JP2008124579A - Communication system and communication method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To perform user authentication of high convenience when using contents in information household appliances. <P>SOLUTION: The communication system is composed of a customer premise network, an authentication server device, and a content server device which are connected making mutual communication possible through an internet. The customer premise network is composed connecting a content providing device, a content viewing and listening device (for example, a network correspondent television set, etc.), a PC (Personnel Computer), and a HDD (Hard Disk Drive) so that mutual communication is possible using DLNA (Digital Living Network Alliance). The content providing device which receives a content request from the content viewing and listening device transmits a session information request to the authentication server device, and the authentication server device receives session information and user authentication information from a user device, and performs the user authentication. Succeedingly, if it is authenticated to be a legal user, the content providing device receives the contents from the content providing device, the content providing device receives the contents from the content server device, and transmits the received contents to the content viewing and listening device. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  According to the present invention, a content viewing device that outputs content in a viewable manner is connected to another device via the content providing device, and whether the user of the home network is a valid user An authentication server device that authenticates whether or not and a content server device that provides content to the content viewing device via the content providing device on the condition that the user is authenticated as a valid user are mutually connected via a network. The present invention relates to a communication system and a communication method configured to be communicably connected to each other.

  Conventionally, the use of the Internet has become widespread as PCs (Personal Computers) have spread in the home. Along with this, service providers provide various services (contents) via the Internet. In order to use these services, the user can first perform user registration with the service provider and then use the service provided by the service provider.

  Recently, with the widespread use of information home appliances, the number of Internet users has further increased, and terminal devices used by users are often used in addition to PCs that have been used in the past, such as network compatible TVs. It is becoming. DLNA (Digital Living Network Alliance) standard is used for the connection of such information appliances.

  This DLNA standard is for mutual use of services (contents) between information appliances and cannot perform user registration or user authentication. That is, it is impossible to connect to a service provider on the Internet using the DLNA standard and perform user registration. Thus, various information on user registration methods for using services provided by service providers have been presented in information home appliances such as network-compatible TVs as well as PCs.

  For example, in Patent Document 1 (Japanese Patent Laid-Open No. 2006-174320), when using a service (content) on the Internet by an information appliance, first, user registration is performed using a PC having an Internet browser, and then A technique for using a service using an information appliance is disclosed.

  In Non-Patent Document 1, a dedicated application for using a service provided by a service provider is installed in a device that uses a service such as a PC or a network-compatible TV, and the service is used only by using the application. Techniques that can be used are disclosed.

JP 2006-174320 A “Achieving billing without the need for membership registration Enables impulse purchase of video content”, Nikkei New Media, April 3, 2006, p16

  By the way, in Patent Document 1 of the conventional technology described above, an information home appliance that can use an Internet browser can perform user registration in the same manner as a conventional PC, but an information home appliance that cannot use an Internet browser once has a PC. For example, it is necessary to perform user registration using an information appliance, etc., and the user registration method differs depending on the performance of the information home appliance.

  Moreover, in the above-described Non-Patent Document 1, there is a problem in that convenience is poor because it is necessary to install a dedicated application on all information home appliances that use services (contents) on the Internet.

  Therefore, the present invention has been made to solve the above-described problems of the prior art, and a communication system capable of performing user authentication with high convenience when using content in an information home appliance. An object is to provide a communication method.

  In order to solve the above-described problems and achieve the object, the invention according to claim 1 is configured such that a content viewing device that outputs content in a viewable manner is connected to another device via the content providing device. Via the content providing device on condition that the home network, an authentication server device for authenticating whether the user of the home network is a valid user, and the user is authenticated as a valid user And a content server device that provides the content to the content viewing device so as to be able to communicate with each other via a network, wherein the content providing device or the content server device includes: When a content request for viewing content is received from a content viewing device, When session information request transmitting means for transmitting session information request for requesting session information used for user authentication accompanying listening to the authentication server device and session information issued by the authentication server device are received, Generating authentication content formed as content viewable by the content viewing device and transmitting the session information to the content viewing device; and the authentication content is generated by the authentication content generating unit. An authentication result inquiry means for transmitting the session information to the authentication server device together with an authentication result inquiry request for inquiring an authentication result indicating whether or not the user is a valid user after being transmitted to the viewing device; The authentication server device uniquely identifies the user. User authentication information storage means for storing user authentication information stored in a user terminal owned by a user of the home network and used for user authentication in association with the user authentication information to be separated; When a session information request is received from the content providing apparatus or the content server apparatus, the session information is issued, transmitted to the content providing apparatus or the content server apparatus, and stored in a predetermined session information storage unit When the authentication request including the session information is received together with the user authentication information from the information temporary issuing unit and the user terminal, the session information is stored in the session information storage unit, and the user authentication Only when information is stored in the user authentication information storage means. Session information regular issuing means for acquiring the user authentication information from the user authentication information storage means and storing it in the session information storage means in association with the session information; and the content providing apparatus or the content server When the session information is received together with the authentication result inquiry request from the device, it is determined whether the session information and the user authentication information are associated with each other and stored in the session information storage unit, and the use And user authentication means for authenticating whether or not the person is a legitimate user.

  The invention according to claim 2 is the above invention, wherein the content server device transmits the encrypted content to the content providing device, and the user authentication means is configured so that the user When it is authenticated that the user is a valid user, a decryption key for decrypting the content is transmitted to the content providing apparatus.

  In the invention according to claim 3, in the above invention, the content viewing device transmits an identification number uniquely assigned to a home terminal device connected to the home network together with the content request, and the session When receiving the content request and the identification number from the content viewing device, the information request transmission unit transmits the session information request and the identification number to the authentication server device, and the session information storage unit The session information, the user authentication information, and the identification number are stored, and the session information temporary issuing means receives the session information request and the identification number from the content providing device or the content server device. When received, the session information associated with the identification number is When stored in the session information storage unit, an authentication result indicating authentication permission is transmitted to the content server device or the content providing device, and the session information associated with the identification number is stored in the session information storage unit. When not stored, the session information is issued and transmitted to the content providing apparatus or the content server apparatus, and the session information and the identification number are associated with each other and stored in the session information storage means, The information regular issuing means stores the session information and the identification number in the session information storage means when receiving an authentication request including the session information from the user terminal together with the user authentication information and the identification number. And the user authentication information is the user authentication information. Only when it is stored in the information storage means, the user authentication information is obtained from the user authentication information storage means, stored in the session information storage means in association with the session information, and the user authentication When the session information is received together with the authentication result inquiry request from the content providing apparatus or the content server apparatus, the means associates the session information, user authentication information, and identification number with the session information storage means. It is determined whether or not the user is stored, and whether or not the user is a valid user is authenticated.

  According to a fourth aspect of the present invention, in the above invention, the content viewing device transmits an identification number uniquely assigned to a home terminal device connected to the home network together with the content request. The content providing device associates the identification number uniquely assigned to the home terminal device that transmitted the content request with the session information issued to the home terminal device that transmitted the content request. And storing the identification number stored in association with the session information when content associated with the session information is transmitted from the content server device. And the content is only transferred to the home terminal device to which the identification number is assigned. And further comprising a content transmitting unit that trust.

  Further, in the invention according to claim 5, in the above invention, when the session information request transmitting means of the content server apparatus receives the session information request from the content providing apparatus, the content viewing apparatus desires to view Content information regarding the content to be transmitted and the session information request are transmitted to the authentication server device, and the session information temporary issuing means receives the session information request and the content information from the content server device, and the session information Is transmitted to the content viewing device or the content server device, and the session information and the content information are associated with each other and stored in the session information storage unit. From the above When the authentication request including the user information is received together with the user authentication information, the session information and the content information are stored in the session information storage means, and the user authentication information is stored in the user authentication information. Only when stored in the storage means, the user authentication information is acquired from the user authentication information storage means, stored in the session information storage means in association with the session information and the content information, The user authentication means stores the session information and the user authentication information in association with each other when the session information is received together with the authentication result inquiry request from the content server device. And the user authentication information stored in the user authentication information storage means is the content information. Determining whether a predetermined condition is satisfied, the user and wherein the authenticating whether a valid user.

  Further, in the invention according to claim 6, in the above invention, when the content generating unit for authentication receives session information issued by the authentication server device, the content viewing device can view moving image content. The session information is generated as a moving image content and transmitted to the content viewing device, and the content viewing device outputs the audio content so that the audio content can be viewed. If it is, the session information is generated as audio content for authentication formed as audio content and transmitted to the content viewing device, and the content viewing device outputs the still image content so as to be viewable. Is a still image for authentication that is formed with the session information as a still image content. It generates a content and transmits the content viewing apparatus.

  According to a seventh aspect of the present invention, there is provided a home network configured such that a content viewing device that outputs content in a viewable manner is connected to another device via a content providing device, and a user of the home network An authentication server device for authenticating whether or not the user is a valid user, and providing the content to the content viewing device via the content providing device on condition that the user is authenticated as a valid user A communication method suitable for configuring a content server device to be communicably connected to each other via a network, wherein the content providing device or the content server device views content from the content viewing device. Used for user authentication when viewing a requested content request. When a session information request transmitting step for transmitting a session information request for requesting session information to the authentication server device and the session information issued by the authentication server device are received, the session information is viewed by the content viewing device. Generating an authentication content formed as possible content and transmitting it to the content viewing device; and after the authentication content is transmitted to the content viewing device by the authentication content generation step, An authentication result inquiry step of sending the session information to the authentication server device together with an authentication result inquiry request for inquiring an authentication result indicating whether or not the user is a valid user, and the authentication server device includes the user Corresponds to user authentication information that uniquely identifies User authentication information storage means for storing user authentication information stored in a user terminal owned by a user of the home network and used for authentication of the user, and the content providing apparatus or the content server apparatus A session information temporary issuing step of issuing the session information and transmitting it to the content providing apparatus or the content server apparatus and storing it in a predetermined session information storage means when receiving a session information request from the user, and the user When an authentication request including the session information is received from the terminal together with the user authentication information, the session information is stored in the session information storage unit, and the user authentication information is stored in the user authentication information storage unit Only when it is stored in the user authentication information. A session information normal issuance step acquired from the user authentication information storage means and stored in the session information storage means in association with the session information, together with the authentication result inquiry request from the content providing apparatus or the content server apparatus When the session information is received, it is determined whether or not the session information and the user authentication information are associated with each other and stored in the session information storage unit, and whether or not the user is a valid user And a user authentication step of authenticating whether or not.

  According to the first or seventh aspect of the present invention, when the content providing device or the content server device receives a content request for requesting viewing of content from the content viewing device, it is used for user authentication accompanying viewing of the content. A session information request for requesting session information is transmitted to the authentication server device, and when session information issued by the authentication server device is received, the session information is formed as content that can be viewed on the content viewing device. A session is generated together with an authentication result inquiry request for inquiring an authentication result indicating whether or not the user is a valid user after the content is generated and transmitted to the content viewing device, and the authentication content is transmitted to the content viewing device. Information is transmitted to the authentication server device, and the authentication server device In association with user authentication information for uniquely identifying a user, the user authentication information stored in the user terminal owned by the user of the home network and used for user authentication is stored, When a session information request is received from the providing device or the content server device, the session information is issued and transmitted to the content providing device or the content server device, and stored in a predetermined session information storage unit. When user authentication information is received together with user authentication information, the session authentication information is acquired and the user authentication information is acquired and the session information is supported only when the user authentication information is stored. Inquires about the authentication result from the content providing device or content server device When the session information is received together with the request, it is determined whether or not the session information and the user authentication information are stored in association with each other, and whether or not the user is a valid user is authenticated. When using content in information appliances, it is possible to perform user authentication with high convenience.

  For example, since an authentication screen can be output to a network compatible TV as a video or still image using DLNA, there is no need to separately authenticate using an Internet browser such as a PC, resulting in highly convenient user authentication. Is possible. Further, since authentication is performed using a personal terminal device such as a mobile phone, strong authentication can be performed.

  According to the invention of claim 2, when the content server device transmits the encrypted content to the content providing device, and the user is authenticated as a valid user, the content server device Since the decryption key for decrypting is transmitted to the content providing apparatus, only the contractor can view the content.

  For example, as in scrambled broadcasting, the content server device (for example, a broadcaster) transmits the broadcast with encryption that disturbs the radio wave so that only the contracting subscriber can receive the fee, and only the contractor has the decryption key. It is possible to receive and watch the broadcast. Along with this, it is also possible to charge.

  According to the invention of claim 3, the content viewing apparatus transmits an identification number uniquely assigned to the home terminal device connected to the home network together with the content request, and the content request and identification number are transmitted from the content viewing apparatus. Is received, the session information request and the identification number are transmitted to the authentication server device, and the session information, the user authentication information and the identification number are stored, from the content providing device or the content server device. When the session information request and the identification number are received and session information associated with the identification number is stored, an authentication result indicating authentication permission is transmitted to the content server device or the content providing device, and the identification number is If the associated session information is not stored, the session information is issued. The session information and the identification number are stored in association with each other and the authentication request including the session information is received from the user terminal together with the user authentication information and the identification number. Only when the session information and the identification number are stored and the user authentication information is stored, the user authentication information is acquired and stored in association with the session information. When session information is received from the server device together with an authentication result inquiry request, it is determined whether or not the session information, user authentication information, and identification number are stored in association with each other, and the user is a valid user Each home terminal device (information home appliance) connected to the home network. , Results that can be authenticated, it is possible to perform a more robust authentication.

  For example, first, a network compatible TV connected to a home network transmits a content request and is authenticated to provide the content. Next, when the HDD transmits a content request, it is determined that the HDD is already authenticated. Although content may be provided, the content request is first received and authenticated from the network compatible TV of “01” with the network compatible TV identification number “01” and the HDD identification number “02”. Is provided, it is not determined that the HDD of “02” is authenticated even if the content request is transmitted next, and the HDD needs to be authenticated in the same manner as the network compatible TV. It is possible to perform stronger authentication.

  According to the invention of claim 4, the content viewing apparatus transmits an identification number uniquely assigned to the home terminal device connected to the home network together with the content request, and the content providing device includes: The identification number uniquely assigned to the home terminal device that transmitted the content request and the session information issued to the home terminal device that transmitted the content request are stored in association with each other, and the session information When the associated content is transmitted, the identification number stored in association with the session information is acquired, and the content is transmitted only to the home terminal device to which the identification number is allocated. Send content only to authenticated home terminal devices (information appliances) connected to It may result, it is possible to perform a more robust authentication.

  According to the invention of claim 5, when the content server device receives the session information request from the content providing device, the content server device sends the content information related to the content that the content viewing device desires to view and the session information request to the authentication server device. When the session information request and the content information are received from the content server device, the session information is issued and transmitted to the content viewing device or the content server device, and the session information and the content information are stored in association with each other. When the authentication request including the session information is received from the user terminal together with the user authentication information, only when the session information and the content information are stored and the user authentication information is stored. Get authentication information and session information When the session information is received together with the authentication result inquiry request from the content server device, the session information and the user authentication information are stored in association with each other and stored. For example, when age information is stored as user authentication information because it is determined whether or not the user authentication information satisfies a predetermined condition of the content information and whether or not the user is a valid user As a result of being able to determine whether or not content can be viewed according to age, it is possible to perform finer authentication.

  For example, refuse session information requests from users under 20 years of age, change the content to be provided according to the age of the received user, or only content that can be allowed at the age of the received user It is possible to perform finer authentication, such as providing. Moreover, you may authenticate not only by age but also by sex or occupation.

  According to the sixth aspect of the present invention, when the content viewing device outputs the moving image content so as to be viewable when the session information issued by the authentication server device is received, the session information is displayed as a moving image. When the moving image content for authentication formed as the image content is generated and transmitted to the content viewing device and the content viewing device outputs the audio content so that the audio content can be viewed, the session information is formed as the audio content. When authentication content is generated and transmitted to the content viewing device, and the content viewing device outputs the still image content so that it can be viewed, the authentication still image content formed as the still image content Is generated and sent to the content viewing device. In the use, it is possible to further perform highly user authentication convenient. For example, the authentication content can be output not only as a moving image or a still image, but also as a result, so that user authentication can be performed even for a terminal device without a monitor.

  Embodiments of a communication system according to the present invention will be described below in detail with reference to the accompanying drawings. The main terms used in the following embodiments, the outline and features of the communication system according to the first embodiment, the configuration and processing procedure of the communication system according to the first embodiment, and the effects of the first embodiment will be described in order. Another embodiment will be described.

[Explanation of terms]
First, main terms used in this embodiment will be described. The “communication system” used in the present embodiment is a system in which a home network, an authentication server device, and a content server device are connected to each other via a network such as the Internet so that they can communicate with each other. In this embodiment, a system composed of one home network, one authentication server device and one content server device will be described. However, the present invention is not limited to this, and there are a plurality of each. It may be. For example, it is composed of one home network, one authentication server device and three content server devices, or two home networks, three authentication server devices and four content server devices. There are no restrictions.

  The “home network” used in this embodiment is a home LAN or home network, and specifically includes a content providing apparatus, a network compatible TV, a PC (Personal Computer), an HDD (Hard Disk), which will be described later. Home terminal devices such as Drive) are connected using DLNA (Digital Living Network Alliance). The above-described in-home terminal device is merely an example, and various devices such as a Web camera and a telephone are connected. Also, it is not necessarily a home network, and may be a LAN such as an in-house network.

  The “content providing device” is a device (for example, HGW: HomeGateway) that communicably connects each device in the home network to an authentication server device or content server device on the Internet. The information home appliances are interconnected by performing replacement, and the content transmitted from the content server device is transmitted to the content viewing device. Specifically, it is arranged between the Internet and a home network, and includes a set-top box such as a home router, protocol conversion, firewall, firewall rule dynamic change function and broadcast reception function. In the present embodiment, the HGW that connects the home network and the Internet will be described. However, the present invention is not limited to this, and any device in the home network that can be connected to the Internet is used. It may be a device. For example, it may be an HDD, a PC, or a network compatible TV having a Web function. The “content providing apparatus” corresponds to the “content providing apparatus” recited in the claims.

  The “network-compatible TV” is an apparatus that can connect to the Internet but does not have an Internet browser and outputs the content transmitted from the content server apparatus so that the content can be viewed. When using content in the home network, the “network compatible TV” can use the content request by sending it to another device connected to the home network, and uses content outside the home network. In this case, a content request can be transmitted to the content providing device, and the content can be provided and used from the content server device. The “network compatible TV” corresponds to the “content viewing apparatus” recited in the claims, but the “content viewing apparatus” recited in the claims need not necessarily be the “network compatible TV”. For example, an apparatus such as an HDD or a PC that can use the content may be used.

  In addition, “HDD” is a recording medium such as a hard disk recorder, and can accept a recording reservation from the outside by connecting to a network compatible TV. The “PC” is a general computer device, and includes an Internet browser (Web browser) and can perform Internet connection or the like. Further, the “mobile phone” is a communication terminal that is owned by the user A who is a user of the home network and stores the individual identification number, and has a QR code (registered trademark) reading function and an Internet connection function. Is done. In addition, when a “mobile phone” receives authentication audio content, it has a function of reading session information from the content.

  The “authentication server device” is a device that authenticates whether or not the user of the home network is a valid user. Specifically, when the content request transmitted from the network compatible TV as the content viewing device is received from the content providing device, the “authentication server device” generates session information and transmits the session information to the content providing device. . Thereafter, the “authentication server device” receives user authentication information from a terminal device such as a mobile phone and performs user authentication. For example, the “authentication server device”, when receiving the user authentication information from the user who transmitted the session information, determines that the authentication is permitted, transmits the authentication result to the content providing device, and transmits the session information. When the user authentication information different from is received, it is determined that the authentication is rejected, and the authentication result is transmitted to the content providing apparatus. The content viewing device permitted to be authenticated can output the content desired to be viewed, and the content viewing device whose authentication has been rejected cannot output the content desired to be viewed.

  The “content server device” is a device that provides content to the content viewing device via the content providing device on condition that the user is authenticated as a valid user. For example, if the authentication server device authenticates that the network-compatible TV is an authorized user, the “content server device” can send various contents such as VOD (Video On Demand), music download, and comics to the network-compatible TV. provide. In the present embodiment, the content server apparatus is described as an apparatus connected to the Internet. However, the present invention is not limited to this, and may be connected to a home network. For example, it may be mounted on an HDD recorder or the like. Further, it may be incorporated in the content providing device, that is, the content providing device itself may be equipped with a function for providing content. In addition, the “content server device” may be on another home network. In this case, when authentication is permitted (successful), a VPN connection is established between the home network to which the content server device is connected and the content providing device. Then, the content is provided to the content providing apparatus.

[Outline and features of communication system]
Next, the outline and features of the communication system according to the first embodiment will be described with reference to FIG. FIG. 1 is a system configuration diagram illustrating the overall configuration of the communication system according to the first embodiment.

  As shown in FIG. 1, the communication system according to the first embodiment is configured by connecting a home network, an authentication server device, and a content server device so that they can communicate with each other via the Internet. The home network is configured by connecting a content providing device, a network-compatible TV, a PC, and an HDD so that they can communicate with each other using DLNA. The mobile phone stores, for example, “00-11-FF” as an individual identification number, and is held by a user A who is a user of the home network. In addition, the content server device stores “VOD, music, comics” and the like as a content list to be provided.

  Under such a configuration, the communication system according to the first embodiment authenticates whether or not the user of the home network is a valid user, and the user is authenticated as a valid user. The content is provided to the content viewing device via the content providing device, and it is possible to perform highly convenient user authentication especially when using the content in information appliances. The point has the main feature.

  This main feature will be specifically described. The authentication server device stores user authentication information stored in a user terminal owned by a user of the home network and used for user authentication in the user authentication information DB. Remember. As a specific example, the user authentication information DB includes “user A” indicating “user” and “individual identification number” indicating the individual identification number of the mobile phone used by the user. , 00-11-FF "or the like.

  The authentication server device stores the user authentication information and the session information in the session information DB in association with each other. For example, when the session information DB is generated and transmitted to the content providing apparatus and receives the authentication request and the identification number from the mobile phone, the session information DB is transmitted together with the authentication request from the mobile phone and used. "00-11-FF, 123456789" is stored as "individual identification number" confirmed to be registered (stored) in the user authentication information DB and "session information" indicating the generated and transmitted session information.

  In such a state, the network compatible TV transmits a content request for requesting viewing of the content to the content providing apparatus by an instruction operation by the user (see (1) in FIG. 1). To give a specific example, the network-compatible TV outputs a content list to the monitor by the user's instruction operation (see FIG. 6). Subsequently, when “online” is selected by the user, the network compatible TV transmits a content request to the content providing apparatus. Here, a case will be described in which a content request is transmitted upon accepting selection of “online”. However, instead of “online”, a “content name” (for example, VOD or music) is output from the user. When the selection is accepted, a content request may be transmitted. “Online” and “content name” illustrated here do not limit the content display displayed on the network compatible TV.

  When the content request is received from the network compatible TV, the content providing apparatus transmits a session information request for requesting session information used for user authentication accompanying viewing of the content to the authentication server apparatus (FIG. 1). (See (2)). Subsequently, when receiving a session information request from the content providing apparatus, the authentication server apparatus issues session information, transmits it to the content providing apparatus, and stores it in a predetermined session information DB ((3) in FIG. 1). reference).

  Specifically, in the above example, when the authentication server apparatus receives a session information request from the content providing apparatus, the authentication server apparatus issues session information “123456789” and transmits it to the content providing apparatus, and session information “123456789”. Is temporarily stored in the session information DB. At this time, the identification number and authentication information of the content providing apparatus may be associated with the session information and stored in the session information DB.

  After that, when the content providing apparatus receives the session information issued by the authentication server apparatus, the content providing apparatus generates authentication content formed as content that can be viewed on the network compatible TV, and transmits the content to the network compatible TV. (Refer to (4) in FIG. 1). Specifically, in the above example, when the content providing apparatus receives the session information “123456789” issued by the authentication server apparatus, the content providing apparatus is formed as a QR code that can be viewed on the network compatible TV. The authentication content (see FIG. 7) is generated and transmitted to the network compatible TV.

  Subsequently, the network compatible TV that has received the authentication content outputs the received authentication content to the monitor, and the mobile phone authenticates the authentication request including the session information output to the network compatible TV together with the user authentication information. It is transmitted to the server device (see (5) and (6) in FIG. 1). Specifically, in the above example, the network-compatible TV outputs the received QR code, which is the authentication content, to the monitor. Then, when the mobile phone reads the QR code output to the network compatible TV by the user's operation, it automatically acquires the session information “123456789” and adds the individual identification number “00-11-FF” together with the authentication request. Sent to the authentication server device.

  When the authentication server device receives an authentication request including session information from the mobile phone together with the user authentication information, the session information is stored in the session information DB, and the user authentication information is the user authentication information. Only when stored in the DB, user authentication information is acquired from the user authentication information DB and stored in the session information DB in association with the session information (see (7) in FIG. 1). More specifically, the authentication server device receives the authentication request including the session information “123456789” and the individual identification number “00-11-FF” from the mobile phone, and the session information “123456789”. "Is stored in the session information DB and the user authentication information" 00-11-FF "is used only when the user authentication information" 00-11-FF "is stored in the user authentication information DB. Acquired from the user authentication information DB and stored in the session information DB in association with the session information “123456789”. That is, when the session information stored in the session information DB is received from the mobile phone stored in the user authentication information DB, the authentication server apparatus temporarily assumes that the user is a valid user. (User candidate), user authentication information and session information are associated with each other and stored in the session information DB.

  Thereafter, the content providing apparatus sends the session information together with an authentication result inquiry request for inquiring an authentication result indicating whether or not the user is a valid user after the authentication content is transmitted to the network compatible TV. (See (8) in FIG. 1). More specifically, in the above example, after the authentication content is transmitted to the network-compatible TV by an instruction operation from the user, authentication for inquiring an authentication result indicating whether or not the user is a valid user Along with the result inquiry request, session information “123456789” is transmitted to the authentication server device. Here, the content providing apparatus inquires about the authentication result by an instruction operation by the user. For example, the content providing apparatus may automatically inquire after a predetermined time, and any inquiries may be made. Good. When the inquiry is not made yet, the authentication server device may not respond or may make a response such as during authentication.

  Subsequently, when the authentication server apparatus receives session information together with the authentication result inquiry request from the content providing apparatus, whether or not the session information and the user authentication information are associated with each other and stored in the session information DB. And authenticate whether or not the user is a valid user (see (9) in FIG. 1). Specifically, when the authentication server apparatus receives the session information “123456789” together with the authentication result inquiry request, the authentication server apparatus receives the session information “123456789” and the user authentication information “00-11-FF”. Are associated and stored in the session information DB, whether or not the user is a valid user is authenticated, and an authentication result is transmitted to the content providing apparatus.

  In the case of this example, the session information “123456789” and the user authentication information “00-11-FF” are stored in the session information DB in association with each other. The user is authenticated as an authorized user, and an authentication permission response is transmitted to the content providing apparatus as the authentication result. On the other hand, if the received session information and user authentication information are not stored in association with each other, a response indicating that authentication is being performed or an unauthenticated response is transmitted. The format of the authentication result to be transmitted may be, for example, an electronic certificate or an electronic ticket.

  The content providing apparatus that has received the authentication permission response transmits a content request to the content server apparatus, and the content server apparatus transmits the content to the content providing apparatus (see (10) and (11) in FIG. 1). Specifically, in the above example, when the content providing apparatus receives the authentication permission response, the content providing apparatus transmits a content request to the content server apparatus. The content server apparatus that has received the content request transmits the content specified by the content providing apparatus that has transmitted the content request and the list of contents to be stored. When the content providing apparatus receives the authentication rejection response, the content providing apparatus transmits to the network compatible TV that the authentication is rejected without transmitting a content request to the content server apparatus.

  Then, the content providing apparatus transmits the content received from the content server apparatus to the network compatible TV, and the network compatible TV outputs the received content (see (12) and (13) in FIG. 1). Specifically, the content providing apparatus transmits content such as a content list and VOD received from the content server apparatus to the network compatible TV, and the network compatible TV outputs the received content.

  As described above, the communication system according to the first embodiment can output an authentication screen as a moving image, a still image, or the like using DLNA to the network compatible TV. Therefore, it is necessary to separately authenticate using an Internet browser such as a PC. As a result, as described above, it is possible to perform user authentication with high convenience when using content in information appliances.

[Configuration of communication system]
Next, the configuration of the communication system shown in FIG. 1 will be described with reference to FIG. FIG. 2 is a block diagram illustrating the configuration of the communication system according to the first embodiment. As shown in FIG. 2, the communication system includes a home network, an authentication server device 20, and a content server device 30. The content providing apparatus 10, HDD, network compatible TV, and PC are connected to the home network, and the HDD, network compatible TV, and PC have general functions. Description is omitted, and the configuration of the content providing apparatus 10 will be described.

(Configuration of content providing apparatus 10)
The content providing apparatus 10 includes an internal network communication unit 11, an external network communication unit 12, a storage unit 13, and a control unit 14. The internal network communication unit 11 controls communication regarding various information exchanged between the HDD in the home network, the network compatible TV, and the PC. Specifically, the internal network communication unit 11 receives a content request from an HDD, network compatible TV, or PC connected by DLNA, or transmits the content received from the content server device 30 to the HDD, network compatible TV, or PC. To do. For example, as shown in FIG. 6, when “online” is selected by the user from the content list output to the network compatible TV, a content request is transmitted from the network compatible TV, and the internal network communication unit 11 Receive a content request. FIG. 6 is a diagram showing an output example of the content list output to the network compatible TV.

  The external network communication unit 12 controls communication related to various types of information exchanged with the authentication server device 20 and the content server device 30 connected to the Internet. Specifically, when the content request is received by the internal network communication unit 11, the external network communication unit 12 transmits a session information request to the authentication server device 20 or receives an authentication permission response from the authentication server device 20. The content request is transmitted to the content server device 30.

  The storage unit 13 stores data and programs necessary for various processes by the control unit 14, and stores address information for performing communication. For example, the storage unit 13 stores address information for communicating with the authentication server device 20 and the content server device 30, receives content provided (transmitted) from the content server device 30, and an internal network communication unit. 11 temporarily stores the content request received.

  The control unit 14 has an internal memory for storing a control program such as an OS (Operating System), a program that defines various processing procedures, and required data, and is particularly closely related to the present invention. The session information request transmission unit 15, the authentication content generation unit 16, the authentication result inquiry unit 17, and the content transmission unit 18 are provided to execute various processes.

  When receiving a content request for viewing content from a network-compatible TV, the session information request transmitting unit 15 sends a session information request for requesting session information used for user authentication accompanying viewing of the content to the authentication server. Transmit to device 20. Specifically, when a content request for requesting viewing of content from a network-compatible TV is received by the internal network communication unit 11, the session information request transmitting unit 15 uses a session used for user authentication accompanying viewing of the content. A session information request for requesting information is transmitted to the authentication server device 20. For example, as shown in FIG. 6, the network compatible TV for which “online” is selected by the user from the content screen output to the monitor transmits a content request for requesting a content list to the content providing apparatus 10, The session information request transmitting unit 15 of the content providing apparatus 10 that has received the request transmits a session information request for requesting session information used for user authentication accompanying viewing of the content to the authentication server apparatus 20. The content request to be received may be received not only for the content list but also for each content such as music and movies. The session information request transmission unit 15 corresponds to “session information request transmission unit” recited in the claims.

  When the authentication content generation unit 16 receives session information issued by the authentication server device 20, the authentication content generation unit 16 generates authentication content formed as content that can be viewed on the network compatible TV. Send to. Specifically, when receiving the session information “123456789” issued by the authentication server device 20, the authentication content generation unit 16 is formed as content that can be viewed on the network compatible TV. QR code (for example, a QR code as shown in FIG. 7) is generated and transmitted to the network compatible TV. Although the case where the QR code is generated as the authentication content has been described here, the session information may be output as it is, or may be generated as content such as moving image content or audio content. FIG. 7 is a diagram illustrating an example of a QR code generated as authentication content. The authentication content generation unit 16 corresponds to “authentication content generation means” recited in the claims.

  The authentication result inquiry unit 17 sends an authentication result inquiry request for inquiring an authentication result indicating whether or not the user is a valid user after the authentication content is transmitted to the network compatible TV by the authentication content generation unit 16. The session information is transmitted to the authentication server device 20. As a specific example, the authentication result inquiry unit 17 indicates whether or not the user is a valid user after the authentication content is transmitted to the network compatible TV by the authentication content generation unit 16. The session information “123456789” is transmitted to the authentication server device 20 together with the authentication result inquiry request for inquiring the result. That is, whether or not the user A is a valid user by inquiring whether or not the mobile phone owned by the user A is a mobile phone owned by a valid user stored in the authentication server device 20. Inquire whether or not. The authentication result inquiry unit 17 corresponds to “authentication result inquiry means” described in the claims.

  The content transmission unit 18 transmits the content received from the content server device 30 to the network compatible TV. Specifically, when the user authentication unit 28 of the authentication server device 20 described later authenticates that the network compatible TV is an authorized user and receives content from the content server device, the content transmission unit 18 The received content is transmitted to the network compatible TV that is permitted to perform user authentication. On the other hand, when the authentication is rejected and a message indicating that the authentication is rejected, the message is transmitted to the network compatible TV.

(Configuration of authentication server device 20)
Next, the configuration of the authentication server device 20 will be described. The authentication server device 20 includes a communication control I / F unit 21, a storage unit 22, and a control unit 25. The communication control I / F unit 21 controls communication related to various types of information exchanged with the content providing apparatus 10 and the content server apparatus 30. Specifically, the communication control I / F unit 21 receives a session information request or an inquiry about an authentication result from the content providing apparatus 10 via the Internet, or receives an authentication request transmitted from a mobile phone.

  The storage unit 22 stores data and programs necessary for various processes performed by the control unit 25, and includes a user authentication information DB 23 and a session information DB 24 that are particularly closely related to the present invention. The user authentication information DB 23 is stored in a mobile phone owned by a user of the home network and stores user authentication information used for authentication of the user. Specifically, as shown in FIG. 3, the user authentication information DB 23 includes “a“ user name ”indicating a user, an“ individual identification number indicating a personal identification number of a mobile phone used by the user ”. "" Is stored as "User A, 00-11-FF". The user authentication information DB 23 corresponds to “user authentication information storage unit” recited in the claims. FIG. 3 is a diagram illustrating an example of information stored in the user authentication information DB.

  The session information DB 24 stores session information and user authentication information in association with each other. For example, as shown in FIG. 4, the acquired individual identification number “00-11-FF” and session information “123456789” are stored in association with each other. In the example described above, when a session information request is received from the content providing apparatus 10, session information is issued by a session information temporary issuing unit 26 described later, and the session information is stored in the session information DB 24. When an authentication request including session information is received from the mobile phone together with the user authentication information, the session information is stored in the session information DB 24, and the user authentication information is stored in the user authentication information DB 23. Only occasionally, user authentication information is acquired from the user authentication information DB 23 by the session information regular issuing unit 27 described later, and stored in the session information DB 24 in association with the session information. The session information DB 24 corresponds to “session information storage unit” recited in the claims. FIG. 4 is a diagram illustrating an example of information stored in the session information DB.

  The control unit 25 has a control program such as an OS (Operating System), a program defining various processing procedures, and an internal memory for storing necessary data, and particularly as closely related to the present invention, A session information temporary issuing unit 26, a session information regular issuing unit 27, and a user authentication unit 28 are provided, and various processes are executed by these units.

  When a session information request is received from the content providing device 10, the session information temporary issuing unit 26 issues session information, transmits it to the content providing device 10, and stores it in the session information DB 24. Specifically, when receiving a session information request from the content providing apparatus 10, the session information temporary issuing unit 26 issues session information “123456789” and transmits it to the content providing apparatus 10. Information “123456789” is stored in the session information DB 24. Here, user authentication information (for example, an identification number) is not stored. The session information temporary issuing unit 26 corresponds to “session information temporary issuing means” described in the claims.

  When the session information regular issuing unit 27 receives the authentication request including the session information from the mobile phone together with the user authentication information, the session information is stored in the session information DB 24, and the user authentication information is the user authentication information. Only when stored in the DB 23, user authentication information is acquired from the user authentication information DB 23 and stored in the session information DB 24 in association with the session information. Specifically, in the above example, when the session information regular issuing unit 27 receives the authentication request including the session information “123456789” and the individual identification number “00-11-FF” from the mobile phone, Only when the information “123456789” is stored in the session information DB 24 and the user authentication information “00-11-FF” is stored in the user authentication information DB 23, the user authentication information “00-11-FF” is stored. Is acquired from the user authentication information DB 23 and stored in the session information DB 24 in association with the session information “123456789”. That is, when the session information stored in the session information DB 24 is received from the mobile phone stored in the user authentication information DB 23, the session information regular issuing unit 27 determines that the user who transmitted the session information is a legitimate user. Is temporarily assumed (user candidate), the user authentication information and the session information are associated with each other and stored in the session information DB 24. The session information regular issuing unit 27 corresponds to “session information regular issuing means” recited in the claims.

  When the user authentication unit 28 receives the session information together with the authentication result inquiry request from the content providing apparatus 10, the user authentication unit 28 determines whether or not the session information and the user authentication information are associated with each other and stored in the session information DB 24. It judges and authenticates whether a user is a legitimate user. More specifically, when “00-11-FF, 12345789” is stored as “user authentication information (individual identification number), session information” in the session information DB 24, an authentication result inquiry is made from the content providing apparatus 10. When the session information “123456789” is received together with the request, the user authentication unit 28 stores the received session information “123456789” and user authentication information “00-11-FF” in association with the session information DB 24. Therefore, the user A is authenticated as a valid user. In other words, the user authentication unit 28 sets the session information “123456789” and the user authentication information “00-11-FF” in association with each other in the session information DB 24, so that the user authentication unit 28 first determines the user candidate. The user is authenticated as a legitimate user, and an authentication permission response is transmitted to the content providing apparatus 10 as the authentication result.

  On the other hand, when the received session information “123456789” and user authentication information “00-11-FF” are not stored in association with the session information DB 24, the user authentication unit 28 uses the user information as a user candidate. Without authenticating the user A as a legitimate user, an authentication or unauthenticated response is transmitted. The user authentication unit 28 corresponds to “user authentication means” described in the claims.

(Configuration of Content Server Device 30)
Next, the configuration of the content server device 30 will be described. The content server device 30 includes a communication control I / F unit 31, a storage unit 32, and a control unit 34. The communication control I / F unit 31 controls communication related to various information exchanged with the content providing apparatus 10 and the authentication server apparatus 20. Specifically, the communication control I / F unit 31 receives a content request from the content providing apparatus 10 via the Internet or transmits content to the content providing apparatus 10.

  The storage unit 32 stores data and programs necessary for various processes performed by the control unit 34, and includes a content DB 33 particularly closely related to the present invention. As a specific example, the content DB 33 stores “VOD, music, comics” and the like as a content list provided by the content server device 30, as shown in FIG. FIG. 5 is a diagram illustrating an example of information stored in the content DB.

  The control unit 34 has an internal memory for storing a control program such as an OS (Operating System), a program that defines various processing procedures, and necessary data, and is particularly closely related to the present invention. The content transmission unit 35 is provided, and various processes are executed by these.

  The content transmission unit 35 transmits content to the network compatible TV. Specifically, when the content request transmitted from the content providing apparatus 10 that has received the authentication permission response from the authentication server apparatus 20 is received, the content transmitting unit 35 transmits the content corresponding to the content request to the content providing apparatus 10. For example, in the case of a content request that requests acquisition of a content list, the content transmission unit 35 transmits a content list “VOD, music, cartoon” stored in the content DB 33 and requests acquisition of “music” content. In the case of a content request, the content transmission unit 35 acquires and transmits “music” content from the content DB 33.

  In the above description, the case where the content providing apparatus 10 includes the session information request transmission unit 15, the authentication content generation unit 16, and the authentication result inquiry unit 17 has been described. However, the present invention is not limited thereto. Alternatively, the content server device 30 may include the session information request transmission unit 15, the authentication content generation unit 16, and the authentication result inquiry unit 17, and both the content providing device 10 and the content server device 30. May have.

[Processing by communication system]
Next, processing by the communication system will be described with reference to FIG. FIG. 8 is a sequence diagram illustrating the flow of processing by the communication system according to the first embodiment.

(Processing flow by communication system)
As illustrated in FIG. 8, the network-compatible TV that has received an instruction operation for requesting content transmits a content request to the content providing apparatus 10 (step S801). Then, the session information request transmitting unit 15 of the content providing apparatus 10 that has received the content request transmits a session information request for requesting session information used for user authentication accompanying viewing of the content to the authentication server apparatus 20 (Step S1). S802).

  As a specific example, the network compatible TV that has received the selection of “online” requesting a content list by the user (see FIG. 6) transmits a content request to the content providing apparatus 10. Then, the session information request transmission unit 15 of the content providing apparatus 10 that has received the content request transmits a session information request for requesting session information used for user authentication accompanying viewing of the content to the authentication server apparatus 20.

  Subsequently, the session information temporary issuing unit 26 of the authentication server device 20 that has received the session information request issues session information to the content providing device 10 and also issues session information to the content providing device 10. At the same time, it is stored in the session information DB 24 (steps S803 to S804).

  Specifically, the session information temporary issuing unit 26 of the authentication server device 20 that has received the session information request issues session information “123456789” and transmits it to the content providing device 10 and stores it in the session information DB 24. To do.

  Thereafter, when the session information issued by the authentication server device 20 is received, the authentication content generation unit 16 of the content providing device 10 forms the authentication content formed as content that can be viewed on the network-compatible TV. Is generated and transmitted to the network compatible TV (steps S805 to S806). To give a specific example, when the session information “123456789” issued by the authentication server device 20 is received, the authentication content generation unit 16 of the content providing device 10 transmits the session information “123456789” to the network compatible TV. A QR code formed as a viewable content is generated and transmitted to the network compatible TV.

  The network compatible TV that has received the authentication content outputs the received authentication content to a monitor or the like, and the mobile phone receives an authentication request when the session information output to the authentication content is input by the user. Is transmitted to the authentication server device 20 (steps S807 to S808). Specifically, in the above example, the network-compatible TV that has received the QR code outputs the received authentication content to a monitor or the like, and when the mobile phone reads the QR code, the authentication request and the individual identification number “ 00-11-FF ”is transmitted to the authentication server device 20.

  Subsequently, when the session information regular issuing unit 27 of the authentication server device 20 receives the authentication request including the session information from the mobile phone together with the user authentication information, the session information is stored in the session information DB 24 and is used. Only when the user authentication information is stored in the user authentication information DB 23, the user authentication information is acquired from the user authentication information DB 23, stored in the session information DB 24 in association with the session information, and the stored result. Is transmitted to the mobile phone (steps S809 to S810).

  Specifically, in the above example, when an authentication request including the session information “123456789” output to the network compatible TV is received together with the user authentication information “00-11-FF”, the session information regular issue unit 27, since the session information “123456789” is stored in the session information DB 24 and the user authentication information “00-11-FF” is stored in the user authentication information DB 23, it is owned by a legitimate user. The user authentication information “00-11-FF” is acquired from the user authentication information DB 23, the session information “123456789” and the user authentication information “00-11-FF” are acquired. Are stored in the session information DB 24 and the result is transmitted to the mobile phone. Note that the authentication result transmission process of step S810 is not an essential process.

  Thereafter, the authentication result inquiry unit 17 of the content providing apparatus 10 transmits session information to the authentication server apparatus 20 together with an authentication result inquiry request for inquiring an authentication result indicating whether or not the user is a valid user (step). S811), the user authentication unit 28 of the authentication server device 20 determines whether the session information and the user authentication information are associated with each other and stored in the session information DB 24, and the user is a valid user. An authentication result for authenticating whether there is a response is returned (step S812).

  Specifically, in the above example, the authentication server device 20 that has received the session information “123456789” together with the authentication result inquiry request from the content providing device 10 receives the session information “123456789” and the user authentication information “00-11-”. “FF” is stored in the session information DB 24 in association with it, and authentication permission is returned as an authentication result.

  The content providing apparatus 10 that has received the authentication result transmits a content request to the content server apparatus 30, the content server apparatus 30 transmits the content, and the content transmitting unit 18 of the content providing apparatus 10 that has received the content The content is transmitted to the network compatible TV (steps S813 to S815). Specifically, in the above example, the content providing apparatus 10 that has received the authentication permission transmits a content request for requesting the content list received in step S801 to the content server apparatus 30. The content server device 30 that has received the content request transmits the content list “VOD, music, cartoon” stored in the content DB 33 to the content providing device 10. Then, the content transmitting unit 18 of the content providing apparatus 10 transmits the received content list to the network compatible TV.

(Processing flow by content providing device)
The flow of processing by the content providing apparatus will be described with reference to FIG. FIG. 9 is a flowchart illustrating a flow of processing performed by the content providing apparatus according to the first embodiment.

  As shown in FIG. 9, when the content request is received (Yes at Step 901), the content providing apparatus 10 determines whether or not the session is an existing session (Step S902).

  If the session is not an existing session (Yes at Step S902), the session information request transmission unit 15 transmits a session information request for requesting session information used for user authentication accompanying viewing of the content to the authentication server device 20 ( Step S903).

  Thereafter, when the session information is received from the authentication server device 20 (Yes in step S904), the authentication content generation unit 16 receives the session information issued by the authentication server device 20 and transmits the session information to the network-compatible TV. An authentication content formed as a viewable content is generated and transmitted to the network compatible TV (step S905).

  Then, the authentication result inquiry unit 17 inquires of the authentication server device 20 about the authentication result according to a predetermined condition (for example, after a predetermined time has elapsed or after receiving the authentication end notification) (step S906). Subsequently, when receiving the authentication result (Yes at Step S907), the content providing apparatus 10 determines whether or not the received authentication result is authentication permission (Step S908).

  If the received authentication result is authentication permission (Yes at Step S908), the content providing apparatus 10 transmits a content request to the content server apparatus 30 (Step S909), and receives the content (Yes at Step S910). The content is transmitted to the network compatible TV (step S911). On the other hand, when the received authentication result is not authentication permission (No at Step S908), the content providing apparatus 10 ends the process.

  Returning to step S902, if it is an existing session (No in step S902), a content request transmission process, which is the process of step S909, is executed. Subsequent processing is the same as the above-described example.

(Processing flow by the authentication server device)
The flow of processing by the authentication server device will be described with reference to FIG. FIG. 10 is a flowchart illustrating a process flow of the authentication server apparatus according to the first embodiment.

  As shown in FIG. 10, when a session information request is received from the content providing apparatus 10 (Yes in step S1001), the session information temporary issuing unit 26 issues session information and transmits it to the content providing apparatus 10, and the session information DB 24 (Step S1002).

  Thereafter, when the session information regular issuing unit 27 receives an authentication request including the session information output to the content providing apparatus 10 from the mobile phone together with the user authentication information (Yes in step S1003), the session information is the session information. Only when the user authentication information is stored in the DB 24 and the user authentication information is stored in the user authentication information DB 23, the user authentication information is acquired from the user authentication information DB 23 and associated with the session information in the session information DB 24. The authentication process is performed by storing in (step S1004). Here, the user authentication unit 28 may transmit the authentication result to the mobile phone.

  When an authentication result inquiry is received from the content providing apparatus 10 (Yes at Step S1005), when the authentication result is authentication permission (Yes at Step S1006), the user authentication unit 28 sends an authentication permission response to the content providing apparatus 10 (Step S1007), if the authentication result is an authentication rejection (No at Step S1006), the user authentication unit 28 transmits an authentication rejection or non-authentication to the content providing apparatus 10 (Step S1008).

(Processing flow by network compatible TV)
The flow of processing by the network compatible TV will be described with reference to FIG. FIG. 11 is a flowchart illustrating a process flow of the network compatible TV according to the first embodiment.

  As illustrated in FIG. 11, when the user accepts a selection of “online” from the content list (Yes at Step S1101), the network-compatible TV transmits a content request to the content providing apparatus 10 (Step S1102). Note that “online” is merely an example, and does not limit the display of content such as “Internet” or “music (Internet)”.

  When the authentication content is received (Yes at step S1103), the network compatible TV outputs the received authentication content to a monitor or the like (step S1104).

  Thereafter, when the authentication is permitted by the authentication server device 20 and the content-compatible TV receives content from the content server device 30 via the content providing device 10 (Yes in step S1105), the network-compatible TV outputs the received content to a monitor or the like so that the received content can be viewed. (Step S1106).

[Effects of Example 1]
As described above, according to the communication system according to the first embodiment, when the content providing apparatus 10 receives a content request for viewing content from the network compatible TV, the content providing device 10 is used for user authentication associated with viewing the content. When the session information request for requesting the session information is transmitted to the authentication server device 20 and the session information issued by the authentication server device 20 is received, the session information is formed as content that can be viewed on the network compatible TV. Authentication result inquiry request for inquiring an authentication result indicating whether or not the user is a valid user after the authentication content is generated and transmitted to the network compatible TV, and the authentication content is transmitted to the network compatible TV. At the same time, the session information is transmitted to the authentication server device 20, The certificate server device 20 associates the user authentication information uniquely identifying the user with the user authentication information stored in the mobile phone owned by the user of the home network and used for authentication of the user. When the user authentication information DB to be stored and the session information request are received from the content providing device 10, the session information is issued and transmitted to the content providing device 10, and stored in the predetermined session information DB, and the user terminal When the authentication request including the session information is received together with the user authentication information, only when the session information is stored in the session information DB and the user authentication information is stored in the user authentication information DB. User authentication information is acquired from the user authentication information DB, stored in the session information DB in association with the session information, When the session information is received together with the authentication result inquiry request from the content providing apparatus 10, it is determined whether or not the session information and the user authentication information are associated with each other and stored in the session information DB. Since it authenticates whether or not the user is a legitimate user, it is possible to perform user authentication with high convenience when using the content in the information home appliance.

  For example, since an authentication screen can be output to a network compatible TV as a video or still image using DLNA, there is no need to separately authenticate using an Internet browser such as a PC, resulting in highly convenient user authentication. Is possible. Further, since authentication is performed using a personal terminal device such as a mobile phone, strong authentication can be performed.

(Processing flow by communication system (separate sequence))
By the way, in the processing flow (see FIG. 8) described above, the case where the content providing apparatus 10 transmits a session information request to the authentication server apparatus 20 has been described, but the present invention is not limited to this. The content server device 30 may transmit a session information request.

  First, before explaining the processing flow with reference to FIG. 12, the points different from FIG. 8 will be briefly described. The content server device 30 generates a session information request to the authentication server device 20 and is generated. The received session information is received, and the received session information is transmitted to the content providing apparatus 10. Thereafter, as in FIG. 8, authentication processing is performed by the authentication server device 20. 8, the content server device 30 inquires of the authentication server device 20 about the authentication result, receives the authentication result, and transmits the received authentication result to the content providing device 10. Thereafter, similarly to FIG. 8, the content server device 30 that has received the content request from the content providing device 10 transmits the content, and the content is received and viewed by the network-compatible TV.

  Next, a case where the content server device 30 transmits a session information request will be described with reference to FIG. FIG. 12 is a sequence diagram showing a flow of processing by the communication system. In the following, a flow of processing different from that in FIG. 8 will be described, and the processing flow similar to that in FIG. 8 will be omitted.

  As illustrated in FIG. 12, the network-compatible TV that has received the instruction operation for requesting the content transmits a content request to the content providing apparatus 10 (step S1201).

  Thereafter, unlike FIG. 8, the content providing apparatus 10 that has received the content request transmits a session information request for requesting session information used for user authentication accompanying viewing of the content to the content server apparatus 30 (steps). S1202).

  Then, the content server device 30 transmits the received session information request to the authentication server device 20 (step S1203). Subsequently, the authentication server device 20 that has received the session information request issues and transmits the session information to the content providing device 10 and stores it in the session information DB 24 (steps S1204 to S1205).

  Subsequently, the content server device 30 that has received the session information transmits the received session information to the content providing device 10 (step S1206).

  Similarly to FIG. 8, when the session information issued by the authentication server device 20 is received, the authentication content generation unit 16 of the content providing device 10 sets the session information as content that can be viewed on the network compatible TV. The generated authentication content is generated and transmitted to the network compatible TV, and the network compatible TV that has received the authentication content outputs the received authentication content to a monitor or the like, and the mobile phone receives the authentication content by the user. When the session information output to is input, an authentication request is transmitted to the authentication server device 20 (steps S1208 to S1212).

  Thereafter, the content providing apparatus 10 transmits an inquiry about the authentication result to the content server apparatus 30, and the content server apparatus 30 that has received the inquiry performs authentication in the same manner as in FIG. 8 and sends the authentication result to the authentication server apparatus 20. Transmit (step S1213 to step S1214).

  Subsequently, the authentication server device 20 transmits an authentication result to the content server device 30, and the content server device 30 that has received the authentication result transmits the authentication result to the content providing device 10 (steps S1215 to S1216).

  8, the content providing apparatus 10 that has received the authentication result transmits a content request to the content server apparatus 30, and the content server apparatus 30 transmits the content, and the content providing apparatus 10 that has received the content The content is transmitted to the network compatible TV (steps S1217 to S1219).

  In the first embodiment, the case where the content providing apparatus generates the authentication content has been described. However, the present invention is not limited to this, and the content server apparatus may generate the authentication content. .

  Therefore, in the second embodiment, a case where the content server apparatus generates authentication content will be described with reference to FIG. FIG. 13 is a sequence diagram illustrating the processing flow of the communication system according to the second embodiment. In the second embodiment, the processing procedure by the communication system according to the second embodiment and the effects of the second embodiment will be described in order.

[Flow of Processing by Communication System (Example 2)]
As shown in FIG. 13, the flow of processing from when the content server device receives the session information request and transmits the session information request to the authentication server device (steps S1301 to S1305) is the same as step S1201 described in FIG. Since the processing is the same as that up to step S1205, detailed description thereof is omitted here.

  Thereafter, the content server device that has received the session information generates authentication content formed as content that can be viewed on the network-compatible TV, and transmits the content to the content providing device (steps S1306 and S1307).

  Subsequently, the content providing apparatus that has received the authentication content transmits the received authentication content to the network compatible TV, the network compatible TV outputs the received authentication content to a monitor or the like, and the mobile phone is for authentication. When the session information output to the content is input by the user, an authentication request is transmitted to the authentication server device (steps S1308 to S1310).

  When the authentication server apparatus receives an authentication request including session information output from the mobile phone to the network compatible TV together with the user authentication information, the session information is stored in the session information DB, and the user authentication is performed. Only when the information is stored in the user authentication information DB, the user authentication information is acquired from the user authentication information DB, stored in the session information DB in association with the session information, and the result is stored in the mobile phone. (Steps S1311 to S1312).

  Thereafter, the content providing apparatus transmits a content request to the content server apparatus (step S1313). Note that the processing in step S1313 can be omitted when the session is continued.

  Subsequently, the content server device transmits the session information to the authentication server device together with an authentication result inquiry request for inquiring an authentication result indicating whether or not the user is a valid user, and receives authentication permission as the authentication result. Then, the content is transmitted to the content providing apparatus (steps S1314 to S1316). Thereafter, the content providing apparatus transmits the received content to the network compatible TV (step S1317). Note that when the authentication rejection is received as the authentication result, the content server device does not transmit the content to the content providing device.

(Processing flow by content server apparatus (second embodiment))
Next, the flow of processing by the content server device, which is a processing flow different from that of the first embodiment, will be described with reference to FIG. FIG. 14 is a flowchart illustrating a process flow of the content server apparatus according to the second embodiment.

  As shown in FIG. 14, when a content request is received from the content providing apparatus (Yes at step S1401), the content server apparatus transmits a session information request to the authentication server apparatus (step S1402).

  Thereafter, when session information is received from the authentication server device (Yes at step S1403), the content server device generates authentication content formed as content that can be viewed on the network-compatible TV, and transmits the content to the content providing device. (Step S1404).

  Then, the content server apparatus transmits session information to the authentication server apparatus together with an authentication result inquiry request for inquiring about an authentication result (for example, after a predetermined time elapses or after receiving an authentication end notification) under a predetermined condition (step S1405). Subsequently, when the authentication result is received (Yes at Step S1406), the content server device determines whether or not the received authentication result is authentication permission (Step S1407).

  If the authentication is permitted (Yes at Step S1407), the content server device transmits the content to the content providing device (Step S1408). On the other hand, if the authentication is not permitted (No at step S1407), the content server device ends the process.

[Effects of Example 2]
Thus, according to the communication system according to the second embodiment, it is possible to reduce the processing load of the content providing apparatus. For example, when a content request is transmitted from a plurality of terminal devices in a home network to the content providing device, the content providing device receives and outputs the authentication content generated by the content server device. Compared to the case where content is generated and output, the processing load of the content providing apparatus can be reduced.

  In the first and second embodiments described above, the case where the content server device provides content such as VOD has been described. However, the present invention is not limited to this, and the content server device is encrypted. Content may be provided.

  Thus, in the third embodiment, a case where the content server apparatus provides encrypted content will be described with reference to FIGS. 15 to 17. FIG. 15 is a diagram illustrating an example of information stored in the authentication server device according to the third embodiment, FIG. 16 is a sequence diagram illustrating a processing flow of the communication system according to the third embodiment, and FIG. FIG. 10 is a flowchart illustrating a processing flow of the content providing apparatus according to the third embodiment. In the third embodiment, the processing procedure by the communication system according to the third embodiment and the effects of the third embodiment will be described in order.

  By the way, if it demonstrates previously about a different point from Examples 1-2, the structure of a communication system is the same as that of Example 1 and 2, and the structure of each apparatus is also the same. However, in addition to the user authentication information DB and the session information DB, the authentication server device, as shown in FIG. 15, ““ content list provided by the content server device ”and“ decryption key ”for decrypting the content“ “VOD, key A”, “scrambled broadcast, key C” and the like are stored. This information may be stored in the content server device, and the content server device may transmit this key information to the authentication server device.

[Flow of Processing by Communication System (Example 3)]
As shown in FIG. 16, the flow of processing from when the network-compatible TV transmits a content request until the authentication server device transmits the authentication result to the mobile phone (steps S1601 to S1610) is the step described in FIG. Since the process is the same as that in steps S801 to S810, detailed description thereof is omitted here.

  Thereafter, the content providing apparatus transmits the session information to the authentication server apparatus together with the authentication result inquiry request for inquiring about the authentication result (for example, after a predetermined time elapses or after receiving the authentication end notification) under a predetermined condition (step S1611). If the authentication result is authentication permission, the authentication server device transmits the authentication result and a decryption key for decrypting the content to the content providing device (step S1612). When the authentication result is authentication rejection, the authentication server apparatus transmits only the authentication rejection as the authentication result to the content providing apparatus.

  Then, the authentication server device transmits an authentication result to the content server device as necessary in order to notify the opportunity for the content server device to transmit the content (step S1613). Thereafter, the content server device transmits the content to the content providing device (step S1614).

  Subsequently, the content providing apparatus that has received the content performs a decryption process for decrypting the received content with the received decryption key (step S1615). Then, the content providing apparatus transmits the decrypted content to the network compatible TV (step S1616).

(Processing flow by content providing apparatus (Example 3))
Next, the flow of processing by the content providing apparatus, which is a processing flow different from that in the first embodiment, will be described with reference to FIG.

  As shown in FIG. 17, when a content request is received from a network compatible TV (Yes at step S1701), the content providing apparatus determines whether the session is an existing session (step S1702).

  If the session is not an existing session (Yes at step S1702), the content providing apparatus transmits a session information request for requesting session information used for user authentication accompanying viewing of the content to the authentication server apparatus (step S1703).

  After that, when the content providing apparatus receives the session information issued by the authentication server apparatus (Yes in step S1704), the content providing apparatus generates authentication content formed as content that can be viewed on the network-compatible TV, The data is transmitted to the network compatible TV (step S1705).

  Then, the content providing apparatus transmits session information to the authentication server apparatus together with an authentication result inquiry request for inquiring an authentication result according to a predetermined condition (for example, after a predetermined time has elapsed or after receiving an authentication end notification) (step S1706). . Subsequently, when the authentication result and the decryption key are received (Yes at step S1707), the content providing apparatus determines whether or not the received authentication result is authentication permission (step S1708).

  If the authentication is permitted (Yes at Step S1708), the content providing apparatus transmits a content request to the content server apparatus (Step S1709) and receives the content (Step S1710). Then, the content providing apparatus decrypts the received content with the received decryption key, and transmits the decrypted content to the network compatible TV (step S1711). On the other hand, if the authentication is not permitted (No at step S1708), the content providing apparatus ends the process.

  Returning to step S1702, if it is an existing session (No in step S1702), a content request transmission process, which is the process of step S1709, is executed. Subsequent processing is the same as the above-described example.

[Effects of Example 3]
As described above, according to the communication system according to the third embodiment, the content server device transmits the encrypted content to the content providing device, and the user is authenticated as a valid user. In this case, since the decryption key for decrypting the content is transmitted to the content providing apparatus, only the contractor can view the content.

  For example, as in scrambled broadcasting, the content server device (for example, a broadcaster) transmits the broadcast with encryption that disturbs the radio wave so that only the contracting subscriber can receive the fee, and only the contractor has the decryption key. It is possible to receive and watch the broadcast. Along with this, it is also possible to charge.

  In the first to third embodiments, the case where content is provided by authenticating the content providing device in the home network has been described. However, the present invention is not limited to this, and each device in the home network is described. You may make it authenticate every and provide a content.

  Therefore, in the fourth embodiment, a case where content is provided by authenticating each device of the home network will be described with reference to FIGS. 18 and 19 are diagrams illustrating an overall configuration of a communication system according to the fourth embodiment, and FIG. 20 is a diagram illustrating an example of information stored in the session information DB.

  As shown in FIG. 18, as in the first embodiment (see FIG. 1), this communication system includes a home network, an authentication server device, and a content server device that are communicably connected via the Internet. Composed. The home network is configured by connecting a content providing device, a network-compatible TV, a PC, and an HDD so that they can communicate with each other using DLNA. The mobile phone stores “00-11-FF” as an individual identification number and is held by the user A. In addition, the content server device stores “VOD, music, comics” and the like as a content list to be provided.

  Similarly to the first embodiment, the authentication server device stores the user authentication information stored in the user terminal owned by the user of the home network and used for user authentication in the user authentication information DB. "A, 00-11-FF".

  The difference from the first embodiment is that an identification number (ID) is stored in each device connected to the home network. Specifically, “ID = 00” is stored in the content providing apparatus, “ID = 01” is stored in the network compatible TV, “ID = 02” is stored in the PC, and “ID = 03” is stored in the HDD. Further, as shown in FIG. 20, the session information DB of the authentication server device has user authentication information, session information, and an identification number as “individual identification number, session information, ID” “00-11-FF, 12345789, 01”. And so on.

  Under such a configuration, the network compatible TV transmits the identification number (ID) uniquely assigned to the home terminal device connected to the home network to the content providing device together with the content request ((1 in FIG. 18). )reference). To give a specific example, the network compatible TV transmits the stored identification number (ID = 01) to the content providing apparatus together with the content request. The identification number (ID) uniquely assigned to the home terminal device may be a unique number held in the device in advance, such as a product manufacturing number of the home terminal device. Further, based on the manufacturing number, it may be managed by linking with another ID assigned in the content providing apparatus.

  Then, when the content providing apparatus receives the content request and the identification number from the network compatible TV, the content providing apparatus transmits the session information request and the identification number to the authentication server apparatus (see (2) in FIG. 18). Specifically, in the above example, when the content providing apparatus receives the content request and the identification number (ID = 01) from the network compatible TV, the content providing apparatus sends the session information request and the identification number (ID = 01) Sent to the authentication server device.

  Subsequently, when the authentication server device receives the session information request and the identification number from the content providing device, the session information associated with the individual identification number of the mobile phone that stores the identification number is stored in the session information DB. If the session information associated with the individual identification number is not stored in the session information DB, the session information is issued and the content providing apparatus transmits the authentication result indicating the authentication permission to the content providing apparatus. The session information and the identification number are associated with each other and stored in the session information DB (see (3) in FIG. 18).

  Specifically, in the above example, since the authentication server device does not store the session information associated with the identification number (ID = 01) transmitted from the network compatible TV in the session information DB, the session information ( Is sent to the content providing apparatus and the session information (123456789) is associated with the identification number (ID = 01) and stored in the session information DB.

  Thereafter, the authentication server device generates session information and transmits it to the content providing device, the content providing device generates authentication content and transmits it to the network compatible TV, and is used by the authentication server device that receives the authentication request from the mobile phone. Since the user authentication is performed and the content server apparatus provides content to the network-compatible TV according to the authentication result ((4) to (13) in FIG. 18), the process flow is the same as in the first embodiment. Then, the detailed explanation is omitted.

  In this way, when the content request is transmitted again from the network compatible TV provided with the content, the authentication server device stores the session information request and the identification number received from the content providing device in the session information DB. Thus, an authentication result indicating authentication permission is transmitted to the content providing apparatus, the content providing apparatus transmits a content request to the content server apparatus, and the content server apparatus transmits the requested content to the content providing apparatus. .

  Specifically, using FIG. 19, the network-compatible TV once authenticated is permitted to transmit the content request and the identification number (ID = 01) again to the content providing apparatus (see (1) in FIG. 19). Subsequently, the content providing apparatus transmits the session information request and the identification number (ID = 01) to the authentication server apparatus (see (2) in FIG. 19).

  When the authentication server device receives the session information request and the identification number from the content providing device, the session information associated with the individual identification number of the mobile phone that stores the identification number is stored in the session information DB. Therefore, an authentication result indicating authentication permission is transmitted to the content providing apparatus (see (3) in FIG. 19).

  The content providing apparatus that has received the authentication result transmits a content request for requesting the content to the content server apparatus (see (4) in FIG. 19). And the content server apparatus which received the content request | requirement transmits the said content to a content provision apparatus (refer (5) of FIG. 19). Thereafter, the content providing apparatus that has received the content transmits the received content to the network-compatible TV that is the request source (see (6) in FIG. 19). In this way, the network-compatible TV once authenticated outputs the requested content (see (7) in FIG. 19).

  On the other hand, when a PC (ID = 02) or the like that has never been authenticated transmits a content request, as shown in FIG. 18, when authentication processing is performed by the authentication server device and authentication is determined to be permitted, Content can be received.

  As described above, according to the communication system according to the fourth embodiment, the network compatible TV transmits the identification number uniquely assigned to the home terminal device connected to the home network together with the content request, and the content is transmitted from the network compatible TV. When the request and the identification number are received, the session information request and the identification number are transmitted to the authentication server device, and the session information, the user authentication information, and the identification number are stored. When the session information request and the identification number are received and the session information associated with the identification number is stored in the session information DB, an authentication result indicating authentication permission is transmitted to the content server device, and the identification number is If the associated session information is not stored in the session information DB, the session information The information is issued and transmitted to the content server device, and the session information and the identification number are associated with each other and stored in the session information DB, and an authentication request including the session information is received from the user terminal together with the user authentication information and the identification number. When received, the session authentication information and the identification number are stored in the session information DB, and the user authentication information is stored in the user authentication information DB only when the user authentication information is stored in the user authentication information DB. And is stored in the session information DB in association with the session information, and when the session information is received together with the authentication result inquiry request from the content server device, the session information, the user authentication information, and the identification number are associated with each other. Is stored in the session information DB, and the user is a valid user. Since whether the authentication for each home terminal apparatus (information appliance) which is connected to the home network, the results can be authenticated, it is possible to perform a more robust authentication.

  For example, first, a network compatible TV connected to a home network transmits a content request and is authenticated to provide the content. Next, when the HDD transmits a content request, it is determined that the HDD is already authenticated. Although content may be provided, the content request is first received and authenticated from the network compatible TV of “01” with the network compatible TV identification number “01” and the HDD identification number “02”. Is provided, it is not determined that the HDD of “02” is authenticated even if the content request is transmitted next, and the HDD needs to be authenticated in the same manner as the network compatible TV. It is possible to perform stronger authentication.

  In the fourth embodiment, the case where the authentication server device stores the identification number has been described. However, the present invention is not limited to this, and the content providing device may store the identification number. . Specifically, the content providing device stores the home terminal device that transmitted the content request, and when authenticated by the authentication server device, the content is provided only to the home terminal device that transmitted the content request. .

  In this way, the content providing device associates the identification number uniquely assigned to the home terminal device that transmitted the content request with the session information issued to the home terminal device that transmitted the content request. When a content associated with the session information is transmitted from the content server device, an identification number stored in association with the session information is acquired, and the in-home terminal device to which the identification number is allocated Since the content is transmitted only to the home network, the content can be transmitted only to the authenticated home terminal device (information home appliance) connected to the home network. As a result, stronger authentication can be performed.

  Further, in the first embodiment described above, the case where the user is authenticated using the individual identification number and the content is provided has been described. However, the present invention is not limited to this, and the individual identification number and the user's You may make it authenticate using age etc.

  Therefore, in the fifth embodiment, a case where authentication is performed using the individual identification number and the age of the user and content is provided will be described with reference to FIGS. FIG. 21 is a diagram illustrating an overall configuration of the communication system according to the fifth embodiment, and FIG. 22 is a diagram illustrating a configuration example of information stored in the content DB of the content server apparatus according to the fifth embodiment. 23 is a diagram illustrating a configuration example of information stored in the user authentication information DB of the authentication server device according to the fifth embodiment, and FIG. 24 is stored in the session information DB of the authentication server device according to the fifth embodiment. It is a figure which shows the structural example of the information.

  As shown in FIG. 21, as in the first embodiment, this communication system is configured by connecting a home network, an authentication server device, and a content server device so that they can communicate with each other via the Internet. The home network is configured by connecting a content providing device, a network-compatible TV, a PC, and an HDD so that they can communicate with each other using DLNA. The mobile phone stores “00-11-FF” as an individual identification number and is held by the user A.

  As a difference from the first embodiment, as shown in FIG. 22, the content server apparatus sets the provided content as “content list, permitted age” as “VOD, 25 years old or older”, “music, 18 years old or older”, “manga”. “8 years old or older” and the like are stored in the content DB.

  Further, as shown in FIG. 23, the user authentication information DB of the authentication server device includes “user A, 00-11-FF, 50” and “user C” as “user name, individual identification number, age”. , 12-FF-00, 17 "and the like are stored.

  In such a configuration, the network compatible TV transmits a content request for requesting viewing of music content to the content providing apparatus by an instruction operation by the user (see (1) in FIG. 21). As a specific example, the network-compatible TV transmits a content request for requesting viewing of music content to the content providing apparatus by an instruction operation by the user.

  Subsequently, the content providing apparatus transmits a session information request including a content request for requesting viewing of the content to the content server apparatus (see (2) in FIG. 21). Then, the content server device transmits the stored content information (for example, music, 18 years old or older) and the session information request to the authentication server device (see (3) in FIG. 21).

  Subsequently, when receiving the session information request and the content information from the content server device, the authentication server device issues the session information and transmits it to the content server device, and associates the session information and the content information with the session information. Store in the DB (see (4) in FIG. 21). Specifically, in the above example, when the authentication server device receives the session information request and the content information from the content server device, the authentication server device issues session information “123456789” and transmits it to the content server device. As shown in FIG. 5, “123456789, music 18 years old or older” and the like are stored in the session information DB. Here, the individual identification number is not stored.

  Upon receiving the session information, the content server device generates authentication content formed as content that can be viewed on the network-compatible TV, and transmits the content to the content providing device (see (5) in FIG. 21). . Subsequently, the content providing apparatus transmits the received authentication content to the network compatible TV (see (6) in FIG. 21). Then, the network compatible TV that has received the authentication content outputs the received authentication content to the monitor, and the mobile phone sends an authentication request including the session information output to the network compatible TV together with the user authentication information to the authentication server. It is transmitted to the device (see (7) and (8) in FIG. 21).

  When the authentication server device receives an authentication request including session information from the mobile phone together with the user authentication information, the session information and the content information are stored in the session information DB, and the user authentication information is used. Only when it is stored in the user authentication information DB, the user authentication information is acquired from the user authentication information DB and stored in the session information DB in association with the session information and the content information ((9 in FIG. 21). )reference). Specifically, in the above example, when the authentication server apparatus receives an authentication request including the session information “123456789” from the mobile phone together with the user authentication information “00-11-FF”, the session information “123456789”. "And the content information are stored in the session information DB and the user authentication information" 00-11-FF "is stored in the user authentication information DB. "FF" is acquired from the user authentication information DB and stored in the session information DB in association with the session information and the content information.

  Thereafter, the content server device transmits an authentication result query to the authentication server device (see (10) in FIG. 21), and the authentication server device transmits the authentication result to the content server device (see (11) in FIG. 21). . Specifically, when the authentication server device receives the session information “123456789” together with the authentication result inquiry request from the content server device, the authentication server device receives the session information “123456789” and the user authentication information “00−”. 11-FF "is stored in the session information DB in association with each other, and the user authentication information" 50 years old "satisfies the predetermined condition" music, 18 years old or older "of the content information. It is determined that the user is a user and authentication permission is transmitted to the content server apparatus.

  Then, the content server device transmits the content to the content providing device according to the authentication result (see (12) in FIG. 21). In the example described above, when the content server device receives the authentication permission, the content server device transmits the content “music” to the content providing device. When the content server device receives the authentication refusal, the content server device sends a message indicating that the authentication is rejected. Send to the provider.

  When the content providing apparatus receives the content, the content providing apparatus transmits the content to the network compatible TV, and the network compatible TV outputs the received content (see (13) and (14) in FIG. 21). On the other hand, when the message indicating that the authentication is rejected is received, the content providing apparatus transmits the message to the network compatible TV.

  Also, for example, a user C who is 17 years old receives a content request (music content) from a network compatible TV, and a mobile phone possessed by the user C (for example, an individual identification number (12-FF-00), age ( 17)))), when the authentication process is performed in the same manner as described above, the permission age of the music content is 18 years old or more and the age of the user C is 17 years old. Authentication is rejected by the authentication server device and the content cannot be viewed.

  As described above, according to the communication system according to the fifth embodiment, when the content server apparatus receives the session information request from the content providing apparatus, the content information related to the content that the network compatible TV desires to view and the session information request Is transmitted to the authentication server device, and when the session information request and the content information are received from the content server device, the session information is issued and transmitted to the content server device, and the session information is associated with the session information. When the authentication request stored in the DB and including the session information is received from the user terminal together with the user authentication information, the session information and the content information are stored in the session information DB, and the user authentication information is the user When stored in the authentication information DB As long as the user authentication information is acquired from the user authentication information DB, stored in the session information DB in association with the session information and the content information, and the session information is received together with the authentication result inquiry request from the content server device Whether or not the session information and the user authentication information are associated with each other and stored in the session information DB, and the user authentication information stored in the user authentication information DB satisfies a predetermined condition of the content information. For example, when age information is stored as user authentication information, it is possible to determine whether or not content can be viewed according to age. Authentication can be performed.

  For example, refuse session information requests from users under 20 years of age, change the content to be provided according to the age of the received user, or only content that can be allowed at the age of the received user It is possible to perform finer authentication, such as providing. Moreover, you may authenticate not only by age but also by sex or occupation.

  Although the embodiments of the present invention have been described so far, the present invention may be implemented in various different forms other than the embodiments described above. Therefore, as shown below, (1) content for authentication, (2) authentication processing, charging, (3) mobile phone, (4) system configuration, etc. To do.

(1) Authentication Content For example, in the first embodiment, the case where a QR code is generated as authentication content has been described. However, the present invention is not limited to this, and may be generated as a moving image or audio content. Good.

  Specifically, when the content providing apparatus or the content server apparatus receives the session information issued by the authentication server apparatus, if the content viewing apparatus can view the moving image content, the content viewing apparatus displays the session information. If the authentication moving image content that is formed as a moving image content that can be viewed by the user is generated and transmitted to the content viewing device, or if the content viewing device can view the audio content, the session information is transmitted to the content viewing device. If the authentication audio content formed as audio content that can be audio-viewed is generated and transmitted to the content viewing device, or the content viewing device outputs the still image content so that it can be viewed, the session information is Authentication still image code formed as still image content Ceiling may be generated and transmitted to the content viewing apparatus. Note that a user terminal (for example, a mobile phone) that has received the authentication audio content reads the session information from the authentication audio content and outputs the session information by audio.

  By doing so, it is possible to perform user authentication that is more convenient when using content in information appliances. For example, the authentication content can be output not only as a moving image or a still image, but also as a result, so that user authentication can be performed even for a terminal device without a monitor.

(2) Authentication processing and billing In the first to fifth embodiments, the authentication server device has been described as performing the authentication processing using the individual identification number. However, the present invention is not limited to this, and electronic Authentication processing may be performed using a signature or a certificate, and any information may be used as long as it is user authentication information that can identify a user. In addition to the electronic signature and certificate, authentication may be performed using a caller number of a mobile phone. In addition, the charging process may be executed when the authentication process is performed.

  In the fifth embodiment, the case where age is used as the content viewing restriction in the authentication process has been described. However, the present invention is not limited to this, and content viewing such as gender and occupation can be restricted. Authentication can be performed using any information.

(3) Mobile phone In the first to fifth embodiments, the case where a mobile phone is used as a user terminal has been described. However, the present invention is not limited to this, and a personal computer, a workstation, and a home game are used. Any communication device can be used as long as it can store an individual identification number and can connect to the Internet, such as a mobile communication terminal such as a mobile device, a network compatible TV, a PDA, or a PHS.

(4) System configuration, etc. Further, the processing procedure, control procedure, specific name, information including various data and parameters shown in the above-described document and drawings described in the present embodiment (for example, FIGS. 3 to 5 etc. ) Can be changed arbitrarily unless otherwise specified.

  Further, each component of each illustrated apparatus is functionally conceptual, and does not necessarily need to be physically configured as illustrated. In other words, the specific form of distribution / integration of each device is not limited to that shown in the figure, and all or a part thereof may be functionally or physically distributed or arbitrarily distributed in arbitrary units according to various loads or usage conditions. For example, the session information temporary issue unit 26 and the session information regular issue unit 27 may be integrated. Further, all or any part of each processing function performed in each device may be realized by a CPU and a program analyzed and executed by the CPU, or may be realized as hardware by wired logic.

(5) Program The various processing procedures described in the above embodiments can be realized by executing a prepared program on a computer such as a personal computer or a workstation. This program can be distributed via a network such as the Internet. The program can also be executed by being recorded on a computer-readable recording medium such as a hard disk, a flexible disk (FD), a CD-ROM, an MO, and a DVD and being read from the recording medium by the computer.

  As described above, the communication system and the communication method according to the present invention authenticate whether or not the user of the home network is a valid user, and the user is authenticated as a valid user. It is useful for providing content to a content viewing device via a content providing device, and is particularly suitable for performing user authentication with high convenience when using content in an information home appliance.

1 is a system configuration diagram illustrating an overall configuration of a communication system according to a first embodiment. 1 is a block diagram illustrating a configuration of a communication system according to a first embodiment. It is a figure which shows the example of the information memorize | stored in user authentication information DB. It is a figure which shows the example of the information memorize | stored in session information DB. It is a figure which shows the example of the information memorize | stored in content DB. It is the figure which showed the example of an output of the content list output to TV corresponding to a network. It is a figure which shows the example of the QR code produced | generated as content for authentication. FIG. 3 is a sequence diagram illustrating a processing flow by the communication system according to the first embodiment. 6 is a flowchart illustrating a flow of processing by the content providing apparatus according to the first embodiment. 6 is a flowchart illustrating a flow of processing by the authentication server device according to the first embodiment. 3 is a flowchart showing a flow of processing by the network compatible TV according to the first embodiment. It is a sequence diagram which shows the flow of the process by a communication system. FIG. 10 is a sequence diagram illustrating a processing flow of the communication system according to the second embodiment. 12 is a flowchart illustrating a flow of processing by a content server device according to the second embodiment. It is a figure which shows the example of the information memorize | stored in the authentication server apparatus which concerns on Example 3. FIG. FIG. 10 is a sequence diagram illustrating a processing flow of the communication system according to the third embodiment. 12 is a flowchart illustrating a processing flow of the content providing apparatus according to the third embodiment. FIG. 10 is a diagram illustrating an overall configuration of a communication system according to a fourth embodiment. FIG. 10 is a diagram illustrating an overall configuration of a communication system according to a fourth embodiment. It is a figure which shows the example of the information memorize | stored in session information DB. FIG. 10 is a diagram illustrating an overall configuration of a communication system according to a fifth embodiment. It is a figure which shows the structural example of the information memorize | stored in content DB of the content server apparatus which concerns on Example 5. FIG. It is a figure which shows the structural example of the information memorize | stored in user authentication information DB of the authentication server apparatus which concerns on Example 5. FIG. It is a figure which shows the structural example of the information memorize | stored in session information DB of the authentication server apparatus which concerns on Example 5. FIG.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 Content provision apparatus 11 Internal network communication part 12 External network communication part 13 Memory | storage part 14 Control part 15 Session information request | requirement transmission part 16 Authentication content production | generation part 17 Authentication result inquiry part 18 Content transmission part 20 Authentication server apparatus 21 Communication control I / F part 22 Storage part 23 User authentication information DB
24 Session information DB
25 control unit 26 session information temporary issue unit 27 session information regular issue unit 28 user authentication unit 30 content server device 31 communication control I / F unit 32 storage unit 33 content DB
34 Control unit 35 Content transmission unit

Claims (7)

A home network configured such that a content viewing device that outputs content in a viewable manner is connected to another device via the content providing device, and whether or not the user of the home network is a valid user An authentication server device that authenticates and a content server device that provides the content to the content viewing device via the content providing device on condition that the user is authenticated as a valid user via a network A communication system configured to be communicably connected to each other,
The content providing device or the content server device is:
Session information for transmitting, to the authentication server device, a session information request for requesting session information used for user authentication accompanying viewing of the content when receiving a content request for viewing content from the content viewing device A request sending means;
When the session information issued by the authentication server device is received, the content for authentication that generates the authentication content formed as content that can be viewed by the content viewing device and transmits the session information to the content viewing device Generating means;
After the authentication content is transmitted to the content viewing apparatus by the authentication content generation means, the session information is sent together with an authentication result inquiry request for inquiring an authentication result indicating whether or not the user is a valid user. An authentication result inquiry means for transmitting to the authentication server device;
The authentication server device
A user who stores the user authentication information stored in the user terminal owned by the user of the home network and used for the authentication of the user in association with the user authentication information for uniquely identifying the user Authentication information storage means;
When a session information request is received from the content providing apparatus or the content server apparatus, the session information is issued, transmitted to the content providing apparatus or the content server apparatus, and stored in a predetermined session information storage unit Temporary information issuing means;
When an authentication request including the session information is received from the user terminal together with the user authentication information, the session information is stored in the session information storage unit, and the user authentication information is the user authentication. Session information regular issuing means for acquiring the user authentication information from the user authentication information storage means and storing it in the session information storage means in association with the session information only when stored in the information storage means When,
Whether the session information and the user authentication information are associated with each other and stored in the session information storage unit when the session information is received together with the authentication result inquiry request from the content providing device or the content server device User authentication means for determining whether or not the user is a valid user;
A communication system comprising: The content server device transmits encrypted content to the content providing device, and
The said user authentication means transmits the decryption key which decrypts the said content to the said content provision apparatus, when the said user is authenticated as a valid user. Communications system. The content viewing device transmits, together with the content request, an identification number uniquely assigned to a home terminal device connected to the home network,
The session information request transmission means, when receiving the content request and the identification number from the content viewing device, transmits the session information request and the identification number to the authentication server device,
The session information storage means stores the session information, the user authentication information, and the identification number,
When the session information temporary issuing means receives the session information request and the identification number from the content providing apparatus or the content server apparatus, the session information associated with the identification number is stored in the session information storage means. When the authentication result indicating authentication permission is transmitted to the content server device or the content providing device, and the session information associated with the identification number is not stored in the session information storage unit, Issuing session information and transmitting it to the content providing device or the content server device, associating the session information with the identification number, and storing it in the session information storage means,
When the session information regular issuing means receives an authentication request including the session information from the user terminal together with the user authentication information and the identification number, the session information and the identification number are stored in the session information storage means. And only when the user authentication information is stored in the user authentication information storage means, the user authentication information is acquired from the user authentication information storage means, and is stored in the session information. Correspondingly stored in the session information storage means,
When the user authentication means receives the session information together with the authentication result inquiry request from the content providing apparatus or the content server apparatus, the user authentication means associates the session information with the user authentication information and an identification number, and The communication system according to claim 1 or 2, wherein it is determined whether or not the information is stored in a session information storage unit, and whether or not the user is a valid user is authenticated. The content viewing device transmits, together with the content request, an identification number uniquely assigned to a home terminal device connected to the home network,
The content providing apparatus includes:
An identification number storage means for storing the identification number uniquely assigned to the home terminal device that transmitted the content request and the session information issued to the home terminal device that transmitted the content request in association with each other ,
When the content associated with the session information is transmitted from the content server device, the identification number stored in association with the session information is acquired from the identification number storage means, and the identification number is allocated. The communication system according to claim 1, further comprising content transmission control means for transmitting the content only to the home terminal device. The session information request transmission means of the content server device, when receiving the session information request from the content providing device, sends content information relating to content that the content viewing device desires to view and the session information request to the authentication server. To the device,
The session information temporary issuing means, when receiving the session information request and the content information from the content server device, issues the session information and transmits it to the content viewing device or the content server device. Storing the information and the content information in association with each other in the session information storage means,
When the session information regular issuing means receives an authentication request including the session information from the user terminal together with the user authentication information, the session information and the content information are stored in the session information storage means. And only when the user authentication information is stored in the user authentication information storage means, the user authentication information is acquired from the user authentication information storage means, and the session information and the content information are acquired. And stored in the session information storage means in association with
The user authentication means stores the session information and the user authentication information in association with each other when the session information is received together with the authentication result inquiry request from the content server device. And determining whether the user authentication information stored in the user authentication information storage means satisfies a predetermined condition of the content information, and authenticating whether the user is a valid user. The communication system according to claim 1, wherein:   The authentication content generation means receives the session information issued by the authentication server device, and when the content viewing device outputs the moving image content so that the moving image content can be viewed, When the moving image content for authentication formed as content is generated and transmitted to the content viewing device, and the content viewing device outputs the audio content so as to be viewable, the session information is formed as the audio content. Authentication content is generated and transmitted to the content viewing device, and when the content viewing device outputs the still image content so as to be viewable, the session information is formed as still image content. Generate still image content and send it to the content viewing device Communication system according to any one of claims 1 to 5, wherein the Rukoto. A home network configured such that a content viewing device that outputs content in a viewable manner is connected to another device via the content providing device, and whether or not the user of the home network is a valid user An authentication server device that authenticates and a content server device that provides the content to the content viewing device via the content providing device on condition that the user is authenticated as a valid user via a network A communication method suitable for communicably connecting to each other,
The content providing device or the content server device is:
Session information for transmitting, to the authentication server device, a session information request for requesting session information used for user authentication accompanying viewing of the content when receiving a content request for viewing content from the content viewing device Request sending process;
When the session information issued by the authentication server device is received, the content for authentication that generates the authentication content formed as content that can be viewed by the content viewing device and transmits the session information to the content viewing device Generation process;
After the authentication content is transmitted to the content viewing apparatus in the authentication content generation step, the session information is sent together with an authentication result inquiry request for inquiring an authentication result indicating whether or not the user is a valid user. An authentication result inquiry step to be transmitted to the authentication server device;
The authentication server device
A user who stores the user authentication information stored in the user terminal owned by the user of the home network and used for the authentication of the user in association with the user authentication information for uniquely identifying the user Authentication information storage means;
When a session information request is received from the content providing apparatus or the content server apparatus, the session information is issued, transmitted to the content providing apparatus or the content server apparatus, and stored in a predetermined session information storage unit Information temporary issue process,
When an authentication request including the session information is received from the user terminal together with the user authentication information, the session information is stored in the session information storage unit, and the user authentication information is the user authentication. A session information normal issuing step of acquiring the user authentication information from the user authentication information storage means and storing it in the session information storage means in association with the session information only when stored in the information storage means When,
Whether the session information and the user authentication information are associated with each other and stored in the session information storage unit when the session information is received together with the authentication result inquiry request from the content providing device or the content server device A user authentication step of determining whether or not the user is a valid user;
The communication method characterized by including.

Images