5. The service using device according to claim 4, wherein the user profile storage unit and the profile access determination unit are configured by an IC card. The profile storage means includes a used device profile storage unit that stores a used device profile representing an attribute of a used device that requests the service;
The profile license includes a used device profile license for accessing a used device profile stored in the used device profile storage unit.
The service utilization apparatus in any one of Claims 1-5.   The service using device according to claim 6, wherein the using device profile storage unit and the profile access determining unit are configured by an IC chip provided in the using device.   A profile license issuing device for issuing a profile license for accessing profile storage means for storing a profile representing an attribute of a service request source in a service using device. The profile license includes a user profile license for accessing a user profile stored in the profile storage means and representing an attribute of a user requesting the service;
The profile license issuing device according to claim 8, further comprising a user profile license issuing unit that issues the user profile license. The profile license includes a used device profile license for accessing a used device profile that is stored in the profile storage means and represents an attribute of the used device that requests the service,
The profile license issuing device according to claim 8, further comprising a used device profile license issuing unit that issues the used device profile license.   A usage right license issuing device for issuing a usage right license for accessing a usage right storage means for storing a usage right representing a right to use the service in a service usage device.   Issuance of ownership license to issue ownership license to access ownership stored in ownership storage means that stores ownership representing the ownership relationship between the user who uses the service and the device in the service using device apparatus.

Images