JP4372389B2 - CONTENT PROVIDING METHOD, CONTENT PROVIDING SERVER USED FOR THE METHOD, AND COMMUNICATION SYSTEM - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a content providing method for providing content such as an application program to an information communication terminal such as a mobile phone via a communication network, a content providing server used in the method, and a communication system.
[0002]
[Prior art]
Conventionally, as shown in FIG. 4, content using a content providing server 40 managed by a content developer 4 and an authentication server 52 managed by a communication carrier 5 operating a mobile phone communication network 50 as a communication network. The providing method is known. In this method, content to be provided is sent from the content developer 4 to the authentication server 52 of the communication carrier 5 and authentication processing is performed as to whether or not registration of the content in the content providing server 40 is permitted. . By this authentication processing, content with high illegality contrary to public order and morals is prevented from being provided to the user 6 of the mobile phone 60 as an information communication terminal. The content permitted to be registered in the authentication process is registered in the content providing server 40 after a predetermined authentication key is added by the communication carrier 5. The content providing server 40 is connected to the mobile phone communication network 50 and is managed by the content developer 4. A user 6 who desires to acquire content accesses the content providing server 40 from the mobile phone 60. When an acquisition request for the desired content is transmitted from the user's cellular phone 60 to the content providing server 40, an authentication key for the content is transmitted to the cellular phone 60. The mobile phone 60 identifies the received authentication key, and the mobile phone 60 can be downloaded to the mobile phone 60 only when it is determined that the content is permitted to be downloaded as a result of the identification.
[0003]
[Problems to be solved by the invention]
However, in the above-described conventional content providing method, since each mobile phone 60 identifies the authentication key for the content, it is necessary to provide each mobile phone 60 with a means for identifying the authentication key. .
Further, in the conventional content providing method, the content providing server 40 for registering the authenticated content is not under the management of the communication carrier 5. For this reason, there has been a problem that it takes time to stop the outflow of content when the illegality of the content, such as against public order and morals, is discovered after authentication.
[0004]
The present invention has been made in view of the above problems. An object of the present invention is to provide a content providing method capable of quickly stopping the outflow of content even if it is not necessary to have a function for identifying an authentication key on the information communication terminal side and an illegality of content is detected after authentication. A content providing server and a communication system used in the method are provided.
[0005]
[Means for Solving the Problems]
In order to achieve the above object, the invention of claim 1 is a content providing method for providing content to an information communication terminal via a communication network, which is managed by a telecommunications carrier operating the communication network and is an information communication terminal. A content providing server that centrally accepts content acquisition requests from the content developer server, and a content providing server that receives the candidate content from the content developer server; Based on a table prepared in advance for a plurality of functions that are determined to be illegal when combined with each other in a content, and a plurality of functions that the provision target candidate content has are illegal Determining whether to have a combination of functions; If the content providing server determines that the content to be provided does not have a combination of a plurality of illegal functions, the content can be acquired from the information communication terminal via the communication network. Registering with the content providing server without adding an authentication key in a state, and determining that the candidate content to be provided has a combination of a plurality of illegal functions, and not registering the content; that it has a.
In the content providing method according to claim 1, a table created in advance for a plurality of functions that are judged to have a plurality of functions included in content to be provided received from a server of a content developer and that become illegal when combined with each other in the contents Based on the above, an authentication process is performed in the content providing server so as to determine whether or not the content to be provided has a combination of a plurality of illegal functions. If it is determined by this authentication process that the content to be provided does not have a combination of illegal functions, the authentication key can be acquired from the information communication terminal via the communication network. If it is determined that the content to be provided has a combination of a plurality of functions having illegality, the content is not registered. As described above, since only the content that is permitted to be registered by the authentication process is registered in the content providing server without adding the authentication key, the information communication terminal that acquires the content uses the conventional authentication key. Authentication processing that was required is no longer necessary. Furthermore, since this content providing server centrally accepts content acquisition requests from information communication terminals, it is possible to centrally manage the content to be provided, and to acquire unauthenticated content from other servers. I can stop.
Moreover, the content providing server is managed by a telecommunications carrier operating a communication network using information communication terminals. Therefore, when the illegality of the content is detected after the authentication by the content providing server, the communication carrier can control the processing in the content providing server so as to prohibit the acquisition of the content.
Further, the invention of claim 1, in the content providing method, the contents of the provided object is a content of an application program that uses the plurality of API (application interface), the content providing server, the provision target candidate based of the plurality of functions content has an application program to determine a plurality of API to be used before SL application program, the previously prepared table for a plurality of API that illegality is high when combined with one another in the content of an application program And determining whether the content of the application program of the provision target candidate has a combination of a plurality of APIs having illegality. The content can be acquired from the information communication terminal via the communication network without adding an authentication key. If it is registered in the providing server and it is determined that the content of the candidate application program to be provided has a combination of a plurality of APIs having illegality, the content is not registered .
[0006]
According to a second aspect of the present invention, there is provided a content providing server for providing content to an information communication terminal via a communication network, the content storage means for storing the content to be provided, and the content developer server. Receiving the candidate content to be provided, discriminating a plurality of functions of the candidate content received from the content developer server, and creating a plurality of functions that become illegal when combined with each other in the content Based on the table, content authentication means for determining whether or not the content of the candidate for provision has a combination of a plurality of functions having illegality, and a plurality of functions for which the content of the candidate for provision has illegality If it is determined that there is no combination, the content is transferred to the information communication terminal. Registered in the content storage means without adding an authentication key in a state where it can be acquired via the communication network, and when it is determined that the content of the candidate to be provided has a combination of a plurality of illegal functions , A content registration unit that does not register the content, and a provision target content stored in the content storage unit in response to an acquisition request from the information communication terminal is transmitted to the information communication terminal via the communication network Content transmission means, managed by a telecommunications carrier operating the communication network, and accepting content acquisition requests from the information communication terminal in an integrated manner .
In the content providing server according to claim 2 , a plurality of functions that are determined by the content authentication unit to be included in the candidate content to be provided received from the content development source server and are combined with each other in the content become illegal. Authentication processing is performed so as to determine whether or not the provision target candidate content has a combination of a plurality of illegal functions based on a table created in advance. If it is determined by the authentication process that the content to be provided does not have a combination of multiple illegal functions, the content can be acquired from the information communication terminal via the communication network by the content registration means. If the content is registered in the content storage means without adding an authentication key and it is determined that the content to be provided has a combination of a plurality of illegal functions, the content is not registered. The authenticated content registered in the content storage unit is transmitted by the content transmission unit in response to an acquisition request from the information communication terminal. Since authenticated content is registered in the content providing server without adding an authentication key and is transmitted in response to an acquisition request from the information communication terminal, the information communication terminal side uses a conventional authentication key. The used authentication process becomes unnecessary. Furthermore, since the content providing server centrally accepts content acquisition requests from information communication terminals, it is possible to centrally manage the content to be provided and prevent acquisition of unauthenticated content.
Moreover, the content providing server is managed by a telecommunications carrier operating a communication network using information communication terminals. Therefore, when the illegality of the content is detected after the authentication by the content authentication means, the communication carrier can control the processing in the content providing server so as to prohibit the acquisition of the content.
In the content providing server, the content authentication unit may determine a plurality of APIs used by the application program as a plurality of functions included in the content of the application target candidate application program. Whether or not the content of the candidate application program to be provided has a combination of a plurality of illegal APIs based on a table created in advance for a plurality of APIs that become illegal when combined with each other in the contents of the application program If the content registration means determines that the content of the candidate application program to be provided does not have a combination of APIs having illegality, the content registration means determines whether the content is the information communication terminal. It is registered in the content providing server without adding an authentication key in a state where it can be acquired via the communication network, and it is determined that the content of the candidate application program to be provided has a combination of a plurality of illegal APIs. If so, the content is not registered.
According to a third aspect of the present invention, there is provided a communication system for providing content to an information communication terminal via a communication network, the communication network operated by a communication carrier, and a content acquisition request from the information communication terminal. And a content providing server connected to the communication network so as to transmit the content to the information communication terminal. The content providing server of claim 2 is used as the content providing server. It is characterized by being connected to.
[0007]
Here, as the “information communication terminal”, a mobile phone such as PDC (Personal Digital Cellular) system, GSM (Global System for Mobile Communication) system, TIA (Telecommunications Industry Association) system, IMT (International Mobile Telecommunications) -2000, etc. Mobile phones, PHS (Personal Handyphone System ), automobile phones, fixed phones, and the like that can execute application programs. Examples of the “information communication terminal” include a mobile information communication terminal such as a PDA (Personal Digital Assistance) that does not have a telephone function in addition to the above-described telephone.
[0008]
DETAILED DESCRIPTION OF THE INVENTION
Embodiments of the present invention will be described below with reference to the drawings.
The content providing method according to the present invention is a content providing method for providing content such as a JAVA (registered trademark) application program to a mobile phone 60 as an information communication terminal used by a user 6, as shown in FIG. . In this method, only a content download server (hereinafter referred to as “content server”) 51 that centrally accepts content acquisition requests from mobile phones as a content providing server is connected to a mobile phone communication network 50 as a communication network. Yes. The content server 51 is under the management of the communication carrier 5 that operates the mobile phone communication network 50. The candidate content to be provided is sent from the content developer 4 to the content server 51. The content to be provided may be sent from the server on the content developer 4 side to the content server 51 via a dedicated line or a public line, or may be sent using the Internet. In addition, a recording medium such as an optical disk or a magnetic disk in which content to be provided is recorded may be sent from the content developer 4 to the communication carrier 5 and the content server 51 may read the content in the recording medium.
In the content server 51, authentication processing is performed on the candidate content to be provided sent from the content developer 4. Of these content certifications, human beings may visually confirm anything that violates copyright or public order and morals. Then, only the provision target candidate contents permitted to be registered by the authentication process are registered in the content server 51 in a state where they can be downloaded from the cellular phone 60 via the cellular phone communication network 50.
[0009]
2 and 3 are a schematic configuration diagram and a functional block diagram of the content server 51 used in the content providing method of the present embodiment, respectively. The content server 51 is managed and operated by the communication carrier 5. As shown in FIG. 2, the content server 51 includes a system bus 100, a CPU 101, an internal storage device, an external storage device 104, an input device 105, an output device 106, and a mobile phone communication device 107. The internal storage device includes a RAM 102, a ROM 103, and the like. The external storage device includes a hard disk drive (HDD), an optical disk drive, and the like. The input device 105 includes an external storage device 104, a mouse, a keyboard, and the like. The output device 106 includes a display, a printer, and the like. Further, the mobile phone communication device 107 includes a mobile phone communication device 107 for communicating with each user's mobile phone via the mobile phone communication network 50.
The components such as the CPU 101 and the RAM 102 exchange data and program instructions with each other via the system bus 100. A program for operating the content server 51 in accordance with a predetermined procedure is stored in the ROM 103 or the external storage device 104, and is called up and executed in the work area on the CPU 101 or the RAM 102 as necessary.
The content server 51 may be configured as a dedicated control device or may be configured using a general-purpose computer system. Further, the content server 51 may be configured by a single computer, or may be configured by connecting a plurality of computers each having a plurality of functions via a network.
[0010]
The content server 51 executes a predetermined program on the hardware shown in FIG. Thus, the functions of the content storage unit 501, the content authentication unit 502, the content registration unit 503, and the content transmission unit 504 as shown in FIG. 3 are realized.
[0011]
The content storage unit 501 is configured using the external storage device 104 including the hard disk of the content server 51 and stores content to be provided to the user's mobile phone 60. Examples of content stored in the content storage unit 501 include application programs developed using JAVA (registered trademark), image data such as a standby screen, and music data such as a ringing melody.
[0012]
The content authentication unit 502 is configured by the CPU 101, the RAM 102, and the like of the content server 51, and has a function of performing an authentication process on the content of the candidate to be provided sent from the content developer 4. In this authentication process, whether to permit registration in the content server 51, such as whether or not the content to be provided has illegality, is performed.
The authentication process is a process for automatically examining whether or not there is an illegality contrary to public order and morals using a dedicated check tool. Usually, it is determined from a single function in the content. In addition, even if a single function does not have illegality, the illegality may increase when a plurality of functions are combined. Therefore, in the authentication processing of the present embodiment, a table of combinations of multiple functions that become illegal when combined with each other is created in advance, and the illegality of each content can be examined based on this table. . By examining even when functions are combined in this way, content authentication processing can be performed more accurately.
For example, when an authentication process is performed on a JAVA application program, a plurality of APIs (application interfaces) used by the application program are checked as the contents function. Then, by referring to a check table prepared in advance, a dangerous API combination (for example, a combination of API and API for obtaining personal information) that is illegal is determined. As a result of this determination, JAVA application programs having dangerous API combinations that may be illegal are not registered.
[0013]
The content registration unit 503 includes the CPU 101, the RAM 102, and the like of the content server 51, and has a function of registering only the content permitted to be registered by the authentication process in the content storage unit 501.
[0014]
The content transmission means 504 is constituted by the CPU 101 of the content server 51, the RAM 102, the mobile phone communication network communication device 107, and the like. The content transmitting unit 504 transmits a content to be provided stored in the content storage unit 501 to the mobile phone 60 via the mobile phone communication network 50 in response to an acquisition request from the mobile phone 60. have.
[0015]
In the content server 51 having the above-described configuration, the content authentication unit 502 performs authentication processing on the candidate content to be provided sent from the content developer 4. The content permitted to be registered in the authentication process is registered in the content storage unit 501 by the content registration unit 503 without being added with an authentication key while being downloadable from the mobile phone 60. The authenticated content registered in the content storage unit 501 is transmitted in response to an acquisition request from the mobile phone 60. On the mobile phone 60 side, the received content can be output without performing authentication processing using the authentication key.
In addition, the content server 51 is managed by a mobile phone carrier 5 that operates the mobile phone communication network 50. Accordingly, when an illegality of the content is detected after the authentication by the content authentication unit 502, the communication carrier 5 can control the transmission process in the content server 51 so as to prohibit the download of the content.
[0016]
As described above, according to the present embodiment, only the content permitted to be registered in the authentication process is registered in the content server 51 in a state where it can be downloaded without adding a conventional authentication key. Accordingly, the content can be downloaded without performing authentication processing using the authentication key on the mobile phone 60 side. Therefore, it is not necessary to provide a function for identifying the authentication key on the mobile phone 60 side. Since the content server 51 centrally accepts content acquisition requests from the mobile phone 60, the content to be provided can be centrally managed, and unauthenticated content is prevented from being acquired from other servers. it can. In addition, since the content server 51 is managed by the telecommunications carrier 5 that operates the mobile phone communication network 50, when the illegality of the content is detected after the authentication process, the telecommunications carrier is prohibited so as to prohibit the download of the content. 5 can control processing in the content server 51. Therefore, the outflow of content having such illegality can be promptly stopped.
[0017]
【The invention's effect】
According to the first to third aspects of the present invention, the content can be acquired without performing the authentication process on the information communication terminal side. Therefore, it is not necessary to provide a function for identifying the authentication key on the information communication terminal side. In addition, when an illegality of the content is detected after the authentication, there is an excellent effect that the communication carrier can quickly stop the outflow of the content by controlling the processing in the content providing server.
[Brief description of the drawings]
FIG. 1 is an explanatory diagram of a content providing method according to an embodiment of the present invention.
FIG. 2 is a schematic configuration diagram of a content server used in the content providing method.
FIG. 3 is a functional block diagram of the content server.
FIG. 4 is an explanatory diagram of a conventional content providing method.
[Explanation of symbols]
4 content developer 5 telecommunications carrier 6 user 50 mobile phone communication network 51 content server 60 mobile phone 100 system bus 101 CPU
102 RAM
103 ROM
104 External storage device 105 Input device 106 Output device 107 Communication device 501 for mobile phone communication network Content storage means 502 Content authentication means 503 Content registration means 504 Content transmission means

Claims (3)

A content providing method for providing content to an information communication terminal via a communication network,
A content providing server managed by a telecommunications carrier operating a communication network and receiving a content acquisition request from an information communication terminal in a centralized manner, and receiving content to be provided from a content developer server;
Table created in advance for a plurality of functions that the content providing server discriminates a plurality of functions included in the candidate content to be provided received from the server of the content developer and becomes illegal when combined with each other in the content Determining whether or not the candidate content to be provided has a combination of a plurality of illegal functions;
If the content providing server determines that the content to be provided does not have a combination of a plurality of illegal functions, the content can be acquired from the information communication terminal via the communication network. Registering with the content providing server without adding an authentication key in a state, and determining that the candidate content to be provided has a combination of a plurality of illegal functions, and not registering the content; I have a,
The content to be provided is content of an application program that uses a plurality of APIs (application program interfaces),
The content providing server includes:
Tables created in advance for a plurality of APIs that become illegal when the plurality of APIs used by the application programs are determined as a plurality of functions of the application program contents to be provided and combined with each other in the application program contents Based on the above, it is determined whether the content of the candidate application program to be provided has a combination of a plurality of APIs having illegality,
If it is determined that the content of the candidate application program to be provided does not have a combination of a plurality of illegal APIs, the content is authenticated in a state where it can be acquired from the information communication terminal via the communication network It is registered in the content providing server without adding a key, and when it is determined that the content of the candidate application program to be provided has a combination of a plurality of APIs having illegality, the content is not registered. Content providing method . Be for providing content server for providing content to the information communication terminal via a communication network,
Content storage means for storing content to be provided;
A plurality of contents that receive the candidate content from the content developer server, determine a plurality of functions of the candidate content received from the content developer server, and combine them with each other to increase illegality Content authentication means for determining whether or not the content of the candidate to be provided has a combination of a plurality of functions having illegality, based on a table created in advance for the function of
If it is determined that the candidate content does not have a combination of illegal functions, an authentication key is added in a state where the content can be acquired from the information communication terminal via the communication network. Without registering in the content storage means, if it is determined that the content to be provided has a combination of a plurality of functions having illegality, a content registration means that does not register the content;
In response to an acquisition request from the information communication terminal, content providing means for transmitting the content to be provided stored in the content storage means to the information communication terminal via the communication network,
It is managed by a telecommunications carrier that operates the communication network, and accepts content acquisition requests from the information communication terminal in an integrated manner ,
The content to be provided is content of an application program that uses a plurality of APIs (application program interfaces),
The content authenticating means determines a plurality of APIs used by the application program as a plurality of functions of the application program content to be provided, and a plurality of APIs that become illegal when combined with each other in the application program content. On the basis of a table created in advance for determining whether or not the content of the candidate application program to be provided has a combination of APIs having illegality,
When the content registration unit determines that the content of the candidate application program to be provided does not have a combination of APIs having illegality, the content registration unit transmits the content from the information communication terminal via the communication network. If it is registered in the content providing server without adding an authentication key in a state where it can be acquired and it is determined that the content of the candidate application program to be provided has a combination of a plurality of illegal APIs, the content Content providing server characterized by not registering . A communication system for providing content to the information communication terminal via a communication network,
It is configured using a communication network operated by a telecommunications carrier and a content providing server connected to the communication network so as to transmit content to the information communication terminal in response to a content acquisition request from the information communication terminal. ,
A communication system, wherein the content providing server of claim 2 is connected to the communication network as the content providing server.

Images