JP2006011789A - Personal information using reception system and reception apparatus - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To increase security when using personal information. <P>SOLUTION: A personal information using reception system for using personal information data preset in at least one reception apparatus for receiving transmitted broadcast signals in providing content included in the broadcast signals has an IC card for encrypting and decrypting the personal information data, a first storage part for storing the personal information data decrypted by the IC card, a second storage part for storing the personal information data encrypted by the IC card, and a control part for dividing the personal information data in a preset data length and encrypting or decrypting each divided personal information data length in the IC card. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a personal information utilization type receiving system and a receiving apparatus, and more particularly to a personal information utilization type receiving system and a receiving apparatus for improving security.

  Conventionally, in digital broadcasting or the like, a reception service using personal information such as a viewer's name, sex, age, and address stored in a receiving apparatus has been provided. As the personal information, viewing history of programs that the viewer has watched so far, information on desired programs registered in advance by the viewer, answer information of each individual in quiz programs, and the like are accumulated at any time. For this reason, the amount of personal information tends to increase each time a reception service is received, but the information that can be stored in the receiving device is very limited, and large-capacity personal information cannot be handled. Therefore, a method for solving the above-described content has been proposed (see, for example, Patent Document 1).

In addition, the most important point to pay attention to when using personal information is to ensure security. Conventionally, however, as shown in Patent Document 1, an NVRAM (Non Volatile Random Access Memory: nonvolatile) Security) under the premise that it cannot be referenced from the outside.
JP 2002-369176 A

  However, in the technique disclosed in Patent Document 1 described above, personal information cannot be referred to from the outside, and personal information can be used only by the receiving device.

  Further, as described above, when NVRAM is used, since personal information is not encrypted and the capacity of NVRAM itself is limited, only minimum information is retained as personal information. I can't.

  The present invention has been made in view of the above-described problems. By improving security when using personal information, the personal information can be used by other receiving apparatuses, and the capacity of personal information can be increased. It is an object of the present invention to provide a personal information use type receiving system and receiving apparatus that can be used.

  In order to solve the above problems, the present invention employs means for solving the problems having the following characteristics.

  According to the first aspect of the present invention, personal information for providing content included in the broadcast signal using personal information data preset in at least one receiving device that receives the transmitted broadcast signal is provided. In a usage-type receiving system, an IC card for encrypting and decrypting the personal information data, a first storage unit for storing personal information data decrypted by the IC card, and an individual encrypted by the IC card A second storage unit that stores information data; and a control unit that divides the personal information data based on a preset data length and encrypts or decrypts the divided personal information data with the IC card. It is characterized by that.

  According to the first aspect of the present invention, by having the second storage unit, it is possible to accumulate even when the data capacity of the personal information data is increased. Further, since the stored personal information data is encrypted, security can be improved.

  The invention described in claim 2 is a receiving device for receiving a transmitted broadcast signal and using a personal information data set in advance to provide a viewer with content included in the broadcast signal. An IC card for encrypting and decrypting the personal information data; a first storage for storing personal information data decrypted by the IC card; and a first storage for storing personal information data encrypted by the IC card. And a control unit that divides the personal information data based on a preset data length and encrypts or decrypts the divided personal information data with the IC card.

  According to the second aspect of the present invention, the second storage unit allows the personal information data to be stored even when the data capacity increases. Further, since the stored personal information data is encrypted, security can be improved.

  According to a third aspect of the present invention, the control unit encrypts the personal information data stored in the first storage unit with the IC card, and the encrypted personal information data is stored in the second storage unit. The personal information data stored in the first storage unit is erased after being stored in the first storage unit.

  According to the third aspect of the present invention, the decrypted personal information data does not remain even when the personal information data is used in another receiving device, so that the security can be improved.

  According to a fourth aspect of the present invention, the control unit sends personal information data to another receiving device connected to a communication network or a profile server that manages personal information data based on the identification information included in the IC card. The acquisition request or the accumulation request is made.

  According to the fourth aspect of the present invention, personal information data can be easily acquired from another device, and personal information data that has been used can be stored in the acquired device. Thereby, personal information data can be unified and managed. Moreover, since the personal information data transmitted / received via a communication network is encrypted, security can be improved.

  According to a fifth aspect of the present invention, when the personal information data does not exist in the receiving device, the control unit makes a request for acquiring or storing personal information data to the other receiving device or the profile server. It is characterized by.

  According to the fifth aspect of the present invention, since the personal information data acquisition request or storage request is made to another receiving device or profile server as required, the receiving process can be performed efficiently. Also, security can be improved by eliminating unnecessary connections with other devices.

  The invention described in claim 6 is characterized in that the control unit specifies personal information based on authentication information including name information and password when the personal information data includes personal information of a plurality of persons. To do.

According to invention of Claim 6, desired personal information can be acquired correctly.
Moreover, since authentication is performed using name information and a password for each personal information, security can be improved.

  According to the present invention, security when using personal information can be improved.

<Outline of the present invention>
The present invention is, for example, an IC (Integrated Circuit) card having an encryption function for a service using personal information in digital broadcasting or the like, and a first set each time a reception service using personal information is executed. Processing is performed by the storage unit and the second storage unit that can handle large-capacity information and stores personal information data.

  That is, the encryption function of the IC card is used to maintain the security of personal information. Further, the storage unit stores the encrypted information in the second storage unit that is commonly used in the reception service using personal information so that even a large amount of information can be stored.

  When using personal information, the encrypted personal information is decrypted (plain culture), the decrypted personal information is stored in the first storage unit, and the reception service using the personal information is processed. . When the use of personal information is terminated, the personal information in the first storage unit is encrypted and stored in the second storage unit. The personal information data in the first storage unit is deleted after being stored in the second storage unit. In addition, in the above-described encryption and decryption, in order to deal with a large amount of personal information, the personal information is divided and processed by a predetermined number of bytes, for example.

  As a result, only the person having the IC card can receive a service using personal information. The encrypted personal information can be taken out of the receiving device or used from other receiving devices connected to the network. For example, the personal information connected to the network is centrally managed. For example, personal information can be used by a plurality of receiving devices while ensuring security.

<Embodiment>
Hereinafter, a preferred embodiment of a personal information utilization receiving system and receiving apparatus having the above-described features will be described in detail with reference to the drawings. In this embodiment, it is assumed that each individual user is registered on the receiving device registration screen or the like when the receiving device is initially used.

<Personal information use reception system>
FIG. 1 is a diagram illustrating a configuration example of a personal information utilization receiving system. The personal information utilization receiving system 10 shown in FIG. 1 is configured to include a transmission device 11, a reception device 12, and a profile server 13. The receiving device 12 and the profile server 13 are connected via a communication network 14 such as the Internet. Further, the broadcast signal output from the transmission device 11 is provided to each reception device 12-1 to 12-n via the broadcast satellite 15.

  Here, the transmission device 11 shown in FIG. 1 includes a provider that provides a program or the like that can be viewed or received by the reception device 12, such as a broadcast station or a content provider that provides content. Etc. Moreover, in this embodiment, the number of the transmission apparatus 11, the receiving apparatus 12, and the profile server 13 is not limited.

  The transmission device 11 provides the produced broadcast program (content) as a broadcast signal to the reception device via the broadcast satellite 15. On the other hand, the receiving device 12 receives a broadcast signal from the transmitting device 11 and receives a service provided using personal information. The personal information may be stored in each receiving device 12, and the personal information corresponding to each receiving device 12-1 to 12-n is stored in the profile server 13 via the communication network 14. May be obtained. Furthermore, personal information in the receiving device can be acquired from another receiving device via the communication network 14.

  The profile server 13 is a server that accumulates and manages personal information corresponding to each of the receiving devices 12-1 to 12-n. Further, in response to the personal information data acquisition request from the receiving device 12, the profile server 13 extracts corresponding personal information data based on identification information such as a card ID (Identification) of the IC card included in the acquisition request. Output to the requested receiving device. Further, the profile server 13 stores personal information data in response to a storage request from the receiving device 12.

  Note that the system configuration of the present invention is not limited to FIG. 1, and can be applied to, for example, a single receiving device, or can be applied to a configuration in which only receiving devices are connected by a communication network or the like without a profile server. . In the system configuration shown in FIG. 1, the broadcast signal is transmitted to the receiving device 12 by the broadcast satellite 15. However, the present invention is not limited to this, and the broadcast signal is transmitted to the receiving device 12 by, for example, terrestrial waves. You may make it the structure to carry out.

<Receiving device>
Next, a functional configuration of a digital broadcast receiving apparatus as a receiving apparatus that receives a service that uses personal information will be described with reference to the drawings. FIG. 2 is a diagram illustrating an example of a functional configuration of the receiving apparatus. The receiving device 12 illustrated in FIG. 2 is configured to include a tuner unit 21, a descrambling unit 22, a decoding unit 23, and a display unit 24. In addition, the receiving device 12 includes a communication control unit 25, an IC card 26 that is detachable from the receiving device 12, a first storage unit 27, a second storage unit 28, a key input unit 29, and a control unit 30. It is comprised so that it may have control and a signal can be exchanged as needed.

  The tuner unit 21 receives a broadcast signal transmitted from the transmission device 11 via the broadcast satellite 15, receives and selects a necessary broadcast signal under the control of the control unit 30, performs transmission signal packet processing, error Perform correction processing. In addition, the tuner unit 21 outputs the processed signal to the descrambling unit 22.

  The descrambling unit 22 descrambles the packet specified by the reception restriction information included in the IC card 26 with respect to the signal obtained from the tuner unit 21. Further, the descrambling unit 22 separates necessary packets from TS (Transport Stream) multiplexed signals and separates various multiplexed data such as broadcast program selection, ECM (Entlement Control Message), and EMM (Entlement Management Message). I do. In addition, the descrambling unit 22 outputs the descrambled signal to the decoding unit 23.

  The decoding unit 23 decodes video and audio signals. In addition, the decoding unit 23 outputs the decoded video and audio to the display unit 24. The display unit 24 outputs the video and audio obtained by the decoding unit 23 from a monitor or the like. In addition, the display unit 24 performs display control of menus, lists, messages, and the like for the viewer and outputs them.

  Here, the receiving device 12 can acquire various personal information. For example, various information related to the individual, such as viewing status that the viewer is not normally aware of, such as viewing history, from registration information actively input by the viewer such as name, age, hobby, etc. . By using such personal information, it is possible to provide a viewer with a more convenient and easy-to-use reception service.

  On the other hand, since the information is very private, it is important to ensure security.

  Therefore, in the present invention, security is ensured by using the encryption and decryption functions of the IC card 26. Since the storage capacity of the IC card 26 itself is small, it is difficult to accumulate various information. Therefore, the encrypted personal information data is stored in a storage unit separate from the IC card 26. Thereby, large-capacity personal information data can also be processed.

  Here, main components other than those described above in FIG. 2 will be described. The communication control unit 25 transmits and receives personal information data to and from the profile server 13 and other receiving devices 12 via the communication network 14.

  The IC card 26 is detachable from the receiving device 12, and the IC card 26 is attached to the receiving device 12 to communicate with the control unit 30. Further, the IC card 26 encrypts and decrypts personal information data stored in the first storage unit 27 and the second storage unit 28. Further, by using the IC card 26, for example, contract data management, pay program viewing control processing, viewing history information management processing, and the like can be performed.

  The first storage unit 27 stores personal information data that is decrypted each time the personal information utilization receiving service is executed. The second storage unit 28 stores personal information data encrypted after the personal information utilization type reception service is completed. In addition, the 1st memory | storage part 27 and the 2nd memory | storage part 28 are not limited to a shape, a kind, etc. in this invention, For example, like the memory card etc., what can be attached or detached with the receiver 12 may be used.

  The key input unit 29 processes data input by a user interface such as a remote control key or a keyboard as an input from the user. Further, the control unit 30 controls the entire receiving device 12. For example, communication with the IC card 26, processing of various data separated from broadcast signals, control of the descrambling unit 22, communication control, time count, display control processing, key input control processing, division and combination of personal information data, etc. There is.

  Next, the processing operation by the configuration of the receiving device 12 described above will be described. Here, it is assumed that personal information handled by the received service (for example, content (program)) is used in a plain manner. Then, the operation contents of the command / response between the receiving device 12 and the IC card 26 will be described using a sequence diagram. In the present embodiment, data exchange is basically performed based on an APDU (Application Protocol Data Unit) format, and an example of each command and its contents will be described.

<Operation details when starting to use personal information data>
FIG. 3 is a sequence diagram illustrating an example of operation contents at the start of use of personal information data. The sequence diagram shown in FIG. 3 shows processing operations in the receiving device 12 and the IC card 26, but the actual command / response is performed by the IC card 26 and the control unit 30. In FIG. 3, it is assumed that already encrypted personal information data is stored in the second storage unit 28.

  In FIG. 3, first, the receiving device 12 outputs an initial setting condition command to the IC card 26 under a preset condition such as the IC card 26 being attached to the receiving device (S01). By the initial setting condition command, the receiving device 12 can acquire the sharing conditions between the receiving device 12 and the IC card 26 such as the ID and type of the IC card 26.

  In other words, the IC card 26 receives the initial setting condition command from the receiving device 12, and stores the card ID and type of the IC card stored in advance, the receiving condition corresponding to the receiving device 12, and the sharing condition with the IC card. It outputs to the receiver 12 as a response (S02). The response includes, for example, an individual ID, a card type such as “for prepaid” or “for general use”, a return code, and the like.

  Next, the receiving device 12 outputs a use start command for starting use of the decryption function in the IC card to the IC card 26 (S03). Further, the receiving device 12 outputs information on the decoding mode to the IC card 26 in the data field of the command.

  The IC card 26 receives the use start command from the receiving device 12 and confirms that it is in the decryption mode. The IC card 26 assigns a value “decryption start” as a return code in the data field of the response from the IC card 26 and receives it. 12 (S04). The response at this time includes a protocol unit number, unit length, return code, divided byte length for dividing and transmitting personal information data (ciphertext) from the receiving device 12, and at the time of user registration of the IC card 26 An ID (default decoder ID) or the like for identifying the receiving device of the person to be recorded is included. The return code includes, for example, a sequence error (command error) in addition to normal termination.

  Next, the receiving device 12 divides the encrypted personal information data stored in the second storage unit 28 based on the divided byte length obtained from the IC card 26 by the control unit 30. Further, the receiving device 12 outputs a part of the personal information data divided by the control unit 30 (personal information data 1 (ciphertext) in FIG. 3) and a personal information data decryption command to the IC card 26 ( S05).

  Further, the receiving device 12 assigns and outputs a PDU (Protocol Data Unit) number indicating the number of the divided data and a final PDU number in the data field of the personal information data decoding command.

  The IC card 26 decrypts the input personal information data (plain culture), and outputs the decrypted personal information data (in FIG. 3, personal information data 1 (plain text)) to the receiving device 12 (S06).

  Here, the response includes a protocol unit number, unit length, return code, PDU number, final PDU number, and personal information plaintext data. The return code includes not only normal termination but also a sequence error (command error, PDU number error, etc.), for example.

  Here, the receiving device 12 stores the personal information data decrypted (plain culture) by the IC card 26 in the first storage unit 27.

  Next, the receiving device 12 performs the above-described processing of S05 to S06 in order to acquire the plaintext of the remaining divided personal information data. That is, the receiving device 12 outputs the personal information data decryption command and the divided personal information data (personal information data 2 (cipher text) in FIG. 3) to the IC card 26 (S07). Further, the IC card 26 decrypts the input personal information data and outputs it to the receiving device 12 (S08). In this way, all the divided personal information data (encryption) is decrypted by the IC card 26.

  In addition, after obtaining the plaintext of all personal information data, the receiving device 12 outputs a use end command for ending use of the decryption function in the IC card 26 to the IC card 26 (S09). Outputs a return code for ending the decoding to the receiving device 12 (S10). That is, the receiving device 12 divides and transfers the personal information data in the second storage unit 28 to the IC card 26 and sequentially transfers the personal information data decrypted (plain culture) by the IC card 26 to the first storage unit 27. accumulate.

  Further, the receiving device 12 can start using the personal information data by combining the plain text of the personal information data stored in the first storage unit 27 by the control unit 30.

  Here, the control unit 30 updates and adds personal information data based on viewing history information and the like obtained during reception of the service provided by the receiving device 12.

<Operation details at the end of use of personal information data>
Next, the operation content at the end of the use of personal information data will be described using a sequence diagram. FIG. 4 is a sequence diagram illustrating an example of operation contents at the end of use of personal information data. The sequence diagram shown in FIG. 4 shows processing operations in the receiving device 12 and the IC card 26, but the actual command / response is performed by the IC card 26 and the control unit 30.

  In FIG. 4, first, the receiving device 12 outputs an initial setting condition command to the IC card 26 according to a preset condition such as the use of the personal information data utilization type receiving service is terminated (S11).

  The IC card 26 receives the initial setting condition command from the receiving device 12 and uses the card ID and type of the IC card stored in advance, the receiving condition corresponding to the receiving device 12, and the sharing condition with the IC card as a response. The data is output to the receiving device 12 (S12). In addition, the process of S11-S12 is the same as that of above-mentioned S01-S02.

  Next, the receiving device 12 outputs a use start command for starting use of the encryption function in the IC card to the IC card 26 (S13). The receiving device 12 outputs information on the encryption mode to the IC card 26 in the data field of the command.

  The IC card 26 receives the use start command from the receiving device 12 and confirms that it is in the encryption mode. The IC card 26 gives the value “start encryption” as the return code of the data field of the response from the IC card 26. 12 (S14). The response at this time includes the protocol unit number, unit length, return code, divided byte length for dividing and transmitting personal information data (decrypted text (plain text)) from the receiving device 12, the IC card 26 ID (default decoder ID) etc. which identify the receiving apparatus of the person recorded at the time of user registration are included. The return code includes, for example, a sequence error (command error) in addition to normal termination.

Next, the receiving device 12 divides the personal information data (plain text) stored in the first storage unit 27 based on the divided byte length obtained by the IC card 26 by the control unit 30.
Further, the receiving device 12 outputs a part of personal information data (in FIG. 3, personal information 1 data (plaintext)) and the personal information data encryption command to the IC card 26 (S15). ).

  Here, the personal information data encryption command includes a decoder ID, transmission data length, PDU number, final PDU number, personal information plaintext data, response data length, and the like. Further, the above-described decoder ID is obtained from a receiving device that stores personal information plaintext data.

  The IC card 26 encrypts the input personal information data and outputs the decrypted personal information data (in FIG. 4, personal information data 1 (ciphertext)) to the receiving device 12 (S16).

  Here, the response includes a protocol unit number, unit length, return code, PDU number, final PDU number, and personal information ciphertext data. The return code includes not only normal termination but also a sequence error (command error, PDU number error, etc.), for example.

  The receiving device 12 stores the personal information data encrypted by the IC card 26 in the second storage unit 28.

  Next, the receiving device 12 performs the above-described processing of S15 to S16 in order to acquire the ciphertext of the remaining divided personal information data. That is, the receiving device 12 outputs the personal information data encryption command and the personal information data divided (in FIG. 3, personal information data 2 (plain text)) to the IC card 26 (S17). Further, the IC card 26 encrypts the inputted personal information data and outputs it to the receiving device 12 (S18). In this way, all the divided personal information data (plain text) is encrypted by the IC card 26.

  In addition, after obtaining the ciphertext of all personal information data, the receiving device 12 outputs a use end command to end the use of encryption in the IC card 26 to the IC card 26 (S19). Outputs a return code to end the encryption to the receiving device 12 (S20). That is, the receiving device 12 divides and transfers the personal information data in the first storage unit 27 to the IC card 26 and sequentially stores the personal information data encrypted by the IC card 26 in the second storage unit 28.

  Furthermore, the receiving device 12 combines and accumulates ciphertexts of personal information data sequentially stored in the second storage unit 28 by the control unit 30.

  The plain text personal information data stored in the first storage unit 27 is erased after being stored in the second storage unit 28. Here, as a specific example of erasing, for example, a mechanism such as “MOVE” of a digital recorder can be used. In this method, the original data is first divided and copied in fine units, and then the original data is deleted.

  Since this mechanism depends on the implementation of the receiving apparatus, the operation in the personal information data encryption command is set in advance and the receiving apparatus 12 is implemented. The receiving device 12 can also prevent the IC card 26 from being removed unless the plain text personal information is erased. The confirmation of whether or not it has been erased can be made, for example, by accessing the first storage unit 27 again and accessing it.

  Accordingly, since the personal information data stored in the second storage unit 28 of the receiving device 12 is encrypted, there is no worry of being used by others.

  As described above, when the personal information data is used for the content (program) handling the personal information data, the IC card 26 can easily decrypt or encrypt the personal information data. Further, by having the first storage unit 27 and the second storage unit 28, it is possible to process a large amount of personal information while ensuring security after the use of the personal information is completed.

  Here, in the present invention, the encrypted personal information data stored in the second storage unit 28 described above can be used by another device connected to the communication network 14.

  Specifically, for example, even if encrypted personal information data is stored in the home receiving device 12 connected to the communication network 14 or the profile server 13, other receiving devices and the personal IC card 26 are connected. By having it, it is possible to receive a service using personal information data while ensuring security. Here, an embodiment based on the above contents will be described with reference to the drawings.

<Operation contents at the start of use of personal information data stored in the profile server 13>
FIG. 5 is a sequence diagram showing an example of operation contents at the start of use of personal information data stored in the profile server. The sequence diagram shown in FIG. 5 shows processing operations of the profile server 13 and the first storage unit 27, the second storage unit 28, the control unit 30, and the IC card 26 in the receiving device 12.

  In FIG. 5, first, the control unit 30 outputs an initial setting condition command to the IC card 26 (S21). The IC card 26 receives the initial setting condition command from the control unit 30, and uses the card ID and type of the IC card stored in advance, the receiving condition corresponding to the receiving device 12, and the sharing condition with the IC card as a response. It outputs to the control part 30 (S22).

  Next, the control unit 30 outputs a use start command for starting use of the decryption function in the IC card to the IC card 26 (S23). Further, the control unit 30 outputs information on the decoding mode to the IC card 26 in the data field of the command.

  The IC card 26 receives the use start command from the control unit 30 and confirms that it is in the decoding mode. 30 (S24). The response at this time includes a protocol unit number, unit length, return code, divided byte length for dividing and transmitting personal information data (ciphertext) from the receiving device 12, and at the time of user registration of the IC card 26 An ID (default decoder ID) or the like for identifying the receiving device of the person to be recorded is included. The return code includes, for example, a sequence error (command error) in addition to normal termination.

  Next, the control unit 30 is based on information obtained by the IC card 26. The personal information data is requested from the profile server 13 (S25). Specifically, a request signal including a card ID and a decoder ID for identifying the requested receiving device is output from the communication control unit 25 to the profile server 13 via the communication network 14.

  In response to the sent request, the profile server 13 extracts the stored personal information data from the stored personal information data based on the card ID and the like, and outputs the extracted personal information data (ciphertext) to the receiving device 12. (S26). The control unit 30 causes the second storage unit 28 to store personal information data from the profile server 13.

  Next, the control unit 30 divides the encrypted personal information data stored in the second storage unit 28 based on the divided byte length, and a part of the divided personal information data (in FIG. 5, Personal information data 1 (ciphertext)) and a personal information data decryption command are output to the IC card 26 (S27).

  The IC card 26 decrypts the input personal information data (plain culture), and outputs the decrypted personal information data (in FIG. 5, personal information data 1 (plain text)) to the first storage unit 27 (S28). ).

  Here, the response includes a protocol unit number, unit length, return code, PDU number, final PDU number, and personal information plaintext data. The return code includes not only normal termination but also a sequence error (command error, PDU number error, etc.), for example.

  Next, in order to acquire the plaintext of the remaining divided personal information data, the control unit 30 receives the personal information data decryption command and the divided personal information data (in FIG. 5, personal information data 2 (ciphertext)). The data is output to the IC card 26 (S29). Further, the IC card 26 decrypts the input personal information data and outputs it to the first storage unit 27 (S30). In this way, all the divided personal information data (encryption) is decrypted by the IC card 26.

  In addition, after acquiring the plaintext of all personal information data, the control unit 30 outputs a use end command to end the use of the decryption function in the IC card 26 to the IC card 26 (S31). Outputs a return code to end the decoding to the control unit 30 (S32). Further, the control unit 30 can start using the personal information data by combining the plain texts of the personal information data stored in the first storage unit 27. Here, the control unit 30 updates and adds personal information data based on viewing history information and the like obtained during reception of the service provided by the receiving device 12.

  In this way, the receiving device 12 can acquire personal information data from the profile server 13 via the communication network 14 when using personal information. Further, when there is no personal information data in the second storage unit 28 of the receiving device, the personal information data can be acquired from the profile server 13 and used.

<Operation Details at the End of Use of Personal Information Data Stored in Profile Server 13>
Next, the operation content at the end of use of the personal information data stored in the profile server 13 will be described with reference to a sequence diagram. FIG. 6 is a sequence diagram showing an example of operation contents at the end of use of personal information data stored in the profile server. The sequence diagram shown in FIG. 6 shows processing operations of the profile server 13 and the first storage unit 27, the second storage unit 28, the control unit 30, and the IC card 26 in the receiving device 12.

  In FIG. 6, first, the control unit 30 outputs an initial setting condition command to the IC card 26 (S41). The IC card 26 receives the initial setting condition command from the control unit 30, and uses the card ID and type of the IC card stored in advance, the receiving condition corresponding to the receiving device 12, and the sharing condition with the IC card as a response. It outputs to the control part 30 (S42).

  Next, the control unit 30 outputs a use start command for starting use of the encryption function in the IC card to the IC card 26 (S43). The control unit 30 also outputs encryption mode information to the IC card 26 in the data field of the command.

  The IC card 26 inputs a use start command from the control unit 30 and confirms that it is in the encryption mode. The IC card 26 assigns a value “start encryption” as a return code in the response data field from the IC card 26 and controls the control unit. 30 (S44). The response at this time includes the protocol unit number, unit length, return code, divided byte length for dividing and transmitting personal information data (decrypted text (plain text)) from the receiving device 12, the IC card 26 ID (default decoder ID) etc. which identify the receiving apparatus of the person recorded at the time of user registration are included. The return code includes, for example, a sequence error (command error) in addition to normal termination.

  Next, the receiving device 12 divides the personal information data (plain text) stored in the first storage unit 27 based on the divided byte length obtained by the IC card 26 by the control unit 30.

  Further, the control unit 30 outputs a part of the divided personal information data (in FIG. 6, personal information 1 data (plain text)) and a personal information data encryption command to the IC card 26 (S45).

  Here, the personal information data encryption command includes a decoder ID, transmission data length, PDU number, final PDU number, personal information plaintext data, response data length, and the like. Further, the above-described decoder ID is obtained from a receiving device that stores personal information plaintext data.

  The IC card 26 encrypts the input personal information data, and outputs the decrypted personal information data (in FIG. 6, personal information data 1 (encrypted text)) to the second storage unit 28 (S46).

  Here, the response includes a protocol unit number, unit length, return code, PDU number, final PDU number, and personal information ciphertext data. The return code includes not only normal termination but also a sequence error (command error, PDU number error, etc.), for example.

  Next, in order to obtain the ciphertext of the remaining divided personal information data, the control unit 30 receives the personal information data encryption command and the divided personal information data (in FIG. 6, personal information data 2 (plain text)). The data is output to the IC card 26 (S47). Further, the IC card 26 encrypts the inputted personal information data and outputs it to the second storage unit 28 (S48). In this way, all the divided personal information data (plain text) is encrypted by the IC card 26.

Further, after acquiring the ciphertext of all personal information data, the control unit 30 outputs a use termination command for terminating the use of encryption in the IC card 26 to the IC card 26 (S49). Outputs a return code to end encryption to the control unit 30 (S50). Further, the control unit 30 combines the ciphertext of the personal information data stored in the second storage unit 28 and outputs a personal information data accumulation request to the bro-file server 13 (S51).
Specifically, a request signal composed of encrypted personal information data such as a card ID and a decoder ID for identifying the requested receiving device is output from the communication control unit 25 to the profile server 13 via the communication network 14. To do.

  In response to the sent request, the profile server 13 stores the encrypted personal information data in association with the card ID or the like, and outputs a response such as a return code (processing result) to the receiving device 12 (S52). .

  Thereby, since the personal information data stored in the profile server 13 is encrypted, there is no worry of being used by others. In addition, since it is not necessary to store personal information data in the receiving device 12, security can be improved.

  By adopting such a system configuration, it is possible to receive a service using personal information data of any place by having a receiving device and an IC card that can be connected to a communication network.

  Here, in the present embodiment, the personal information data is stored in the second storage unit 28, but the card ID and the local information in the personal information data, ID information, name information, password information, etc. are stored in association with each other. 2 A plurality of personal information data can be stored in the storage unit 28.

  Here, an example of personal information data stored in the IC card 26 or the profile server 13 will be described with reference to the drawings. FIG. 7 is a diagram showing an example of personal information data in the present invention. As shown in FIG. 7, personal information data includes card information (CARD_ID) for identifying an IC card, data information (DATA_ID) for identifying personal information data, name information (NAME data), password ( PASSWORD), actual personal information data (DATA), and a local ID of personal information data is recorded. When using personal information, decryption is performed after confirming the relationship between the card ID and the local ID with the name information and password.

  As described above, personal authentication data can be managed by using a single IC card by providing a personal authentication function based on personal information data, or multiple cards can be used according to the receiving service provided. Is also possible. Thereby, for example, personal information data for the family can be managed by one receiving device.

  Furthermore, according to the present invention, it is possible to acquire and use personal information data stored in one's own receiving device from another receiving device.

  Here, a processing procedure until personal information data is acquired from another receiving apparatus will be described using a flowchart. In FIG. 8, each receiving device 12 has a decoder ID, and the IC card 26 has a default decoder ID for the IC card 26 when the user first uses the initial setting of the receiving device. Is set.

  FIG. 8 is a flowchart illustrating an example of a processing procedure until personal information data is acquired. First, since the personal information data is used using the IC card 26 installed in the receiving device 12 as described above, the use of the decryption function of the IC card is started (S61). Specifically, information or the like is acquired from the IC card 26 by the above-described initial setting condition command or use start command.

  Next, it is determined whether the preset default decoder ID acquired from the IC card 26 is the same as the decoder ID set in the receiving apparatus in use (S62).

  If the default decoder ID and the decoder ID are not the same (YES in S62), it is next determined whether or not the receiving device 12 is connected to the communication network 14 (S63).

  In S63, when connected to the communication network 14 (YES in S63), a request for personal information data is made to the receiving device having the default decoder ID, and the personal information data is acquired (S64). That is, the receiving device having the requested default decoder ID extracts the corresponding personal information data from the personal information data stored in the second storage unit based on the card ID included in the request signal, and receives the request. Output to the receiving device.

  For communication between the receiving devices, for example, an IP (Internet Protocol) address or a MAC (Media Access Control) address assigned to the receiving device, a decoder ID for identifying the receiving device, or the like via the communication network 14. Can communicate with each other. If it is not connected to the communication network 14 in S63, the personal information data in the receiving apparatus currently in use is used (S65).

  In S62, when the default decoder ID and the decoder ID of the receiving device 12 in use are the same (YES in S62), or after the processing of S64 is completed, it is stored in the receiving device having the default decoder ID. The personal information data is used (S66).

  Next, the personal information data acquired in S66 or S65 is decrypted (S67), and it is determined whether the decrypted personal information data is personal information data for one person (S68). If it is not personal information for one person (NO in S68), personal information data is selected by an application or the like (S69). In other words, when personal information data for a plurality of persons are stored, they are collectively encrypted and managed, and the personal information data is specified by personal authentication using name information, a password, and the like by a service application or the like.

  For example, by displaying a plurality of personal information data acquired by a monitor or the like included in the receiving device 12, allowing the user to select which personal information data is to be used by the key input unit 29, and further inputting name information and a password You can authenticate and use personal information.

  In addition, the personal information data for one person in S68 (YES in S68) or the use of the above-described IC card decryption function for the IC card 26 from the receiving device 12 after the processing of S69 is ended. Is used (S70). Specifically, as described above, a processing end command is output from the receiving device 12 to the IC card 26 to end the IC card decryption function.

  Through the processing as described above, personal information data can be acquired from another receiving apparatus via the communication network and used.

  In addition, the personal information data updated by using the personal information utilization type service in another receiving apparatus is encrypted by the encryption function of the IC card, and then acquired from the processing shown in FIG. Output to the receiver.

  As described above, according to the present invention, the security of personal information can be improved. Specifically, in the service using personal information in digital broadcasting, the present invention includes a decryption and encryption function using an IC card, a first storage unit set each time the personal information service is executed, By using the second storage unit that can handle even the capacity information, it is possible to improve the security of the personal information even when the data amount of the personal information increases.

  By applying the present invention, for example, in various services such as a service that presents recommended programs, a service that arranges and displays news items in an order of interest, and displays only the scenes of desired players collectively. Using the information data, the viewer's viewing tendency can be grasped and reflected in the service. The above-described receiving apparatus can be applied to a digital broadcast receiver installed in each home, for example. The present invention can also be applied to a portable terminal (portable receiver) that can receive a personal information utilization type service.

  Although the preferred embodiment of the present invention has been described in detail above, the present invention is not limited to the specific embodiment, and various modifications, within the scope of the gist of the present invention described in the claims, It can be changed.

It is a figure which shows the example of 1 structure of a personal information utilization type | mold receiving system. It is a figure which shows an example of a function structure of a receiver. It is a sequence diagram which shows an example of the operation | movement content at the time of the utilization start of personal information data. It is a sequence diagram which shows an example of the operation content at the time of completion | finish of utilization of personal information data. It is a sequence diagram which shows an example of the operation | movement content at the time of the start of utilization of the personal information data accumulate | stored in the profile server. It is a sequence diagram which shows an example of the operation | movement content at the time of completion | finish of use of the personal information data accumulate | stored in the profile server. It is a figure which shows an example of the personal information data in this invention. It is a flowchart which shows an example of the process sequence until it acquires personal information data.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 Personal information utilization receiving system 11 Transmission apparatus 12 Reception apparatus 13 Profile server 14 Communication network 15 Broadcasting satellite 21 Tuner part 22 Descramble part 23 Decoding part 24 Display part 25 Communication control part 26 IC card 27 1st memory | storage part 28 2nd Storage unit 29 Key input unit 30 Control unit

Claims (6)

In a personal information utilization type receiving system for providing content included in the broadcast signal by using personal information data preset in at least one receiving device that receives the transmitted broadcast signal,
An IC card for encrypting and decrypting the personal information data;
A first storage unit for storing personal information data decrypted by the IC card;
A second storage unit for storing personal information data encrypted by the IC card;
A personal information utilization receiving system comprising: a control unit that divides the personal information data based on a preset data length and encrypts or decrypts the divided personal information data with the IC card. . In the receiving device for receiving the transmitted broadcast signal and using the personal information data set in advance to provide the viewer with the content included in the broadcast signal,
An IC card for encrypting and decrypting the personal information data;
A first storage unit for storing personal information data decrypted by the IC card;
A second storage unit for storing personal information data encrypted by the IC card;
And a control unit that divides the personal information data based on a preset data length and encrypts or decrypts the divided personal information data with the IC card for each divided personal information data. The controller is
Personal information data stored in the first storage unit is encrypted with the IC card, and the encrypted personal information data is stored in the second storage unit, and then stored in the first storage unit. The receiving apparatus according to claim 2, wherein the information data is erased. The controller is
The personal information data acquisition request or storage request is sent to another receiving device connected to a communication network or a profile server that manages personal information data based on the identification information included in the IC card. The receiving device according to 2 or 3. The controller is
5. The receiving apparatus according to claim 4, wherein when the personal information data does not exist in the receiving apparatus, a request for acquiring or storing personal information data is sent to the other receiving apparatus or the profile server. The controller is
6. The reception according to claim 2, wherein when the personal information data includes personal information of a plurality of persons, the personal information is specified based on authentication information including name information and a password. apparatus.

Images