JP2001094549A - Data providing system and its method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a data providing system which can protect the profit of persons concerned in a data providing device. SOLUTION: An EMD service center 102 generates a stored key file KF by ciphering title deed data 106 and content key data Kc that a content provider 101 generates with key data for distribution and sends the file to a content provider 101. The content provider 101 supply a secure container 104 including a content file CF containing the content data C deciphered by using the content key data Kc and the key file KF received from the EMD service center 102 to SAM 105, etc., of a user home network 103.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

[0001] 1. Field of the Invention [0002] The present invention relates to a data providing system for providing content data and a method thereof.

[0002]

2. Description of the Related Art There is a data providing system which distributes encrypted content data to a data processing device of a user who has made a predetermined contract, and in which the content data is decrypted, reproduced and recorded. One of such data providing systems is a conventional EMD (Electronic Music) for distributing music data.
There is a Distribution (electronic music distribution) system.

FIG. 145 shows a conventional EMD system 700.
FIG. The EMD system 700 shown in FIG.
Then, the content providers 701 a and 701 b provide the service provider 710 with the content data 70.
4a, 704b, 704c and copyright information 705a, 7
05b and 705c are encrypted with session key data obtained after mutual authentication and supplied online,
Or supply offline. Here, copyright information 7
05a, 705b, and 705c include, for example, SCMS
(Serial Copy ManagementSy
(Stem) Information, Digital Watermark Information Requesting Embedding in Content Data, and Service Provider 710
There is information on copyrights that are requested to be embedded in the transmission protocol of the Internet.

[0004] The service provider 710 decrypts the received content data 704a, 704b, 704c and the copyright information 705a, 705b, 705c using the session key data. Then, the service provider 710 embeds copyright information 705a, 705b, 705c in the decrypted or offline received content data 704a, 704b, 704c to generate content data 707a, 707b, 707c. At this time, the service provider 710, for example,
The digital watermark information of the copyright information 705a, 705b, 705c is converted into the content data 704a, 704b, 70.
A predetermined frequency region is changed and embedded in 4c, and SCMS information is embedded in a network protocol used when transmitting the content data to the user. Further, the service provider 710 determines that the content data 707a,
707b and 707c are encrypted using the content key data Kca, Kcb and Kcc read from the key database 706, respectively. Thereafter, the service provider 710 transmits the encrypted content data 707a, 707
Secure container 722 storing 07b and 707c
Is encrypted by the session key data obtained after the mutual authentication, and the CA (Con
(Digital Access) module 711.

[0005] The CA module 711 decrypts the secure container 722 using the session key data. Further, the CA module 711 uses the billing function such as electronic payment or CA to retrieve the content key data Kca, Kcb,
It receives Kcc and decrypts it using the session key data. This makes it possible for the terminal device 709 to decrypt the content data 707a, 707b, and 707c using the content key data Kca, Kcb, and Kcc, respectively. At this time, the CA module 7
11 performs a billing process for each content, generates billing information 721 corresponding to the result, encrypts the billing information 721 with session key data, and transmits the encrypted billing information 721 to the right processing module 720 of the service provider 710. In this case, CA
The module 711 collects user contract (renewal) information, which is an item that the service provider 710 wants to manage with respect to the service provided by the service provider 710 and network rent such as a monthly basic fee, a charging process for each content, and a physical layer of the network. Ensuring security.

When the service provider 710 receives the billing information 721 from the CA module 711, the service provider 710 and the content providers 701a, 701a, 7
01b and 701c. At this time,
The profit distribution from the service provider 710 to the content providers 701a, 701b, and 701c may be determined, for example, by using a JASRAC (Japanese Society).
for Rights of Authors, Com
Posers and Publishers: Japan Music Copyright Association). Also, JASRAC
Accordingly, the profit of the content provider is distributed to the copyright owner, the artist, the lyricist / composer, the affiliated production, etc. of the content data.

[0007] In the terminal device 709, when the content data 707a, 707b, 707c decrypted using the content key data Kca, Kcb, Kcc is recorded on a RAM type recording medium 723 or the like, the copyright information 70
The copy control is performed by rewriting the SCMS bits of 5a, 705b, and 705c. That is, on the user side, copy control is performed based on the SCMS bits embedded in the content data 707a, 707b, 707c,
Copyright is protected.

[0008]

SUMMARY OF THE INVENTION By the way, SCMS
The method prohibits copying of content data over, for example, two or more generations. There is a problem that one generation can be copied indefinitely, which is insufficient as protection for a copyright owner.

Further, in the above-mentioned EMD system 700, since the service provider 710 can freely handle unencrypted content data in a technical manner, the person concerned of the content provider 701 is
It is necessary to monitor 10 actions and the like, and there is a problem that the burden of the monitoring is large and the profit of the content provider 701 is likely to be unduly damaged. Also,
In the above-described EMD system 700, it is difficult for the user terminal device 709 to regulate the act of authoring content data distributed from the service provider 710 and redistributing the content data to another terminal device. There is a problem that profits are unduly damaged.

SUMMARY OF THE INVENTION The present invention has been made in view of the above-described problems of the related art, and has as its object to provide a data providing system and a data providing method capable of appropriately protecting the interests of the right holder (related party) of the content provider. Another object of the present invention is to provide a data providing system and a data providing method capable of reducing the burden of an audit for protecting the interests of the right holder of the content provider.

[0011]

In order to solve the above-mentioned problems of the prior art and to achieve the above-mentioned object, a data providing system according to a first aspect of the present invention preferably comprises a data providing device for receiving data from a data providing device. A data providing system that distributes content data to a processing device and manages the data providing device and the data processing device by a management device, wherein the management device manages the encrypted content key data and the handling of the content data. Creating a key file storing the encrypted rights document data, and the data providing device provides the content data encrypted using the content key data, and the data processing device includes: Decrypts the content key data and the rights document data stored in a file, and decrypts the decrypted rights document data Based on, determines the handling of said content data.

The operation of the data providing system according to the first aspect of the present invention is as follows. In the management device, a key file storing encrypted content key data and encrypted rights document data indicating handling of the content data is created, and the key file is sent to the data providing device. Then, the content data encrypted using the content key data is provided from the data providing device to the data processing device. Then, in the data processing device, the content key data and the rights document data stored in the key file are decrypted, and handling of the content data is determined based on the decrypted rights document data.

A data providing system according to a second aspect of the present invention distributes content data from a data providing device to a data processing device, and manages the data providing device and the data processing device by a management device. Wherein the management device creates a key file storing encrypted content key data and encrypted rights document data indicating handling of the content data, and the data providing device includes: A content file storing content data encrypted using data and a module storing the key file received from the management device are distributed to the data processing device, and the data processing device performs the distribution. The content key data and the rights certificate data stored in the received module Decodes the data, based on the usage control policy data related decrypted, determining the handling of said content data.

The operation of the data providing system according to the second aspect of the present invention is as follows. In the management device, a key file storing encrypted content key data and encrypted rights document data indicating handling of the content data is created. Then, the created key file is distributed from the management device to the data providing device. Then, a module storing the content file storing the content data encrypted using the content key data and the key file received from the management device is distributed from the data providing device to the data processing device. You. Then, in the data processing device, the content key data and the rights document data stored in the distributed module are decrypted, and the handling of the content data is determined based on the decrypted rights document data. Is done.

A data providing system according to a third aspect of the present invention is a data providing system which distributes content data from a data providing device to a data processing device, and manages the data providing device and the data processing device by a management device. The management device creates a key file storing the encrypted content key data and the encrypted rights document data indicating handling of the content data, and the data providing device stores the content key data in the storage device. Distributing a module storing a content file including the content data encrypted using the key file received from the management device to the data processing device,
The data processing device decrypts the content key data and the rights document data stored in the distributed module and determines handling of the content data based on the decrypted rights document data.

The operation of the data providing system according to the third aspect of the present invention is as follows. In the management device, a key file storing encrypted content key data and encrypted rights document data indicating handling of the content data is created, and the key file is sent to the data providing device. Then, a module storing a content file including the content data encrypted using the content key data and the key file received from the management device is distributed from the data providing device to the data processing device. Then, in the data processing device, the content key data and the rights document data stored in the distributed module are decrypted, and the handling of the content data is determined based on the decrypted rights document data. You.

A data providing system according to a fourth aspect of the present invention distributes content data from a data providing device to a data processing device, and manages the data providing device and the data processing device by a management device. Wherein the management device creates a key file storing encrypted content key data and encrypted rights document data indicating handling of the content data, and the data providing device includes: A content file storing content data encrypted using data and the key file received from the management device are individually distributed to the data processing device, and the data processing device receives the distribution. Decrypting the content key data and the rights certificate data stored in the key file, Based on the decrypted rights document data, handling of the content data stored in the distributed content file is determined.

The operation of the data providing system according to the fourth aspect of the present invention is as follows. In the management device, a key file storing encrypted content key data and encrypted rights document data indicating handling of the content data is created, and the key file is sent to the data providing device. Then, in the data providing device, the content file storing the content data encrypted using the content key data and the key file received from the management device are distributed. In the data processing device, the content key data and the rights document data stored in the distributed key file are decrypted, and based on the decrypted rights document data, the distributed content is obtained. The handling of the content data stored in the file is determined.

A data providing system according to a fifth aspect of the present invention distributes content data from a data providing device to a data processing device, and manages the data providing device and the data processing device by a management device. Wherein the management device creates a key file storing encrypted content key data and encrypted rights document data indicating handling of the content data, and processes the created key file in the data processing. Distributing to the device, the data providing device distributes the content file storing the content data encrypted using the content key data to the data processing device,
The data processing device decrypts the content key data and the rights document data stored in the distributed key file and, based on the decrypted rights document data, decrypts the distributed content file. Determine the handling of the stored content data.

The operation of the data providing system according to the fifth aspect of the present invention is as follows. In the management device, a key file storing encrypted content key data and encrypted rights document data indicating handling of the content data is created. The created key file is distributed from the management device to the data processing device. Also, a content file storing content data encrypted using the content key data is distributed from the data providing device to the data processing device. Then, in the data processing device, the content key data and the rights document data stored in the distributed key file are decrypted, and based on the decrypted rights document data, the distributed content is transmitted. The handling of the content data stored in the file is determined.

A data providing system according to a sixth aspect of the present invention distributes content data from a data providing device to a data processing device, and manages the data providing device and the data processing device by a management device. The management device creates a key file storing encrypted content key data and encrypted rights document data indicating handling of the content data, and the data providing device stores the content key. Distributing a module storing content data encrypted using data and the key file received from the management apparatus to the data processing apparatus, wherein the data processing apparatus stores the module in the received module. Decrypting the obtained content key data and the rights document data,
The handling of the content data is determined based on the decrypted right certificate data.

The operation of the data providing system according to the sixth aspect of the present invention is as follows. In the management device, a key file storing encrypted content key data and encrypted rights document data indicating handling of the content data is created, and the key file is sent to the data providing device. Then, a module storing the content data encrypted using the content key data and the key file received from the management device is distributed from the data providing device to the data processing device. Then, in the data processing device, the content key data and the rights certificate data stored in the distributed module are decrypted,
The handling of the content data is determined based on the decrypted rights document data.

A data providing system according to a seventh aspect of the present invention distributes content data from a data providing device to a data processing device, and manages the data providing device and the data processing device by a management device. The management device creates a key file storing encrypted content key data and encrypted rights document data indicating handling of the content data, and the data providing device stores the content key. Content data encrypted using data and the key file received from the management device are individually distributed to the data processing device, and the data processing device is stored in the distributed key file. Decrypted the content key data and the rights document data, and based on the decrypted rights document data. Stomach, to determine the handling of the content data, which has received the distribution.

The operation of the data providing system according to the seventh aspect of the present invention is as follows. In the management device, a key file storing encrypted content key data and encrypted rights document data indicating handling of the content data is created, and the key file is sent to the data providing device. Then, the content data encrypted using the content key data and the key file received from the management device are individually distributed from the data providing device to the data processing device. Then, in the data processing device, the content key data and the rights document data stored in the distributed key file are decrypted, and based on the decrypted rights document data, the distributed content is decrypted. Data handling is determined.

A data providing system according to an eighth aspect of the present invention distributes content data from a data providing device to a data processing device, and manages the data providing device and the data processing device by a management device. Wherein the management device creates a key file storing encrypted content key data and encrypted rights document data indicating handling of the content data, and processes the created key file in the data processing. Device, the data providing device distributes the content data encrypted using the content key data to the data processing device, and the data processing device is stored in the received key file. Decrypting the content key data and the rights document data, and decrypting the decrypted rights document data Based on, determines the handling of said content data that have undergone said distribution.

The operation of the data providing system according to the eighth aspect of the present invention is as follows. In the management device, a key file storing encrypted content key data and encrypted rights document data indicating handling of the content data is created, and the created key file is distributed to the data processing device. Is done. Further, the content data encrypted using the content key data is distributed from the data providing device to the data processing device. And in the data processing device,
The content key data and the rights document data stored in the distributed key file are decrypted,
The handling of the distributed content data is determined based on the decrypted rights document data.

Further, a data providing system according to a ninth aspect of the present invention distributes content data from a data providing device to a data processing device, and manages the data providing device and the data processing device by a management device. The management device creates encrypted content key data and encrypted rights document data indicating handling of the content data, and the data providing device encrypts the content key data using the content key data. And separately distributes the encrypted content data, the encrypted content key data and the encrypted rights document data received from the management device to the data processing device, wherein the data processing device And decrypts the received content key data and the rights document data. Zui and determines the handling of the content data stored in the content file that has received the distribution.

The operation of the data providing system according to the ninth aspect of the present invention is as follows. In the management device, encrypted content key data and encrypted rights document data indicating handling of the content data are created, and these are sent to the data providing device. And from the data providing device to the data processing device,
The content data encrypted using the content key data and the encrypted content key data and the encrypted rights document data received from the management device are individually distributed. Then, in the data processing device, the distributed content key data and the rights document data are decrypted, and, based on the decrypted rights document data, content data stored in the distributed content file. Is determined.

A data providing system according to a tenth aspect of the present invention distributes content data from a data providing device to a data processing device, and manages the data providing device and the data processing device by a management device. Wherein the management device creates encrypted content key data and encrypted rights document data indicating handling of the content data and distributes the data to the data processing device, and the data providing device includes: Distributing the content data encrypted using the content key data to the data processing device, wherein the data processing device decrypts the distributed content key data and the rights document data, and decrypts the decrypted right The handling of the distributed content data is determined based on the document data.

The operation of the data providing system according to the tenth aspect of the present invention is as follows. In the management device, encrypted content key data and encrypted rights document data indicating handling of the content data are created and distributed to the data processing device.
Further, from the data providing device to the data processing device,
Content data encrypted using the content key data is distributed. Then, in the data processing device, the distributed content key data and the rights document data are decrypted, and the handling of the distributed content data is determined based on the decrypted rights document data. .

A data providing system according to an eleventh aspect of the present invention is a data providing system having a data providing device, a data distribution device, a data processing device, and a management device, wherein the management device is an encrypted data providing device. Creating a key file that stores content key data and encrypted rights data indicating the handling of the content data;
The data providing device provides the content data encrypted using the content key data, the data distribution device distributes the provided content data to the data processing device, and the data processing device Decrypting the content key data and the rights document data stored in the key file, and determining handling of the distributed content data based on the decrypted rights document data.

The operation of the data providing system according to the eleventh aspect of the present invention is as follows. In the management device, a key file storing encrypted content key data and encrypted rights document data indicating handling of the content data is created. Then, the content data encrypted using the content key data is provided from the data providing device to the data distribution device. Then, the provided content data is distributed from the data distribution device to the data processing device. Then, in the data processing device, the content key data and the rights data stored in the key file are decrypted, and the handling of the distributed content data is determined based on the decrypted rights data. Is done.

Also, a data providing system according to a twelfth aspect of the present invention provides content data from a data providing device to a data distribution device, distributes content data from the data distribution device to a data processing device, and A data providing system that manages the data providing device, the data distribution device, and the data processing device, wherein the management device includes an encrypted content key data and an encrypted rights document indicating handling of the content data. A key file storing data is created, and the data providing device stores a content file storing content data encrypted using the content key data and the key file received from the management device. Providing a first module to the data distribution device; The apparatus distributes a second module storing the provided content file and the key file to the data processing apparatus, and the data processing apparatus stores the second module in the received second module. The content key data and the rights document data are decrypted, and handling of the content data stored in the distributed second module is determined based on the decrypted rights document data.

The operation of the data providing system according to the twelfth aspect of the present invention is as follows. In the management device, a key file storing encrypted content key data and encrypted rights document data indicating handling of the content data is created, and the key file is sent to the data providing device. A first module storing a content file storing content data encrypted using the content key data from the data providing device to the data distribution device, and storing the key file received from the management device; Is provided. Then, a second module storing the provided content file and the key file is distributed from the data distribution device to the data processing device. Then, in the data processing device, the content key data and the rights document data stored in the distributed second module are decrypted, and the distribution is performed based on the decrypted rights document data. The handling of the content data stored in the second module is determined.

A data providing system according to a thirteenth aspect of the present invention provides content data from a data providing device to a data distribution device, distributes content data from the data distribution device to a data processing device, and A data providing system that manages the data providing device, the data distribution device, and the data processing device, wherein the managing device includes an encrypted content key data and an encrypted rights document indicating handling of the content data. A key file storing data and a first file storing the content file including the content file encrypted using the content key data and the key file received from the management device. Providing a module to the data distribution device, wherein the data distribution device Distributing a second module storing the provided content file to the data processing device, wherein the data processing device transmits the content key data and the rights document stored in the distributed second module. Data is decrypted, and handling of the content data stored in the distributed second module is determined based on the decrypted rights certificate data.

Also, a data providing system according to a fourteenth aspect of the present invention provides content data from a data providing device to a data distribution device, distributes content data from the data distribution device to a data processing device, and A data providing system that manages the data providing device, the data distribution device, and the data processing device, wherein the management device includes an encrypted content key data and an encrypted rights document indicating handling of the content data. A key file storing data is created, and the data providing device separately stores the content file storing the content data encrypted using the content key data and the key file received from the management device. Distribute to the data distributor, the data distributor receives the distribution The content file and the key file are individually distributed to the data processing device, and the data processing device decrypts the content key data and the rights document data stored in the distributed key file, Based on the decrypted rights document data, handling of the content data stored in the distributed content file is determined.

A data providing system according to a fifteenth aspect of the present invention distributes content data from a data providing device to a data processing device, and manages the data providing device and the data processing device by a management device. Wherein the management device creates a key file storing encrypted content key data and encrypted rights document data indicating handling of the content data, and processes the created key file in the data processing. Device, the data providing device provides the data distribution device with a content file storing content data encrypted using the content key data, and the data distribution device provides the received content. Distributing a file to the data processing device, wherein the data processing device Decrypts the content key data and the rights data stored in the received key file, and handles the content data stored in the distributed contents file based on the decrypted rights data. decide.

A data providing system according to a sixteenth aspect of the present invention provides content data from a data providing device to a data distribution device, distributes content data from the data distribution device to a data processing device, and uses a management device. A data providing system that manages the data providing device, the data distribution device, and the data processing device, wherein the managing device includes an encrypted content key data and an encrypted rights document indicating handling of the content data. A key file storing data and a first module storing the content data encrypted using the content key data and the key file received from the management device. Providing to the data distribution device, the data distribution device Content data and a second module storing the key file are distributed to the data processing device, and the data processing device distributes the content key data and the right certificate data stored in the distributed second module. And handling of the content data stored in the distributed second module is determined based on the decrypted rights document data.

A data providing system according to a seventeenth aspect of the present invention provides content data from a data providing device to a data distribution device, distributes content data from the data distribution device to a data processing device, and A data providing system that manages the data providing device, the data distribution device, and the data processing device, wherein the managing device includes an encrypted content key data and an encrypted rights document indicating handling of the content data. A key file storing data is created, and the data providing device separately transmits the content data encrypted using the content key data and the key file received from the management device to the data distribution device. And the data distribution device distributes the distributed content data and the key. And the content distribution device separately distributes the content key data and the rights document data stored in the distributed key file, and decrypts the decrypted rights document data. On the basis of the content data.

A data providing system according to an eighteenth aspect of the present invention distributes content data from a data providing device to a data processing device, and manages the data providing device and the data processing device by a management device. Wherein the management device creates a key file storing encrypted content key data and encrypted rights document data indicating handling of the content data, and processes the created key file in the data processing. Device, the data providing device provides the content data encrypted using the content key data to the data distributing device, and the data distributing device processes the provided content data in the data processing. Device, and the data processing device stores the distributed key file in the key file. Been decoding the content key data and said usage control policy data, based on the usage control policy data related decrypted, determining the handling of said content data that have undergone said distribution.

A data providing system according to a nineteenth aspect of the present invention provides content data from a data providing device to a data distribution device, distributes the content data from the data distribution device to a data processing device, and A data providing system that manages the data providing device, the data distribution device, and the data processing device, wherein the management device includes an encrypted content key data and an encrypted rights document indicating handling of the content data. Data to the data providing device, the data providing device encrypts the content data using the content key data, and the encrypted content key data and the encrypted content key data received from the management device. And the distributed rights certificate data are individually distributed to the data distribution device. The apparatus separately distributes the distributed content data, the encrypted content key data, and the encrypted rights document data to the data distribution apparatus, and the data processing apparatus receives the distribution. Decrypting the content key data and the rights document data, and determining handling of the distributed content data based on the decrypted rights document data.

A data providing system according to a twentieth aspect of the present invention provides content data from a data providing device to a data distribution device, distributes content data from the data distribution device to a data processing device, and uses a management device. A data providing system that manages the data providing device, the data distribution device, and the data processing device, wherein the managing device includes an encrypted content key data and an encrypted rights document indicating handling of the content data. Data to the data processing device, the data providing device provides the content data encrypted using the content key data to the data distribution device, and the data distribution device receives the provision. Distributing content data to the data processing device, wherein the data processing device Receiving the decrypted content key data and said usage control policy data, based on the usage control policy data related decrypted, determining the handling of said content data that have undergone said distribution.

A data providing system according to a twenty-first aspect of the present invention is a data providing system having a data providing device, a data distribution device, a management device, and a data processing device, wherein the data providing device is a content master. Providing source data to the management device, wherein the management device comprises:
Manages the data providing device, the data distribution device and the data processing device, encrypts the provided master source data using content key data to create content data, and stores a content file storing the content data. Create and create a key file that stores the encrypted content key data and encrypted rights document data indicating the handling of the content data, and sends the content file and the key file to the data distribution device. Providing, the data distribution device distributes the provided content file and the key file to the data processing device, wherein the data processing device stores the content stored in the distributed key file. Decrypts the key data and the rights certificate data, Based on the decrypted usage control policy data,
The handling of the content data stored in the distributed content file is determined.

A data providing system according to a twenty-second aspect of the present invention is a data providing system having a data providing device, a data distribution device, a management device, and a data processing device, wherein the data providing device is a content master. Providing source data to the management device, wherein the management device comprises:
Manages the data providing device, the data distribution device and the data processing device, encrypts the provided master source data using content key data to create content data, and stores a content file storing the content data. Creating and encrypting the content key data, and creating a key file storing encrypted rights document data indicating handling of the content data, providing the content file to the data distribution device, Providing a key file to the data processing device, the data distribution device distributes the provided content file to the data processing device, and the data processing device stores the provided content file in the provided key file. Decrypting the obtained content key data and the rights document data, Based on the No. and the usage control policy data 該復, it determines the handling of the content data stored in the content file that has received the distribution.

A data providing system according to a twenty-third aspect of the present invention is a data providing system including a data providing device, a data distribution device, a management device, and a data processing device, wherein the data providing device includes a content key data Providing the management device with a content file storing content data encrypted by using, the management device,
Manages the data providing device, the data distribution device, and the data processing device, and creates a key file that stores the encrypted content key data and encrypted rights document data indicating handling of the content data. And providing the content file provided from the data providing device and the created key file to the data distribution device, wherein the data distribution device stores the received content file and the key file in the data distribution device. Distributed to the data processing device, the data processing device decrypts the content key data and the rights document data stored in the distributed key file, based on the decrypted rights document data, Decide handling of content data stored in distributed content files That.

A data providing system according to a twenty-fourth aspect of the present invention is a data providing system including a data providing device, a data distribution device, a management device, and a data processing device, wherein the data providing device includes a content key data Providing the management device with a content file storing content data encrypted using, the management device,
Manages the data providing device, the data distribution device, and the data processing device, and creates a key file storing the encrypted content key data and the encrypted rights document data indicating handling of the content data. Providing the content file provided from the data providing device to the data distribution device, providing the created key file to the data processing device, the data distribution device providing the content provided Distribute a file to the data processing device, the data processing device decrypts the content key data and the rights document data stored in the provided key file, based on the decrypted rights document data Decides to handle the content data stored in the distributed content file. To.

A data providing system according to a twenty-fifth aspect of the present invention is a data providing system having a data providing device, a data distribution device, a management device, a database device, and a data processing device. Encrypting the content data using the content key data, creating a content file storing the encrypted content data, and storing the created content file and the key file provided from the management device in the database device. The management device creates a key file storing the encrypted content key data and encrypted rights document data indicating handling of the content data, and stores the created key file in the data providing device. The data distribution device provides the database Distributing the content file and the key file obtained from the device to the data processing device, the data processing device decrypts the content key data and the rights document data stored in the distributed key file, Based on the decrypted rights document data, handling of the content data stored in the distributed content file is determined.

A data providing system according to a twenty-sixth aspect of the present invention is a data providing system including a data providing device, a data distribution device, a management device, a database device, and a data processing device, wherein the data providing device comprises: Encrypting the content data using the content key data, creating a content file storing the encrypted content data, storing the created content file in the database device, the management device,
Creating a key file storing the encrypted content key data and encrypted rights document data indicating handling of the content data; providing the created key file to the data distribution device; The distribution device distributes the content file obtained from the database device and a key file provided from the data distribution device to the data processing device, and the data processing device distributes the key file received by the distribution device. Decrypts the content key data and the rights document data stored in the content file, and determines the handling of the contents data stored in the distributed content file based on the decrypted rights document data.

A data providing system according to a twenty-seventh aspect of the present invention is a data providing system having a data providing device, a data distribution device, a management device, a database device, and a data processing device. Encrypting the content data using the content key data, creating a content file storing the encrypted content data, storing the created content file in the database device, the management device,
Creating a key file storing the encrypted content key data and encrypted rights document data indicating handling of the content data; providing the created key file to the data processing device; The distribution device distributes the content file obtained from the database device to the data processing device, and the data processing device transmits the content key data and the rights certificate data stored in the provided key file. The content data decrypted and the handling of the content data stored in the distributed content file is determined based on the decrypted rights document data.

A data providing system according to a twenty-eighth aspect of the present invention comprises a plurality of data providing devices, a data distribution device,
A data providing system having a plurality of management devices, a database device, and a data processing device, wherein the data providing device encrypts content data using content key data, and stores a content file storing the encrypted content data. Creating and storing the created content file and the corresponding key file provided by the management device in the database device, wherein the management device encrypts the content data provided by the corresponding data providing device, Creating a key file storing the content key data and encrypted rights document data indicating the handling of the content data, providing the created key file to the corresponding data providing device, and providing the data distribution The device is from the database device Distributed to the data processing device, the data processing device decrypts the content key data and the rights certificate data stored in the distributed key file, and decrypts the decrypted Based on the rights data, handling of the content data stored in the distributed content file is determined.

A data providing system according to a twenty-ninth aspect of the present invention comprises a plurality of data providing devices, a data distribution device,
A data providing system having a plurality of management devices, a database device, and a data processing device, wherein the data providing device encrypts content data using content key data, and stores a content file storing the encrypted content data. And the created content file is stored in the database device, and the management device handles the encrypted content key data and the handling of the content data for the content data provided by the corresponding data providing device. Creating a key file that stores the encrypted entitlement data, and providing the created key file to the data distribution device, wherein the data distribution device obtains the content file obtained from the database device, Key provided by management device And distributes the content key data and the rights document data stored in the distributed key file, based on the decrypted rights document data. Then, the handling of the content data stored in the distributed content file is determined.

A data providing system according to a thirtieth aspect of the present invention comprises a plurality of data providing devices, a data distribution device,
A data providing system having a plurality of management devices, a database device, and a data processing device, wherein the data providing device encrypts content data using content key data, and stores a content file storing the encrypted content data. And the created content file is stored in the database device, and the management device handles the encrypted content key data and the handling of the content data for the content data provided by the corresponding data providing device. Creating a key file storing the encrypted rights document data, and providing the created key file to the data processing device.The data distribution device converts the content file obtained from the database device into the data file. Distributed to the processing equipment, and The data processing device decrypts the content key data and the rights document data stored in the provided key file, and stores the content key data and the rights document data in the distributed content file based on the decrypted rights document data. Decide how to handle the content data.

A data providing system according to a thirty-first aspect of the present invention comprises a plurality of data providing devices, a data distribution device,
A data providing system having a plurality of management devices, a database device, and a data processing device, wherein the data providing device provides a master source of content data to the corresponding management device, and a content file and a content file received from the management device. A key file is stored in the database, the management device encrypts the master source received from the corresponding data providing device using content key data, and creates a content file storing the encrypted content data. Creating a key file that stores the encrypted content key data and encrypted rights document data indicating the handling of the content data for the content data provided by the corresponding data providing device; Content file and Sends the generated key file to the corresponding data providing device, the data distribution device distributes the content file and the key file obtained from the database device to the data processing device, and the data processing device performs the distribution. The content key data and the rights document data stored in the received key file are decrypted, and the handling of the content data stored in the distributed content file is determined based on the decrypted rights document data. .

A data providing system according to a thirty-second aspect of the present invention comprises a plurality of data providing devices, a data distribution device,
A data providing system having a plurality of management devices, a database device, and a data processing device, wherein the data providing device provides a master source of content data to the corresponding management device, and stores a content file received from the management device. Stored in the database, the management device encrypts the master source received from the corresponding data providing device using content key data, creates a content file storing the encrypted content data, and creates the content file. The content file transmitted to the data providing device, and for the content data provided by the corresponding data providing device, the encrypted content key data and the encrypted rights document data indicating the handling of the content data. Create the stored key file, The created key file is sent to the corresponding data distribution device, and the data distribution device distributes the content file obtained from the database device and the key file provided from the management device to the data processing device. The data processing device decrypts the content key data and the rights document data stored in the distributed key file and, based on the decrypted rights document data, distributes the distributed content file. The handling of the content data stored in is determined.

A data providing system according to a thirty-third aspect of the present invention comprises a plurality of data providing devices, a data distribution device,
A data providing system having a plurality of management devices, a database device, and a data processing device, wherein the data providing device provides a master source of content data to the corresponding management device, and stores a content file received from the management device. Stored in the database, the management device encrypts the master source received from the corresponding data providing device using content key data, creates a content file storing the encrypted content data, and creates the content file. The content file transmitted to the data providing device, and for the content data provided by the corresponding data providing device, the encrypted content key data and the encrypted rights document data indicating the handling of the content data. Create the stored key file, The created key file is provided to the data processing device, the data distribution device distributes the content file obtained from the database device to the data processing device, and the data processing device receives the provision. The content key data and the rights document data stored in the key file are decrypted, and handling of the contents data stored in the distributed content file is determined based on the decrypted rights document data.

A data providing method according to a first aspect of the present invention is a method for distributing content data from a data providing device to a data processing device, and managing the data providing device and the data processing device by a management device. Wherein the management device creates a key file storing encrypted content key data and encrypted rights document data indicating handling of the content data,
The data providing device provides the content data encrypted using the content key data, the data processing device decrypts the content key data and the rights certificate data stored in the key file, The handling of the content data is determined based on the decrypted rights certificate data.

A data providing method according to a second aspect of the present invention is a data providing method for distributing content data from a data providing device to a data processing device, and managing the data providing device and the data processing device by a management device. In the management device, a key file storing encrypted content key data and encrypted rights document data indicating handling of the content data is created, and the created key file is stored in the management device. And a module storing the content file that stores the content data encrypted using the content key data and the key file that is distributed from the management device. To the data processing device, and in the data processing device, Decoding the content key data and said usage control policy data stored in said module that received the feed, based on the usage control policy data related decrypted, determining the handling of said content data.

A data providing method according to a third aspect of the present invention provides a data providing method for distributing content data from a data providing device to a data processing device, and managing the data providing device and the data processing device by a management device. In the management device, a key file storing encrypted content key data and encrypted rights document data indicating handling of the content data is created, and the content key is stored in the data providing device. Distributing a module storing a content file including content data encrypted using data and a key file received from the management device to the data processing device, wherein the data processing device receives the distribution. The content key data and the rights certificate data stored in the module Decodes the data, based on the usage control policy data related decrypted, determining the handling of said content data.

A data providing method according to a fourth aspect of the present invention is a data providing method for distributing content data from a data providing device to a data processing device, and managing the data providing device and the data processing device by a management device. In the management device, a key file storing encrypted content key data and encrypted rights document data indicating handling of the content data is created, and the created key file is stored in the management device. From the data providing device to the data processing device, the content file storing the content data encrypted using the content key data and the key file received from the management device are separately transmitted from the data providing device to the data processing device. The key distributed to the device and received by the data processing device. Decoding the content key data and said usage control policy data stored in Airu, based on the usage control policy data related decrypted, determining the handling of the content data stored in the content file that has received the distribution.

A data providing method according to a fifth aspect of the present invention is a data providing method for distributing content data from a data providing device to a data processing device, and managing the data providing device and the data processing device by a management device. In the management device, a key file storing encrypted content key data and encrypted rights document data indicating handling of the content data is created, and the created key file is stored in the management device. From the data providing device to the data processing device, and distributes the content file storing the content data encrypted using the content key data to the data processing device. The content key data stored in the received key file and the Decoding the usage control policy data, based on the usage control policy data related decrypted, determining the handling of the content data stored in the content file received the distribution.

A data providing method according to a sixth aspect of the present invention is a data providing method for distributing content data from a data providing device to a data processing device, and managing the data providing device and the data processing device by a management device. The management device creates a key file storing encrypted content key data and encrypted rights document data indicating handling of the content data, and the data providing device includes: Distributing a module storing the content data encrypted using the data and the key file received from the management device to the data processing device, and storing the module in the received module in the data processing device Decrypts the content key data and the rights certificate data thus decrypted, Based on the usage control policy data and determines the handling of said content data.

A data providing method according to a seventh aspect of the present invention is a data providing method for distributing content data from a data providing device to a data processing device, and managing the data providing device and the data processing device by a management device. The management device creates a key file storing encrypted content key data and encrypted rights document data indicating handling of the content data, and the data providing device includes: Content data encrypted using data and the key file received from the management device are individually distributed to the data processing device, and in the data processing device,
The content key data and the rights document data stored in the distributed key file are decrypted, and handling of the distributed content data is determined based on the decrypted rights document data.

A data providing method according to an eighth aspect of the present invention is a data providing method in which content data is distributed from a data providing device to a data processing device and a management device manages the data providing device and the data processing device. In the management device, a key file storing encrypted content key data and encrypted rights document data indicating handling of the content data is created, and the created key file is subjected to the data processing. Distributed to the device, the data providing device distributes the content data encrypted using the content key data to the data processing device, and the data processing device stores the content data in the received key file. Decrypted the content key data and the rights document data, and Based on the written data, it determines the handling of said content data that have undergone said distribution.

A data providing method according to a ninth aspect of the present invention provides a data providing method in which content data is distributed from a data providing device to a data processing device, and the management device manages the data providing device and the data processing device. The management device creates encrypted content key data and encrypted rights document data indicating handling of the content data, and the data providing device encrypts the content key data using the content key data. And individually distributes the encrypted content data, the encrypted content key data and the encrypted rights document data received from the management device to the data processing device, and the data processing device Decrypts the received content key data and the rights document data, and decrypts the decrypted right Based on the data, determines the handling of the content data stored in the content file that has received the distribution.

A data providing method according to a tenth aspect of the present invention is a data providing method in which content data is distributed from a data providing device to a data processing device, and the data providing device and the data processing device are managed by a management device. In the management device, the encrypted content key data and encrypted rights document data indicating the handling of the content data is created and distributed to the data processing device, and the data providing device, Distributing the content data encrypted using the content key data to the data processing device, and in the data processing device, decrypting the distributed content key data and the rights document data, and decrypting the decrypted right The handling of the distributed content data based on the document data That.

A data providing method according to an eleventh aspect of the present invention is a data providing system using a data providing device, a data distribution device, a data processing device, and a management device. Create a key file that stores the content key data and encrypted rights document data indicating the handling of the content data, and sends the content data encrypted using the content key data from the data providing device to the Providing to a data distribution device, the data distribution device distributes the provided content data to the data processing device,
The data processing device decrypts the content key data and the rights document data stored in the key file, and determines handling of the distributed content data based on the decrypted rights document data.

A data providing method according to a twelfth aspect of the present invention provides content data from a data providing device to a data distribution device, distributes the content data from the data distribution device to a data processing device, and A data providing method for managing the data providing device, the data distribution device, and the data processing device, wherein the management device includes an encrypted content key data and an encrypted rights document indicating handling of the content data. Creating a key file storing data, distributing the created key file from the management device to the data providing device, storing a content file encrypted with the content key data, A first module storing the key file received from the management device; Is provided from the data providing device to the data distribution device, and the second module storing the provided content file and the key file is distributed from the data distribution device to the data processing device, and the data processing is performed. In the apparatus, the content key data and the rights document data stored in the distributed second module are decrypted, and based on the decrypted rights document data, the received second module is decrypted. The handling of the content data stored in is determined.

A data providing method according to a thirteenth aspect of the present invention provides content data from a data providing device to a data distribution device, distributes content data from the data distribution device to a data processing device, A data providing method for managing the data providing device, the data distribution device, and the data processing device, wherein the management device includes an encrypted content key data and an encrypted rights document indicating handling of the content data. A key file storing data and a content file including the content file encrypted using the content key data and the key file received from the management device in the data providing device. Providing a module to the data distribution device, And distributing a second module storing the provided content file to the data processing device, wherein, in the data processing device, the content key data stored in the distributed second module and The rights document data is decrypted, and handling of the content data stored in the distributed second module is determined based on the decrypted rights document data.

A data providing method according to a fourteenth aspect of the present invention provides content data from a data providing device to a data distribution device, distributes content data from the data distribution device to a data processing device, and A data providing method for managing the data providing device, the data distribution device, and the data processing device, wherein the management device includes an encrypted content key data and an encrypted rights document indicating handling of the content data. Creating a key file storing data and distributing the created key file from the management device to the data providing device, storing a content file encrypted using the content key data, The key file received from the management device and the data providing device individually. From the data distribution device to the data distribution device, and distributes the distributed content file and the key file from the data distribution device to the data distribution device. The content key data and the rights document data stored in the key file are decrypted, and handling of the contents data stored in the distributed content file is determined based on the decrypted rights document data.

A data providing method according to a fifteenth aspect of the present invention provides a data providing method in which content data is distributed from a data providing device to a data processing device, and the management device manages the data providing device and the data processing device. In the management device, a key file storing encrypted content key data and encrypted rights document data indicating handling of the content data is created, and the created key file is stored in the management device. From the data providing device to the data distribution device, and distributes the content file storing content data encrypted using the content key data to the data distribution device. Distributing the data from the data distribution device to the data processing device; Decrypting the content key data and the rights document data stored in the distributed key file, and storing the content key data and the rights document data stored in the distributed content file based on the decrypted rights document data. Decide how to handle the content data.

Further, in a data providing method according to a sixteenth aspect of the present invention, the data providing device provides content data to the data distribution device, and the data distribution device distributes the content data to the data processing device. A data providing method for managing the data providing device, the data distribution device, and the data processing device, wherein the management device includes an encrypted content key data and an encrypted rights document indicating handling of the content data. A key file storing data and a first module storing, in the data providing device, content data encrypted using the content key data and the key file received from the management device; Providing to the data distribution device, wherein in the data distribution device, And distributing the content data and the second module storing the key file to the data processing device, wherein the content processing device stores the content key data and the rights stored in the distributed second module. Decrypting the content data, and determining the handling of the content data stored in the distributed second module based on the decrypted rights document data.

A data providing method according to a seventeenth aspect of the present invention provides content data from a data providing apparatus to a data distribution apparatus, distributes content data from the data distribution apparatus to a data processing apparatus, and A data providing method for managing the data providing device, the data distribution device, and the data processing device, wherein the management device includes an encrypted content key data and an encrypted rights document indicating handling of the content data. A key file storing data is created, and in the data providing device, the content data encrypted using the content key data and the key file received from the management device are individually transmitted to the data distribution device. The content data distributed by the data distribution device. And the key file are individually distributed to the data distribution device, and the data processing device decrypts the content key data and the rights certificate data stored in the distributed key file, and decrypts the decrypted content key data. The handling of the distributed content data is determined based on the rights document data.

A data providing method according to an eighteenth aspect of the present invention is a method of distributing content data from a data providing device to a data processing device, and managing the data providing device and the data processing device by a management device. In the management device, a key file storing encrypted content key data and encrypted rights document data indicating handling of the content data is created, and the created key file is subjected to the data processing. Device, the data providing device provides the content data encrypted using the content key data to the data distribution device, and the data distribution device processes the provided content data in the data distribution device. Distributed to the device, and in the data processing device, the distributed Decoding the content key data and said usage control policy data stored in over file, based on the usage control policy data related decrypted, determining the handling of said content data that have undergone said distribution.

Further, in a data providing method according to a nineteenth aspect of the present invention, a content providing device provides content data to a data distribution device, the data distribution device distributes the content data to a data processing device, and A data providing method for managing the data providing device, the data distribution device, and the data processing device, wherein the management device includes an encrypted content key data and an encrypted rights document indicating handling of the content data. And data provided to the data providing device, wherein the data providing device encrypts the content data using the content key data, and the encrypted content key data and the encrypted content key data received from the management device. The distributed rights certificate data is individually distributed to the data distribution device, In the distribution device, the distributed content data and the encrypted content key data and the encrypted rights document data are individually distributed to the data distribution device, and the distribution is performed by the data processing device. The received content key data and the rights document data are decrypted, and handling of the distributed content data is determined based on the decrypted rights document data.

A data providing method according to a twentieth aspect of the present invention provides content data from a data providing device to a data distribution device, distributes the content data from the data distribution device to a data processing device, A data providing method for managing the data providing device, the data distribution device, and the data processing device, wherein the management device includes an encrypted content key data and an encrypted rights document indicating handling of the content data. And distributes the data to the data processing device, and in the data providing device, provides the content data encrypted using the content key data to the data distribution device, and the data distribution device receives the provision. Distributing content data to the data processing device, and in the data processing device Said distributing said decrypts the content key data and said usage control policy data received, based on the usage control policy data related decrypted, determining the handling of said content data that have undergone said distribution.

A data providing method according to a twenty-first aspect of the present invention is a data providing method using a data providing device, a data distribution device, a management device, and a data processing device.
The data providing device provides master source data of the content to the management device, the management device manages the data providing device, the data distribution device and the data processing device, and provides the provided master source data. Encrypting using the content key data to create content data, creating a content file storing the content data, and encrypting the encrypted content key data and an encrypted rights document indicating handling of the content data Create a key file that stores data and
Providing the content file and the key file to the data distribution device, the data distribution device distributes the provided content file and the key file to the data processing device, and the data processing device Decrypts the content key data and the rights document data stored in the distributed key file, and handles the content data stored in the distributed content file based on the decrypted rights document data. decide.

A data providing method according to a twenty-second aspect of the present invention is a data providing method using a data providing device, a data distribution device, a management device, and a data processing device.
The data providing device provides master source data of the content to the management device, the management device manages the data providing device, the data distribution device and the data processing device, and provides the provided master source data. Encrypting using the content key data to create content data, creating a content file storing the content data, and encrypting the encrypted content key data and an encrypted rights document indicating handling of the content data Create a key file that stores data and
Providing the content file to the data distribution device, providing the key file to the data processing device,
The data distribution device distributes the provided content file to the data processing device, and the data processing device transmits the content key data and the rights certificate data stored in the provided key file. And handling of the content data stored in the distributed content file is determined based on the decrypted rights document data.

A data providing method according to a twenty-third aspect of the present invention is a data providing method using a data providing device, a data distribution device, a management device, and a data processing device,
The data providing device provides the management device with a content file storing content data encrypted using content key data, and the management device includes the data providing device, the data distribution device, and the data processing device. Manages and creates a key file storing the encrypted content key data and encrypted rights document data indicating handling of the content data, and the content file provided from the data providing device. Providing the created key file to the data distribution device, the data distribution device distributes the provided content file and the key file to the data processing device, and the data processing device The content key data stored in the distributed key file and Decoding the usage control policy data, based on the usage control policy data related decrypted, determining the handling of the content data stored in the content file that has received the distribution.

A data providing method according to a twenty-fourth aspect of the present invention is a data providing method using a data providing device, a data distribution device, a management device, and a data processing device.
The data providing device provides the management device with a content file storing content data encrypted using content key data, and the management device includes the data providing device, the data distribution device, and the data processing device. Manages and creates a key file storing the encrypted content key data and encrypted rights document data indicating the handling of the content data, and stores the content file provided by the data providing device. Providing to the data distribution device, providing the created key file to the data processing device, the data distribution device distributes the provided content file to the data processing device, the data processing device ,
Decrypting the content key data and the rights document data stored in the provided key file, and handling the content data stored in the distributed content files based on the decrypted rights document data To determine.

A data providing method according to a twenty-fifth aspect of the present invention includes a data providing device, a data distribution device, a management device,
A data providing method using a database device and a data processing device, wherein the data providing device encrypts content data using content key data, creates a content file storing the encrypted content data, The created content file and the key file provided from the management device are stored in the database device, and the management device stores the encrypted content key data and an encrypted right indicating handling of the content data. Create a key file storing the document data and provide the created key file to the data providing device, and the data distribution device sends the content file and the key file obtained from the database device to the data processing device. Distributing the data processing device, Decrypts the content key data and the rights document data stored in the distributed key file, and handles the content data stored in the distributed content file based on the decrypted rights document data. decide.

A data providing method according to a twenty-sixth aspect of the present invention includes a data providing device, a data distribution device, a management device,
A data providing method using a database device and a data processing device, wherein the data providing device encrypts content data using content key data, creates a content file storing the encrypted content data, The created content file is stored in the database device, and the management device creates a key file storing the encrypted content key data and the encrypted rights document data indicating the handling of the content data. Providing the created key file to the data distribution device, wherein the data distribution device sends the content file obtained from the database device and the key file provided from the data distribution device to the data processing device. Distributing, the data processing device receives the distribution Wherein stored in the key file are decrypted with the content key data and said usage control policy data, based on the usage control policy data related decrypted, determining the handling of the content data stored in the content file that has received the distribution.

A data providing method according to a twenty-seventh aspect of the present invention includes a data providing device, a data distribution device, a management device,
A data providing method using a database device and a data processing device, wherein the data providing device encrypts content data using content key data, creates a content file storing the encrypted content data, The created content file is stored in the database device, and the management device creates a key file storing the encrypted content key data and the encrypted rights document data indicating the handling of the content data. Providing the created key file to the data processing device, the data distribution device distributes the content file obtained from the database device to the data processing device, the data processing device
Decrypting the content key data and the rights document data stored in the provided key file, and handling the content data stored in the distributed content files based on the decrypted rights document data To determine.

A data providing method according to a twenty-eighth aspect of the present invention is a data providing method using a plurality of data providing devices, a data distribution device, a plurality of management devices, a database device, and a data processing device. The data providing device encrypts the content data using the content key data, creates a content file storing the encrypted content data, and provides the created content file and the corresponding key file provided from the management device. Is stored in the database device, and the management device, for the content data provided by the corresponding data providing device, encrypts the content key data and encrypted rights document data indicating handling of the content data. Create a key file that stores File to the corresponding data providing device, the data distribution device distributes the content file and the key file obtained from the database device to the data processing device, and the data processing device receives the distribution. The content key data and the rights document data stored in the key file are decrypted, and the handling of the content data stored in the distributed content file is determined based on the decrypted rights document data.

A data providing method according to a twenty-ninth aspect of the present invention is a data providing method using a plurality of data providing devices, a data distribution device, a plurality of management devices, a database device, and a data processing device. The data providing device encrypts the content data using the content key data, creates a content file storing the encrypted content data, stores the created content file in the database device, and the management device For the content data provided by the corresponding data providing device, a key file storing the encrypted content key data and the encrypted rights document data indicating the handling of the content data is created, and the created key file is created. Providing a key file to the data distribution device; Distributes the content file obtained from the database device and a key file provided from the management device to the data processing device, wherein the data processing device is stored in the distributed key file. Decrypting the content key data and the rights document data, and determining the handling of the content data stored in the distributed content file based on the decrypted rights document data.

A data providing method according to a thirtieth aspect of the present invention is a data providing method using a plurality of data providing devices, a data distribution device, a plurality of management devices, a database device and a data processing device. The data providing device encrypts the content data using the content key data, creates a content file storing the encrypted content data, stores the created content file in the database device, and the management device For the content data provided by the corresponding data providing device, a key file storing the encrypted content key data and the encrypted rights data indicating the handling of the content data is created, and the created key file is created. Providing a key file to the data processing device; Distributes the content file obtained from the database device to the data processing device, and the data processing device decrypts the content key data and the rights certificate data stored in the provided key file. And determining, based on the decrypted rights document data, how to handle the content data stored in the distributed content file.

A data providing method according to a thirty-first aspect of the present invention is a data providing method using a plurality of data providing devices, a data distribution device, a plurality of management devices, a database device, and a data processing device. The data providing device provides a master source of content data to the corresponding management device, stores the content file and the key file received from the management device in the database, and the management device transmits the content file and the key file from the corresponding data providing device. The received master source is encrypted using content key data, a content file storing the encrypted content data is created, and for the content data provided by the corresponding data providing device, the encrypted content key is encrypted. Data and encryption indicating handling of the content data Creating a key file storing the obtained rights document data and sending the created content file and the created key file to the corresponding data providing device, wherein the data distribution device obtains the content obtained from the database device. Distributes a file and a key file to the data processing device, the data processing device decrypts the content key data and the rights data stored in the distributed key file, and decrypts the decrypted rights data. The handling of the content data stored in the distributed content file is determined based on

A data providing method according to a thirty-second aspect of the present invention is a data providing method using a plurality of data providing devices, a data distribution device, a plurality of management devices, a database device, and a data processing device. The data providing device provides a master source of content data to the corresponding management device, stores the content file received from the management device in the database, and the management device
Encrypting the master source received from the corresponding data providing device using content key data, creating a content file storing the encrypted content data, sending the created content file to the data providing device, For the content data provided by the corresponding data providing device, a key file storing the encrypted content key data and the encrypted rights document data indicating the handling of the content data is created, and the created key file is created. Sending a key file to the corresponding data distribution device, the data distribution device distributes the content file obtained from the database device and a key file provided from the management device to the data processing device, The data processing device may be configured to: Decoding the content key data and said usage control policy data stored in the yl, based on the usage control policy data related decrypted, determining the handling of the content data stored in the content file that has received the distribution.

A data providing method according to a thirty-third aspect of the present invention is a data providing method using a plurality of data providing devices, a data distribution device, a plurality of management devices, a database device and a data processing device. The data providing device provides a master source of content data to the corresponding management device, stores the content file received from the management device in the database, and the management device
Encrypting the master source received from the corresponding data providing device using content key data, creating a content file storing the encrypted content data, sending the created content file to the data providing device, For the content data provided by the corresponding data providing device, a key file storing the encrypted content key data and the encrypted rights data indicating the handling of the content data is created, and the created key file is created. Providing a key file to the data processing device, the data distribution device distributes the content file obtained from the database device to the data processing device, and the data processing device transmits the content file to the received key file. The stored content key data and the right Decoding the write data, on the basis of the usage control policy data related decrypted, determining the handling of the content data stored in the content file that has received the distribution.

[0089]

DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, an EMD (Electronic Music Distr) according to an embodiment of the present invention will be described.
The following describes an ivtion (electronic music distribution) system. First Embodiment FIG. 1 is a configuration diagram of an EMD system 100 according to the present embodiment. In the present embodiment, the content (Content) data delivered to the user refers to digital data in which the information itself has a value, and will be described below using music data as an example. As shown in FIG.
0 is a content provider 101, an EMD service center (clearing house, hereinafter also referred to as ESC)
102 and a user home network 103. Here, the content provider 101, EMD service center 102 and SAM 105 ₁ to 105 ₄ is,
They correspond to the data providing device, the management device, and the data processing device according to claims 1 and 6, respectively. First, an outline of the EMD system 100 will be described. In the EMD system 100, the content provider 101 obtains a license (e.g., content key data Kc used when encrypting the content data C of the content to be provided by the content provider 101 and a license such as a license condition of the content data C). UCP: Usage Contro
l Policy) data 106 and digital watermark information management data indicating the contents and embedding position of the digital watermark information are sent to the EMD service center 102 which is a highly reliable authority.

The EMD service center 102 receives the content key data K
(c) Register (authentication and authorization) the right certificate data 106 and the digital watermark information key data. Further, the EMD service center 102 transmits the distribution key data KD for the corresponding period.
₁ ～KD5 encrypted content key data Kc by _6, usage control policy data 106 and creates its own signature key file KF data and stored, and sends this to the content provider 101. Here, the signature data is used to verify whether the key file KF has been tampered, the validity of the creator of the key file KF, and whether the key file KF has been registered properly in the EMD service center 102.

The content provider 101 encrypts the content data C with the content key data Kc to generate a content file CF. The generated content file CF, the key file KF received from the EMD service center 102, and the Secure container (module of the present invention) 10 storing signature data of
4 is distributed to the user home network 103 using a network such as the Internet or a package medium such as digital broadcasting or a recording medium. Here, the signature data stored in the secure container 104 is used to verify whether the corresponding data has been tampered with, and to verify the creator and sender of the data.

[0092] The user home network 103, for example, the network device 160 ₁ and AV apparatuses 160 ₂
With a 160 _4. The network device 160 ₁
AM (Secure Application Mod)
ule) has a built-in 105 _1. AV equipment 160 _2-
160 ₄ are respectively built SAM 105 ₂ to 105 _4. SAM105 ₁ ~105 ₄ mutual between, for example, IEEE (Institute of Elect
Rical and Electronics Eng
Iners) are connected via a bus 191 such as a 1394 serial interface bus.

[0093] SAM 105 ₁ to 105 ₄ is the secure container 104 network apparatus 160 ₁ is received on-line via a network from a content provider 101, and / or a recording medium from the content provider 101 to the AV apparatus ₁₆₀ 2 to 160 ₄ After decrypting the secure container 104 supplied off-line using the distribution key data KD _{1 to} KD ₃ for the corresponding period, the signature data is verified. SAM105
_1-105 secure container 104 supplied to _4,
Network devices 160 ₁ and AV apparatuses ₁₆₀ 2 to 1
In 60 _4, after the purchase and usage mode is determined in response to the user's operation, a target such as a recording of the reproducing or recording medium. The SAMs 105 _{1 to} 105 ₄ store the purchase / use history of the secure container 104 described above in the use history (Us
age Log) data 108 and
The usage control state data 166 indicating the purchase mode is created.
The usage history data 108 is transmitted from the user home network 103 to the EMD service center 102, for example, in response to a request from the EMD service center 102. The usage control state data 166 is transmitted from the user home network 103 to the EMD service center 102 every time the purchase mode is determined, for example.

[0094] The EMD service center 102 determines (calculates) the billing content based on the usage history data 108,
Based on the result, settlement is made to a settlement agency 91 such as a bank via the payment gateway 90. As a result, the money paid by the user of the user home network 103 to the settlement institution 91 is transferred to the EMD service center 102.
By the content provider 101
Paid for. In addition, the EMD service center 102
The settlement report data 107 is transmitted to the content provider 101 at regular intervals.

In this embodiment, the EMD service center 1
02 has an authentication function, a key data management function, and a right processing (profit distribution) function. That is, the EMD service center 102 sends a request to the root certificate authority 92, which is the highest authority in a neutral position, (the root certificate authority 92).
Second Certificate Authority (located below)
(Authorization Authority), the content provider 101 and the SA.
M105 ₁ ~105 to the public key certificate data of public key data to be used in the verification process of signature data in _4, EM
By attaching a signature using the secret key data of the D service center 102, the validity of the public key data is authenticated. Further, as described above, the EMD service center 102
It is also possible to register and authorize the rights document data 106 of the content provider 101 in the EMD service center 102.
Authentication function. In addition, the EMD service center 102 has a key data management function of managing key data such as distribution key data KD _{1 to} KD ₆ .
Further, the EMD service center 102 transmits the standard retail price SRP (Su) described in the
ggested Retailer 'Price) and SAM105 based on the usage log data 108 input from _{1 ~SAM105 4,} performs settled to purchase and use of content by the user, the right to distribute the money paid by the user to the content provider 101 It has a processing (profit sharing) function.

FIG. 2 is a diagram summarizing the concept of the secure container 104. As shown in FIG. 2, the secure container 104 stores the content file CF created by the content provider 101 and the EMD service center 10.
2 stores the key file KF created. The content file CF includes header data including a header portion and a content ID, encrypted content data C using the content key data Kc, and secret key data K of the content provider 101 for these.
_And signature data using _{CP and S} are stored. The key file KF includes header data including a header portion and a content ID, the content key data Kc encrypted by the distribution key data KD _{1 to} KD ₆ , the right certificate data 106, and the EMD service center 102 for these. The private key data _KESC, signature data by _S are stored.

Hereinafter, each component of the content provider 101 will be described in detail. [Content provider 101] Figure 3 is a functional block diagram of the content provider 101, the flow of the data related to the data transmitted and received between the SAM 105 ₁ to 105 ₄ of the user home network 103 is shown. FIG. 4 shows the content provider 101.
The flow of data related to data transmitted and received between the EMD service center 102 and the EMD service center 102 is shown. In the drawings after FIG. 4, the flow of data input / output to / from the signature data processing unit and the encryption / decryption unit using the session key data K _SES is omitted.

As shown in FIGS. 3 and 4, the content provider 101 includes a content master source database 111, a digital watermark information adding unit 112, and a compressing unit 11.
3. Encryption section 114, random number generation section 115, decompression section 11
6. Signature processing unit 117, secure container creation unit 11
8. Secure container database 118a, key file database 118b, storage unit (database) 1
19, a mutual authentication unit 120, an encryption / decryption unit 121, a license data creation unit 122, an auditory examination unit 123, a SAM management unit 124, an EMD service center management unit 125, and a content ID generation unit 850. Before communicating with the EMD service center 102, the content provider 101, for example, generates public key data generated by itself,
The user registers his / her own identification card and bank account number (account number for settlement) in the EMD service center 102 off-line, and obtains his / her own identifier (identification number) CP_ID. Further, the content provider 101 receives the public key data of the EMD service center 102 and the public key data of the root certificate authority 92 from the EMD service center 102. Hereinafter, each functional block of the content provider 101 shown in FIGS. 3 and 4 will be described.

Content master source database 11
1 stores content data, which is a master source of content to be provided to the user home network 103, and outputs content data S111 to be provided to the electronic watermark information adding unit 112.

The digital watermark information adding section 112 adds source digital watermark information (S
source Watermark Ws, digital watermark information for copy management (Copy Control Water)
rmark) Wc, user digital watermark information (User
Watermark Wu and link digital watermark information (Link Watermark) WL are embedded to generate content data S112, and the content data S112 is output to the compression unit 113.

The source digital watermark information Ws includes the name of the copyright holder of the content data, the ISRC code, the authoring date, and the authoring device ID (Identificati).
onData), copyright information such as a content distribution destination. The copy management electronic watermark information Wc is
This is information including a copy prohibition bit for copy protection via the analog interface. User digital watermark information Wu, e.g., SAM 105 ₁ to 105 ₄ of the identifier SAM identifier CP_ID and the user home network 103 of the content provider 101 for specifying a distributor and delivery destination of the secure container 104
_ID _{1 to} SAM_ID ₄ are included. The link digital watermark information (Link Watermark) WL includes, for example, the content ID of the content data C. The link digital watermark information WL is transferred to the content data C.
By embedding in, for example, television and AM / FM
Even when the content data C is distributed by analog broadcasting such as radio, the EMD service center 102 can introduce the content provider 101 handling the content data C to the user in response to a request from the user. That is, at the destination of the content data C, the link digital watermark information WL embedded in the content data C using the digital watermark information decoder is detected, and the content included in the detected link digital watermark information WL is detected. By transmitting the ID to the EMD service center 102, the EMD service center 102 can introduce the user to the content provider 101 handling the content data C or the like.

More specifically, for example, when the user listens to the radio in a car and presses a predetermined button when the user thinks that the song being broadcast is good, the user can select the electronic device built in the radio. The watermark information decoder detects the content ID included in the link digital watermark information WL embedded in the content data C, the communication address of the EMD service center 102 that has registered the content data C, and the like. The data is recorded on a medium SAM mounted on a portable medium such as a semiconductor memory such as a memory stick or an optical disk such as an MD (Mini Disk). Then, the portable medium is set to a network device equipped with a SAM connected to the network. Then, after the SAM and the EMD service center 102 perform mutual authentication, the personal information mounted on the media SAM and the recorded content ID and the like are transmitted from the network device to the EMD service center 102. After that, the network device receives, from the EMD service center 102, an introduction list or the like of the content provider 101 handling the content data C. In addition, for example, when the EMD service center 102 receives a content ID or the like from a user, the EMD service center 102 notifies the content provider 101 that provides the content data C corresponding to the content ID of information identifying the user. May be. In this case, the content provider 101 having received the communication transmits the content data C to the user's network device if the user is a contractor, and transmits promotion information regarding the user if the user is not a contractor. It may be transmitted to the user's network device.

In the second embodiment described later, the EMD service center 302 can introduce the service provider 310 handling the content data C to the user based on the link digital watermark information WL.

In the present embodiment, preferably, the contents and embedding position of each piece of digital watermark information are defined as a digital watermark information module WM, and the EMD service center 102 registers and manages the digital watermark information module WM. I do. Electronic watermark information module WM, for example, the network device 160 ₁ and AV apparatuses ₁₆₀ 2 to 160 ₄ in the user home network 103,
Used to verify the validity of digital watermark information. For example, in the user home network 103, based on the user digital watermark information module managed by the EMD service center 102, when both the embedding position of the digital watermark information and the content of the embedded digital watermark information match, the digital watermark information is By determining that the digital watermark information is valid, the embedding of the false electronic watermark information can be detected with a high probability.

[0105] The compression unit 113 outputs the content data S11.
2 for example, ATRAC3 (Adaptive Tr
anform Acoustic Coding
3) The content data S113 compressed by an audio compression method such as (trademark) is output to the encryption unit 114.
In this case, the digital watermark information may be embedded in the content data again at the time of compression by the compression unit 113. Specifically, as shown in FIG.
6, the contents data S116 is generated by expanding the contents data 113, and when the contents data S116 is reproduced by the auditory sense test section 123, the influence of the embedding of the digital watermark information on the sound quality is determined, for example, by actually listening to a human. If the predetermined criterion is not satisfied, the digital watermark information adding unit 112 is instructed to perform the digital watermark information embedding process again. Thus, for example, when an audio compression method involving loss of data is adopted, it is possible to appropriately cope with a case where the embedded digital watermark information is dropped due to the compression. Alternatively, the compressed content data may be expanded again to check whether the embedded digital watermark information can be detected accurately. In this case, the sound quality hearing is also verified, and if there is a problem with the hearing, the embedding of digital watermark information is adjusted. For example, when embedding digital watermark information using a masking effect, the level at which digital watermark information is embedded is adjusted.

[0106] The encrypting unit 114 stores the content key data K
c as a common key, and DES (Data Encrypt)
ption Standard) and Triple DE
Content data S11 using a common key encryption method such as S
3 is encrypted to generate content data C, which is output to the secure container creation unit 118. Further, the encryption unit 114 uses the content key data Kc as a common key, and executes A / V decompression software Soft, metadata M
After encrypting the eta and the digital watermark information management data WM, the encrypted data is output to the secure container creation unit 117.

DES is an encryption system that uses a 56-bit common key and processes 64 bits of plaintext as one block. The DES process consists of a part (data agitating unit) that converts plaintext into ciphertext and a part (key processing unit) that generates key (enlarged key) data used by the data agitating unit from common key data. Become. Since all the algorithms of the DES are disclosed, the basic processing of the data agitation unit will be briefly described here.

First, the 64 bits of the plaintext are divided into H ₀ of the upper 32 bits and L _{0 of the} lower 32 bits. The extended key data K ₁ and the lower 32 bits of the L ₀ of 48 bits supplied from the key processing unit as input, the output of the F function obtained by stirring the lower 32 bits of the L ₀ is calculated. The F function is
It consists of two types of basic conversion: "substitution" for replacing a numerical value with a predetermined rule and "transposition" for replacing a bit position with a predetermined rule. Next, the upper 32 bits H
_0, exclusive OR of the output of the F function is the calculation, the result is a L _1. L ₀ is set to H ₁ . Then, H ₀ of the upper 32 bits and L of the lower 32 bits
_{Based on 0} , the above processing is repeated 16 times, and the obtained upper 32 bits H ₁₆ and lower 32 bits L ₁₆ are output as ciphertext. Decryption is realized by reversing the above procedure using the common key data used for encryption.

The random number generation section 115 generates a random number having a predetermined number of bits, and stores the random number in the storage section 119 as content key data Kc. Note that the content key data Kc
May be generated from information on music provided by the content data. The content key data Kc is, for example,
It is updated every predetermined time. Further, when a plurality of content providers 101 exist, content key data Kc unique to each content provider 101 may be used, or content key data Kc common to all content providers 101 may be used.

In the key file database 118b,
As shown in FIG. 4, the EMD service center management unit 125
5 received from EMD service center 102 via
The key file KF shown in (B) is stored. The key file KF exists for each content data C, and as described later, a link relationship with the corresponding content file CF is specified by the directory structure data DSD in the header of the content file CF. The key file KF, FIG 5 (B) and FIG. 7, the header, content key data Kc, usage control policy data (license conditions) 106, SAM program download containers _SDC 1 _{~SDC 3} and the signature data S
IG _{K1 and ESC} are stored. Here, the signature data using the secret key data K _{ESC, S} of the content provider 101 is the signature data for all the data stored in the key file KF as shown in FIG.
_{K1 and ESC} , as shown in FIG. 7, signature data for the data from the header to the information on the key file, signature data for the content key data Kc and the license data 106, and SAM. program·
The signature data for the download container SDC may be provided separately. The content key data Kc and the right certificate data 106 and the SAM program download containers SDC _{1 to} SDC ₃ are encrypted using the distribution key data KD _{1 to} KD ₆ for the corresponding periods.

As shown in FIG. 7, the header data includes the synchronization signal, the content ID, and the secret key data K _{ESC, S} of the content provider 101 for the content ID.
Data, directory structure data, hyperlink data, information on the key file KF, and signature data of the content provider 101 using the secret key data K _{ESC, S} for the directory structure data. Various information can be considered as information to be included in the header data, and can be arbitrarily changed according to the situation. For example, the header data may include information as shown in FIG. The content ID includes, for example, information shown in FIG. Content ID
Is created in the EMD service center 102 or the content provider 101, and when created in the EMD service center 102, as shown in FIG.
_The signature data by the _{ESC, S} is attached, and when created by the content provider 101, the secret key data _{KCP, S} of the content provider 101 is attached. For example, as shown in FIG. 4, the content ID is created by the content ID generation unit 850 and stored in the storage unit 119. Note that the content ID may be created by the EMD service center 102.

The directory structure data includes the correspondence between the content files CF in the secure container 104, the content file CF and the key file K.
The correspondence with F is shown. For example, the content file _CF 1 _{~CF 3} in the secure container 104, if the key file _KF 1 _{~KF 3} corresponding thereto is stored, as shown in FIG. 10, the content file _CF 1 _{~CF 3} and links between them, and the link relationship between the content files _CF 1 _{~CF 3} and the key files _KF 1 _{~KF 3} is established by the directory structure data. The hyperlink data includes a hierarchical structure between the key files KF and a content file C for all files inside and outside the secure container 104.
The correspondence between F and the key file KF is shown. Specifically, as shown in FIG.
Information of the link destination of each content file CF and key file KF and its authentication value (hash value)
And verifies the link relationship by comparing the hash value of its own address information obtained using the hash function H (x) with the authentication value of the other party.

As shown in FIG. 7, the content of the content ID, the content provider 10
1, the identifier CP_ID, the expiration date of the license data 106, the communication address of the EMD service center 102, the usage space survey information, the wholesale price information, the handling policy, the handling control information, the handling control information of the product demonstration (listening), and the related information. This includes signature data. In addition, the second
As in the embodiment, the secure container 3 is connected to the user home network 303 via the service provider 310.
04, the license card data 106 includes the identifier SP_ID of the service provider 310 that provides the secure container 104 to the content provider 301.
Is included.

Also, SAM program download
As shown in FIG. 7, the containers SDC _{1 to} SDC ₃
A download driver indicating a download procedure used when downloading a program in the SAMs 105 _{1 to} 105 ₄ , and a rights certificate data (UCP) U 1
UCP-L (Lab) indicating the syntax (grammar) of
el). Label readers such as R (Reader) and S
A lock key data for the locked state / unlocked state in block units rewriting and erasing of AM105 ₁ ~105 ₄ incorporated in a storage unit (flash -ROM), includes the signature data for them.

The storage unit 119 includes various databases including a database for storing public key certificate data, for example.

The signature processing unit 117 obtains a hash value of the data to be signed and uses the secret key data _{KCP, S} of the content provider 101 to create the signature data SIG.

The hash value is generated using a hash function. The hash function is a function that receives target data as input, compresses the input data into data having a predetermined bit length, and outputs the data as a hash value. It is difficult for a hash function to predict an input from a hash value (output). When one bit of data input to the hash function changes, many bits of the hash value change. It has the characteristic that it is difficult to find the input data that it has.

[0118] The secure container creation unit 118 is configured as shown in FIG.
As shown in (A), the header data and the encryption unit 114
, Metadata Meta and content data C, A /
A content file CF storing V-decompression software Soft and a digital watermark information module (Watermark Module) WM is generated.

As shown in FIG. 6, the content file CF may include a file reader and signature data of the file reader using the secret key data _{Kcp, S.} By doing so, the SAMs 105 ₁ to 105 _1
4 , the plurality of secure containers 104 storing the content files CF of different formats received from the plurality of secure containers 104 of different series can be efficiently processed.

Here, the file reader is used when reading the content file CF and the corresponding key file KF, and shows the reading procedure of these files. However, in the present embodiment, the EMD service center 102 to the SAM 105 ₁ to 105 _4, which illustrates the case where sending the files reader in advance. That is, in the present embodiment, the content file CF of the secure container 104 does not store a file reader.

As shown in FIG. 6, the header data includes a synchronization signal, a content ID, signature data of the content provider 101 using the secret key data _{KCP, S} for the content ID, directory information, hyperlink information, and serial data. Number, expiration date of content file CF and creator information, file size, presence or absence of encryption,
Information about cryptographic algorithms, signature algorithms,
And the signature data of the content provider 101 using the secret key data _{KCP, S for} directory information and the like.

As shown in FIG. 6, the metadata Meta includes a description of the product (content data C), product demonstration advertisement information, product-related information, and signature data of these items by the content provider 101. In the present invention, as shown in FIGS. 5 and 6, a case where the metadata Meta is stored in the content file CF and transmitted is exemplified. However, the metadata Meta is not stored in the content file CF, and The content provider 101 is provided on a route different from the route for transmitting the CF.
It may be transmitted, such as to SAM105 ₁ from.

The A / V decompression software Soft is installed on the network device 16 of the user home network 103.
In 0 ₁ and AV apparatuses ₁₆₀ 2 to 160 _4, a software used when decompressing the content file CF, for example, a decompression software ATRAC3 technique. Thus, by storing the A / V decompression software Soft in the secure container 104, SAM 105 ₁ to 105 ₄ in the software stored A / V decompression in the secure container 104 So
The content data C can be expanded using ft. Even if the content provider 101 freely sets the compression and expansion method of the content data C for each content data C or each content provider 101, a great burden is imposed on the user. We do not put on.

As described above, the digital watermark information module WM includes, for example, information and software necessary for detecting digital watermark information embedded in the content data C.

Further, the secure container creating unit 118
The content file CF shown in FIG.
Signature data SIG of the content file CF
_{6, corresponding to the CP} and the content file CF read from the key file database 118b.
The key file KF shown in FIG.
F, the signature data SIG _{7, CP of the} F, the public key certificate data CER _{CP of} the content provider 101 read from the storage unit 119, and the public key certificate data CER
A secure container 104 storing the _{CP signature data SIG1 and ESC} is generated.

Here, the signature data SIG _{6 and CP} are used at the destination of the secure container 104 to verify the legitimacy of the creator and sender of the content file CF. Here, the signature data SIG
_{7, CP} is used at the destination of the secure container 104 to verify the validity of the sender of the key file KF. It should be noted that the validity of the creator of the key file KF at the destination of the secure container 104 is verified by checking the signature data SIG in the key file KF.
_This is performed based on _{K1, ESC} . The signature data S
The IG _{K1 and ESC} are also used to verify whether the key file KF is registered in the EMD service center 102.

In the present embodiment, the compression method of the content data C, the presence / absence of compression, the encryption method (including both the common key encryption method and the public key encryption method), and the The encrypted content data C is stored in the secure container 104 in a format that does not depend on the specifications (such as the sampling frequency) and the signature data creation method (algorithm). That is,
These items can be freely determined by the content provider 101.

Further, the secure container creation unit 118
The secure container 104 stored in the secure container database 118a is stored in the SA in response to a request from the user.
Output to the M management unit 124. Thus, in the present embodiment, the public key data K of the content provider 101
The public key certificate CER _CP of the _{CP, P} is stored in the secure container 104 and transmitted to the user home network 103 using an in-band method. Therefore, the user home network 103 does not need to communicate with the EMD service center 102 to obtain the public key certificate CER _CP . In the present invention, the public key certificate CER _CP is
, The user home network 103
Public key certificate CER _CP from MD service center 102
Out-of-Ban (Out-Of-Ban)
d) The method may be adopted.

When the content provider 101 transmits / receives data between the EMD service center 102 and the user home network 103 online, the mutual authentication unit 120 transmits the EMD service center 102
And mutual authentication with the user home network 103 to generate session key data (shared key) K _SES . The session key data K _SES is newly generated each time mutual authentication is performed.

The encryption / decryption unit 121 encrypts the data transmitted from the content provider 101 to the EMD service center 102 and the user home network 103 online using the session key data K _SES . Further, the encryption / decryption unit 121 decrypts data received online by the content provider 101 from the EMD service center 102 and the user home network 103 using the session key data K _SES .

[0131] The license data creation unit 122 creates the license data 106 and outputs it to the EMD service center management unit 125. The rights certificate data 106 is a descriptor (descriptor) that defines the operation rule of the content data C. For example, the standard retail price SRP (Suggest) desired by the operator of the content provider 101 is
ed Retailer 'Price) and a copy rule of the content data C are described.

The SAM management unit 124 supplies the secure container 104 to the user home network 103 offline and / or online. Also, SAM
When distributing the secure container 104 online to the SAMs 105 _{1 to} 105 ₄ , the management unit 124 uses a communication protocol for transmitting the secure container 104 as a communication protocol.
For digital broadcasting, MHEG (Multimedia
and Hypermedia information
n coding Experts Group) protocol, and XML / SMI for the Internet.
L / HTML (Hyper TextMarkup L
The secure container 104 is embedded in these communication protocols by tunneling in a format that does not depend on the encoding method. Therefore, there is no need to ensure format consistency between the communication protocol and the secure container 104, and the secure container 104
Format can be set flexibly. Note that the content provider 101 sends the user home network 103
The communication protocol used when transmitting the secure container 104 to the server is not limited to the above-described one, and is arbitrary.

FIG. 12 shows a ROM used in this embodiment.
It is a diagram for explaining the type of the recording medium 130 _1. FIG.
As shown in 2, the recording medium 130 ₁ of ROM type, RO
It has an M area 131, a secure RAM area 132, and a media SAM 133. In the ROM area 131, FIG.
The content file CF shown in (A) is stored. The secure RAM area 132 is an area that requires a predetermined permission (authentication) to access the stored data, and the key file KF and the public key certificate data shown in FIGS. The MAC (Message Authenticati) is used as an argument with the CER _CP and the recording key data K _STR having a unique value according to the type of device.
on Code) signature data generated using the function,
The key file KF and the public key certificate data CER
_CP and media key data K having a value specific to the recording medium
_The data encrypted using the _MED is stored. Also, the secure RAM region 132, for example, a public key certificate revocation data identifying the content provider 101 and SAM 105 ₁ to 105 ₅ which became invalid in such fraud (revocation list) is stored. Also,
The SAMs 105 _{1 to} 105 ₄ of the user home network 103 are stored in the secure RAM area 132 as described later.
Control state (UCS) data 1 generated when the purchase / use form of the content data C is determined in
66 and the like are stored. As a result, the usage control state data 166 is stored in the secure RAM area 132, so that the ROM type recording medium 13 whose purchase / use mode has been determined is determined.
0 ₁ The media SAM 133 includes, for example, RO
Media ID is a M-type identifier of the recording medium 130 ₁
And media key data K _MED are stored. The media SAM 133 has, for example, a mutual authentication function.

[0134] As ROM-type recording medium used in the present embodiment, for example, in addition to those shown in FIG. 12, RO shown in the recording medium 130 ₂ and 14 of ROM type shown in FIG. 13
Such as M-type recording medium 130 ₃ is also conceivable. Recording medium 130 ₂ of ROM type shown in FIG. 13, and a media SAM133 having the ROM area 131 the authentication function, Figure 1
As the recording medium 130 ₁ of ROM type shown in 2 is not provided with the secure RAM region 132. In the case of using the recording medium 130 ₂ of ROM type, and records the content file CF in the ROM area 131, and stores the key file KF in the media SAM 133. The ROM shown in FIG.
Recording medium 130 ₃ type has a ROM area 131 and the secure RAM region 132, does not have the media SAM133 like recording medium 130 ₁ of ROM type shown in FIG. 12. In the case of using the recording medium 130 ₃ of ROM type, and records the content file CF in the ROM area 131, and records the key file KF in the secure RAM region 132. In the case of using the recording medium 130 ₃ of ROM type, mutual authentication is not performed between the SAM. In this embodiment, a RAM-type recording medium is used in addition to a ROM-type recording medium.

As a RAM type recording medium used in the present embodiment, for example, as shown in FIG.
33, RAM type recording medium 130 having a RAM area 134 is not a secure RAM region 132 and secure ₄
There is. RAM type recording medium at 130 _4, the media S
The AM 133 has an authentication function and stores a key file KF. In the RAM area 134, a content file CF is recorded. Also, the RAM used in the present embodiment
Other types of recording media include the RAM shown in FIG.
Like recording medium 130 ₆ RAM type shown in the type of the recording medium 1350 ₅ and 17 are also contemplated. RA shown in FIG.
Recording medium 130 ₅ M type has a RAM area 134 is not secure and the media SAM133 having an authentication function, does not have the secure RAM region 132 as the recording medium 130 ₄ of RAM type shown in Figure 15. In the case of using the recording medium 130 ₅ of RAM type, RAM region 134
The content file CF is recorded in the media SAM1.
33 stores the key file KF. The recording medium 130 ₆ RAM type shown in FIG. 17 has a RAM area 134 is not a secure RAM region 132 and the secure,
It has no media SAM133 like recording medium 130 ₄ of RAM type shown in Figure 15. In the case of using the recording medium 130 ₆ RAM type records the content file CF in the RAM region 134, the secure RAM region 132
Record the key file KF. In the case of using the recording medium 130 ₆ RAM type, mutual authentication is not performed between the SAM.

When the secure container 104 is to be distributed to the user home network 103 online using a network or digital broadcasting, the SAM management unit 124 _{converts the} session key data K _SES into the encryption / decryption unit 121. Using secure container 104
Is encrypted, and distributed to the user home network 103 via the network. In the present embodiment, SA
As the M management unit, the EMD service center management unit, and the content provider management unit and the service provider management unit described later, for example, communication having a tamper-resistant structure in which monitoring (monitoring) of internal processing contents and tampering are difficult or difficult. A gateway is used.

[0137] Here, distribution of the content data C from the content provider 101 to the user home network 103, either right as when using the case and a network carried out using the recording medium 130 ₁ as described above performs online A common format secure container 104 in which the document data 106 is stored is used. Therefore, the SAMs 105 _{1 to} 105 ₄ of the user home network 103
Now, whether you ’re offline or online,
Rights processing based on the common rights data 106 can be performed.

As described above, in this embodiment,
In the secure container 104, the content key data Kc
And an in-band method of encapsulating the content data C encrypted with the content key data Kc for decrypting the content data. The in-band method has an advantage in that it is not necessary to separately distribute the content key data Kc when the content data C is to be reproduced on a device of the user home network 103, and the load of network communication can be reduced. The content key data Kc is the distribution key data KD ₁ to
It is encrypted with KD _6, but the distribution key data _KD 1 ~
The KD ₆ is managed by the EMD service center 102 and the SAM 105 _{1 of the} user home network 103
To 105 in advance to ₅ (SAM105 _{1 ~105 4} is EM
D service center 102 for the first time), the user home network 103 does not connect to the EMD service center 102 online, but stores the content data C
Can be used. Note that the present invention has the flexibility to adopt an out-of-band (Out-Of-Band) method of separately supplying the content data C and the content key data Kc to the user home network 103 as described later. are doing.

The EMD service center management unit 125
Settlement report data 10 from MD service center 102
7 are received by the encryption / decryption unit 121 using the session key data K _SES ,
The information is stored in the storage unit 119. Settlement report data 107
Is, for example, the content provider 1 that the EMD service center 102 performed for the settlement agency 91 shown in FIG.
01 is described.

Further, the EMD service center management unit 125
Transmits the content ID, public key data _{KCP, P} and their signature data SIG9 _{, CP,} which are globally unique (Global Unique) identifiers of the content data C to be provided _, to the EMD service center 102.
, And the public key certificate data CER _CP of the public key data K _{CP and P} is input from the EMD service center 102. Further, the EMD service center management unit 125 registers the content key data Kc, the rights document data 106, and the electronic watermark information management data WM for each of the content data C in the EMD service center 102 and receives the key file KF. As shown in FIG. 18, the content ID is the globally unique identifier of the content data C to be provided, the content key data Kc, the rights certificate data 106, the digital watermark information management data WM, and the globally unique identifier of the content provider 101. A registration module Mo that stores CP_ID and signature data SIG _{M1 and CP} based on the secret key data K _{CP and S} of the content provider 101 for them.
To create a d _2. Then, the EMD service center management unit 125 encrypts the registration module Mod ₂ with the encryption / decryption unit 1
At 21, the data is encrypted using the session key data K _SES and then transmitted to the EMD service center 102 via the network. EMD service center management unit 12
As described above, for example, as described above, a communication gateway having a tamper-resistant structure in which monitoring (monitoring) of internal processing contents and tampering are difficult or difficult is used.

Hereinafter, the flow of processing in the content provider 101 will be described with reference to FIGS. 3 and 4. It is to be noted that assuming that the following processing is performed, a person involved in the content provider 101 performs registration processing in the EMD service center 102 offline using, for example, his / her own ID card and a bank account for performing payment processing. , Globally unique identifier CP_ID. The identifier CP_ID is stored in the storage unit 119.

First, the content provider 101 sets the E
In the MD service center 102, its own secret key data K
_CP, the public key data K _CP corresponding to _S, the processing will be described with reference to FIG. 4 in the case of requesting the public key certificate data CER _CP to prove the validity of the _S. The content provider 101 generates a random number using a true random number generator, generates secret key data _{KCP, S,} and creates public key data _{KCP, P} corresponding to the secret key data _{KCP, S.} The information is stored in the storage unit 119. The EMD service center management unit 125 stores the identifier CP of the content provider 101.
_ID and public key data KCP _{, P} are read from the storage unit 119. Then, the EMD service center management unit 12
5 is an identifier CP_ID and public key data K _{CP, P}
Is transmitted to the EMD service center 102. And
In response to the registration, the EMD service center management unit 125 inputs the public key certificate data CER _CP and its signature data SIG _{1 and ESC} from the EMD service center 102 and writes them into the storage unit 119.

Next, the content provider 101
In the MD service center 102, the content key data Kc,
Rights certificate data 106 and digital watermark information management data W
M, and receives the key file KF corresponding to the content data C.
This will be described with reference to FIG. Registration of the license data 106 and the like is performed for each content data C. FIG. 19 shows that the content provider 101
9 is a flowchart for explaining a registration process to the service center 102.

Step A1: Mutual authentication is performed between the mutual authentication unit 120 of the content provider 101 and the EMD service center 102 shown in FIG. Step A2: The content key 101 and the EMD service center 102 share the session key data K _SES obtained by the mutual authentication performed in step A1.

Step A3: Content Provider 10
1 reads a content ID to be registered in the EMD service center 102, content key data Kc, rights certificate data 106, digital watermark information management data WM, CP_ID, and the like from a database such as the storage unit 119. Step A4: In the signature processing unit 117, using the secret key data _{KCP, S} of the content provider 101,
The signature data SIG _{M1 and cp} indicating the legitimacy of the sender are created for the module including the license data 106 read in step A3. Then, as shown in FIG. 18, the EMD service center management unit 125 sends the content ID, the content key data Kc,
6. Digital watermark information management data WM and CP_ID
And a registration module Mod ₂ storing the signature data SIG _{M1 and cp} for these.

Step A5: The encryption / decryption unit 121
The registration module Mod ₂ created in step A4 is
The encryption is performed using the session key data K _SES shared in step A2. Step A6: The EMD service center management section 125
The registration module Mod ₂ encrypted in step A5 is transmitted to the EMD service center 102.

The processing after step A7 is processing in the EMD service center 102. Step A7: EMD service center 102, a registration module Mod ₂ received is decrypted using the session key data _{K SES} shared at step A2. Step A8: EMD service center 102, the signature data S stored in the registration module Mod ₂ decoded
The IG _{M1 and cp} are verified using the public key data _{KCP and P} , the validity of the sender of the registration module Mod ₂ is confirmed, and the process of step A9 is performed on condition that the validity of the sender has been proved. . Step A9: EMD service center 102, the content ID stored in the registration module Mod _2,
The content key data Kc, the copyright certificate data 106, the digital watermark information management data WM, and the CP_ID are stored and registered in a predetermined database.

The EMD service center management unit 125
As shown in FIG. 18, after the registration process corresponding to the registration module Mod ₂ is performed in the EMD service center 102, for example, a key file KF for six months is received from the EMD service center 102, and the mutual authentication unit 120 and E
Using the session key data K _SES obtained by mutual authentication with the MD service center 102, the received key file KF is decrypted and then stored in the key file database 118b.

[0149] Next, the content provider 101 will be described with reference to FIGS. 3 and 4 the processing when transmitting the secure container 104 to the SAM 105 ₁ of the user home network 103. In the following examples, it illustrates the case of transmitting the secure container 104 from the content provider 101 to SAM 105 _1, the case of transmitting the secure container 104 to SAM105 ₂ ~105 _4, SAM105 ₂ ~10 through the SAM 105 ₁
5 ₄ is the same except that it is sent to. First, as shown in FIG. 3, the content data S111 is read from the content master source database 111 and output to the digital watermark information adding unit 112. Next, the digital watermark information adding unit 112 generates the content data S112 by embedding the digital watermark information in the content data S111, and outputs this to the compression unit 113. Next, the compression unit 1
13 stores the content data S112 in, for example, ATRA
The content data S113 is created by compression using the C3 method, and is output to the encryption unit 114. Further, as shown in FIG. 4, the random number generation unit 115 generates a random number to generate content key data Kc, and the generated content key data Kc is stored in the storage unit 119.

Next, the encrypting unit 114 stores the content data S 113 input from the compressing unit 113 and the storage unit 119.
Meta, A / V decompression software Soft and digital watermark information management data WM
Are encrypted using the content key data Kc and output to the secure container creation unit 118. In this case, the metadata Meta and the digital watermark information management data WM
Need not be encrypted. Then, the secure container creator 118 creates the content file C shown in FIG.
Create F. In the signature processing unit 117, a hash value of the content file CF is obtained, and signature data SIG6 _{, CP} is generated using the secret key data _{KCP, S.}

Further, the secure container creation unit 118
The key file KF corresponding to the content data C is read from the key file database 118b, and is output to the signature processing unit 117. And the signature processing unit 11
7 takes the hash value of the key file KF input from the secure container creation unit 118 and outputs the secret key data K
_The signature data SIG7 _{, CP} is generated using _{CP, S} ,
This is output to the secure container creation unit 118. Next, the secure container creation unit 118 transmits the content file CF and its signature data SIG shown in FIG.
_{6 and CP} , the key file KF and its signature data SIG7 _{and CP} shown in FIG. 5B, and the public key certificate data CER shown in FIG.
_The secure container 104 storing the _CP and its signature data SIG1 _{and ESC} is created and stored in the secure container database 118a. Then, the secure container creating unit 118 responds to the request (request) from the user, for example, by the user home network 1
The secure container 104 to be provided to 03 is read from the secure container database 118a, the encryption and decryption unit 121 by using the session key data _{K SES} obtained by the mutual authentication between the mutual authentication unit 120 and the SAM 105 ₁ and After the encryption, the SAM of the user home network 103 via the SAM management unit 124
To send to the AM105 _1.

The outline of the overall flow of the process of the content provider 101 will be described below in connection with the secure container creation process. FIGS. 20, 21, and 22 are flowcharts for explaining the flow of the processing. Step B1: The content provider 101 receives in advance his public key certificate data _{CER CP} from the EMD service center 102, storage unit (database) 119
To be stored. Step B2: Digitize a content master source such as newly authored content data or already stored legacy content data, further assign a content ID, and store it in the content master source database 111 for centralized management. Step B3: Metadata Meta is created in each of the content master sources centrally managed in step B1, and this is stored in the storage unit 119.

Step B4: The content data S111, which is the content master source, is read from the content master source database 111, output to the digital watermark information adding unit 112, and the digital watermark information is embedded to generate the content data S112. Step B5: The digital watermark information adding section 112 stores the content of the embedded digital watermark information and the embedding position in a predetermined database. Step B6: The compression section 113 compresses the content data S112 in which the digital watermark information is embedded to generate the content data S113. Step B7: The decompression section 116 decompresses the compressed content data S113 to expand the content data S1.
16 is generated. Step B8: The hearing test section 123 performs a hearing test on the expanded content data S116. Step B9: The content provider 101 converts the digital watermark information embedded in the content data S116 into
Detection is performed based on the embedding content and embedding position stored in the database in step B5. If both the auditory test and the detection of the digital watermark information succeed, the content provider 101 performs the process of step B10, and if either of them fails, the process proceeds to step B10.
Step 4 is repeated.

Step B10: The random number generation unit 115 generates a content key data Kc by making a random number, and stores it in the storage unit 119. Step B11: The encryption section 114 encrypts the compressed content data S113 using the content key data Kc to create the content data C.

Step B12: Rights certificate data creation unit 12
In 2, the license data 106 for the content data C is created. Step B13: The content provider 101 sets the SR
P is determined and stored in the storage unit 119. Step B14: The content provider 101 outputs the content ID, the content key data Kc and the license data 106 to the EMD service center 102. Step B15: The content provider 101 inputs the encrypted key file KF in the distribution use key data _KD 1 _{~KD 3} from the EMD service center 102. Step B16: The content provider 101 stores the input key file KF in the key file database 11
8b.

Step B17: Content Provider 1
01 connects the link relationship between the content data C and the key file KF by a hyperlink. Step B18: The signature processing unit 117 creates signature data for each of the content data C and the key file KF, using the secret key data _{KCP, S} to determine the validity of the creator. Step A19: The secure container creation unit 118 creates the secure container 104 shown in FIG.

Step B20: When content data is provided in a composite format using a plurality of secure containers, the processes of steps B1 to A19 are repeated to create each secure container 104, and the content file CF and the key file KF A link relationship between
The link relationship between the content files CF is connected using a hyperlink or the like. Step B21: The content provider 101 stores the created secure container 104 in the secure container database 118a.

[EMD Service Center 102] The EMD service center 102 performs authentication (CA: Certificate).
ate Authority) function, key management (Key)
Management and rights processing (Right)
ts Clearing (profit sharing) function.
FIG. 23 is a configuration diagram of functions of the EMD service center 102. As shown in FIG. 23, the EMD service center 1
02 denotes a key server 141, a key database 141a, a settlement processing unit 142, a signature processing unit 143, and a settlement organization management unit 1.
44, a certificate / rights management unit 145, a rights database 145a, a certificate database 145b, a content provider management unit 148, a CP database 148a,
It has a SAM management unit 149, a SAM database 149a, a mutual authentication unit 150, an encryption / decryption unit 151, and a KF creation unit 153. FIG. 23 shows a flow of data related to data transmitted / received to / from the content provider 101 among data flows between functional blocks in the EMD service center 102. FIG. 24 shows the SAM 105 ₁ among the data flows between the functional blocks in the EMD service center 102.
To 105 ₄ and the flow of the data related to the data transmitted and received between the settlement organization 91 shown in FIG. 1 is shown.

The key server 141 has a key database 141
The distribution key data each having a validity period of one month stored in a is read out for six months in response to a request, and the SAM management unit 149 is read.
Output to Also, in addition to the key database 141a distribution key data KD, key data such as secret key data K _{ESC, S} of the EMD service center 102, recording key data K _STR , media key data K _MED, and MAC key data K _MAC are stored. A series of key data to be stored is stored.

[0160] the settlement processing unit 142, SAM105 ₁ ~1
05 ₄ and the usage log data 108 input from the, certificate,
Standard retail price data S input from the rights management section 145
The settlement processing is performed based on the RP and the sales price, the settlement report data 107 and the settlement claim data 152 are created, the settlement report data 107 is output to the content provider management unit 148, and the settlement claim data 152 is managed by the settlement organization. Output to the unit 144. Note that the settlement processing unit 1
42 monitors whether or not a transaction with an illegal dumping price has been made based on the selling price. Here, the usage history data 108 is stored in the user home network 10
3 shows the history of purchase and use (playback, recording, transfer, etc.) of the secure container 104 in
Used at 42 to determine the payment amount of the license fee associated with the secure container 104.

The usage history data 108 includes, for example, a content ID which is an identifier of the content data C stored in the secure container 104,
Of the content provider 101 that has distributed the
ID, content data C in secure container 104
Compression method, identifier Media_ID of recording medium on which secure container 104 is recorded, secure container 104
The received a distribution SAM105 ₁ ~105 ₄ of the identifier SA
M_ID, U of the user of the relevant SAM 105 _{1 to} 105 ₄
SER_ID and the like are described. Therefore, the EMD service center 102 needs to distribute the money paid by the user of the user home network 103 to a license owner such as a compression method or a recording medium other than the owner of the content provider 101. Is
An amount to be paid to each partner is determined based on a predetermined distribution ratio table, and settlement report data 107 according to the determination is determined.
And the payment request data 152 are created. The distribution ratio table is created for each content data stored in the secure container 104, for example.

The settlement request data 152 is an authoritative data that can request payment to the settlement agency 91 based on the data. For example, the money paid by the user is distributed to a plurality of right holders. In this case, it is created for each individual right holder. When the settlement is completed, the settlement institution 91 sends the usage statement of the settlement institution to the EMD service center 102. The EMD service center 102
The content of the usage statement is notified to the corresponding right holder.

The settlement institution management unit 144 includes the settlement processing unit 14
2 transmits the settlement request right data 152 generated to the settlement institution 91 via the payment gateway 90 shown in FIG. 1. As will be described later, the settlement institution management unit 144
The payment request data 152 is transferred to the content provider 10
Payment request data 1 transmitted to and received from the right holder such as 1.
Using 52, the right holder may make a payment to the clearing house 91 by himself. Further, the settlement institution management unit 144 takes the hash value of the settlement request data 152 in the signature processing unit 143, and sends the signature data SIG ₉₉ generated using the secret key data K _{ESC, S} together with the settlement request data 152 to the settlement institution. Send it to 91.

[0164] certificate and rights certificate management unit 145, along with the certificate registered in the database 145b (recorded) has been the authority of public key certificate data _{CER CP} and the public key certificate data _CER SAM1 _{~CER SAM4} read, etc. , Rights document data 10 of the content provider 101
6. The content key data Kc and the digital watermark information management data WM are registered in the right certificate database 145a and are authorized. Here, a search is performed using the content ID as a search key in the rights certificate database 145a, and a search is performed using the identifier CP_ID of the content provider 101 as the search key in the certificate database 145b. Further, the certificate / rights management unit 145 takes hash values of, for example, the rights data 106, the content key data Kc and the digital watermark information management data WM, and converts the signature data using the secret key data K _{ESC, S.} The attached authority data is stored in the rights certificate database 145a.

The content provider management unit 148 has a function of communicating with the content provider 101, and stores the identifier C of the registered content provider 101.
The user can access the CP database 148a that manages P_ID and the like.

[0166] SAM management unit 149 has a function of communication with the SAM 105 ₁ to 105 ₄ in the user home network 103, registered SAM identifier SAM
The user can access the SAM database 149a that records the _ID and the SAM registration list.

The KF creation unit 153 converts the content key data Kc and the license data 106 input from the content provider management unit 148 and the SAM program download containers SDC _{1 to} SDC ₃ into the signature processing unit 1.
43. Further, the KF creation unit 153 sends the distribution key data KD of the corresponding period input from the key server 141.
Using a _{1 ~KD 6,} content key data Kc, usage control policy data 106 and the SAM program download
As shown in FIG. 5B, the containers SDC _{1 to} SDC ₃ are encrypted, and the encrypted data and the signature processing unit 14 are encrypted.
3 and the signature data SIG by the secret key data K _{ESC, S} for the encrypted data
Create a key file KF containing _{K1 and ESC} ,
The created key file KF is stored in the KF database 15.
3a.

Hereinafter, the flow of processing in the EMD service center 102 will be described. First, the EMD service center 1
02 to SAM1 in the user home network 103
The flow of processing when transmitting the distribution key data 05 _{from 1} to 105 _4, will be described with reference to FIG. 24. As shown in FIG. 24, the key server 141, for example,
The distribution key data KD _{1 to} KD ₃ for three months are read from the key database 141 a and output to the SAM management unit 149. In addition, the signature processing unit 143 sends the distribution key data KD
₁ takes the respective hash values of ~KD _3, EMD service center 102 the secret key data _{K ESC, and} with _S, the signature data corresponding to each _{SIG KD1,} ESC to S
IG _{KD3, ESC} is created, and the SAM management unit 14
9 is output. SAM management unit 149, mutual between the three months of distribution key data _KD 1 _{~KD 3} and their signature data _{SIG KD1, ESC ~SIG KD3, ESC} , the mutual authentication unit 150 and the SAM105 ₁ ~105 ₄ and after encrypting using the session key data _{K SES} obtained by the authentication, and transmits to the SAM 105 ₁ to 105 _4.

Next, the EMD service center 102 transmits the public key certificate data CE from the content provider 101.
The process when the _RCP issuance request is received will be described with reference to FIG. In this case, when the content provider management unit 148 receives the identifier CP_ID of the content provider 101, the public key data KCP _{, P,} and the signature data SIG9 _{, CP} from the content provider 101, the content provider management unit 148 exchanges these with the mutual authentication unit 150 and FIG. _Is decrypted using the session key data K _SES obtained by mutual authentication with the mutual authentication unit 120 shown in FIG. Then, the validity of the decrypted signature data SIG9 _{, CP} is determined by the signature processing unit 143.
, The content provider 101 that has issued the public key certificate data issuance request based on the identifier CP_ID and the public key data KCP _{, P}
It is confirmed whether or not it is registered in the database 148a. Then, the certificate / rights management unit 145 transmits the public key certificate data CER of the content provider 101.
_{The CP} is read from the certificate database 145b and output to the content provider management unit 148. Further, the signature processing unit 143 obtains a hash value of the public key certificate data CER _CP , and uses the secret key data K _{ESC, S} of the EMD service center 102 to _generate the signature data SIG.
_1. Create _{an ESC} and output it to the content provider management unit 148. Then, the content provider management unit 148 converts the public key certificate data CER _CP and its signature data SIG _{1 and ESC} into a session key obtained by mutual authentication between the mutual authentication unit 150 and the mutual authentication unit 120 shown in FIG. After encrypting with data K _SES ,
The content is transmitted to the content provider 101.

Next, the EMD service center 102 sets the SA
From M105 _1, a process when receiving the request for issuing the public key certificate data _{CER SAM1,} when this is described with reference to FIG. 24, SAM management unit 149, SAM
105 ₁ Identifier SAM ₁ _ID, Public Key Data K
_{SAM1, P} and signature data _{SIG8, SAM1}
When they are received from the AM 105 ₁ , they are
It decrypted using the session key data _{K SES} obtained by the mutual authentication between 50 and SAM 105 ₁ and. Then, after the legitimacy of the signature data _{SIG 8, SAM1} that the decoded confirmed in the signature processing unit 143, the identifier _SAM 1 _
Based on the ID and the public key data K _{SAM1, P} , the SAM 105 that has issued the public key certificate data issuance request
₁ is registered in the SAM database 149a. Then, the certificate / rights management unit 145
The public key certificate data CER of the SAM105 _1
The SAM 1 is read from the certificate database 145b and output to the SAM management unit 149. Also, the signature processing unit 14
3 takes the hash value of the public key certificate data CER _{SAM 1} and outputs the secret key data K of the EMD service center 102.
Using E _{KSC, S} , the signature data SIG _{50, ESC}
And outputs it to the SAM management unit 149. Then, the SAM management unit 149 sends the public key certificate data CER
_SAM1 and its signature data SIG _{50, ESC}
After encrypting using the session key data _{K SES} obtained by the mutual authentication between the mutual authenticator 150 and the SAM 105 ₁ and transmits to the SAM 105 _1. The SAM105
_{2-105 4,} the processing when requesting the public key certificate data, subject only replaces the SAM 105 ₂ to 105 _4, it is basically the same as for the above-described SAM 105 _1. In the present invention, the EMD service center 102
For example, when the SAM 105 ₁ is shipped,
₁ private key data K _{SAM1, S} and public key data K
_SAM1, when stored _P to SAM 105 ₁ of the storage unit, at the time of the shipment, may create a public key certificate data _{CER SAM1} of the public key data _{K SAM1, P.} At this time, at the time of shipment, the public key certificate data CER
The _SAM1, may be stored in the storage unit of the SAM 105 _1.

Next, the processing when the EMD service center 102 receives the registration module Mod ₂ shown in FIG. 18 from the content provider 101 will be described with reference to FIG. In this case, the content provider management unit 148 sends the content provider 101 from FIG.
When the registration module Mod ₂ shown in FIG. 4 is received, the registration module Mod ₂ is decrypted using the session key data K _SES obtained by the mutual authentication between the mutual authentication unit 150 and the mutual authentication unit 120 shown in FIG. Then, the signature processing unit 143 uses the public key data K _{cp, P} read from the key database 141 a to generate the signature data SIG.
Verify the validity of _{M1 and CP} . Next, certificate-Entitlement management unit 145, usage control policy data 106 stored in the registration module Mod _2, the content key data Kc, electronic watermark information management data WM and SRP, and registers the usage control policy database 145a.

Next, the content provider management unit 148
Is the content key data Kc and the rights certificate data 106
Is output to the KF creation unit 153. Next, the KF creation unit 15
3 is the content key data Kc and the license data 106 input from the content provider management unit 148,
SAM program download container SDC ₁ ~
The SDC ₃ is output to the signature processing unit 143. Then, the signature processing unit 143 takes a hash value for the entire data input from the KF creation unit 153 _, and creates the signature data SIG _{K1, ESC} using the secret key data K _{ESC, S} of the EMD service center 102. Then, this is output to the KF creation unit 153. Next, the KF creation unit 153 uses the distribution key data KD _{1 to} KD ₆ of the corresponding period input from the key server 141 to generate the content key data Kc and the rights certificate data 106 and the SAM program
The download containers SDC _{1 to} SDC ₃ are encrypted, and a key file KF storing the encrypted data and the signature data SIG _{K1 and ESC} input from the signature processing unit 143 is created.
Stored in a. Here, the SAM program download containers SDC _{1 to} SDC ₃ may be stored in the registration module Mod ₂ or may be EMD.
The information stored in the service center 102 in advance may be used. Next, the content provider management unit 148
After encrypting the key file KF obtained by accessing the KF database 153a using the session key data K _SES obtained by mutual authentication between the mutual authentication unit 150 and the mutual authentication unit 120 shown in FIG. The content is transmitted to the content provider 101.

Next, the settlement processing performed in the EMD service center 102 will be described with reference to FIG. S
The AM management unit 149 controls the user home network 103
Use of, for example, from SAM 105 ₁ historical data 108 and the signature data _{SIG 200,} by entering the _SAM1, usage log data 108 and signature data SIG
_{200, SAM1} is _exchanged with the mutual authentication unit 150 and the SAM105.
Decrypted using the session key data _{K SES} obtained by the mutual authentication between the _1, the signature data _{SIG 200} with the public key data _{K SAM1} of SAM 105 _{1, SAM1}
After performing the verification, the data is output to the settlement processing unit 142.

The settlement processing unit 142 uses the usage history data 108 input from the SAM management unit 149 and the right certificate database 14 via the certificate / right document management unit 145.
The payment processing is performed based on the standard retail price data SRP and the sales price included in the license data 106 read from 5a, and the payment claim data 152 and the payment report data 107 are generated. The settlement processing unit 142 outputs the settlement claim right data 152 to the settlement organization management unit 144 and outputs the settlement report data 107 to the content provider management unit 148.

Then, after performing the mutual authentication and the decryption of the settlement request data 152 and its signature data SIG ₉₉ by using the session key data K _SES , the settlement account manager 144 receives the payment gateway 90 shown in FIG.
Is transmitted to the settlement institution 91 via. Thereby, the money of the amount indicated in the settlement claim data 152 is paid to the content provider 101.

Next, a process when the EMD service center 102 transmits a settlement report to the content provider 101 will be described with reference to FIG. Settlement processing unit 1
When the settlement is performed in 42, as described above, the settlement processing unit 142 changes the content provider management unit 148 to the content provider management unit 148.
, The settlement report data 107 is output. As described above, the settlement report data 107 describes, for example, the contents of the settlement made by the EMD service center 102 to the settlement agency 91 shown in FIG. The EMD service center 102
When the settlement report data 107 is input from the settlement processing unit 142, the settlement report data 107 is encrypted using the session key data K _SES obtained by the mutual authentication between the mutual authentication unit 150 and the mutual authentication unit 120 shown in FIG. , To the content provider 101.

Further, as described above, the EMD service center 102 registers (authorizes) the rights document data 106 and then transmits the authorization certificate module to the content provider 101 from the EMD service center 102 to distribute the distribution key data KD. it may be transmitted encrypted with _{1 ~KD 6.}

[0178] Further, EMD service center 102, the other, the processing at the time of shipment of the SAM 105 ₁ to 105 _4,
The SAM registration list is registered, and these processes will be described later.

[0179] [User Home Network 103] The user home network 103, as shown in FIG. 1, the network device 160 ₁ and A / V equipment ₁₆₀ 2-1
It has a 60 _4. The network device 160 ₁
AM105 has a _built-1. Also, the AV device 160 ₂
160 ₄ are respectively built SAM 105 ₂ to 105 _4. SAM 105 ₁ to 105 ₄ of the inter, for example, are connected via a bus 191 such as IEEE1394 serial interface bus. Incidentally, AV equipment ₁₆₀ 2-160 ₄ may have a network communication function, does not have the network communication function, by using a network communication function of the network device 160 ₁ via the bus 191 Is also good. Further, the user home network 103 may include only AV devices having no network function.

[0180] The following describes the network device 160 _1. Figure 25 is a block diagram of the network device 160 _1. As shown in FIG.
0 ₁ is the SAM 105 ₁ , the communication module 162, the decryption / decompression module 163, and the purchase / use mode determination operation unit 1
65, download memory 167, playback module 16
9 and an external memory 201.

The SAMs 105 _{1 to} 105 ₄ are modules for performing a billing process for each content, and communicate with the EMD service center 102. SAM105
_{1-105 4} is, for example, EMD service center 102
The license and the license are transferred to a home device maker as a charging module of a black box for performing charging for each content if the mounting is desired. For example, a home appliance developer
SAM105 ₁ ~105 ₄ of IC (Integrate
d the Circuit) we can not know the internal specifications, EMD service center 102 to unify such as interface of the IC, accordingly is mounted on the network device 160 ₁ and AV apparatuses ₁₆₀ 2 to 160 _4.

The SAMs 105 _{1 to} 105 ₄ have their processing contents completely shielded from the outside, their processing contents cannot be monitored and falsified from the outside, and the SAMs 105 _{1 to} 105 ₄ can store data stored in advance and data being processed. Tamper-resistant tamper resistant and tamper-resistant from outside
hardware module (e.g., IC module) having an (nice) property. When realizing SAM 105 ₁ to 105 ₄ of the function in the form of IC has a secret memory inside IC, there secret programs and secret data are stored in. The SAM is not limited to the physical form of IC, and if its function can be incorporated into any part of the device, that part may be defined as SAM.

[0183] The following is a detailed description of the function of SAM105 _1. Incidentally, SAM 105 ₂ to 105 ₄ are, SA
M105 has _one basically the same function. FIG.
Is a block diagram of the function of SAM 105 _1. Note that FIG.
6 shows a flow of data related to a process of inputting the secure container 104 from the content provider 101 and decrypting the key file KF in the secure container 104. As shown in FIG. 26, the SAM 105 ₁
Are the mutual authentication unit 170, the encryption / decryption units 171, 17
2, 173, a content provider management unit 180, an error correction unit 181, a download memory management unit 182, a secure container decryption unit 183, a decryption / decompression module management unit 184, an EMD service center management unit 185, a use monitoring unit 186, and a billing processing unit 187, signature processing unit 189, S
AM management unit 190, media SAM management unit 197, stack (work) memory 200, and external memory management unit 81
One. Since the AV apparatus ₁₆₀ 2 to 160 ₄ do not have the download memory 167, SAM10
5 _2-105 download memory management unit 182 to ₄ does not exist.

[0184] The predetermined function of the SAM 105 ₁ shown in FIG. 26, for example, be realized by executing a secret program in the CPU (not shown). The external memory 201 also stores the usage history data 108 and the SAM registration list as shown in FIG. 27 through the following processing. Here, the memory space of the external memory 201, SAM 105 ₁ of the external (e.g., host CPU8
Can not be seen from the 10), SAM 105 only ₁ can manage access to the storage area of the external memory 201. As the external memory 201, for example, a flash memory or a ferroelectric memory (FeRAM) is used. As the stack memory 200, for example SARAM is used, as shown in FIG. 28, the secure container 104, content key data Kc, usage control policy data (UCP) 106, lock key data _{K LOC} of the storage unit 192, the content provider 101 public key certificate CER _CP , usage control status data (UCS) 166,
And SAM Program Download Container SD
C _{1 to} SDC _{3 and the} like are stored.

[0185] Hereinafter, among the SAM 105 ₁ of the functions, the secure container 104 from the content provider 101
26 will be described with reference to FIG. 26.

[0186] mutual authentication unit 170, when transmitting and receiving data online between SAM 105 ₁ is the content provider 101 and the EMD service center 102,
Mutual authentication is performed between the content provider 101 and the EMD service center 102 to generate session key data (shared key) K _SES , which is encrypted / decrypted by the encryption / decryption unit 1
71. The session key data K _SES is newly generated each time mutual authentication is performed.

The encryption / decryption unit 171 encrypts / decrypts data transmitted / received between the content provider 101 and the EMD service center 102 using the session key data K _SES generated by the mutual authentication unit 170.

[0188] The error correction unit 181
04 is corrected and output to the download memory management unit 182. Note that the user home network 103
It may have a function of detecting whether the secure container 104 has been tampered with. In the present embodiment, the error correction unit 181, a case has been exemplified with a built-in SAM 105 _1, the function of the error correction unit 181, for example, the host CPU
It may have to SAM105 ₁ of the outside such as a 810.

[0189] The download memory management unit 182 is
In the case where the download memory 167 has a media SAM 167a having a mutual authentication function as shown in FIG. 5, after performing mutual authentication between the mutual authentication unit 170 and the media SAM 167a, the secure container 104 after error correction is performed. _Is encrypted using the session key data K _SES obtained by the mutual authentication and written into the download memory 167 shown in FIG. Download memory 16
As 7, for example, a nonvolatile semiconductor memory such as a memory stick is used. As shown in FIG. 29, when a memory having no mutual authentication function such as an HDD (Hard Disk Drive) is used as the download memory 211, the download memory 2
11 is not secure, so the content file C
F is downloaded to the download memory 211, and the highly confidential key file KF is downloaded to, for example, the stack memory 200 shown in FIG.

The secure container decryption unit 183 includes the content key data Kc in the key file KF stored in the secure container 104 input from the download memory management unit 182, the rights certificate data 106, and the SAM program download containers SDC _{1 to} SDC. ₃
Decoding is performed using the distribution key data KD _{1 to} KD ₃ of the corresponding period read from the storage unit 192. The decrypted content key data Kc, right data 106 and S
AM program download container SDC ₁ -S
DC ₃ is written to stack memory 200.

The EMD service center management unit 185 manages communication with the EMD service center 102 shown in FIG.

The signature processing unit 189 reads the public key data K of the EMD service center 102 read from the storage unit 192.
_ESC, using the public key data _{K CP, P} of the _P and the content provider 101 verifies the signature data in the secure container 104.

[0193] storage unit 192, as secret data which can not be read and rewritten from SAM 105 ₁ of the external,
As shown in FIG. 30, disclosure of a plurality of distribution key data KD _{1 to} KD ₃ with an expiration date, SAM_ID, user ID, password, information reference ID, SAM registration list, recording key data K _STR , and root CA are disclosed. Key data KR _{-C
A, P} , public key data K of EMD service center 102
_{ESC, P} , media key data K _MED , EMD service center 102 public key data K _{ESC, P} , SAM1
05 ₁ private key data K _{SAM1, S} , SAM 105 ₁
Public key certificate CER _SAM1 storing the public key data K _{SAM1 and P} of the EMD service center and public key certificate CER _ESC using the private key data K _{ESC and S} of the EMD service center 102
Signature data SIG ₂₂ , decryption / decompression module 163
Original key data for mutual authentication with the SAM (when a common key encryption method is adopted), original key data for mutual authentication with the media SAM (when a common key encryption method is adopted), and media SAM public key certificate data CER
_MEDSAM (when a public key encryption method is adopted) is stored. The storage unit 192 stores a secret program for realizing at least a part of the functions shown in FIG. As the storage unit 192, for example, a flash-EEPROM (Electrically E
rasable Programmable RAM)
Is used.

[0194] Hereinafter, FIG. 26 the flow of processing in SAM105 within ₁ when storing the distribution use key data _KD 1 _{~KD 3} received from the EMD service center 102 in the storage unit 192
This will be described with reference to FIG. In this case, first, mutual authentication is performed between the mutual authentication unit 170 and the mutual authentication unit 150 shown in FIG. Next, the mutual authentication by the obtained session key data _K key for encrypted three months of delivery in _SES data _KD 1 _{~KD 3} and the signature data _{SIG KD1, ESC ~SIG KD3, ESC} is, EM
The data is written to the stack memory 811 from the D service center 102 via the EMD service center management unit 185. Next, the encryption / decryption unit 171 uses the distribution key data KD _{1 to} K D using the session key data K _SES.
D ₃ and the signature data _{SIG KD1,} ESC _~SI
G _{KD3, ESC} is decoded. Next, the signature processing unit 18
9, after the validity of the signature data SIG _{KD1, ESC to} SIG _{KD3, ESC} stored in the stack memory 811 is confirmed, the distribution key data KD _{1 to} KD ₃
Is written to the storage unit 192.

Hereinafter, the SAM 10 for inputting the secure container 104 provided by the content provider 101 will be described.
The flow of processing in the 5 within ₁ will be described with reference to FIG. 26. Mutual authentication is performed between the mutual authentication section 120 shown in SAM 105 ₁ of the mutual authentication unit 170 and 3 shown in FIG. 26. The encryption / decryption unit 171 decrypts the secure container 104 supplied from the content provider 101 via the content provider management unit 180 using the session key data K _SES obtained by the mutual authentication.

Next, the signature processing section 189 verifies the signature data SIG1 _{and ESC} shown in FIG. 5C, and then stores it in the public key certificate data CER _CP shown in FIG. 5C. Using the public key data K _{CP, P} of the content provider 101, the signature data SIG _{6, CP} , S
Verify the validity of IG _{7, CP} . At this time, when the signature data SIG6 _{and CP} are verified to be valid, the validity of the creator and sender of the content file CF is confirmed. When the signature data SIG7 _{, CP} is verified as valid, the validity of the sender of the key file KF is confirmed. Further, the signature processing unit 189 uses the public key data K _{ESC, P} read from the storage unit 192 to determine whether the signature data SIG _{K1, ESC} in the key file KF shown in FIG. KF creator's legitimacy and key file KF is EMD
It verifies whether or not it is registered in the service center 102. The content provider management unit 180 stores the signature data SIG _{6, CP} , SIG _{7, CP} , SIG
_When the validity of _{K1 and ESC} is confirmed, the secure container 104 is output to the error correction unit 181.

The error correction section 181 is a secure container 1
04 error correction, the download memory management unit 1
82. The download memory management unit 182
Mutual authentication unit 170 and media SAM 167 shown in FIG.
After performing the mutual authentication with a, the secure container 104 is written into the download memory 167.

Next, the download memory management unit 182
Are the mutual authentication unit 170 and the media SAM1 shown in FIG.
After performing mutual authentication with the secure container 67a, the key file KF shown in FIG.

Then, the secure container decryption unit 183 uses the distribution key data KD _{1 to} KD ₃ of the corresponding period input from the storage unit 192 and uses the content key data in the key file KF shown in FIG. Kc, rights certificate data 106 and SAM program download
The containers SDC _{1 to} SDC ₃ are decoded. Then, the decrypted content key data Kc and the rights certificate data 106
And SAM Program Download Container SD
C _{1 to} SDC ₃ are written to the stack memory 200.

The processing contents of each functional block related to the processing of using / purchasing the content data C downloaded to the download memory 167 will be described below with reference to FIG.

The use monitoring unit 186 stores the stack memory 20
0 to the rights certificate data 106 and the usage control status data 1
66, and monitors that the purchase / use of the content is performed within the range permitted by the read right certificate data 106 and use control status data 166. Here, the rights certificate data 106 is stored in the KF after decryption and stored in the stack memory 200 as described with reference to FIG. The usage control state data 166 is stored in the stack memory 200 when the purchase mode is determined by the user, as described later.

[0202] The billing processing section 187 performs the purchase and purchase shown in FIG.
The usage history data 108 corresponding to the operation signal S165 from the usage mode determination operation unit 165 is created. Here, as described above, the usage history data 108 describes the history of the form of purchase and use of the secure container 104 by the user. Used to determine the payment of the license fee.

[0203] Further, the charging processing unit 187 notifies the user of the sales price or the standard retail price data SRP read from the stack memory 200 as necessary. Here, the sales price and the standard retail price data SRP are stored in the license data 106 of the key file KF shown in FIG. 5B and stored in the stack memory 200 after decryption. The billing process by the billing processing unit 187 is performed under the supervision of the use monitoring unit 186, under the rights contents such as the license conditions indicated by the license data 106 and the use control state data 16.
6 is performed. That is, the user purchases and uses the content within a range according to the content of the right.

[0204] The billing processing section 187 receives the operation signal S1.
65, a usage control state (UCS: Usa) describing the content purchase mode determined by the user.
(GeControl Status) data 166 is generated and written to the stack memory 200. Examples of the content purchase form include a purchase purchase without imposing restrictions on reproduction by the purchaser and copying for use by the purchaser, and a reproduction charge for charging for each reproduction.
Here, the use control state data 166 is generated when the user determines the purchase mode of the content, and thereafter, is controlled so that the user uses the content within the range permitted by the determined purchase mode. Used to The usage control status data 166 includes the content I
D, a purchase form, a price according to the purchase form, a SAM_ID of the SAM in which the content was purchased, a USER_ID of the user who made the purchase, and the like are described.

[0205] Incidentally, if the purchase mode determined is the reproduction charge, for example, transmits in real time from SAM 105 ₁ and the purchase of the content data C usage control status data 166 to the content provider 101, content provider 101 EMD service center 102
The usage history data 108 is stored in the SAM 10 within a predetermined period.
5 Instruct ₁ to go. In the case where the determined purchase mode is purchase out, for example, the usage control status data 166 is transmitted to both the content provider 101 and the EMD service center 102 in real time. As described above, in this embodiment, the use control state data 166 is transmitted to the content provider 101 in real time in any case.

The EMD service center management unit 185 transmits the usage history data 108 read from the external memory 201 to the EMD service center 102 via the external memory management unit 811. At this time, the EMD service center management unit 185 creates signature data SIG _{200, SAM1} of the usage history data 108 using the secret key data K _{SAM1, s} in the signature processing unit 189, and
IG _{200, SAM1} together with usage history data 108
The information is transmitted to the MD service center 102. The transmission of the usage history data 108 to the EMD service center 102 may be performed, for example, in response to a request from the EMD service center 102 or periodically, or the usage history data 108
May be performed when the information amount of the history information included in the information has reached a predetermined value or more. The information amount is stored in, for example, the external memory 20.
1 is determined according to the storage capacity.

[0207] For example, when a content reproduction operation is performed in response to an operation signal S165 from the purchase mode determination operation unit 165 shown in FIG. The content key data Kc read from the stack memory 200 and the user digital watermark information data 196 input from the charging processing unit 187 are output to the decryption / decompression module management unit 184. In addition, when the content preview operation is performed in response to the operation signal S165 from the purchase mode determination operation unit 165 shown in FIG. The content key data Kc and the semi-disclosed parameter data 199 read from the stack memory 200 are output to the decryption / decompression module management unit 184.

Here, the semi-disclosed parameter data 199
Is described in the license data 106 and indicates the handling of the content in the preview mode. In the decryption / decompression module 163, the semi-disclosed parameter data 199
, It is possible to reproduce the encrypted content data C in a semi-disclosed state. As a semi-disclosed technique, for example, the decryption / decompression module 163 processes data (signals) in units of predetermined blocks, and decrypts the content using the content key data Kc with the semi-disclosed parameter data 199. There are those that specify blocks to be performed and blocks that are not to be decrypted, limit the playback function at the time of trial listening, and limit the period during which trial listening is possible.

[0209] Hereinafter, description will be given of a flow of processing in SAM105 within _1. First, the flow of processing up to determining the purchase mode of the secure container 104 downloaded from the content provider 101 to the download memory 167 will be described with reference to FIG. When the user operates the purchase / usage mode determination operation unit 165 shown in FIG. 25 to output an operation signal S165 indicating the preview mode to the accounting unit 187, for example, the download memory 1
The content file CF stored in 67 is output to the decryption / decompression module 163 shown in FIG. 25 via the decryption / decompression module management unit 184. At this time,
Mutual authentication between the mutual authentication unit 170 and the media SAM 167a and encryption / decryption of the content file CF using the session key data K _SES, and mutual authentication and session between the mutual authentication unit 170 and the mutual authentication unit 220 Encryption and decryption by the key data K _SES are performed. The content file CF is output to the decryption unit 222 after being decrypted by the decryption unit 221 shown in FIG. 25 using the session key data K _SES .

The contents key data Kc and the semi-disclosed parameter data 199 read from the stack memory 200 are stored in the decryption / decompression module 16 shown in FIG.
3 is output. At this time, after mutual authentication between the mutual authentication unit 170 and the mutual authentication unit 220, the content key data Kc and the semi-disclosed parameter data 199 are encrypted and decrypted by the session key data K _SES . Next, the decrypted semi-disclosed parameter data 19
9 is output to the semi-disclosure processing unit 225,
Under the control from 5, the decryption of the content data C using the content key data Kc by the decryption unit 222 is performed in a semi-disclosed manner. Next, the content data C decrypted in the semi-disclosure is output to the digital watermark information processing unit 224 after being expanded in the expansion unit 223. Next, after the digital watermark information processing section 224 embeds the user digital watermark information data 196 in the content data C, the content data C is reproduced by the reproduction module 169, and a sound corresponding to the content data C is output.

[0211] Then, the user who listened to the content listens to
When the purchase mode is determined by operating the purchase / usage mode determination operation unit 165, an operation signal S1 indicating the determined purchase mode.
65 is output to the charging section 187. Then, in the charging processing unit 187, the usage history data 108 and the usage control state data 166 according to the determined purchase mode are generated, and the usage history data 108 is stored in the external memory management unit 81.
1 and the usage control status data 166 is written to the stack memory 200. Thereafter, the use monitoring unit 186 controls (monitors) the purchase and use of the content within the range permitted by the use control status data 166.
Is done.

Then, a new key file KF ₁ shown in FIG. 34C described later is created, and the created key file KF ₁ is stored in the download memory 167 via the download memory management unit 182. FIG.
(C), the usage control status data 166 stored in the key file KF ₁ is the storage key data K
DES using _STR and media key data K _MED
Are sequentially encrypted using the CBC mode. Here, the recording key data K _STR is, for example, SACD (Su
per Audio Compact Disc), D
VD (Digital Versatile Dis)
c) Equipment, CD-R equipment and MD (Mini Dis
c) Data determined according to the type of device or the like, and is used to associate the type of device with the type of recording medium on a one-to-one basis. The media key data K _MED is data unique to a recording medium.

In the signature processing section 189, the SAM
105 using _one of the secret key data _{K SAM1, S,} creates a hash value _{H K1} of the key file KF ₁ is, the hash value _{H K1} of the was created, in the stack memory 200 in correspondence with the key file KF ₁ Written. The hash value H _K1 is used to verify whether or not the key file creator legitimacy and key file KF ₁ KF ₁ has been tampered with.

Next, the content data C stored in the download memory 167 whose purchase mode has already been determined
Will be described with reference to FIG. 31. In this case, the content file CF stored in the download memory 167 is output to the decryption / decompression module 163 shown in FIG. 31 based on the operation signal S165 under the monitoring of the usage monitoring unit 186.
At this time, mutual authentication is performed between the mutual authentication unit 170 shown in FIG. 31 and the mutual authentication unit 220 of the decryption / decompression module 163 shown in FIG. Also, the stack memory 20
The content key data Kc read from 0 is output to the decryption / decompression module 163. Then, the decryption unit 222 of the decryption / decompression module 163 decrypts the content file CF using the content key data Kc, and performs the decompression processing by the decompression unit 223. The reproduction module 169 reproduces the content data C. . At this time, the usage history data 108 stored in the external memory 201 is updated by the charging processing unit 187 according to the operation signal S165. Usage history data 1
08 is read from the external memory 201, and after mutual authentication, is transmitted to the EMD service center 102 together with the signature data SIG _{200 and SAM1} via the EMD service center management unit 185.

[0215] Next, as shown in FIG. 32, for example, the content file C downloaded in the download memory 167 of the network apparatus 160 ₁ as described above
After determining the purchase mode of F, it generates a new secure container 104x storing the content file CF, via the bus 191, the AV apparatus 160 ₂ SAM1
05 when transferring the secure container 104x to ₂
The flow of processing in the AM105 within ₁ will be described with reference to FIG. 33. The user operates the purchase / use mode determination operation unit 165
By operating the, instructs to transfer the predetermined content stored in the download memory 167 to the AV apparatus 160 _2, the operation signal S165 in accordance with the operation is output to the charge processing unit 187. Thereby, the billing processing unit 187
Updates the usage history data 108 stored in the external memory 201 based on the operation signal S165. Further, each time the purchase mode of the content data is determined, the charging processing unit 187 stores the usage control status data 166 indicating the determined purchase mode in the EMD service center management unit 1.
The data is transmitted to the EMD service center 102 via the server 85.

The download memory management unit 182
FIG. 5 read from the download memory 167
And the content file CF and the signature data _{SIG 6, CP} (A), the outputs and the key file KF and the signature data _{SIG 7, CP,} and a key file KF ₁ and the hash value _{H K1} to the SAM management unit 190 . In this case, mutual authentication and encryption and decryption by _the session key data _{K SES} between SAM 105 ₁ of the mutual authentication unit 170 and the media SAM167a is performed. Also, the signature processing unit 189 takes the hash value of the content file CF, creates signature data SIG _{41, SAM1} using the secret key data K _{SAM1, S,} and
Output to the M management unit 190. Also, the signature processing unit 189
Takes the hash value of the key file KF ₁ and uses the secret key data K _{SAM1, S} to sign data SIG
_{42, SAM1} is created, and this is output to the SAM management unit 190. In addition, the SAM management unit 190 includes a storage unit 192
From the public key certificate data CER shown in FIG.
_CP and its signature data SIG _{1 and ESC} , and public key certificate data CER _{SAM 1} and its signature data SI
G22 _{, ESC} .

[0217] The mutual authentication unit 170 is connected to the SAM 105.
Session key data K obtained by performing mutual authentication with the _{2
The SES} is output to the encryption / decryption unit 171. SAM manager 190 in FIG. 34 (A), (B) , (C), generates a new secure container 104x comprised of the data shown in (D), the encryption and decryption unit 171, the session key data _{K SES} after encrypting the secure container 104x by using, for AV equipment 160 ₂ shown in FIG. 32 SAM
And outputs it to the 105 _2. In this case, SAM105 ₁ and SA
In parallel with the mutual authentication between the M105 _2, IEEE13
Mutual authentication of the bus 191 which is a 94 serial bus is performed.

Hereinafter, as shown in FIG.
S when writing the secure container 104x input from the _1, a recording medium 180 such as a RAM type 130 ₄
The flow of processing in the AM105 within ₂ will be described with reference to FIG. 35. Here, ₄ RAM type recording medium 130,
For example, insecure RAM area 134, media S
It has an AM 133 and a secure RAM area 132.

[0219] In this case, SAM 105 ₂ of the SAM management unit 190, as shown in FIGS. 32 and 35, to enter the secure container 104x from SAM 105 ₁ of the network device 160 _1. And an encryption / decryption unit 1
At 71, the secure container 104x input via the SAM management unit 190
It is decrypted by using the session key data _{K SES} obtained by the mutual authentication between the 105 ₁ of the mutual authentication unit 170.

Next, the signature processing section 189 uses the public key data K _{CP, P} to generate the signature data SIG _{6, CP}
Of the creator of the content file CF is verified. In addition, the signature processing unit 189 verifies the validity of the signature data _{SIG41, SAM1} using the public key data K _{SAM1, P,} and confirms the validity of the sender of the content file CF. And
After the creator and sender of the content file CF are confirmed to be valid, the SAM management unit 190 outputs the content file CF to the recording module management unit 855, and the content file CF is stored in the RAM-type recording medium shown in FIG. It is written to 130 ₄ of the RAM area 134.

The key file KF decrypted using the session key data K _SES and its signature data S
IG _{7, CP, SIG 42,} and _SAM1, the key file KF ₁ and the hash value _{H K1,} public key signature data _{CER CP} and the signature data SIG
_{1, ESC} , the public key signature data CER _SAM1, and its signature data _{SIG22 , ESC} are written to the stack memory 200.

Next, the signature processing section 189 sends the signature data SIG _{22, ESC} read from the stack memory 200.
With the public key data K read from the storage unit 192.
_{The public key certificate data CE is verified by using ESC and P}
Check the validity of _{R SAM1} . And the signature processing unit 1
89, when confirming validity of the public key certificate data _{CER SAM1,} the public key data _{K SAM1} stored in the public key certificate data _{CER SAM1,} with _P, the signature data SIG which is stored in the stack memory 200
_42, verify the validity of _SAM1 . When the signature data _{SIG42 and SAM1} are verified as valid, the validity of the sender of the key file KF is confirmed.
The signature processing unit 189 stores the signature data SIG _{1 and ESC} read from the stack memory 200 in the storage unit 19.
Verification is performed using the public key data K _{ESC, P} read from Step 2 and the validity of the public key certificate data CER _CP is confirmed. When confirming the validity of the public key certificate data CER _CP , the signature processing unit 189 stores the public key certificate data CER _{CP in} the stack memory 200 using the public key data K _{CP, P} stored in the public key certificate data CER _CP. The validity of the signature data _{SIG7 and SAM1} is verified. When the signature data _{SIG7 and SAM1} are verified as valid, the validity of the creator of the key file KF is confirmed. When it is confirmed that the creator and the sender of the key file KF are valid, the key file KF is read from the stack memory 200, and the recording module management unit 85
5 through the RAM-type recording medium 130 ₄ shown in FIG.
Is written to the secure RAM area 132.

[0223] In addition, the signature processing unit 189, using the public key data _{K SAM1, P,} to verify the validity of the hash value _{H K1,} to confirm the validity of the creator and the sender key file KF _1. Then, when the validity of the creator and the sender of the key file KF ₁ is confirmed, the key file KF ₁ shown in FIG. 34C is read from the stack memory 200 and output to the encryption / decryption unit 173. In this example, the case where the creator of the key file KF ₁ is the same as the sender is described. However, when the creator of the key file KF ₁ is different from the sender, the key file KF _{1 is} created. The signature data of the sender, the sender and the signature data are created, and the signature processing unit 189 verifies the validity of both signature data.

The encryption / decryption unit 173 uses the recording key data K _STR , the media key data K _MED, and the purchaser key data K _PIN read from the storage unit 192 in order, and uses the content key in the key file KF ₁ . Data K
c and the usage control status data 166 are encrypted and output to the recording module management unit 855. Then, the recording module management unit 855, the key file KF _1, which is encrypted, RAM type recording medium 130 ₄ Secure RA
The media key data K recorded in the M area 132
_MED, the media of the mutual authentication unit 170 and the RAM type storage medium shown in FIG. 32 130 ₄ shown in FIG. 33 SAM 133
Are stored in the storage unit 192 in advance by mutual authentication between.

Here, the recording key data K _STR is, for example, an SACD (Super Audio Compact).
Disc), DVD (Digital Versat)
ile Disc) equipment, CD-R equipment and MD (M
(In this example, the type of AV
The data is determined according to the device 160 ₂ ), and is used to associate the type of the device with the type of the recording medium on a one-to-one basis. Since the physical structure of the disk medium is the same between the SACD and the DVD, the recording and reproduction of the SACD recording medium may be performed using a DVD device in some cases. In such a case, the recording key data _KSTR plays a role of preventing unauthorized copying. In addition,
In the present embodiment, the encryption using the recording key data _KSTR may not be performed.

The media key data K _MED is data unique to a recording medium (in this example, a RAM type recording medium 130 ₄ ). The media key data K _MED is
It is stored on the side of the recording medium (in this example, the RAM type recording medium 130 ₄ shown in FIG. 32), and encryption and decryption using the media key data K _MED in the medium SAM of the recording medium is security. Preferred from a viewpoint. At this time, the media key data K _MED is stored in the medium SAM when the medium SAM is mounted on the recording medium, and, for example, when the medium SAM is not mounted on the recording medium, It is stored in an area outside the management of the host CPU 810 in the RAM area. As in the present embodiment, mutual authentication is performed between the SAM (SAM 105 _{2 in} this example) on the device side and the media SAM (media SAM 133 in this example), and the media key is transmitted via a secure communication path. Data K
_{The MED} may be transferred to the SAM on the device side, and the SAM on the device side may perform encryption and decryption using the media key data _KMED . In the present embodiment, the recording key data K _STR and the media key data K _MED are used to protect the security at the physical layer level of the recording medium.

The purchaser key data K _PIN is data indicating a purchaser of the content file CF, and is assigned by the EMD service center 102 to the user who purchased the content, for example, when he purchased the content. . Buyer key data K _PIN is EMD
It is managed in the service center 102.

Further, in the above-described embodiment, the key files KF and KF ₁ are stored in the RA
A case has been exemplified to be recorded in the secure RAM region 132 of the M-type recording medium 130 _4, as indicated by a dotted line in FIG. 32, SAM 105 key file KF from ₂ to media SAM 133, may be recorded KF ₁ .

[0229] Next, when the recording medium 130 ₁ purchase form is a ROM type shown in FIG. 12 of undetermined content user home network 303 receives the distribution offline, to determine the purchase mode in the AV apparatus 160 ₂ The process flow at this time will be described with reference to FIGS. 36 and 37. SAM 105 ₂ of the AV apparatus 160 _2, first, FIG. 3
After the mutual authentication with the recording medium 130 ₁ media SAM 133 of the ROM type shown in the mutual authentication unit 170 and 12 shown in 7, enter the media key data _{K MED} from the media SAM 133. It should be noted, SAM105 ₂ is,
If the media key data _KMED is held in advance, the input need not be performed. Next, FIG. 5 stored in the secure container 104 stored in the secure RAM region 132 of the recording medium 130 ₁ of ROM type
The key file KF and its signature data SIG7 _{, CP} shown in (B) and (C) and the public key certificate data CER
_{The CP} and its signature data SIG _{1 and ESC} are input via the media SAM management unit 197 or a read module management unit (not shown), and are written into the stack memory 200.

Next, in the signature processing section 189, after confirming the validity of the signature data SIG1 _{, ESC} , the public key data KCP _{, P} is extracted from the public key certificate data CER _CP, and the public key data _{KCP is obtained. , P} , the validity of the signature data SIG _{7, CP} , that is, the validity of the sender of the key file KF. Also, the signature processing unit 1
At 89, the validity of the signature data SIG _{K1, ESC} stored in the key file KF, that is, the validity of the creator of the key file KF, is verified using the public key data K _{ESC, P} read from the storage unit 192. .

In the signature processing section 189, the signature data SI
When the validity of G _{7, CP} , SIG _{K1, and ESC} is confirmed, the key file KF is read from the stack memory 200 to the secure container decryption unit 183. Next, the secure container decryption unit 183 uses the distribution key data KD _{1 to} KD ₃ for the corresponding period to generate the key file KF.
Key data Kc, rights certificate data 1 stored in
06 and the SAM program download containers SDC _{1 to} SDC ₃ are decrypted and written to the stack memory 200.

[0232] Next, after performing mutual authentication with the decoding and decompression module 163 shown in the mutual authentication unit 170 and 36 shown in FIG. 37, the decoding and decompression module manager 184 of the SAM 105 _2, the stack memory 200 Key data Kc and rights certificate data 106 stored in
Semi-disclosed parameter data 199 stored in
Read the content data C stored in the content file CF from OM-type recording medium 130 ₁ of the ROM area 131 and outputs it to the decoding and decompression module 163 shown in FIG. 36. Next, in the decryption / decompression module 163, the content data C is decrypted in the semi-disclosure mode using the content key data Kc, and is then decompressed and output to the reproduction module 270. And the playback module 2
At 70, the content data C from the decryption / decompression module 163 is reproduced.

Next, the purchase mode of the content is determined by the user's purchase operation on the purchase mode determination operation section 165 shown in FIG. .

Next, the charging processing section 187 outputs the operation signal S1
The usage control state data 166 corresponding to the number 65 is created, and this is written to the stack memory 200. Next, the content key data Kc and the use control state data 166 are output from the stack memory 200 to the encryption / decryption unit 173.

Next, the encryption / decryption unit 173 stores the content key data Kc and the usage control status data 166 input from the stack memory 200 into the recording key data K _STR and the media key data K read from the storage unit 192.
_{The MED} and the purchaser key data K _PIN are sequentially encrypted and written into the stack memory 200.

Next, in the media SAM management section 197, the encrypted content key data Kc and usage control state data 1 read from the stack memory 200 are read.
66 and SAM program download container S
Key file KF ₁ shown in FIG. 34 (C) is generated using a DC ₁ ~SDC _3. In addition, the signature processing unit 189 generates a hash value H _K1 of the key file KF ₁ shown in FIG. 34C, and outputs the hash value H _K1 to the media SAM management unit 197. Next, the mutual authentication unit 170 shown in FIG. 37 and the media SAM 13 shown in FIG.
After performing mutual authentication between the key file KF ₁ and the hash value H,
_K1 is _converted to R via the recording module 271 shown in FIG.
OM-type recording medium 130 ₁ of the secure RAM region 132
Write to. As a result, the ROM for which the purchase form has been determined
Recording medium 130 ₁ type is obtained. At this time, the usage control state data 166 and the usage history data 108 generated by the charging unit 187 are transmitted to the EMD service center 102 read from the stack memory 200 and the external memory 201 at predetermined timing.
Incidentally, ROM type medium recording medium 130 ₁ SAM1
If the key file KF is stored in the 33, as indicated by the dotted line in FIG. 36, SAM 105 ₂ enters the key file KF from the media SAM 133. In addition, in this case, SAM105 ₂ writes the key file KF ₁ that was created in the media SAM133.

Hereinafter, as shown in FIG.
0 purchase mode in ₃ of ROM type undetermined recording medium 1
30 ₁ reads the secure container 104 to produce a new secure container 104y, which AV equipment 1
60 transfers _2, Figure 39 a flow of processing when writing to the recording medium 130 ₅ of RAM type determines the purchase mode in the AV apparatus 160 ₂ is described with reference to FIG. 40. The transfer of the secure container 104 from the recording medium 130 ₁ of ROM type to the recording medium 130 ₅ of RAM type, FIG. 1
Network devices 160 ₁ and AV apparatuses 160 shown in
It may be performed between any of ₁ to 160 _4.

[0238] First of all, AV equipment 160 ₃ of SAM105 ₃
ROM type medium recording medium 130 ₁ with SAM133
Are mutually authenticated, and the ROM-type recording medium 130 ₁
To transfer media key data _{K MED1} of the SAM105 _3. Also, the AV apparatus 160 ₂ SAM 105 ₂ and RA
Performs mutual authentication with the media SAM133 of M-type recording medium 130 _5, and transfers the recording medium 130 ₅ media key data _{K MED2} of the RAM type SAM 105 _2. Note that the encryption using the media key data K _MED1 and K _MED2 is performed by the media SAM 133 and the media SAM 1.
33, the media key data K
_MED1 and _KMED2 are not transferred.

[0239] Then, SAM 105 _3, as shown in FIG. 39, FIG. 5 via the read module management unit which media SAM management unit 197 or not shown, read from the recording medium 130 ₁ ROM area 131 of the ROM type
The content file CF and its signature data SIG6 _{, CP} shown in (A) and the key file KF shown in FIGS.
And its signature data SIG _{7, CP} , and public key certificate data CER _CP and its signature data SIG
_{1 and ESC} are output to the encryption / decryption unit 171. Also, the media SAM management unit 197 sends the signature processing unit 189
Then, the content file CF and the key file KF are output. Then, in the signature processing unit 189, hash values of the content file CF and the key file KF are _obtained, and the signature data SIG _{350, SAM3} , SIG are respectively used using the secret key data K _{SAM3, S.
352 and SAM3} are generated and output to the encryption / decryption unit 171. In addition, the public key certificate data CER
_{The SAM 3} and its signature data SIG _{351 and ESC} are read from the storage unit 192 and output to the encryption / decryption unit 171.

Then, the secure container 1 shown in FIG.
04y in the encryption / decryption unit 171
After being encrypted by using the session key data K _SES obtained by the mutual authentication between ₃ and 105 _2, SA
Through M manager 190, SAM1 of the AV equipment 160 ₂
05 is output _2.

[0241] In SAM 105 _2, as shown in FIG. 41, by using the session key data _{K SES} in the encryption and decryption section 171 of the secure container 104y shown in Fig. 40 input from the SAM 105 ₃ via the SAM management unit 190 decodes After that, the signature data SIG _{6, CP} , SIG stored in the secure container 104y
_{350, confirm} the validity of _SAM3 , that is, the validity of the creator and sender of the content file CF. Then, after it is confirmed that the creator and the sender of the content file CF are valid, the media SAM management unit 19
RAM type recording medium through a 7 130 ₅ RAM area 1
34, the content file CF is written.

Also, the SAM management unit 190
Key file received from the 105 ₃ KF and the signature data _{SIG 7, CP,} and _{SIG 350, SAM3,}
After the public key certificate data CER _SAM3 and its signature data SIG _{351 and ESC} are written in the stack memory 200, the encryption / decryption unit 171 decrypts the public key certificate data using the session key data K _SES . Next, the decrypted signature data SIG _{351 and ECS} are signature-verified in the signature processing unit 189, and _when the validity of the public key certificate data CER _SAM3 is confirmed, the data is stored in the public key certificate data CER _SAM3. Public key data K
_{Using SAM3} , signature data _{SIG7 , CP} , SIG
_352, the validity of _SAM3 , that is, the key file KF
The creator and sender of the are verified. And
When the validity of the creator and sender of the key file KF is confirmed, the key file KF
Is read out and output to the secure container decryption unit 183.

Next, the secure container decryption unit 183
The key file KF is decrypted using the distribution key data KD _{1 to} KD ₃ of the corresponding period, and the decrypted key file KF is written to the stack memory 200.

Next, the license data 106 stored in the key file KF already decrypted and stored in the stack memory 200 is output to the use monitoring unit 186. The use monitoring unit 186 manages the content purchase form and the use form based on the license data 106.

Next, for example, when the preview mode is selected by the user, the content data C of the content file CF already decrypted with the session key data K _SES.
38, the content key data Kc stored in the stack memory 200, the semi-disclosed parameter data 199 obtained from the license data 106, and the user digital watermark information data 196, after undergoing mutual authentication. The data is output to the reproduction module 270 via the decompression module management unit 184. Then, the reproduction module 270 reproduces the content data C corresponding to the trial listening mode.

Next, the purchase / use mode of the content is determined by the operation of the purchase / use mode determination operation unit 165 shown in FIG. 38 by the user, and the operation signal S corresponding to the determination is obtained.
165 is output to the charging unit 187. Then, the billing processing unit 187 generates the use control state data 166 and the use history data 108 according to the determined purchase / use form, and writes them to the stack memory 200 and the external memory 201, respectively. Next, the content key data Kc and the usage control status data 166
Is read from the stack memory 200 to the encryption / decryption unit 173, and the encryption / decryption unit 173 stores the storage unit 19
2 is sequentially encrypted by using the recording key data K _STR , the media key data K _MED2, and the purchaser key data K _PIN read out from the recording module management unit 855. Then, for example, the recording module management unit 855
In FIG. 34C, a key file KF ₁ shown in FIG. 34C is created, and the key file KF ₁ is stored in the media SAM management unit 1.
RAM type recording medium through a 97 130 ₅ media S
AM 133 is written. In addition, secure container 1
The content file CF stored in the recording medium 1 is stored in the RAM-type recording medium 1 by the recording module management unit 855.
It is written into the RAM region 134 of 30 _5. The usage control state data 166 and the usage history data 108
It is transmitted to the EMD service center 102 at a predetermined timing.

[0247] In the following, a description will be given of a method implementation of the SAM105 ₁ ~105 _4. When realizing SAM 105 ₁ to 105 ₄ of the functions as hardware, using ASIC type CPU with built-in memory, in its memory, FIG. 2
The security function module for realizing each function shown in FIG. 6, a program module for performing content right processing, and highly sensitive data such as key data are stored. A series of rights processing program modules such as a cryptographic library module (public key cryptography, common key cryptography, random number generator, hash function), a content usage control program module, and a billing processing program module are, for example, software Implemented as

For example, the encryption / decryption unit 17 shown in FIG.
For example, the module such as 1 is implemented as hardware as an IP core in an ASIC-type CPU due to a problem of processing speed. Depending on the performance such as the clock speed and the CPU code system, the encryption / decryption unit 171 may be implemented as software. The storage unit 192 shown in FIG.
For example, a nonvolatile memory (flash-ROM) is used as a memory for storing program modules and data for realizing the functions shown in FIG. 26, and a high-speed writable memory such as an SRAM is used as a working memory. Used. In addition, SAM
As memory built in 105 _{1-105 4} may be used a ferroelectric memory (FeRAM). Also, SA
M105 to _{1-105 4,} the other, a clock function to be used to verify the date and time, such as at the expiration date and the contract period for the use of content is being built.

As described above, the SAMs 105 _{1 to} 105
_4, and program modules have shielded tamper resistant structure from outside the data and process content. S
AM105 ₁ ~105 ₄ a equipped with the equipment of the host CPU
Via the bus of the SAM, the contents of highly confidential programs and data stored in the memory inside the IC of the SAM, and the SAM system configuration (Sys
The value of the register group related to the “tem configuration” and the register group of the cryptographic library and the clock are not read out or newly written, that is, in the address space allocated by the host CPU of the mounted device. In the SAM, the MMU (Mem) that manages the memory space on the CPU side does not exist.
ory (Magazine Unit)
An address space invisible to the host CPU of the mounted device is set. Also, SAM 105 ₁ to 105 ₄ has a physical also withstand structure external attacks, such as X-rays or heat, further debugging tool (hardware ICE,
Even if real-time debugging (reverse engineering) using software ICE or the like is performed, the contents of the processing are not known or the debugging tool itself cannot be used after the IC is manufactured. SAM 105 ₁ to 105 ₄ itself, in the hardware structure, typical ASIC with a built-in memory
Although the function depends on the software that operates the CPU, the general ASIC C has a cryptographic function and a tamper-resistant hardware structure.
Different from PU.

[0250] SAM 105 ₁ to 105 all ₄ functions when implemented in software, the case of performing software processing closed in the module in having tamper resistance, on the host CPU mounted on the usual set In some cases, the software processing is performed in such a way that decoding cannot be performed only during the processing. The former is the same as the case where the cryptographic library module is stored in the memory as a normal software module instead of the IP core, and can be considered in the same way as the case where it is realized as hardware. On the other hand, the latter is called tamper-resistant software, and it is called ICE (debugger).
Even if the execution status is deciphered, the execution order of the tasks may vary (in this case, the task may be separated so that the task alone has a meaning as a program, that is, the previous and next lines are not affected). The task itself is encrypted, and can be realized in the same manner as a task scheduler (MiniOS) for a kind of secure processing. The task scheduler is embedded in the target program.

Next, the decoding / decompression module 163 shown in FIG. 25 will be described. As shown in FIG.
The decompression module 163 includes the mutual authentication unit 220, the decryption unit 2
21, a decoding unit 222, a decompression unit 223, a digital watermark information processing unit 224, and a semi-disclosure processing unit 225. The mutual authentication unit 220 determines that the decryption / decompression module 163 has SAM1
05 ₁ when inputting the data, and generates the session key data K _SES performs mutual authentication with the mutual authentication unit 170 shown in FIG. 32.

[0252] decoding unit 221, SAM 105 ₁ content key data Kc input from the semi disclosure parameter data 199, data 196 and the content data C for the user digital watermark information is decrypted by using the session key data _{K SES.} Then, the decryption unit 221 outputs the decrypted content key data Kc and content data C to the decryption unit 222, outputs the decrypted user digital watermark information data 196 to the digital watermark information processing unit 224, and outputs the semi-disclosure parameter data 199. Is output to the semi-disclosure processing unit 225.

The decryption unit 222 uses the content key data Kc based on the control from the semi-disclosure processing unit 225 to
The content data C is decrypted in a semi-disclosed state, and the decrypted content data C is output to the decompression unit 223.

The decompression unit 223 decompresses the decrypted content data C and outputs it to the digital watermark information processing unit 224. The decompression unit 223 performs decompression processing using, for example, A / V decompression software stored in the content file CF shown in FIG. 5A, and performs decompression processing using, for example, the ATRAC3 method.

The digital watermark information processing section 224 embeds the user digital watermark information corresponding to the decrypted user digital watermark information data 196 in the decrypted content data C, and generates new content data C. The digital watermark information processing unit 224 outputs the new content data C to the playback module 169. As described above, the user digital watermark information is embedded in the decryption / decompression module 163 when the content data C is reproduced. In the present invention, the user digital watermark information data 196 may not be embedded in the content data C.

The semi-disclosure processing unit 225, for example, based on the semi-disclosure parameter data 199,
Instruct the decoding unit 222 which block is not to be decoded and which block is to be decoded. The semi-disclosure processing unit 22
In addition, the control unit 5 controls the reproduction function at the time of the trial listening and the period during which the trial listening can be performed based on the semi-disclosed parameter data 199.

[0257] The reproduction module 169 performs reproduction in accordance with the decrypted and decompressed content data C.

Next, the content provider 101, EM
A description will be given of a data format when transmitting and receiving data with signature data generated using private key data and public key certificate data between the D service center 102 and the user home network 103. FIG.
(A) shows that the content provider 101 sends the SAM 10
5 ₁ is a diagram for explaining the data format when transmitting the data Data in-band method. In this case, the content provider 101 sends the SAM1
05 _1, a content provider 101 SAM105
Session key data K obtained by the mutual authentication between the _1
The module Mod ₅₀ encrypted by _SES is transmitted. Module Mod ₅₀ includes module Mod ₅₁
And signature data S using the secret key data _KCP, S
IG _CP is stored. The module Mod ₅₁ includes secret key data K of the content provider 101.
Public key certificate data CER _CP storing _{CP and P} ;
The signature data SIG _ESC of the private key data K _{ESC, S} for the public key certificate data CER _CP and the data Data to be transmitted are stored. Thus, the module Mo storing the public key certificate data CER _CP
d ₅₀ from the content provider 101 to the SAM 10
5 ₁ by sending to, when performing verification of the signature data _{SIG CP} at SAM 105 _1, EMD service publication from the center 102 to SAM 105 ₁ key certificate data C
Need to send the ER _CP is eliminated.

[0259] FIG. 42 (B), (C) are diagrams for explaining the data format when transmitting out-of-band method data Data from the content provider 101 to the SAM 105 _1. In this case, the module Mod ₅₂ shown in FIG. _42B encrypted with the session key data K _SES obtained by the mutual authentication between the content provider 101 and the SAM 105 ₁ is transmitted from the content provider 101 to the SAM 105 ₁ . You. The module Mod ₅₂ includes data Dat to be transmitted.
a and the signature data S by the secret key data _KCP, S
IG _CP is stored. Further, FIG. 42 is EMD service center 102 from SAM 105 _1, which is encrypted with the session key data _{K SES} obtained by the mutual authentication between the EMD service center 102 and the SAM 105 ₁
The module Mod ₅₃ shown in (C) is transmitted. The module Mod ₅₃ includes a public key certificate data CER _CP of the content provider 101 and a secret key data K thereof.
A signature data SIG _ESC by _{ESC and S} is stored.

[0260] Figure 42 (D) are diagrams for explaining the data format when transmitting in-band method data Data to the content provider 101 from SAM 105 _1. In this case, the SAM 105 ₁ sends the content provider 101
01 and encrypted modules Mo in the session key data _{K SES} obtained by the mutual authentication between the SAM 105 ₁
d ₅₄ is transmitted. The module Mod ₅₄ includes the module Mod ₅₅ and its secret key data K
_The signature data SIG _SAM1 by _{SAM1 and S} is stored. Module Mod ₅₅ includes SAM105 ₁
Public key certificate data CER _SAM1 storing the private key data K _{SAM1 and P
The} signature data SIG _ESC by the secret key data K _{ESC, S for SAM1} and the data Data to be transmitted are stored. Thus, the public key certificate data CE
The module Mod ₅₅ storing R _SAM1 is
By transmitting from 105 ₁ to the content provider 101, when performing verification of the signature data _{SIG SAM1} in the content provider 101, it becomes unnecessary to transmit the public key certificate data _{CER SAM1} from the EMD service center 102 to the content provider 101.

FIGS. 42 (E) and (F) show the SAM 105 ₁
Is a diagram for describing a data format when data is transmitted from a to a content provider 101 in an out-of-band system. FIG. In this case, SA
The content provider 101 from M105 _1, module _{Mod 56} shown in FIG. 42 (E) encrypted by the session key data _{K SES} obtained by the mutual authentication between the content provider 101 and SAM 105 ₁ is transmitted. The module Mod ₅₆ includes data Dat to be transmitted.
a and the signature data SIG _{SAM1 of} the secret key data K _{SAM1 and S SAM1} are stored. In addition, the module Mod ₅₇ shown in FIG. 42 (F) encrypted with the session key data K _SES obtained by the mutual authentication between the EMD service center 102 and the content provider 101 from the EMD service center 102 to the content provider 101. Sent. The module _{Mod 57,} SAM105 ₁ of the public key certificate data CER
_SAM1 and signature data SIG _ESC based on the secret key data K _{ESC, S} are stored.

FIG. 43 (G) shows the content provider 1
01 to the EMD service center 102
FIG. 3 is a diagram for explaining a data format when is transmitted in an in-band system. In this case, from the content provider 101 to the EMD service center 102
Then, the module Mod ₅₈ encrypted with the session key data K _SES obtained by the mutual authentication between the content provider 101 and the EMD service center 102 is transmitted. The module Mod ₅₈ includes the module Mod
₅₉ and the signature data SIG _CP using the secret key data K _{CP, S} are stored. Module Mod ₅₉
Contains the secret key data K of the content provider 101.
Public key certificate data CER _CP storing _{CP and P} ;
The signature data SIG _ESC of the private key data K _{ESC, S} for the public key certificate data CER _CP and the data Data to be transmitted are stored.

FIG. 43H shows the contents provider 1
01 to the EMD service center 102
FIG. 4 is a diagram for explaining a data format when is transmitted in an out-of-band system. In this case,
The module Mod ₆₀ shown in FIG. 43 (H) encrypted with the session key data K _SES obtained by the mutual authentication between the content provider 101 and the EMD service center 102 is transmitted from the content provider 101 to the EMD service center 102. . Module Mod
₆₀ stores data Data to be transmitted and signature data SIG _CP based on the secret key data K _{CP, S.} At this time, the public key certificate data CER of the content provider 101 is stored in the EMD service center 102.
_{The CP} has already been registered.

[0264] FIG. 43 (I) is, EM from SAM105 ₁
FIG. 3 is a diagram for explaining a data format when data Data is transmitted to a D service center 102 by an in-band method. In this case, E from SAM105 ₁
The MD service center 102 has the EMD service center 1
02 and encrypted modules Mo in the session key data _{K SES} obtained by the mutual authentication between the SAM 105 ₁
d ₆₁ is transmitted. The module Mod ₆₁ includes the module Mod ₆₂ and its secret key data K
_The signature data SIG _SAM1 by _{SAM1 and S} is stored. The module Mod ₆₂ includes the SAM 105 ₁
Public key certificate data CER _SAM1 storing the private key data K _{SAM1 and P
The} signature data SIG _ESC by the secret key data K _{ESC, S for SAM1} and the data Data to be transmitted are stored.

[0265] FIG. 43 (J) is, EM from SAM105 ₁
FIG. 4 is a diagram for explaining a data format when data Data is transmitted to a D service center 102 by an out-of-band method. In this case, the SAM 105
The EMD service center 102 from _1, and encrypted with the session key data _{K SES} obtained by the mutual authentication between the EMD service center 102 and the SAM 105 ₁ 43
The module Mod ₆₃ shown in (J) is transmitted. The module Mod ₆₃ includes data Data to be transmitted and signature data SIG using the secret key data K _{SAM1 and S SAM.
SAM1} is stored. At this time, the EMD service center 102 the public key certificate data _{CER SAM1} of the SAM 105 ₁ has been already registered.

[0266] The following describes registration processing of the EMD service center 102 at the time of shipment of the SAM 105 ₁ to 105 _4. Since the registration processing of the SAM 105 ₁ to 105 ₄ are the same, will be described below registration process SAM 105 _1. SAM105 ₁ of the factory, as shown in FIG. 2
Key server 141 of the EMD service center 102 shown in FIG.
Thus, the following key data is initially registered in the storage unit 192 shown in FIG. 26 and the like via the SAM management unit 149. Further, the SAM 105 _1, for example, at the time of shipment, such as the storage unit 192, such as a program used when the SAM 105 ₁ accesses the first to the EMD service center 102 are stored. That is, in the storage unit 192,
For example, in FIG. 30, S with "*" on the left side
AM105 ₁ of identifier SAM_ID, recording key data K
_STR , public key data KR _-CA , E of the root certificate authority 2
Public key data _K ESC of MD service center 102, P, SAM105 ₁ of the secret key data K
_{SAM1, S} , public key certificate data CER _SAM1 and its signature data _{SIG22 , ESC} , original key data for generating authentication key data between the decryption / decompression module 163 and the media SAM are initially stored. You. Note that the public key certificate data CER _SAM1 is SA
It may be transmitted from the EMD service center 102 to the SAM 105 ₁ when registering M105 ₁ after shipment.

The storage unit 192 stores the SAM 105 ₁
At the time of shipment, the EMD service center 102 writes a file reader indicating the format in which the content file CF and the key file KF shown in FIG. In SAM 105 _1, when using the data stored in the content file CF and the key file KF, the file reader stored in the storage unit 192 is used.

Here, the public key data K of the root certificate authority 2
_{The R-CA} uses RSA generally used in electronic commerce on the Internet, and has a data length of, for example, 1024 bits. The public key data KR _-CA is issued by the root certificate authority 2 shown in FIG. Also, E
Public key data K _{ESC, P of} MD service center 102
Is generated using an elliptic curve cryptosystem having a short data length and strength equal to or higher than RSA, and the data length is, for example, 160 bits. However, in consideration of the encryption strength, it is desirable that the public key data K _{ESC, P} has 192 bits or more. EMD service center 1
02 is transmitted to the root certificate authority 92 by the public key data K _{ESC, P}
Register The root certificate authority 92 creates public key certificate data CER _ESC of the public key data K _{ESC, P.} Public key data _{K ESC,} the public key certificate data _{CER ESC} storing the _P is preferably stored in the storage unit 192 at the time of shipment of the SAM 105 _1. In this case, the public key certificate data CER _ESC is signed with the private key data K _{ROOT, S} of the root certificate authority 92.

[0269] EMD service center 102, a random number is generated SAM105 ₁ of the secret key data _{K SAM1, S,}
Is generated, and public key data K to be paired with
_{SAM1 and P} are generated. Further, the EMD service center 102 _obtains the authentication of the root certificate authority 92 and _obtains the public key certificate data CER of the public key data K _{SAM1 and P.
SAM1} is issued and own secret key data K
_Attach signature data using _{ESC, S.} That is,
The EMD service center 102 functions as a second CA (certificate authority).

[0270] Further, the SAM 105 _1, the SAM management unit 149 of the EMD service center 102 shown in FIG. 24, a unique (unique) identifier SAM_ID is assigned under the management of the EMD service center 102, which is SAM 105 ₁ of a storage In addition to being stored in the unit 192, it is also stored in the SAM database 149 a shown in FIG.

[0271] Also, SAM 105 ₁ after shipment, for example, is connected to the EMD service center 102 by the user, performs the registration process, the EMD service center 1
02 to the storage unit 192, the distribution key data KD _{1 to} KD ₃
Is transferred. That is, the user utilizing the SAM 105 _1, it is necessary registration procedure in the EMD service center 102 before downloading the content. This registration procedure, for example, (in this example, network device 160 ₁₎ devices that are equipped with the SAM 105 ₁ by using a attached registration form when purchased, contains information that the user himself identifies its own This is done offline, for example by post. SAM105 ₁ can not be used only after passing through the registration process described above.

[0272] The EMD service center 102 is
05 in accordance with the registration procedure according to _one of the user, by issuing a unique identifier USER_ID user, for example, in the SAM database 149a shown in FIG. 24, SAM_ID
And USER_ID are managed and used at the time of charging. In addition, the EMD service center 102 checks the SAM1
05 and information reference identifier TD for _a user assigns a password to be used for the first time, notifies the user. The user can use the information reference identifier ID and the password to make an inquiry to the EMD service center 102 for information on, for example, the usage status (usage history) of the content data up to the present. Also, EM
When registering a user, the D service center 102 checks the identity with a credit card company or the like, or checks the identity of the user offline.

Next, as shown in FIG.
_The procedure for storing the SAM registration list in the storage unit 192 in the storage unit ₁ will be described. SAM 105 ₁ shown in FIG. 1, for example, in the case of using the IEEE1394 serial bus as the bus 191, the topology generated when connecting or launch power of devices connected to the bus 191, the new device to the bus 191 using the map, get the SAM105 ₂ ~SAM105 ₄ of the SAM registration list that exists in your system. The topology map generated according to the bus 191 which is an IEEE 1394 serial bus is as follows.
For example, as shown in FIG.
When the 5 _{1-105 4} was added AV equipment ₁₆₀ 5, 160 ₆ SCMS processing circuits ₁₀₅ 5, 105 ₆ are connected, is generated as target SAM 105 ₁ to 105 ₄ and SCMS processing circuits 105 ₆ You. Therefore, SAM 105 ₁ from the topology map, S
The information about AMs 105 _{1 to} 105 ₄ is extracted and FIG.
5 is generated.

[0274] Then, SAM 105 ₁ is a SAM registration list shown in FIG. 45, to obtain a signature registered in the EMD service center 102. These processes, SAM105 ₁ is automatically performed by using a session of the bus 191, EM
It issues a SAM registration list registration command to the D service center 102. The EMD service center 102 uses the SAM1
Upon receipt of the SAM registration list shown in FIG. 45 from 05 _1,
Check the expiration date. And the EMD service center 1
02, the setting of the portion corresponding with reference to the presence or absence of a given settlement function than SAM105 ₁ at the time of registration. Also,
The EMD service center 102 checks the revocation list and sets a revocation flag in the SAM registration list. The revocation list is, for example, a list of SAMs whose use is prohibited (invalid) by the EMD service center 102 due to unauthorized use or the like. Further, EMD service center 102, settlement upon retrieval of the SAM registration list corresponding to the SAM 105 _1, to confirm whether SAM described therein is contained in the revocation list. Further, the EMD service center 102 attaches a signature to the SAM registration list. Thus, the SAM registration list shown in FIG. 46 is created. The SAM revocation list is generated only for SAMs of the same system (connected to the same bus 191), and indicates whether the SAM is valid or invalid by a revocation flag corresponding to each SAM. I have.

The content provider 1 shown in FIG.
01 will be described. FIG. 47 is a flowchart of the overall operation of the content provider 101. Step S1: The EMD service center 102 sends the public key certificate CER _CP of the public key data _{KCP, P} of the content provider 101 to the content provider 101 after the content provider 101 goes through a predetermined registration process.
Send to The EMD service center 102
After AM105 ₁ ~105 ₄ is passed through the predetermined registration processing,
Public key data K of SAMs 105 _{1 to} 105 _{4
SAM1, P-} K Public key certificate CER of _{SAM4, P}
To send the _{CP1 ~CER CP4} to SAM105 ₁ ~105 _4. Further, EMD service center 102 after the mutual authentication, each expiration transmits the distribution key data _KD 1 ～KD ₃ of 3 months of one month to SAM 105 ₁ to 105 ₄ of the user home network 103. Thus, in the EMD system 100, the distribution key data K
Due to the distribution of D ₁ ~KD ₃ in advance in the SAM 105 ₁ to 105 _4, even in the offline state between the SAM 105 ₁ to 105 ₄ and the EMD service center 102, SAM
105 _{1-105 4} content provider 10 in
The secure container 104 distributed from 1 can be decrypted and purchased / used. In this case, the purchase / use history is described in the use history data 108, and the use history data 10
8, when the SAM 105 ₁ to 105 ₄ and the EMD service center 102 is connected, because it is automatically transmitted to the EMD service center 102, it is possible to reliably perform settlement processing in the EMD service center 102.
Note that a SAM in which the EMD service center 102 cannot collect the usage history data 108 within a predetermined period is set as an invalid target in the revocation list. Note that the usage control status data 166, as a rule, in real time, is transmitted from the SAM 105 ₁ to 105 ₄ to the EMD service center 102.

Step S2: Content Provider 10
1 transmits the registration module Mod ₂ shown in FIG. 18 to the EMD service center 102 after performing mutual authentication. Then, after performing a predetermined signature verification, the EMD service center 102 registers and authorizes the license data 106 and the content key data Kc. Also, EM
The D service center 102 registers the registration module Mod ₂
A key file KF for six months corresponding to the above is created and transmitted to the content provider 101.

Step S3: Content Provider 10
1 is a content file C shown in FIGS. 5 (A) and 5 (B).
F and its signature data SIG6 _{, CP,} and the key file KF and its signature data SIG7 _{, CP,} and the public key certificate data CE shown in FIG.
The secure container 104 storing the R _cp and the signature data _{SIG 1, ESC,} online and / or offline, to deliver to the SAM 105 ₁ to 105 ₄ of the user home network 103. When online, the delivery protocol for the content provider is used, and in a format independent of the protocol (ie,
The secure container 104 is delivered from the content provider 101 to the user home network 103 (as data transmitted using a predetermined layer of a communication protocol having a plurality of layers). Also, if you ’re offline,
The secure container 104 is delivered from the content provider 101 to the user home network 103 while being recorded on a ROM or RAM recording medium.

[0278] Step S4: SAM105 ₁ ~SAM105 ₄ of the user home network 103, the signature of the secure container 104 which has received the distribution from the content provider 101 data _{SIG 6,} CP, SI
G _{7, CP,} to verify the _{SIG K1, ESC,} after confirming the legitimacy of the creator and the sender of the content file CF and the key file KF, using the distribution key data _KD 1 _{~KD 6} of the corresponding period To decrypt the key file KF.

Step S5: SAM105 _{1 to} SAM1
In 05 _4, the operation signal S165 in accordance with the operation of the purchase and usage form determination operation unit 165 shown in FIG. 25 by the user
The purchase / use form is determined based on the. At this time, in the usage monitoring unit 186 shown in FIG. 31, based on the rights certificate data 106 stored in the secure container 104,
The purchase / use form of the content file CF by the user is managed.

Step S6: SAM105 _{1 to} SAM1
05 In the charge processor 187 shown in FIG. 31 _4, based on the operation signal S165, the usage log data 108 and the usage control status data 166 describing the operation of the purchase and usage of the decision by the user to produce, these EMD The data is transmitted to the service center 102.

Step S7: EMD service center 10
In the settlement processing unit 142 shown in FIG. 24, the settlement processing unit 142 performs settlement processing based on the usage history data 108, and generates settlement claim data 152 and settlement report data 107. The EMD service center 102 transmits the settlement claim right data 152 and its signature data SIG ₉₉ to the settlement agency 91 via the payment gateway 90 shown in FIG. Further, the EMD service center 102 transmits the settlement report data 107 to the content provider 101.

Step S8: In the settlement institution 91,
After the verification of the signature data SIG _99, based on the settlement claim data 152, the amount of money paid by the user is distributed to the owners of the content provider 101.

As described above, the EMD system 10
0, secure container 1 in the format shown in FIG.
04 is distributed from the content provider 101 to the user home network 103, and the process for the key file KF in the secure container 104 is performed by the SAMs 105 ₁ to SAM 105 ₁ .
Carried out in 105 within _4. Further, the content key data Kc and the rights certificate data 106 stored in the key file KF are stored.
Is encrypted using the distribution key data KD _{1 to} KD ₃ , and the SA holding the distribution key data KD ₁ to KD ₃
Only it is decoded by the M105 ₁ to 105 within _4. And S
In AM105 ₁ ~105 _4, a module having tamper resistance, based on the handling content of the written content data C in the usage control policy data 106, the purchase mode and the usage mode of the content data C are determined. Therefore, according to the EMD system 100, the purchase and use of the content data C in the user home network 103 can be surely performed based on the contents of the rights document data 106 created by a person related to the content provider 101.

In the EMD system 100, the content provider 101 sends the user home network 1
The distribution of the content data C to the secure container 104 is performed in both the online and offline cases.
By performing with, it can be shared in both cases the rights processing of the content data C in the SAM 105 ₁ to 105 _4.

In the EMD system 100, the network device 160 in the user home network 103
₁ and purchase content data C in the AV apparatus ₁₆₀ 2 to 160 _4, utilized in recording and transfer, by always performing the processing based on the usage control policy data 106, can be employed in common rights processing rules.

FIG. 48 is a view for explaining an example of a secure container delivery protocol adopted in the first embodiment. As shown in FIG. 48, in the multiprocessor system 100, the secure container 104 is transmitted from the content provider 101 to the user home network 103.
For example, TCP / IP and XML / SMIL are used as a protocol for distributing XML. Also, as a protocol for transferring a secure container between the SAMs of the user home network 103 and a protocol for transferring a secure container between the user home networks 103 and 103a, for example, XML / SMIL constructed on a 1394 serial bus interface Is used. In this case, the secure container may be recorded on a ROM-type or RAM-type recording medium and delivered between the SAMs.

First Modification of First Embodiment In the above-described embodiment, as shown in FIG.
In the D service center 102, the key file KF is encrypted using the distribution key data KD, and the SAM 105 _1-
105 has been illustrated a case of decoding the key file KF by using the distribution use key data KD in _4, as shown in FIG. 1, from the content provider 101 SAM 105 ₁ ~
When supplying the secure container 104 directly to 105 _4, the encryption of the key file KF using the distribution key data KD is not necessarily performed. In this manner, the encryption of the key file KF using the distribution key data KD is performed when the content data is supplied from the content provider to the user home network via the service provider as in a second embodiment described later. To
By holding the distribution key data KD only in the content provider and the user home network, a great effect is exerted in suppressing fraudulent activities by the service provider. However, even in the case of the first embodiment described above,
Encrypting the key file KF using the distribution key data KD is effective in increasing the power of suppressing unauthorized use of content data.

In the above-described embodiment, FIG.
The case where the standard retail price data SRP is stored in the right certificate data 106 in the key file KF shown in FIG.
Outside the key file KF in the secure container 104,
Standard retail price data SRP (price tag data) may be stored. In this case, the standard retail price data SR
The signature data created using the secret key data _Kcp is attached to P.

Second Modification of First Embodiment In the above-described first embodiment, as shown in FIG.
The case where the service center 102 performs the payment processing at the payment institution 91 via the payment gateway 90 using the payment claim right data 152 generated by itself is exemplified. For example, as shown in FIG. The payment request data 152 may be transmitted from the 102 to the content provider 101, and the content provider 101 may use the payment request data 152 to perform a payment process to the payment institution 91 via the payment gateway 90.

Third Modification of First Embodiment In the first embodiment described above, the SAM of the user home network 103 is transmitted from a single content provider 101.
105 _{1-105 4} has exemplified the case of supplying the secure container 104, two or more content providers 101a, SAM 105 ₁ to 105 ₄ each secure container 104a from 101b, 104b may be supplied. FIG. 50 shows the content provider 1
FIG. 14 is a configuration diagram of an EMD system according to a third modification of the first embodiment in a case where 01a and 101b are used. In this case, EMD service center 102, the content provider 101a and 101b, each of the six months of the distribution use key data _KDa 1 _{~KDa 6} and _KDb 1 ~
Key files KFa _{1 to} KF a encrypted using KDb ₆
To deliver the Fa ₆ and _KFb 1 _{~KFb 6.} Also, E
The MD service center 102 includes SAMs 105 _{1 to} 105
₄ , distribution key data KDa _{1 to} KDa ₃ and KDb _{1 to} KDb ₃ for three months are distributed.

Then, the content provider 101a
Is the content file CFa encrypted using the unique content key data Kca and the key file KFa for the corresponding period received from the EMD service center 102.
Supplies the secure container 104a storing a _{1 ~KFa 6} SAM105 _{1 ~105 4} to online and / or offlines. At this time, a globally unique identifier content ID distributed by the EMD service center 102 is used as the key file identifier.
The D service center 102 centrally manages content data. Also, the content provider 10
1b is a content file CFb encrypted using the unique content key data Kcb and a key file K of the corresponding period received from the EMD service center 102.
Secure container 104 storing Fb _{1 to} KFb ₆
b supplies online and / or offlines the SAM 105 ₁ to 105 _4.

The SAMs 105 _{1 to} 105 ₄ decrypt the secure container 104 a using the distribution key data KDa _{1 to} KDa ₃ of the corresponding period, and determine the content purchase mode through a predetermined signature verification process and the like. And
The use history data 108a and the use control state data 166a generated according to the determined purchase form and use form are transmitted to the EMD service center 102.
Further, the SAMs 105 _{1 to} 105 ₄ transmit the distribution key data K for the corresponding period with respect to the secure container 104 b.
The content is decrypted using Db _{1 to} KDb ₃ , the purchase form of the content is determined through a predetermined signature verification process or the like, the use history data 108 b generated according to the determined purchase form and use form, and the use control. State data 16
6b to the EMD service center 102.

In the EMD service center 102, the content provider 1 based on the usage history data 108a
Create payment request right data 152a for 01a,
The settlement processing is performed for the settlement institution 91 using this.
Further, the EMD service center 102, based on the usage history data 108b,
, The settlement request data 152b is created, and the settlement institution 91 is settled using this.

Also, the EMD service center 102 registers the authorization data 106a and 106b to perform the authorization. At this time, the EMD service center 102 transmits the key file KF corresponding to the license data 106a, 106b.
A globally unique identifier content ID is distributed to a and KFb. EMD service center 1
02 issues public key certificate data CER _cpa and CER _CPb of the content providers 101a and 101b, and _adds their own signature data SIG _{1b, ESC} and SI.
_G1a, and attaches _ESC to authenticate its validity.

Fourth Modification of First Embodiment In the above-described embodiment, the case where the content file CF and the key file KF are stored in the secure container 104 in a directory structure and transmitted from the content provider 101 to the SAMs 105 _{1 to} 105 ₄ The content file CF and the key file KF
May be separately transmitted to the SAMs 105 _{1 to} 105 ₄ . This includes, for example, a first method and a second method described below. In the first method, as shown in FIG.
SAM 105 ₁ to SAM 105 from content provider 101
5 _4, in not dependent on the communication protocol format, and transmits the content file CF and the key file KF separately. In the second method, as shown in FIG. 52, the SAMs 105 _{1 to} 105 ₄ are sent from the content provider 101.
The content file CF is transmitted to the EMD service center 102 in a format independent of the communication protocol.
To send the key file KF to SAM105 ₁ ~105 ₄ from. The transmission of the key file KF is performed by, for example, SA
M105 ₁ to 105 ₄ of the user, the content data C
When attempting to determine the purchase form is transmitted from the EMD service center 102 to the SAM 105 ₁ to 105 _4. When the first method and the second method described above are adopted, between the related content files CF, the content file CF and the corresponding key file K
A link relationship with F is established using hyperlink data stored in at least one header of the content file CF and the key file KF. SAM1
In 05 _{1-105 4,} based on the link relationship, performs right processing and utilization of the content data C. In addition,
In this modification, the format of the content file CF and the key file KF is, for example, as shown in FIG.
The one shown in (B) is adopted. In this case, together with the content file CF and the key file KF,
It is preferable to transmit the signature data SIG _{6, CP} , SIG _{7, CP} . Fifth Modification of First Embodiment In the above-described embodiment, in the secure container 104, the content file CF and the key file KF
Are provided separately, but the key file KF may be stored in the content file CF in the secure container 104 as shown in FIG. 53, for example. In this case, signature data is added to the content file CF storing the key file KF using the secret key data _{KCP, S} of the content provider 101. Sixth Modification of First Embodiment In the above-described embodiment, the content data C is stored in the content file CF, and the content key data Kc and the rights certificate data 106 are stored in the key file KF. a case has been exemplified to be transmitted such as _1, the content data from C, the content provider 101 etc. SAM 105 ₁ without employing the at least one file format of the content key data Kc and the usage control policy data 106, does not depend on the communication protocol It may be sent in the form.

For example, as shown in FIG. 54, in the content provider 101, the content data C encrypted with the content key data Kc, the encrypted content key data Kc and the encrypted
Create a secure container 104s that stores a key file KF that includes
The may be transmitted in a format that is independent of the communication protocols such as SAM 105 _1.

[0297] Further, as shown in FIG. 55, from the content provider 101 etc. SAM 105 _1, the content data C encrypted by the content key data Kc, the encrypted content key data Kc and the encrypted usage control policy The key file KF including the data 106 and the like may be individually transmitted in a format independent of the communication protocol. That is, the content data C is transmitted in the same path as the key file KF without being converted into the file format.

[0298] Further, as shown in FIG. 56, from the content provider 101 etc. SAM 105 _1, it sends a format that is independent of the encrypted content data C communication protocol with the content key data Kc, the encrypted content the key file KF and the like key data Kc and the encrypted usage control policy data 106 may be transmitted from the EMD service center 102 SAM 105 ₁ etc.. That is, the content data C is transmitted in a different path from the key file KF without being converted into a file format.

[0299] Further, as shown in FIG. 57, from the content provider 101 etc. SAM 105 _1, the content data C encrypted by the content key data Kc, the content key data Kc and the usage control policy data 106,
It may be transmitted in a format independent of the communication protocol. That is, the content data C and the content key data Kc
And do not convert the rights certificate data 106 into a file format.
Send on the same route.

[0300] Further, as shown in FIG. 58, from the content provider 101 etc. SAM 105 _1, the encrypted content data C by the content key data Kc, and transmits a format that is independent of the communication protocol, EM
D from the service center 102, etc. SAM 105 ₁ may transmit the content key data Kc and the usage control policy data 106. That is, the content data C, the content key data Kc, and the rights certificate data 106 are transmitted in another path without being converted into a file format.

Second Embodiment In the above-described embodiment, the SAMs 105 ₁ to SAM 105 _{1 of the} user home network 103 are sent from the content provider 101.
A case has been exemplified for directly distributing the content data to 105 _4, in the present embodiment, the content data that the content provider will provide, the case of delivery to the SAM of the user home network via the service provider.

FIG. 59 shows the EMD system 3 of this embodiment.
FIG. As shown in FIG. 59, the EMD system 300 includes a content provider 301, an EMD service center 302, and a user home network 30.
3. It has a service provider 310, a payment gateway 90, and a clearing house 91. Content provider 301, EMD service center 302, SAM30
5 _{1-305 4} and the service provider 310, the data providing apparatus according to to claims 22, respectively, the management apparatus, and corresponds to the data processing apparatus and a data distribution device. The content provider 301 is the same as the content provider 10 of the first embodiment except that the content provider 301 supplies content data to the service provider 310.
Same as 1. Also, the EMD service center 302
Is the content provider 101 and the SAM 505 ₁
To 505 In addition to the _4, also authentication to the service provider 310, except that it has a key data management function, and right clearing function, the same as the EMD service center 102 of the first embodiment described above. Further, the user home network 303 has a network device 360 ₁ and AV devices 360 _{2 to} 360 ₄ . Network equipment 360 ₁ has a built-in SAM 305 ₁ and the CA module 311, AV equipment ₃₆₀ 2-360 ₄ are respectively built SAM 305 ₂ to 305 _4. Here, the SAMs 305 _{1 to} 305 ₄ receive the distribution of the secure container 304 from the service provider 310, verify the signature data of the service provider 310 in addition to the content provider 301, and execute the process.
Except that the purchase history data for P (purchase history data for data distribution device) 309 is created,
Is the same as the SAM 105 ₁ to 105 ₄ of the embodiment.

First, an outline of the EMD system 300 will be described. In the EMD system 300, the content provider 301 uses the same rights certificate (UCP: UCP) as the first embodiment, which indicates the rights such as the license conditions of the content data C of the content to be provided by itself.
Sage Control Policy) data 106
And the content key data Kc to the EMD service center 302 which is a highly reliable authority.
The rights certificate data 106 and the content key data Kc are
It is registered in the EMD service center 302 and is authorized (authenticated).

[0304] The content provider 301 encrypts the content data C with the content key data Kc to generate a content file CF. Further, the content provider 301 receives, from the EMD service center 302, the key file KF for each of the content files CF for six months. The key file KF stores signature data for verifying whether the key file KF has been tampered with and validity of the creator and sender of the key file KF. Then, the content provider 301 sends the content file CF,
The secure container 104 shown in FIG. 5 that stores the key file KF and its own signature data is supplied to the service provider 310 using a network such as the Internet, digital broadcasting, a recording medium, an unofficial protocol, or offline or the like. Also, the signature data stored in the secure container 104 is used to verify whether the corresponding data has been tampered with, and to verify the creator and sender of the data.

Upon receiving the secure container 104 from the content provider 301, the service provider 310 verifies the signature data and confirms the creator and sender of the secure container 104. Next, the service provider 310 indicates, for example, a price obtained by adding a price for a service such as authoring performed by itself to a price (SRP) for content desired by the content provider 301 notified offline. Price tag data (PT) 312 is created. Then, the service provider 310 secures the content file CF and the key file KF extracted from the secure container 104, the price tag data 312, and the signature data of the content file CF and the key file 312 by using its own secret key data _{KSP, S.} Create a container 304. At this time, the key file KF contains the distribution key data KD _{1 to} KD.
₆ , encrypted by the service provider 31
For 0 it does not hold the distribution key data _KD 1 _{~KD 6,} service provider 310 key file KF
You cannot see or change the contents of. Further, the EMD service center 302 registers and authorizes the price tag data 312.

The service provider 310 distributes the secure container 304 to the user home network 303 online and / or offline. At this time, when offline, the secure container 304 is recorded on a ROM-type recording medium or the like, and the SAM 305 _1-
As it is supplied to 305 _4. On the other hand, when online, the service provider 310 and the CA module 3
11 and the secure container 304
_Is encrypted by using the session key data K _SES in the service provider 310, and the secure container 304 received by the CA module 311 is decrypted by using the session key data K _SES.
Transferred to 305 ₁ to 305 _4. In this case, from the content provider 301 to the user home network 30
As a communication protocol for transmitting the secure container 304 to MHEG 3, if it is digital broadcasting, MHEG (Multim
edia and Hypermedia info
motion coding Experts Gro
Up) protocol is used, and if it is the Internet, XML / SMIL / HTML (HyperTextMa)
rkup Language) is used, and the secure container 304 is embedded in these communication protocols by tunneling in a format independent of the communication protocol (such as an encoding method). Therefore, there is no need to ensure the format consistency between the communication protocol and the secure container 304, and the format of the secure container 304 can be flexibly set.

[0307] Next, in SAM 305 ₁ to 305 _4, verifies the signature data stored in the secure container 304, legitimacy of the creator and the sender stored content files CF and the key file KF in the secure container 304 Check the nature. And SAM305
In _{1-305 4,} when the validity is confirmed, E
Decrypting the key file KF by using the distribution use key data _KD 1 _{~KD 3} period corresponding is delivered from MD service center 302. The secure container 304 supplied to the SAMs 305 _{1 to} 305 ₄ is stored in the network device 360.
₁ and the AV devices 360 _{2 to} 360 ₄ , after the purchase / use form is determined in accordance with the operation of the user, becomes a target for reproduction or recording on a recording medium. SAM305 ₁
To 305 ₄ records as usage history (the Usage Log) data 308 a history of purchases and use of the secure container 304 mentioned above. The usage history data (history data or management device history data) 308 is, for example, EMD
In response to a request from the service center 302, the EMD service center 302
Sent to. When the content purchase mode is determined, the SAMs 305 _{1 to} 305 ₄ use the usage control state data (UCS: Usage control) indicating the purchase mode.
(Rollstate Data) 166 to the EMD service center 302.

The EMD service center 302, based on the usage history data 308,
For each of the service provider 310 and the service provider 310, the content of the charge is determined (calculated). Thereby, the money paid by the user of the user home network 103 is distributed to the content provider 101 and the service provider 310 by the settlement processing by the EMD service center 102.

In this embodiment, the EMD service center 3
02 has an authentication function, a key data management function, and a right processing (profit distribution) function. That is, the EMD service center 302 sends the second certificate authority (S) to the root certificate authority 92 which is the highest authority in a neutral position.
second Certificate Authority
ty), and the content provider 3
01, service provider 310 and SAM 305 ₁
To 305 in the public key certificate data of public key data used for verification processing of the signature data in _4, by attaching a signature by the secret key data of the EMD service center 302 authenticates the validity of the public key data. In addition, as described above, the authorization function of the EMD service center 302 also registers and authorizes the copyright data 106 of the content provider 301, the content key data Kc, and the price tag data 312 of the service provider 310. . Also, the EMD service center 30
2, for example, has a key data management function for managing the key data such as the distribution key data KD ₁ ~KD _6. Further, the EMD service center 302 stores the rights certificate data 106 registered by the content provider 301 and the SAM 30
5 ₁ to usage history data 30 input from SAM 305 ₄
8 and the price tag data 312 registered by the service provider 310, the user of the user home network 303 makes a payment for the purchase and use of the content, and pays the money to the content provider 301 and the service provider 310. It has a right processing (profit sharing) function to distribute and pay.

Hereinafter, each component of the content provider 301 will be described in detail. [Content Provider 301] FIG. 60 is a functional block diagram of the content provider 301, and shows the flow of data related to data transmitted to and received from the service provider 310. As shown in FIG. 60, the content provider 301 includes a content master source database 111, a digital watermark information adding unit 112, a compressing unit 113, an encrypting unit 114, a random number generating unit 115, a signature processing unit 117, a secure container creating unit 118, Secure container database 118a, key file database 118b, storage unit 119, mutual authentication unit 120, encryption / decryption unit 121, rights data creation unit 122, EM
It has a D service center management unit 125 and a service provider management unit 324.

In FIG. 60, the components denoted by the same reference numerals as in FIG. 3 are the same as the components denoted by the same reference numerals in the first embodiment described above with reference to FIGS. That is, the content provider 301 has a configuration in which a service provider management unit 324 is provided instead of the SAM management unit 124 shown in FIG. The service provider management unit 324 stores the secure container creation unit 11
The secure container 104 shown in FIG.
Provide offline and / or online to the service provider 310 shown in FIG.

[0312] The service provider management unit 324 operates as shown in FIG.
Is distributed to the service provider 310 online, the encryption / decryption unit 121 encrypts the secure container 104 using the session key data K _SES, and then sends it to the service provider 310 via the network. To deliver.

[0313] The data flow in the content provider 101 shown in Fig. 4 is similarly applied to the content provider 301.

[0314] Hereinafter, the flow of processing when transmitting the secure container 104 from the content provider 301 to the service provider 310 will be described. FIG. 61 and FIG. 62
9 is a flowchart showing the flow of processing when transmitting the secure container 104 from the content provider 301 to the service provider 310. Step C1: Mutual authentication is performed between the content provider 301 and the service provider 310. Step C2: The session key data K _SES obtained by the mutual authentication in step C1 is shared between the content provider 301 and the service provider 310. Step C3: The service provider 310 accesses the secure container database 118a (for CP) owned by the content provider 301. Step C4: The service provider 310, for example,
The secure container 104 required for its own distribution service is selected with reference to a list of content IDs and metadata that are centrally managed in the secure container database 118a.

Step C5: Content Provider 30
1 is the secure container 104 selected in step C4
To the session key data K shared in step C2.
Encrypt using _SES . Step C6: The content provider 301 inserts the secure container 104 obtained in step C5 into the content provider product delivery protocol.

Step C7: Service Provider 310
Do the download. Step C8: The service provider 310 takes out the secure container 104 from the content provider product delivery protocol. Step C9: The service provider 310 decrypts the secure container 104 using the session key data K _SES shared in step C2. Step C10: The service provider 310 verifies the decrypted signature data stored in the secure container 104 to confirm the validity of the sender, and the process of step C11 is performed on condition that the sender is valid. I do. Step C11: The service provider 310 stores the secure container 104 in its own secure container database.

[Service Provider 310] The service provider 310 stores the content file CF and the key file KF in the secure container 104 provided from the content provider 301 and the price tag data 312 generated by itself in the secure container 304. And the network device 360 ₁ and the AV devices 360 _{2 to} 36 of the user home network 303.
To 0 ₄ to deliver a secure container 304 in the online and / or offline. Service provider 310
Are broadly divided into independent services and linked services. The stand-alone service is, for example, a download-only service that individually distributes content. The linked service is a service that distributes content in conjunction with a program or CM (advertisement). For example, the content of the theme song or inserted song of a drama is stored in a stream of a drama program. When watching the drama program, the user can purchase the content of the theme song or the inserted song in the stream.

FIG. 63 is a functional block diagram of the service provider 310. FIG. 63 shows the secure container 10 supplied from the content provider 301.
4 shows a flow of data when the secure container 304 created by using FIG. 4 is supplied to the user home network 303. As shown in FIG. 63, the service provider 310 includes a content provider management unit 350, a storage unit 351, a mutual authentication unit 352, an encryption / decryption unit 353,
Signature processing unit 354, secure container creation unit 355, secure container database 355a, price tag data creation unit 356, user home network management unit 3
57, an EMD service center management unit 358 and a user preference filter generation unit 920.

[0319] Hereinafter, a secure container 304 is created from the secure container 104 supplied from the content provider 301, and this is stored in the user home network 3
The flow of processing in the service provider 310 when distributing to the service provider 03 will be described with reference to FIGS. 63 and 64. FIG. 64 is a flowchart illustrating a process of distributing the secure container 304 from the content provider 301 to the user home network 303.
<Step D1> Content provider management section 350
Are online and / or offline from the content provider 301 to the secure container 1 shown in FIG.
04, and stores the secure container 104 in the storage unit 3
Write to 51. At this time, if online, the content provider management unit 350 sets the session key data K _SES obtained by mutual authentication between the mutual authentication unit 120 shown in FIG. 60 and the mutual authentication unit 352 shown in FIG.
Encrypts / decrypts the secure container 104 using
After decoding at 53, the data is written to the storage unit 351.
The service provider 310 may have a dedicated secure container database for storing the secure container 104, separately from the storage unit 351.

<Step D2> Next, the signature processing section 354
5, the signature data SIG of the secure container 104 stored in the storage unit 351 shown in FIG.
_1, verification is performed using the public key data K _{ESC, P} of the EMD service center 302 read from _{the ESC} storage unit 351 and after the validity thereof is confirmed, the public key certificate data CER _CP shown in FIG. From the public key data K
_Take out _{CP and P.} Next, the signature processing unit 354 uses the extracted public key data _{KCP, P} to
5 of the secure container 104 stored in 51
Signature data SIG _{6, CP} , SI shown in (A), (B)
G7 _{, CP} verification, that is, verification of the validity of the creator and sender of the content file CF and the sender of the key file KF. Also, the signature processing unit 354, the public key data _{K ES C} read from the storage unit _351, using a _P, Verifier in FIG signature data _{SIG K1} stored in the key file KF shown in _{(B), ESC,} namely The validity of the creator of the key file KF is verified. At this time,
The verification of the signature data SIG _{K1, ESC} also serves as verification of whether the key file KF is registered in the EMD service center 302.

<Step D3> Next, the secure container creation unit 355 sends the signature data SIG _{6, CP} , SIG
_{7, CP} , SIG _{K1, and ESC} , the validity of _{the ESC} is confirmed, the storage unit 351 stores the content file CF and its signature data SIG6 _{, CP} , the key file KF and its signature data SIG7 _{, CP,} and the service provider 310. Public key certificate data CER _SP and its signature data SIG _{61, ESC,} and the public key certificate data CER _{CP of the} content provider 301 and its signature data SIG _{1, ESC} .

The price tag data creating section 356
Creates price tag data 312 indicating a price obtained by adding the price of its service to the price of the content requested by the content provider 301 notified offline from the content provider 301, for example,
The information is stored in the storage unit 351.

The signature processing unit 354 takes the hash value of the content file CF, the key file KF, and the price tag data 312, and
Using the secret key data _{KSP, P} of the signature data SI
_{G62, SP} , SIG63 _{, SP} , SIG64 _{, SP} are created and output to the secure container creation unit 355. Here, the signature data SIG _{62, SP} is used to verify the validity of the sender of the content file CF, and the signature data SIG _{63, SP} is used to verify the validity of the sender of the key file KF. The signature data SIG _{64 and SP} are used to verify the validity of the creator and sender of the price tag data 312.

Next, the secure container creation unit 355
As shown in FIGS. 65 (A) to (D), content file CF and its signature data SIG _{6, CP} , SIG
_{62, SP} , key file KF and its signature data SIG _{7, CP} , SIG _{63, ESC} , price tag data 312 and its signature data SIG
_{64, SP} , public key certificate data CER _SP and its signature data SIG _{61, ESC} , and public key certificate data CER _CP and its signature data SIG _{1, ESC.} It is stored in the database 355a. The secure container 304 stored in the secure container database 355a is centrally managed by the service provider 310 using, for example, a content ID.

<Step D4> The secure container creating unit 355 reads out the secure container 304 according to the request from the user home network 303 from the secure container database 355a and outputs it to the user home network managing unit 357. At this time, the secure container 304 may be a composite container storing a plurality of content files CF and a plurality of key files KF respectively corresponding to the plurality of content files CF. For example, a single secure container 304 may store a plurality of content files CF relating to songs, video clips, lyrics cards, liner notes, and jackets, respectively. These plurality of content files CF and the like may be stored in the secure container 304 in a directory structure.

[0326] When transmitted by digital broadcasting, the secure container 304 transmits MHEG (Multi-
edia and Hypermedia info
motion coding Experts Gro
XML / SMIL / HTML (Hyper
TextMarkup Language) protocol is used. At this time, the content file CF, the key file KF, and the like in the secure container 304 are adopted between the service provider 310 and the user home network 303 in a format that does not depend on an encoding method in which the MHEG and HTML protocols are tunneled. It is stored in a predetermined layer in the communication protocol.

For example, when the secure container 304 is transmitted by digital broadcasting, as shown in FIG. 66, the content file CF contains the MHEG object (Obj
ect) is stored as MHEG content data. In the transport layer protocol, the MHEG object is a PES (Pa
Ketized Elementary Stream
m)-stored in -Video, and if it is audio, PE
Stored in S-Audio, Pr if the image is a still image
It is stored in “i-vate-Data”. Also, as shown in FIG. 67, the key file KF, the price tag data 31
2 and public key certificate data CER _CP , CER
_SP stands for TS Pack of the transport layer protocol.
ECM (Entitlement Counter)
olMessage). Here, the content file CF, the key file KF, the price tag data 312 and the public key certificate data CER _CP , CER
_SP is a link between each other is established by the directory structure data DSD ₁ in the header of the content file CF.

Next, the user home network management section 3
57 stores the secure container 304 offline and / or online in the user home network 303.
To supply. User home network management unit 357
Is the secure container 304 when distributing the network device 360 ₁ of the user home network 303 on-line, after mutual authentication, encryption and decryption unit 352
After encrypting the secure container 304 by using the session key data K _SES in, for delivery to the network device 360 ₁ via the network.

Note that the user home network management unit 3
The 57 encrypts the secure container 304 using the scramble key data K _SCR when broadcasting the secure container 304 via, for example, a satellite. Also,
The scramble key data K _SCR by encrypting the work key data K _W, encrypted with the work key data K _W master key data K _M. Then, the user home network management unit 357 sends the scramble key data K _SCR and the work key data K together with the secure container 304.
_W is transmitted to the user home network 303 via the satellite. In addition, for example, the master key data _{K M,} IC
It is stored in a card or the like and distributed offline to the user home network 303.

The user home network management unit 3
57 is content data C distributed by the service provider 310 from the user home network 303.
Upon receiving the SP purchase history data 309 for
This is written in the storage unit 351. Service Provider 3
10 refers to the SP purchase history data 309 when determining future service contents. Further, the user preference filter generation unit 920 transmits the SP purchase history data 309 based on the SP purchase history data 309 based on the SP purchase history data 309.
AM305 analyzes the preference of ₁ to 305 ₄ of the user to generate a user preference filter data 900 and transmits this via the user home network management unit 357 to the CA module 311 of the user home network 303.

FIG. 68 shows a flow of data related to communication with the EMD service center 302 in the service provider 310. In addition, assuming that the following processing is performed, a person involved in the service provider 310 performs registration processing in the EMD service center 302 offline using, for example, his / her own ID card and a bank account for performing payment processing. , Globally unique identifier SP I have an ID. Identifier SP ID is
It is stored in the storage unit 351.

First, the service provider 310 determines that the EM
D service center 302 has its own private key data K
_SP, the public key data K _SP corresponding to _S, the processing will be described with reference to FIG. 68 in the case of requesting the public key certificate data CER _SP for certifying the validity of _S. The service provider 310 generates a random number using a true random number generator, generates secret key data _{KSP, S,} and creates public key data _{KSP, P} corresponding to the secret key data _{KSP, S.} The information is stored in the storage unit 351. EMD service center management unit 358, identifier SP_I of service provider 310
D and the public key data _{KSP, P} are read from the storage unit 351. Then, the EMD service center management unit 358
Is the identifier SP ID and public key data K
_{The SP and P} are transmitted to the EMD service center 302.
Then, the EMD service center management unit 348 inputs the public key certificate data CER _SP and its signature data SIG _{61 and ESC} from the EMD service center 302 according to the registration, and writes them into the storage unit 351.

Next, the service provider 310 determines that the EM
A process for registering the price tag data 312 in the D service center 302 and authorizing it will be described with reference to FIG.

In this case, in the signature processing unit 354, the price tag data 3 read from the storage unit 351 is read.
12 and a module Mod ₁₀₃ shown in FIG. 69 which stores a content ID which is a globally unique identifier.
Is obtained, and the signature data SIG80 _{, SP} is generated using the secret key data _{KSP, S.} Also,
The public key certificate data CER _SP and its signature data SIG _{61, ESC} are read from the storage unit 351. The price tag registration request module _{Mod 102} shown in FIG. 69, the encryption and decryption unit 353 by using the session key data _{K SES} obtained by the mutual authentication between the mutual authentication section 352 and the EMD service center 302 After being encrypted, the EMD service center management unit 3
58 to the EMD service center 302. The module Mod ₁₀₂ includes the service provider 3
10 globally unique identifiers SP The ID may be stored.

Also, the EMD service center management unit 358
Writes the payment report data 307s received from the EMD service center 302 into the storage unit 351.

The EMD service center management unit 358
Stores the marketing information data 904 received from the EMD service center 302 in the storage unit 351. The marketing information data 904 is referred to when the service provider 310 determines content data C to be distributed in the future.

[EMD Service Center 302] The EMD Service Center 302, as described above,
A: Certificate Authority),
It acts as a key management station and a rights clearing station. FIG. 70 is a configuration diagram of functions of the EMD service center 302. As shown in FIG. 70, the EMD service center 302 includes a key server 141, a key database 141a, a KF creation unit 153, a payment processing unit 442, a signature processing unit 443, a settlement institution management unit 144, and a certificate / rights management unit 445. , Right certificate database 445a, certificate database 445b, content provider management unit 14
8, CP database 148a, SAM management unit 149,
SAM database 149a, mutual authentication unit 150, encryption / decryption unit 151, service provider management unit 390,
SP database 390a, content ID creation unit 85
1. It has a user preference filter generation unit 901 and a marketing information data generation unit 902. 70, the functional blocks denoted by the same reference numerals as those in FIGS. 23 and 24 have substantially the same functions as the functional blocks denoted by the same reference numerals described in the first embodiment.

[0338] In the following, description will be given of functional blocks with new reference numerals in FIG. In FIG. 70,
Among the data flows between the functional blocks in the EMD service center 302, the data flows related to the data transmitted to and received from the service provider 310 are shown. FIG. 71 shows the EMD service center 30.
2 shows a flow of data related to data transmitted / received to / from the content provider 301 among data flows between the functional blocks in the block 2. FIG. 72 shows the SAM 305 ₁ shown in FIG. 59 among the data flows between the functional blocks in the EMD service center 302.
Flow of the data related to the data transmitted and received is shown between to 305 ₄ and the settlement organization 91.

As shown in FIG. 72, the settlement processing unit 442 uses the usage history data 308 input from the SAMs 305 _{1 to} 305 _4, the standard retail price data SRP and the price tag data input from the certificate / rights management unit 445. The settlement processing is performed based on 312. At this time, the settlement processing unit 442 monitors whether or not the service provider 310 has dumped. The payment processing unit 442 includes:
As shown in FIG. 72, the settlement processing creates settlement report data 307c and settlement claim right data 152c for the content provider 301, and outputs these to the content provider management unit 148 and the settlement organization management unit 144, respectively. FIG. 7 shows the settlement process.
0 and the service provider 31 as shown in FIG.
0, the settlement report data 307s and the settlement claim right data 152s are created, and these are respectively stored in the service provider management unit 390 and the settlement organization management unit 144.
Output to Here, the settlement claim right data 152c, 15
2s is authorized data which can request payment to the settlement agency 91 based on the data.

Here, the usage history data 308 is the first actual
Similar to the usage history data 108 described in the embodiment,
Payment of licensing fees associated with the secure container 304
Is used to determine the In usage history data 308
Is, for example, as shown in FIG.
04 which is the identifier of the content data C stored in
Content ID, the content stored in the secure container 304.
Content provider 30 that provided content data C
Identifier CP of 1 Distribution of ID and secure container 304
Service provider 310 identifier SP ID, co
Signal data of content data C, secure container
Compression method for the content data C in the
Identifier of the recording medium on which the antenna 304 is recorded
SAM3 which received ID and secure container 304
05₁~ 305₄Identifier SAM ID, SAM10 concerned
5₁~ 105₄USER of user ID etc. are described
Have been. Therefore, the EMD service center 302
Content provider 301 and service provider 3
Other than the owners of the ten, for example, compression methods and recording media
Which license holder should have a user home network 3
If you need to distribute the money paid by user 03
Is paid to each other based on a predetermined distribution table.
Payment amount, and settlement report data according to the determination.
And create payment request data.

The certificate / rights management unit 445 stores the public key certificate data CER _cp and the public key certificate data CER _SP registered and authorized in the certificate database 445b.
And public key certificate data CER _{SAM1 to} CER
_{Read out SAM2} etc.
45a, the right form data 1 of the content provider 301
06 and the content key data Kc, the price tag data 312 of the service provider 310 and the like are registered and authorized. At this time, the certificate / rights management unit 44
Reference numeral 5 denotes a hash value of the right certificate data 106, the content key data Kc, the price tag data 312, and the like, and attaches signature data using the secret key data K _{ESC, S} to create the authorization certificate data.

[0342] The content provider management unit 148 stores
Has a function to communicate with the content provider 101
To identify the registered content provider 101
Child CP In the CP database 148a that manages IDs, etc.
Can access.

[0343] The user preference filter generation unit 901 generates the usage history data 30 based on the usage history data 308.
8 is generated, the user preference filter data 903 for selecting the content data C according to the user's preference of the SAMs 305 _{1 to} 305 ₄ having transmitted the user preference filter data 903 is generated via the SAM management unit 149. The SAM 305 _{1 to} 305 ₄ that transmitted the data 308
Send to

The marketing information data generation unit 902
Generates marketing information data 904 indicating, for example, the overall purchase status of the content data C distributed to the user home network 103 by the plurality of service providers 310 based on the usage history data 308, The data is transmitted to the service provider 310 via the unit 390. The service provider 310 determines the contents of the service to be provided in the future with reference to the marketing information data 904.

Hereinafter, the flow of processing in the EMD service center 302 will be described. EMD distribution key from the service center 302 to SAM305 ₁ ~305 ₄ data KD ₁
Transmission of ～KD ₃ is performed similarly to the first embodiment.

When the EMD service center 302 receives a public key certificate data issuance request from the content provider 301, the process is performed by the certificate / rights management unit 44.
5 is the same as the above-described first embodiment except that 5 accesses the certificate database 445b. The process of registering the right certificate data 106 and the like is the same as that of the first embodiment described above except that the certificate / right document management unit 445 stores the data in the right certificate database 445a.

Next, the processing when the EMD service center 302 receives a request for issuing public key certificate data from the service provider 310 will be described with reference to FIG. In this case, the service provider management unit 390
Is the identifier SP of the service provider 310 previously given by the EMD service center 302. ID, public key data _{KSP, P} and signature data SIG70 _{, SP}
Are received from the service provider 310, they are transmitted to the mutual authentication unit 150 and the mutual authentication unit 352 shown in FIG.
Key data K _SES obtained by mutual authentication between
Is decrypted using. Then, the decrypted signature data S
After confirming the validity of the IG _{70 and the SP in} the signature processing unit 443, the identifier SP ID and public key data K
Based on _{SP and P} , it is confirmed whether or not the service provider 310 which has issued the public key certificate data issuance request is registered in the SP database 390a. Then, the certificate / rights management unit 445 reads out the public key certificate data CER _SP of the service provider 310 from the certificate database 445b and outputs it to the service provider management unit 390. Also, the signature processing unit 443
Takes the hash value of the public key certificate data CER _SP and outputs the secret key data K of the EMD service center 302.
_The signature data SIG _{61 and ESC} are created using the _{ESC and S,} and are output to the service provider management unit 390. Then, the service provider management unit 390 sends the public key certificate data CER _SP and its signature data SI
G _{61 and the ESC} are encrypted using the session key data K _SES obtained by the mutual authentication between the mutual authentication unit 150 and the mutual authentication unit 352 shown in FIG. 63, and then transmitted to the service provider 310.

Note that the EMD service center 302 has the SA
From M105 ₁ to 105 _4, the processing when receiving the request for issuing the public key certificate data is the same as in the first embodiment. Also, the processing when the EMD service center 302 receives a registration request for the rights document data 106 and the content key data Kc from the content provider 301 is the same as in the first embodiment. In addition, the process in which the EMD service center 302 creates a key file KF according to the registration module Mod ₂ received from the content provider 301 and transmits the key file KF to the content provider 301 is also described.
This is the same as the first embodiment.

Next, the EMD service center 302 sends the price tag data 312 from the service provider 310.
Will be described with reference to FIG. 70. In this case, when the service provider management unit 390 receives the price tag registration request module Mod ₁₀₂ shown in FIG. 69 from the service provider 310, the mutual authentication unit 150 and the mutual authentication unit 352 shown in FIG.
Key data K _SES obtained by mutual authentication between
Using the price tag registration request module Mod ₁₀₂
Is decrypted. Then, the signature data SI stored in the decrypted price tag registration request module Mod ₁₀₂
After confirming the validity of the G80 _{, SP in} the signature processing unit 443, the price tag registration request module Mod
_The price tag data 312 stored in the rights certificate database ₁₀₂ is transmitted to the rights certificate database 4 via the certificate / rights certificate management unit 445.
Register to 45a and authorize.

Next, a process for making a settlement in the EMD service center 302 will be described with reference to FIG. The SAM management unit 149 reads the usage history data 3 from the SAM 305 ₁ of the user home network 303, for example.
08 and its signature data SIG _{205 and SAM1} , the usage history data 308 and signature data SI
G _{205, SAM1} and the mutual authentication unit 150 and SAM30.
5 ₁ is decrypted using the session key data _{K SES} obtained by the mutual authentication between the to 305 _4, SAM 305
_{1 using} the public key data K _{SAM1, p}
After verifying the IG _{205 and the SAM 1} , the output is output to the settlement processing unit 442.

[0351] The settlement processing unit 442 sets the SAM 30
5 ₁ and the usage log data 308 input from the standard retail input from the certificate and rights certificate management section 445 price data SR
The settlement processing is performed based on the P and the price tag data 312. The payment processing unit 442 performs the payment processing in FIG.
As shown in FIG. 2, payment report data 307c and payment request data 152c for the content provider 301 are created, and these are output to the content provider management unit 148 and the settlement organization management unit 144, respectively. Further, as shown in FIGS. 70 and 72, the settlement processing creates settlement report data 307s and settlement claim right data 152s for the service provider 310, and stores these in the service provider management unit 3 respectively.
90 and the settlement organization management unit 144.

Next, the settlement organization management unit 144 stores the settlement request right data 152c and 152s and the signature data created using the secret key data K _{ESC and S} for them.
After performing mutual authentication and decryption using the session key data K _{SES, the} data is transmitted to the settlement institution 91 via the payment gateway 90 shown in FIG. As a result, the amount of money shown in the settlement claim right data 152c is paid to the content provider 301, and the settlement claim right data 1c is paid.
The money shown in 52s is the service provider 31
Paid to zero.

Next, the EMD service center 302 establishes the content provider 301 and the service provider 31
Processing when transmitting settlement report data 307c and 307s to 0 will be described. When the settlement is performed in the settlement processing unit 442, the settlement report data 307c is transmitted from the settlement processing unit 442 to the content provider management unit 148.
Is output. The content provider management unit 148
When settlement report data 307c is input from settlement processing section 442, it is encrypted using session key data K _SES obtained by mutual authentication between mutual authentication section 150 and mutual authentication section 120 shown in FIG. , To the content provider 301. When the settlement is performed in the settlement processing unit 442, the settlement report data 30 is transmitted from the settlement processing unit 442 to the service provider management unit 390.
7s is output. Service provider management unit 390
Is the settlement report data 307s from the settlement processing unit 442.
Is input using the session key data K _SES obtained by the mutual authentication between the mutual authentication unit 150 and the mutual authentication unit 352 shown in FIG. 63, and then transmitted to the service provider 310.

The EMD service center 302 also processes the SAMs 305 _{1 to} 305 _{4 at} the time of shipping, and executes the SA processing, similarly to the EMD service center 102 of the first embodiment.
The M registration list is registered.

[User Home Network 303] As shown in FIG.
Network device 360 ₁ and A / V device 360 _2-
It has a 360 _4. The network device 360 ₁
Has a built-in CA module 311 and SAM 305 _1. Further, AV equipment ₃₆₀ 2-360 ₄ are respectively built SAM 305 ₂ to 305 _4. SAM30
5 _{1-305 4} mutual, for example, are connected via a bus 191, such as a 1394 serial interface bus. Note that the AV devices 360 _{2 to} 360 ₄ may have a network communication function or do not have a network communication function, and use the network communication function of the network device 360 ₁ via the bus 191. Is also good. Further, the user home network 303 may include only AV devices having no network function.

[0356] In the following, a description will be given of network equipment 360 _1. Figure 74 is a block diagram of the network device 360 _1. As shown in FIG. 74, the network device 36
0 ₁ includes a communication module 162, CA module 31
1, decryption module 905, SAM 305 ₁ , decryption / decompression module 163, purchase / usage mode determination operation unit 16
5, download memory 167, playback module 169
And an external memory 201. In FIG. 74, components denoted by the same reference numerals as those in FIG. 25 are the same as the components denoted by the same reference numerals described in the first embodiment.

The communication module 162 performs communication processing with the service provider 310. Specifically, the communication module 162 outputs the secure container 304 received from the service provider 310 by satellite broadcasting or the like to the decryption module 905. In addition, the communication module 1
62 converts the user preference filter data 900 received from the service provider 310 via a telephone line or the like into CA.
Output to module 311 and CA module 3
The SP purchase history data 309 input from the server 11 is transmitted to the service provider 310 via a telephone line or the like.

FIG. 75 is a functional block diagram of the CA module 311 and the decoding module 905. As shown in FIG. 75, the CA module 311
6, a storage unit 907, an encryption / decryption unit 908, and an SP purchase history data generation unit 909. Mutual authentication unit 90
6 is the CA module 311 and the service provider 31
When sending and receiving data via a telephone line to and from
Mutual authentication is performed with the service provider 310 to generate session key data K _SES , which is output to the encryption / decryption unit 908.

[0359] The storage unit 907 is, for example, after a contract is established between the service provider 310 and the user, and stores the master key data K _M supplied off-line using an IC card 912 from the service provider 310.

The encryption / decryption unit 908 receives the encrypted scramble key data K _SCR and work key data K _W from the decryption unit 910 of the decryption module 905, and reads the master key data K _M read from the storage unit 907.
It decrypts the work key data K _W using. Then, the encryption / decryption unit 908 outputs the decrypted work key data K _W
It decrypts the scramble key data _{K SCR} by using the decoding unit 910 the scramble key data _{K SCR} to the related decrypted
Output to Further, the encryption / decryption unit 908 transmits the user preference filter data 900 received by the communication module 162 from the service provider 310 via a telephone line or the like.
With the session key data K from the mutual authentication unit 906.
Decryption is performed using _SES and output to the secure container selection unit 911 of the decryption module 905. Further, the encryption / decryption unit 908 converts the SP purchase history data 309 input from the SP purchase history data generation unit 909 into the mutual authentication unit 9.
And decrypted using the session key data K _SES from the service provider 31 via the communication module 162.
Send to 0.

[0361] For SP purchase log data generation unit 909, usage control from the operation signal S165 or SAM 305 _1, in accordance with the purchase operation of the content data C by the user by using the purchase and usage form determination operation unit 165 shown in FIG. 74 Based on the status data 166, the service provider 310
, Generating SP purchase history data 309 indicating the purchase history of the content data C unique to the
08. The SP purchase history data 309 includes, for example, information that the service provider 310 wants to collect from the user regarding the distribution service, a monthly basic fee (network rent), contract (update) information, purchase history information, and the like.

When the service provider 310 has a charging function, the CA module 311 communicates with the charging database, customer management database, and marketing information database of the service provider 310. In this case, the CA module 311 transmits billing data for the content data distribution service to the service provider 310.

The decryption module 905 has a decryption section 910 and a secure container selection section 911. Decoding unit 9
Reference numeral 10 denotes an encrypted secure container 304 and a scramble key data K from the communication module 162, respectively.
To enter the _SCR and the work key data _{K W.} And
The decryption unit 910 outputs the encrypted scramble key data K
The _SCR and the work key data _{K W} CA module 31
1 to the encryption / decryption unit 908, and
08, the decrypted scramble key data K _SCR is input. Then, the decryption unit 910 decrypts the encrypted secure container 304 using the scramble key data K _SCR and outputs the decrypted secure container 304 to the secure container selection unit 911.

[0364] Note that the secure container 304
When the data is transmitted from the service provider 310 by the G2 Transport Stream method, for example, the decoding unit 910 transmits the ECM in the TS Packet.
(Entitlement Control Message
age), the scramble key data K _SCR is extracted from the EMM (Entitlement Management).
take out the work key data _{K W} from ent Message). The ECM also contains, for example, program attribute information for each channel. Also, EMM
In addition, it includes individual trial contract information that differs for each user (viewer).

[0365] The secure container selection unit 911 filters the secure container 304 input from the decryption unit 910 using the user preference filter data 900 input from the CA module 311 to generate a secure container 304 according to the user's preference. Select SAM30
51 Output to ₁ .

[0366] Next, a description will be given SAM305 _1.
It should be noted that the SAM 3051 performs the _first process described above with reference to FIGS. and a SAM 105 ₁ and essentially perform functions and structure of the embodiment. SAM305 ₂
To 305 ₄ have a SAM 305 ₁ and essentially the same function. That is, the SAMs 305 _{1 to} 305 ₄ are modules for performing a billing process in content units.
Communication is performed with the EMD service center 302.

[0367] The following is a detailed description of the function of SAM305 _1. Figure 76 is a block diagram of the function of SAM 305 _1. FIG. 76 shows the service provider 310
2 shows a flow of data related to a process when the secure container 304 is input from the. As shown in FIG. 76, SAM 305 ₁ is mutual authentication unit 170, the encryption and decryption unit 171, 172 and 173, error correction unit 181, download memory management unit 182, secure container decryption unit 183, decryption and decompression module manager 184, EMD service center management section 185, usage monitoring section 186, signature processing section 189, SAM management section 190, storage section 192, media SAM management section 197, stack memory 200, service provider management section 580, billing processing section 587, signature A processing unit 598 and an external memory management unit 811 are provided.
The predetermined function of the SAM 305 ₁ shown in FIG. 76, S
As with the AM105 _1, it is realized by executing a secret program in CPU. In FIG. 76, the functional blocks denoted by the same reference numerals as those in FIG.
This is the same as the functional block of the same reference numeral described in the embodiment.

The external memory 201 shown in FIG. 74 stores the use history data 308 and the SAM registration list through the processing described in the first embodiment and the processing described later. In addition, the stack memory 200 includes FIG.
As shown in FIG. 7, the content key data Kc, the rights certificate data (UCP) 106, and the lock key data K
_LOC , public key certificate data CER _{CP of} the content provider 301, public key certificate data CER _{SP of the} service provider 310, usage control state data (UCS)
366, SAM program download container S
DC _{1 to} SDC ₃ and price tag data 312 are stored.

[0369] Hereinafter, among the SAM 305 ₁ of the functional blocks newly described functional blocks denoted by reference numerals in FIG. 76. The signature processing unit 589 includes the public key data K _{ESC, P of} the EMD service center 302 read from the storage unit 192 or the stack memory 200 _, the public key data K _{cp, p of the} content provider 301 _, and the public key data K _SP of the service provider 310. _{, P} , the signature data in the secure container 304 is verified.

[0370] As shown in FIG. 78, the billing processing section 587 is based on the operation signal S165 from the purchase / use mode determination operation section 165 shown in FIG. 74 and the price tag data 312 read from the stack memory 200. Then, a billing process is performed according to the content purchase / use mode by the user. The billing process by the billing processing unit 587 is performed under the supervision of the use monitoring unit 186, and the rights contents such as the license conditions indicated by the license data 106 and the use control state data 166.
It is performed based on. That is, the user can purchase and use the content within a range according to the content of the right or the like.

In the accounting process, the accounting unit 587 generates the usage history data 308 and writes it into the external memory 201 via the external memory management unit 811.
Here, the usage history data 308 is, like the usage history data 108 of the first embodiment, the EMD service center 30.
2 is used in determining payment of a license fee associated with the secure container 304.

[0372] Further, the charging processing section 587 outputs the operation signal S1.
65, a usage control state (UCS: Usage C) that describes the content purchase / use mode by the user.
(control Status) data 166,
This is written to the stack memory 200. Examples of the content purchase form include, for example, purchase without limitation on reproduction by the purchaser and reproduction for use by the purchaser,
For example, there is a reproduction charge for charging each time reproduction is performed. Here, the use control state data 166 is generated when the user determines the purchase mode of the content, and thereafter, is controlled so that the user uses the content within the range permitted by the determined purchase mode. Used to The usage control status data 166 includes the content I
D, purchase type, purchase price, SAM_ID of the SAM that purchased the content, USER of the user who made the purchase The ID and the like are described.

[0373] Incidentally, if the purchase mode determined is the reproduction charge, for example, transmitted from the SAM 305 ₁ of the usage control status data 166 in real time to the service provider 310, the service provider 310 to the EMD service center 302, use SAM10 for the history data 308
5 Instruct ₁ to go. In addition, when the determined purchase mode is “out of stock”, for example, the usage control status data 166 indicates that the service provider 310 and the E
The information is transmitted to the MD service center 302 in real time.

[0374] In SAM 305 _1, as shown in FIG. 76, E via the EMD service center management unit 185
The user preference filter data 903 received from the MD service center 302 is stored in the service provider management unit 580.
Is output to Then, the service provider management unit 58
0, among the secure containers 304 input from the decryption module 905 shown in FIG. 74, the secure container 304 that is filtered based on the user preference filter data 903 and is selected according to the user preference is selected.
The selected secure container 304 is the error correction unit 1
81. Thereby, in the SAM 305 ₁ , the content data C based on the user's preference obtained from the purchase status of the content data C by the user is targeted for all the service providers 310 to which the user of the SAM 305 ₁ is contracted. Selection processing becomes possible.

[0375] Hereinafter, the flow of processing in SAM305 within _1. Process flow in SAM305 within ₁ when storing the distribution use key data _KD 1 _{~KD 3} received from the EMD service center 302 in the storage unit 192, the above-mentioned SA
In the case of M105 ₁ is the same as that.

[0376] Next, the flow of processing in SAM305 within ₁ when inputting the secure container 304 from the service provider 310 with reference to FIG. 76 will be described. Mutual authentication is performed between the mutual authentication unit 170 and the mutual authentication unit 352 of the service provider 310 shown in FIG. The encryption / decryption unit 171 decrypts the secure container 304 shown in FIG. 65 received from the service provider 310 via the service provider management unit 580 using the session key data K _SES obtained by the mutual authentication.

Next, the signature processing unit 589 checks the state shown in FIG.
Signature data SIG _{61, ESC} , SIG shown in
_1. After verifying _{the ESC} , the public key certificate data C
ER _SP , public key data K stored in CER _{CP
Using SP, P} , _{KCP, P} , signature data SIG
_{6, CP} , SIG _{62, SP} , SIG _{7, CP} , SIG
The validity of _{63, SP} , SIG _{64, SP} is verified. Here, the validity of the creator and the sender of the content file CF is confirmed by verifying the signature data SIG _{6, CP} , SIG _{62, and SP} , and the signature data SIG
_7, CP'SIG _{63, SP} , the validity of the sender of the key file KF is confirmed, and the signature data SI
_G64, price tag data 31 by verifying _SP
2 is verified. Also,
Signature processing unit 589, the public key data _{K ES C} read from the storage unit _192, using a _P, the signature data SIG which is stored in the key file KF shown in Fig. 65 (B)
By verifying the validity of _{K1 and ESC,} the validity of the creator of the key file KF and the key file KF
The D service center 302 verifies whether or not it is registered.

[0378] When the validity of all the signature data described above is confirmed by the signature processing unit 589, the service provider management unit 580 outputs the secure container 304 to the error correction unit 181.

[0379] The error correction unit 181 performs
04 error correction, the download memory management unit 1
82. The download memory management unit 182
Mutual authentication unit 170 and media SAM 167 shown in FIG.
After performing the mutual authentication with a, the secure container 304 is written into the download memory 167.

Next, the download memory management unit 182
Is the mutual authentication unit 170 and the media SAM1 shown in FIG.
After performing mutual authentication with the secure container 67a, the key file KF shown in FIG. 65B stored in the secure container 304 is read from the download memory 167 and output to the secure container decryption unit 183.

Then, the secure container decryption unit 183
The corresponding using the distribution use key data _KD 1 _{~KD 3} of periods, the stored content key data Kc to the key file KF shown in Fig. 65 (B) inputted from the storage unit 192,
The rights certificate data 106 and the SAM program download containers SDC _{1 to} SDC ₃ are decrypted. Then, the decrypted content key data Kc, right certificate data 106 and SAM program download containers SDC _{1 to} SDC ₃ are written to the stack memory 200.

[0382] Hereinafter, the flow of processing until determining the purchase mode of the secure container 304 downloaded from the service provider 310 to the download memory 167 will be described with reference to FIGS. 78 and 79. Fig. 79
9 is a flowchart for explaining the purchase mode determination process of the secure container 304. <Step E1> When the user operates the purchase / usage mode determination operation unit 165 shown in FIG. 74 to output an operation signal S165 indicating the trial listening mode to the charging processing unit 587, the process of step E2 is performed. Otherwise, the process of step E3 is performed.

<Step E2> This is performed when the operation signal S165 indicating the trial listening mode is output to the charging processing unit 587. For example, the content file CF stored in the download memory 167 is stored in the decryption / decompression module management unit 184. Are output to the decoding / decompression module 163 shown in FIG. At this time, the mutual authentication unit 170 and the media SAM 16
7a and session key data K
Encryption / decryption by _SES , mutual authentication between mutual authentication section 170 and mutual authentication section 220, and encryption / decryption by session key data K _SES are performed. The content file CF is output to the decryption unit 222 after being decrypted by the decryption unit 221 shown in FIG. 74 using the session key data K _SES .

The content key data Kc and the semi-disclosed parameter data 199 read from the stack memory 200 are stored in the decryption / decompression module 16 shown in FIG.
3 is output. At this time, after mutual authentication between the mutual authentication unit 170 and the mutual authentication unit 220, the content key data Kc and the semi-disclosed parameter data 199 are encrypted and decrypted by the session key data K _SES . Next, the decrypted semi-disclosed parameter data 19
9 is output to the semi-disclosure processing unit 225,
Under the control from 5, the decryption of the content data C using the content key data Kc by the decryption unit 222 is performed in a semi-disclosed manner. Next, the content data C decrypted in the semi-disclosure is output to the digital watermark information processing unit 224 after being expanded in the expansion unit 223. Next, after the digital watermark information processing section 224 embeds the user digital watermark information data 196 in the content data C, the content data C is reproduced by the reproduction module 169, and a sound corresponding to the content data C is output.

<Step E3> When the user operates the purchase / use mode determination operation section 165 to determine the purchase mode,
An operation signal S165 indicating the determined purchase mode is output to billing processing section 187.

<Step E4> Usage history data 308 corresponding to the determined purchase mode in billing processing section 187
And the usage control status data 166 are generated, the usage history data 308 is written to the external memory 201 via the external memory management unit 811 and the usage control status data 1
66 is written to the stack memory 200. After that,
In the usage monitoring unit 186, the usage control status data 166
The content is controlled (monitored) so that the purchase and use of the content are performed within the range permitted by the above. The key file KF stored in the stack memory 200
When, by using the usage control status data 166, the purchase form is a new key file KF ₁ shown in FIG. 81 (C) which will be described later determined is generated, the key the created file KF
₁ is stored in the stack memory 200. FIG. 81
(C), the usage control status data 166 stored in the key file KF ₁ is the storage key data K
DES using _STR and media key data K _MED
Are sequentially encrypted using the CBC mode. Here, the recording key data K _STR is, for example, SACD (Su
per Audio Compact Disc), D
VD (Digital Versatile Dis)
c) Equipment, CD-R equipment and MD (Mini Dis
c) Data determined according to the type of device or the like, and is used to associate the type of device with the type of recording medium on a one-to-one basis. The media key data K _MED is data unique to a recording medium.

In the signature processing unit 589, the SAM
A hash value H _K1 of the key file KF ₁ is created using the secret key data K _{SAM1 and S SAM 1} of the 305 ₁ , and the created hash value H _K1 is associated with the key file KF ₁ and the stack memory 200. Is stored.

[0388] <Step E5> SAM305 ₁ from EM
D service center 302 stores usage control status data 166
Is sent. The transmission of the usage control state data 166 is performed each time the SAM 305 determines the purchase mode of the content data. Incidentally, usage history data 30 from the SAM 305 ₁ to the EMD service center 302
The transmission of No. 8 is performed at a predetermined time interval such as one month, for example.

Next, the contents data C stored in the download memory 167 whose purchase mode has already been determined
Will be described with reference to FIG. 78. In this case, the content file CF stored in the download memory 167 is output to the decryption / decompression module 163 shown in FIG. 74 based on the operation signal S165 under the monitoring of the usage monitoring unit 186.
Further, the content key data Kc read from the stack memory 200 is output to the decryption / decompression module 163. Then, the decoding unit 2 of the decoding / decompression module 163
At 22, the decryption of the content file CF using the content key data Kc and the decompression process by the decompression unit 223 are performed, and the reproduction module 169 reproduces the content data C. At this time, the charging unit 5
At 87, the usage history data 308 stored in the external memory 201 is updated according to the operation signal S165. The usage history data 308 contains the secret key data K
Signature data SIG created using _{SAM1 and S
205 and the SAM 1} are transmitted to the EMD service center 302 at a predetermined timing via the EMD service center management unit 185.

[0390] Next, as shown in FIG. 80, for example, the secure container 304x shown in FIG. 81 already purchased form downloaded in the download memory 167 of the network apparatus 360 ₁ is determined, via the bus 191,
S when transferring to the SAM 305 ₂ of the AV device 360 ₂
The flow of processing in the AM305 within ₁ will be described with reference to FIG. 82. The user operates the purchase / use mode determination operation unit 165
By operating the, instructs to transfer the predetermined content stored in the download memory 167 to the AV apparatus 360 _2, the operation signal S165 in accordance with the operation is output to the charge processing unit 587. Thereby, the billing processing unit 587
Is stored in the stack memory 20 based on the operation signal S165.
The usage history data 308 stored in “0” is updated.

Also, the download memory management unit 182
FIG. 81 read from the download memory 167.
Content file CF shown in (A), (B), (C)
And the key file KF, and outputs the KF ₁ to the signature processing unit 589 and the SAM management unit 190. Then, the signature processing unit 589 _generates the signature data _SIG41 , _SAM1 , and SIG of the content file CF and the key file KF.
_{42, SAM1} is created, and key file KF ₁ is created.
Create a hash value _{H K1,} SAM management unit 1 of these
90. In addition, the SAM management unit 190
The price tag data 312 and its signature data SIG _{64 and SP} and the public key certificate data CER _CP and its signature data SIG _{1 and ESC} shown in (D) and (E) are read from the stack memory 200. In addition, the SAM management unit 190 transmits the public key certificate data CER _SAM1 and its signature data SIG shown in FIG.
_{22, the ESC} is read from the storage unit 192.

Next, the SAM management unit 190 creates a secure container 304x shown in FIG. Further, the mutual authentication unit 170, SAM 305 ₂ encryption and decryption unit session key data _{K SES} obtained by performing mutual authentication with the 1
71. SAM manager 190, a secure container 304x shown in FIG. 81, in the encryption and decryption section 171, after encrypting using the session key data _{K SES,} the AV apparatus 360 ₂ shown in FIG. 82 SAM 305
Output to ₂ .

Hereinafter, as shown in FIG. 80, the SAM 305
_The SAM 30 for writing the secure container 304x input from _{No. 1} to a recording medium such as a RAM type.
5 the flow of processing in the ₂ will be described with reference to FIG. 83.

[0394] In this case, SAM 305 ₂ of the SAM management unit 190, as shown in FIG. 83, the secure container 304x shown in FIG. 81, input from the SAM 305 ₁ of the network device 360 _1. And the SAM305 ₁
The mutual authentication unit 170 of the SAM 305 ₂ of the mutual authentication section 17
A mutual authentication between 0 and 0 is performed, and the signature processing unit 589 decrypts the secure container 304x using the session key data K _SES obtained by the mutual authentication. Next, in the signature processing unit 589, the storage unit 19
2 using the public key data K _{ESC, P} read from
The signature data SIG61 _{, ESC} , S shown in FIG.
The validity of _{IG1 , ESC} , SIG22 _{, ESC} is verified. Then, the signature data SIG61 _{, ESC} , SIG
_{1, ESC} , SIG _{22, and} the validity of _{the ESC} are confirmed.
ER _{SP, CER} CP, the public key data _K SP included in the _{CER SAM1,} using _P, K CP, _P, and _{K SAM1, P,} the signature data SIG shown in FIG. 81 (A) ~ (D)
_{6, CP} , SIG62 _{, SP , SIG41} , _SAM1 ,
SIG _{7, CP} , SIG _{63, SP} , SIG
_{42, SAM1, SIG64} , _SP and hash value H
The validity of _K1 is verified. When the validity of these signature data is confirmed, the stack memory 200 stores
Key file KF, KF ₁ and price tag data 3
12 are stored. Also, if the content file CF is
The data is output from the SAM management unit 190 to the recording module management unit 855. Then, the key file KF ₁ content key stored in the data Kc and the usage control status data 166 shown in FIG. 81 (C) is read from the stack memory 200 to the encryption and decryption unit 173, the encryption and decryption unit 17
In step 3, the data is sequentially encrypted using the recording key data K _STR , the media key data K _MED, and the purchaser key data K _PIN read from the storage unit 192, and then output to the recording module management unit 855. Further, the key file KF read from the stack memory 200 is output to the recording module management unit 855. The media of the mutual authentication unit 170 and the RAM type storage medium 130 ₄ SA
After performing mutual authentication between the M133, the content file CF is stored in the RAM area 134 is not the recording medium 130 ₄ secure the RAM type, the key file KF,
KF ₁ and price tag data 312 are secure RA
The data is written to the M area 132. Note that the key file K
F, KF ₁ and price tag data 312 are stored in RAM
It may be stored in the type of the recording medium 130 ₄ media SAM 133.

[0395] It should be noted that, out of the processing in the SAM305 within _1,
Purchase mode of processing in the AV apparatus 360 ₂ when determining the purchase mode of the ROM type recording medium of undetermined content flows, purchase mode in the AV apparatus 360 ₃ undetermined R
Process flow for writing to a recording medium of RAM type from OM type recording medium and transfers it reads the secure container 304 to the AV apparatus 360 _2, the signature of the signature data using the secret key data of the service provider 310 Except that the data is verified and the price tag data 312 is stored in the key file for which the purchase mode is determined,
Is the same as that of the SAM 105 ₁ of the first embodiment.

Next, the EMD system 300 shown in FIG.
Will be described. 84 and 85
5 is a flowchart of the overall operation of the EMD system 300. Here, a case where the secure container 304 is transmitted from the service provider 310 to the user home network 303 online will be described as an example. The following processing is based on the premise that the EMD service center 30
The content provider 301 to 2, the registration of the service provider 310 and SAM 305 ₁ to 305 ₄ are assumed to have already completed.

Step S21: EMD service center 3
02 is the public key data K of the content provider 301
The public key certificate CER _CP of the _{CP, P} is transmitted to the content provider 301 together with its own signature data SIG _{1, ESC.}
Send to Further, the EMD service center 302 transmits the public key certificate CER _SP of the public key data K _{SP, P} of the content provider 301 to its own signature data SIG.
_61, Send to the service provider 310 together with _{the ESC} . Further, the EMD service center 302 distributes the distribution key data KD _{1 to} KD ₃ for three months each having an expiration date of one month.
To the SAMs 305 ₁ to 305 of the user home network 303.
It sends to 305 _4.

Step S22: Content Provider 3
01 transmits the registration module Mod ₂ shown in FIG. 18 to the EMD service center 302 after performing mutual authentication. Then, after performing a predetermined signature verification, the EMD service center 302 registers and authorizes the license data 106 and the content key data Kc. Also, E
The MD service center 302 includes a registration module Mod
6 months of key file K shown in FIG. 5 (B) corresponding to the ₂
F is created and transmitted to the content provider 301.

Step S23: Content Provider 3
01 creates the content file CF and its signature data SIG6 _{, CP} and the key file KF and its signature data SIG7 _{, CP} shown in FIGS. 5 (A) and 5 (B). Public key certificate data CE shown in
The secure container 104 storing the R _cp and its signature data SIG _{1 and ESC} is provided to the service provider 310 online and / or offline.

Step S24: Service Provider 31
0 uses the public key data _{KCP, P} stored in the public key certificate data CER _CP after verifying the signature data SIG _{1, ESC} shown in FIG.
Signature data SIG _{6, CP} and SIG shown in FIG.
_7. Verify _{the CP} to confirm whether the secure container 104 is transmitted from the valid content provider 301.

Step S25: Service Provider 31
0 creates the price tag data 312 and its signature data SIG _{64, SP,} and creates the secure container 304 shown in FIG.

Step S26: Service Provider 31
0 is the price tag registration request module M shown in FIG.
od ₁₀₂ is transmitted to the EMD service center 302. Then, after performing a predetermined signature verification, the EMD service center 302 registers and authorizes the price tag data 312.

Step S27: service provider 31
0 is the CA of the user home network 303, for example.
In response to a request from the module 311, step S25
The secure container 304 created in step 3 is online or offline, and the network device 36 shown in FIG.
0 transmits to the _first decoding module 905.

Step S28: CA module 311
Creates SP purchase history data 309 and transmits it to the service provider 310 at a predetermined timing.

Step S29: SAM 305 _{1 to} SAM 305
₄ , after verifying the signature data SIG _{61, ESC} shown in FIG. 65 (D), using the public key data K _{SP, P} stored in the public key certificate data CER _SP , FIG. ), (B), and (C) signature data SIG62 _{, SP} , SIG63 _{, SP} , SIG
_{64, the SP} is verified to confirm whether or not predetermined data in the secure container 304 has been created and transmitted by the legitimate service provider 310.

Step S30: SAM 305 _{1 to} SAM 305
₄ , after verifying the signature data SIG _{1 and ESC} shown in FIG. 65 (D), using the public key data K _{CP and P} stored in the public key certificate data CER _CP , FIG. ), (B), and signature data S shown in (C).
IG _{6, SP} , SIG _{7, SP} is verified, and whether the content file CF in the secure container 304 is created by the legitimate content provider 301,
Content provider 301 whose key file KF is valid
Check if it was sent from. Also, SAM305
In any one of ₁ to 305 _4, the public key data K
By using _{ESC and P} to verify the validity of signature data SIG _{K1 and ESC} in key file KF shown in FIG. _65B, whether key file KF was created by valid EMD service center 302 or not. Check.

[0407] Step S31: The user selects the purchase
By operating the use mode determination operation unit 165, the purchase / use mode of the content is determined.

[0408] Step S32: The SAM 305 is generated based on the operation signal S165 generated in step S31.
In _{1-305 4,} use history (the Usage Log) data 308 of the secure container 304 is produced. From SAM 305 ₁ to 305 ₄ to the EMD service center 302, usage log data 308 and the signature data _{SIG 205, SAM1} is transmitted. Further, each time the purchase mode is determined, the SAM 305 _1-
305 ₄ usage control status data 166 to the EMD service center 302 is transmitted from.

Step S33: EMD service center 3
02 determines (calculates) the billing content for each of the content provider 301 and the service provider 310 based on the usage history data 308, and creates the settlement claim data 152c and 152s based on the result.

Step S34: EMD Service Center 3
02 transmits the settlement claim right data 152c and 152s together with its signature data to the settlement institution 91 via the payment gateway 90, whereby the money paid by the user of the user home network 303 to the settlement institution 91 becomes the content. It is distributed to the owners of the provider 301 and the service provider 310.

As described above, the EMD system 30
0, secure container 1 in the format shown in FIG.
04 is distributed from the content provider 301 to the service provider 310, and the secure container 304 storing the content file CF and the key file KF in the secure container 104 as they are is distributed from the service provider 310 to the user home network 303,
The processing of the key file KF SAM305 ₁ ~3
It carried out at 05 within _4. Further, the content key data Kc and the rights certificate data 106 stored in the key file KF are:
It is encrypted with the distribution key data _KD 1 _{~KD 3,} SAM holding the distribution key data _KD 1 _{~KD 3}
305 is only decoded by _1-305 within _4. And SA
In M305 ₁ to 305 _4, a module having tamper resistance, based on the handling content of the written content data C in the usage control policy data 106, the purchase mode and the usage mode of the content data C are determined.

Therefore, according to the EMD system 300,
The purchase and use of the content data C in the user home network 303 is determined by the service provider 310.
Irrespective of the processing in the content provider 10
This can be reliably performed based on the contents of the license document data 106 created by one related person. That is, the EMD system 300 can prevent the service provider 310 from managing the license data 106. for that reason,
According to the EMD system 300, even when the content data C is distributed to the user home network 303 via a plurality of service providers 310 of different series, the right processing for the content data C in the user home network 303 is performed by the content provider. This can be performed based on the common license data 106 created by the user 301.

[0413] In the EMD system 300, for each file and data in the secure containers 104 and 304, signature data indicating the legitimacy of their creator and sender is stored. in _{1-305 4,} their creator and the sender of validity, and the like whether they are not tampered be confirmed. As a result, unauthorized use of the content data C can be effectively avoided.

[0414] In the EMD system 300, the service provider 310 sends the user home network 10
The distribution of the content data C to the SAM 305 is performed by using the secure container 304 in both the online and offline cases.
It can be shared rights processing of the content data C in ₁ to 305 _4.

In the EMD system 300, the network device 360 in the user home network 303
₁ and the AV devices 360 _{2 to} 360 ₄ , when purchasing, using, recording, and transferring the content data C, always perform processing based on the license data 106, so that a common right processing rule can be adopted. For example, as shown in FIG. 86, the content data C provided by the content provider 301 is transferred from the service provider 310 to the user home network 303 by any of package distribution, digital broadcasting, the Internet, a dedicated line, digital radio, and mobile communication. Even in the case of distribution (distribution) by the method (route), the user home network 303,
In the SAM 303a, the content provider 30
1, a common right processing rule is adopted based on the right form data 106 created by the first right.

According to the EMD system 300, E
Since the MD service center 302 has an authentication function, a key data management function, and a right processing (profit sharing) function, the amount paid by the user in connection with the use of the content depends on the owner of the content provider 301 and the owner of the EMD service center 302. In addition, the distribution is ensured according to a predetermined ratio. Further, according to the EMD system 300, the right certificate data 106 for the same content file CF supplied by the same content provider 301.
, Regardless of the service type of the service provider 310 is supplied as it is to the SAM 305 ₁ to 305 _4. Therefore, in the SAMs 305 _{1 to} 305 ₄ , the content provider 30
It is possible to use the content file CF as intended. That is, according to the EMD system 300, when the service using the content and the use of the content by the user are performed, the owner of the content provider 301 can be controlled by a technical means without relying on the audit organization 725 as in the related art. Rights and interests can be reliably protected.

[0417] Hereinafter, a specific example of a delivery protocol such as a secure container adopted in the EMD system 300 of the above-described second embodiment will be described. As shown in FIG. 87, the secure container 104 created by the content provider 301 uses the Internet (TCP / I
P) or a dedicated line (ATM Cell) or the like, and is provided to the service provider 310 using a delivery protocol for the content provider. In addition, service provider 3
Numeral 10 indicates that the secure container 304 created using the secure container 104 is transmitted to a digital broadcast (MPEG-T
XML / SMIL on S), Internet (TCP /
It is distributed to the user home network 303 using a service provider delivery protocol such as XML / SMIL over IP) or package distribution (recording medium). Also, user home networks 303 and 303a
Within or user home networks 303 and 303
A secure container is transferred between the SAMs using a home EC / delivery service (XML / SMIL on a 1394 serial bus interface) or a recording medium.

In the following, referring to FIG. 87, an example of a delivery protocol used for data transfer in a path using the symbols A to G will be described in detail. FIG. 88 is a view for explaining a delivery protocol adopted when delivering the secure container 104 and the like between the content provider 301 and the service provider 310 (reference A) shown in FIG. As shown in FIG. 88, the content provider 3
01 to the service provider 310, the secure container 104 and the like are connected to the IP / IP-SEC layer,
ure Sockets Layer), XML (e
Xtensible Markup Language
e) / SMIL (Synchronized Multi)
immedia Integration Langua
ge) In the layer and the application layer, a session using a common key is performed and delivered.

FIG. 89 is a view for explaining a delivery protocol adopted when delivering a key file or the like between the EMD service center 302 and the content provider 301 (reference B) shown in FIG. As shown in FIG. 89, a key file or the like is transmitted from the EMD service center 302 to the content provider 301 by an IP / IP-S
It is delivered by performing a session using a common key in the EC layer, SSL layer, and application layer.

FIG. 90 is a diagram for explaining a delivery protocol adopted when delivering the price tag data 312 and the like between the EMD service center 302 and the service provider 310 (reference C) shown in the figure. FIG.
As shown in (1), price tag data 312 and the like are delivered from the EMD service center 302 to the service provider 310 by performing a session using a common key in the IP / IP-SEC layer, the SSL layer, and the application layer.

FIG. 91 shows a state between the service provider 310 and the user home network 303 shown in FIG. 87 (reference D), and within the user home network 303 (reference E).
FIG. 4 is a diagram for explaining a delivery protocol adopted when delivering the secure container 304 and the like. FIG.
As shown in FIG. 1, the network device 360 _{1 of the} user home network 303 is transmitted from the service provider 310.
Is delivered to the secure container 304 or the like. At this time, the service provider 310 and the network device 36
Between 0 and ₁ , the MPEG-TS layer, PES layer or D
SM CC Data Carousel layer, and
MHEG (Multimedia and Hyper)
media Experts) layer or “http layer and XML / SMIL layer”
This is used as a service provider product delivery protocol for transferring. Also, the network device 360
Between ₁ and the storage device 360 _2, and in between AV devices mutually, HAVi (XML) is used as the user home network commodity delivery protocol for transferring the secure container. At this time, when XML / SMIL / BML is used for the data broadcasting system of the digital broadcasting, the content files CF1 and CF2 and the key files KF1 and KF2 of the secure container 304 and the viewing (demo) sample are as shown in FIG. Is stored in the BML / XML / SMIL layer and the mono-media data layer on the HTTP layer and distributed. When MHEG is used for the data broadcasting system of digital broadcasting, the content files CF1, CF2
The key files KF1 and KF2 and the viewing / demonstration (demo) sample are stored in the monomedia data layer on the MHEG layer and distributed as shown in FIG. When XML / SMIL is used for the data broadcasting system of digital broadcasting, the content file C of the secure container 304 is used.
The F1 and CF2, the key files KF1 and KF2, and the viewing / demonstration (demo) samples are stored in the XML / SMIL layer on the HTTP layer and distributed as shown in FIG.

FIG. 95 shows the EMD service center 302 and the user home networks 303 and 303 shown in FIG.
FIG. 9 is a diagram for explaining a delivery protocol adopted when delivering the use history data 308 and the use control state data 166 between (a and G). As shown in FIG. 95, the EMD service center 302 from the network device 360 _1, when such usage log data 308 is transmitted, IP / IP-SEC layer, the SSL layer and the application layer, using the session key data A session takes place. In addition, network equipment 3
60 _{if 2} and transfers the like EMD service center 302 to the usage log data 308 and the usage control status data 166 and the usage log data 308, IP / I
Performing a session in P-SEC layer and the HAVi layer after being transferred from the storage device 360 ₂ on the network apparatus 360 _1, EMD from the network device 360 ₁
The data is transferred to the service center 302 as described above.

[0423] Figure 96 is a user home network 303a storage devices _{360 11} from the storage device 360 ₄ of the user home network 303 shown in FIG. 87
FIG. 3 is a diagram for explaining a delivery protocol adopted when delivering a secure container. As shown in FIG. 96, the storage device 36 from the storage device 360 ₄
0 ₁₁ secure container, IP / IP-SEC layer,
It is delivered by performing a session using a common key in the SSL layer, the XML / SMIL layer, and the application layer.

First Modification of Second Embodiment FIG. 97 is a configuration diagram of an EMD system 300a using two service providers according to a first modification of the second embodiment. In FIG. 97, components denoted by the same reference numerals as those in FIG. 59 are the same as the components denoted by the same reference numerals described in the first embodiment. As shown in FIG. 97, in the EMD system 300a, the same secure container 104 is supplied from the content provider 301 to the service providers 310a and 310b.

The service provider 310a, for example,
We provide content for drama programs,
In the service, create a content data C related to the drama program, the secure container 304a storing the price tag data 312a that uniquely created for the content data C, distributing it to the network device 360 _1. Further, the service provider 310b provides, for example, a karaoke service. In the service, the content data C related to the karaoke service and the content data C
Create a secure container 304b that stores and its own price tag data 312b was developed for, to deliver it to the network device 360 _1. Here, the format of the secure containers 304a and 304b is as shown in FIG.
5 is the same as the secure container 304 described above.

[0426] the network device 360a _1, the service provider 310a, CA corresponding to the respective 310b
Modules 311a and 311b are provided. CA
The modules 311a and 311b receive distribution of the secure containers 304a and 304b according to their own requests from the service providers 310a and 310b, respectively.

Next, the CA modules 311a and 311b
Creates SP purchase history data 309a and 309b corresponding to the distributed secure containers 304a and 304b, respectively, and stores them in the service provider 31.
0a and 310b. Also, the CA module 31
1a and 311b are secure containers 304a and 304
b is decrypted with the session key data K _SES ,
M305 is output to the _{1-305 4.}

Next, the SAMs 305 _{1 to} 305 ₄ use the common distribution key data KD _{1 to} KD ₃ to transmit the key files K in the secure containers 304 a and 304 b.
F is decrypted, and based on the common rights data 106,
Processing related to the purchase and use of the content according to the operation from the user is performed, and the use history data
Is created.

[0429] Then, E from SAM305 ₁ ~305 ₄
The usage history data 308 is transmitted to the MD service center 302.

[0430] In the EMD service center 302, the content provider 30
1 and the service providers 310a and 310b, the accounting content is determined (calculated), and based on the result, the corresponding billing right data 152c,
152sa and 152sb are created.

[0431] The EMD service center 302 transmits the settlement claim right data 152c, 152sa, and 152sb to the settlement agency 91 via the payment gateway 90.
As a result, the money paid by the user of the user home network 303 to the settlement institution 91 is transferred to the content provider 301 and the service providers 310a and 310b.
Distributed to the owners.

As described above, the EMD system 300a
According to, 310a the same content file CF to the service provider, in case of supplying to the 310b, 310a to the service provider encrypts the usage control policy data 106 in the distribution use key data _KD 1 _{~KD 6} for the content file CF, 310b, and the service provider 310a, 310b is a secure container 304 that stores the encrypted rights certificate data 106 as it is.
a, 304b to the user home network.
Therefore, the SAM 305 in the user home network
In _{1-305 4,} the content file CF 310a to the service provider, even when subjected to distribution from any 310b, a right can be processed based on the common usage control policy data 106.

[0433] In the first modified example described above, the case where two service providers are used has been illustrated, but in the present invention, the number of service providers is arbitrary.

Second Modification of Second Embodiment FIG. 98 is a configuration diagram of an EMD system 300b using a plurality of content providers according to a second modification of the second embodiment. In FIG. 98, the components denoted by the same reference numerals as in FIG. 59 are the same as the components denoted by the same reference numerals described in the first embodiment. As shown in FIG. 98, in the EMD system 300b, the key files KFa and KFb are supplied from the EMD service center 302 to the content providers 301a and 301b, respectively.
Are supplied with secure containers 104a and 104b, respectively.

[0435] The service provider 310 provides a service using, for example, the content supplied by the content providers 301a and 301b, and the price tag data 312a for the secure container 104a.
And price tag data 312b for the secure container 104b, respectively, and create a secure container 304c storing these. As shown in FIG. 98, the secure container 304c includes content files CFa and CFb, key files KFa and KFb, price tag data 312a and 312b, and private key data K of the service provider 310 for each of them.
_The signature data by _{CP and S} is stored.

[0436] secure container 304c is, the network device 360 ₁ of the user home network 303 C
After being received by the A module 311, the SAM 305 ₁
It is processed in to 305 _4.

The SAMs 305 _{1 to} 305 ₄ use the distribution key data KDa _{1 to} KDa ₃ to generate a key file KF.
is decrypted, and processing related to purchase / use of the content file CFa in accordance with the user's operation is performed based on the rights document data 106a, and the history is described in the use history data 308. In addition, SAM305 ₁
In to 305 _4, the distribution key data _KDb 1 _~KDb
3 , the key file KFb is decrypted, and processing related to purchase / use of the content file CFb according to the user operation is performed based on the rights document data 106b, and the history is described in the use history data 308. Is done.

[0438] Then, E from SAM305 ₁ ~305 ₄
The usage history data 308 is transmitted to the MD service center 302.

[0439] In the EMD service center 302, the content provider 30
The billing contents are determined (calculated) for each of the service provider 1a, 301b and the service provider 310, and based on the result, the corresponding settlement claim data 152c
a, 152cb, and 152s are created.

[0440] The EMD service center 302 transmits the settlement claim right data 152ca, 152cb, 152s to the settlement institution 91 via the payment gateway 90.
Thus, the money paid by the user of the user home network 303 to the settlement institution 91 is transferred to the content providers 301a and 301b and the service provider 310.
Distributed to the owners.

As described above, the EMD system 300b
According to the above, the right certificate data 106 of the content files CFa and CFb stored in the secure container 304c
a, 106b are content providers 301a, 30
1b, the SAM30
In 5 _{1-305 4,} usage control policy data 106a, 1
06b based on the content files CFa, CFb
Rights processing for the content provider 301a,
This is reliably performed according to the intention of 301b.

In the second modification shown in FIG. 98, the case where two content providers are used is illustrated, but the number of content providers is arbitrary. Further, both the content provider and the service provider may be plural.

Third Modification of Second Embodiment FIG. 99 is a configuration diagram of an EMD system according to a third modification of the second embodiment. In the above-described second embodiment, E
The MD service center 302 notifies the settlement institution 91 of the content provider 301 and the service provider 3
In the present invention, for example, as shown in FIG. 99, the EMD service center 302
, The settlement claim right data 152c for the content provider 301 based on the usage history data 308
And the payment request data 152s for the service provider 310 may be created and transmitted to the content provider 301 and the service provider 310, respectively. In this case, the content provider 301 uses the settlement request right data 152c to
Payment institution 91a via payment gateway 90a
Settlement to. In addition, the service provider 310 performs settlement with the settlement agency 91b through the payment gateway 90b using the settlement claim data 152s.

Fourth Modification of Second Embodiment FIG. 100 shows an EMD according to a fourth modification of the second embodiment.
It is a block diagram of a system. In the second embodiment described above,
For example, the case where the service provider 310 does not have a billing function as in the current Internet has been illustrated,
Service provider 3 like current digital broadcasting
If the service provider 10 has a billing function, the CA module 311 creates usage history data 308s for the service of the service provider 310 regarding the secure container 304 and transmits the created usage history data 308s to the service provider 310. Then, the service provider 310 performs a billing process based on the usage history data 308s to create the billing right data 152s, and uses this to make a payment to the clearing house 91b via the payment gateway 90b. On the other hand, the SAMs 305 _{1 to} 305 ₄ create usage history data 308 c for the right processing of the content provider 301 regarding the secure container 304 and transmit this to the EMD service center 302. The EMD service center 302 creates the settlement claim data 152c based on the usage history data 308c, and transmits this to the content provider 301. The content provider 301 performs settlement with the settlement agency 91a via the payment gateway 90a using the settlement claim right data 152c.

Fifth Modification of Second Embodiment In the above-described embodiment, as shown in FIG. 72, the user preference filter generation unit 901 of the EMD service center 302
, The user preference filter data 90 based on the usage history data 308 received from the SAM 305 _{1 and the} like.
3 a case has been exemplified for generating, for example, based on the usage control status data 166 is transmitted to the EMD service center 302 in real time generated by the usage monitor unit 186, such as SAM 305 ₁ shown in FIG. 78, the user preference filter In the generation unit 901, the user preference filter data 9
03 may be generated.

Sixth Modification of Second Embodiment Content Provider 301, Service Provider 31
0 and SAMs 305 _{1 to} 305 ₄ respectively have their own public key data K _{CP, P} , K _{SP, P} , K _{SAM1, P}
~ K _{SAM4, P} , and own secret key data K
_{CP, S, K SP, S} , K SAM1, S ~K
_{The SAMs 4 and S} may be registered in the EMD service center 302. In this way, EMD service center 302, in the event of an emergency, in response to a request from such national or law enforcement agencies, the secret key data _{K CP, S, K SP,} S,
The communication between the content provider 301 and the service provider 310, the service provider 310 and the SAMs 305 _{1 to} 3 are performed using K _{SAM1, S to} K _{SAM4, S.}
Communication between 05 _4, as well as the communication to be in the communication between SAM 305 ₁ to 305 ₄ each other in the user home network 303 can be intercepted. For SAMs 305 _{1 to} 305 ₄ ,
The secret key data K is transmitted by the EMD service center 302.
_{SAM1, S to} K _{SAM4, S} are generated, and
305 ₁ to 305 EMD service center 302 stores the ₄ may be held (registered).

Seventh Modification of Second Embodiment In the above-described embodiment, the content providers 301 and
Service provider 310 and SAM305 ₁ ~30
5 _4, when communicating with each other, a public key from the EMD service center 302 in advance the certificate data _CER CP, C
ER _SP, the _CER SAM1 _{~CER SAN4} acquired,
Although the case where transmission is performed to the communication destination by the in-band method has been described as an example, in the present invention, various forms can be adopted as the transmission form of the public key certificate data to the communication destination. For example, when the content provider 301, the service provider 310, and the SAMs 305 _{1 to} 305 ₄ communicate with each other, the public key certificate data CER _CP , CER _SP , CER _{SAM 1 to} C
ER _SAN4 may be acquired and transmitted to the communication destination in an out-of-band system prior to the communication. Further, the content provider 301, the service provider 310, and the SAMs 305 _{1 to} 305 ₄ transmit public key certificate data CE from the EMD service center 302 during communication.
_{R CP, CER SP, CER SAM1} ~CER SAN4
May be obtained.

FIG. 101 is a view for explaining the form of the acquisition (acquisition) route of public key certificate data. In FIG. 101, components denoted by the same reference numerals as those in FIG. 59 are the same as the components denoted by the same reference numerals. The user home network 303a is the same as the user home network 303 described above. In the user home network 303b, via the bus 191 is a IEEE1394 serial bus SAM 305 ₁₁ ~
305 ₁₄ are connected.

When the content provider 301 acquires the public key certificate data CER _SP of the service provider 310, for example, when transmitting the public key certificate data CER _SP from the service provider 310 to the content provider 301 prior to communication. There are two cases ((3) in FIG. 101) and the case where the content provider 301 obtains the public key certificate data CER _SP from the EMD service center 302 ((1) in FIG. 101).

[0450] Also, the service provider 310 determines that the public key certificate data CER _CP
When retrieving, for example, when transmitting the public key certificate data _{CER CP} from the content provider 301 preceding the communication service provider 310 (FIG. 101
During and (2)), if the service provider 310 request a public key certificate data _{CER CP} from the EMD service center 302 (in FIG. 101 (4)) and there is.

[0451] Also, if the service provider 310 has a SAM
305 _{1-305 4} public-key certificate data CER of
_SAM1 when retrieving ～CER _SAM4, for example, public key certificate data CER from SAM 305 ₁ to 305 ₄ before communication to the service provider 310
_When transmitting _{SAM1 to} CER SAM4 ((6) in FIG. 101), the service provider 310 sends the public key certificate data CER _SAM1 from the EMD service center 302.
If request a ～CER _SAM4 is a (in FIG. 101 (4)).

[0452] Also, SAM 305 ₁ when the to 305 ₄ to acquire the public key certificate data _{CER SP} of the service provider 310, for example, public key certificate data from the service provider 310 preceding the communication SAM 305 ₁ to 305 ₄ when sending CER _SP and (in FIG. 101 (5)), there is a SAM 305 ₁ to 305 _{4 If} the request a public key certificate data _{CER SP} from the EMD service center 302 (such as in FIG 101 (7)).

[0453] Further, when the SAM 305 ₁ acquires the public key certificate data _{CER SAM2} of the SAM 305 ₂ is, for example, SAM from SAM 305 ₂ before communication
305 ₁ when transmitting the public key certificate data _{CER SAM2} and (in FIG. 101 (8)), SAM305 ₁ is EM
D service center 302 sends public key certificate data CER
_There is a case where _SAM2 is ordered ((7) in FIG. 101).

[0454] Further, when the SAM 305 ₂ acquires the public key certificate data _{CER SAM1} of the SAM 305 _1, for example, SAM from SAM 305 ₁ before communication
305 ₂ to send the public key certificate data _{CER SAM1} and (in FIG. 101 (9)), SAM305 ₂ public key certificate data C from the EMD service center 302 by itself
And if the request a ER _SAM1, if request a public key certificate data _{CER SAM1} via the network apparatus SAM 305 ₁ is mounted (in FIG. 101 (7),
(8)).

[0455] In addition, SAM305 ₄ is SAM305 ₁₃
S when acquiring the public key certificate data _{CER SAM13} of, for example, from SAM 305 ₁₃ before communication
When transmitting the public key certificate data CER _SAM13 to the AM 305 ₄ ((12) in FIG. 101),
_{4 obtains the} public key certificate data CER _SAM13 from the EMD service center 302 by itself ((10) in FIG. 101), the public key certificate data CER _SAM13 is transmitted via a network device in the user home network 303b.
_{SAM 13} may be ordered.

[0456] In addition, SAM305 ₁₃ is SAM305 ₄
When acquiring the public key certificate data _{CER SAM4} of, for example, SAM from SAM 305 ₄ before communication
305 ₁₃ to send the public key certificate data _{CER SAM4} (in FIG. 101 (11)) and, SAM 305 ₁₃
101 himself obtains the public key certificate data CER _SAM4 from the EMD service center 302 ((1) in FIG. 101).
3)) and the public key certificate data CER via a network device in the user home network 303b.
_SAM4 may be ordered.

[0457] Public key certificate revocation list in the second embodiment.
In the second embodiment, in the EMD service center 302, the content provider 3
01, service provider 310 and SAM 305 ₁
To to 305 ₄ from being able to communicate with other devices, to create a public key certificate revocation to disable the public key certificate data of the apparatus used for the fraud. Then, the public key certificate revocation data CRL (Certify
find Revocation List)
Content provider 301, service provider 31
And transmits to the 0 and SAM 305 ₁ to 305 _4. In addition,
The public key certificate revocation data CRL is stored in the content provider 30 in addition to the EMD service center 302, for example.
1, service provider 310 and SAM 305 _1-
It may be generated in the 305 _4.

[0458] First, the EMD service center 302 transmits the public key certificate data CER of the content provider 301.
A case where the _CP is invalidated will be described. As shown in FIG. 102, EMD service center 302 transmits a public key certificate revocation CRL ₁ indicating the invalidation of the public key certificate data _{CER CP} to the service provider 310 (in FIG. 102 (1)). Service provider 310
Determines the validity of the public key certificate data CER _CP with reference to the public key certificate revocation data CRL ₁ when verifying the signature data input from the content provider 301, and determines that the certificate is valid. Public key data K
_The signature verification using the _{CP and P} is performed, and when it is determined that the signature is invalid, the data from the content provider 301 is invalidated without performing the signature verification. The communication may be rejected instead of invalidating the data.

The EMD service center 302 transmits the public key certificate revocation data CRL ₁ to the user home network 30 using either the broadcast type or the on-demand type using the distribution resources of the service provider 310.
In 3, for example to send to the SAM 305 ₁ (in FIG. 102 (1), (2)). SAM 305 _1, when verifying the signature data of the content provider 301 stored in the secure container input from the service provider 310, valid public key certificate data _{CER CP} by referring to the public key certificate revocation CRL ₁ The signature is determined using the public key data _{KCP and P} when it is determined to be valid, and the secure container is invalidated without performing the signature verification when it is determined to be invalid. . Incidentally, EMD service center 302, the public key certificate revocation CRL _1, may be sent directly to SAM 305 ₁ via the network apparatus in the user home network 303 (in FIG. 102 (3)).

Next, the EMD service center 302 transmits the public key certificate data CER of the service provider 310.
A case where the _SP is invalidated will be described. As shown in FIG. 103, EMD service center 302 transmits a public key certificate revocation CRL ₂ indicating the invalidation of the public key certificate data _{CER SP} to the content provider 301 (in FIG. 103 (1)) . When verifying the signature data input from the service provider 310, the content provider 301 checks the public key certificate revocation data CRL.
₂ , the validity of the public key certificate data CER _SP is determined, and if it is determined to be valid, the public key data K
_The service provider 3 performs signature verification using _{SP and P} and determines that the signature is invalid without performing the signature verification.
Invalidate data from 10.

The EMD service center 302 transmits the public key certificate revocation data CRL ₂ to the user home network 30 using either the broadcast type or the on-demand type using the distribution resources of the service provider 310.
In 3, for example to send to the SAM 305 ₁ (in FIG. 103 (2)). The SAM 305 ₁ is a service provider 31
When verifying the signature data of the service provider 310 stored in the secure container input from 0, to determine the validity of the public key certificate data CER _SP by referring to the public key certificate revocation CRL _2, effective If it is determined that the signature is valid, the signature verification using the public key data _{KSP, P} is performed. If it is determined that the signature is invalid, the secure container is invalidated without performing the signature verification. In this case, in the service provider 310, the module for transmitting and receiving the public key certificate revocation CRL ₂ must have tamper resistance. In the service provider 310, the public key certificate revocation data CRL
₂ must be stored in an area where it is difficult for the related parties of the service provider 310 to falsify. The EMD service center 302 transmits the public key certificate revocation data CRL ₂
And it may transmit directly to the SAM 305 ₁ via the network apparatus in the user home network 303 (in FIG. 103 (3)).

[0462] Next, EMD service center 302, for example SAM305 ₂ of the public key certificate data CER
A case where _SAM2 is invalidated will be described. Fig. 104
As shown in, EMD service center 302 transmits a public key certificate revocation CRL ₃ indicating the invalidation of the public key certificate data _{CER SAM2} to the content provider 301 (in FIG. 104 (1)). The content provider 301 transmits the public key certificate revocation CRL ₃ to the service provider 310. Service provider 310, in one of its broadcast by utilizing the distribution resources or on-demand type, transmits the user home example of the network 303 published SAM 305 ₁ key certificate revocation _{CRL SAM1} (FIG. 104 in (1)). SAM 305 _1, when verifying the SAM 305 ₂ of the signature data added to input data from the SAM 305 _2, to determine the validity of the public key certificate data _{CER SAM2} by referring to the public key certificate revocation CRL ₃ , If it is determined to be valid, the public key data K
_The signature verification using _{SAM2 and P} is performed, and when it is determined that the data is invalid, the data is invalidated without performing the signature verification. In this case, in the service provider 310, the module for transmitting and receiving the public key certificate revocation CRL ₃ must have tamper resistance. Further, in the service provider 310, public key certificate revocation CRL _3, needs to be stored in the hard region of tampering by parties of the service provider 310.

[0463] EMD service center 302 may transmit the public key certificate revocation CRL ₃ to SAM 305 ₁ via the service provider 310 (in FIG. 104 (1), (2)). Also, the EMD service center 302
The public key certificate revocation CRL _3, via the network apparatus in the user home network 303 SA
M305 may send directly to ₁ (in FIG. 104 (3)).

[0464] In addition, EMD service center 302, for example SAM305 ₂ of the public key certificate data CER
Create a public key certificate revocation data CRL ₃ indicating the invalidation of the _SAM2, store it. Further, the user home network 303 creates a SAM registration list SRL of the SAM connected to the bus 191,
The message is transmitted to the MD service center 302 ((1) in FIG. 105). The EMD service center 302 specifies, among the SAMs 305 _{1 to} 305 ₄ shown in the SAM registration list, a SAM (for example, SAM 305 ₂ ) that is indicated to be invalidated by the public key certificate revocation data CRL ₃ and registers the SAM. A new SAM registration list SRL is created by setting the discard flag corresponding to the SAM in the list SRL to indicate invalid. Next, the EMD service center 302 stores the generated SAM registration list SRL in the S
AM305 transmitted to ₁ (in FIG. 105 (1)). SAM
305 _1, when communicating with another SAM, with reference to the discard flag of the SAM registration list SRL, whether the verification of the signature data and the communication to determine whether permission.

[0465] Further, EMD service center 302 creates a public key certificate revocation CRL _3, and transmits this to the content provider 301 (in FIG. 105 (2)). The content provider 301 transmits the public key certificate revocation CRL ₃ to the service provider 310 (in FIG. 105 (2)). Next, the service provider 310, in one of its broadcast by utilizing the distribution resources or on-demand type, transmits the public key certificate revocation CRL ₃ to SAM 305 ₁ (in FIG. 105 (2)) . The SAM 305 ₁ is _one of the SAMs 305 _{1 to} 305 ₄ shown in the SAM registration list created by itself.
Identify the SAM that have been shown to be disabled (e.g., SAM 305 ₂₎ by the public key certificate revocation CRL _3, is set to indicate invalid discard flag corresponding to the SAM in SAM registration list SRL. Hereafter, SA
When performing communication with another SAM, the M305 ₁
By referring to the discard flag of the M registration list SRL, it is determined whether the signature data is verified and whether communication is permitted or not.

[0466] Further, EMD service center 302 creates a public key certificate revocation CRL _3, and transmits it to the service provider 310 (in FIG. 105 (3)).
Next, the service provider 310, in one of its broadcast by utilizing the distribution resources or on-demand type, the public key certificate revocation CRL ₃ SAM 305 ₁
((3) in FIG. 105). The SAM 305 ₁ is
SAM30 shown in the SAM registration list created by itself
5 _1-305 out of _four, the public key certificate revocation list CRL
_{3. The} SAM (for example, SAM305 ₂ ) that is indicated to be invalidated by No. ₃ is specified, and the SAM registration list SRL is specified.
Of the discard flag corresponding to the SAM is set to indicate invalid. Thereafter, SAM 305 _1, when communicating with another SAM, with reference to the discard flag of the SAM registration list SRL, to determine whether permission to presence and communication of the verification of the signature data.

FIG. 106 shows the role of the EMD service center 302 (clearing house) shown in FIG.
FIG. 3 is a configuration diagram of an EMD system in a case where the EMD system is divided into 51 and 51. In the EMD system, in the clearinghouse 951 for electronic settlement, the user home network 30
A payment process (profit distribution process) is performed based on the usage history data 308 from the SAMs 3a and 303b, payment request right data of the content provider 301 and the service provider 310 is generated, and the payment institution is set via the payment gateway 90. At 91, settlement is performed.

Also, a rights management clearinghouse 95
0 creates a settlement report of the content provider 301 and the service provider 310 in accordance with the settlement notification from the electronic settlement clearinghouse 951, and transmits them to the content provider 301 and the content provider 301. Also, the content provider 30
1 rights certificate data 106 and content key data Kc
Registration (authorization). As shown in FIG. 107, when the right management clearing house 950 and the electronic settlement clearing house 951 are housed in a single device, an EMD service center 302 shown in FIG. 59 is obtained.

In the present invention, for example, as shown in FIG. 108, a function of a rights management clearinghouse 960 is provided in the EMD service center 302, and the rights management clearinghouse 960 stores Perform registration etc. and use history data 3 from SAM
08, the payment right data of the service provider 310 may be created and transmitted to the service provider 310. In this case, the service provider 31
0 uses its own billing system as the clearing house for electronic settlement 961 and performs settlement based on settlement request data from the clearing house for rights management 960.

According to the present invention, for example, as shown in FIG. 109, a function of a rights management clearing house 970 is provided in the EMD service center 302, and the rights management data Perform registration, etc. and use history data 3 from SAM
08, the settlement claim right data of the content provider 301 is created and
May be sent. In this case, the content provider 301 uses its own billing system as the clearing house 961 for electronic settlement, and performs settlement based on settlement request data from the right management clearing house 970.

In the present invention, for example, as shown in FIG. 110, the function of the rights management clearing house 970 and the electronic settlement clearing house 971 described above may be provided in the content provider 301. Good. In this case, the content provider 301 changes its billing system to the electronic clearing house 96.
Use as 1 and clearing house 970 for rights management
, And makes a payment to the payment institution 91 on the basis of the payment request data generated in.

Eighth Modification of Second Embodiment In the second embodiment described above, in the EMD system 300 shown in FIG. 59, the content provider 301 provides the service provider 310 with the secure container 104 having the format shown in FIG. Service Provider 3
The case where the secure container 304 having the format shown in FIG. 65 is distributed to the user home network 303 from FIG. That is, in the above-described second embodiment,
As shown in FIGS. 5 and 65, the secure container 10
4 and the secure container 304 each include a single content file CF and the content file C
The case where a single key file KF corresponding to F is stored is illustrated. In the present invention, the plurality of content files CF and the plurality of content files CF are stored in the secure container 104 and the secure container 304, respectively.
May be stored.

[0473] Fig. 111 is a diagram for describing the format of the secure container 104a provided from the content provider 301 to the service provider 310 shown in Fig. 59 in this modification. As shown in FIG. 111, the secure container 104a includes content files CF ₁ , CF ₂ , CF ₃ and key files KF ₁ , KF.
F _2, KF _3, the public key certificate data _{CER CP,} the signature data _{SIG 200, CP, SIG 201,} CP, SIG
_{202, CP} , SIG _{203, CP} , SIG
_{204, CP} , SIG _{205, CP} , SIG _{1, ESC}
Is stored. Here, the signature data SIG
_{200, CP} , SIG _{201, CP} , SIG
_{202, CP} , SIG _{203, CP} , SIG
_{204, CP} , SIG _{205, and CP} are the content files C
F ₁ , CF ₂ , CF ₃ , key files KF ₁ , KF ₂ ,
It takes a hash value for KF _3, the secret key data _{K cp} of the content provider _301, is generated using the _s.

The content file CF ₁ has a header,
Metadata Meta ₁ , content data C ₁ , A / V
Decompression software Soft ₁ and a digital watermark information module WM ₁ are stored. Here, content data C ₁ and A / V decompression software Soft ₁
It is encrypted using the content key data Kc _1, metadata Meta ₁ and the electronic watermark information module WM ₁ is encrypted by using the content key data Kc ₁ according to need. In addition, the content data C ₁
Are compressed by, for example, the ATRAC3 method. A /
The V decompression software Soft ₁ is ATRAC3 decompression software. In addition, the header content file CF _1, for example, a key as shown in FIG. 112 file KF ₁ and the content file CF ₂
Directory structure data DSD indicating linking to
₁ is included.

[0475] The content file CF _2, header,
Metadata Meta ₂ , content data C ₂ , A / V
Decompression software Soft ₂ and a digital watermark information module WM ₂ are stored. Here, content data C ₂ and A / V decompression software Soft ₂
It is encrypted by using the content key data Kc _2, metadata Meta ₂ and the electronic watermark information module WM ₂ is encrypted using the content key data Kc ₂ according to need. Also, the content data C ₂
Is compressed by, for example, the MPEG2 system. A / V
The decompression software Soft ₂ is decompression software of the MPEG2 system. Also, the content file CF ₂ header, for example, as shown in FIG. 112,
Directory structure data DSD ₂ indicating linking to key file KF ₂ and content file CF ₃
It is included.

[0476] The content file CF _3, header,
Metadata Meta ₃ , content data C ₃ , A / V
Decompression software Soft ₃ and a digital watermark information module WM ₃ are stored. Here, the content data C ₃ and the software A / V decompression software Soft ₃
Is encrypted by using the content key data Kc _3, metadata Meta ₃ and the electronic watermark information module WM ₃ is encrypted by using the content key data KC ₃ as necessary. Also, the content data C ₃
Are compressed by, for example, the JPEG method. The A / V decompression software Soft ₃ is decompression software of the JPEG system. Also, the content file CF
₃ headers, for example, as shown in FIG. 112, it contains the directory structure data DSD ₃ indicating that link to the key file KF _3.

The key file KF ₁ includes a header, content key data Kc ₁ encrypted using distribution key data KD _{1 to} KD ₃ , rights certificate data 106 ₁ and SAM
A program download container SDC ₁ and signature data SIG _{220 and ESC} are stored.

The key file KF ₂ includes a header, content key data Kc ₂ encrypted using the distribution key data KD _{1 to} KD ₃ , right certificate data 106 ₂ and SAM.
A program download container SDC ₂ and signature data SIG _{221 and ESC} are stored.

[0479] in the key file KF _3, the header and the distribution key data _KD 1 _{~KD 3} the encrypted content key data Kc ₃ is used, usage control policy data 106 ₃ Oyohi SAM
A program download container SDC ₃ and signature data SIG _{222 and ESC} are stored.

When the service provider 310 receives the distribution of the secure container 104a shown in FIG.
After confirming the validity of the public key certificate data CER _cp using the public key data K _{ESC, P} of the D service center 302, the public key data K _{cp, P} stored in the public key certificate data CER _CP is Using the signature data SIG
_{200, CP} , SIG _{201, CP} , SIG
_{202, CP} , SIG _{203, CP} , SIG
_{204, CP, SIG 205,} validity of the _CP, i.e. the content files _{CF 1, CF 2,} and the legitimacy of the creator and the sender of CF _3, the key file _KF 1, _KF 2,
To verify the sender of the validity of the KF _3. Further, the content provider 301 uses the public key data K _{ESC, P} to _generate signature data SIG _{220, ESC} , SIG.
_{221, ESC} , SIG _{222, and} the validity of the creator of the key files KF ₁ , KF ₂ , and KF ₃ are confirmed.

[0481] Then, the service provider 310, the content file _{CF 1, CF 2,} the price tag data ₃₁₂ 1, which shows a selling price of CF _3, 312 _2, 312 ₃
Create Further, the service provider 310 uses the secret key data K _{SP, S} to generate the price tag data 31.
21 ₁ , 312 ₂ , 312 ₃ signature data SIG
_{220, SP} , SIG _{221, SP} , SIG
_{222, SP} is created. In addition, service provider 3
Reference numeral 10 denotes content files CF ₁ , CF ₂ , CF ₃ , KF ₁ , KF ₂ , K using secret key data K _{SP, S.}
Signature data _{SIG 210} of the F _3, SP, SIG
_{211, SP} , SIG _{212, SP} , SIG
_{213, SP} , SIG _{214, Sp} , SIG
_215, Create _SP .

[0482] Next, the service provider 310
The secure container 304a shown in FIG. 14 is created.

The service provider 310 distributes the secure container 304a shown in FIG. 114 to the user home network 303. User home network 30
In 3, the SAMs 305 _{1 to} 305 ₄ confirm the validity of all the signature data stored in the secure container 304a, and then check the contents data C ₁ , C ₂ , C ₃
Rights processing for the directory structure data DSD
_{1 to} DSD ₃ based on the key files KF ₁ , KF ₂ , and KF ₃ , respectively.

Also, in the above-described eighth modification, the single service provider 3
10 provided with a plurality of content files CF
₁₀₁ , CF ₁₀₂ , and CF ₁₀₃ are stored in a single secure container 304a, and the user home network 30 is stored.
3, but as shown in FIG. 98,
A plurality of content files CF provided from a plurality of content providers 301a and 301b are stored in a single secure container and stored in a user home network 3
03 may be distributed.

In the secure containers 104 and 304, for example, as shown in FIG. 113, content files CF ₁ storing music (audio) data compressed by ATRAC3 and video clip data compressed by MPEG2 are stored. Stored content file CF ₂ , JPEG
A content file CF ₃ storing jacket (still image) data compressed in the above, a content file CF ₄ storing text format lyrics data, and a content file CF ₅ storing text format liner notes data, respectively. Key file KF ₁ , K
_{F 2, KF 3, KF 4} , KF 5 and may be stored. Also in this case, similarly, the content files CF _{1 to} CF ₁
By ₅ of directory structure data, and links between the content files _CF 1 _{~CF 5} cross each link is established between the content files _CF 1 _{~CF 5} and the key file _KF 1 _{~KF 5.}

Note that the concept of the data format when a plurality of content data are stored in the secure container (in the case of the composite type) in this embodiment is shown in, for example, FIG. 115 or FIG.

Note that the format shown in FIG. 111 can be similarly applied to the case where the secure container 104 is transmitted from the content provider 101 shown in FIG.

Ninth Modification of Second Embodiment In the above-described embodiment, the content file CF and the key file KF are stored in the secure containers 104 and 304 in a directory structure, and the content provider 30
1 to the service provider 310 and transmission from the service provider 310 to the SAMs 305 _{1 to} 305 _4. it may be sent to _{1-305 4.} This includes, for example, a first method and a second method described below. In the first method, as shown in FIG. 117, the content provider 301 to the service provider 310 and the service provider 310 to the SAM
To 305 ₁ to 305 _4, and transmits the content file CF and the key file KF separately. Further, in the second method, as shown in FIG.
01 to the service provider 310 and from the service provider 310 to the SAMs 305 _{1 to} 305 _4.
From 2 to SAM305 ₁ ~305 ₄ to send the key file KF. The transmission of the key file KF is, for example, S
AM305 ₁ ~305 ₄ users, when trying to determine the purchase mode of the content data C, is transmitted from the EMD service center 302 to the SAM 305 ₁ to 305 _4. When the above-described first method and second method are adopted, for example, the content file CF and the key file KF are set between the related content files CF and between the content file CF and the corresponding key file KF. A link relationship is established using the hyperlink data HL stored in at least one header of the KF. In SAM 105 ₁ to 105 _4, based on the link relationship, performs right processing and utilization of the content data C.

In the above-described second embodiment, the content data C and the key data such as the content key data Kc and the rights certificate data 106 are each converted into a file format. 310 to S
Although the case of transmitting to AM 305 _{1 to} AM 305 ₄ has been illustrated,
These need not necessarily be in a file format as long as a link relationship between them can be established. For example, FIG.
As shown in the figure, content data C, metadata Mea
ta, A / V decompression software Soft, digital watermark information module WM, key file KF, price tag data 312, and public key certificate data CER _CP ,
CER _SPs are separately provided from the content provider 301 and the EMD service center 302 to the SAMs 305 _1-3.
05 may be transmitted ₄ to. In this case, as shown in FIG. 119, the content data C, the metadata Meta,
A / V decompression software Soft, digital watermark information module WM, key file KF, price tag data 312, public key certificate data CER _CP , CER
_SPs are linked by hyperlink data HL. Here, the hyperlink data HL is transmitted, for example, after being encrypted with the distribution key data KD _{1 to} KD ₆ .

In this modification, the formats of the content file CF and the key file KF are, for example, those shown in FIGS. 5A and 5B. Also, in this case, the content file CF and the key file KF, and their signature data SI
Preferably, G _{6, CP} , SIG _{7, CP} are transmitted.

Tenth Modification of Second Embodiment In the above-described embodiment, the content file CF and the key file KF are stored in the secure container 104.
Are provided separately, for example, as shown in FIG. 120, the key file KF may be stored in the content file CF in the secure containers 104 and 304. In this case, the key file K
The content file CF storing the F, secret key data _{K CP} of the content provider _301, signature data by _S, and the secret key data _{K SP} of the service provider _310, signature data by the _S subjected. Eleventh Modification of Second Embodiment In the above-described embodiment, the content data C is stored in the content file CF, the content key data Kc and the rights certificate data 106 are stored in the key file KF, and the content provider 301 3
10 and the SAM 30 from the service provider 310
5 ₁ a case has been exemplified to be sent to such, the content data C, content key data Kc and the usage control policy data 10
6 from the content provider 301 to the service provider 310 without adopting the file format.
And from the service provider 310 etc. SAM 305 _1, may be transmitted by not dependent on the communication protocol format.

For example, as shown in FIG. 121, in the content provider 301, the content key data Kc
And a key file KF containing the encrypted content key data Kc and the encrypted rights certificate data 106, etc., are created.
s is transmitted to the service provider 310 in a format independent of the communication protocol. And service provider 3
In 10, it creates the secure container 304s added price tag data 312 to the stored content data C and the key file KF in the secure container 104s, and transmitted in a format that does not depend on the communication protocol secure container 304s like SAM 305 ₁ Is also good.

As shown in FIG. 122, the contents provider 301 sends the contents data C encrypted with the contents key data Kc, the encrypted contents key data Kc and the encrypted Key file K containing data 106 etc.
And F are transmitted individually in a format independent of the communication protocol. Then, the SAM 30 is sent from the service provider 310.
Etc. 5 _1, transmits individually independent format content data C, and the key file KF and the price tag data 312 to the communication protocol. That is, the content data C is transmitted in the same path as the key file KF without being converted into the file format.

[0494] Further, as shown in FIG. 123, the content provider 301 to the service provider 310, and transmitted in the form that is independent of the encrypted content data C communication protocol with the content key data Kc, from the service provider 310 SAM 305 ₁ For example, the content data C and the price tag data 312 are transmitted in a format independent of the communication protocol. It is also possible to transmit the key file KF and the like encrypted content key data Kc and the encrypted usage control policy data 106 from the EMD service center 302 SAM 305 ₁ etc.. That is, the content data C is transmitted in a different path from the key file KF without being converted into a file format.

As shown in FIG. 124, the contents provider 301 sends the contents data C encrypted with the contents key data Kc, the contents key data Kc and the rights certificate data 10 to the service provider 310.
6 is transmitted in a format independent of the communication protocol.
Further, from the service provider 310 etc. SAM 305 _1, the content data C, content key data Kc and the usage control policy data 106, and price tag data 3
12 is transmitted. That is, the content data C, the content key data Kc, the license data 106, and the price tag data 312 are transmitted in the same route without being converted into a file format.

As shown in FIG. 125, the content data C encrypted with the content key data Kc is transmitted from the content provider 301 to the service provider 310 in a format independent of the communication protocol. Then, from the service provider 310 etc. SAM 305 _1, the content data C and the price tag data 3
12 is transmitted in a format independent of the communication protocol.
Also, the SAM 305 _{1 is} sent from the EMD service center 302.
For example, the content key data Kc and the
Send 6. . That is, the content data C, the content key data Kc, and the license data 106 are transmitted in different paths without being converted into a file format.

[0497] In a 12 modification EMD system 300 shown in FIG. 59 described above in the second embodiment, for example, as shown in FIG. 126, the secure in accordance with the secure container 304 by the user home network 303 has received from the service provider 310 Container 304A
In response to a request S303a from the SAM of the user home network 303a.
03a. In this case, it can be considered that the SAM of the user home network 303 plays a role similar to that of the service provider 310 described in the second embodiment. In this case, the SAM of the user home network 303a can newly set the price tag data 312 independently. Then, the purchase mode of the content data C is determined in the SAM of the user home network 303a, and the usage history data 304a and the like corresponding thereto are stored in the user home network 303a.
Is transmitted to the EMD service center 302 from the SAM. In the EMD service center 302, based on the usage history data 304a, the content provider 301, the service provider 310, the user home network 3
A payment process for distributing the money paid by the user of the user home network 303a to the user 03 is performed.

Note that the file inclusive size relationship of the secure container in this embodiment can be expressed as shown in FIG.

Third Embodiment FIG. 128 is a diagram for explaining an EMD system according to a third embodiment of the present invention, and FIG. 129 is a functional block diagram of the EMD service center shown in FIG. In FIG. 129, components denoted by the same reference numerals as those used in the first and second embodiments are the same as the components denoted by the same reference numerals described in these embodiments.

In the EMD system of this embodiment, the content provider 301 sends the master source (content data) S111 and the like to the EMD service center 302, and the
A content file CF shown in FIG. Further, the content provider 301 provides the EMD service center 302 with the content I of the content data S111.
D, content key data Kc, digital watermark management information (contents of digital watermark information embedded in content data), identifier CP of content provider 301 ID, identifier SP of service provider 310 that provides content data The ID and the wholesale price SRP of the content data are sent, and the EMD service center 302 creates the key file KF shown in FIG. The EMD service center 302 stores the created content files CF in the CF database 802a, assigns a globally unique content ID to each content file CF, and manages them centrally. Also, the EMD service center 302 stores the key file KF in the KF database 153a, and the
Is managed centrally using.

The processing in the EMD service center 302 will be described with reference to FIG. The EMD service center 302 stores the master source S111 received from the content provider 301 in the content master source database 801. Next, the digital watermark information adding unit 112 embeds the digital watermark information indicated by the digital watermark management information received from the content provider 301 into the master source S111 read from the content master source database 801 to generate content data S112. Next, the compression unit 113 compresses the content data S112 to compress the content data S112.
113 is generated. After the content data S112 is decompressed by the decompression unit 116, a hearing test is performed by the auditory test unit 123, and if necessary, the digital watermark information adding unit 112 embeds the digital watermark information again. Next, in the encryption unit 114, the content data S113 is encrypted using the content key data Kc to generate the content data S114. Next, C
F creation unit 802 stores content data CF such as content data S114 shown in FIG.
Is created, and the content file CF is stored in the CF database 802a.

[0502] In the EMD service center 302,
The KF creation unit 153 creates the key file KF shown in FIG. 5B, and stores the key file KF in the KF database 153a.

[0503] Next, the secure container creation unit 804 creates a secure container 806 storing the content file CF read from the CF database 802a and the key file KF read from the KF database 153a. Stored in the database 805. afterwards,
Secure container database 805 is accessed by service provider 310 and secure container 806 is provided to service provider 310.

Next, the service provider 310 checks the content file C stored in the secure container 806.
A secure container 807 storing F and a key file KF and price tag data 312 indicating a selling price of the content data is created. Then, the service provider 310 distributes the secure container 807 to the user home network 303 by using a predetermined communication protocol in a format not depending on the communication protocol or by recording on a recording medium such as a ROM type.

[0505] In the user home network 303, in the case of online, the secure container 807 is provided to the SAM 305 ₁ or the like via the CA module 311. In the SAM 305 ₁ or the like, the content key data Kc stored in the key file KF and the rights The license data 106 and the like are decrypted using the distribution key data KD _{1 to} KD _{3 and the} like, and the handling such as the purchase mode of the content data stored in the content file CF is determined based on the decrypted rights document data 106. You. Also, S
AM305 ₁ In such, the usage log data 308 indicating, for example, the content purchase history data is generated, the usage log data 308 is transmitted to the EMD service center 302. The SAM of the user home network 303
From 305 _2, S of the user home network 303a
If the secure container 807 is distributed to AM305 ₁₂ it is carried out the same processing as the SAM 305 ₂ in the SAM 305 _12, the usage log data 308 is transmitted from the SAM 305 ₁₂ to the EMD service center 302.

The user home network 303,
The processing for the secure container 807 in 303a is the same as the processing in the user home networks 103 and 303 in the first and second embodiments described above. In the example shown in FIG.
From service center 302 to service provider 310,
In addition, the case where the secure container storing the content file CF and the key file KF is transmitted from the service provider 310 to the user home network 303 (in the case of in-band) has been exemplified. They may be transmitted separately (out-of-band). As shown in FIG. 130, the EMD service center 30
2 is supplied to the service provider 310, and the service provider 310
Supplies the content file CF to the user home network 303 and the EMD service center 302
The key file KF created in the above is transmitted from the EMD service center 302 to the user home networks 303 and 30.
The SAM 305 ₂ and the SAM 305 ₁₂ of 3a may be supplied.

Fourth Embodiment FIG. 131 is a view for explaining an EMD system according to a fourth embodiment of the present invention.

In the EMD system of this embodiment, the content provider 301 creates a content file CF shown in FIG. 5A, for example, and sends it to the EMD service center 302. Further, the content provider 301 provides the EMD service center 302 with the content ID of the content data, the content key data Kc, the digital watermark management information (the content of the digital watermark information embedded in the content data, and the embedding position information), the identifier CP of the content provider 301. ID, identifier SP of service provider 310 that provides content data The ID and the wholesale price SRP of the content data are sent, and the EMD service center 302 creates the key file KF shown in FIG. Also, the EMD service center 302
Stores the content file CF in the CF database 802.
a, a globally unique content ID is assigned to each content file CF, and these are centrally managed. Further, the EMD service center 302 stores the created key file KF in the KF database 153a, and also manages the key file KF centrally using the content ID.

[0509] In the EMD service center 302,
A secure container 80 storing the content file CF read from the CF database 802a and the key file KF read from the KF database 153a.
6 is created, and the secure container 806 is stored in the secure container database. Thereafter, the secure container database is accessed by the service provider 310 and the secure container 806 is provided to the service provider 310.

Next, the service provider 310 checks the content file C stored in the secure container 806.
A secure container 807 storing F and a key file KF and price tag data 312 indicating a selling price of the content data is created. Then, the service provider 310 distributes the secure container 807 to the user home network 303 by using a predetermined communication protocol in a format not depending on the communication protocol or by recording on a recording medium such as a ROM type.

[0511] In the user home network 303, in the case of online, the secure container 807 is provided to the SAM 305 ₁ or the like via the CA module 311. In the SAM 305 ₁ or the like, the content key data Kc stored in the key file KF and the right are stored. The license data 106 and the like are decrypted using the distribution key data KD _{1 to} KD _{3 and the} like, and the handling such as the purchase mode of the content data stored in the content file CF is determined based on the decrypted rights document data 106. You. Also, S
AM305 ₁ In such, the usage log data 308 indicating, for example, the content purchase history data is generated, the usage log data 308 is transmitted to the EMD service center 302. The SAM of the user home network 303
From 305 _2, S of the user home network 303a
If the secure container 807 is distributed to AM305 ₁₂ it is carried out the same processing as the SAM 305 ₂ in the SAM 305 _12, the usage log data 308 is transmitted from the SAM 305 ₁₂ to the EMD service center 302.

[0512] The user home network 303,
The processing for the secure container 807 in 303a is the same as the processing in the user home networks 103 and 303 in the first and second embodiments described above. In the example shown in FIG.
From service center 302 to service provider 310,
In addition, the case where the secure container storing the content file CF and the key file KF is transmitted from the service provider 310 to the user home network 303 (in the case of in-band) has been exemplified. They may be transmitted separately (out-of-band). Further, as shown in FIG. 132, the content file CF is transferred from the EMD service center 302 to the service provider 3.
10, the service provider 310 supplies the content file CF to the user home network 303, and the key file KF created in the EMD service center 302 is transmitted from the EMD service center 302 to the SAM of the user home networks 303 and 303a.
305 ₂ , SAM 305 ₁₂ .

Fifth Embodiment FIG. 133 is a view for explaining an EMD system according to a fifth embodiment of the present invention.

[0514] In the EMD system of the present embodiment, the content provider 301 creates, for example, a content file CF shown in Fig. 5A. Further, the content provider 301 sends the content ID of the content data, the content key data Kc,
Digital watermark management information (contents of digital watermark information to be embedded in content data and embedding position information), identifier CP of content provider 301 ID, identifier S of service provider 310 that provides content data
P Send ID, wholesale price SRP of content data,
In the EMD service center 302, a key file KF shown in FIG. EMD Service Center 3
02 sends the created key file KF to the content provider 301. Also, the EMD service center 302
Stores the key file KF in the KF database 153a and centrally manages the key file KF using the content ID assigned to each piece of content data. At this time, the content ID is created by, for example, the EMD service center 302, and is determined globally unique for all of the content data provided by the plurality of content providers 301.

[0515] Next, in the content provider 301, a secure container 821 storing the created content file CF and the key file KF received from the EMD service center 302 is created, and the secure container 821 is stored in the common database 820. . In the common database 820, the secure containers 821 provided by the plurality of content providers 301 are centrally managed using the content ID.

[0516] The service provider 310, for example, brands (searches) the common database 820 using the content ID, receives a desired secure container 821 from the common database 820, and stores the sales price of the content in the secure container 821. Secure container 82 further storing price tag data 312 and the like shown
2 and distributes the secure container 822 to the user home network 303.

In the user home network 303, in the case of online, the secure container 822 is provided to the SAM 305 ₁ or the like via the CA module 311. In the SAM 305 ₁ or the like, the content key data Kc stored in the key file KF and the rights The license data 106 and the like are decrypted using the distribution key data KD _{1 to} KD _{3 and the} like, and the handling such as the purchase mode of the content data stored in the content file CF is determined based on the decrypted rights document data 106. You. Also, S
AM305 ₁ In such, the usage log data 308 indicating, for example, the content purchase history data is generated, the usage log data 308 is transmitted to the EMD service center 302. The SAM of the user home network 303
From 305 _2, S of the user home network 303a
If the secure container 822 is distributed to AM305 ₁₂ it is carried out the same processing as the SAM 305 ₂ in the SAM 305 _12, the usage log data 308 is transmitted from the SAM 305 ₁₂ to the EMD service center 302.

[0518] The user home network 303,
The processing for the secure container 807 in 303a is the same as the processing in the user home networks 103 and 303 in the first and second embodiments described above. In the example shown in FIG. 133, the common database 820 from the content provider 301, the service provider 310 from the common database 820,
Also, the case where the secure container storing the content file CF and the key file KF is sent from the service provider 310 to the user home network 303 (in the case of in-band) has been described, but the content file CF and the key file KF are separately transmitted on the same route. (Out-of-band). Also,
As shown in FIG. 134, the content provider 301 stores the content file CF in the common database 820, the service provider 310 obtains the content file CF from the common database 820, and
D service center 302 to service provider 310
May be sent to the key file KF. In this case, the service provider 310 stores the content file CF obtained from the common database 820, the key file KF obtained from the EMD service center 302, and the price tag data 312, and
Create 2. The common database 820 centrally manages the content file CF by using a content ID assigned globally uniquely to content data provided by a plurality of content providers 301.

As shown in FIG. 135, the key file KF created by the EMD service center 302 is stored in the SAM 305 of the user home networks 303 and 303a.
₁ , 305 ₁₂ or the like. In this case, the service provider 310 distributes the content file CF to the user home network 303.
The price tag data 312 is stored in the service provider 31
0 may be distributed to the user home network 303 or the EMD service center 302 may be distributed to the user home networks 303 and 303a.

Sixth Embodiment FIG. 136 is a view for explaining an EMD system according to a sixth embodiment of the present invention.

The EMD system of this embodiment is different from the EMD system shown in FIG.
An MD service center 30 having an MD service center 302 and a corresponding content provider 301
2 is characterized in that a billing process or the like is performed, and the other points are substantially the same. The content provider 301 creates, for example, a content file CF shown in FIG. Also, content provider 3
01, the content I of the content data is stored in one EMD service center 302 selected (or predetermined) among the plurality of EMD service centers 302.
D, content key data Kc, digital watermark management information (contents of digital watermark information to be embedded in content data, and embedding position information), identifier CP of content provider 301 ID, identifier SP of service provider 310 that provides content data Sends ID and wholesale price SRP of content data, and sends it to EMD Service Center 3.
In step 02, a key file KF shown in FIG. 5B is created. The EMD service center 302 sends the created key file KF to the corresponding content provider 301. In addition, the EMD service center 302 stores the key file KF in the KF database 153a, and centrally manages the key file KF using the content ID assigned to each piece of content data. At this time,
The content ID is, for example, the EMD service center 30
2 and globally unique for content data corresponding to all the secure containers 831 created and stored in the common database 830.

[0522] Next, in the content provider 301, a secure container 831 storing the created content file CF and the key file KF received from the EMD service center 302 is created, and the secure container 831 is stored in the common database 820. . In the common database 830, the secure containers 831 provided by the plurality of content providers 301 are centrally managed using the content ID.

[0523] The service provider 310, for example, brands (searches) the common database 820 using the content ID, receives a desired secure container 831 from the common database 820, and provides the secure container 831 with the selling price of the content. Secure container 83 further storing price tag data 312 shown
2 and distribute the secure container 832 to the user home network 303.

[0524] In the user home network 303, in the case of online, the secure container 832 is provided to the SAM 305 ₁ or the like via the CA module 311. In the SAM 305 ₁ or the like, the content key data Kc stored in the key file KF and the right are stored. The license data 106 and the like are decrypted using the distribution key data KD _{1 to} KD _{3 and the} like, and the handling such as the purchase mode of the content data stored in the content file CF is determined based on the decrypted rights document data 106. You. Also, S
AM305 ₁ In such, the usage log data 308 indicating, for example, the content purchase history data is generated, the usage log data 308 is transmitted to the EMD service center 302. The SAM of the user home network 303
From 305 _2, S of the user home network 303a
If the secure container 832 is distributed to AM305 ₁₂ it is carried out the same processing as the SAM 305 ₂ in the SAM 305 _12, the usage log data 308 is transmitted from the SAM 305 ₁₂ to the EMD service center 302.

[0525] The user home network 303,
The processing for the secure container 807 in 303a is the same as the processing in the user home networks 103 and 303 in the first and second embodiments described above. In the example shown in FIG. 136, the common database 830 from the content provider 301, the service provider 310 from the common database 830,
Also, the case where the secure container storing the content file CF and the key file KF is sent from the service provider 310 to the user home network 303 (in the case of in-band) has been described, but the content file CF and the key file KF are separately transmitted on the same route. (Out-of-band). Also,
As shown in FIG. 137, the content file CF is stored in the common database 830 from the content provider 301, the service provider 310 obtains the content file CF from the common database 820, and
D service center 302 to service provider 310
May be sent to the key file KF. At this time, the key file KF is sent to the service provider 310 from the EMD service center 302 corresponding to the content provider 301 that has created the content file CF obtained by the service provider 310.

The service provider 310 stores the content file CF obtained from the common database 830 and the EM
A key file KF obtained from the D service center 302;
The secure container 832 is created by storing the price tag data 312 and the price tag data 312. The common database 830 centrally manages the content file CF by using a content ID assigned globally uniquely to content data provided by the plurality of content providers 301.

As shown in FIG. 138, the key file KF created by the EMD service center 302 is stored in the SAM 305 of the user home networks 303 and 303a.
₁ , 305 ₁₂ or the like. Also at this time, the content provider 3 that created the content file CF provided to the SAMs 305 ₁ , 305 _{12 and the} like.
01 from the EMD service center 302 corresponding to the SAM
The key file KF is sent to 305 ₁ , 305 _{12 and the} like. Further, the service provider 310 distributes the content file CF to the user home network 303. The price tag data 312 may be distributed by the service provider 310 to the user home network 303 or may be distributed by the EMD service center 302 to the user home networks 303 and 303a.

Seventh Embodiment FIG. 139 is a view for explaining an EMD system according to a seventh embodiment of the present invention.

The EMD system of the present embodiment sends the master source S111 of the content data from the content provider 301 to the EMD service center 302 as compared with the EMD system shown in FIG.
In the D service center 302, the content file C
F is different, and the other points are substantially the same. The content provider 301 sends the master source S111 of the content data to one of the plurality of EMD service centers 302 (or a predetermined one) selected from among the plurality of EMD service centers 302, and the EMD service center 302 in FIG. ) Is created. EMD Service Center 3
02 sends the created content file CF to the corresponding content provider 301.

The content provider 301 sends the content ID of the content data and the content key data K to the one corresponding EMD service center 302.
c, digital watermark management information (contents of digital watermark information embedded in content data), content provider 301
Identifier CP ID, identifier SP of service provider 310 that provides content data The ID and the wholesale price SRP of the content data are sent, and the EMD service center 302 creates the key file KF shown in FIG. The EMD service center 302 transfers the created key file KF to the corresponding content provider 301.
Send to The EMD service center 302 stores the content file CF in the CF database 802a, stores the key file KF in the KF database 153a, and uses the content ID assigned to each piece of content data to store the content file CF and the key file KF. Is managed centrally. At this time, for example, the content ID is globally uniquely determined for content data corresponding to all the secure containers 831 created by the EMD service center 302 and stored in the common database 840.

[0531] Next, in the content provider 301, a secure container 841 storing the content file CF and the key file KF received from the corresponding EMD service center 302 is created, and the secure container 841 is stored in the common database 840. In the common database 840, the secure containers 841 provided by the plurality of content providers 301 are managed centrally using the content ID.

The service provider 310, for example, brands (searches) the common database 840 using the content ID, receives a desired secure container 841 from the common database 840, and stores the selling price of the content in the secure container 841. Secure container 84 further storing price tag data 312 shown
2 and distribute the secure container 842 to the user home network 303.

In the user home network 303, in the case of online, the secure container 842 is provided to the SAM 305 ₁ or the like via the CA module 311. In the SAM 305 ₁ or the like, the content key data Kc stored in the key file KF and the rights The license data 106 and the like are decrypted using the distribution key data KD _{1 to} KD _{3 and the} like, and the handling such as the purchase mode of the content data stored in the content file CF is determined based on the decrypted rights document data 106. You. Also, S
AM305 ₁ In such, the usage log data 308 indicating, for example, the content purchase history data is generated, the usage log data 308 is transmitted to the EMD service center 302. The SAM of the user home network 303
From 305 _2, S of the user home network 303a
If the secure container 832 is distributed to AM305 ₁₂ it is carried out the same processing as the SAM 305 ₂ in the SAM 305 _12, the usage log data 308 is transmitted from the SAM 305 ₁₂ to the EMD service center 302.

Note that the user home network 303,
The processing for the secure container 807 in 303a is the same as the processing in the user home networks 103 and 303 in the first and second embodiments described above. In the example shown in FIG. 139, the common database 840 from the content provider 301, the service provider 310 from the common database 840,
Also, the case where the secure container storing the content file CF and the key file KF is sent from the service provider 310 to the user home network 303 (in the case of in-band) has been described, but the content file CF and the key file KF are separately transmitted on the same route. (Out-of-band). Also,
As shown in FIG. 140, the content file CF is stored in the common database 830 from the content provider 301, the service provider 310 obtains the content file CF from the common database 820, and
D service center 302 to service provider 310
May be sent to the key file KF. At this time, the key file KF is sent to the service provider 310 from the EMD service center 302 corresponding to the content provider 301 that has created the content file CF obtained by the service provider 310.

[0535] The service provider 310 stores the content file CF obtained from the common database 840 and the EM file.
A key file KF obtained from the D service center 302;
The secure container 842 is created by storing the price tag data 312. The common database 830 centrally manages the content file CF by using a content ID assigned globally uniquely to content data provided by the plurality of content providers 301.

As shown in FIG. 141, the key file KF created by the EMD service center 302 is stored in the SAM 305 of the user home networks 303 and 303a.
₁ , 305 ₁₂ or the like. Also at this time, the content provider 3 that created the content file CF provided to the SAMs 305 ₁ , 305 _{12 and the} like.
01 from the EMD service center 302 corresponding to the SAM
The key file KF is sent to 305 ₁ , 305 _{12 and the} like. Further, the service provider 310 distributes the content file CF to the user home network 303. The price tag data 312 may be distributed by the service provider 310 to the user home network 303 or may be distributed by the EMD service center 302 to the user home networks 303 and 303a.

Eighth Embodiment FIG. 142 is a view for explaining an EMD system according to an eighth embodiment of the present invention. In the EMD system of the present embodiment, for example, the EMD system
5A created by the EMD service center 302 using the master source provided to the service center 302, or FIG. 5A created by the content provider 301 and provided to the EMD service center 302. And a content file CF shown in
The key file KF shown in FIG. 5B created by the EMD service center 302 is
Via the service provider 310 or directly to the SAM 30 of the user home network 303
It is delivered to the 5 _1. Here, the service provider 310
Sends price tag data 312 indicating the selling price of the content file CF to the user home network 303, and registers the price tag data 312 in the EMD service center 302 to authorize it. In addition, the service provider 310 sets itself as an EMD
Register with the service center 302.

In the EMD system of this embodiment, for example, the SAM 305 ₁ of the user home network 303
The content file CF and the key file KF obtained from the service provider 310 or the EMD service center 302 are stored in the S
It is a distributor that distributes to the AM 305 ₂ and / or the SAM 305 ₁₂ in the user home network 303a. However, in this case, for example, EMD service center 302, after the SAM 305 ₁ has purchased the content data C stored in the content file CF,
It is prohibited to sell (re-distribute) the purchased content data C by adding some sales margin to increase profit. In the EMD system of the present embodiment, on the condition that the content data C for which the purchase mode has not been determined or the content data C for which the playback charge has been determined as the purchase mode is redistributed without taking the sales profit margin, S
AM305 ₁ is allowed to replicate the content data C to another SAM. This is called inter-device redistribution. In the EMD system of the present embodiment, the SAM3
For the 05 ₁ content file CF having received the delivery from the service provider 310 (or the secure container), the inter-device sale in a form not take sales profit margin is permitted. In the present embodiment, the SAM 30
5 _1, in the case of selling the content data C in a form taking a sales profit margin (delivery) may, SAM 305 ₁
Registers itself as a distributor in the EMD service center 302 and receives permission, and registers price tag data 312 indicating the selling price of the content data C in the EMD service center 302. And the SAM305 ₁
Receives the distribution of the content file CF and the key file KF directly from the CF database 802a and the KF database 153a in the EMD service center 302 without going through the service provider 310.

Ninth Embodiment FIG. 143 is a view for explaining an EMD system according to a ninth embodiment of the present invention. The EMD system according to the present embodiment is characterized in that each of the content providers 301 plays a role as an EMD service center 302 in addition to a role as a content provider. In this case, if there are a plurality of content providers 301, each content provider 301
Have a role as each EMD service center 302. The content provider 301 distributes the secure container 851 storing the content file CF and the key file KF to the service provider 310. The service provider 310 sends the secure container 8
The secure container 852 is created by further adding the price tag data 312 to the content file CF and the key file KF stored by 51, and this is delivered to the user home network 303. In the user home networks 303 and 303a, the content file C is stored on the basis of the license data 106 stored in the key file KF.
F is determined, the usage history data 308 corresponding thereto is created, and this is used as the content provider 301.
To the EMD service center 302 in the server. At this time, the usage history data 308 is
It is created every 01. E of the content provider 301
The MD service center 302 transfers the profit paid by the user of the SAMs 305 ₁ , 305 ₁₂ based on the usage history data 308 to the service provider 310 corresponding to itself.
Distribute between and. User home network 3
03 from the CA module 311, history data relating to the distribution service is sent to the corresponding service provider 310, and the service provider 310 performs a charging process for the distribution service.

[0540] The present invention is not limited to the above embodiments. In the above-described embodiment, the case where audio data is used as the content data has been described as an example. However, video data, audio / video data, text data, a computer program, or the like may be used as the content data. In the above-described embodiment, the EMD
Although the case where the key files KF are created in the service centers 102 and 302 is illustrated, the key files KF can be created in the content providers 101 and 301. In this case, the format of the key file KF corresponding to FIG. 7 is as shown in FIG. As shown in FIG. 144, the key file KF is
Secret key data K of the content providers 101 and 301
_It has basically the same information as the key file KF shown in FIG. 7, except that the signature data created using _{CP and S} is used.

In the above-described embodiment, the case where the usage control status data 166 is transmitted in real time from the user home networks 103 and 303 to the EMD service centers 102 and 302 has been described. It may be transmitted to 101, 301 and / or service provider 310. Thereby, the content provider 10
The service provider 310 and the service provider 310 can immediately grasp the purchase status of the content provided and distributed by themselves, and can reflect the purchase status on subsequent services.

The effects of the above-described EMD system of the present embodiment will be described again with reference to the related art and its problems. In the age when digital networks such as digital broadcasting (data broadcasting) and the Internet have not developed, digital content (content data) has been used as a means of diverting digital content (ROM). It was recorded and diverted. In a time when digital networks were not evolving, the only way to protect the copyright of these contents was to consider ways to prevent casual copying by users on user home networks.

However, with the recent development of digital networks, the general public can freely obtain ROM-type recording media on which unencrypted contents are mounted anytime, anywhere. It's easy to buy, compress and upload to the network. In particular, since the Internet is a network connected all over the world, it is possible to upload unencrypted content to the Internet for free, and citizens can download it to their personal terminals free of charge, and content right holders There is a possibility that the copyright of (content providers) will be significantly infringed.

[0544] Also, without uploading the content in an unencrypted state, the content itself is embedded with its own digital watermark information in the content, and the content is encrypted. It is also possible to sell digital contents without permission and without permission. At this time, since a part of the sales is not returned to the content right holder, the content right holder (content provider)
Copyright infringement. In addition, with the permission of the copyright holder, a contract to return part of the sales to the right holder of the content (content provider) is made in advance with the right holder, so that profits can be obtained by distributing these digital contents. Although it is possible to provide such a distribution service, basically, the content provider does not consider the distribution system based on the secondary use of such content to be very favorable. The business based on the secondary use of content corresponds to, for example, a rental business, a used sale, and the like. Whenever a secondary use delivery service appears, there is a problem of copyright infringement, and it takes time to put the service itself on track. Without a prior agreement with the content provider, we started the distribution service first, and after the problem of copyright infringement became a problem, distribution of profits to the right holders and copyright protection were considered, and permission as a distribution service was granted. can get. Rental CDs and rental videos are equivalent. The second-hand sale of game software is a serious problem. Currently, in the pre-sale business of game software, part of the profit of the sale is not returned to the right holder of the content, so the right holder has been sued in a trial but rejected, and it becomes very severe for the right holder I have.
Since it is sold in large quantities at less than half the price of new software, it will also affect the sales of new software in a market that is attractive to users.

[0545] Secondary use of content means that the right holder of the content originally uses a ROM type recording medium as a distribution means,
Because the ROM-type recording medium on which the digital content is recorded is distributed as a product and profits are obtained, the purchaser can obtain profits by further distributing the product by the user who purchased them. Even if part of the profit is returned (content provider)
From the standpoint of the right holder, I don't think so. For movie content, etc., the right to record / distribute the content is guaranteed by the right holder of the content by law, and when the right holder purchases the content distributed to the world, the right to purchase is taken from the user's hand. Is assumed not to be distributed. The right holders of the game software have also used the right of distribution right for the game software, and are suing in a trial to curb the secondary use business.

The content right holder wants to keep a distributor who diverts the digital content for which he or she owns a copyright (know who the user is distributing). If there is a distribution company that wants to gain profits by distributing digital contents for which it has copyright and distributes it, it is desirable to have a system that allows digital contents to be delivered directly from the content right holder . In addition, the distributor mentioned here is the price of digital content,
Refers to a company that makes a profit by collecting a profit margin of some%. If a profit margin is to be collected when passing digital content to another device / recording medium, define it as a content trading session distribution service, and define a case where no profit margin is collected as inter-device redistribution,
This is legal due to the superdistribution principle. In a current digital content network distribution management system in which a service provider authors its own distribution service content and provides a distribution service from a ROM-type recording medium on which non-encrypted content distributed by the content provider is recorded, Considering a situation in which one digital content owned by a provider is distributed by a plurality of service providers, rights processing is performed by a CA module / electronic payment tool adopted by each service provider even though the content is the same. Is authored so that
The format of the used encryption key (content key data) and the content licensing condition (rights data) differ from service provider to service provider, and a common rights processing rule cannot be provided on the user home network. In such a case, all the key data used by the CA module / electronic payment tool are settled by the CA module / electronic payment tool of the network device, and after that, they conform to the rules of SCMS, so that they can be shared on the user home network. Rights processing rules are realized.
Further, the content and key data encrypted with the key of the CA module / electronic payment tool pass through the network device as they are, and are transmitted to the user home network bus (IEEE).
1394. ) To record on a storage medium of a storage device, and even if a device connected to the 1394 bus can purchase and settle the content remotely via a network device, the encrypted content can be decrypted. Since the descrambler exists in the network device,
Eventually, reproduction cannot be performed unless the contents and key data are returned to the network device during reproduction (network CA).

[0547] As described above, the RO in which the non-encrypted contents which have been widely distributed so far in the world are recorded.
The existence of the M-type recording medium is a source of problems for the current digital content network distribution service. Since there is a possibility that the content form of the digital content is created by a third party other than the content provider, and furthermore, a system in which a person who sells the content obtains the price for the user, Profit of the content provider such as secondary use of the content may be unduly impaired. In addition, since the distribution of authored digital content is not strictly managed by the content provider, it is necessary to determine whether the digital content owned by the copyright owner earns all profits and whether the profits are returned from the profits. Difficult to monitor.

The EMD system of the present embodiment described above
The conventional problem as described above has been solved. That is, in the EMD system according to the present embodiment, for the digital content authored by the content provider, the content provider creates a content form and rights certificate data, and manages them in a database of the content provider. The rights document data of the content is further authoritatively registered at an EMD service center (clearing house) which is a third trust organization. By doing so, the person concerned of the content provider can completely control the digital content right processing rules, and can manage the distribution channel on the content provider side. Further, in the present case, a mechanism is provided in which the contents of the data of the rights certificate created on the content provider side cannot be seen by a distributor existing with the user. Further, in the EMD system of the present embodiment, the ROM type recording medium is considered as one distribution means, and the existence of the digital content mounted thereon is determined by the ROM.
Release from the recording medium. We propose a content form that expresses the value of existence in digital content alone, regardless of the distribution means and distribution channel. Since digital content is managed in a prescribed format on the content provider side, by considering that digital content of that format is mounted on a ROM-type recording medium, whether it is distributed on a ROM-type recording medium or distributed on a digital network, Yeah,
On the user home network, it is possible to provide a common right processing rule in ROM → RAM and network → RAM. All digital content sales sessions are conducted in a format defined and managed by the content provider. As a result, common right processing can be performed regardless of the distribution means and the distribution channel. Also, the content format specified by this content provider is
By defining the digital content as a minimum unit for buying and selling digital content, a common right processing rule can be provided irrespective of the type of content used in the subsequent distribution process. The accounting information generated when the user makes a purchase in the user's home network is returned to the EMD service center, which is a third trust organization, and not returned to the service provider. Solved business problems.

[0549]

As described above, according to the present invention,
It becomes possible to cause the data processing device to handle the content data provided by the data providing device on the basis of the copyright data by the data providing device. As a result, it is possible to appropriately protect the profit of the data providing apparatus related to the content data,
The burden of auditing by the concerned parties can be reduced.

[Brief description of the drawings]

FIG. 1 is an overall configuration diagram of an EMD system according to a first embodiment of the present invention.

FIG. 2 is a diagram for explaining the concept of a secure container according to the present invention.

FIG. 3 is a functional block diagram of the content provider shown in FIG. 1;
FIG. 3 is a diagram showing a flow of data related to data transmitted / received to / from M.

FIG. 4 is a functional block diagram of the content provider shown in FIG. 1, showing a flow of data related to data transmitted and received between the content provider and the EMD service center.

FIG. 5 is a diagram for explaining a format of a secure container transmitted from the content provider shown in FIG. 1 to the SAM.

FIG. 6 is a diagram for explaining in detail data included in the content file shown in FIG. 5;

FIG. 7 is a diagram for explaining in detail data included in the key file shown in FIG. 5;

FIG. A8 is a diagram for describing header data stored in a content file.

FIG. 9 is a diagram for explaining a content ID;

FIG. 10 is a diagram for explaining a directory structure of a secure container.

FIG. 11 is a diagram for explaining a hyperlink structure of a secure container.

FIG. 12 is a diagram for describing a first example of a ROM-type recording medium used in the present embodiment.

FIG. 13 is a diagram for explaining a second example of the ROM-type recording medium used in the present embodiment.

FIG. 14 is a diagram for explaining a third example of the ROM-type recording medium used in the present embodiment.

FIG. 15 is a diagram for describing a first example of a RAM-type recording medium used in the present embodiment.

FIG. 16 is a diagram for explaining a second example of a RAM type recording medium used in the present embodiment.

FIG. 17 is a diagram for explaining a third example of a RAM-type recording medium used in the present embodiment.

FIG. 18 shows an EMD from a content provider.
FIG. 4 is a diagram for explaining a registration request module transmitted to a service center.

FIG. 19 is a diagram illustrating an example of an EMD from a content provider.
It is a flowchart which shows the procedure of the registration processing to a service center.

FIG. 20 is a flowchart illustrating a procedure of a description creation process in a content provider;

FIG. 21 is a flowchart illustrating a procedure of a description creation process in a content provider;

FIG. 22 is a flowchart illustrating a procedure of a description creation process in a content provider.

FIG. 23 is a functional block diagram of the EMD service center shown in FIG. 1, and shows a flow of data related to data transmitted / received to / from a content provider.

FIG. 24 is a functional block diagram of the EMD service center shown in FIG. 1, and is a diagram showing a flow of data related to data transmitted and received between the SAM and the settlement institution shown in FIG. 1;

FIG. 25 is a configuration diagram of a network device in the user home network shown in FIG. 1;

FIG. 26 is a functional block diagram of a SAM in the user home network shown in FIG. 1, and shows a data flow until a secure container received from a content provider is decrypted.

FIG. 27 is a diagram for explaining data stored in the external memory shown in FIG. 25;

FIG. 28 is a diagram for explaining data stored in a stack memory;

FIG. 29 is another configuration diagram of the network device in the user home network shown in FIG. 1;

FIG. 30 is a diagram for explaining data stored in a storage unit illustrated in FIG. 26;

FIG. 31 is a functional block diagram of a SAM in the user home network shown in FIG. 1, showing a flow of data related to a process of using and purchasing content data;

FIG. 32 is a diagram illustrating an example in which the content file, whose purchase form has been determined, downloaded to the download memory of the network device shown in FIG.
FIG. 8 is a diagram for explaining the flow of processing in the transfer source SAM in the case of transfer to the SAM.

FIG. 33 is a diagram showing a flow of data in the transfer source SAM in the case shown in FIG. 32;

FIG. 34 is a diagram for explaining a format of a secure container determined in a purchase mode.

FIG. 35 is a diagram illustrating an example in which the input content file or the like is transferred to a RAM or ROM type recording medium (media) in the transfer destination SAM in the case shown in FIG. 32;
FIG. 6 is a diagram showing a data flow when writing data to a memory.

FIG. 36 is a flowchart showing processing for determining the purchase mode in the AV device when the user home network receives the distribution of the ROM type recording medium shown in FIG. 7 in which the purchase mode of the content has not been determined. It is a figure for explaining a flow.

FIG. 37 is a diagram showing an example of the SA shown in FIG. 36;
FIG. 3 is a diagram showing a data flow in M.

FIG. 38 shows A in the user home network.
FIG. 11 is a diagram for explaining a flow of processing when a secure container is read from a ROM-type recording medium for which the purchase mode has not been determined in the V-device, transferred to another AV device, and written to a RAM-type recording medium. is there.

FIG. 39 is a diagram showing the flow of data in the transfer source SAM in the case shown in FIG. 38;

FIG. 40 is a diagram showing the SAM of the transfer source in FIG. 38;
FIG. 8 is a diagram for describing a format of a secure container transferred from a SAM to a transfer destination SAM.

FIG. 41 is a diagram showing a flow of data in the transfer destination SAM in the case shown in FIG. 38;

FIG. 42 is a diagram for explaining a format of data transmitted and received between the content provider, the EMD service center, and the SAM according to the in-band method and the out-of-band method shown in FIG. 1; It is.

FIG. 43 is a diagram for explaining a format of data transmitted and received between the content provider, the EMD service center, and the SAM according to the in-band method and the out-of-band method shown in FIG. 1; It is.

[Fig. 44] Fig. 44 is a diagram for describing an example of a connection configuration of a device to a bus in a user home network.

FIG. 45 is a diagram for explaining a data format of a SAM registration list created by the SAM.

FIG. 46 is a diagram for explaining a data format of a SAM registration list created by an EMD service center;

FIG. 47 is a flowchart of an overall operation of the content provider shown in FIG. 1;

FIG. 48 is a diagram illustrating an example of a secure container delivery protocol used in the EMD system according to the first embodiment.

FIG. 49 is a diagram for describing a second modification of the first embodiment of the present invention.

FIG. 50 is a diagram for explaining a third modification of the first embodiment of the present invention.

FIG. 51 is a diagram illustrating a case where the first technique is employed in a fourth modification of the first embodiment of the present invention.

FIG. 52 is a diagram for explaining a case where the second technique is employed in the fourth modification of the first embodiment of the present invention.

FIG. 53 is a diagram for describing a fifth modification of the first embodiment of the present invention.

FIG. 54 is a view for explaining a first pattern of a sixth modification of the first embodiment of the present invention.

FIG. 55 is a view for explaining a second pattern of the sixth modified example of the first embodiment of the present invention.

FIG. 56 is a view for explaining a third pattern of the sixth modified example of the first embodiment of the present invention.

FIG. 57 is a view for explaining a fourth pattern of the sixth modification of the first embodiment of the present invention.

FIG. 58 is a view for explaining a fifth pattern of the sixth modification of the first embodiment of the present invention.

FIG. 59 is an overall configuration diagram of an EMD system according to a second embodiment of the present invention.

60 is a functional block diagram of the content provider shown in FIG. 59, and is a diagram showing a flow of data relating to a secure container transmitted to the service provider.

FIG. 61 is a flowchart of a secure container delivery process performed by the content provider;

FIG. 62 is a flowchart of a secure container delivery process performed by the content provider;

63 is a functional block diagram of the service provider shown in FIG. 59, and is a diagram showing a flow of data transmitted / received to / from the user home network.

FIG. 64 is a flowchart of a secure container creation process performed by a service provider;

FIG. 65 is a view for explaining a format of a secure container transmitted from the service provider shown in FIG. 59 to the user home network.

FIG. 66 is a diagram for describing a transmission form of a content file stored in the secure container shown in FIG. 65.

FIG. 67 is a diagram for explaining a transmission form of a key file stored in the secure container shown in FIG. 65;

FIG. 68 is a functional block diagram of the service provider shown in FIG. 59, showing a flow of data transmitted to and received from an EMD service center.

FIG. 69 is a diagram for explaining a format of a price tag registration request module transmitted from a service provider to an EMD service center.

FIG. 70 is a functional block diagram of the EMD service center shown in FIG. 59, showing a flow of data related to data transmitted / received to / from a service provider.

FIG. 71 is a functional block diagram of the EMD service center shown in FIG. 59, showing a flow of data related to data transmitted / received to / from a content provider.

FIG. 72 is a functional block diagram of the EMD service center shown in FIG. 59, showing a flow of data related to data transmitted to and received from the SAM.

FIG. 73 is a diagram for explaining the contents of use history data;

FIG. 74 is a configuration diagram of the network device shown in FIG. 59;

FIG. 75 is a functional block diagram of the CA module shown in FIG. 74;

FIG. 76 is a functional block diagram of the SAM shown in FIG. 74, showing a flow of data from input of a secure container to decryption thereof.

FIG. 77 is a diagram for explaining data stored in the storage unit shown in FIG. 76;

FIG. 78 is a functional block diagram of the SAM shown in FIG. 74, and is a diagram showing a data flow in a case where a purchase / use mode of content is determined.

FIG. 79 is a flowchart illustrating a procedure of a process of determining a purchase mode of a secure container in the SAM.

FIG. 80 is a diagram for explaining a format of a key file after a purchase mode is determined;

FIG. 81 is a diagram showing an example of a case where the content file downloaded in the download memory of the network device shown in FIG.
FIG. 9 is a diagram for explaining the flow of processing in the SAM at the transfer destination when the data is transferred to the SAM.

FIG. 82 is a diagram showing a transfer source SA in the case shown in FIG. 81;
FIG. 3 is a diagram showing a data flow in M.

FIG. 83 is an example of a transfer destination SA in the case shown in FIG. 81;
FIG. 3 is a diagram showing a data flow in M.

FIG. 84 is a flowchart of an overall operation of the EMD system shown in FIG. 59;

FIG. 85 is a flowchart of an overall operation of the EMD system shown in FIG. 59;

FIG. 86 is an exemplary view for explaining an example of a delivery mode of a secure container from a service provider to a user home network in the EMD system according to the second embodiment;

FIG. 87 is an exemplary view for explaining an example of a secure container delivery protocol adopted by the EMD system according to the second embodiment;

FIG. 88 is a diagram for explaining a delivery protocol used when delivering a secure container or the like from the user home network to the service provider 310 in FIG. 87.

FIG. 89 is an exemplary view for explaining a delivery protocol used when delivering a key file or the like from the content provider to the EMD service center in FIG. 87;

90 is price tag data 3 from the service provider to the EMD service center in FIG. 87.
12 is a diagram for explaining a delivery protocol used when delivering 12 or the like. FIG.

FIG. 91 is an exemplary view for explaining a delivery protocol used when delivering a secure container or the like in the user home network in FIG. 87;

[Fig. 92] Fig. 92 is a diagram for describing an implementation form of a secure container in a protocol layer when XML / SMIL / BML is used as a data broadcasting method of digital broadcasting.

[Fig. 93] Fig. 93 is a diagram for describing an implementation form of a secure container in a protocol layer when MHEG is used as a data broadcasting method of digital broadcasting.

FIG. 94 is a diagram for describing an implementation form of a secure container in a protocol layer when XML / SMIL is used as a data broadcasting method of an interface.

FIG. 95 is a diagram showing an example in which a user home network receives E
FIG. 3 is a diagram for explaining a delivery protocol used when delivering usage history data and the like to an MD service center.

FIG. 96 is a diagram for explaining a delivery protocol used when delivering a secure container or the like in a user home network.

FIG. 97 is a configuration diagram of an EMD system using two service providers according to a first modification of the second embodiment of the present invention.

FIG. 98 is an EMD using a plurality of content providers according to a second modification of the second embodiment of the present invention.
It is a block diagram of a system.

FIG. 99 is a configuration diagram of an EMD system according to a third modification of the second embodiment of the present invention.

FIG. 100 is a fourth embodiment of the present invention.
It is a lineblock diagram of an EMD system concerning a modification.

FIG. 101 is a diagram for describing a form of an acquisition route of public key certificate data.

[FIG. 102] FIG. 102 is a diagram for explaining processing when invalidating public key certificate data of a content provider.

[FIG. 103] FIG. 103 is a diagram for explaining processing when invalidating public key certificate data of a service provider.

[FIG. 104] FIG. 104 is a diagram for explaining processing when invalidating SAM public key certificate data.

[FIG. 105] FIG. 105 is a diagram for explaining other processing when revoking SAM public key certificate data.

106 is a diagram for explaining a case where a right management clearing house and an electronic settlement clearing house are provided in place of the EMD service center in the EMD system shown in FIG. 47.

FIG. 107 is an EMD in the case where the right management clearing house and the electronic settlement clearing house shown in FIG. 106 are provided in a single EMD service center;
It is a block diagram of a system.

FIG. 108 is a diagram showing E in the case where the service provider directly performs settlement with the clearing house for electronic settlement.
FIG. 1 is a configuration diagram of an MD system.

FIG. 109 is a configuration diagram of an EMD system in a case where a content provider directly performs settlement in a clearing house for electronic settlement.

FIG. 110 is an EMD in the case where the content provider further has functions of both a rights management clearing house and an electronic settlement clearing house.
It is a block diagram of a system.

FIG. 111 is an eighth embodiment of the present invention.
FIG. 49 is a diagram illustrating a format of a secure container provided from a content provider to a service provider shown in FIG. 47 in a modification.

FIG. 112 is a diagram for explaining a link relationship based on directory structure data between the content file and the key file shown in FIG. 111;

FIG. 113 is a diagram for explaining another example of the directory structure between the content file and the key file.

FIG. 114 is an eighth embodiment of the present invention.
FIG. 50 is a diagram illustrating a format of a secure container provided to the SAM from the service provider shown in FIG. 47 in a modification.

FIG. 115 is a diagram for describing a first concept of a data format of a composite-type secure container.

[Fig. 116] Fig. 116 is a diagram for describing a second concept of the data format of the composite secure container.

FIG. 117 is an eighth embodiment of the present invention.
FIG. 11 is a diagram illustrating a case where a first method is employed in an EMD system according to a modification.

FIG. 118 is an eighth embodiment of the present invention.
FIG. 11 is a diagram for explaining a case where a second technique is employed in an EMD system according to a modification.

FIG. 119 is an eighth embodiment of the present invention.
FIG. 10 is a diagram for explaining a data format when a file format is not adopted in an EMD system according to a modification.

FIG. 120 is a first embodiment of the second embodiment of the present invention.
It is a block diagram of the EMD system concerning the 0th modification.

FIG. 121 is a first embodiment of the second embodiment of the present invention.
It is a lineblock diagram of an EMD system concerning a 1st pattern of a modification.

FIG. 122 is a first embodiment of the second embodiment of the present invention.
FIG. 11 is a configuration diagram of an EMD system according to a second pattern of a modified example.

FIG. 123 is a first embodiment of the second embodiment of the present invention.
It is a lineblock diagram of an EMD system concerning a 3rd pattern of a modification.

FIG. 124 is a first embodiment of the second embodiment of the present invention.
FIG. 14 is a configuration diagram of an EMD system according to a fourth pattern of a modified example.

FIG. 125 shows a first embodiment of the second embodiment of the present invention.
It is a lineblock diagram of the EMD system concerning the 5th pattern of a modification.

FIG. 126 is a ninth embodiment of the present invention.
It is a lineblock diagram of an EMD system concerning a modification.

FIG. 127 is a view for explaining the file inclusion size relationship of the secure container in the second embodiment of the present invention.

FIG. 128 is an EM of the third embodiment of the present invention.
It is a figure for explaining a D system.

FIG. 129 is a functional block diagram of the EMD service center shown in FIG. 128.

FIG. 130 is an EM diagram of the third embodiment of the present invention.
It is a figure for explaining the modification of D system.

FIG. 131 is an EMD according to a fourth embodiment of the present invention.
It is a figure for explaining a system.

FIG. 132 is an EMD according to a fourth embodiment of the present invention.
FIG. 9 is a diagram for describing a modification of the system.

FIG. 133 is an EMD according to a fifth embodiment of the present invention.
It is a figure for explaining a system.

FIG. 134 is an EMD according to the fifth embodiment of the present invention.
FIG. 9 is a diagram for describing a modification of the system.

FIG. 135 is an EMD according to a fifth embodiment of the present invention.
FIG. 14 is a diagram for explaining another modification of the system.

FIG. 136 is an EMD according to the sixth embodiment of the present invention.
It is a figure for explaining a system.

FIG. 137 is an EMD according to the sixth embodiment of the present invention.
FIG. 9 is a diagram for describing a modification of the system.

FIG. 138 is an EMD according to the sixth embodiment of the present invention.
FIG. 14 is a diagram for explaining another modification of the system.

FIG. 139 is an EMD according to the seventh embodiment of the present invention.
It is a figure for explaining a system.

FIG. 140 is an EMD according to the seventh embodiment of the present invention.
FIG. 9 is a diagram for describing a modification of the system.

FIG. 141 is an EMD according to a seventh embodiment of the present invention.
FIG. 14 is a diagram for explaining another modification of the system.

FIG. 142 is an EMD according to the eighth embodiment of the present invention.
It is a figure for explaining a system.

FIG. 143 is an EMD according to a ninth embodiment of the present invention.
It is a figure for explaining a system.

FIG. 144 is a diagram for describing a format of a key file when a key file is created in a content provider.

FIG. 145 is a configuration diagram of a conventional EMD system.

[Explanation of symbols]

90: payment gateway, 91: settlement institution, 92
... Root certificate authority, 100,300 ... EMD system, 1
01, 301 ... content provider, 102, 302
... EMD service center, 103, 303 ... user home network, 104, 304 ... secure container,
105 _{1 to} 105 ₄ , 305 _{1 to} 305 ₄ ... SAM, 1
06: rights certificate data, 107, 307: settlement report data, 108, 308: use history data, 160 ₁ : network device, 160 _{2 to} 160 ₄ : AV device, 15
2, 152c, 152s... Settlement claim data, 191.
Bus, 310 service provider, 311 CA module, 312 price tag data, CF content file, KF key file, Kc content key data

────────────────────────────────────────────────── ───

[Procedure amendment]

[Submission date] February 28, 2000 (200.2.2
8)

[Procedure amendment 1]

[Document name to be amended] Drawing

[Correction target item name] All figures

[Correction method] Change

[Correction contents]

FIG.

FIG. 27

FIG. 2

FIG. 3

FIG.

FIG. 4

FIG. 5

FIG. 13

FIG. 14

FIG.

FIG. 6

FIG. 7

FIG. 8

FIG. 16

FIG.

FIG. 9

FIG. 10

FIG. 28

FIG. 44

FIG. 11

FIG.

FIG. 23

FIG. 69

FIG.

FIG. 110

FIG.

FIG. 21

FIG. 73

FIG. 75

FIG.

FIG. 32

FIG. 112

FIG. 24

FIG. 25

FIG. 29

FIG. 26

FIG.

FIG. 36

FIG. 31

FIG. 33

FIG. 34

FIG. 35

FIG. 37

FIG. 38

FIG. 74

FIG. 39

FIG. 40

FIG. 41

FIG. 45

FIG. 42

FIG. 43

FIG. 143

FIG. 46

FIG. 49

FIG. 47

FIG. 48

FIG. 50

FIG. 51

FIG. 52

FIG. 53

FIG. 54

FIG. 55

FIG. 56

FIG. 57

FIG. 58

FIG. 59

FIG. 60

FIG. 62

FIG. 61

FIG. 108

FIG. 63

FIG. 65

FIG. 64

FIG. 77

FIG. 66

FIG. 67

FIG. 68

FIG. 70

FIG. 71

FIG. 72

FIG. 76

FIG. 78

FIG. 79

FIG. 80

FIG. 81

FIG. 82

FIG. 83

FIG. 84

FIG. 85

FIG. 92

FIG. 86

FIG. 93

FIG. 87

FIG. 88

FIG. 89

FIG. 94

FIG. 90

FIG. 99

FIG. 91

FIG. 95

FIG. 96

FIG. 97

FIG. 98

FIG. 100

FIG. 101

FIG. 102

FIG. 103

FIG. 104

FIG. 105

FIG. 106

FIG. 107

FIG. 109

FIG. 115

FIG. 116

FIG. 111

FIG. 113

FIG. 114

FIG. 117

FIG. 118

FIG. 119

FIG. 120

FIG. 121

FIG. 122

FIG. 123

FIG. 124

FIG. 125

FIG. 126

FIG. 128

FIG. 127

FIG. 129

FIG. 130

FIG. 131

FIG. 132

FIG. 133

FIG. 134

FIG. 135

FIG. 136

FIG. 137

FIG. 138

FIG. 139

FIG. 140

FIG. 141

FIG. 142

FIG. 144

FIG. 145

──────────────────────────────────────────────────続 き Continued on the front page (51) Int.Cl. ⁷ Identification symbol FI Theme coat ゛ (Reference) G09C 1/00 660 G11B 20/10 H G11B 20/10 H04L 9/00 601C H04L 9/32 675B 675D F-term (Reference) 5B017 AA06 BA05 BA07 BB03 BB10 CA11 CA12 CA16 5B085 AE13 AE29 BG07 5D044 AB05 DE17 GK17 HL11 5J104 AA01 AA09 AA16 EA02 EA04 LA03 LA06 MA02 NA03 PA07 PA10 9A001 BB03 BB04 EE04 EJ03 EJ04

Claims (103)

[Claims] 1. A data providing system for distributing content data from a data providing device to a data processing device and managing the data providing device and the data processing device by a management device, wherein the management device includes an encrypted content key. Creating a key file storing data and encrypted rights document data indicating the handling of the content data, the data providing device provides the content data encrypted using the content key data, The data processing system, wherein the data processing device decrypts the content key data and the rights document data stored in the key file, and determines handling of the content data based on the decrypted rights document data. 2. The data providing system according to claim 1, wherein the management device adds signature data for verifying the validity of a creator of the key file to the key file. 3. The data providing system according to claim 1, wherein the data providing device creates a content file storing the content data and provides the content file to the data processing device. 4. The data providing system according to claim 3, wherein the data providing device adds signature data for verifying the legitimacy of a creator of the content file to the content file. 5. The data providing device creates the rights document data and sends the rights document data to the management device. The data processing device, based on the rights document data,
The management device determines at least one of a purchase mode and a use mode of the distributed content data, and transmits history data indicating a history of at least one of the determined purchase mode and the use mode to the management device. Based on the received history data,
2. The data providing system according to claim 1, wherein a profit distribution process is performed for distributing a profit obtained through the purchase and the use of the content data in the data processing device to a person involved in the data providing device. 6. A data providing system for distributing content data from a data providing device to a data processing device and managing the data providing device and the data processing device by a managing device, wherein the managing device has an encrypted content key. Creating a key file storing data and encrypted rights document data indicating the handling of the content data, wherein the data providing device stores the content file encrypted using the content key data; And a module storing the key file received from the management device, and distributing the module to the data processing device, wherein the data processing device transmits the content key data and the rights stored in the distributed module. Decrypts the license data and uses the decrypted The data providing system for determining the handling of said content data. 7. The data according to claim 6, wherein the management device generates signature data for verifying the validity of a creator of the key file, and generates the key file further storing the signature data. Delivery system. 8. The data providing device generates the content key data and the rights document data and transmits the generated contents key data and the rights document data to the management device, and the management device generates the content key data and the rights document data based on the received content key data and the rights document data. The data providing system according to claim 6, wherein the key file is created, and the created key file is registered. 9. The data providing device creates signature data for verifying at least one of the creator and distributor of the content file and the distributor of the key file, and The data providing system according to claim 7, wherein the module further storing signature data is distributed to the data processing device. 10. The data processing device verifies the signature data stored in the module, and checks whether the creator and distributor of the content file and the creator and distributor of the key file have validity. The data providing system according to claim 9, wherein at least one of the data is confirmed. 11. The management device creates the key file storing the content key data and the rights document data encrypted using the distribution key data, and transmits the distribution key data to the data processing device. The data providing system according to claim 6, which distributes the data. 12. The data providing device according to claim 11, wherein said management device and said data processing device have a plurality of distribution key data whose validity period is defined, and use said distribution key data of a corresponding period. system. 13. The data providing device creates the signature data using its own secret key data, and the data processing device uses the public key data corresponding to the secret key data to generate the signature data. The data providing system according to claim 10, which verifies validity. 14. A data providing system for distributing content data from a data providing device to a data processing device, and managing the data providing device and the data processing device by a management device, wherein the management device includes an encrypted content key. Creating a key file storing data and encrypted rights document data indicating handling of the content data, the data providing device includes: a content data encrypted using the content key data; A module storing a content file including a key file received from the server, and distributing the module to the data processing device, wherein the data processing device transmits the content key data and the rights certificate data stored in the distributed module Decrypted, and based on the decrypted rights certificate data, Data provides a system for determining the handling of the content data. 15. A data providing system for distributing content data from a data providing device to a data processing device and managing the data providing device and the data processing device by a management device, wherein the management device includes an encrypted content key. Creating a key file storing data and encrypted rights document data indicating the handling of the content data, wherein the data providing device stores the content file encrypted using the content key data; And the key file received from the management device are individually distributed to the data processing device, and the data processing device transmits the content key data and the rights certificate data stored in the distributed key file. And distributes the distribution based on the decrypted rights certificate data. Data providing system for determining the handling of the received content data stored in the content file. 16. A data providing system for distributing content data from a data providing device to a data processing device and managing the data providing device and the data processing device by a management device, wherein the management device includes an encrypted content key. Creating a key file storing data and encrypted rights document data indicating handling of the content data, distributing the created key file to the data processing device, the data providing device includes: And distributes the content file storing the content data encrypted by using the content key data and the rights certificate data stored in the distributed key file to the data processing device. And, based on the decrypted rights certificate data, Data providing system for determining the handling of the content data stored in the content file received the feed. 17. A data providing system for distributing content data from a data providing device to a data processing device, and managing the data providing device and the data processing device by a management device, wherein the management device includes an encrypted content key. Creating a key file storing data and encrypted rights document data indicating handling of the content data, the data providing device includes: a content data encrypted using the content key data; Distributes the module storing the key file received from the data processing device to the data processing device, and the data processing device decrypts the content key data and the rights document data stored in the distributed module. Based on the decrypted rights document data, the content data Data provides a system for determining treat. 18. A data providing system for distributing content data from a data providing device to a data processing device and for managing the data providing device and the data processing device by a management device, wherein the management device includes an encrypted content key. Creating a key file storing data and encrypted rights document data indicating handling of the content data, the data providing device includes: a content data encrypted using the content key data; And distributes the key file individually received to the data processing device, the data processing device decrypts the content key data and the rights document data stored in the distributed key file, and Based on the decrypted rights document data, the distribution of the distributed contents data is performed. Data provides a system for determining treat. 19. A data providing system which distributes content data from a data providing device to a data processing device, and manages the data providing device and the data processing device by a managing device, wherein the managing device has an encrypted content key. Creating a key file storing data and encrypted rights document data indicating handling of the content data, distributing the created key file to the data processing device, the data providing device includes: Distributes the content data encrypted by using the data processing device, the data processing device decrypts the content key data and the right certificate data stored in the distributed key file, and Based on the decrypted rights certificate data, the distributed contents data Data provides a system for determining the handling of the data. 20. A data providing system for distributing content data from a data providing device to a data processing device and managing the data providing device and the data processing device by a management device, wherein the management device includes an encrypted content key. Data and encrypted rights document data indicating the handling of the content data, wherein the data providing device encrypts the content data using the content key data and the encryption received from the management device. The distributed content key data and the encrypted rights document data are individually distributed to the data processing device, and the data processing device decrypts the distributed content key data and the rights document data. Based on the decrypted rights document data, the distributed content file Data providing system for determining the handling of the content data stored. 21. In a data providing system for distributing content data from a data providing device to a data processing device and managing the data providing device and the data processing device by a management device, the management device includes an encrypted content key. Data and encrypted rights document data indicating the handling of the content data are created and distributed to the data processing device, the data providing device converts the content data encrypted using the content key data into Distributed to the data processing device, the data processing device decrypts the distributed content key data and the rights document data, and, based on the decrypted rights document data, A data provision system that determines handling. 22. A data providing system having a data providing device, a data distributing device, a data processing device, and a managing device, wherein the managing device has encrypted content key data and an encrypted content key indicating handling of the content data. Creating a key file storing the rights certificate data, the data providing device provides the content data encrypted using the content key data, and the data distribution device transmits the provided content data. Distributes the data to the data processing device, the data processing device decrypts the content key data and the rights document data stored in the key file, and, based on the decrypted rights document data, A data providing system that determines how to handle data. 23. The data providing device, comprising: content data encrypted using content key data; the encrypted content key data; and encrypted rights document data indicating handling of the content data. Is provided to the data distribution device, and the data distribution device stores the encrypted content data, the content key data, and the rights certificate stored in the provided first module. Distributing a second module storing data to the data processing device, the data processing device decrypts the content key data and the rights certificate data stored in the distributed second module, 23. The method according to claim 22, wherein the handling of the content data is determined based on the decrypted right form data. Over data providing system. 24. The data distribution device creates the second module including the received first module, and distributes the created second module to the data processing device. 23. The data providing system according to 22. 25. The data providing system according to claim 22, wherein the data distribution device distributes the second module further storing price data indicating a price of the content data to the data processing device. 26. The data providing system according to claim 25, wherein the data distribution device determines the price data based on a wholesale price determined for the content data by the data providing device. 27. The data providing device further stores signature data for verifying a creator and a sender of at least one of the content data, the content key data, and the rights data. 23. The data providing system according to claim 22, wherein the first module is provided to the data distribution device. 28. The data distribution device further stores signature data for verifying a creator and a sender of at least one of the content data, the content key data, and the rights data. The data providing system according to claim 22, wherein the second module is provided to the data processing device. 29. The data processing device determines at least one of a purchase mode and a use mode of the distributed content data based on the rights document data, and determines at least one of the determined purchase mode and use mode. The management device transmits history data indicating the history of the to the management device, based on the received history data,
23. A profit distribution process for distributing a profit obtained through the purchase and the use of the content data in the data processing device to a person who is involved in the data providing device and the data distribution device. Data providing system. 30. The data processing device transmits distribution history data relating to the distribution of the data distribution device to the data distribution device, and the data distribution device transmits the distribution history data based on the distribution history data. 23. The data providing system according to claim 22, wherein a billing process is performed with respect to. 31. Content data is provided from a data providing device to a data distribution device, content data is distributed from the data distribution device to a data processing device, and a management device controls the data providing device, the data distribution device, and the data processing. In a data providing system for managing a device, the management device creates a key file storing encrypted content key data and encrypted rights document data indicating handling of the content data, Providing, to the data distribution device, a first module storing a content file storing content data encrypted using the content key data and the key file received from the management device; The distribution device receives the provided content file and Distributing a second module storing the key file to the data processing device, wherein the data processing device decrypts the content key data and the rights certificate data stored in the distributed second module. And a data providing system for determining handling of the content data stored in the distributed second module based on the decrypted rights document data. 32. The data providing apparatus generates the content key data and the rights document data and transmits the generated contents key data and the rights document data to the management device. The management device generates the content key data and the rights document data based on the received content key data and the rights document data. 32. The data providing system according to claim 31, wherein the key file is created, and the received content key data and the rights document data are registered. 33. The data providing device creates signature data for verifying at least one of a creator and a provider of the content file and a validity of the provider of the key file. The data providing system according to claim 31, wherein the first module further storing signature data is distributed to the data processing device. 34. The data distribution device generates signature data for verifying at least one of a creator and a distributor of the content file and a distributor of the key file, and The data providing system according to claim 31, wherein the second module further storing signature data is distributed to the data processing device. 35. The data providing device creates the signature data using its own secret key data, and the data processing device uses the public key data corresponding to the secret key data to generate the signature data. The data providing system according to claim 33, which verifies correctness. 36. The data providing device distributes the module further storing public key certificate data for certifying the validity of the public key data to the data processing device, wherein the data processing device distributes the distribution. The data providing system according to claim 33, wherein the signature data is verified using public key data stored in the received public key certificate data. 37. The management device, which distributes public key certificate data for certifying the validity of the public key data to the data processing device, wherein the data processing device transmits the public key certificate data to the distributed public key certificate data. The data providing system according to claim 36, wherein the signature data is verified using stored public key data. 38. The data distribution device creates the signature data using its own secret key data, and the data processing device uses the public key data corresponding to the secret key data to generate the signature data. The data providing system according to claim 33, which verifies correctness. 39. The data distribution device distributes the module further storing public key certificate data for certifying the validity of the public key data to the data processing device, and the data processing device transmits the module to the data processing device. The data providing system according to Claim 38, wherein the signature data is verified using public key data stored in the received public key certificate data. 40. The management device, wherein the management device distributes public key certificate data for certifying the validity of the public key data to the data processing device, wherein the data processing device transmits the public key certificate data to the distributed public key certificate data. The data providing system according to claim 38, wherein the signature data is verified using stored public key data. 41. The data processing device determines at least one of a purchase mode and a use mode of the distributed content data based on the rights document data, and determines at least one of the determined purchase mode and use mode. The management device transmits history data indicating the history of the to the management device, based on the received history data,
32. A profit distribution process for distributing a profit obtained through the purchase and the use of the content data in the data processing device to persons involved in the data providing device and the data distribution device. Data providing system. 42. The data providing system according to claim 31, wherein the data distribution device distributes the second module storing price data indicating a price of the content data to the data processing device. 43. The data providing system according to claim 42, wherein said management device registers said price data received from said data distribution device. 44. The data processing device, comprising:
32. The data providing system according to claim 31, further comprising a module in which predetermined data and data being processed stored in the internal memory are difficult to monitor and falsify from outside. 45. Content data is provided from a data provision device to a data distribution device, content data is distributed from the data distribution device to a data processing device, and a management device controls the data provision device, the data distribution device and the data processing. In the data providing system for managing the device, the management device creates a key file storing encrypted content key data and encrypted rights document data indicating handling of the content data, Providing a first module storing a content file including content data encrypted using the content key data and a key file received from the management device to the data distribution device, wherein the data distribution device And a second storing the provided content file. Distributing a module to the data processing device; the data processing device decrypts the content key data and the rights document data stored in the distributed second module; A data providing system for determining handling of the content data stored in the distributed second module based on the distribution. 46. Content data is provided from a data providing device to a data distribution device, content data is distributed from the data distribution device to a data processing device, and the management device controls the data providing device, the data distribution device, and the data processing. In a data providing system for managing a device, the management device creates a key file storing encrypted content key data and encrypted rights document data indicating handling of the content data, Distributes, to the data distribution device, a content file storing content data encrypted using the content key data and the key file received from the management device, respectively, Received the content file and the key file To the data processing device, the data processing device decrypts the content key data and the rights document data stored in the distributed key file, based on the decrypted rights document data, A data providing system for determining handling of content data stored in the distributed content file. 47. The data providing system according to claim 46, wherein said content file and said key file include data for specifying a mutual correspondence. 48. A data providing system which distributes content data from a data providing device to a data processing device, and manages the data providing device and the data processing device by a managing device, wherein the managing device has an encrypted content key. Creating a key file storing data and encrypted rights document data indicating handling of the content data, distributing the created key file to the data processing device, the data providing device includes: Providing the content file storing the content data encrypted by using the data distribution device, the data distribution device distributes the provided content file to the data processing device, and the data processing device The key file stored in the distributed key file. A data providing system that decrypts the content key data and the rights document data and determines, based on the decrypted rights document data, how to handle the content data stored in the distributed content file. 49. The data providing system according to claim 48, wherein said content file and said key file include data for specifying mutual correspondence. 50. Content data is provided from a data provision device to a data distribution device, content data is distributed from the data distribution device to a data processing device, and the management device controls the data provision device, the data distribution device, and the data processing. In a data providing system for managing a device, the management device creates a key file storing encrypted content key data and encrypted rights document data indicating handling of the content data, Provides to the data distribution device a first module that stores the content data encrypted using the content key data and the key file received from the management device, wherein the data distribution device comprises: The stored content data and the key file Is distributed to the data processing device, the data processing device decrypts the content key data and the rights document data stored in the distributed second module, and the decrypted rights document data A data providing system that determines handling of the content data stored in the distributed second module based on the distribution. 51. Content data is provided from a data providing device to a data distribution device, content data is distributed from the data distribution device to a data processing device, and the management device controls the data providing device, the data distribution device, and the data processing. In a data providing system for managing a device, the management device creates a key file storing encrypted content key data and encrypted rights document data indicating handling of the content data, Distributes the content data encrypted using the content key data and the key file received from the management device individually to the data distribution device, wherein the data distribution device distributes the distributed content. Distributing data and the key file separately to the data distribution device The data processing device decrypts the content key data and the rights data stored in the distributed key file, and handles the distributed contents data based on the decrypted rights data. A data provision system that determines 52. A data providing system which distributes content data from a data providing device to a data processing device, and manages the data providing device and the data processing device by a managing device, wherein the managing device has an encrypted content key. Creating a key file storing data and encrypted rights document data indicating handling of the content data, distributing the created key file to the data processing device, the data providing device includes: Providing the encrypted content data to the data distribution device, the data distribution device distributes the provided content data to the data processing device, and the data processing device receives the distribution. The content key data and the rights certificate stored in the key file A data providing system that decrypts data and determines handling of the distributed content data based on the decrypted rights document data. 53. Content data is provided from a data providing device to a data distribution device, content data is distributed from the data distribution device to a data processing device, and a management device controls the data providing device, the data distribution device, and the data processing. In a data providing system for managing an apparatus, the management apparatus provides the data providing apparatus with encrypted content key data and encrypted rights document data indicating handling of the content data, Separately distributes the content data encrypted using the content key data and the encrypted content key data and the encrypted rights document data received from the management device to the data distribution device. The data distribution device is configured to store the distributed content data The encrypted content key data and the encrypted rights document data are individually distributed to the data distribution device, and the data processing device decrypts the distributed content key data and the rights document data. And a data providing system for determining handling of the distributed content data based on the decrypted rights document data. 54. Content data is provided from a data providing device to a data distribution device, content data is distributed from the data distribution device to a data processing device, and a management device controls the data providing device, the data distribution device, and the data processing. In a data providing system for managing a device, the management device distributes encrypted content key data and encrypted rights document data indicating handling of the content data to the data processing device, and the data providing device Provides the content data encrypted using the content key data to the data distribution device, the data distribution device distributes the provided content data to the data processing device, and the data processing device Is the distributed content key data and the rights document A data providing system that decrypts data and determines handling of the distributed content data based on the decrypted rights document data. 55. A data providing system comprising a data providing device, a data distribution device, a management device, and a data processing device, wherein the data providing device provides master source data of content to the management device; Manages the data providing device, the data distribution device and the data processing device, encrypts the provided master source data using content key data to create content data, and stores a content file storing the content data. Create and create a key file that stores the encrypted content key data and encrypted rights document data indicating the handling of the content data, and sends the content file and the key file to the data distribution device. Providing, the data distribution device comprising: Distributing the received content file and the key file to the data processing device, the data processing device decrypts the content key data and the rights certificate data stored in the distributed key file, A data providing system for determining handling of content data stored in the distributed content file based on the decrypted rights document data. 56. The management device creates a first module storing the content file and the key file, and provides the first module to the data distribution device, wherein the data distribution device 56. The data providing system according to claim 55, wherein a second module storing the content file and the key file stored in one module is generated, and the second module is distributed to the data processing device. 57. The management device has at least one database among a database for storing and managing the content file, a database for storing and managing the key file, and a database for storing and managing the rights certificate data. 56. The data providing system according to claim 55, wherein at least one of the content file, the key file, and the license data is managed centrally using a content identifier uniquely assigned to the content data. 58. A data providing system having a data providing device, a data distribution device, a management device, and a data processing device, wherein the data providing device provides master source data of content to the management device, Manages the data providing device, the data distribution device and the data processing device, encrypts the provided master source data using content key data to create content data, and stores a content file storing the content data. Creating and encrypting the content key data, and creating a key file storing encrypted rights document data indicating the handling of the content data, providing the content file to the data distribution device, Providing a key file to the data processing device; The data distribution device distributes the provided content file to the data processing device, and the data processing device transmits the content key data and the rights certificate data stored in the provided key file. A data providing system for decrypting and determining handling of content data stored in the distributed content file based on the decrypted rights document data. 59. A data providing system comprising a data providing device, a data distribution device, a management device, and a data processing device, wherein the data providing device stores the content file storing the encrypted content data using the content key data. Providing the management device, the management device manages the data providing device, the data distribution device and the data processing device, the encrypted content key data, and the encrypted content data indicating the handling of the content data Creating a key file storing the rights certificate data, and providing the content file provided from the data providing device and the created key file to the data distribution device; The received content file and the key file The data processing device decrypts the content key data and the rights document data stored in the distributed key file, and performs the distribution based on the decrypted rights document data. A data providing system for determining handling of content data stored in a received content file. 60. The management device creates a first module storing the content file and the key file, and provides the first module to the data distribution device, wherein the data distribution device The data providing system according to claim 59, wherein a second module storing the content file and the key file stored in one module is generated, and the second module is distributed to the data processing device. 61. A data providing system comprising a data providing device, a data distribution device, a management device, and a data processing device, wherein the data providing device stores the content file storing the encrypted content data using the content key data. Providing the management device, the management device manages the data providing device, the data distribution device and the data processing device, the encrypted content key data, and the encrypted content data indicating the handling of the content data Creating a key file storing the rights certificate data, providing the content file provided from the data providing device to the data distribution device, providing the created key file to the data processing device, The distribution device stores the received content file in the data file. The data processing device decrypts the content key data and the rights document data stored in the provided key file, and distributes the content key data and the rights document data based on the decrypted rights document data. A data providing system for determining handling of content data stored in the received content file. 62. A data providing system having a data providing device, a data distribution device, a management device, a database device, and a data processing device, wherein the data providing device encrypts content data using content key data, and performs the encryption. Creating a content file that stores the generated content data, storing the created content file and a key file provided from the management device in the database device, wherein the management device stores the encrypted content key data and Creating a key file storing encrypted rights document data indicating the handling of the content data, providing the created key file to the data providing device, wherein the data distribution device obtains the key file from the database device. Said content file and key Distributes the file to the data processing device, the data processing device decrypts the content key data and the rights document data stored in the distributed key file, and, based on the decrypted rights document data, A data providing system for determining handling of content data stored in the distributed content file. 63. A data providing system having a data providing device, a data distribution device, a management device, a database device, and a data processing device, wherein the data providing device encrypts content data using content key data, and Creating a content file that stores the encrypted content data, storing the created content file in the database device, the management device encrypts the encrypted content key data, and encrypts the content data. A key file storing the rights document data, and providing the created key file to the data distribution device, wherein the data distribution device receives the content file obtained from the database device and the data distribution device. Before receiving the provided key file The data processing device distributes the content key data and the rights document data stored in the distributed key file, and based on the decrypted rights document data, distributes the content key data and the rights document data. A data providing system for determining handling of content data stored in the received content file. 64. A data providing system having a data providing device, a data distribution device, a management device, a database device, and a data processing device, wherein the data providing device encrypts content data using content key data, and Creating a content file that stores the encrypted content data, storing the created content file in the database device, the management device encrypts the encrypted content key data, and encrypts the content data. Creating a key file storing the rights document data and providing the created key file to the data processing device, wherein the data distribution device distributes the content file obtained from the database device to the data processing device And wherein the data processing device comprises: Decrypting the content key data and the rights data stored in the provided key file, and handling the content data stored in the distributed contents file based on the decrypted rights data; Data providing system to decide. 65. A data providing system having a plurality of data providing devices, a data distribution device, a plurality of management devices, a database device, and a data processing device, wherein the data providing device encrypts content data using content key data. Creating a content file storing the encrypted content data, storing the created content file and the corresponding key file provided from the management device in the database device, the management device For the content data provided by the data providing device, create a key file storing the encrypted content key data and encrypted rights document data indicating the handling of the content data, and create the created key file. To the corresponding data providing device The data distribution device distributes the content file and the key file obtained from the database device to the data processing device, and the data processing device transmits the content key stored in the distributed key file. A data providing system that decrypts data and the rights document data and determines, based on the decrypted rights document data, how to handle content data stored in the distributed content file. 66. A data providing system having a plurality of data providing devices, a data distribution device, a plurality of management devices, a database device, and a data processing device, wherein the data providing device encrypts content data using content key data. Creating a content file storing the encrypted content data, storing the created content file in the database device, the management device encrypts the content data provided by the corresponding data providing device, Creating a key file storing the content key data and encrypted rights document data indicating handling of the content data, and providing the created key file to the data distribution device; , Obtained from the database device A content file and a key file provided from the management device are distributed to the data processing device, and the data processing device distributes the content key data and the rights certificate stored in the distributed key file. A data providing system for decrypting data and determining handling of content data stored in the distributed content file based on the decrypted rights document data. 67. A data providing system having a plurality of data providing devices, a data distribution device, a plurality of management devices, a database device and a data processing device, wherein the data providing device encrypts content data using content key data. Creating a content file storing the encrypted content data, storing the created content file in the database device, the management device encrypts the content data provided by the corresponding data providing device, Creating a key file storing the content key data and encrypted rights document data indicating handling of the content data, and providing the created key file to the data processing device; , Obtained from the database device Distributes the content file to the data processing device, the data processing device decrypts the content key data and the rights document data stored in the provided key file, and, based on the decrypted rights document data, A data providing system for determining handling of content data stored in the distributed content file. 68. A data providing system having a plurality of data providing devices, a data distribution device, a plurality of managing devices, a database device, and a data processing device, wherein the data providing device corresponds to a master source of content data. The content file and the key file received from the management device are stored in the database, the management device encrypts the master source received from the corresponding data providing device using content key data, A content file storing the encrypted content data is created, and for the corresponding content data provided by the data providing device, the encrypted content key data and an encrypted rights document indicating the handling of the content data Key file that stores data File, and sends the created content file and the created key file to the corresponding data providing device.The data distribution device sends the content file and the key file obtained from the database device to the data processing device. The data processing device decrypts the content key data and the rights document data stored in the distributed key file, and based on the decrypted rights document data, distributes the distributed contents. A data providing system that determines the handling of content data stored in a file. 69. A data providing system having a plurality of data providing devices, a data distribution device, a plurality of managing devices, a database device, and a data processing device, wherein the data providing device corresponds to a master source of content data. The content file received from the management device is stored in the database, and the management device encrypts the master source received from the corresponding data providing device using content key data, and performs the encryption. A content file storing content data is created, and the created content file is sent to the data providing device, and for the content data provided by the corresponding data providing device, the encrypted content key data and the content data are encrypted. Showing the handling of A key file storing the generated rights document data, and sending the created key file to the corresponding data distribution device. The data distribution device includes: the content file obtained from the database device; and the management device. And distributes the provided key file to the data processing device, and the data processing device decrypts the content key data and the rights document data stored in the distributed key file, and A data providing system for determining handling of the content data stored in the distributed content file based on the obtained rights document data. 70. A data providing system having a plurality of data providing devices, a data distribution device, a plurality of managing devices, a database device and a data processing device, wherein the data providing device corresponds to a master source of content data. The content file received from the management device is stored in the database, and the management device encrypts the master source received from the corresponding data providing device using content key data, and performs the encryption. A content file storing content data is created, and the created content file is sent to the data providing device, and for the content data provided by the corresponding data providing device, the encrypted content key data and the content data are encrypted. Showing the handling of Creating a key file storing the obtained rights document data and providing the created key file to the data processing device, wherein the data distribution device sends the content file obtained from the database device to the data processing device. The data processing device decrypts the content key data and the rights data stored in the provided key file, and, based on the decrypted rights data, distributes the distributed contents. A data providing system that determines the handling of content data stored in a file. 71. A data providing method for distributing content data from a data providing device to a data processing device, and managing the data providing device and the data processing device by a management device, wherein the management device includes an encrypted content key. Creating a key file storing data and encrypted rights document data indicating the handling of the content data, the data providing device provides the content data encrypted using the content key data, A data providing method, wherein the data processing device decrypts the content key data and the rights document data stored in the key file, and determines handling of the content data based on the decrypted rights document data. 72. A data providing method for distributing content data from a data providing device to a data processing device, and managing the data providing device and the data processing device by a management device, wherein the management device includes an encrypted content key. Creating a key file storing data and encrypted rights document data indicating handling of the content data, distributing the created key file from the management device to the data providing device, using the content key data; The module that stores the content file storing the encrypted content data and the key file distributed from the management device is distributed from the data providing device to the data processing device, and in the data processing device, Before being stored in the module that received the distribution A data providing method for decrypting the content key data and the rights data, and determining handling of the contents data based on the decrypted rights data. 73. A data providing method for distributing content data from a data providing device to a data processing device and managing the data providing device and the data processing device by a management device, wherein the management device includes an encrypted content key. Creating a key file storing data and encrypted rights document data indicating the handling of the content data, wherein in the data providing device, the content data encrypted using the content key data; A module storing a content file including a key file received from the server is distributed to the data processing device. In the data processing device, the content key data and the rights certificate data stored in the module received are distributed. Decrypted, and Zui, a data providing method for determining the handling of said content data. 74. A data providing method for distributing content data from a data providing device to a data processing device and managing the data providing device and the data processing device by a managing device, wherein the managing device encrypts the encrypted content key. Create a key file storing data and encrypted rights document data indicating handling of the content data, distribute the created key file from the management device to the data providing device, and use the content key data. The content file storing the encrypted content data and the key file received from the management device are individually distributed from the data providing device to the data processing device, and the distribution is received by the data processing device. The content key data stored in the key file A data providing method for decrypting the rights document data and the rights document data, and determining handling of the content data stored in the distributed content file based on the decrypted rights document data. 75. A data providing method for distributing content data from a data providing device to a data processing device, and managing the data providing device and the data processing device by a management device, wherein the management device includes an encrypted content key. Create a key file storing data and encrypted rights document data indicating the handling of the content data, distribute the created key file from the management device to the data processing device, and use the content key data. And distributing the content file storing the encrypted content data from the data providing device to the data processing device, wherein, in the data processing device, the content key data stored in the distributed key file and the content key data and Decrypt the rights document data and decrypt the right A data providing method for determining handling of content data stored in the distributed content file based on the book data. 76. A data providing method for distributing content data from a data providing device to a data processing device and managing the data providing device and the data processing device by a management device, wherein the management device encrypts the encrypted content key. Creating a key file storing data and encrypted rights document data indicating the handling of the content data, wherein in the data providing device, the content data encrypted using the content key data; And distributing the module storing the key file received from the data processing device to the data processing device, wherein the data processing device decrypts the content key data and the rights certificate data stored in the distributed module. Based on the decrypted rights certificate data, the content Data provides a method for determining the handling of Tsudeta. 77. A data providing method for distributing content data from a data providing device to a data processing device and managing the data providing device and the data processing device by a management device, wherein the management device includes an encrypted content key. Creating a key file storing data and encrypted rights document data indicating the handling of the content data, wherein in the data providing device, the content data encrypted using the content key data; And distributes the key file individually received to the data processing device, and in the data processing device, decrypts the content key data and the rights certificate data stored in the distributed key file, Based on the decrypted rights certificate data, the content Data provides a method for determining the handling of Tsudeta. 78. A data providing method for distributing content data from a data providing device to a data processing device and managing the data providing device and the data processing device by a management device, wherein the management device includes an encrypted content key. Creating a key file storing data and encrypted rights data indicating the handling of the content data; distributing the created key file to the data processing device; Distributing the encrypted content data to the data processing device using the data processing device, the data processing device decrypts the content key data and the rights certificate data stored in the distributed key file, Before receiving the distribution based on the decrypted rights document data Data provides a method for determining the handling of the content data. 79. A data providing method for distributing content data from a data providing device to a data processing device and managing the data providing device and the data processing device by a management device, wherein the management device encrypts the encrypted content key. Data and encrypted rights document data indicating the handling of the content data are created. In the data providing device, the content data encrypted using the content key data and the encryption received from the management device are generated. The distributed content key data and the encrypted rights document data are separately distributed to the data processing device, and the data processing device decrypts the distributed content key data and the rights document data in the data processing device. , Based on the decrypted rights document data, Data providing method for determining the handling of the content data stored in Ntsu file. 80. A data providing method for distributing content data from a data providing device to a data processing device and managing the data providing device and the data processing device by a management device, wherein the management device has an encrypted content key. Data and encrypted rights document data indicating the handling of the content data are created and distributed to the data processing device, and in the data providing device, the content data encrypted using the content key data is Distributed to the data processing device, the data processing device decrypts the distributed content key data and the rights document data, and, based on the decrypted rights document data, decrypts the distributed content data. Data provision method to determine handling. 81. A data providing method using a data providing device, a data distribution device, a data processing device, and a management device, wherein the management device uses an encrypted content key data and an encrypted content key indicating handling of the content data. Creating a key file storing the content data and the encrypted content data, providing the content data encrypted using the content key data from the data providing device to the data distributing device, Distributes the obtained content data to the data processing device, the data processing device decrypts the content key data and the rights document data stored in the key file, and, based on the decrypted rights document data, A data provision method that determines the handling of distributed content data. 82. Content data is provided from a data providing device to a data distribution device, content data is distributed from the data distribution device to a data processing device, and the data providing device, the data distribution device and the data processing are managed by a management device. In the data providing method for managing an apparatus, the management apparatus creates a key file storing encrypted content key data and encrypted rights document data indicating handling of the content data. A first file that distributes a file from the management device to the data providing device, and stores a content file storing content data encrypted using the content key data and the key file received from the management device. Distributing a module from the data providing device to the data A second module that stores the provided content file and the key file from the data distribution device to the data processing device; and wherein the data processing device provides the second module that has received the distribution. Decrypting the content key data and the rights document data stored in the second module, and handling the content data stored in the distributed second module based on the decrypted rights document data. The data provision method to be determined. 83. Content data is provided from a data providing device to a data distribution device, content data is distributed from the data distribution device to a data processing device, and a management device controls the data providing device, the data distribution device, and the data processing. In the data providing method for managing a device, the management device creates a key file storing encrypted content key data and encrypted rights document data indicating handling of the content data; , Providing a first module storing a content file including content data encrypted using the content key data and a key file received from the management device to the data distribution device, wherein the data distribution device , The provided content file Distributing the stored second module to the data processing device, and in the data processing device, decrypting the content key data and the rights document data stored in the distributed second module, and performing the decryption A data providing method for determining handling of the content data stored in the second module to which the distribution has been made, based on the obtained right certificate data. 84. Content data is provided from a data providing device to a data distribution device, content data is distributed from the data distribution device to a data processing device, and the data providing device, the data distribution device, and the data processing are performed by a management device. In the data providing method for managing an apparatus, the management apparatus creates a key file storing encrypted content key data and encrypted rights document data indicating handling of the content data, Distributing a file from the management device to the data providing device, and separately providing the content file storing the content data encrypted using the content key data and the key file received from the management device to the data providing device From the device to the data distribution device, the distribution And distributes the received content file and the key file individually from the data distribution device to the data distribution device, wherein, in the data processing device, the content key data stored in the distributed key file and A data providing method for decrypting the rights document data and determining, based on the decrypted rights document data, handling of the content data stored in the distributed content file. 85. A data providing method for distributing content data from a data providing device to a data processing device and managing the data providing device and the data processing device by a management device, wherein the management device has an encrypted content key. Create a key file storing data and encrypted rights document data indicating the handling of the content data, distribute the created key file from the management device to the data processing device, and use the content key data. Providing the content file storing the encrypted content data from the data providing device to the data distribution device; distributing the provided content file from the data distribution device to the data processing device; In the apparatus, the keef received the distribution Data decryption method for decrypting the content key data and the rights document data stored in the file and determining the handling of the content data stored in the distributed content file based on the decrypted rights document data . 86. Content data is provided from a data providing device to a data distribution device, content data is distributed from the data distribution device to a data processing device, and the management device controls the data providing device, the data distribution device, and the data processing. In the data providing method for managing a device, the management device creates a key file storing encrypted content key data and encrypted rights document data indicating handling of the content data; In the data distribution device, a first module storing content data encrypted using the content key data and the key file received from the management device is provided to the data distribution device. The provided content data and the key file Is distributed to the data processing device, and the data processing device decrypts the content key data and the rights document data stored in the distributed second module, and A data providing method for determining handling of the content data stored in the distributed second module based on the decrypted rights document data. 87. Content data is provided from a data providing device to a data distribution device, content data is distributed from the data distribution device to a data processing device, and the data providing device, the data distribution device, and the data processing are managed by a management device. In the data providing method for managing a device, the management device creates a key file storing encrypted content key data and encrypted rights document data indicating handling of the content data; The content data encrypted using the content key data and the key file received from the management device are individually distributed to the data distribution device, and the distributed content is distributed by the data distribution device. Data and the key file separately from the data distribution The data processing device decrypts the content key data and the rights document data stored in the distributed key file, and receives the distribution based on the decrypted rights document data. Data provision method for deciding how to handle content data. 88. A data providing method for distributing content data from a data providing device to a data processing device and managing the data providing device and the data processing device by a management device, wherein the management device encrypts the encrypted content key. Creating a key file storing data and encrypted rights data indicating the handling of the content data; distributing the created key file to the data processing device; Providing the encrypted content data to the data distribution device, distributing the provided content data to the data processing device, and receiving the distribution in the data processing device. The content key data stored in the key file A data providing method for decrypting the data and the rights document data, and determining handling of the distributed content data based on the decrypted rights document data. 89. Content data is provided from a data providing device to a data distribution device, content data is distributed from the data distribution device to a data processing device, and the management device controls the data providing device, the data distribution device, and the data processing. A data providing method for managing an apparatus, wherein the managing apparatus provides the data providing apparatus with encrypted content key data and encrypted rights document data indicating handling of the content data; The content data encrypted using the content key data and the encrypted content key data and the encrypted rights document data received from the management device are individually distributed to the data distribution device. The data distribution device receives the distributed content. Data and the encrypted content key data and the encrypted rights document data are individually distributed to the data distribution device, and the distributed content key data and the rights document are distributed by the data processing device. A data providing method for decrypting data and determining handling of the distributed content data based on the decrypted rights document data. 90. Providing content data from a data providing device to a data distribution device, distributing content data from the data distribution device to a data processing device, and managing the data providing device, the data distribution device, and the data processing by a management device In the data providing method for managing a device, the management device distributes encrypted content key data and encrypted rights document data indicating handling of the content data to the data processing device; , Providing content data encrypted using the content key data to the data distribution device, wherein the data distribution device distributes the provided content data to the data processing device, The content key data and the distributed And a data providing method for decrypting the rights data and determining handling of the distributed content data based on the decrypted rights data. 91. A data providing method using a data providing device, a data distributing device, a managing device, and a data processing device, wherein the data providing device provides master source data of content to the managing device; A content file that manages the data providing device, the data distribution device, and the data processing device, encrypts the provided master source data using content key data, creates content data, and stores the content data. Creating a key file storing the encrypted content key data and encrypted rights document data indicating handling of the content data, and providing the content file and the key file to the data distribution device. The data distribution device receives the provision. And distributes the content file and the key file to the data processing device, and the data processing device decrypts the content key data and the rights certificate data stored in the distributed key file, and A data providing method for determining handling of the content data stored in the distributed content file based on the obtained rights document data. 92. A data providing method using a data providing device, a data distribution device, a management device, and a data processing device, wherein the data providing device provides master source data of content to the management device, and the management device A content file that manages the data providing device, the data distribution device, and the data processing device, encrypts the provided master source data using content key data, creates content data, and stores the content data. Creating a key file storing the encrypted content key data and encrypted rights document data indicating the handling of the content data, providing the content file to the data distribution device, Providing the key file to the data processing device; A supply device that distributes the provided content file to the data processing device, wherein the data processing device decrypts the content key data and the right certificate data stored in the provided key file. And a data providing method for determining handling of the content data stored in the distributed content file based on the decrypted rights document data. 93. A data providing method using a data providing device, a data distribution device, a management device, and a data processing device, wherein the data providing device stores a content file storing encrypted content data using content key data. Providing to the management device, the management device manages the data providing device, the data distribution device and the data processing device, the encrypted content key data, and the encrypted data indicating the handling of the content data. Creating a key file storing the rights document data, and providing the content file provided from the data providing device and the created key file to the data distribution device, wherein the data distribution device comprises: The provided content file and the key file are subjected to the data processing. The data processing device decrypts the content key data and the rights document data stored in the distributed key file, and receives the distribution based on the decrypted rights document data. Data providing method for deciding how to handle content data stored in a stored content file. 94. A data providing method using a data providing device, a data distribution device, a management device, and a data processing device, wherein the data providing device stores a content file storing content data encrypted using content key data. Providing to the management device, the management device manages the data providing device, the data distribution device and the data processing device, the encrypted content key data, and the encrypted data indicating the handling of the content data. Creating a key file storing the rights document data, providing the content file provided from the data providing device to the data distribution device, providing the created key file to the data processing device, The data distribution device stores the provided content file in the data The data processing device decrypts the content key data and the rights document data stored in the provided key file, and performs the distribution based on the decrypted rights document data. A data providing method for determining handling of content data stored in a received content file. 95. A data providing method using a data providing device, a data distribution device, a management device, a database device, and a data processing device, wherein the data providing device encrypts content data using content key data, and Creating a content file storing the encrypted content data, storing the created content file and a key file provided by the management device in the database device, wherein the management device encrypts the encrypted content key data And a key file storing encrypted rights document data indicating the handling of the content data, and providing the created key file to the data providing device. The obtained content file and key file And distributes the content key data and the rights document data stored in the distributed key file, based on the decrypted rights document data. And a data providing method for determining handling of content data stored in the distributed content file. 96. A data providing method using a data providing device, a data distribution device, a management device, a database device, and a data processing device, wherein the data providing device encrypts content data using content key data, and Creating a content file storing the encrypted content data, storing the created content file in the database device, the management device encrypts the content key data and an encryption indicating handling of the content data. Creating a key file storing the obtained rights document data, and providing the created key file to the data distribution device, wherein the data distribution device includes the content file obtained from the database device and the data distribution device And the key file provided by The data processing device decodes the content key data and the rights document data stored in the distributed key file, and, based on the decrypted rights document data, distributes the content key data and the rights document data. A data providing method for determining handling of content data stored in the received content file. 97. A data providing method using a data providing device, a data distribution device, a management device, a database device, and a data processing device, wherein the data providing device encrypts content data using content key data, and Creating a content file storing the encrypted content data, storing the created content file in the database device, the management device encrypts the content key data and an encryption indicating handling of the content data. Creating a key file storing the obtained rights document data and providing the created key file to the data processing device, wherein the data distribution device sends the content file obtained from the database device to the data processing device. Distributing the data processing device, providing Decrypts the content key data and the rights document data stored in the received key file, and determines handling of the content data stored in the distributed content file based on the decrypted rights document data How to provide data. 98. A data providing method using a plurality of data providing devices, a data distribution device, a plurality of management devices, a database device, and a data processing device, wherein the data providing device encrypts content data using content key data. Creating a content file storing the encrypted content data, storing the created content file and the corresponding key file provided from the management device in the database device, wherein the management device For the content data provided by the data providing device, create a key file storing the encrypted content key data and encrypted rights document data indicating handling of the content data, and the created key file To the corresponding data providing device The data distribution device distributes the content file and the key file obtained from the database device to the data processing device, wherein the data processing device stores the content key data stored in the distributed key file. And a data providing method for decrypting the rights document data and determining, based on the decrypted rights document data, handling of the content data stored in the distributed content file. 99. A data providing method using a plurality of data providing devices, a data distribution device, a plurality of management devices, a database device and a data processing device, wherein the data providing device encrypts content data using content key data. Creating a content file storing the encrypted content data, storing the created content file in the database device, and encrypting the content data provided by the corresponding data providing device. Creating a key file storing the obtained content key data and encrypted entitlement data indicating the handling of the content data, providing the created key file to the data distribution device, Is the controller obtained from the database device. Content file and a key file provided from the management device, the data processing device distributes the content key data and the rights certificate stored in the distributed key file. A data providing method for decrypting data and determining handling of content data stored in the distributed content file based on the decrypted rights document data. 100. A data providing method using a plurality of data providing devices, a data distribution device, a plurality of management devices, a database device, and a data processing device, wherein the data providing device encrypts content data using content key data. Creating a content file storing the encrypted content data, storing the created content file in the database device, and encrypting the content data provided by the corresponding data providing device. Creating a key file storing the obtained content key data and encrypted rights document data indicating handling of the content data, and providing the created key file to the data processing device; Is the copy obtained from the database device. Distributing the content file to the data processing device, the data processing device decrypts the content key data and the rights document data stored in the provided key file, and based on the decrypted rights document data A data providing method for determining handling of content data stored in the distributed content file. 101. A data providing method using a plurality of data providing devices, a data distribution device, a plurality of managing devices, a database device and a data processing device, wherein the data providing device manages a master source corresponding to content data. Providing to the device, storing the content file and the key file received from the management device in the database, the management device encrypts the master source received from the corresponding data providing device using content key data, A content file storing the encrypted content data is created, and for the corresponding content data provided by the data providing device, the encrypted content key data and an encrypted right indicating the handling of the content data. Key file that stores And sends the created content file and the created key file to the corresponding data providing device. The data distribution device distributes the content file and the key file obtained from the database device to the data processing device. The data processing device decrypts the content key data and the rights data stored in the distributed key file, and, based on the decrypted rights data, distributes the distributed content file. A data providing method for determining handling of content data stored in a storage device. 102. A data providing method using a plurality of data providing devices, a data distributing device, a plurality of managing devices, a database device, and a data processing device, wherein the data providing device manages a master source corresponding to content data. Providing the content file received from the management device to the database, storing the content file in the database, the management device encrypts the master source received from the corresponding data providing device using content key data, and performs the encryption. Creating a content file that stores the generated content data, sending the created content file to the data providing device, and encrypting the content key data, Data handling encryption Creating a key file storing the obtained rights document data, and sending the created key file to the corresponding data distribution device, wherein the data distribution device includes the content file obtained from the database device and the management device. And distributes the provided key file to the data processing device, and the data processing device decrypts the content key data and the rights document data stored in the distributed key file, and A data providing method for determining handling of the content data stored in the distributed content file based on the obtained rights document data. 103. A data providing method using a plurality of data providing devices, a data distributing device, a plurality of managing devices, a database device and a data processing device, wherein the data providing device manages a master source corresponding to content data. Providing the content file received from the management device to the database, storing the content file in the database, the management device encrypts the master source received from the corresponding data providing device using content key data, and performs the encryption. Creating a content file that stores the generated content data, sending the created content file to the data providing device, and encrypting the content key data, Data handling encryption Creating a key file storing the obtained rights certificate data, and providing the created key file to the data processing device, wherein the data distribution device sends the content file obtained from the database device to the data processing device. The data processing device decrypts the content key data and the rights data stored in the provided key file, and, based on the decrypted rights data, distributes the distributed contents. A data providing method for determining handling of content data stored in a file.