JP2006109300A - Security module, method of novating contract used therein, and contents distribution system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an accumulation type broadcasting system capable of performing seamless contract novation and preventing unauthorized contract utilization. <P>SOLUTION: The accumulation type broadcasting system utilizing encrypted contents after accumulation in a receiver is provided, wherein a security module 330 is provided with at least two contract registration code recording regions and before the day of expiration of a current contract registration code, a contract registration code for the next contract term is stored, thereby performing seamless contract novation and preventing unauthorized contract utilization. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a method for sending information on contract renewal and contract cancellation from a broadcast transmission apparatus to a receiver in a storage-type broadcast, and a broadcast receiver that implements the method. Is reflected in the broadcast receiver.

  In storable broadcasting, the encrypted content and content key are broadcast, stored in the receiver as encrypted, and the receiver that has a usage contract can unlock the content with a license, Content can be used. Here, the license is information composed of a use condition and a content key.

  Content encryption is performed using at least three types of keys. The content body is encrypted with the content key (Kc), and this Kc is encrypted with the work key (Kw). Kw is encrypted with the master key (Km) and transmitted to the receiver.

  Kc is a key common to each receiver updated for each content. Kw is a key that is individually assigned to each receiver. When a reception contract is made, this Kw is encrypted with Km and transmitted from the broadcasting station to the receiver.

  Km differs for each receiver and is stored in the security module of each receiver. This security module is composed of an IC card for storing such secret information such as a decryption key and personal ID, and the one sent from the broadcasting station is set in the receiver.

  In the receiver, the encrypted Kw sent at the time of the contract is decrypted with Km held in the security module and stored. Then, using this Kw, the encrypted Kc sent together with the encrypted content is decrypted, and the content is decrypted using the decrypted Kc. According to Non-Patent Document 1, in Type I content, the content body is encrypted with Ks (scramble key), and ECM-Kc including Ks is encrypted with Kc.

  The broadcast station broadcasts Kc included in the common information, and the receiver stores the common information together with the content. Here, the common information is KCM transmission ECM (Entirement Control Message) and ACI (Access Control Information) of Non-Patent Document 1. In addition to Kc, the common information includes a reference registration code and a license that indicate which service the content can be used with.

  This reference registration code is disclosed in Patent Document 1, but in a bitmap format called a tier bit, each bit means a specific service, and “1” is a bit corresponding to the service to which the content belongs. To identify the contracted services required to use the content.

  In addition, the broadcast station includes encrypted Kw and the like included in individual information (EMM) and transmits it to the receiver, and the receiver stores the information in the security module.

  As shown in FIG. 4, the individual information includes a security module identification ID 410, a work key (Kw) 420, a contract registration code 432 for specifying a service to be contracted, and an end date 431 indicating the contract validity period. Become.

  In the contract registration code 432, “1” is set in the bit corresponding to the contracted service. The security module compares the contract registration code of the individual information with the reference registration code included in the common information, and the bit corresponding to the same service is set to “1” and the current time at the time of determination is within the valid period If there is, it is determined that there is a contract.

  This contract is renewed as follows.

  If the user does not explicitly cancel the contract, it is assumed that the contract will be renewed, and the broadcaster will provide the new contract information that extends the valid period for one year before the valid period expires. Broadcast to the receiver using EMM. At this time, since the contract is not renewed if the power of the receiver is off, the transmitter repeatedly transmits new contract information. When the contract expires on March 1, new contract information is continuously broadcast using EMM from February 1, for example.

  When the viewer performs the cancellation procedure, the broadcast station sends cancellation information including the contract registration code 432 in which the bit corresponding to the service to be canceled is set to “0”. On the receiver side, the contents described in the contract information can be used unless the cancellation information is sent from the broadcasting station side.

When the broadcast station side receives a cancellation procedure from the viewer, it sends cancellation information to the receiver.At this time, the contract is not renewed if the receiver is turned off, so the broadcast station side Continue to send new cancellation information repeatedly.
JP 2002-305740 A "ARIB STD-B25 4.1 Edition", The Japan Radio Industry Association, 2001

  In conventional broadcasts that can only be used when receiving content, the content and individual information can be sent at the same time, so the receiver can forcibly cancel the contract because it sends the individual information along with the common information to the security module while using the content. However, in storable broadcasting, it is possible to prevent individual information from being transmitted to the security module by removing the security module from the receiver when content and common information are stored and by disconnecting the antenna line from the receiver when using the content. For this reason, the conventional method for broadcasting contract renewal information has a problem that even if the cancellation information is transmitted as individual information, fraud that cannot be reflected in the security module can be performed.

  In addition, by sending an update of the validity period and cancellation information at the same time, if the fraud that does not store the individual information in the security module is performed, the validity period of the entire contract registration code expires, and the service under contract becomes unavailable, It will be detrimental to fraudsters, leading to fraud prevention, but since individual information will be sent after the validity period expires, all contracts will be unavailable until the individual information is received after the validity period expires Had a problem.

  SUMMARY OF THE INVENTION Therefore, an object of the present invention is to provide a contract renewal information broadcasting method and a contract management apparatus that can prevent unauthorized use of contracts in storage-based broadcasting and seamlessly update contract periods.

  The security module according to claim 1 of the present invention includes an EMM server that generates individual information for each security module, an ECM server that generates common information for each content, and a security module that receives the individual information and the common information. For identifying contract information indicating contract status of at least two services distributed by the individual information, an effective period common to all of the contracts, and a service to which the content distributed by the common information belongs From the above, in the content distribution system for determining the content contract, the security module stores at least two areas for storing the contract information, means for selecting the area for storing the contract information, and the contract information is stored. Means for selecting the contract information used for contract determination from an area Provided.

  The security module according to claim 2 of the present invention is characterized in that the means for selecting the area for storing the contract information includes a validity period of the contract information distributed by the individual information and the validity of the contract information stored in the area. An area with a matching period or an area with a validity period of contract information stored in the area older than the validity period of the contract information distributed by the individual information is selected.

  In the security module according to a third aspect of the present invention, the means for selecting the area for storing the contract information selects the area for storing the contract information whose current time is within the valid period.

  According to a fourth aspect of the present invention, the area for storing the contract information includes identification information, and the individual information includes the identification information for specifying the area for storing the contract information, and the individual information. The region is selected according to the identification information.

  According to a fifth aspect of the security module of the present invention, identification information is attached to an area for storing the contract information, and the common information includes the identification information for specifying an area for storing the contract information, and the common information The contract information is selected based on the identification information.

  The contract renewal method according to claim 6 of the present invention includes an EMM server that generates individual information for each security module, an ECM server that generates common information for each content, and a security that receives the individual information and the common information. A module that identifies contract information indicating a contract status of at least two services distributed by the individual information, a validity period common to all the contracts, and a service to which the content distributed by the common information belongs In the content distribution system for determining the content contract from the information to be stored, the security module includes an area for storing at least two pieces of the contract information, and compared with the validity period of the contract information distributed by the individual information. Renew the contract information whose validity period is the same or older, and the current time Contract determined by information identifying the content belongs services delivered by the individual information and the contract information which is within the valid period, for managing the contract information different lifetime in the security module.

  The contract renewal method according to claim 7 of the present invention includes an EMM server that generates individual information for each security module, an ECM server that generates common information for each content, and a security that receives the individual information and the common information. A module that identifies contract information indicating a contract status of at least two services distributed by the individual information, a validity period common to all the contracts, and a service to which the content distributed by the common information belongs In the content distribution system for determining the content contract from the information to be stored, the security module includes an area for storing the contract information managed by identification information for specifying at least two areas, and the individual information includes the contract Including the identification information for specifying an area for storing information, and included in the individual information. The contract information of the area specified by the identification information is updated, the identification information specifying the area for storing the contract information is included in the common information, and is specified by the identification information included in the common information. The contract is determined by the information specifying the service to which the content distributed by the contract information and the individual information belongs, and the contract information having a different valid period is managed by the security module.

  The content distribution system according to claim 8 of the present invention includes an EMM server that generates individual information for each security module, an ECM server that generates common information for each content, and a security module that receives the individual information and the common information. The contract information indicating the contract status of at least two services distributed by the individual information, the validity period common to all the contracts, and the service to which the content distributed by the common information belongs In the content distribution system for determining the content contract from the information, the EMM server includes means for distributing the contract information before the validity period, and the security module includes at least two pieces of the contract information having different validity periods. Means for managing

  According to the present invention, two pieces of contract information with different validity periods can be managed by the security module, and the contract information can be distributed before the validity period. Therefore, it is possible to seamlessly renew the contract and prevent unauthorized use of the contract by storing the cancellation and the continuation of the validity period in the same individual information for distribution.

(Embodiment 1)
FIG. 1 is a block diagram showing a functional configuration of an entire storage type broadcasting system to which a broadcast method for contract renewal information according to Embodiment 1 of the present invention is applied. In FIG. 1, the storage type broadcast system includes a CAS management center 100, a broadcast station 200, and a receiver 300.

  The CAS management center 100 is a computer system and includes a unique key management server 110.

  The unique key management server 110 manages a unique key for each security module 330 and encrypts the EMM created by the broadcast station 200 with the unique key.

  The broadcast station 200 is a computer system and includes an EMM server 210, an ECM server 220, a content server 230, and a MUX 240.

  The EMM server 210 manages contracts and Kw for each service subscriber, and generates an EMM based on the contract status. The ECM server 220 manages the content key (hereinafter referred to as Kc), and generates common information (hereinafter referred to as ECM) and encrypts it using Kw. The content server 230 manages the content and encrypts the content with Kc. The MUX 240 multiplexes EMM, ECM, and content.

  The receiver 300 is a computer system and includes a clock 310, a DeMUX 320, a security module 330, and a storage management unit 340.

  The clock 310 manages the current time. The DeMUX 320 separates the received EMM, ECM, and content. The security module 330 receives the EMM and ECM, performs contract determination, Kc transmission, and the like. The accumulation management unit 340 accumulates the ECM separated by the DeMUX 320 and the content.

  Note that the security module 330 is typically mounted on a tamper-resistant LSI such as an IC card.

  FIG. 2 is a diagram illustrating a configuration of the security module 330 according to the first embodiment. In FIG. 2, the security module 330 includes an EMM decryption unit 331, a contract registration code recording area selection unit 332, a storage unit 333, a contract registration code selection unit 334, a use condition determination unit 335, a contract determination unit 336, and an ECM decryption. Part 337. The storage unit 333 further includes an area A338 and an area B339.

  The EMM decryption unit 331 decrypts the received EMM using a unique key (hereinafter referred to as Km) stored in the storage unit 333. Typically, Km is embedded in the security module at the time of shipment. The contract registration code recording area selection unit 332 selects whether to store the start date, end date, and contract registration code of the EMM decrypted by the EMM decryption unit 331 in the area A338 or the area B339. The storage unit 333 stores a contract registration code, a start date, an end date, Km, and Kw. The contract registration code selection unit 334 selects which contract registration code in area A338 or area B339 is used for contract determination. The use condition determination unit 335 performs use condition determination based on the use condition 530, and extracts Kc 510 if it can be used. The contract determination unit 336 performs contract determination from the contract registration code selected by the contract registration code selection unit 334 and the reference registration code 520. If there is a contract, the contract determination unit 336 transmits Kc510 and the use condition 530 to the use condition determination unit 335. To do. The ECM decoding unit 337 extracts Kw from the storage unit 333 and decodes the ECM.

  FIG. 5 is a diagram illustrating a configuration of the EMM according to the first embodiment. In FIG. 5, the EMM includes an identification ID 410, Kw 420, contract content 430, and other information 440. In the first embodiment, the contract content 430 includes an end date 431, a contract registration code 432, and a start date 433.

  The identification ID 410 is information for identifying the security module 330. Kw 420 is a key for decrypting the ECM. The end date 431 is the contract end date. The contract registration code 432 is information in the bitmap format shown in FIG. The start date 433 is the contract start date.

  FIG. 6 is a diagram illustrating a configuration of the ECM according to the first embodiment. In FIG. 6, the ECM includes Kc 510, a reference registration code 520, a use condition 530, and other information 540.

  Kc510 is a key for decrypting the content. The reference registration code 520 is information in the bitmap format shown in FIG. The usage condition 530 includes information on whether or not quality conversion is possible, information on analog copy control, information on the validity period, information on the number of uses, and information on the accumulated usage time. Note that the information included in the use conditions mentioned here is merely an example, and other information may be included in the use conditions.

  The operation of the storage type broadcast system according to Embodiment 1 will be described with reference to FIGS.

  First, EMM generation at the broadcasting station 200 will be described.

  The broadcasting station 200 manages the user's contract according to the basic contract period and the cancellation deadline. The basic contract period is the shortest period of the contract, and the cancellation requested by the user before the cancellation deadline is valid from the next basic contract period. Here, the basic contract period is, for example, one month, and the cancellation deadline is, for example, 25th of every month.

  The EMM server 210 starts generating an EMM for contract renewal of all users on the deadline of each cancellation (step S1100). A user who has canceled all services does not generate an EMM (step S1200). The user who has the contract stores the update number 400 and the identification ID 410 and starts generating the EMM (step S1300). Next, the contract registration code corresponding to the basic contract period is stored in the contract registration code 432 (step S1400). Next, it is confirmed whether there is a change in Kw (step S1500). If there is a change in Kw, a new Kw is stored in the work key 420 (step S1600). If there is no change in Kw, the work key 420 need not be stored in the EMM. Next, the end date of the next basic contract period is stored in the end date 431, and the start date of the next basic contract period is stored in the start date 433 (step S1700).

  Next, EMM update in the receiver 300 will be described.

  The EMM generated by the EMM server 210 is multiplexed by the MUX 240 and transmitted to the receiver 300.

  The receiver 300 acquires an EMM in which the identification ID 410 received from the DeMUX 320 matches the identification ID of the security module 330 and transmits the EMM to the security module 330. The identification ID of the security module 330 is acquired from the security module 330 when the receiver 300 is activated.

  The security module 330 receives the EMM (step S2100). The received EMM is decrypted with Km acquired from the storage unit 333, and if the update number 400 is newer than the update number acquired from the storage unit 333, it is determined that there is an update, and subsequent update processing of the storage unit 333 is executed. If it is determined that there is no update, the subsequent processing is not executed (step S2200).

  In updating the storage unit 330, first, the update number of the storage unit 330 is updated to the update number 400 (step S2300).

  Next, the contract registration code recording area selection unit 332 selects which of the area A338 and the area B339 is updated with the end date 431, the contract registration code 432, and the start date 433 (step S2400). First, it is determined whether or not the end date 431 and the end date match in the region A338 and the region B339, and if they match, selection is made. If the end date of both the area A338 and the area B339 does not match the end date 431, the older end date of the area A338 and the area B339 is selected.

  Next, the selected area is updated with the end date 431, the contract registration code 432, and the start date 433 (step S2500).

  Next, content and ECM processing in the receiver 300 will be described.

  The receiver 300 acquires the content and ECM received from the DeMUX 320 and stores them in the storage management unit 340.

  When the user instructs the use of the content stored in the storage management unit 340, the receiver 300 acquires the ECM corresponding to the content instructed from the storage management unit 340, the current time from the clock 310, and the security module. 330. According to Non-Patent Document 1, the correspondence between content and ECM describes an example in which it is performed by a content information header or a storage type ACG list.

  Next, the security module 330 receives the current time and the ECM (step S3100). The received ECM is decrypted by the ECM decryption unit 337 with Kw acquired from the storage unit 333, Kc 510, the reference registration code 520, and the use condition 530 are transmitted to the contract determination unit 336, and the contract registration code selection unit 334 currently A contract registration code is acquired from an area whose time is after the start date and before the end date, and the contract registration code is transmitted to the contract determination unit 336 (step 3200). If there is no area in which the current time is after the start date and before the end date, it is determined that there is no contract and is not usable (step S3600).

  Next, the contract determination unit 336 performs contract determination using the contract registration code and the reference registration code 520 (step S3300). When it is determined that there is a contract, the following processing is performed. It cannot be used (step S3600).

  Next, the usage rule determination unit 335 determines the usage rule 530. If it is determined that the usage rule is available, the security module 330 transmits Kc510 (step S3500), and the content is decrypted and used. However, according to Non-Patent Document 1, for type I content, ECM-Kc is decrypted with Kc 510. If it is determined that it cannot be used, the process ends (step S3600).

  As described above, according to the first embodiment, the security module 330 manages the two contract registration codes and the valid period so that the contract registration code and the valid period of the next basic contract period are held in advance. Will be able to leave. Therefore, the broadcasting station 200 that transmits the EMM with the effective period as the basic contract period unit transmits individual information to the security module by simultaneously transmitting the update of the effective period of the next basic contract period and the cancellation information from the cancellation deadline. If fraud is not stored, the validity period of the entire contract registration code expires, making it impossible to use the services under contract, which is detrimental to fraudsters, leading to fraud prevention and a seamless contract period. Update is possible.

(Embodiment 2)
In the second embodiment, since the configuration and operation of the entire system are the same as those in the first embodiment, FIG. 1 and FIGS. In the second embodiment, since the configuration of the security module and the data structure of EMM and ECM are different from those in the first embodiment, description will be made with reference to FIG. 3, FIG. 7, and FIG.

  FIG. 3 is a diagram showing the structure of the security module 330 according to Embodiment 2 of the present invention. In FIG. 3, the storage unit 333 of the security module according to the second embodiment stores the contract registration code 432 whose contract registration code identification 434 is even in the area A338 and the contract registration code 432 whose contract registration code identification 434 is odd in the area B339. Record.

  FIG. 7 shows an EMM data structure according to Embodiment 2 of the present invention. In FIG. 7, the contract registration code identification 434 designates an area for recording the contract registration code selected by the contract registration code recording area selection unit 332 of the security module 330.

  FIG. 8 shows an ECM data structure according to Embodiment 2 of the present invention. In FIG. 8, the reference registration code identification 521 designates an area in which the contract registration code selected by the contract registration code selection unit 334 of the security module 330 is recorded.

  The operation of the storage type broadcasting system according to the second embodiment is similar to the operation of the storage type broadcasting system according to the second embodiment. Therefore, in Embodiment 2, FIG. 10 to FIG. 12 are used. Hereinafter, the operation of the storage type broadcasting system according to the second embodiment will be described with reference to the drawings.

  First, EMM generation at the broadcasting station 200 will be described.

  The broadcasting station 200 manages the user's contract according to the basic contract period and the cancellation deadline. The basic contract period is the shortest period of the contract, and the cancellation requested by the user before the cancellation deadline is valid from the next basic contract period. Here, the basic contract period is, for example, one month, and the cancellation deadline is, for example, 25th of every month.

  The EMM server 210 starts generating an EMM for contract renewal of all users on the deadline of each cancellation (step S1100). A user who has canceled all services does not generate an EMM (step S1200). The user who has the contract stores the update number 400 and the identification ID 410 and starts generating the EMM (step S1300). Next, the contract registration code corresponding to the next basic contract period is stored in the contract registration code 432, and the contract registration code identification corresponding to the next basic contract period is stored in the contract registration code identification 434 (step S1400). If there is no change in the contract, the contract registration code 432 and the contract registration code identification 434 need not be stored in the EMM. In the second embodiment, since the storage unit 333 has two contract registration code recording areas, the contract registration code identification has two values of even and odd, and the contract registration code identification 434 for each basic contract period. The EMM is generated by changing the value stored in.

  Next, it is confirmed whether there is a change in Kw (step S1500). If there is a change in Kw, a new Kw is stored in the work key 420 (step S1600). If there is no change in Kw, the work key 420 need not be stored in the EMM. Next, the end date of the next basic contract period is stored in the end date 431 (step S1700).

  The EMM generated by the EMM server 210 is multiplexed by the MUX 240 and transmitted to the receiver 300.

  Next, EMM update in the receiver 300 will be described.

  The receiver 300 acquires an EMM in which the identification ID 410 received from the DeMUX 320 matches the identification ID of the security module 330 and transmits the EMM to the security module 330. The identification ID of the security module 330 is acquired from the security module 330 when the receiver 300 is activated.

  The security module 330 receives the EMM (step S2100). The received EMM is decrypted with Km acquired from the storage unit 333, and if the update number 400 is newer than the update number acquired from the storage unit 333, it is determined that there is an update, and subsequent update processing of the storage unit 333 is executed. If it is determined that there is no update, the subsequent processing is not executed (step S2200).

  In updating the storage unit 330, first, the update number of the storage unit 330 is updated to the update number 400 (step S2300).

  Next, the contract registration code recording area selection unit 332 selects which contract registration code of the area A338 or the area B339 is to be updated from the contract registration code identification 434 (step S2400). In the second embodiment, the area A338 is selected when the contract registration code identification 434 is even, and the area B339 is selected when the contract registration code identification 434 is odd.

  Next, the contract registration code and end date of the selected area are updated (step S2500).

  Next, content and ECM processing in the receiver 300 will be described.

  The receiver 300 acquires the content and ECM received from the DeMUX 320 and stores them in the storage management unit 340.

  When the user instructs the use of the content stored in the storage management unit 340, the receiver 300 acquires the ECM corresponding to the content instructed from the storage management unit 340, the current time from the clock 310, and the security module. 330. According to Non-Patent Document 1, the correspondence between content and ECM describes an example in which it is performed by a content information header or a storage type ACG list.

  Next, the security module 330 receives the current time and the ECM (step S3100). The received ECM is decoded by the ECM decoding unit 337 with Kw acquired from the storage unit 333, and Kc510, the reference registration code 520, the reference registration code identification 521, and the use condition 530 are transmitted to the contract determination unit 336, and the contract is determined. The registration code selection unit 334 acquires the contract registration code and the end date from the area specified by the reference registration code identification 521, and transmits it to the contract determination unit 336 (step 3200).

  When the current time has passed the end date, the contract determination unit 336 determines that there is no contract and cannot use the contract (step S3600).

  Next, the contract determination unit 336 performs contract determination using the contract registration code and the reference registration code 520 (step S3300). When it is determined that there is a contract, the following processing is performed. It cannot be used (step S3600).

  Next, the usage rule determination unit 335 determines the usage rule 530. If it is determined that the usage rule is available, the security module 330 transmits Kc510 (step S3500), and the content is decrypted and used. However, according to Non-Patent Document 1, for type I content, ECM-Kc is decrypted with Kc 510. If it is determined that it cannot be used, the process ends (step S3600).

  As described above, according to the second embodiment, the security module 330 manages the two contract registration codes and the validity period so that the contract registration code and the validity period of the next basic contract period are held in advance. Will be able to leave. Therefore, the broadcasting station 200 that transmits the EMM with the effective period as the basic contract period unit transmits individual information to the security module by simultaneously transmitting the update of the effective period of the next basic contract period and the cancellation information from the cancellation deadline. If fraud is not stored, the validity period of the entire contract registration code expires, making it impossible to use the services under contract, which is detrimental to fraudsters, leading to fraud prevention and a seamless contract period. Update is possible.

  In the second embodiment, only two contract registration codes are managed by the security module. However, two or more contract registration codes may be managed. In this case, the values that can be taken by the contract registration code identification and the reference registration code identification are the number of areas managed by the security module.

  In the second embodiment, the end dates are held in the area A338 and the area B339, respectively, but the same applies to the case where only one end date is managed in the storage unit 333 outside the areas A338 and B339. An effect is obtained.

  The storage-type broadcasting system according to the present invention is useful in the field of content distribution and the like as a contract renewal prevention that can seamlessly renew a contract.

The block diagram which shows the functional structure of the storage type broadcasting system whole of this invention FIG. 2 is a block diagram showing a functional configuration of a security module in the first embodiment Block diagram showing a functional configuration of a security module in the second embodiment The figure which shows the data structure of the conventional EMM The figure which shows the data structure of EMM in Embodiment 1. The figure which shows the data structure of ECM in Embodiment 1. The figure which shows the data structure of EMM in Embodiment 2. The figure which shows the data structure of ECM in Embodiment 2. Diagram showing the data structure of the tier bit The flowchart which shows the operation | movement of EMM production | generation which concerns on embodiment of this invention. The flowchart which shows the operation | movement of the EMM reception which concerns on embodiment of this invention. The flowchart which shows the operation | movement of ECM reception which concerns on embodiment of this invention.

Explanation of symbols

100 CAS Management Center 110 Unique Key Management Server 200 Broadcast Station 210 EMM Server 220 ECM Server 230 Content Server 240 MUX
300 Receiver 310 Clock 320 DeMUX
330 Security Module 331 EMM Decoding Unit 332 Contract Registration Code Recording Area Selection Unit 333 Storage Unit 334 Contract Registration Code Selection Unit 335 Usage Condition Determination Unit 336 Contract Determination Unit 337 ECM Decoding Unit 338 Area A
339 Region B
340 Storage management unit 410 Identification ID
420 Work Key 430 Contract Content 431 End Date 432 Contract Registration Code 433 Start Date 434 Contract Registration Code Identification 440 Other Information 510 Kc
520 Reference registration code 521 Reference registration code identification 530 Terms of use 540 Other information

Claims (8)

An EMM server that generates individual information for each security module; an ECM server that generates common information for each content; and a security module that receives the individual information and the common information;
From the contract information indicating the contract status of at least two services distributed by the individual information, the validity period of the contract information, and information identifying the service to which the content distributed by the common information belongs, the contract of the content In the content distribution system for determining
An area for storing at least two pieces of the contract information in the security module;
Means for selecting an area for storing the contract information;
Means for selecting the contract information used for contract determination from the area for storing the contract information;
A security module for managing the contract information having different validity periods. The means for selecting an area for storing the contract information includes:
An area where the validity period of the contract information distributed by the individual information matches the validity period of the contract information stored in the area, or the validity period of the contract information distributed by the individual information The security module according to claim 1, wherein an area where the validity period of stored contract information is old is selected. The means for selecting the contract information is:
The security module according to claim 1, wherein the area storing the contract information whose current time is within a valid period is selected. In the area for storing the contract information, identification information is attached,
The security module according to claim 1, wherein the individual information includes the identification information for specifying an area in which the contract information is stored, and the area is selected based on the identification information of the individual information. In the area for storing the contract information, identification information is attached,
The security module according to claim 1, wherein the common information includes the identification information that specifies an area in which the contract information is stored, and the contract information is selected based on the identification information of the common information. . An EMM server that generates individual information for each security module; an ECM server that generates common information for each content; and a security module that receives the individual information and the common information;
From the contract information indicating the contract status of at least two services distributed by the individual information, the validity period common to all the contracts, and the information identifying the service to which the content distributed by the common information belongs, In a content distribution system that determines a content contract,
An area for storing at least two pieces of the contract information in the security module;
Compared to the validity period of the contract information distributed by the individual information, the validity period is the same as or older than the contract information,
The contract is determined by information identifying the service to which the content distributed by the contract information and the individual information whose current time is within the validity period belongs,
The contract renewal method characterized in that the security module manages the contract information having different validity periods. An EMM server that generates individual information for each security module; an ECM server that generates common information for each content; and a security module that receives the individual information and the common information;
From the contract information indicating the contract status of at least two services distributed by the individual information, the validity period common to all the contracts, and the information identifying the service to which the content distributed by the common information belongs, In a content distribution system that determines a content contract,
An area for storing the contract information managed by identification information for specifying at least two areas in the security module;
Including the identification information for specifying the area for storing the contract information in the individual information, renewing the contract information in the area specified by the identification information included in the individual information,
The common information includes the identification information that specifies an area for storing the contract information, and the service to which the contract information specified by the identification information included in the common information and the content distributed by the common information belong. Determine the contract with the information to identify,
The contract renewal method characterized in that the security module manages the contract information having different validity periods. An EMM server that generates individual information for each security module; an ECM server that generates common information for each content; and a security module that receives the individual information and the common information;
From the contract information indicating the contract status of at least two services distributed by the individual information, the validity period common to all the contracts, and the information identifying the service to which the content distributed by the common information belongs, In a content distribution system that determines a content contract,
The EMM server comprises means for distributing the contract information before the validity period,
The content distribution system, wherein the security module includes means for managing at least two pieces of contract information having different effective periods.

Images