JP2000155735A - Digital content distribution system device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To improve the security of the distribution of contents, to enable an appropriate account processing, and to improve the convenience. SOLUTION: This device generates execution verification logic conversion software 4 which enables digital contents 18 to be actually used on a user terminal 2 by reconnecting 1st execution verification logic 17 instead of 2nd execution verification logic 19 and internally holds execution environment information 20 as information regarding execution environment specifying execution environment wherein digital contents 18 that the 2nd execution verification logic 19 is coupled with run at a digital content distribution center 1 and sends and provides the generated execution verification logic conversion software 4 for the user terminal 2 through an information transmission medium 3.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a digital contents distribution system for selling digital contents on an open wide area network such as the Internet, and more particularly to a digital contents distribution system capable of realizing accurate accounting management of sold digital contents. It is about.

[0002]

2. Description of the Related Art FIG. 9 is a block diagram of a conventional digital content distribution system apparatus disclosed in, for example, Japanese Patent Application Laid-Open No. 8-6784. In FIG. Control means 103, locking / destruction processing means 104, software / work product, 105 continuous use request processing means 106, unlocking / reuse processing means 107, distributor (seller) management device 107
108 is a user information management unit, 109 is a qualification examination processing unit, and 110 is a usage right update processing unit.

Next, the operation will be described. A software / work product 104 incorporating the locking / destruction processing means 103 and a key are sent to the purchased user terminal 101 via a communication line. The terminal device 101 unlocks and uses the key sent to the purchased software or the like. After the expiration date, the software or work is automatically locked or destroyed and stops working. The user operates the management apparatus 10 by the continuous use request processing unit 105.
7 requesting an update, the qualification screening means 109
Refers to the contents of the user information management means 108, and if there is no problem, the usage right update processing means 110 sends a new key or product to the terminal 101 via the communication line. Edge device 1
01 receives the key or the product sent and unlocks /
The reuse processing means 106 unlocks and continues to use the purchased software or copyrighted work until the next expiration date.

In this digital content distribution system apparatus, a trial version of a content cannot be generated by flexibly specifying usage restrictions according to a request such as a usable function range and a referable data range as well as a period. Lack of consideration from the creator's point of view,
Since the charge management by the distributor is not easily configured and the processing flow is not easy, and since the distributor manages the encryption key of the digital content, the creator gives the distributor full control of the copyrighted work. You have to rely on

[0005] Further, embedding of user information in digital content is not considered, or the embedding of user information is left to the user's own will. At the time of providing the decryption key or at the time of providing the decryption key.

For such a digital content distribution system device, a digital content distribution center or the like performs encapsulation of digital content and generates execution verification logic conversion software, and first, a trial version of digital content having execution restrictions is used. Is provided to the user, and the execution verification logic conversion software is provided for the purchase request and the payment made by the user based on the result of using the distributed digital content having the execution restriction, whereby the actual use version is provided. There is a digital content distribution system device that allows the user to acquire the above-mentioned content.

[0007]

Since the conventional digital content distribution system apparatus is configured as described above, the execution verification logic conversion software is composed of a plurality of second execution verification logics operating in different execution environments. Could not prohibit the output of digital content. Therefore, when the execution verification logic conversion software sends and provides the billing information to the digital content distribution center, the digital content distribution center determines that the user has failed to output the digital content to which the second execution verification logic has been combined first. , Did you run the execution verification logic conversion software again, or
Execution verification logic conversion software for outputting digital content combined with the second execution verification logic operating in another different execution environment, in addition to the digital content combined with the second execution verification logic previously output; It has not been possible to determine whether or not the content distribution has been executed, and the reliability of charging and the security for the content distributor are impaired, and there is a problem that the convenience is low.

Further, in the conventional digital content distribution system apparatus, the execution verification logic conversion software includes a second execution verification logic operating in an execution environment different from that of the digital content to which the previously output second execution verification logic is combined. The output of the combined digital content cannot be prevented, and there is a problem in that the reliability of charging and the security for the content distributor are impaired.

SUMMARY OF THE INVENTION The present invention has been made to solve the above-described problems, and uses a digital content in which a second piece of execution verification logic operating in a different operating environment is combined with one piece of execution verification logic conversion software. It is an object of the present invention to obtain a digital content distribution system device that prevents a user from outputting the content, and can improve the security of content distribution, appropriate billing processing, and further improve convenience.

According to the present invention, when the execution verification logic conversion software outputs the digital content combined with the second execution verification logic, the execution environment executes the digital content combined with the second execution verification logic previously output. If it is different from the environment, the digital content distribution system apparatus capable of stopping the output of the digital content combined with the second execution verification logic and improving the security of the distribution of the content and realizing the appropriate billing process. The purpose is to:

[0011]

A digital content distribution system apparatus according to the present invention replaces the first execution verification logic with the second execution verification logic and recombines them, so that the digital content is actually used at the user terminal. Execution verification logic conversion software generating means for generating execution verification logic conversion software in which information about an execution environment for specifying an execution environment in which digital content combined with the second execution verification logic operates is stored. The digital content distribution center has execution verification logic conversion software providing means for sending and providing the execution verification logic conversion software generated by the execution verification logic conversion software generation means to the user terminal via an information transmission medium. It was made.

[0012] The digital content distribution system apparatus according to the present invention comprises: a digital content input means for inputting digital content combined with a first execution verification logic; and the first execution verification logic connected to the digital content. Execution verification logic replacement means for replacing the execution verification logic with the second execution verification logic and recombining the execution verification logic, and execution for specifying an execution environment in which the digital content combined with the second execution verification logic stored inside the execution verification logic conversion software operates. Execution environment information embedding means for embedding environment information in digital content combined with the second execution verification logic, and charging information providing means for sending and providing charging information to a digital content distribution center via an information transmission medium And the second
And a digital content output means for outputting digital content combined with the execution verification logic of the above.

In the digital content distribution system apparatus according to the present invention, the identification information of the execution verification logic conversion software included in the charging information sent and provided by the charging information providing means is included in the charging information already stored and managed. The digital content distribution center is provided with charging information management means for performing charging processing when the identification information does not match the identification information of the execution verification logic conversion software, and not performing charging processing when matching.

[0014] A digital content distribution system apparatus according to the present invention comprises: execution environment information acquisition means for acquiring execution environment information for specifying an execution environment in which digital content combined with second execution verification logic operates; The user terminal is provided with execution verification logic conversion software requesting means for sending the execution environment information acquired by the acquisition means to the digital content distribution center and requesting distribution of the execution verification logic conversion software.

According to the digital content distribution system apparatus of the present invention, the execution according to the type of the execution environment information for specifying the execution environment in which the digital content combined with the second execution verification logic operates is specified. The execution verification logic conversion includes execution environment information obtaining means for obtaining environment information, and message authentication code generation means for generating a message authentication code for digital content in which the second execution verification logic embedded with the execution environment information is combined. The execution environment information embedding unit embeds the execution environment information acquired by the execution environment information acquisition unit in digital content combined with the second execution verification logic, and is generated by the message authenticator generation unit. And charging information including the message authenticator as digital content. The billing information providing means is sent to and provided to the center via the information transmission medium, and the digital content distribution center is provided with a billing information managing means for managing the billing information sent and provided by the billing information providing means. Things.

The digital content distribution system apparatus according to the present invention includes an electronic signature generating means for generating an electronic signature of digital content combined with the second execution verification logic from a message authenticator sent and provided by the charging information providing means. An electronic signature providing unit for sending and providing the electronic signature generated by the electronic signature generation unit to the execution verification logic conversion software via an information transmission medium, the digital content distribution center, and the execution verification logic conversion software An electronic signature verifying means for verifying an electronic signature of the digital content combined with the second execution verification logic, wherein the digital content output means of the execution verification logic conversion software is configured to verify that the digital signature verified by the electronic signature verification means is correct. Only the second fruit Validation logic is obtained so as to output the digital content bound.

[0017]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS One embodiment of the present invention will be described below. Embodiment 1 FIG. FIG. 1 is a block diagram showing an overall configuration of a digital content distribution system apparatus according to Embodiment 1 of the present invention. In FIG. 1, reference numeral 1 denotes a digital content distribution center for distributing digital content,
2 is a user terminal that receives digital contents,
3 is a digital content distribution center 1 and a user terminal 2
And an information transmission medium for transmitting information.

Reference numeral 4 denotes verification and execution control of the digital content when the user trial-uses the digital content. For example, a first execution verification coupled to the digital content restricting the use of some functions of the digital content. Logic is replaced with second execution verification logic for performing verification and execution control of digital content when the user actually uses the digital content, for example, permitting use of some functions of the digital content, and executing recombining. Verification logic conversion software.

5 is execution verification logic conversion software 4
Is execution verification logic conversion software request software for requesting the digital content distribution center 1 to distribute to the user terminal 2.

Reference numeral 6 denotes execution environment information acquisition means for acquiring execution environment information for specifying an execution environment in which the digital content combined with the second execution verification logic operates.

7 is execution verification logic conversion software 4
Is an execution verification logic conversion software request means for requesting the digital content distribution center 1 via the information transmission medium 3 for distribution of the software.

Reference numeral 8 denotes execution verification logic conversion software generation means for generating the execution verification logic conversion software 4 requested by the execution verification logic conversion software request means 7.

Reference numeral 9 denotes execution verification logic conversion software providing means for sending and providing the execution verification logic conversion software 4 generated by the execution verification logic conversion software generation means 8 to the user terminal 2 via the information transmission medium 3.

Numeral 10 denotes digital content input means for inputting digital content combined with the first execution verification logic.

Reference numeral 11 denotes an execution verification logic replacement unit that replaces the first execution verification logic combined with the digital content with the second execution verification logic and recombines the second execution verification logic.

Reference numeral 12 denotes execution environment information embedding means for embedding the execution environment information stored in the execution verification logic conversion software 4 into digital contents combined with the second execution verification logic.

Reference numeral 13 denotes a digital content distribution center 1
Charging information providing means for sending and providing the charging information via the information transmission medium 3 to the charging information management means 14 for managing the charging information sent and provided by the charging information providing means 13; and 15 for the second execution verification logic. Is digital content output means for outputting the combined digital content.

FIG. 2 is a block diagram showing the encapsulated content which is the digital content 18 combined with the first execution verification logic. In FIG. 2, 16 is the first
Encapsulated content combined with the execution verification logic of
Reference numeral 17 denotes a first execution verification logic for controlling and verifying execution of the digital contents 18, and reference numeral 18 denotes digital contents as digital information.

FIG. 3 shows that the execution environment information embedding means 12
Content 1 combined with the execution verification logic of
FIG. 8 is a block diagram illustrating encapsulated content in which execution environment information is embedded in FIG. In FIG. 3, the same or corresponding parts as those in FIG. 2 are denoted by the same reference numerals, and description thereof is omitted.
In FIG. 3, reference numeral 19 denotes a second execution verification logic which is replaced by the first execution verification logic coupled to the digital content 18 by the execution verification logic replacement means 11;
Is execution environment information for specifying an execution environment in which the digital content 18 combined with the second execution verification logic operates.

Next, the operation will be described. FIG. 4 is a flowchart showing the operation of the digital content distribution system apparatus according to Embodiment 1 of the present invention. First, the user replaces the first execution verification logic 17 connected to the digital content 18 with the second execution verification logic 19, and transmits the request of the execution verification logic conversion software 4 to be reconnected to the digital content distribution center 1. The execution verification logic conversion software request software 5 to execute the software is executed.

Here, the digital content 18 is, for example, an image, a moving image, a voice, a text, software, or a combination thereof. Also,
The first execution verification logic 17 is a logic for verifying and controlling the execution of the digital content 18 when an unspecified number of users try out the digital content 18. For example, the first execution verification logic 17 verifies the validity of the digital content 18. This logic controls the reference and execution of the digital content 18 by making a condition determination such as a trial use period. The second execution control logic 19 is a logic for verifying and controlling the execution of the digital content 18 when a specific user actually uses the digital content 18. For example, the second execution control logic 19 verifies the validity of the digital content 18. And logic for controlling the reference and execution of the digital content 18 by determining conditions such as a usage period, a user ID, and a machine ID.

First, in step ST11, the execution environment information acquisition means 6 acquires execution environment information 20 for specifying an execution environment in which the digital content 18 to which the second execution verification logic 19 is combined operates.

In the next step ST12, the information for requesting the distribution of the execution verification logic conversion software 4 is sent to the digital contents distribution center 1 by the execution verification logic conversion software request means 7. In this step ST12, the ID of the digital content 18 combined with the first execution verification logic 17, the information of the user requesting the execution verification logic conversion software 4, and the execution environment information 20 acquired by the execution environment information acquisition means 6 are sent. I do.

In the next step ST13, the execution verification logic conversion software generation means 8 generates the execution verification logic conversion software 4 in the digital content distribution center 1. In this step ST13,
The first execution verification logic 17 coupled to the digital content 18 identified by the ID of the digital content 18 sent by the execution verification logic conversion software request means 7 is replaced with the second execution verification logic 19,
The execution verification logic conversion software 4 to be reconnected is generated.

At this time, the execution verification logic conversion software generating means 8 replaces the execution verification logic conversion software 4 with the first verification logic 17 and recombines the second execution verification logic 19 with the execution verification logic conversion software 4. Store inside. Further, the execution verification logic conversion software generation means 8 stores the execution environment information 20 sent by the execution verification logic conversion software request means 7 in the execution verification logic conversion software 4.

In the next step ST14, the execution verification logic conversion software providing means 9 sends the execution verification logic conversion software 4 to the user terminal 2 via the information transmission medium 3 and provides it. This step ST 14 sends the execution verification logic conversion software 4 generated by the execution verification logic conversion software generation means 8 to the user terminal 2 identified from the user information sent by the execution verification logic conversion software request means 7.

In the next step ST15, the user terminal 2
When the execution verification logic conversion software 4 is executed, the digital contents 18 combined with the first execution verification logic 17
To the execution verification logic conversion software 4.

In the next step ST16, the first execution verification logic 1 linked to the digital content 18
7 is replaced with the second execution verification logic 19 by the execution verification logic replacement means 11. At this time, the second execution verification logic 19 coupled to the digital content 18
Is the second execution verification logic 19 stored inside the execution verification logic conversion software 4.

In the next step ST17, the execution environment information embedding means 12 embeds the execution environment information 20 stored in the execution verification logic conversion software 4 into the digital contents 18 to which the second execution verification logic 19 is combined. Here, the order of the processing of step ST16 and the processing of step ST17 may be reversed.

In the next step ST18, the charging information including the ID of the execution verification logic conversion software 4 is sent to the digital content distribution center 1 by the charging information providing means 13 and provided.

In the next step ST19, the digital contents distribution center 1 in the billing information management means 14
Accumulates and manages charging information, and performs charging processing based on the charging information. However, the execution verification of the logic information conversion software 4 transmitted and provided by the billing information providing unit 13 is performed by the billing information management unit 14. If the ID matches the ID of the logic conversion software 4,
No billing process is performed.

In the next step ST20, the user terminal 2
After the billing information is sent by the billing information providing means 13, the digital content output means 15 outputs the digital content 18 combined with the second execution verification logic 19. The digital content 18 combined with the second execution verification logic 19 output by the digital content output unit 15 is specified by the second execution verification logic 19 by the execution environment information 20 embedded by the execution environment information embedding unit 12. If the digital content 18 combined with the second execution verification logic 19 is operated in another execution environment, the execution environment is controlled by outputting an error message or the like. Notify the user that it is not appropriate.

As described above, according to the first embodiment, the execution verification logic conversion software 4 sent from the digital content distribution center 1 to the user provides the execution verification logic conversion software many times. 4 does not output the second execution verification logic 19 coupled to the digital content 18 and the digital content 18 in which the execution environment in which the digital content 18 operates is different, so that the user can use the same execution verification logic. A digital content distribution system device in which the conversion software 4 cannot acquire the digital content 18 combined with the second execution verification logic 19 operating in a different execution environment, and is expected to improve the security for the content distributor. The effect is obtained.

The digital content distribution center 1
Is that the ID of the execution verification logic conversion software 4 included in the charging information sent and provided by the execution verification logic conversion software 4 corresponds to certain charging information among the charging information already stored and managed in the digital content distribution center 1. I of the included execution verification logic conversion software 4
D does not match the billing process, and if the match does not occur, the billing process is not performed. 1
Even if the second execution verification logic 19 cannot acquire the combined digital content 18 in spite of sending the charging information to the user, the user executes the execution verification logic conversion software 4 again, Digital content 18 combined with second execution verification logic 19
Thus, the digital content distribution center 1 does not perform the charging process twice, and the digital content distribution system device which can be expected to improve the reliability of the charging can be obtained.

Embodiment 2 In the first embodiment, execution environment information for specifying the execution environment in which the digital content 18 to which the execution verification logic conversion software request software 5 pre-installed in the user terminal 2 is combined with the second execution verification logic 19 operates. In the second embodiment, when the digital contents distribution center 1 generates the execution verification logic conversion software 4, the execution environment in which the digital contents 18 combined with the second execution verification logic 19 operates is obtained. The execution verification logic conversion software 4 obtains the execution environment information 20 by determining the type of the execution environment information 20 for specifying the execution environment information.

FIG. 5 is a block diagram showing an entire configuration of a digital content distribution system apparatus according to Embodiment 2 of the present invention. 5, parts that are the same as or correspond to those in FIG. 1 are given the same reference numerals, and descriptions thereof are omitted. FIG.
In 7, the execution verification logic conversion software 4 replaces the first execution verification logic 17 with the second execution verification logic 19 and recombines the digital contents 18.
Of the user requesting the execution verification logic conversion software 4 to the digital contents distribution center 1 via the information transmission medium 3 and requesting the execution verification logic conversion software 4 by the execution verification logic conversion software request means. is there.

Reference numeral 21 denotes execution environment information acquisition means for acquiring execution environment information 20 for specifying an execution environment in which the digital content 18 to which the second execution verification logic 19 is connected operates.

Reference numeral 22 denotes a message authenticator generating means for generating a message authenticator of the digital content 18 to which the second execution verification logic 19 is connected. Here, a message authenticator of certain data is fixed-length data having a characteristic bit pattern output by a one-way hash function when certain data is input, and this one-way hash function uses the same bit pattern. It has a property that it is difficult to find two pieces of input data that can obtain the output data of the input data, and it is also difficult to find input data that can extract output data having a specific bit pattern.

13 is a digital content distribution center 1
Message authenticator generation means 2 via information transmission medium 3
Reference numeral 2 denotes charging information providing means for sending and providing charging information including the generated message authenticator.

Next, the operation will be described. FIG. 6 is a flowchart showing the operation of the digital content distribution system apparatus according to Embodiment 2 of the present invention. First, the user replaces the first execution verification logic 17 linked to the digital content 18 with the second execution verification logic 19, and requests the digital content distribution center 1 for the execution verification logic conversion software 4 to be reconnected. The execution verification logic conversion software request software 5 is executed.

In step ST 21, information for requesting the distribution of the execution verification logic conversion software 4 by the execution verification logic conversion software request means 7 is sent to the digital content distribution center 1. The information for requesting the distribution of the execution verification logic conversion software 4 is the ID of the digital content 18 to which the first execution verification logic 17 is coupled, and the information of the user who requests the execution verification logic conversion software 4. , Step S
At T21, the digital content distribution center 1 sends the ID of the digital content 18 to which the first execution verification logic 17 is coupled and the information of the user who requests the execution verification logic conversion software 4 to the digital content distribution center 1.

In the next step ST22, in the digital contents distribution center 1, the execution verification logic conversion software generating means 8 generates the execution verification logic conversion software 4. This step ST22 replaces the first execution verification logic 17 coupled to the digital content 18 identified from the ID of the digital content 18 sent by the execution verification logic conversion software request means 7 with the second verification logic 19, The execution verification logic conversion software 4 to be reconnected is generated.
At this time, the execution verification logic conversion software generating means 8 stores the second execution verification logic 19 in the execution verification logic conversion software 4 where the execution verification logic conversion software 4 replaces the first verification logic 17 and recombines them. I do.

At this time, the digital content distribution center 1 determines the type of the execution environment information 20 obtained by the execution environment information obtaining means 21 in the user terminal 2 and stores the type in the execution verification logic conversion software 4. store. Here, for example, the type of the execution environment information 20 includes an ID of a hard disk on which the digital content 18 is installed, an IP address of the user terminal 2 on which the digital content 18 is installed, and the like. The digital content distribution center 1 selects an appropriate type.

In the next step ST23, the execution verification logic conversion software providing means 9 sends the execution verification logic conversion software 4 to the user terminal 2 via the information transmission medium 3 and provides it. This step ST23 is a step of transmitting the execution verification logic conversion software 4 generated by the execution verification logic conversion software generation means 8 to the user terminal 2 identified from the user information sent by the execution verification logic conversion software request means 7. 3 to send.

In the next step ST24, the user terminal 2
When the execution verification logic conversion software 4 is executed, when the first execution verification logic 17 is
8 is input to the execution verification logic conversion software 4.

In the next step ST25, the first execution verification logic 1 linked to the digital content 18
7 is replaced with the second execution verification logic 19 by the execution verification logic replacement means 11. At this time, the second execution verification logic 19 coupled to the digital content 18
Is the second execution verification logic 19 stored inside the execution verification logic conversion software 4.

In the next step ST26, the execution environment information acquisition means 21 acquires the execution environment information 20 for specifying the execution environment in which the digital content 18 to which the second execution verification logic 19 is combined operates. This step ST26
The execution environment information acquisition means 21 acquires the execution environment information 20 according to the type of the execution environment information 20 stored inside the execution verification logic conversion software 4.

In the next step ST27, the execution environment information embedding means 12 embeds the execution environment information 20 in the digital content 18 to which the second execution verification logic 19 has been combined. Here, the execution environment information 20 embedded in the digital content 18 by the execution environment information embedding unit 12 is the execution environment information 20 acquired by the execution environment information acquisition unit 21. Here, the processing in step ST25 and the processing in step ST25
26 and the order of the processing in step ST27 may be reversed.

In the next step ST28, the message authentication code generation means 22 generates a message authentication code of the digital content 18 to which the second execution verification logic 19 has been combined. At this time, if the execution environment information embedding means 12 embeds in the digital contents 18 combined with the second execution verification logic 19, the execution environment information 20 is different, the message authentication code differs depending on the nature of the message authentication code. Becomes

In the next step ST 29, the charging information providing means 13 uses the ID of the execution verification logic conversion software 4.
Is sent to the digital content distribution center 1 and provided. In this step ST29, the billing information providing means 13 sends the ID of the execution verification logic conversion software 4 and the billing information including the message authenticator generated by the message authenticator generating means 22 to the digital content distribution center 1 for provision. At this time, the digital content distribution center 1 can specify the user terminal 2 that has requested the execution verification logic conversion software 4 first, based on the ID of the execution verification logic conversion software 4 sent.

At the next step ST30, the digital content distribution center 1 operates the charging information management means 14
Accumulates and manages charging information, and performs charging processing based on the charging information. However, the ID of the execution verification logic conversion software 4 of the billing information sent and provided by the billing information providing unit 13 is the execution verification logic conversion software of the certain billing information among the billing information already stored by the billing information management unit 14. If the ID matches the ID of No. 4 and the message authenticator included in each accounting information matches, the accounting process is not performed.

In the next step ST31, the user terminal 2
After the billing information is sent by the billing information providing means 13, the digital content output means 15 outputs the digital content 18 to which the second execution verification logic 19 is combined. The digital content 18 combined with the second execution verification logic 19 operates only in the execution environment specified by the execution environment information 20 embedded by the execution environment information embedding means 12, and operates in the other execution environment. When the execution verification logic 19 attempts to operate the combined digital content 18, the user of the digital content 18 is notified that the execution environment is not appropriate by outputting an error message or the like.

As described above, according to the second embodiment, the execution verification logic conversion software 4 executes the digital content 1 to which the second execution verification logic 19 is coupled.
When the digital content distribution center 1 outputs the message authentication code of the digital content 18 with the execution environment information 20 embedded therein, the digital content distribution center 1 sends and executes the message authentication code together with the billing information.
Therefore, when the output of a plurality of digital contents 18 operating in different execution environments is prohibited, the effect that this fraud can be found can be obtained.

In the case where output of a plurality of digital contents 18 operating in different execution environments by one execution verification logic conversion software 4 is not prohibited,
The digital content distribution center 1 can charge each time a user outputs digital content 18 that operates in a different execution environment, and can improve the security and the convenience for the content distributor. There is an effect that a distribution system device can be obtained.

Further, in the first embodiment, the execution environment information 20 is obtained when the execution verification logic conversion software request software 5 is executed, whereas in the second embodiment, the execution verification logic conversion software 4 is executed. Since the execution environment information 20 is sometimes acquired, the user of the digital
At the time of request 8, the execution verification logic conversion software 4 can be requested without depending on the execution environment of the digital content 18. Therefore, digital content 1
The execution environment at the time of requesting the digital contents 8 and the use of the digital contents 18 do not necessarily have to be the same, and there is an effect that a digital contents distribution system device that can be expected to increase user convenience is obtained.

Further, in the first embodiment, since the execution verification logic conversion software request software 5 is already installed in the user terminal 2, only execution environment information 20 of a predetermined type can be obtained. On the other hand, according to the second embodiment, the digital content distribution center 1 specifies the execution environment information 20 for specifying the execution environment when the execution verification logic conversion software 4 is generated.
Since the execution verification logic conversion software 4 determines only the type of the user terminal 2 that has requested the execution verification logic conversion software 4 and the appropriate execution environment information 20 corresponding to the type of the digital content 18, To reduce the burden on users, and
There is an effect that a digital content distribution system device that can be expected to increase user convenience is obtained.

Further, the message authenticator included in the billing information sent to the digital content distribution center 1 by the execution verification logic conversion software 4 is data compressed to a fixed length, and the digital content in which the execution environment information 20 is embedded. Since the amount of data can be reduced compared to sending the data as it is, digital accidents in the network can be reduced, reliable billing can be performed, and security and reliability can be improved. There is an effect that a content distribution system device can be obtained.

Embodiment 3 In the second embodiment, when billing information is sent from the user terminal 2 to the digital content distribution center 1, billing processing is performed without sending the billing information to the digital content distribution center 1 due to an accident in the information transmission medium 3 or the like. Even if there is no digital content, the digital content combined with the second execution verification logic 19 is output. In the third embodiment, when the digital content distribution center 1 receives the billing information sent from the user terminal 2, As long as the execution verification logic conversion software 4 outputs the digital content 18 combined with the second execution verification logic.

FIG. 7 is a block diagram showing an entire configuration of a digital content distribution system apparatus according to Embodiment 3 of the present invention. 7, parts that are the same as or correspond to those in FIGS. 1 and 5 are given the same reference numerals, and descriptions thereof are omitted. In FIG. 7, reference numeral 23 denotes an electronic signature generating means for generating an electronic signature of the digital content 18 combined with the second execution verification logic 19, and reference numeral 24 denotes the electronic signature generating means 2.
Electronic signature providing means for sending and providing the electronic signature generated in step 3 to the execution verification logic conversion software 4 of the user terminal 2; and 25, an electronic signature verifying means for verifying the electronic signature sent and provided by the electronic signature providing means 24 It is.

Next, the operation will be described. FIG. 8 is a flowchart showing the operation of the digital content distribution system apparatus according to Embodiment 3 of the present invention. In FIG. 8, the operation up to step ST41 is the same as the operation from step ST21 to step ST29 in FIG.

In step ST 41, the message authenticator included in the billing information managed by the billing information management unit 14 is encrypted by the digital signature generation unit 23 with the secret key of the digital content distribution center 1, thereby performing the second execution. Digital content 18 combined with verification logic 19
Generate a digital signature for At this time, the electronic signature generation means 2
The digital signature generated in step 3 can be generated only by the digital content distribution center 1, and cannot be generated by anyone other than the digital content distribution center 1.

In the next step ST42, the digital signature generated by the digital signature generating means 23 is
Is transmitted to the execution verification logic conversion software 4 of the user terminal 2 through the information transmission medium 3 and provided.

In the next step ST43, the digital signature verifying means 25 verifies the digital signature sent and provided by the digital signature providing means 24. At this time, it is assumed that the public key of the digital content distribution center 1 used for verifying the electronic signature has been distributed to the user terminal 2 in advance. In this step ST43, if the digital signature verified by the digital signature verification means 25 is correct, the process proceeds to the next step ST44. If the digital signature is invalid, an error message indicating that the billing information is not correctly sent to the digital content distribution center 1 is displayed, and the execution verification logic conversion is performed without performing the next step ST44. The software 4 ends.

In the next step ST44, the digital content 18 combined with the second execution verification logic 19 is output by the digital content output means 15. In step ST44, the digital signature obtained by combining the electronic signature verified by the electronic signature verification means 25 with the second execution verification logic 19 is executed so that the execution environment information 20 and the second execution verification logic 19 can be tampered with when they are tampered. The content is output in a form combined with the content 18. For example, when the digital content 18 combined with the second execution verification logic 19 operates, the digital signature is first verified by initial control of the encapsulated content 16.

As described above, according to the third embodiment, the second execution verification in which the execution environment information 20 for specifying the execution environment in which the digital content 18 combined with the second execution verification logic 19 operates is embedded. The billing information including the message authenticator of the digital content 18 combined with the verification logic 19 is transmitted to the digital content distribution center 1.
Has been configured to manage
When the execution verification logic conversion software 4 sends the charging information including the message authenticator of the digital content 18 combined with the execution verification logic 19 to the digital content distribution center 1, the digital content distribution center 1 If the message authenticator differs from the existing message authenticator, the digital content distribution center 1 does not send the digital signature of the digital content 18 combined with the second verification logic 19 to the user terminal 2. Therefore, an effect is obtained that the execution verification logic conversion software 4 can be prevented from outputting the digital contents 18 combined with the second execution verification logics 19 having different execution environments.

The message authentication code sent by the execution verification logic conversion software 4 to the digital content distribution center 1 is data compressed to a fixed length.
The data amount can be smaller than when the digital content 18 combined with the execution verification logic 19 is transmitted as it is. Therefore, there is an effect that a digital content distribution system apparatus in which an accident in a network is reduced, a reliable billing process can be performed, and security can be expected to be improved.

[0077]

As described above, according to the present invention, the first
The execution environment in which digital contents operate with the second execution verification logic combined, wherein the execution verification logic of the above is replaced with the second execution verification logic and recombined to enable actual use of the digital content at the user terminal. A digital content distribution center generates execution verification logic conversion software in which information on an execution environment for specifying the execution environment is stored, and sends the generated execution verification logic conversion software to the user terminal via an information transmission medium. Since it is configured to provide, it is possible to prohibit the output of digital contents that operate in different execution environments based on the information about the execution environment, and the user can execute the same execution verification logic conversion software in different execution environments. Digital content combined with operable second execution verification logic It is possible to prevent the obtaining, improving safety for distribution of content, there is an effect that it is possible to perform the proper charging.

According to the present invention, the digital content input means for inputting the digital content combined with the first execution verification logic, and the first execution verification logic connected to the digital content is subjected to the second execution verification. Execution verification logic replacement means for replacing and re-combining the logic with logic, and information about an execution environment for specifying an execution environment in which the digital content combined with the second execution verification logic stored inside the execution verification logic conversion software is operated. Execution environment information embedding means for embedding the digital content into the digital content combined with the second execution verification logic; charging information providing means for sending and providing charging information to a digital content distribution center via an information transmission medium; Digital content combined with 2 execution verification logic Since the execution verification logic conversion software is provided with the digital content output means for outputting, even if the user executes the execution verification logic conversion software any number of times, the second execution verification logic coupled to the digital content can be used. And output digital contents with different execution environment,
A user cannot acquire digital content combined with a second execution verification logic operating in a different execution environment using the same execution verification logic conversion software. There are effects that can be performed.

According to the present invention, the identification information of the execution verification logic conversion software included in the charging information sent and provided by the charging information providing means is included in the execution verification logic conversion software included in the charging information already stored and managed. The digital content distribution center is configured so that the billing process is performed when it does not match the software identification information, and the billing process is not performed when the software matches the software identification information. Even if the billing information is sent to the digital content distribution center due to a software accident or the like, and the digital content combined with the second execution verification logic cannot be obtained, the user is required to verify the execution again. Executing logic conversion software and combining the data with the second execution verification logic. Even to obtain the digital content,
The digital content distribution center does not perform the billing process twice, but is expected to improve the reliability of billing and to perform proper billing.

According to the present invention, the user terminal acquires execution environment information for specifying an execution environment in which digital content operated by the second execution verification logic is combined, and distributes the acquired execution environment information to digital content distribution. Since it is configured to send to the center and request distribution of the execution verification logic conversion software, it is possible to prohibit the output of digital contents having different execution environments to be operated based on the execution environment information. Verification logic conversion software that runs in a different execution environment
It is possible to prevent the acquisition of digital contents combined with the execution verification logic of (1), and it is possible to improve the security of distribution of contents and to perform appropriate charging.

According to the present invention, when the execution verification logic conversion software outputs the digital content combined with the second execution verification logic, the execution environment in which the digital content combined with the second execution verification logic operates is specified. The digital content distribution center is configured to send and provide a message authenticator of digital content in which the execution environment information acquired based on the type of execution environment information to be embedded is sent together with the billing information. If the logic conversion software prohibits the output of multiple digital contents that operate in different execution environments, this fraud can be detected, and one execution verification logic conversion software can operate in different execution environments. Prohibit output of multiple digital contents If not, the digital content distribution center can also charge each time a user outputs digital content operating in a different execution environment, thereby improving the security of content distribution and performing proper charging. This has the effect of improving the convenience for the content distribution center.

According to the present invention, the digital content distribution center generates the digital signature of the digital content to which the second execution verification logic is combined, and the execution verification logic conversion software determines whether the digital signature generated by the digital content distribution center is correct. The digital content distribution center is configured to be able to output digital contents combined with the second execution verification logic, so that the digital contents distribution center can reliably perform charging, improve the security of the distribution of contents, and appropriately charge. There is an effect that the processing can be realized.

[Brief description of the drawings]

FIG. 1 is a block diagram showing an overall configuration of a digital content distribution system device according to a first embodiment of the present invention.

FIG. 2 is a block diagram showing encapsulated content which is digital content combined with first execution verification logic according to Embodiment 1 of the present invention;

FIG. 3 is a block diagram showing encapsulated content in which execution environment information is embedded in digital content to which the second execution verification logic according to the first embodiment of the present invention is combined.

FIG. 4 is a flowchart showing an operation of the digital content distribution system device according to the first embodiment of the present invention.

FIG. 5 is a block diagram showing an overall configuration of a digital content distribution system device according to a second embodiment of the present invention.

FIG. 6 is a flowchart showing an operation of the digital content distribution system device according to the second embodiment of the present invention.

FIG. 7 is a block diagram showing an overall configuration of a digital content distribution system device according to a third embodiment of the present invention.

FIG. 8 is a flowchart showing an operation of the digital content distribution system device according to the third embodiment of the present invention.

FIG. 9 is a block diagram showing a configuration of a conventional digital content distribution system device.

[Explanation of symbols]

1 digital content distribution center, 2 user terminal, 3 information transmission medium, 4 execution verification logic conversion software, 6 execution environment information acquisition means, 7 execution verification logic conversion software request means, 8 execution verification logic conversion software generation means, 9 execution Verification logic conversion software providing means, 10 digital content input means, 11 execution verification logic replacing means, 12 execution environment information embedding means, 13 billing information providing means, 14
Charging information management means, 15 digital content output means, 17 first execution verification logic, 18 digital contents, 19 second execution verification logic, 20 execution environment information, 21 execution environment information acquisition means, 22 message authenticator generation means, 23 electronic signature generation means, 24
Electronic signature providing means, 25 Electronic signature verification means.

──────────────────────────────────────────────────続 き Continued on the front page (51) Int.Cl. ⁷ Identification symbol FI Theme coat ゛ (Reference) G09C 1/00 640 H04N 7/16 C H04L 9/32 G06F 15/21 Z 12/14 330 // H04N 7 / 16 H04L 9/00 675B 11/02 F

Claims (6)

[Claims] 1. A digital content distribution center for distributing digital content, a user terminal receiving the digital content, and an information transmission medium connecting between the digital content distribution center and the user terminal. In the digital content distribution system apparatus, the digital content distribution center includes a first execution verification logic, which is a logic for performing verification and execution control of the digital content combined with the digital content, for performing verification and execution control of the digital content. The second execution verification logic is replaced with the second execution verification logic and recombined to enable actual use of the digital content at the user terminal, and the second execution verification logic specifies an execution environment in which the combined digital content operates. Execution ring Execution verification logic conversion software generating means for generating execution verification logic conversion software in which information about the execution verification logic conversion software is stored; and storing the execution verification logic conversion software generated by the execution verification logic conversion software generation means in the user terminal. A digital content distribution system device comprising: an execution verification logic conversion software providing unit that sends and provides the software via a transmission medium. 2. The execution verification logic conversion software includes: digital content input means for inputting digital content combined with a first execution verification logic; and a second execution verification logic connected to the digital content. An execution verification logic replacing unit that replaces and recombines the execution verification logic with the execution verification logic, and an execution environment that specifies an execution environment in which the digital content combined with the second execution verification logic stored inside the execution verification logic conversion software is operated. Execution environment information embedding means for embedding information on the digital content combined with the second execution verification logic, and accounting information providing means for sending and providing accounting information to a digital content distribution center via an information transmission medium. The second execution verification logic is combined Digital content distribution system according to claim 1, wherein that it comprises a digital content output means for outputting the digital content. 3. The digital content distribution center according to claim 1, wherein the identification information of the execution verification logic conversion software included in the charging information sent and provided by the charging information providing means is included in the charging verification information already stored and managed. 3. The digital content distribution system according to claim 2, further comprising a billing information management unit that performs a billing process when the identification information does not match the logic conversion software and does not perform a billing process when the identification information matches. apparatus. 4. A user terminal comprising: execution environment information acquisition means for acquiring execution environment information for specifying an execution environment in which digital content combined with a second execution verification logic operates; and the execution environment information acquisition means. 4. The digital verification system according to claim 2, further comprising execution verification logic conversion software requesting means for sending the execution environment information to a digital content distribution center and requesting distribution of execution verification logic conversion software. Content distribution system device. 5. The execution verification logic conversion software, based on a type of execution environment information for specifying an execution environment in which the digital content combined with the second execution verification logic operates, according to a corresponding type. And a message authenticator generating means for generating a message authenticator of the digital content combined with the second execution verification logic in which the execution environment information is embedded. The embedding unit embeds the execution environment information acquired by the execution environment information acquisition unit into the digital content combined with the second execution verification logic, and the charging information providing unit is generated by the message authenticator generation unit. Charging information including the message authenticator to a digital content distribution center; 3. The digital content distribution center according to claim 2, further comprising: charging information management means for managing charging information sent and provided by said charging information providing means. Content distribution system device. 6. A digital content distribution center, comprising: a digital signature generating means for generating an electronic signature of digital content combined with a second execution verification logic from a message authenticator sent and provided by the charging information providing means; Electronic signature providing means for sending and providing the electronic signature generated by the signature generation means to the execution verification logic conversion software via an information transmission medium, wherein the execution verification logic conversion software includes a combination of the second execution verification logic. Digital content verification means for verifying the digital signature of the digital content obtained, wherein the digital content output means includes a digital content combined with the second execution verification logic only if the digital signature verified by the digital signature verification means is correct. 6. The data according to claim 5, wherein Digital content distribution system device.