WO2007089045A1

WO2007089045A1 - Authentication system

Info

Publication number: WO2007089045A1
Application number: PCT/JP2007/052306
Authority: WO
Inventors: Hirokazu Muraki; Jiro Sakai
Original assignee: System Create, Inc.
Priority date: 2006-02-03
Filing date: 2007-02-02
Publication date: 2007-08-09
Also published as: JPWO2007089045A1

Abstract

An authentication system has a receiving device, a transmission device, and a server. The receiving device creates and outputs an authentication code including both an identifier representing a selected piece of merchandise etc. and an identifier representing the device. The transmission device stores authentication information and transmits the authentication information and the authentication code to a server. The server performs authentication based on the authentication information and information included in the authentication code and, when the authentication is accepted, transmits transmission data to the receiving device represented by the identifier included in an authentication code received.

Description

Specification

Recognition, proof system

Sickle field

The present invention relates to a technology that enables user authentication and settlement via a network.

Background art

In recent years, with the spread of personal computers and professional bands, it has become a good idea to stream content data over a network. Such content data includes the movies and music.

When a user wishes to receive content data, the following procedure is generally performed. The following is an example of using a personal computer: ^ as a specific example of such a procedure. The user first operates a personal computer connected to the network, starts a browser and a dedicated application, and accesses a site from which desired content data has been extracted. Next, the user selects the desired content data and performs the authentication 'settlement procedure'. In the 'authentication' settlement, the user ID, password, credit card number, ISif account number, etc. The purpose is to perform authentication / settlement by inputting information and calling it to the server (see Patent Document 1). When the authentication / settlement procedure is completed, the content data is transmitted to the personal computer operated by the user and can be viewed on this personal computer.

(Patent Document 1) Japanese Patent Laid-Open No. 2 0 06-1 2 1 0 7

In such a conventional system, a device for receiving important personal information must be equipped with a device or program for inputting important personal information. was there. This problem has limited the design of equipment for receiving. The same problem is not limited to the content streaming distribution system, but also a sales system that offers products by making payments via the network, and ASP (Application) that provides applications such as games via the network. Service Providers) and member site systems that offer services and products to specific member users, etc. Authentication SEX was a problem common to systems that make payments.

Therefore, the present invention aims to solve the above-described problems and provide a technical skill that enables the design of a system with a higher degree of freedom. Disclosure of the invention

A first aspect of the present invention is an authentication system including a receiving device, a weekly device and a server. In this authentication system, the server is configured to be able to communicate with each of the receiving devices. That is, the server and the receiving device are configured to be able to communicate with each other. In addition, the device and server are configured in a communication-capable area.

The receiving device includes a Zuka means used by the user to select or input a desired product, a product identifier corresponding to the product selected or input via the input means, and the receiving device. An authentication code generating means for generating an authentication code including a device, a first output means for outputting the generated authentication code, and data sent from the server via the network Receiving means for receiving, and second output means for outputting data received by the receiving means.

In the present invention, “product” refers to, for example, movie music digital data, products as actual goods, browsing (or permission) of WEΒsites, application execution (or permission), and file data. Access (or permission to execute reference 'overwrite' of the data). In addition, the “product” in the present invention is not limited to a product such as a physical product or a program, but also includes a service.

The speech device includes an input means for inputting the authentication code output from the receiving device, and an input means. o

An authentication code is entered; and a means for reading out the authentication information necessary for the user of the if-phrase device to be authenticated at the server, and the information and authentication information included in the entered authentication code. , Including the means to communicate over the network.

When the information contained in the authentication code is sent to the server, the authentication device may send the authentication code to the server as it is, or extract the product identifier ij and the device itsij child from the authentication code.

_It may be sent out and sent to the server.

The server responds to the information received in the authentication code from the information device and the receiving means for receiving the authentication information and the information and the authentication information included in the authentication code from the language device. The power to authenticate the user to authenticate I The authentication means to authenticate, and the control means to acquire the speech data corresponding to the product f su child included in the received authentication code after being authenticated by the authentication means And means for saying the obtained message data to the receiving device corresponding to the device included in the received authentication code.

The “language data” in the present invention is data determined according to the product as described above. For example, if the product was a movie digital movie: ^, the word data is so digital that users can watch this movie! I'm grateful for it. For example, if the product is a product as an actual product, it becomes settlement information when the user purchases the product. For example, when browsing the SWE B site, it is the URL and HTML data of this WEB site. Also, for example, if the product is an application execution, the data indicating the result of the application and the key data that permits the operation of the application (the data of the application to the receiving device) For example, if the product has access to a printer, it is a filter depending on the permitted access.

As described above, when the product is a product as an actual article, the authentication system according to the present invention is configured to further include a settlement server that performs a settlement for the purchase of the article. Also good. Specifically, the authentication system is configured as follows. The server stores, for each product item, storage means for storing for each product, and received Based on the item corresponding to the ij child, the calculation means for calculating V, payment amount, and male, and the user indicating the user corresponding to the received authentication information. The payment sano settles the received payment to the user corresponding to the user © J child and payment card and the user corresponding to the received user card. A settlement means, and a settlement means in the settlement means and a statement means that uses the user H¾iJ child as a server. -Then, the server authentication means authenticates the user corresponding to the user msu child when the information indicating that the settlement power s has been completed is received as the settlement result.

Further, the receiving device according to the first aspect of the present invention provides address information required when the server transmits data to the receiving device to the item selected or input via the input means. In addition to the device identifier corresponding to the receiving device, the server may be configured to further include: In this case, the server means compares the device data received from the speech device with the address information and the device fi¾ij child received from the ¾f speech means of the reception device, thereby receiving the speech data. The address information may be determined.

In addition, in the first objection of the present invention, the receiving device includes a device identifier storing a merchandise item associated with each of a plurality of items of merchandise, and a device identifier indicating a device fifigij child indicating the receiving device. A storage device, and a message storage device further comprising: an authentication information storage for storing authentication information required for a user of the message device to be authenticated by the server; The server stores a determination information storage unit that stores information used to determine whether or not the user corresponding to the received authentication information should be authenticated, and word data associated with each product identifier lj child. The authentication code generation means of the receiving device may be configured to include a product-like IJ child storage means and a device-like I child storage means, respectively. The authentication code is obtained by reading the product and the device, the control unit of the speech device acquires the authentication information by reading the authentication information from the authentication information storage unit, and the authentication unit of the server receives the received authentication information. The server's control means is included in the received authentication code, based on the information stored in the message storage means. The word data is obtained by reading out the word data corresponding to the product type I child from the weekly word data storage means.

A second aspect of the present invention is an authentication system including a receiving device, a speech device, and a server, and is configured as follows. In this authentication system, the receiving device and the server are configured to communicate with each other. It is also configured to be able to communicate with difficult devices and servers.

When the user inputs an intention statement that he / she wants to operate the receiving device, the receiving device detects the input and the input means force S input: ^ indicates the receiving device. An authentication code generation means for acquiring a device adjustment IJ child and generating an authentication code including the device adjustment IJ child, a first output means for outputting the generated authentication code, and permission data sent from the server. The receiving means for receiving via the network and the permission data force S from the server are limited until the user performs a predetermined operation of the receiving device, and after the permission data is received from the server, the restriction is restricted. Including 1 ^ 1 "limiting means and

The speech device is necessary for the authentication device user to be authenticated at the server by the input means for inputting the authentication code output from the receiving device and the authentication code being input via the input device. Control means for obtaining authentication information, and male means for making the server contain the input authentication code and information contained in the authentication code via the network.

The server responds to this authentication information by receiving means that receives the information and authentication information included in the authentication code from the language device, and ^ when the information and authentication information included in the authentication code is received from the language device. The power to authenticate the user to be authenticated する The authentication means for deciding and ^^ authenticated by the authentication means to the receiving device corresponding to the device m¾ child included in the received authentication code. And ¾ 言 wording means for deciding the permission data indicating that the operation of the communication device is permitted.

In the second aspect of the present invention, the receiving device is configured to further include a device that stores a device that points to the receiving device, and the device is configured so that the user of the rest device is the server. It is configured to further include an authentication information storage means for storing authentication information necessary for authentication, and the server ^ determines whether or not the user corresponding to the received authentication information should be authenticated. It is comprised so that the judgment information storage means which memorize | stores the information to be used may be further included Also good. The authentication code means of the receiving device acquires the device transfer IJ child by reading the device transfer IJ child from the device transfer storage means at the age when the input means detects the above input, and the control means of the device is When the authentication code is input via the input means, the authentication information is read by reading the authentication information from the authentication information storage means, and the server authentication means stores the authentication information in the received authentication information and single information storage means. The above determination may be made based on the stored information.

A third aspect of the present invention is an authentication system that includes a receiving device and a speech server. The server is configured to be able to communicate with each of the receiving devices.

The receiving device includes an input unit used by the user to select or input a desired product, and the selection i through the input unit is a product ¾ | J child corresponding to the input product and the receiving device. A pointing device ^ ¾ child means to send two children to the server, a first receiving means for receiving an authentication code generated according to the two children from the server via the network, and a first receiving means A first output means for outputting an authentication code received by one receiving means, a second receiving means for receiving data sent from a server via a network, and a second receiving means. Second output means for outputting the received data; · '

The weekly wording device is required for the authentication device user to be authenticated at the server when the authentication code is input via the input means and the input means for inputting the authentication code output from the receiving device. Control means for acquiring authentication information, and information included in the input authentication code.

Sano has a first receiving means for receiving two H @ iJ children from the receiving device, an authentication code generating means for generating an authentication code including the two received ID IJ children, and a generated authentication code. The receiving device ¾ (first speaking means to say, second receiving means for receiving the authentication information included in the authentication code from the speaking device, and information authentication information included in the authentication code from the speaking device. When ^^ is received, the authentication means for deciding the power to authenticate the user corresponding to this authentication information, and the authentication means 61 ΤΡ was made by the authentication means, and the product identification included in the received authentication code. Corresponding to the IJ child: ^ Control means to acquire the word data and the received word data The second word means ^ in "to the receiving device corresponding to the device u child included in the identification code, and

In the third aspect of the present invention, the receiving device stores a product I¾ | J child associated with each of a plurality of products! Tsu child storage means and a device conditioner indicating the receiving device The speech device further comprises authentication information storage means for storing authentication information necessary for the user of the weekly speech device to be authenticated by the server. The server is used to determine whether or not it is necessary to authenticate the user corresponding to the received authentication information. It may be configured to further include a word data storage means. (The word data storage means may further include a word data storage means. The word means of the receiving device includes a product identifier storage means and a device I¾IJ child storage means. Product knowledge ij and gfigi puppy The control unit of the speech device acquires the authentication information by reading the authentication information from the authentication information storage unit, and the authentication unit of the server stores the received authentication information and the authentication information. Based on the information stored in the means, the above-mentioned determination is made, and the server control means reads out the word data corresponding to the product u child included in the received authentication code from the Mi word data storage means to obtain the word data. The present invention may be specified as each device included in the authentication system described above, and the present invention includes a plurality of information devices configured to be communicable via a network. In addition, the present invention may be specified as a program for operating as the above-described authentication system. In addition, the present invention may be specified as an authentication method performed by the authentication system described above, and the present invention may be specified as the authentication described above. It may be specified as a method executed by each device included in the system.

Further, the fourth aspect of the present invention is a receiving device that outputs an authentication code including two msu children: a product indicating a product designated by a user, and a device indicating the device. The first output means to output, the output authentication code and the authentication information assigned to the user are sent to the server by other communication, and authentication is performed at the server. After W _g tells the data corresponding to the product identifier to the device corresponding to the device identifier, the receiving means for receiving the message data addressed to the device from the server and the received message data are output. A second output means.

Further, a fifth aspect of the present invention is a server, wherein the authentication code including two items U U of a product 鑭 I child indicating a product designated by a user and a device tone I kid indicating a receiving device is provided. The authentication device required to authenticate the user and sent together with the authentication information required for user authentication by a speech device different from the receiving device, the receiving means for receiving the authentication code and the authentication information, and the authentication information received by the receiving means. Authentication means that performs authentication, and when authentication is performed by the authentication means, the authentication code → that corresponds to the product type IJ child included in the authentication code received with this authentication information is The device included in the device includes: a means for speaking to the receiving device corresponding to the IJ child;

Further, a sixth aspect of the present invention is a receiving device, wherein the transmitting device transmits two identifiers, a product identifier indicating a product designated by a user and a device identifier indicating the own device, to the server. The first receiving means for receiving the authentication code generated in accordance with the two identifiers IJ child from the server, the first output means for outputting the authentication code received by the first receiving means, and the output The authentication information assigned to the user and the authentication information assigned to the user is sent to the server by other means, and the server authenticates the server. The server sends the ¾ί data corresponding to the product lisij child. After a device corresponding to the device ϋ¾υ child, the second receiving means for receiving the message data of the device itself from the server, and the second receiving means for outputting the ¾ί word data received by the second receiving means Output means, including .

The seventh aspect of the present invention is a server, which is a server indicating a product specified by a user, a device that indicates a product itsi child and a receiving device, and receives two m ^ children, i.e. Authentication code generated by the first receiving means, the authentication code generating means, and the authentication code generating means for authenticating the authentication code according to the two f su children received by the first receiving means. The authentication means and the authentication code are different from the receiving device, and this authentication code is sent to the receiving device together with the authentication information necessary for user authentication. A second receiving means for receiving the authentication information, an authentication means for performing authentication based on the authentication information received by the second receiving means, and the authentication information received by the authentication means together with the authentication information. And second message means for telling the message data corresponding to the product itsij child included in the authentication code to the receiving device corresponding to the device Siij child included in the authentication code. Further, the present invention may be specified as a program for operating the processing device 3 as each device described above. Further, the present invention may be specified as a method in which each of the above-described devices is ^ 1 ".

According to the present invention, it is possible to design a system with a higher degree of freedom in a system that requires authentication. For example, it is possible to easily apply a device such as a set top box or the like equipped with an input device and a program for inputting a f f required for authentication to a system that requires authentication. Brief Description of Drawings

FIG. 1 is a diagram showing a system configuration example according to the first embodiment of the content distribution system, and FIG. 2 is a diagram showing a specific example of the information to be stored in the authentication information storage section S.

FIG. 3 is a diagram showing a specific example of the information of the authentication information storage unit power “¾1”.

FIG. 4 is a diagram showing a specific example of information recorded by the authentication information storage unit.

FIG. 5 is a diagram showing a specific example of information stored in the authentication information storage unit,

FIG. 6 is a flowchart showing an operation example according to the first embodiment of the content distribution system.

Fig. 7 is a flowchart showing an example of the operation of the weekly device.

FIG. 8 is a flowchart showing an operation example according to the first embodiment of the receiving apparatus, and FIG. 9 is a flowchart showing an operation example according to the first embodiment of the distribution server. FIG. 10 is a diagram showing a system configuration example in a modification example according to the first embodiment of the content distribution system;

FIG. 11 shows a system configuration according to the first embodiment of a content distribution system including a settlement server. W ^ is a diagram showing an example,

FIG. 12 is a diagram showing a system configuration example according to the second embodiment of the content distribution system,

Fig. 13 is a flowchart showing an operation example according to the second embodiment of the content distribution system.

FIG. 14 is a flowchart showing an operation example according to the second embodiment of the content distribution system.

FIG. 15 is a flowchart showing an operation example according to the second embodiment of the receiving apparatus, FIG. 16 is a flowchart showing an operation example according to the second embodiment of the distribution server, and FIG. It is a figure which shows the structural example of the purchasing system of goods,

Fig. 18 is a diagram showing a configuration example of a member site authentication system.

Figure 19 shows an example of the internal security system configuration.

FIG. 20 is a diagram showing a configuration example of a finale security system. Best Mode for Carrying Out the Invention ''

[First bowl form]

〔System configuration〕

FIG. 1 is a diagram showing a system configuration column of a content delivery system 100 X which is a first embodiment of a content delivery system according to the present invention. Content Rooster yourself Shin system 1 0 0 X comprises Wei apparatus 1, the receiving apparatus 2 X及Hi丽server 3 _chi. Fuji apparatus 1 and the receiving apparatus 2 _chi is - one contains more than the content distribution system 1 0 0 X. Further, a plurality of distribution servers 3 X may be included in one content 3 communication system 100 X. In the content authentication system 10 0 0 X, the language device 1 and the distribution server 3 X are connected to each other via a network 1. The receiving device 2 X and the distribution server 3 X are also communicably connected via the network 2. At this time, N 1 and Ν 2 may have different network configurations. Hereinafter, each device included in the content distribution system 100 X will be described. <Weekly device> ·

The speech device 1 is a device including an input unit 11, a control unit 1 2, a storage unit 1 3 and a storage unit 14. The device 1 is configured using an information processing device. That is, the ¾ί language device 1 includes a storage device, a computing device, and a communication control device connected via a path, and processes the program stored in the ltt¾ device in the computing device according to the program. It moves. Specifically, the mobile device 1 can be configured by using a portable terminal device having communication ability such as a portable miS machine, a PDA (Personal Digital Assistance), or a portable game machine. Next, each functional unit included in the device 1 will be described.

The input unit 11 is a functional unit that is used by a user to input an authentication code to the language device 1 and perform authentication and settlement. Details of the authentication code will be described together with the receiving device 2X. Note that this authentication code may be referred to as having another name (for example, “cancellation code”). The input unit 11 is designed according to the form of the authentication code adopted by the content distribution system 100X.

For example, if the authentication code is composed of a combination of fresh and alphabet, ^ 1 is the input unit 1 1 is an input device for buttons, keypads, jog dyano! GX, which realizes the function of extracting and recognizing the characters of (), is composed of a combination of programs. Also, for example, if the authentication code is composed of a bar code, a reading device for inputting this bar code (a bar code reading-only machine. It may be a bar code reading machine. May be configured). Also, for example, an authentication code is output by voice: ^ consists of a microphone that inputs the voice, and a square hook device (or square hook program) that reads the code from the input voice. It is. The authentication code input via the input unit 1 1 is passed to the control unit 1 2.

The control unit 12 determines information to be sent to the distribution server 3 via the ¾ί language unit 14. The processing by the control unit 12 is realized by the program stored in the weekly device 1 in advance by the arithmetic device or the like. Further, the processing by the control unit 12 may be realized using a dedicated node or software. When the control unit 12 receives the authentication code from the input unit 1 1, the control unit 1 2 extracts the information included in the authentication code, and the extracted information and the authentication code stored in the storage unit 1 3. H ~. In addition, the control unit 12 may be configured so that the authentication code itself and the authentication 1¾IJ child are connected to each other without extracting the information included in the authentication code. Details of the authenticator will be described together with the storage unit 13.

The storage unit 13 stores the authentication lj child. I確U child is information indicating a user of each word device 1 in the content distribution system 1 0 0 _X. As an example of realization, each user has one authentication identifier indicating himself / herself, and in order to own multiple language devices 1, one authentication ItSiJ child is used in them. As another example of implementation, each user may have a plurality of language devices 1 so that each user device has a different authentication code. Such a configuration can also be realized by assigning an authentication key to each transmitting device 1 instead of directly giving an authentication key to the user.

The authentication identifier is represented by a number (any number such as a binary number or a decimal number; it can be expressed later) or a combination of characters. Specifically, it can be configured by a combination of ¾ ^ and characters that have no particular meaning. Credit number ^! It can also be configured to include information necessary to make a payment, such as your account number and name. In addition, it can be configured to include a delivery server 3 _X and an oral login ID and password given in advance due to distribution difficulties. This authentication key IJ is referred to when authenticating and certifying to the distribution server 3 X. The storage unit 13 stores the address of the distribution server 3X. This address is, for example, an IP address, etc., and is information necessary for specifying the weekly destination of data when the transmission unit 14 sends data to the distribution server 3 X. The specific configuration of this address may be used as long as communication between the language device 1 and the distribution server 3 X can be performed.

Such an authentication authentication address and an address are given by installing an application including authentication msij child address data in the terminal device so that the terminal device operates as a speech device 1 by this application. It may be configured. Also, authentication The lj child address may be given by notifying the user of the transmitting device 1 or the ¾ίword device 1 itself from H that distributes the content. Above: ^ is the user power S

^^ It may be configured so that the authentication identifier ij child address stored in the storage unit 13 can be updated by a notification from the content distribution H or the like.

In addition, when the heel device 1 is configured using a portable device, a unique number assigned in advance to the portable device may be used as an authentication key IJ. Similarly, it may be used as an individual ffgij child power s identifier given in advance to the terminal devices constituting the language device 1. Such a storage unit 13 can use a storage device such as a random access memory (RAM), a read only memory (ROM), or a hard disk.

The message 151 4 tells the distribution server 3 X the information received from the control unit 12 via the network N 1. The dissatisfaction that is adopted for the reason 1 4 is connected to the network Ν 1 is not particularly limited. For example, Words 1 4 is nothing! It may be configured to send information to network N 1 by communication, or may be configured to send information to network Ν 1 by sewing signal. The word part 14 is configured according to the adoption adopted to connect to the network N 1. For example, when the message device 1 is configured using a portable fg machine, the conference function provided in advance in the portable g machine can be applied as a week t¾ l 4. In addition, the telephony device 1 is configured using a PDA, a portable game machine, a car navigation system, etc. # ^ is to apply this network interface as ¾ί 言咅 151 4 by installing the network interface. Can do.

Communication device>

The receiving device 2 X is a device that includes an input unit 2 1, a second transmission unit 2 2, an output unit 2 3, a storage unit 24, and a control unit 25 X. Receiving apparatus 2 _chi is constructed using information Shocho置. In other words, the receiving device 2X, including a storage device connected via a bus and an arithmetic device communication control device, operates according to the program by running the program stored in the storage device in the arithmetic device. Specifically, personal computers, set-top boxes, digital home appliances (digital image recording (hard disk recorders, DVD recordings) Device, B 1 u-ray Disc (registered trademark), etc.), digital video camera, digital still camera, digital TV, cooling connected to network, microwave connected to network, The receiver 2 X can be configured using a device equipped with information processing capability and Si capability such as a vending machine connected to a network. Next, each functional unit included in the receiving device 2 _X will be described.

The input unit 21 is a functional unit used to select or input content desired by the user S and cause the output unit 23 to output an authentication code related to the content. The input unit 21 is configured using existing input devices (buttons, keyboard, jog diamond, mouse, touch panel, tablet, voice input device, remote controller, etc.). For example, a list of selectable contents may be selected in the output unit 23, and the user may select it through the input unit 21. In addition, for example, the user may input the name of the content printed on the liver or the like (the same as the content-like IJ child or different IJ child) via the input unit 21. Even if configured, it is good. Information input via the input unit 21 is passed to the control unit 25 X.

The communication unit 2 2 transmits data to the distribution server 3 X via the network N 2. The killing part 2 2 power S network N 2 is not particularly limited as the sickle used to be connected to N 2. For example, the slaughter 2 2 may be configured to connect to the network N 2 by non-authentication, or may be configured to connect to the network 2 by ¾ authentication. The communication unit 22 is configured according to the technology employed to connect to the network 2. For example, the communication unit 22 is configured using a dedicated line or an interface for connecting to an external network such as ADSL (Asymmetric Digital Subscriber Line) or FTTH (Fiber lb The Home).

The output unit 23 controls the output of the image voice according to the instruction of the control unit 25 _X. The output unit 2 3 gives an output instruction to the output device connected to the receiving device 2 X. The output device may be provided in the receiving device 2 X. Output devices include CRT displays (Cathode Eay Tube displays), liquid crystal displays, organic EL displays, and other image output devices, An audio output device such as a speaker.

When the control unit 25 _X is instructed to output the authentication code, the output unit 23 3 causes the output device to output the instructed authentication code by image or sound. In addition, the output unit 23 is instructed to output the content data from the control unit 25 X; ^ causes the output device to output the screen copy / sound of the instructed content data. The output device that outputs the authentication code and the output device that outputs the content data may be the same output device or different output devices. For example, the authentication code is the former when the image output device of / J is installed in the power receiving device 2 X, and an image output device of a general size is connected to the receiving device 2 X for further animation. The image output device may be configured to output the moving image content to the latter image output device. Further, for example, the authentication code and the first image content may be configured such that the image output device provided in the receiving device 2 X is output to only one of the displacement forces of the connected image output device.

The storage unit 24 stores the device 豳 IJ child given to each receiving device 2 X. The device 3IJ child is information that uniquely indicates each receiving device 2X included in the content distribution system 100X. A device HSU child is represented by a combination of numbers (which can be represented in any way, such as binary or decimal), or a combination of characters. The device may be configured such that the device is provided by being installed in an application terminal S device including the device identifier IJ, and this terminal device is activated as the receiving device 2 X by the application. . Further, the device lj element may be provided by notifying the user of the receiving device 2 X or the receiving device 2 X itself from H that performs content distribution.

In addition, the storage unit 24 may store information related to the content fiSU child indicating each content and the content. The content Tsuruko is information that uniquely indicates each content related to the content communication system 1 0 0 X. Content figij children are also represented by a combination of characters and characters. Information related to content is information that is referred to when a user selects content, and includes, for example, information about the name and content of each content.

Information on IJ child and content can be obtained, for example, as follows: To be granted. Information related to each content and its contents IJ child and force S are recorded on the recording medium (CD-ROM, DVD-ROM, etc.), and the information power S receiver 2 X Read-out device not shown May be read out by the storage unit 24 and provided to the storage unit 24. In addition, the information stored in the storage unit 24 may be updated by giving information on the content, content adjustment IJ, and power S from the distribution server 3 X or another management server. The storage unit 24 does not store information related to content and content in advance, but can be acquired from other devices (for example, ® server 3 X) via the killing unit 2 2 via the network as necessary. It may be configured to. At this time, a device identifier may be further acquired together with the content identifier. The storage unit 24 is configured using a storage device such as a RAM, a ROM, or a hard disk.

The control unit 25 _X reads from the storage unit 24 the content corresponding to the device mglj child of its own device and the content selected via the input unit 21. The control unit 25 X generates an authentication code including the two read identifiers and instructs the output unit 23 to output the authentication code. The authentication code is' | f¾ including at least the device identifier and the content identifier, and is encrypted by performing processing such as encryption on these pieces of information. Specifically, the authentication code can be a combination of 醉 or alphabet, per-code (a general per-code or other forms of barcode such as two-dimensional per-code), voice, etc. It is constituted by. Note that the control unit 25 X force S may be configured to generate one authentication code including a plurality of selected content identifiers when a plurality of contents are selected by the user. good.

In addition, after outputting the authentication code, the control unit 25 X makes an inquiry to the distribution server 3 x via the transmission / reception unit 22 about distribution of the selected content data. For example, the control unit 25 X makes an inquiry by telling the distribution server 3 X of its own address and its device ItSlj child. This address is, for example, an IP address, which is necessary for specifying the destination of the data when the data is transmitted via the distribution server 3 X power S network N 2. The specific configuration of this address is the communication between the distribution server 3 X and the receiving device 2 X. As long as the above can be realized, any technique may be used. In order to make such an inquiry difficult, the address of the distribution server 3 X may be stored in a storage device (not shown). This inquiry may be regular or irregular. By making this inquiry, the distribution server 3 X can easily specify the address of the receiving device 2 X as the distribution destination.

The control unit 25 X instructs the output unit 23 to output the content data when the content data is received by the own device via the communication unit 22. The control unit 25 X is selected by a productaluca S computing device stored in advance in the receiving device 2 X.

The self-trust server 3 X is a device including a communication part 3 1, an authentication information storage unit 3 2, a content storage unit 3 3, and a control unit 3 4 X. The distribution server 3 X is configured with an information processing unit. In other words, the distribution server 3 X includes a storage device, a computing device, and a communication control device connected via a node, and processes the program stored in the storage device in the computing device according to the program. Move. Specifically, the distribution server 3 X can be configured using an information processing device such as a personal computer or a workstation or a cluster machine. Next, each functional unit included in the distribution server 3 X will be described.

The slaughter 133 1 receives data from the speech device 1 via the network N 1, and the control unit 3 4 XH i receives this data, and the communication unit 3 1 receives the data from the reception device 2 via the network N 2. Communication. The technology adopted for connecting to the killing department 3 1 power network N 1 and the network N 2 is not particularly limited. For example, the communication unit 3 1 may be configured to be connected to the network N 1 or the network N 2 by non-uniform communication, or may be configured to be connected to the network N 1 or the network N 2 by wired communication. May be. Class 153 1 is configured using a network interface corresponding to the technology employed to connect to network N 1 and network N 2. At this time, the communication unit 3 1 can be configured using a network interface corresponding to the network N 1 and a network interface corresponding to the network N 2, and if possible, one The network interface may be used.

The authentication information storage unit 3 2 stores information necessary for authentication using the authentication ItSiJ child received from each difficult device 111. The authentication information storage unit 3 2 includes a RAM, a ROM, It is configured using a storage device such as a hard disk, etc. The specific stored contents of the authentication information storage unit 32 are determined according to the design contents of the authentication method ^ content delivery system 100 X. 2, 3, and 4 are diagrams showing examples of specific storage contents of the authentication information storage unit 3 2. Hereinafter, the storage contents of the authentication information storage unit 3 2 will be described with reference to FIGS. A specific example will be described.

For example, authentication may be performed, or authentication may be configured (see Fig. 2 (a)). This is because it is determined that the authentication identifier stored in the authentication information storage unit 32 can be authenticated. In Fig. 2 (a), ^ is an authentication mystery, IJ children A, B, and D are authenticated, but authentication 1 child C is stored in authentication 'storage unit 3 2! / Nanare, not certified for! /.

Further, it may be configured so that an authenticator and a content child are associated with each other.

(See Figure 2 (b)). This \ \ authentication information description 133 2 is the authentication device corresponding to the authentication H¾IJ child.

The content child of the content that can be used by the user 1 is stored in correspondence with the authentication identifier. In FIG. 2 (b), the age of authentication 黼 IJ child A is authenticated for content 醐 IJ children 1, 3 'and 4, but not for content ϋ¾υ child 2. However, this correspondence relationship may be reversed, that is, the content, content content, and child that cannot be used by the user of the device 1 corresponding to the authentication f SU child are stored in association with the authentication ϋ @ υ child. It may be configured. Further, the authentication ϋ¾υ child, the content ij child, and the authentication possible state may be stored in association with each other (FIG. 2 (c-1), FIG. 3 (c-2), (c 1 3 ) And Fig. 4 (d)). The authenticable status is' | f¾ which indicates whether or not the corresponding authentication identifier can be authenticated. Even if the authentication identifier is stored in the authentication information storage unit 32, it cannot be proved unless the corresponding authentication status indicates “authentication possible”. On the other hand, if the authentication possible status indicates “authentication possible”, authentication is performed according to the relationship between the authentication mgij child and the content authentication. Such an authenticable situation may be associated with the authenticator by saving the content mystery IJ child (see Fig. 4 (e)). Specific examples of such authentication allowance status include shell Λ for each content, 禾 IJ restriction frame for each content, use restriction frame for each user, and whether or not each content can be purchased. Each specific example will be described below.

The authentication status is the shell entry history of each content. This means that the authentication status corresponding to the received content ligij child (m ^ MM) is already purchased by the user corresponding to the received authentication fi¾ij child. ^ Indicates that it is “authenticated”. In this case, there is a one-to-one correspondence between the content status and the authenticable status (see Fig. 2 (c-1)). In Fig. 2 (c-1), the combination of the authentication ligij child A and the content HSIJ child 3 is not authenticated for the combination of the authentication ϋ ^ child A and the content IJ children 1 and 4. In addition, the combination of the authentication key A and the content key IJ 2 is not authenticated.

Authenticated status is the usage restriction frame for each content. The authenticable status corresponding to the received content IJ element (禾 u restriction frame) ι and the user corresponding to the received authentication identifier To indicate that the number of usage times is within the limits, see “Liquor 3 (c-2)” indicating “authentication is possible”). Figure 3 (c-2) shows an example where the usage limit frame as the authentication possible status shows “number of uses”. The combination of this ^ \ authentication element A and container H¾IJ elements 1 and 4 is authenticated. The combination of fglj element A and content element 3 and 3 is not authenticated. Also, the combination of authenticator 子 and content fi¾lj child 2 is not certified. In such an authenticable state, if the number of times of use changes as content delivery is performed after authentication, for example, the control unit 34 X will gf. Authenticable status is the usage restriction frame for each user; ^ indicates the authentication possible status (usage restriction frame) corresponding to the received authentication 仔 I child. If the number of times used for ^^ is within the limits, it indicates “authenticated” (Fig. 4).

(See (d)). Fig. 4 (d) shows an example of 1 "^ where the authentication possible status is the usage restriction frame for each user and the usage restriction frame as the authentication possible status indicates" number of times of use ". For A, 30 more authentications are required for content style IJs 1, 3, and 4. On the other hand, for authentication B, authentication is required even for content itgij 1 and 4 As However, since the number of uses as the authentication possible status is “0”, it is not authenticated.

Authenticable status S The information indicating whether or not each content can be purchased is based on whether the purchase availability information corresponding to the received content I child is the balance of the user's account corresponding to the received authentication child. 1 "^ indicates that the product can be purchased according to the balance of points and points, etc., and indicates that it can be authenticated (see Fig. 3 (c-3)). This purchase permission / inhibition information is determined by the control unit 34 X according to the amount of each user, the balance of points, the amount of money required to deliver each content, and the points. Each user's point balance increases as the user obtains a point. For example, a point can be derived by purchasing a point in a point purchase system (not shown). In addition, for example, points can be obtained by purchasing points by purchasing a point at a store window. In addition, it is possible to apply a general point acquisition system such as providing services to specific members and giving points according to the purchase price of products.

In Fig. 3 (c-3), the information power of “Purchase availability” is indicated as the authentication possible status, but information regarding the user's account J¾¾ height and the point balance may be indicated as the authentication possible status. . In addition, the purchase process (settlement process S) will be renewed if it is determined that the authentication status is a blueprint indicating whether or not each content can be added to the shellfish and that the shellfish can be inserted. It is desirable. In addition, it is desirable that the amount and points required for distribution of each content be stored in the content storage unit 33.

In addition, the authentication possible situation may be composed of a plurality of items. For example, the authentication status may be information indicating the usage restriction frame for each content and whether or not the content can be purchased. At this age, first, the usage restriction frame of each content is referred. For those ages whose usage limit is within the limits, authentication is performed without any particular judgment regarding purchase. On the other hand, if it is judged that the usage restriction frame is not within the restriction, that is, it is judged that the usage restriction frame cannot be authenticated, the purchase permission information is referred. In order to be available for purchase, an approval process is performed. The content storage unit 33 stores content data in association with content ij children. The content storage part 3 3 is configured using storage such as RAM, ROM, and hard disk. It is.

The control unit 3 4 _X takes out the device identifier, the content identifier IJ child, and the identification key from the data received from the weekly wording device 1 via the authentication unit 3 1. Next, the control unit 3 4 X determines whether or not authentication is possible based on the extracted information and the information stored in the authentication information storage unit 32. The control unit 3 4 X performs authentication. When ^^ is determined to be able to be read, the content data corresponding to the retrieved content J SiJ child is read out from the content notation 3 3, and the control unit 3 4 x reads out the content The data is sent to the receiving device 2 X corresponding to the device H¾ [j child via the murder section 31. At this time, the address of the receiving device 2 X that becomes the wisteria tip is determined only by the device IJ child. The control unit 3 4 X can speak only by the device, while the device identifier does not know the address ^ ^ For example, the device included in the inquiry sent from the receiver 2 X ϋ¾ 子, address and device received from language device 1 ϋ¾ 子The address of the receiving device 2 X that is the destination of the request may be specified by comparing the ί and the address of the receiving device 2 X. Such processing by the control unit 3 4 X performs the program power stored in the distribution server 3 X in advance. Difficulties are caused by being scrambled by an S arithmetic unit or the like.

[Operation example] '

<Operation of the whole system (example)

FIG. 6 is a flowchart showing an operation example of the content distribution system 100 X according to the present invention. Hereinafter, an operation example of the content distribution system 100 X will be described with reference to FIG. A detailed operation example of each device included in the content distribution system 10 O x will be described later with reference to FIGS.

First, when a desired content is selected using the user power S receiving device 2 X (SO 0 1), the receiving device 2 X outputs an authentication code corresponding to the content (S 0 0 2). .

The user inputs the authentication code output by the receiving device 2 _X to the speaking device 1 (SO 0 3). When the authentication code is input, the weekly wording device 1 adds the information authentication information included in the input authentication code to the distribution server 3 X (SO 04).

Distribution server 3 X receives information from authentication device 1 that is included in the authentication code. Then (SO 05), these mysteries (the power that can be authenticated based on j-child IJ refusal IJ (S 006). The age at which authentication was not performed, that is, the result of recognition ¾B was NG (S007—NG), distribution server 3 X sends the result of the authentication error to receiver 2 X indicated by device U child (SO 08). This ^, receiver device 2 X The result is received (SO 09) and the result is output (SO 12).

On the other hand, authentication has been made, that is, recognition! If the iB ^ result is OK (S007—OK), the self-trust server 3 X sends the content data corresponding to the content to the receiver 2 X pointed to by the device l su child (S010). . The receiving device 2X receives the content data (S011) and outputs this data (S12).

動作 Example of device operation>

Next, an operation example of each device will be described. First, an example of the operation of the speech device 1 will be described with reference to FIG. When the user operates the input unit 11 to input an authentication code (S101), the control unit 12 reads and acquires the authentication fi¾IJ child from the storage unit 13 (S102). Then, the control unit sends the information and authentication tone included in the authentication code to the distribution server 3 X via the ¾f word unit 14 (S 103). '

Next, use Figure 8! An example of the operation of the receiver 2 X will be described. When the user operates the input unit 21 to select content (S201), the control unit 25X reads out and acquires the device control unit and the content tone IJ unit corresponding to the selected content from the storage unit 24. (S202, S203). Next, the control unit 25 X uses the acquired device tone! ”Child and content IJ child! Then, an authentication code is generated and the output unit 23 outputs the authentication code (S204).

Next, when the control unit 25 X receives data from the distribution server 3 X via the communication unit 22, the control unit 25 X performs output according to the data. If the received data is an authentication error result (S20 5—authentication error result), the control unit 25 X causes the output unit 23 to output the received authentication error result (S206). On the other hand, if the received data is content data ^ (S 20 5—content data), the control unit 25 X sends the received content data to the output unit 23. Is output (¾).

Next, an operation example of the distribution server 3 X will be described with reference to FIG. The controller 3 4 X waits until data is received via the classifier 3 1 (S 3 0 1—NO). When the control unit 3 4 X receives data via the transmission / reception unit 3 1 (S 3 0 1—YES), the control unit 3 4 X uses the received data to generate a device! ¾IJ child, content child, authentication f SiJ child are extracted (S 3 0 2). Then, the control unit 3 4 X performs authentication based on the extracted ligij child (S 3 0 3).

The authentication SB result is NG ^ (S 3 0 4— NG), and the control unit 3 4 x sends the authentication error result via the transmission / reception unit 3 1 to the receiving device 2 X corresponding to the device I child. (S 3 0 5). On the other hand, the authentication SB result is OK ^ (S 3 0 4—OK), and the control unit 3 4 X sends the content data corresponding to the content identifier to the receiving device 2 X corresponding to the device ϋ¾ 子. Yes (S 3 0 6) ₀

(Image / Effect)

In the content distribution system 10 0 0 X, when a user wishes to distribute content, the user first selects the desired content using the receiving device 2 X that receives the content. Then, the user inputs the authentication code output by the selection process into the weekly device 1. By these two operations, the user can receive the desired content at the receiving device 2X. Therefore, in the content distribution system 100 X, the user does not need to input important personal information when receiving desired content. For this reason, the receiving device 2 X in the content distribution system 100 X does not need to include an input device or a program for inputting user power S important personal information. As a result, it is possible to apply such devices as input devices and programs, such as obsolete and set-top pox, as a receiver ² X in content distribution systems that require authentication and payment processing. Easy to do.

Further, in a situation where a plurality of persons or unspecified persons use the same receiving device, the content distribution system 100 X has a remarkable effect that has not been achieved in the past. In other words, when multiple people or an unspecified number of people use the same receiving device, personal information is input to the receiving device. This entails the risk of stealing important personal information. Specifically, there is a possibility that a malicious user may install a malicious program or the like that records the input content in the receiving device, or the input content power S may remain in the browser. Such dangers can occur in receivers installed in Internet cuffs, jobs, and reports. On the other hand, in the content distribution system 1 0 0 X, even if the receiving device 2 X is in such a situation, the authentication / settlement is performed without inputting M¾personal happiness β to the receiving device 2 X. Since the necessary content can be received, the above-mentioned danger does not occur.

In the content distribution system 10 O x, the authentication / settlement process is performed without depending on the receiving device 2 X. In other words, in the content distribution system 100 X, the M certificate-settlement process is performed depending on the language device 1. For this reason, the user can receive the same content using a plurality of different receiving devices 2 _X : ^, and can receive the messages with a simple procedure without being aware of the difference between the receiving devices 2 X. In particular, it is effective for the ^^ system that allows the same user to receive the content data any number of times after purchase. Specifically, for example, it is possible to easily receive the content purchased by the receiving device 2 X at home using another receiving device 2 X such as a friend's house. · '

[Modification]

Hereinafter, modified examples of the content distribution system 100 X will be described.

The word device 1 can murder data from the distribution server 3 X via the network N 1. ^: The ¾ί word part 1 4 may be configured as a trust part! / ヽ.

In addition, the receiving device 2 X may be configured to further include a download data storage unit 26 that stores the content data distributed from the distribution server 3 X. Figure 10 shows the system configuration of the content distribution system 10 0 X when the receiving device 2 X is configured in this way.

It is a figure which shows the example of (content delivery system 1 0 0 a). In this case, the control unit 25 X causes the content data received via the ^ ¾ notification unit 22 2 to be output without being output to the output unit 23 or to be stored in the download data storage unit 26. Also good. Such a download data storage unit 26 has a memory (CD-ROM, DVD-ROM, semiconductor, etc.). Use a device such as a hard disk or other device that writes data to a remote device.

In addition, after outputting the authentication code, the control unit 25 X of the receiving device 2 a does not make an inquiry to the distribution server 3 a and sends the content data or the result of the authentication error from the distribution server 3 a. You may wait to come. -In addition, the control unit 25 X of the receiving device 2a may be configured to output the authentication error result under different conditions instead of the condition of whether the distribution server 3a can receive the authentication error result. good. Specifically, it is configured to output the authentication error result after a predetermined time has elapsed after the authentication code is output, or after a predetermined number of times the server 3a has been queried and matched. Also good.

In addition, it is desirable that the authentication status is whether or not each content can be purchased ^ 1 so that payment processing can be performed together. For example, the authentication information storage unit 32 is configured to further describe information (for example, a credit card number, a debit account number, etc.) for making a payment in association with the authentication authentication splint. The control unit 3 4 X may be configured to make the settlement process difficult according to the information. In addition, for example, a payment server for payment is provided in addition to the distribution server 3a. The payment server is connected to the distribution server 3a so as to be communicable. Further, the payment server performs payment in association with the authentication IJ child. It may be configured to store '[f¾ to do. The control unit 3 4 _X of the distribution server 3 a can use the authentication identifier IJ for the authentication after determining that “authentication is possible” to the settlement server and request settlement. In the same way, set up a payment server ^ 1 In this case, 帘! 1 Goto 3 4 X does not determine whether it can authenticate alone, ^^ It may be configured such that after the request is made and the result of the settlement server is notified of the result of the settlement, whether or not the authentication is permitted is determined according to the contents of the notification.

The receiving device 2 a is not a portable device, but can be attached to the device, for example, a vehicle (a light vehicle, a motorcycle, an automobile, etc.) must have an information processing device ^! May be configured. W 200

26

Further, the control unit 25 of the receiving device 2a may be configured to generate an authentication code that does not include a content identifier as follows. First, the control unit 25 5 X sends the content content U (one or more) of the selected content to the distribution server 3 & ¾ (this age, distribution server control unit 3 4 X Gives a request key IJ to the received content key, associates them with each other and stores them in a not-shown memory, and returns this response to the receiving device 2a. It is desirable that the control unit 3 4 X is configured to give one dependency to the plurality of content I¾IJ children. The control unit 2 5 _X of a generates an authentication code including the received translation IJ child and device-like IJ child, and outputs this authentication code. Especially when the content is selected, the authentication code will increase. In addition, the control unit 1 2 of the wording device 1 configured as described above may read the data from the authentication code and send it to the distribution server 3a as necessary. It is configured to read out the authorization code instead of the mglj child and send it to the distribution server 3 a ¾ The control unit 3 4 of the distribution server 3 a X is configured to read the content identifier corresponding to the ^ Wl SU child and 'process according to this content child.

In addition, the content self-trust system according to the present invention may be configured as follows. FIG. 11 is a diagram showing an example of a system configuration of (^ content delivery system 1 0 0 b) in which a settlement server is provided in the content distribution system 1 0 0 X. This control of ^ \ delivery server 3b 153 4b calculates the user's payment amount based on the received content ϋ @ Ι ”child. This payment amount and amount are, for example, to add a tax to the total amount of the fee for each content corresponding to the received content (desired to be stored in the content storage unit 3 3 b! /,). Therefore, it can be calculated. The control unit 3 4 b tells the payment server 4 via the communication unit 3 1 and the network N 3 information necessary for payment (including authentication figlj child payment). This “information required for payment” includes the credit card number ^ ³ , the password required for payment, and the payment code required for payment (for example, a printed parcode). May be configured so that the payment code to be entered can be entered by, for example. These “information necessary for settlement” may be configured to be input each time the user operates the language device 1 or stored in advance in the language device 1 and automatically spoken. It may be configured to be.

When the information necessary for the settlement is received, the settlement unit 4 2 settles the payment amount in the received user account of the authentication key U. Then, the settlement unit 42 sends the settlement result to the distribution server 3b weekly via the killing unit 41 and the network N3. The control unit 3 4 b of the distribution server 3 b determines that the authentication possible status is “authenticable” if the settlement result indicates completion of the settlement. The storage unit 4 3 of the settlement server 4 stores information on each user's account. However, the storage unit 4 3 may store information stored in each user, not account information, and the payment server 4 may be configured to make a payment based on information at a predetermined timing! . For example, the authentication 黼 I child may be configured using the mobile device's fixed msu child, and the content ^^ may be configured to be settled every month as a communication (m ^ 'as communication). In addition, by providing the settlement server 4 in addition to the distribution server 3b, there is an effect that it is not necessary to manage important personal information required for settlement in the S server 3b. In order to realize this effect, the authentication information storage department can be configured not to memorize important personal information.

In addition, such settlement can be difficult as follows. When the payment unit 4 2 of the payment server 4 receives the information necessary for the payment via the ¾g communication unit 41 and the network N 3, the payment unit 4 2 gives the decision information to the ¾ί language device 1 corresponding to the authentication liSU child. . This message may be sent via the distribution server 3b via the networks Ν3 and Ν1, or a network (not shown) that connects the settlement server 4 and the slang device 1 to be communicable. May be done through. Then, the transmission device 1 gives an acceptance instruction in the decision information; the settlement server 4 settles the settlement. This settlement information is output by the output unit (not shown) of the speech device 1 so as to be recognized by the user S (for example, it is output to f® as an S image or character, or a voice is output), and the input unit 1 1 can be configured to input an acceptance instruction. As a specific example, There is a configuration example in which an email including a link (such as URL) of a predetermined site is stated as the settlement information, and the device 1 is made to the understanding instruction S settlement server 4 by selecting this link.

In addition, before the content power S is selected by the user (before the processing of SO 0 1 in FIG. 6), the receiving device 2 X accesses the other device such as the distribution server 3 X each time, thereby causing contention. ! It may be configured to acquire glj children and device HSU children. This processing may be performed when receiving web-related data such as HTML data including information related to distributable content from the distribution server 3 X or the like by a protocol such as HTTP. In this ^, receiving device 2 X, the contents 豳 IJ child and device 黼 child are not stored in a storage device such as a memory disk, but in a memory (this operates as this memory power storage unit 24). It may be temporarily stored. With this configuration, it is not necessary for the receiving device 2 X to store the content recognition I pup g Si pup in advance. Also, # ^ configured as described above for the receiving device 2 X needs to be configured in correspondence with the distribution server 3 X. In other words, the server 3 X receives the web data such as HTML data from the receiving device 2 X, and sends the content fiSiJ child corresponding to the web to the HTML data etc. (Or embedded in HTML data) Thanks to the receiving device 2 X. In addition, the distribution server 3 X assigns a device “J” to the receiving device 2 X, stores the assigned contents, and tells the receiving device 2 X the device-like IJ child. With this configuration, the receiver 2 X! / No need to memorize the content HSU child. This eliminates the need to download content identifiers regularly and pre-install content msu children. Furthermore, it is always easy to notify the receiving device 2 X of the content of t f: the distribution server 3 X force. Also, since the device does not need to be connected to the receiving device 2 X, security can be maintained. In addition, if the distribution server 3 X is configured to generate a device-like 1 device each time, a different device gf ^ child will be assigned to the same receiving device 2 X each time. Can be maintained.

[Second difficult form] 〔System configuration〕

FIG. 12 shows the system configuration of the content distribution system 1 0 0 y which is the second embodiment of the content distribution system according to the present invention! FIG. The content authentication system 1 0 0 y includes a speech device 1, a reception device 2 y, and an S communication server 3 y. A plurality of speech devices 1 and receiving devices 2 y are included in one content distribution system 1 0 0 y. Further, a plurality of distribution servers 3 y may be included in one content authentication system 100 y. In the content distribution system 1 0 0 y, the language device 1 and the distribution server 3 y are connected to each other via a network N 1. In addition, the receiving device 2 y and the self-signed Sano 3 y are connected to each other via the network N 2. At this time, N 1 and N 2 may have different network configurations. Hereinafter, each device included in the content distribution system 100 0 y will be described. The streaming device 1 included in the content distribution system 1 0 0 y is configured in the same manner as the speech device 1 included in the content distribution system 1 0 O x and operates in the same manner. For this reason, description of the transmitter 1 is omitted here.

The reception device 2 y is a device including an input unit 2 1, an i¾ transmission unit 2 2, an output unit 2 3, a storage unit 24, and a control unit 25 y. The receiver 2 y is configured using an information processing unit. That is, the receiving device 2 _y includes a storage device connected via a bus, an arithmetic device, and a communication control device, and operates in accordance with the program by processing the program stored in the w − device in the arithmetic device. . Specifically, personal computers, set top boxes, digital appliances (digital recorder images (hard disk recorders, DVD recorders, B 1 u-ray Disc (registered trademark) recorders, etc.), Digital video cameras, digital still cameras, digital TVs, refrigerators connected to a network, microwave ovens connected to a network, digital miscellaneous machines, etc.) and vending machines connected to a network Use a device with the ability to communicate! /, You can configure the word device 2 y. Next, each functional unit included in the receiving device 2 y will be described. Receiver 2 y W 200

30

The input unit 21, the transmission unit 2 2, the output unit 2 3, and the B ′ 隱 unit 24 are included in the same manner as the functional units included in the receiving device 2 x. For this reason, description of the input unit 21, the ^ transmission unit 2 2, the output unit 2 3, and the storage unit 24 is omitted here.

The control unit 25 y reads from the storage unit 24 the content IJ child corresponding to the content selected via the device 1 child of the own device and the input unit 21. The control unit 152 5 y generates authentication code generation information including the two read-out keys. The authentication code information is information that includes at least the device and the content IJ child. The authentication code information can be generated by general-purpose processing without special software. For example, the device identifier and content! Su child may be handled as a simple set of information without any processing (this ^^ does not require the processing of “generation” in particular). Further, the authentication code generation information may be generated by encrypting the data of the mmn child and the content child. Then, the control unit 25 y instructs the communication unit 22 to speak the authentication code generation information to the distribution server 3 y weekly.

In addition, the control unit 25 y waits to receive the authentication code from the distribution server 3 y after informing the authentication code generation “隨”. When the control unit 25 y receives the authentication code force S via the drum unit 22, the control unit 25 y causes the output unit 23 to output the received authentication code. After outputting the authentication code to the output unit 23, the control unit 25 y makes an inquiry to the distribution server 3 y via the communication unit 22 about distribution of the selected content data. For example, the control unit 25 y makes an inquiry by telling the distribution server 3 y of the address of its own device + the device address of its own device. This address is, for example, an IP address, and is information necessary for specifying a destination when the distribution server 3 y proclaims data via the network N 2. The specific configuration of this address may be realized using any »ϊ as long as communication between the distribution server 3 y and the receiving device 2 y can be realized. In order to make such an inquiry, the address of the distribution server 3 y may be stored in a storage device (not shown). This inquiry may be either intentional or irrelevant. By executing this inquiry, the distribution sano 3 y easily identifies the address of the receiving device 2 y that is the distribution destination. It becomes possible.

When the content data is received by the own device via the recording / reception unit 22, the control unit 25 y instructs the output unit 23 to output the content data. The control unit 25 y is realized by a program stored in the reception device 2 y in advance by an arithmetic device or the like.

籠 Server>

The self-trust server 3 y is a device including a killing section 3 1, an authentication information storage section 3 2, a content storage section 3 3 and a control section 3 4 y. The distribution server 3 y is configured using an information processing device. In other words, the distribution server 3 y includes a storage device, an arithmetic device, and a communication control device connected via a path. The distribution server 3 y operates according to the program by processing the program stored in the storage device at the t¾ device. Yes. Specifically, the distribution server 3 y can be configured using an information processing device such as a personal computer, a workstation, or a cluster machine. Next, each functional unit included in the distribution server 3 y Note that the ¾¾ftf | 33 1 included in the distribution server 3 y, the authentication memory mode 3 2 and the content notation 3 3 are configured in the same manner as the functional units included in the distribution server 3 y. Therefore, the description of ¾¾ί1¾ 3 Γ, authentication information storage unit 3 2 and content fS † B 3 3 is omitted here.

When the control unit 34 y receives the authentication code generation information from the receiving device 2 y via the killing unit 31, the control unit 34 y generates an authentication code based on the authentication code information. Contents of the authentication code The ^^ method of the authentication code is the same as in the first embodiment, except for the difference in whether the distribution server 3 y generated by the receiving device 2 X generates. The control unit 34 y instructs the communication unit 31 to transmit the generated authentication code to the receiving device 2 y that is the origin of the authentication code generation information.

In addition, when the control unit 3 4 y receives the difficult device 1 force authentication code via the avoidance unit 31, the control unit 3 4 y extracts the device-like device and the content URL from the received authentication code. Next, the control unit 34 y determines whether or not authentication is possible based on the extracted information and the information stored in the authentication information storage unit 32. When the control unit 3 4 y determines that the authentication can be performed, the content data corresponding to the retrieved content child is stored in the content. Read from storage unit 33. Then, the control unit 34 y passes the read content data to the receiving device 2 _y corresponding to the device I child via the killing unit 31. At this time, if the address of the receiving device 2 y that is a difficult destination can be specified only by the device lj element, the control unit 34 y performs transmission using only the device identifier. On the other hand, if the address is not known only by the device identifier, for example, the device identifier 1 included in the inquiry sent from the receiving device ² y is compared with the device received from the language device 1. Thus, the address of the receiving device 2 y as the destination may be specified. Such processing by the control unit 34 y is performed by pruning by a program force calculation device or the like stored in advance in the distribution server 3 y.

[Operation example]

FIGS. 13 and 14 are flowcharts showing an example of the operation of the content self-confidence system 100 0 y according to the present invention. Hereinafter, an example of the operation of the content distribution system 10 Oy will be described with reference to FIGS. A detailed operation example of each device included in the content distribution system 100 y will be described later with reference to FIGS. Note that the same operation as that of the content speech system 10 O x (^ is shown in FIGS. 13 to 16 and the same reference numerals as in FIGS. .

First, when a desired content is selected using the user-power receiving device 2 y (SO 0 1), the receiving device 2 y ^^ generates authentication code generation information corresponding to the content, and sends it to the distribution server 3 y. Apologize (SO 0 1— 2). Upon receiving the authentication code generation information from the receiving device 2 y (S 0 0 1-3), the self-trust server 3 y receives the information contained in the authentication code generation information (device-like lj child and content SU child) An authentication code is generated based on (S 0 0 1—4). Then, the delivery server 3 y transmits the generated authentication code to the receiving device 2 y that is the weekly origin of the authentication code generation information (S 0 0 1-5). When receiving device 2 y receives the authentication code from distribution server 3 y,

(S 0 0 1-6), the received authentication code is output (S 0 0 2). Hereinafter, the distribution system 1 0 0 y performs the operations of S 0 0 3 to S 0 1 2 similarly to the distribution system 1 0 0 X. <Operation example of receiver>

Next, an operation example of the receiving device 2 y will be described with reference to FIG. When the user selects content by operating the input unit 21 (S201), the control unit 25y reads out and acquires the device and the content fi @ l corresponding to the selected content from the storage unit 24. (S 202, S 203). Next, the control unit 25 y uses the acquired device f ¾U child and content lj child to generate authentication code generation information, and causes the communication unit 22 to generate authentication code generation information (S 203— 2). This authentication code generation information is sent to the distribution server 3 y. Thereafter, the control unit 25 y receives an authentication code from the distribution server 3 y via the communication unit 22 (S 203-3). Then, the receiving device 2 y performs the operations of S204 to S207 in the same manner as the receiving device 2x.

動作 Server operation example>

Next, an operation example of the distribution server 3 y will be described with reference to FIG. Note that the operation of the authentication server 3 X shown in FIG. 9 is performed in the same manner by the distribution server 3 y in addition to the operation shown in FIG.酉信信 Sano 3 芾御 IJ 部 34 y receives the authentication code generation information from the receiver 2 y force through the credential 31 (S 401 -YE S), the authentication code An authentication code is generated based on the information (device identifier and content identifier) included in the generated information (S402). Then, the control unit 34 y tells the reception device 2 y of the generated authentication code via the ¾¾y statement unit 31.

(S403) o

[Action / Effect]

The content self-trust system 100 y can obtain the same benefits and effects as the content self-trust system 100 X. Furthermore, in the content distribution system 100 y, the authentication code is robbed by the distribution server 3 y, so that the receiving device 2 y does not need to generate an authentication code. In other words, the receiving device 2 y is good to say the authentication code generation information to the distribution server 3 y by a general-purpose program or protocol (for example, a protocol such as HTTP (Hyper Ifext Transfer Protocol)). Therefore, it is not necessary to install a dedicated program for receiving the authentication code on the receiver 2 y! / ヽ. Specific effects include general The browser can realize the operation of the receiving device 2 y, and it is not necessary to activate the dedicated application or the like in the receiving device 2 y. For this reason, for example, when a user selects content, the content selection is sent from the distribution server 3 y to the receiving device 2 y, and the content selection screen is displayed on the general-purpose browser of the receiving device 2 y. It is possible to display the authentication code on the display without launching other dedicated applications. Therefore, it becomes easy for the set f ³ luck, such as content selection noodles.

[Modification]

Next, a modified example of the distribution system 100 0 y will be described. Note that the modification example of the distribution system 1 0 0 X may be applied if applicable to the distribution system 1 0 0 y.

Distribution server 3 y generates an authentication code and a distribution device that performs the same operation as distribution server 3 _X (that is, a device that performs the operation shown in FIG. 9 but does not perform the operation shown in FIG. 16). It may be configured separately from the generation device (that is, the device that does not perform the operation shown in FIG. 9 but performs the operation shown in FIG. 16). In this case, the receiving device 2 y selects the generating device as the ¾f destination of the authentication code ^ ^ information, and selects the 酉ィ device as the destination of the ¾ί language device 1 S authentication code and authentication l su child. It may be configured.

In addition, based on the data transmitted from the receiving device 2 y or the speech device 1, the data is sent to either the distribution device or the device, and the data is divided by dividing the IJ! · Yes. In this case, the speech device 1 and the reception device 2 y select the distribution device as the data destination. In addition, the distribution device may select the destination of data depending on whether the received data is the S language device 1 or the receiving device 2 y, and the content of the received data is the authentication code. Generated power authentication code and authentication IJ child can select the data transfer destination! /.

Also, if the distribution device X is not the same as the generation device, ¾ (receives data from the word device 1 and the reception device 2 y, and the received device sends the data written to the ftt device to the other device. For example, if the distribution device is configured to receive data from ¾ (the data device 1 and the receiving device 2 y, the self-word device is connected to the receiving device 2 _y. Received authentication code generation information At the age of this authentication code bandit information ^^ needle into the device. In addition, the generating device is configured to receive data from the ¾ί language device 1 and the receiving device 2 y. The ί device has received the authentication code and sa ^ child from the language device 1. This authentication code and proof mystery I puppet is used as a delivery device.

[Other application examples]

In the above description, the case where the technology according to the present invention is applied to a content distribution system is taken as an example. However, the technology according to the present invention can be applied to various systems other than the system for distributing content. Other application examples are described below. In the following description, each application example is described based on the content distribution system 100 X. However, each application example S may be configured based on the content distribution system 100 y. .

FIG. 17 is a diagram illustrating a configuration example of a product purchase system 100 c at an age when the technology according to the present invention is applied to a product purchase system. Hereinafter, the difference between the product purchase system 1 0 0 c and the content distribution system 1 0 0 X will be described. '

In the product purchase system 1 0 0 c, the product IJ child is used instead of the content identifier! For this reason, the product purchase system 1 0 0 c has a receiving device 2 c that handles product liSlJ children, and a settlement server 3 that handles product identifiers and product information, and makes payments for each product! c. Receiving device 2 c is a receiving device in that it is provided with a 'control unit 2 4 c', a control unit 2 5 c instead of a storage unit | 52 4, J control unit 2 5 χ. Different from device 2 X. Storage unit 2 4 c is a Shoguchi ^Β mouth child instead of the content identification 1 pups serial tl "Ru in terms different from the storage section 2 4. The control unit 2 5 c is including the items Choriko and device terminal The control unit 25 X is different from the control unit 25 X in that the authentication code is generated, and the control unit 25 c is different from the control unit 25 X in that the output unit 23 outputs the settlement result instead of the content data. Settlement server 3c includes authentication information storage unit 3 2c, product information storage unit 3 3c, control unit 3 4c, authentication storage unit 3 2, content storage unit 3 3, control unit 3 4 X It is different from the distribution Sano 3 X in that it is prepared in place of the authentication S 3 X. The authentication information storage unit 3 2 c is used to make a payment in association with the authentication f ¾IJ child. The important personal information necessary for storage is stored (see Fig. 5 (f)). The product information storage unit 33c stores information (product information) necessary for the settlement of the product, such as the price of each product and the number of stocks, in association with the product. The controller 3 4 c performs settlement based on the important personal information corresponding to the received authentication key IJ child and the product information corresponding to the received product key IJ child. Then, the settlement result is sent to the receiving device 2 c corresponding to the received device identifier via the communication unit 31.

In this case, the distribution of settled products becomes a problem. For example, the address of the user can be sent to the user receiving device 2c, and the control unit 25c can generate the authentication code including the address of the delivery destination, thereby solving the problem of the self-addressee. In this case, the address of the serving is sent from the client device 1 to the settlement server 3c. The controller 3 4 c outputs this distribution and a list of products to be delivered (may be a list of received product identifiers). After that, the goods are delivered according to the list.

Further, the problem of distribution can be solved by storing the authentication information storage unit 32c associated with the authentication information, for example. In this case, the user needs to record his / her authentication key and arrangement in the authentication information storage unit 32c in advance by using means such as the Internet. The J control unit 34 c reads out the address of the layout corresponding to the received authentication information from the authentication storage unit 32 c and outputs it as a list as described above. Note that the settlement server 4 of the merchandise shell entry system 100 c is connected to the speech device 1 and the receiving device 2 c through a network so that they can communicate with each other. ¾ (Data exchange between the speech device 1 and the receiving device 2 c is performed. It can also be configured as shown in Fig. 11 by separating Sano and the server that performs payment by arranging important personal information.

FIG. 18 is a diagram showing a configuration example of a member site system 100 d in which the technology according to the present invention is applied to a member site authentication system. The member site system 1 0 0 d is a system in which the receiving device 2 d is a web site that can be accessed only by a specific authenticated member. Below, the content distribution system 1 0 0 X and the member site system 1 0.0 d Explain the differences.

In the member site system 1 0 0 d, the site identifier is used instead of the content msu child. Therefore, the member site system 100 d includes a receiving device 2 d that handles site identifiers and an authentication server 3 d that handles site children and site information and authenticates access to each site. The receiving device 2 d is different from the receiving device 2 X in that the receiving unit 2 d and the control unit 25 5 d are provided in place of the recording unit 24 and the control unit 25 X. The memory unit 24 d is different from the memory unit 24 in that it stores the site-like IJ child instead of the content-like IJ child. The control unit 25 5 d is different from the control unit 25 X in that it generates an authentication code including a site identifier and a device. Also, the control unit 25 d is different from the control unit 25 X in that the output unit 23 outputs the accessed Web data instead of the content data.

Authenticator, certificate server '3d, authentication' clear report 'consideration part 3 2d, site individual blueprint' consideration | 33 3d, control part 3 4d, authentication information record consideration part 3 2, It differs from the distribution server 3 X in that it is provided instead of the content storage unit 3 3 and the control unit 3 4 X. The authentication information storage unit 3 2 d is different in that the site mystery U child is stored in association with the authentication HSU child instead of the content transfer IJ child. Can be configured the same. The site information storage unit 3 3 d associates the web data of each site with the site f glj child. f¾¾¾ 3 4 c i, performs authentication based on the received information. Then, the age at which the authentication is performed tells the receiving device 2d corresponding to the received device tone 1 to the receiving device 2d via the communication unit 31 the Web data corresponding to the received site H¾ child.

As a similar system configuration, it may be configured to allow other services such as rich contents instead of the Web site.

<In-house security system>

FIG. 19 is a diagram showing a configuration example of an in-house security system 10 ° e in which the technology according to the present invention is applied to an in-house security system. The in-house security system 10 0 0 e is a system that allows only a specific authenticated employee to use the S personal computer (receiving device 2 e). In the following, the in-house security system 1 0 0 e will be described as different from the content distribution system 1 0 0 X. The in-house security system 1 0 0 e eliminates the need for content-related information. For this reason, in the in-house security system 100 e, the storage unit 2 4 e of the receiving device 2 e need only store the device gl. Further, the authentication server 3 e corresponding to the distribution server 3 X may include the authentication information storage unit 3 2 e as a storage unit. Hereinafter, each device will be described. The input unit 2 1 of the receiving device 2 e is used not to select content but to indicate that the user intends to use the receiving device 2 e. For example, the input unit 21 is configured by using a mouse, a keyboard, etc., and a button display force such as “start use” displayed on the output unit 23 when the mouse button or any button on the keyboard is pressed S is selected. Presence is displayed by actions such as,. When such an intention is displayed, the control unit 25 e reads the device IJ child from the memory unit 24 e force and creates an authentication code including the device member. This authentication code is output via the output unit 23.

In addition, the control unit 25 e does not permit the user to perform a certain operation of the receiving device 2 e until a positive recognition result is obtained from the authentication server 3 e. For example, it may be configured not to allow the operation of a predetermined program, or may be configured not to allow any operation other than the intention display. The contents of this “disallowed operation” are optional. Then, the control unit 25 e receives a positive authorization ¾ & result from the authentication server 3 e (described later). Allow.

The killing unit 3 1 of the authentication server 3 e receives the authentication summary IJ child and the device 醐 U child, and the control unit 3 4 _e makes an authentication decision based on the received information. For example, the authentication information storage unit 3 2 e records a table as shown in FIG. 2 (a): ^ indicates that the control unit 3 4 e has received the authentication information stored in the authentication information storage unit 3 2 Authenticate to stored in e (output a positive recognition result). Further, for example, when the authentication information storage unit 3 2 e stores the authentication key and the device key I in association with each other (in the configuration in which the content identifier in FIG. 2 (b) is replaced with the device identifier), the control The unit 34 e authenticates the received authentication f ¾lj child and device l SlJ child associating power S: ^ (outputs a positive authentication 1 result). The control unit 3 4 e may perform authentication by other methods using an authentication lj child. Then, the control unit 3 4 e sends the authentication result to the communication unit 3 1. W

39

To the receiving device 2 e corresponding to the device connector. In such an in-house security system 100 e, network N 1 or network N 2 may be constructed as a single canary network. In addition, for example, “In-house” is used for convenience: “m” is added to the system name, but it should be understood that this system is not limited to a specific company. In other words, if the system is intended to limit the operation of the receiving device 2e, it is not limited to a specific company, and even if it is used for a larger-scale system via the Internet, it is smaller than via a home LAN. It may be used for a scale system. In addition, such an operation of the receiving device 2 e is proposed by installing a program according to the present invention (for example, this program may be incorporated in an operation program) into a general-purpose information processing device. Also good.

Conventionally, in order to operate a personal computer installed in a company or the like, a security system that requires the user to input an ID or password is generally used. However, since passwords are frequently changed, it is harsh for users to always remember them. In some cases, unauthorized access was made possible by snooping while entering IDs and passwords. In this way, in the in-house security system 100 e, the user only needs to carry the idiom 1 and does not need to write the ID and password, and there is no risk of these being stolen. Further, in the in-house security system 100 e, an authentication code printed on it may be preliminarily placed in the vicinity of the corresponding receiving device 2 e. In this case, the user can input the authentication code to the wording apparatus 1 without operating the input unit 21 at all.

Fig. 20 shows the sickle according to the present invention! It is a diagram showing an example of the configuration of the final security system 1 00 0 f applied to the utility system. The Finore Security System 1 0 0 f is a system that allows users to access each file for which permissions have been set according to their permissions. The following describes the differences between the file security system 1 0 0 f and the content security system 1 0 0 X. In the financial resolution system 1 0 0 f, the fine force S is used instead of the content identifier. For this reason, the Fino M utility system 1 0 0 f has a receiving device 2 f that handles FAI «IJ child and file HSU child and Fino! It has a file server 3 f that handles data and restricts access to each file. The receiving device 2 f is different from the receiving device 2 X in that a storage unit 24 f and a control unit 25 5 f are provided instead of the storage unit 24 and the control unit 25 x. The storage unit 24 f differs from the storage unit 24 in that it stores the file mgij child instead of the content U child. The control unit 25 ί is different from the control unit 25 X in that it generates an authentication code including the final 1 IJ child and the device IJ child. Further, the control unit 25 f is different from the control unit 25 X in that the output unit 23 outputs the data of the file selected by the user instead of the content data. Note that the input unit 21 and output unit 23 are not used for content selection, but for the user to select and operate files that the user wants to browse, overwrite, and chrysanthemum using the receiving device 2f. It is confirmed.

The file server 3 f has an authentication 'information report' consideration part 3 2 f, a password / letter's secret part 3 3 f, a control part 3 4 f, an authentication information verification part 3 2 and a content storage part 3 3 It differs from the distribution server 3 X in that it is provided instead of the control unit 3 4 X. The authentication information storage unit 3 2 f may be configured as shown in FIGS. 2 (a), (b), and FIG. 3 ′ (c− 3) (in this case, the Fino H SU child instead of the content ϋ¾υ child). Is used). Further, the authentication information storage unit 3 2 f may be configured as shown in FIG. In Fig. 5 (g), permissions are stored in association with each finer. "No" and "Mission" indicate what operations the user is allowed to perform on the file corresponding to each file. "r" indicates a reference, "w" indicates an overwrite, and "X" indicates 亍. For example, in the case of Fig. 5 (g), the user with the authentication identifier A can refer to the file of Fino MigiJ child 1 and overwrite 'Overwrite' All power of Kiku 亍 S Allowed force See file of Fino HtSU child 3 ' Overwriting power S is allowed, and no trap is allowed. In addition, the user of authentication | ¾ Liko A is allowed only for the file IJ child 4 file, and for the file / VftS Liko 2 file, any of the "Overwrite" clauses are allowed. Not. In Fig. 5 (g), the permissions are expressed by the alphabetic "r ,,", "w", "x". A number that represents the value in decimal notation, or any other table ^ method. Other definition power S may be adopted as a mission. In other words, the definition of permission content and the definition of expression are arbitrary.

The control unit 3 4 f determines the permission of each file based on the received information. Then, the control unit 34 f reads out the data of the file corresponding to the received file A «IJ child from the file storage unit 33 f, and the receiving device 2 f performs the process according to the user power S permission ^ — Allow the operation of the data.

Conventionally, file server! In order to operate a file with permissions set, it is necessary to enter the user ID and password on the terminal device and enter the system. However, as mentioned in the explanation of the in-house security system 100 e, it is often difficult for the user to always remember the password because it is frequently changed. In addition, unauthorized access could be made possible by snooping while entering an ID or password. On the other hand, in the file security system 100 f, the user only needs to carry the transmission device 1, and there is no need to memorize ID and password, and there is no possibility that these will be seen. '' Industrial applicability

As described above, the system according to the present invention requires user authentication such as a content authentication system, an article purchase system, a member site authentication system, an in-house security system, and a file security system. Suitable for system use.

Claims

The scope of the claims

1. An authentication system including a receiving device, a speech server and a server.

¾ϋ | 3 servers are configured to be able to communicate with each of the ΙίίΙΕ receivers and IB devices,

Input means used to select or enter the desired product;

IRX is selected via the edit input means.The iRX generates an authentication code generating means for generating an authentication code including the product translation ij child corresponding to the inputted product and the device S SiJ child indicating the receiving device. A first output means for outputting the generated authentication code;

Receiving means for receiving data sent from the disgusting server via a network; second output means for outputting data received by the user receiving means;

Including

ΙΒίΙΒ device is

Input means for inputting the self-authentication code output from the receiving device;

l Control means for reading out the authentication information necessary for the user of the ¾ί statement device to be authenticated at the Fujimi server after the ffliB authentication code is input via the self input means,

Say the information included in the entered hate-authentication code to the self-server over the network.

Including

Hate server

A receiving means for receiving the ff # ¾O¾fflE authentication information included in the edit code from the selfish device;

When the information included in the Fujimi authentication code and the dislike authentication information are received from the 装置 ίΐΚ¾ί saying device: ^, the power to authenticate the user corresponding to this authentication 'lf¾.

a means for obtaining tiriffi »data corresponding to the merchandise included in the received authentication code at the age of authentication by the t & f self-authentication means; ^ Tell the obtained tififfi¾i word data to the t & is receiver corresponding to the device msij child included in the received authentication code;

Including the authentication system.

2. The receiver is

-The address information necessary when ttilB server makes data difficult for the receiving device, the merchandise power s selection i X is input via the disgusting input step: ^, corresponding to the receiving device Along with the device identifier, there is a male means to speak to the lift server,

The male means of the self server are the device ij child received from the ff | S¾i word device,

The address information device received from the ¾ί wording means [By comparing with the child J, the address information of the receiving device that should receive the m communication data should be determined.

The authentication system according to claim 1.

3. The ffit self-receiving device includes a product identifier ij child storage means for storing a product identifier associated with each of a plurality of products, and a device for storing a device indicating the receiver ϋ ^ child storage means Further including

The self-administration device further includes authentication information storage means for storing authentication information necessary for authentication in the user power s modesty server of the relevant device.

The tfilB server is associated with each of the decision clear storage means for storing information used to determine whether or not the user corresponding to the received authentication information should be authenticated, and the self-item i gij child. A data storage means for storing the word data; and

The authentication code generation means of the self-receiving device generates an authentication code by reading the merchandise transfer element and the device element from the self-reliant merchandise memory storage unit ¾¾irnis¾g »J child storage means, respectively. The means acquires the authentication information by reading the t & IE authentication information from the tilt self-authentication information storage means,

The authentication means of the difficult server is stored in the received authentication information and the diagnosis it¾ storage means. Based on the information, ffftBW disconnection,

The server control means obtains the speech data by reading out the verbose data corresponding to the product key included in the received authentication code from the t & IB speech data storage means.

The authentication system according to claim 1 or 2. '

4. An authentication system including a receiving device and a dialect server,

The t & t Sano is configured to be able to communicate with each of the tfi!

Human power means for detecting the input when the user inputs an intention display for operating the receiving device;

The dislike input means detected tin self input: ^, an authentication code generation means that obtains a device that points to the receiving device and gives an authentication code including this device identification IJ child;

A first output means for outputting the generated authentication code;

Receiving means for receiving permission data sent from the server through the network, and restricting the user's predetermined operation of the receiving device until the disabling β permission data is received from the editing server, After the Ml self authorization data is received from the tins server,

Including.

Disgusting device

An input means for inputting the ffflB authentication code output from the t & t self-receiving device,

Control means for acquiring authentication information necessary for the user of the male device to authenticate to the tfilB server after the self-authentication code is input via the self-input means;

The information contained in the input Fujimi authentication code and the ift self-authentication information are sent to the disgust server via the network.

Including

The tine server Iff! Receiving means to receive the IB authentication information contained in the dislike authentication code from the self-verification device,

Authenticating means to authenticate the user corresponding to this authentication information upon receipt of the information contained in the I9t self-authentication code from the 情報 ίίΙΕ difficult device

Authenticates permission data indicating that the user is allowed to operate the lUIB receiving device for the device that corresponds to the device extension U included in the received authentication code at the age of authentication by the authentication means. »Means and

Including the authentication system.

5. The self-receiving device further includes device-like I child storing means for storing a device 豳 IJ child indicating the receiving device,

言 s¾i word device further includes authentication information storage means for storing authentication information necessary for the user of the word device to be authenticated at the tiiie server,

The self-service server further includes a determination / acquisition storage unit for storing information used for determining whether or not the user corresponding to the received authentication information should be authenticated.

The authentication code generation means of the hate receiving device acquires the device mystery by reading the device from the predecessor s¾location memory storage means after the self input means detects the self input.

The control means of the self-signing device acquires the authentication information by reading the authentication information from the self-authentication information storage means at the age when the selfish authentication code is input via the self-input means.

The authentication means of the hatred server makes a decision based on the information stored in the received authentication information storage means.

The authentication system according to claim 4.

6. Receiving device ¾¾PI¾ {A server configured to be able to communicate with each of the language devices,

The self-receiving device includes an input unit used by the user to select or input a desired product, and a selection i X through the tfitEA force unit is a product msij child corresponding to the input product and the receiving device The Device to point i sij child authentication code ^^ means to generate an authentication code containing ij child, first output means to output the generated authentication code, and data sent from the thank you server, Receiving means for receiving data via the network, and second output means for outputting the data received by the data receiving means,

The t & lffi ^ wording device has an input means for inputting the ftflB authentication code output from the self-receiving device, and the IS authentication code is input via the self-inputting means, and the user of the corresponding wording device at the server A control means for obtaining authentication information necessary for authentication, an emotion miB authentication information included in the input self-authentication code, and telling the hate server via the network; Including

Receiving means for receiving the information contained in the authentication code and the personal authentication † f from the authentication device,

tfrtffi ^ Authentication means to determine the power to authenticate the user corresponding to this authentication information at the age when the information contained in the t flE authentication code and the self-authentication information are received from the language device,

Control means for acquiring ¾ί data corresponding to the product identifier included in the received authentication code after being authenticated by the self-assurance means;

Say the acquired ffilH¾f word data to the ttrt self-receiving device corresponding to the device m¾i child included in the received authentication code ^ (meaning and

Server containing

7. A receiving device configured to be able to communicate with a server,

The self-serving server is further configured to be able to communicate with the speech device,

The ttrt self server has a receiving means for receiving information from the self-signing device, an authentication means for authenticating a user corresponding to the authentication information when the information is received from the self-notifying device, # Authenticated by tin self-authenticating means # Control means to acquire the data corresponding to the merchandise received on the ^ ^ and the read tiffs ^ word data to the received device ^ ¾u A tilting means for the tilt receiving device corresponding to the child, and The key device is connected to the input means for inputting the authentication code output from the t & IB receiver, and the user of the 言 ί 言 device receives the authentication code when the authentication code is entered via the input device. A control means for obtaining authentication information necessary for authentication in the password, and a means for sending the information included in the entered self-authentication code to the fGIE server via the network, Including

User power s input means used to select or enter the desired product;

The selection code i through the hate input means is a product code corresponding to the input product f ¾iJ child and a device identification U device that points to the receiving device U A first output means for outputting the generated authentication code;

Receiving means for receiving data transmitted from the self-server via the network; and second output means for outputting the data received by the ttrt self-receiving means;

Including receiver

8. User power S The input means to select or input the desired product and the selection i X through the self-input means the product corresponding to the input product ϋ¾ 子 and the device The authentication code that includes the two ftgij children of the device ij child, the authentication code generation means, the first output means for outputting the generated authentication code, and the data sent from the device A receiving means for receiving via the network, a second output means for outputting the data received by the stfiB receiving means, and a first information including:

The user of the device is authenticated at the input means for inputting the Fujimi authentication code output from the first information processing device and the age at which the Fujimi authentication code is input through the editing input means. Control means for obtaining authentication information necessary for the authentication, and information included in the entered self-authentication code and tmt self-authentication † blueprint to the other device via the network. A third information processing device connected to be communicable with a second information processing device including

Receiving means for receiving information included in the tfft self-authentication code ms mffiB authentication information from lift me second information processing, The information contained in the authentication code and the authentication information received from the secondary information processing unit: The power to authenticate the user corresponding to this authentication information.

Control means for acquiring male data corresponding to the product identification U child included in the received authentication code, which has been authenticated by the tfilB authentication means,

Say the obtained tilE message data to the ffft self-first information corresponding to the device translation IJ child included in the received authentication code ^ (saying means,

As a program to make a machine.

9. A program for operating the first information processing unit configured to be communicable with the third information processing unit,

The third information processing unit configured to be further communicable with the second information includes the receiving means for receiving “隨” from the second information processing unit, and the second information processing unit β. 'Itfg is received from # ^ The power to authenticate the user corresponding to the authentication information received in ^, the authentication means to refuse, and the product identifier received by ^ if authenticated by Iff! A control means for obtaining the word data corresponding to the child, and an idiom means for weekly saying the obtained tiifffi ^ word data to the flit self-first information processing corresponding to the received device. ,

The second information processing device is the input means for inputting the authentication code output from the first self-processing device, and the self-authentication code is input via the summary input device. The control means for reading out the authentication information necessary for the user of the device to be authenticated, and the information included in the input authentication code and the authentication information are used as the third information processing location. ¾ί which means to say via the network, and

A first information processing device comprising input means used by a user to select or enter a desired product;

The selection iX through the dislike input means obtains the product transfer ij child corresponding to the input product and the device identifier indicating the device, and generates an authentication code including these two identifiers. Authentication code generation means, The first output means to output the ^^ authentication code,

Receiving means for receiving data transmitted from the third SiflB information processing device via the network,

第二 second output means for outputting the data received by the receiving means;

Program to function as.

1 0. Receiving device, ¾ί disguise »Authentication system including server,

ΙϋΙΒ The server is a ΙίίΙΕ receiver! ¾ ひ肅 ¾ ^ It is configured to be able to communicate with each of the word devices, and the tfilB receiving device

An input means used by the user to select or enter a desired product;

A product that corresponds to the product selected or input through the dislike input means I a child and a device that points to the receiving device iJ child 2 f SiJ children to the ΙΒίΙΒ server

The first receiving means for receiving the authentication code generated according to J child from the lift himself server via the network,

A first output means for outputting the authentication code received by the first disgusting receiving means, a second receiving means for receiving data sent from the ffilB server via the network,

Second output means for outputting data received by the second receiving means for disgusting, and

The disgusting device has an input means for inputting a self-authentication code output from the tilt receiving device,

Control means for acquiring authentication information necessary for the user of the speech device to be authenticated at the self-server when the liriB authentication code is input via the self-input means;

¾ί which means that the information included in the entered tfit self-authentication code and ttiia authentication information are sent to the disgust server via the network;

Including fiflB server

a first receiving means for receiving two tins from a t & iB receiver;

An authentication code means for generating an authentication code including two received mtr children, and a first ¾ί wording means for sending the generated tins authentication code to a tfifs receiver;

a second receiving means for receiving the information included in the self-authentication code and the authentication information from the tfllB language device;

Authentication information included in the key authentication code from the self-authentication device s Authenticating means for refusing the power to authenticate the user corresponding to this authentication information in # ^ received,

Control means for obtaining ¾ί data corresponding to the commodity fsu child included in the received authentication code at the age of authentication by the self-authentication means;

A second means for transmitting the acquired selfishness »data to the tfrt self-receiving device corresponding to the device HSij child included in the received authentication code;

Including an authentication system.

1 1. The selfish receiving device is a product that tefts a product itsij child associated with each of a plurality of products 装置 ¾υ child storage means, a device that points to the receiving device ϋ ^ a device that stores a child u child storage means Further including

The self-signing device further includes authentication information storage means for storing authentication information necessary for the user of the semi-signing device to be authenticated by the humble server,

The tfriB server includes a decision clearing storage means for storing information used to determine the power to authenticate the user corresponding to the received authentication information, and a tde data associated with each t & t product identifier. Further comprising: ¾ί word data storage means for storing

The wording means of the t & t self-receiving device is that the ffflH product-like ij child memorizing device reads out the Xiemy products ϋ¾ 子 and mis ^ «fisij children from the memory memorizing means,

FUJIMI ¾ (The control means of the wording device obtains the authentication information by reading the authentication information from the sickle storage means. The authentication means of the Fujimi server makes a judgment based on the received authentication information and the information stored in the miH authentication information storage means.

The control means of the tfiis server acquires the word data by reading out the word data corresponding to the product item contained in the received authentication code from the word data storage means.

The authentication system according to claim 10.

1 2. A server configured to be able to communicate with each of the receiving device g¾ and the speech device,

The selfish receiver includes an input means used by a user to select or input a desired product;

A product corresponding to the product selected or inputted via the force means, a device condition indicating the device and the receiving device, and a means for telling the tin server the two keys ij; The first receiving means for receiving the authentication code received according to the above two knowledge IJ children from the self server via the network, and outputting the authentication code received by the IfflB first receiving means. One output means, a second receiving means for receiving data sent from the selfish server via the network, and a second output means for outputting the data received by the selfish second receiving means; Including ヽ ''

The tfflB wording device includes an input means for inputting the tiff self-authentication code output from the self-receiving device, and an m code that has received the authentication code via the editing input means. The control means for acquiring the authentication information necessary for authentication, and the secret tmt self-authentication information included in the input self-authentication code are sent to the is server via the network. And a first receiving means for receiving two disgusts from the disgust receiving device,

An authentication / certification code generating means for generating an authentication code including the received two IJ children,

A first wording means for weekly reporting the edited self-authentication code to the leakage receiving device;

a second receiving means for receiving the information «rmt3 authentication 'contained in the t & ta authentication code from the tfit self-signing device;

When the information contained in the authentication code and the authentication release is received from the self-signing device, The power to authenticate the user corresponding to this authentication information 認証 Authentication means that refuses IJ, and the authentication data that is authenticated by the is authentication means ^ The descriptive data that corresponds to the product identification IJ child included in the received authentication code Control means for obtaining

The obtained ΙΐΠΒ¾ί message data is sent to the ΙΕίίΙΕ receiving device corresponding to the device transfer IJ child included in the received authentication code;

Server containing

1 3. A receiving device configured to be able to communicate with a server,

The server is also configured to communicate with the device,

The hate server includes a first receiving means for receiving two hateful IJ children from the hate receiving device, an authentication code generating means for generating an authentication code including the received two msij children. And a second receiving means for receiving the self-authentication information contained in the lilt self-authentication code from the device. , The information contained in the 認証 3 authentication code and the self-authentication information power S received from the fiitffi ^ word device, the power to authenticate the user corresponding to this authentication information, The control means for acquiring the weekly data corresponding to the merchandise included in the received authentication code after the authentication by the authentication means, and the received self-weekly data for the received authentication code.嫌 for selfish receivers corresponding to device identifiers included in Including a second ¾ί wording means,

The key self-speaking device has an input means for inputting the authentication code output from the self-reception device, and the user of the weekly speech device does not like To the server! / Control means to acquire authentication information necessary to authenticate in advance, and means to tell the ttriH server via the network the 'tmt self-authentication information included in the input authentication code' and tmt self-authentication information Including,

User power S input means used to select or enter a desired product;

a product 鑭 | ”corresponding to the product selected or input via the tfit self-input means and a device device indicating the receiving device, and the two f gij children in the t9iE server, A first receiving means for receiving an authentication code generated in accordance with two dislikes from the tifia server via the network;

f & IE first receiving means for outputting the authentication code received by the first receiving means, second receiving means for receiving the data transmitted from the tills server via the network, and second key Second output means for outputting data received by the receiving means;

Receiving equipment including

1 4. Product indicating the product specified by the user l The first output means for outputting the authentication code including the two ligij children of the device identifier Liko indicating the BiJ child and its own device;

The authentication code that was output and the authentication information assigned to the user are sent to the server by other end of it ^^, and the server is authenticated. A receiving means for receiving t flE weekly data addressed to the device from the server after sending the message to the device corresponding to the child;

A second output means for outputting the received 歸 s ^ word data;

Including receiving equipment ''

1 5.

A step of outputting an authentication code including two identifiers of the product. ^ Child.

The output authentication code and the authentication information assigned to the ifris user are sent to the server by another communication terminal, authenticated by the server, and the server sends the message data corresponding to the msij child. After telling the device corresponding to the IfitB ^ device msi, receiving the tuts ^ message data addressed to the device from the server;

Outputting the received speech data;

A program to make

1 6. Product pointing to the product specified by the user IJ child and device pointing to the receiving device 醐 Two keys of I child The authentication code including IJ child is different from the receiving device by the dragon device, A receiving means for receiving the authentication code and the authentication information sent together with the authentication information necessary for the authentication;

Authentication means for performing authentication based on the authentication information received by the data receiving means;

At the age of the authentication by the tfrlS authentication means, the ¾ί word data corresponding to the product transfer IJ child included in the ffilB authentication code received together with this authentication information is used according to the device identifier included in this authentication code. Ttrt your own receiving device

Server containing

1 7.

The authentication code that includes the product identifier that indicates the product specified by the user and the device identifier that indicates the receiving device is different from that of the receiving device. A step of receiving this authentication code and authentication information sent together with the authentication information required for

Authenticating based on the received authentication information; and

At the age of the authentication, the product data included in the authentication code received with this authentication information is sent to the tiriE receiving device corresponding to the device figij child included in this authentication code. And steps to

A program for realizing

1 8. Product pointing to the product specified by the user ϋ! ¾ child and the device identifier pointing to the own device 2 IJ children to the server ¾m ~

A first receiving means for receiving an authentication code generated in accordance with the two identifiers from the tiiiB server;

A first output means for outputting the dislike β authentication code received by the disgusting first receiving means; The authentication information output and the authentication information assigned to the filB user are made difficult by the server due to other end-of-life procedures, and the server authenticates the server. A second receiving means for receiving the word data from the server after receiving the word data to the device corresponding to the fff | B¾ device mgiJ child;

A second output means for outputting tffiffi ^ data received by the second receiving means, and a receiving device including

1 9. For information office

Telling the server two msu children: a product l gij child pointing to the product specified by the user and a device 餺 play child pointing to its own device;

A first receiving step of receiving an authentication code generated in response to the two Hsu children from the hate server;

In the first receiving step, the step of outputting the received authentication code and the output authentication code and the authentication information assigned to the user are After that, the server authenticates the server, and the server sends the message data corresponding to the ttifsfe product to the device corresponding to the object m @ i. A second receiving step of receiving lift self-spoken data,

ステップ ίίΙβ A program for outputting the self-language data received in the second receiving step, and a program for

20. a product indicating a product specified by a user, a device indicating an iisij child and a device indicating a receiving device, a first receiving means for receiving two 受信 ¾υ children of a ligij child from the receiving device;

an authentication code generating means for generating an authentication code according to the two m¾u children received by the ttrlB first receiving means;

first authentication means for telling the authentication code generated by the tfif self-authentication code generation means to the ttrt self-reception device; ΙΕίίΙΕ authentication code is different from the t & IE receiver. ¾ί Word device sends this authentication code and authentication information to ^^ sent along with the authentication information necessary for tiilB user authentication. Means,

The authentication means that performs authentication based on the authentication information received by the second receiving means, and the authentication that has been authenticated by the authentication means: ^ The second ¾ (speaking means and the wording means and the tiff self-receiving device corresponding to the device identifier included in the authentication code

Server containing

2 1. For information storage

A first receiving step of receiving two Itgij children of a product sij child and a device pointing to the receiving device designated by the user from the receiving device;

A step of generating an authentication code in response to the two | J children received in the first receiving step;

the step of telling the self-receiving device the authentication code generated by the tin self-authentication code generating means;

The second receiving step of receiving this authentication code and authentication information when the tfif self-authentication code is sent together with the authentication information necessary for authenticating the user who is unwilling to use by a speech device different from the receiving device. When,

The authentication means that performs authentication based on the authentication information received in the second receiving step of disgust, and the tiriE received with this authentication information at the age of authentication by the self-authentication means A step of declaring message data corresponding to the product m¾ included in the authentication code to a disgusting receiving device corresponding to the device identifier included in the authentication code;

A program to make you wander.