JP2001175748A - Electronic money, electronic use right and system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide various services by limiting the use term of electronic money and electronic use right. SOLUTION: Yearly data and monthly data are arranged in turn to regulate the use term of audience right data MP. The data are enciphered. After that, an enciphering key is arranged. Then, enciphered 32-bit audience right data MP are arranged. An ECC is arranged after the data MP. The data are repeatedly transmitted four times to improve error resistance. It is possible to offer a service different from a service without the limitation of a use term by attaching the limitation of the use term. A header distinguishes the service with the limited use term from the service without the limited use term. Consequently, it is possible to realize a system where both the service with the limited use term and the service without the limited use term are contained.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to electronic money, electronic right to use, and a system applied to, for example, music distribution.

[0002]

2. Description of the Related Art Electronic money distributed similarly to cash is about to be put to practical use. Electronic money is stored in an IC card. Electronic money includes a prepaid type and a postpaid type. Furthermore, it has been proposed to use the Internet and a personal computer (personal computer) to deposit money into an IC card from an account of a financial institution or deposit unused money into an account. Attempts have also been made to realize electronic usage rights such as telephone usage fees and tickets through IC cards, especially non-contact IC cards.

[0003] These electronic money and electronic use right have an advantage that counterfeiting is more difficult than existing magnetic stripe type cards because information is stored in an IC card. Also, as a security measure, it is considered that data exchanged between a reader / writer and an IC card is encrypted.

[0004]

Conventional electronic money and electronic right to use, like actual money, can be used without a period and usually have no expiration date. on the other hand,
In actual service systems, there are many services for a limited time or with an expiration date, but there is a problem that money cannot cope with them. In addition, electronic money and electronic usage rights that are valid indefinitely are exposed to risks such as counterfeiting, and have a problem in security.

[0005] Accordingly, an object of the present invention is to provide electronic money and an electronic right to use for a limited period of use in view of the above points, and to provide electronic money and electronic right with a limited period of use. It is an object of the present invention to provide a system capable of performing such operations.

[0006]

In order to solve the above-mentioned problems, the invention of claim 1 is an electronic money having an effect equivalent to cash, wherein the use period is limited. Electronic money.

[0007] The invention of claim 2 is an electronic right to use software such as reproduction of contents.
This is an electronic use right characterized by a limited use period.

The invention according to claim 3 is a system in which electronic money or an electronic right to use for a limited period of time is mixed with electronic money or an electronic right to use without a limited period of use.

[0009] By limiting the use period of the electronic money and the electronic use right, it is possible to provide a wide variety of services, and it is possible to generate user benefits. In addition, the security of electronic money and the right to use electronic equipment can be improved.

[0010]

DESCRIPTION OF THE PREFERRED EMBODIMENTS An embodiment in which the present invention is applied to a music distribution system EMD (Electronic Music Distribution) will be described below. First, an outline of the music distribution system will be described with reference to FIG. In FIG. 1, 101 indicates a music content provider, for example, a record company, and 102 indicates a content server. The record company 101 produces and distributes music content. In addition, compression encoding, encryption, and embedding of a watermark for music content are also performed by record companies 10.
1 does. The content server 102 stores the content produced by the record company 101.

Reference numeral 103 denotes a copyright management mechanism. For example, JASRAC (Japan Music Copyright Association) is a specific example of the copyright management mechanism 102. The record company 101 registers a right with the copyright management mechanism 103 and receives a copyright fee from the copyright management mechanism 103.

Reference numeral 104 denotes a user device having a function of reproducing distributed music content. User device 1
04 reproduces the distributed music content,
It has a function of performing playback charging processing. That is, by decrypting the encryption and decrypting the compression encoding,
The content can be played and a fee is charged for decryption. Content server 102 and user device 10
4, a content distribution company intervenes as needed, and distributes the content in the content server 102 to the user. There are several distribution means used by distribution companies. One of them is the store 105
It is. For example, a medium in which contents are recorded is distributed as an appendix of a magazine. Internet, C
Wired network 1 such as ATV (cable television)
06 is used as content distribution means. Further, a mobile phone network 107 and a satellite network 108 such as satellite broadcasting and satellite communication are also used as a means for distributing contents.

[0013] In the present invention, it does not preclude the use of a means for distributing a fee-distributed content as the above-mentioned content distributing means. Medium such as CD (Com
In the case of pactDisc (CD, registered trademark), a copyright fee for the recorded music is included in the price of the CD. The distribution may be free, and the content charged for decryption (playback) may be recorded in an area on the CD that is different from the area where the paid content is recorded.

FIG. 1 shows an extended CD 121 as one of the media distributed by the store 105. Extension C
The area 122 on the inner peripheral side of D121 is an area in which music data in the same format as that of the existing CD and whose distribution is paid and whose reproduction is free is recorded. The area 123 on the outer peripheral side is an area in which contents whose distribution is free and whose reproduction is charged are recorded. Since the content is compression-encoded, music data of a required length can be recorded even if the area 123 is small.

[0015] In the case of media such as MDs and memory cards other than CDs, areas that can be distinguished from each other include contents whose distribution is free and reproduction is free, and contents whose distribution is free and reproduction is payable. Can be recorded.
In addition, a service that distributes music content using satellite television broadcasting may be used to distribute content whose distribution is free and whose reproduction is charged.

The user device 104 can receive the content free of charge. In addition, the received content can be freely redistributed. Here, “free” does not include actual costs such as communication costs and electricity costs, and means that copyright fees are free. User device 104
Is played back, more specifically, a billing process is performed when decrypting the encryption. The listening right data 109 is used for the billing process. Listening right data 1
09 is stored in the memory in the IC card and the secure decoder. Under the control of the listening right data management company, the listening right data 109 can be rewritten by a charging charger owned by the user or a sales terminal installed in the nearest store. Listening right data 109
Is, for example, a reproducible frequency, and the user device 10
Each time 4 reproduces the content to be charged, the frequency is decremented.

In the following description, listening right data will be described as an example. However, electronic money can be used for payment for content reproduction. Further, a multipurpose IC card which can collectively handle electronic money, listening right data, and the like can be used.

Further, a settlement center 110 exists for the settlement of the price in connection with the record company 101, the copyright management mechanism 103, and the user device 104. The settlement center 110 includes an authentication / billing server 111.
Payment center 110 is a bank or credit card company 2
08, the settlement of the price is performed.

When the user device 104 requests reproduction of the received content, it requests the authentication / charging server 111 to authenticate the user device 104 (indicated by the route A1). If the user device 104 is a legitimate user and authentication is established, the authentication / billing server 111 issues a billing request to the user device 104 (path A).
2). Further, the user device 104 is connected to the settlement center 1
A payment is made with the customer 10 (route A3).

The settlement center 110 informs the authentication / billing server 111 that the billing has been made or that billing is possible, as shown by the route A4, and requests the content server 102 for the content. (Path A5). The content server 102 passes the key data for decrypting the encryption to the authentication / billing server 111 (path A6). The authentication / billing server 111 passes the key data to the user device 104 (path A7). The user device 104 can decrypt the encryption of the content and play back the content using the key data. When the content is decrypted, it is determined that the content has been reproduced, and the frequency of the listening right data 109 is reduced by, for example, -1. When the frequency reaches 0, the user device 109 cannot perform decryption.

FIG. 2 shows an example of a system relating to the listening right data 109, and the distribution of music contents and the transmission and reception of data for decrypting the contents are omitted. The player 201 is shown as corresponding to the user device 104. Player 201
Has a built-in secure decoder 202. The player 201 is, for example, a portable audio device.
In FIG. 2, music content is recorded on a medium (optical disk, memory card, or the like) reproduced by the player 201, as indicated by a broken line. As shown in FIG. 1, various methods for distributing music content can be used.

Reference numeral 204 denotes a listening right data charger as a user terminal. The data charger 204 includes the secure decoder 202 of the player 201 and the payment center 1
10 or a data sales terminal 206 installed in a record store, a convenience store, or the like, and functions as a listening right data relay device.

FIG. 3 schematically shows the function of the data charger 204. FIG. 3 shows a specific example of a player that may be installed in a home.
Reference numeral 51 denotes an audio reproduction system in which an amplifier and a speaker are separated, 52 denotes a reproduction device in which a tuner and a CD player (or MD (Mini Disc, registered trademark) recorder) are integrated, and 53 denotes a portable type. A CD player, 54 is a portable MD player, and 55 is a personal computer. These user devices include secure decoders 51a, 52a, 53a, 54a, 55a having an IC configuration.
Is equipped. For these user devices,
The data charger 204 is shared, and a dedicated connection line or non-contact wireless communication, or USB (Universal Serial Bu
s) or IEEE (Institute of Electrical and Ele)
ctronics Engineers) 1394 can transmit listening right data and download reproduction history information. The data charger 204 is configured to be portable.

The secure decoder 20 in the player 201
2 and the data charger 204 communicate via a wired or wireless communication path, and the listening right data is transferred from the data charger 204 to a memory in the secure decoder 202. The listening right data is, for example, the player 201
Corresponding to the reproducible number information or reproducible time.

Also, the reproduction history information (reproduction log) of the player 201 is transmitted from the player 201 to the data charger 204 via a wired or wireless communication path 205. The reproduction log includes the identifier of the decrypted digital data and / or the condition of the decryption. Specifically, it includes information such as the type of music content that has been listened, the number of times of reproduction, and the reproduction time. Further, the reproduction log includes an identifier for specifying a chargeable person, such as an owner of the user terminal and an identifier of the user device. Secure decoder 20
2 and the data charger 204 perform authentication as needed, and when the authentication is established, the encrypted listening right data and reproduction log are transmitted.

The listening right data is passed from the settlement center 110 to the data charger 204 via a communication path 207, for example, a telephone line. Alternatively, the listening right data passed from the settlement center 110 to the sales terminal 206 via the communication path 209 is passed to the data charger 204 via the communication path 205. Also in this case, authentication and encryption are performed to ensure security.

The reproduction log downloaded to the data charger 204 is transmitted via the communication path 207 to the settlement center 110.
Sent to Alternatively, the sales terminal 2 via the communication path 205
06. The sales terminal 206 receives the listening right data from the settlement center 110 via the communication channel 209 and sends a reproduction log to the settlement center 110. further,
The payment of the obtained listening right data is paid to the settlement center 110. The communication path 209 is a telephone line, the Internet, or the like.

Between the settlement center 110 and the listening right data charger 204, the listening right data and the reproduction log are transmitted and received via the communication path 207. Also in this case, authentication and encryption are performed to ensure security. Regarding the settlement of the listening right data, there are banks and credit card companies 208. The bank or credit card company 208 withdraws an amount corresponding to the listening right data written in the data charger 204 from the user's pre-registered bank account at the request of the settlement center 110.

Further, the settlement center 110 is entrusted by the record company 101 to manage services relating to the listening right data. Further, the settlement center 110 provides the record company 101 with technology relating to the listening right data, and pays a music listening fee. Record company 10
As described with reference to FIG. 1, by registering a copyright in the copyright management mechanism 103, the user requests a copyright management and receives a copyright fee from the copyright management mechanism 103. .

Although not shown in FIG. 2, the listening right data charger 204 moves, sums, and divides a part or all of the viewing right data with another charger through a communication device such as a non-contact communication device. It is possible. Also,
The data charger 204 can transfer the right-of-listening data to a prepaid card having an IC card structure in addition to the secure decoder 202 of the player 201.

FIG. 4 shows the record company 101, the settlement center 110, the listening right data charger 204, and the listening right data selling terminal 2 in the charging processing system shown in FIG.
06 and the mutual relationship between the bank and the credit card company 208. The settlement center 110 has a function of selling the listening right data between the charger 204 and the sales terminal 206, collecting a reproduction log, and thereby performing settlement of the price.

FIG. 5 shows the functions of the settlement center 110 connected to the listening right data terminal 210 (listening right data charger 204 or sales terminal 206) in more detail. In FIG. 5, the route indicated by a solid line indicates a process necessary for executing the charging process, and the route indicated by a broken line indicates a process necessary for performing the charging process. In many cases, the dashed path is made by mail (document transfer), and the processing of the solid path is performed by data communication.

First, the processing based on the broken line path will be described. Between the record company 101 and the settlement center 110, the record company 101 performs business consignment registration with the settlement center 110 (block 211). The settlement center 110 passes marketing data to the record company 110 and makes various reports (block 21).
2).

The customer 213 who is the owner of the listening right data charger 204 is a bank or a credit card company 208.
A contract is concluded with the company for payment of fees and withdrawal of fees from accounts. The customer 213 informs the settlement center 110 of the change in the contract content and the like, and the settlement center 110 inputs and corrects customer information (block 214). The settlement center 110 issues an invoice / receipt to the customer 213 and mails it (block 215).

Next, the processing by the solid line route will be described. The settlement center 110 sends the listening right data to the listening right data terminal 210 in response to the request of the customer. In that case, the customer is specified, and the authenticated and encrypted data is sent via the communication server 216. The customer management system 217 specifies the authenticated customer with reference to the customer information in the database 218. Then, based on the amount of the transferred listening right data, the financial settlement system 21
9 is requested to withdraw the fee. The financial settlement system 219 requests the bank and the credit card company 208 to pay a fee from the customer's account, and the fee is paid. Upon receipt of the payment completion report by the settlement center 110, a receipt is issued to the customer.

Authentication is performed prior to the transfer of the listening right data to the listening right data terminal 210. Then, the settlement center 110 receives the reproduction log from the listening right data terminal 210 via the communication server 216. The received playback log is decrypted by the communication server 216 and sent to the playback log management system 220. The reproduction log includes a terminal identifier for specifying the customer (listening right data terminal 210), an identifier for specifying the decrypted / reproduced music content, and data on the number of times, time, and period of listening to each music content. Have been. The terminal identifier is mainly used for transferring the listening right data as described above and for charging.

The reproduction log management system 220 temporarily stores the reproduction log in the database 218, and when predetermined,
For example, a playback log or data obtained by processing the playback log in a batch process is transferred to the listening fee settlement system 221 every month.
The listening fee settlement system 221 calculates a listening fee (copyright fee) for each song by referring to information such as songs registered in the database 218 at the time of outsourcing from the record company 101. It is also possible to calculate a listening fee for each item such as a composer, a lyricist, a singer, a performer, etc. in addition to the music. The listening fee for each song calculated by the listening fee settlement system 221 is the record company 10
Paid for one.

As described above, the settlement center 110 transfers the listening right data to the customer 213 and charges a listening fee, while the settlement center 110 calculates and distributes the listening fee for each song. Therefore, there is no need for the record company 101 to perform customer management, calculate a listening fee, or perform a task of distribution. Further, since the settlement center 110 is an organization independent of the record company 101, it is possible to make a business outsourcing contract with a plurality of record companies and to enrich the types of music contents that can be selected by customers. it can.

FIG. 6 shows a signal processing configuration of the player 201 having the secure decoder 202. The secure decoder 201 is configured as a one-chip IC, as indicated by a broken line. Also, the secure decoder 20
1 has a so-called tamper resistant configuration. That is, the configuration is such that the contents cannot be understood from the outside and cannot be falsified.

On the medium 1, music data which has been compression-encoded and encrypted is recorded. Further, data necessary for the reproduction accounting process accompanies the compression-encoded and encrypted data. The compression-encoded and encrypted data is referred to as content data, and the data for playback charging processing is referred to as accompanying data. However, in the present invention, it is not always necessary that both the compression encoding and the encryption are performed. Even with compression encoding alone, the purpose of copyright protection can be achieved if the decoding method is not disclosed.

As the medium 1, a memory card, a recordable optical disk, a read-only optical disk, or the like can be used. In the case of a recordable medium, as described above, it is possible to download data distributed via a network such as a satellite network, a mobile phone network, or the Internet. Content data and accompanying data recorded on the medium 1 are supplied to the secure decoder 202 via the interface 2. From the secure decoder 202, an analog audio signal is output. The analog audio signal is reproduced by a speaker, headphones or the like via an amplifier or the like.

The secure decoder 202 includes an encryption decoder 11, a compression encoder decompressor 12, and a D / A converter 1.
And 3. The encryption is DES (Data Encr
yption Standard). DES is one type of block cipher that blocks plain text and performs cipher conversion for each block. DES is 64 bits for a 64-bit input.
A cryptographic conversion is performed using a bit (56-bit key and 8-bit parity) key, and 64 bits are output. DE
Encryption other than S may be used. For example, DES is a common key system that uses the same key data for encryption and decryption, but may use RSA encryption, which is an example of public key encryption that uses different key data for encryption and decryption. The key data is, as described above, the user device 1 for which authentication has been established.
04.

The secure decoder 202 includes a control unit 14 including a CPU, a CPU interface 15 for performing communication between the control unit 14 and an external CPU, and a memory unit 1.
6, a communication unit 17 and an antenna 18 for receiving the listening right data from the prepaid charger and transmitting the reproduction log to the prepaid charger. The control unit 14 receives the associated data separated in the previous stage of decoding in the decoder 11, and performs control for decoding and decompressing.

The communication unit 17 and the antenna 18
This is for performing communication with the listening right data charger in a non-contact manner. This communication is performed using an encrypted protocol, provided that the communication is authenticated.
Since not only the data but also the power can be received from the charger, even if the power of the entire player 201 is off, the reception right data can be received and the reproduction log can be transmitted. The received listening right data is stored in the memory unit 1
6 is stored. Further, a reproduction log of the player 201 is also stored in the memory unit 16. The memory unit 16 is a nonvolatile memory that retains its stored contents even when the power is turned off.

The copy output can be output from the decoder 11 to the outside of the secure decoder 202. Whether or not to output is controlled by the control unit 14. The output copy output includes the accompanying information and the content data. Further, the decoder 11 and the decompressor 12
It has a function of omitting the decoding process and the decompression process, respectively, based on an instruction from the control unit 14. Thereby,
Originally, it is possible to reproduce audio data (linear PCM) that has not been encrypted and compression-coded.

In order to control the overall operation of the player 201, a system controller indicated by 21 is provided. The system controller 21 includes a CPU,
The operation of the secure decoder 202 is controlled by communicating with the control unit 14 in the secure decoder 202. Also, an operation unit 22, a display 23, a memory unit 24, a modem 2 via a bus with the system controller 21.
5 is connected. Further, the system controller 2
1 is a reproducing operation of the medium 1 and a medium interface 2
Control the operation of.

The operation unit 22 is a switch, a key or the like operated by the user, and generates an instruction for controlling the operation of the player 201. The display 23 is made of, for example, a liquid crystal, and is used for displaying a menu for controlling the operation of the player 201 and displaying an operation state. The memory unit 24 is an external memory provided because the capacity of the memory in the system controller 21 is small. The modem 25 is connected to a public line and used for data communication with the outside. For example, the secure decoder 20
By transferring the reproduction log in the second memory section 16 to the memory section 24, the remaining number of reproducible times or reproducible time can be displayed on the display 23, and the replay log can be transmitted via the modem 25. Have been. Further, it is possible to receive the listening right data via the modem 25.

The user operates the operation unit 22 to instruct reproduction of a desired content in the medium 1. If the content is free for reproduction, even if an analog output is generated through the secure decoder 202, the listening right data stored in the memory unit 16 is not changed. If the reproduced content is to be charged for reproduction, the listening right data in the memory unit 16 is changed.

Various types of billing processes are possible. The charging process is roughly classified into a purchase type, a type in which a viewing fee is charged to gross, and a frequency type in which a viewing fee is charged every time the encryption is decrypted by the secure decoder. The purchase type is a type that is not charged for the reproduction process once purchased. The type in which the viewing fee is charged to the gross is a monthly type in which the viewing fee is paid together, a viewing period, a type in which the viewing time is limited, and the like.

Several forms are possible as the frequency type in which a viewing fee is charged each time the encryption is decrypted by the secure decoder. In the first mode, the amount or frequency is subtracted from a preset amount (prepaid card, electronic money) or frequency each time the content is reproduced. If the balance or the remaining frequency is insufficient, the reproduction cannot be performed. In the second mode, an amount or a frequency is added every time the content is reproduced. When the accumulated amount or frequency reaches a preset amount or frequency, reproduction becomes impossible. In the third mode, the frequency or the amount is added or subtracted according to the reproduction time of the content.

The amount of money or the frequency may be fixed or may be weighted according to the content. The charging process is performed in correspondence with one title of the content (one song in the example of music) or a plurality of titles of the content (album in the example of music).

As a method of defining the content reproduction processing, the reproduction may be performed when the entire content is reproduced, or the reproduction may be performed when the reproduction time of the content is longer than a predetermined time. It may be good. In addition, there is no charge for the reproduction of promotional content for promoting diffusion and distribution. Further, even for the content to be charged, for example, the reproduction of the top part of the content, for example, 10 seconds from the top, may be free, or the reproduction of only the highlight part of the content may be free. As described above, when the content charged for the reproduction process and the content whose reproduction process is free are mixed, the charge / free is identified by the accompanying information.

The accompanying information is data added before the content data (compression-encoded and encrypted content, for example, audio data). The accompanying information is encrypted as needed. In addition, on the recordable medium, it is added before the content data and recorded, or is recorded in the data management area of the medium 1. In the case of a read-only medium, accompanying information is recorded in the data management area. In the case of an optical disk, a management area is generally provided in an innermost area of the disk. In the case of a memory card, for example, file management data in which one piece of music data is treated as one file is defined.

In the accompanying data, a charging identifier indicating whether the content is to be charged or free of charge, and charging types such as purchase type, gross type, frequency type and the like as described above are distinguished. A playback condition label indicating a condition is included. As an example, in the case of the purchase type, the purchase price data is described in the reproduction condition label,
In the case of limiting the gross type reproduction number, the data of the reproduction number is described in the reproduction condition label. In the case of restricting the gross type reproduction period, the data of the reproduction period (one day, one week, one month, etc.) It is described as a reproduction condition label, and in the case of the frequency type, frequency data (1 yen / 2 minutes, 1 yen / 1
Minutes, 1 yen / 30 seconds,...) Are described as reproduction condition labels. Furthermore, even if the content is premised on charging, the condition for viewing the content for free can be described in the reproduction condition label.

In the accompanying information, information indicating the type of compression encoding of the content data, information indicating the type of encryption and encryption parameters, information on the number of channels, information on the bit rate, and the like are recorded. May be.

Further, in the accompanying information, a media ID for uniquely identifying a medium such as a CD, an MD, a recordable optical disk, and a memory card including a nonvolatile memory is included.
For example, a serial number is included. Further, a decoder ID is arranged in the accompanying information. The decoder ID is an ID for uniquely identifying a secure decoder built in a user terminal, a user player, or the like, for example, a serial number.

Next, an example of the accounting process performed in the player 201 (see FIG. 6) will be described with reference to the flowchart of FIG. This processing is performed by the control unit 14 and the system controller 21 in the secure decoder 202.
It is done by The first step S1 is
The playback standby state is such that the content to be played back exists on the medium 1. Specifically, when the content distributed by EMD is stored in the medium 1 or when the content is already recorded on the medium 1, the reproduction standby is performed. In step S2, it is determined whether or not a reproduction instruction has been issued by the user pressing the reproduction button of the operation unit 22.

If the result of step S2 is negative,
It is meant to mean a copy operation. Step S
In 3, it is determined whether the content is a copy of the content for free reproduction. Free playback content means content for which playback is not charged. The determination in step S3 is made with reference to the identifier included in the accompanying information. If the content is free reproduction content, the copy output of the decrypted code from the secure decoder 202 is prohibited for copyright protection (step S4).

If it is determined in step S3 that the content is not a copy of the content for free reproduction, that is, a copy of the content for charge reproduction, a copy of the content for charge reproduction is output from the secure decoder 202 (step S5). ). Copying of the content for billing reproduction is free. However, this copy output is data that has been encrypted and compression-encoded with the accompanying information.

If it is determined in step S2 that the reproducing operation has been instructed, it is determined in step S6 whether or not to accept the billing process. For example, player 2
01, a message is displayed on the display 23, and the user responds by operating the operation unit 22. If the user does not accept the billing process, free reproduction cannot be performed (step S7). However, there is a case where partial free reproduction indicated by the reproduction condition label, for example, reproduction of a head portion or a highlighted portion of a music piece can be performed free of charge. If the accounting process is to be accepted, in step S8, a playback accounting condition relating to the content to be actually reproduced is presented on the display 23. A billing condition is presented based on the information on the reproduction condition label in the accompanying information.

In step S9, it is determined whether the charging type is the purchase type. If it is a purchase type, a charge for purchase is made (step S10). Then, step S11
In the decoder 11 of the secure decoder 202,
The encryption is decrypted using the key, and free reproduction is performed in step S12. In this case, copying of the content to be reproduced for free is prohibited. However, a move, that is, a process in which the original data is not left unlike the copy, is possible.

If it is determined in step S9 that the type is not the purchase type, it is determined in step S13 whether the type is a gross type, for example, a monthly type. If a monthly contract exists, it is determined in step S14 whether or not the song is a contracted song. If so, free reproduction is performed in step S15. Copying of the content for billing reproduction can be freely performed.

If it is determined in step S13 that the content is not of the monthly type, it is determined that the content is to be charged in the frequency type. Then, in step S17,
The encryption is decrypted, and charging reproduction is performed in step S18. In the charging reproduction, as described above, charging is performed according to the frequency of reproduction, the reproduction time, and the like. Copying of the content for billing reproduction can be freely performed. Further, in the case where it is determined in step S14 that it is not within the range of the monthly contract, the charging reproduction process (steps S17 and S18) is performed.

FIG. 8 shows an example of the structure of the listening right data charger 204. The charger 204 has, for example, a portable configuration that is portable. Reference numeral 301 denotes a CPU that controls the entire charger, 302 denotes an encryption / decryption module, 303 denotes a display (for example, a liquid crystal display), and 304 denotes key buttons operated by a user. The display 303
A menu related to the operation of the charger, billing processing conditions, and the like are displayed. The encryption / decryption module 302 performs an encryption process when transmitting a reproduction log or the like and a decryption process when receiving listening right data or the like. Reference numeral 305 denotes a data charger individual ID. Data Charger Individual I
D305 is transmitted to the settlement center together with the reproduction log, for example, so that the correspondence between the data charger and the reproduction log can be understood.

For communication with the settlement center (the settlement center 110 in FIG. 2), the modem 306 and the US
A B (Universal Serial Bus) communication module 307 is provided. The modem 306 communicates with the settlement center via a telephone line, receives listening right data from the settlement center, and can transmit a reproduction log to the settlement center. USB communication module 3
07 can also be used to communicate with the settlement center via a personal computer and the Internet.

From the settlement center to the data charger 204
Are stored in the listening right data memory 308. The playback log received from the secure decoder 202 of the player 201 is stored in the usage status memory 309.
Is stored in If necessary, log data obtained by adding the log of the charger 204 to the reproduction log is transmitted to the settlement center. The memories 308 and 309 are nonvolatile memories that retain their stored contents even when the power is turned off.

The non-contact communication module 310 and the antenna 311 are for performing non-contact communication with the player 201. This communication is performed using an encrypted protocol, provided that the communication is authenticated. Not only data but also secure decoder 202
Is required to be transmitted to the player. Therefore, even if the main power supply of the player 202 is off, it is possible to exchange the listening right data and the reproduction log. In addition to the antenna 311, a terminal for line connection is also provided. The communication with the listening right data selling terminal 206 is performed using the non-contact communication module 310 and the antenna 311 or the line.

FIG. 9 shows a more detailed configuration of the secure decoder 202, that is, a functional configuration related to a charging process. Parts corresponding to the components shown in FIG. 8 are denoted by the same reference numerals. Reproduced data composed of encrypted and compression-encoded content data and accompanying data from the medium 1 is supplied to the decoder 11. The decoder 11 is also supplied with a medium individual ID for uniquely identifying the medium 1. The decryption of the encryption is performed by the decryptor 11.

The output data of the decoder 11 is supplied to the reproduction condition label detection section 401, and the reproduction condition label in the accompanying data is detected. The detected reproduction condition label is used for the processing of the secure decoder 202. In the stretcher 12,
The decoding of the compression encoding is performed. Output data of the decompressor 12 is supplied to the watermark detection unit 402. The watermark detection unit 402 detects the watermark added at the time of analog output, and checks whether or not the reproduction condition label has been tampered based on the detected watermark and the reproduction condition label.

Reference numeral 403 denotes a listening right counter. The listening right counter 403 changes the listening right data every time the reproduced data is decoded. For example, a process of subtracting listening right data, for example, frequency data stored in the memory unit 16 is performed. The listening right data stored in the memory unit 16 has been transmitted from the above-described listening right data charger 204 by the antenna 18 (or line) and the communication module 17. Communication module 1
A module 7 is provided for encryption at the time of transmission of a reproduction log or the like and decryption at the time of receiving the listening right data. Here, the term of the listening right is used to handle the music data, but when considering the video data, the term of the viewing right is used instead of the listening right.

When the processing related to the listening right is performed in the listening right counter 404, the watermark adding unit 404
In, a watermark is added to the output data. The watermark can be added by using a redundant portion existing in the music data, for example, a lower bit of the output audio data. The added watermark remains even after being converted to an analog signal, and it is impossible or very difficult to remove the watermark. The watermark to be added includes data of all or a part of the reproduction condition label and information of the decoder individual ID 405. The data to which the watermark is added is converted into an analog output by the D / A converter 13 and output to the outside of the secure decoder 202. The watermark detection unit 402 described above detects the watermark added in this manner.

The secure decoder 202 has an IC card interface, the listening right data charger 204 receives electronic money from a settlement center or a financial company, and transfers the received electronic money to the secure decoder 2.
02 may be recorded on an IC card via an interface provided in the IC card 02. That is, the function as a recording device for electronic money can be provided as an optional device for writing the listening right data.

The outline of the accounting process performed by the listening right counter 403 will be described. As an example, an example applied to a case where the accounting process is performed in a frequency type will be described. That is, the frequency is subtracted every time the music data is reproduced from the preset frequency, the frequency is added every time the music data is reproduced, or the frequency is added according to the reproduction time of the music data. Or is subtracted. The reproduction condition label detection unit 401 extracts a reproduction condition label from reproduction data, for example, music data. The reproduction condition label includes a charging condition. In addition, a period during which the music data is output from the decompressor 12 is measured by a unit time such as 30 seconds or 1 minute, and a fee is charged for the length of the measured time. That is, the unit time corresponds to one frequency.

The frequency is controlled by the listening right counter 403 based on the measured time and the reproduction condition label.
That is, the listening right data stored in the memory unit 16 is subtracted or added with reference to the reproduction condition label, and the listening right data is rewritten. If the playback time or the playback period is set as the playback condition, the timer / calendar is subjected to a process of accumulating the playback time or a process of comparing the current date and time with the playback time limit.

The listening right counter 403 or another control unit further determines whether or not reproduction is possible. For example, when the frequency of reproduction is subtracted and the remaining becomes 0, it is determined that reproduction is impossible. When the cumulative frequency reaches the set frequency, when the accumulation of the reproduction time reaches the set time, or when the current date and time exceeds the reproduction time limit, it is similarly determined that reproduction is impossible. When reproduction is possible, music data is output. On the other hand, when reproduction is not possible, output of music data is prohibited.

In one embodiment of the present invention, the listening right data passed from the settlement center 110 or the listening right data vending machine 206 to the listening right data charger 204,
And the listening right data charger 204 to the player 20
With regard to the listening right data passed to 1, the use period of the listening right data is limited.

FIG. 10 shows an example of a format when the listening right data is passed. FIG. 10A shows the configuration of one frame (256 bits). At the beginning of the frame, a synchronization signal (8
Bit), followed by the header (8 bits). The header indicates whether or not the usage period is limited. For example, if the 8-bit header is all 0 (00000000)
0) indicates that there is no time limit, and the header is (0001xxx)
x) indicates that the period is limited. Lower 4 bits (xxxx)
Means undefined. However, using the lower 4 bits, it is possible to distinguish between listening right data that allows unlimited listening to the old music and unlimited listening right data including the new music.

Next, the year of the use period is represented by 12 bits, and then the month of the use period (January to December) is represented by 4 bits. If the year is Y, then (2000-
The value of Y) is represented by 12 bits. The usage period may be indicated by years and months. If the usage period is, for example, data of July 2000, the content such as music data can be heard during the period from July 1, 2000 to July 31, 2000. As described above, during this period, the music data can be freely heard. In this case, the frequency (point) of the listening right data is not reduced. The data for the usage period is encrypted.

The subsequent 128 bits are a key for decrypting the encryption. Specifically, it is used to decrypt the encryption of the data during the usage period and to decrypt the encryption of the encrypted listening right data MP (or the listening right data if there is a limited available period). Is the key. DES, RSA, etc. can be used for encryption. DES is one type of block cipher that blocks plain text and performs cipher conversion for each block. The DES performs a cryptographic conversion on a 64-bit input using a 64-bit key (56-bit key and 8-bit parity), and outputs 64-bit.
DES is a common key scheme that uses the same key data for encryption and decryption, and RSA is one of public key cryptography that uses different key data for encryption and decryption. Other ciphers can also be used.

After the encryption key, 32-bit encrypted listening right data MP is arranged. The data MP is 2 ³²
Values up to can be expressed. A 64-bit ECC (error correction code) is arranged after the data MP, and the data arrangement of one frame is completed. As the ECC, for example, a Reed-Solomon code is used.

Then, in order to increase the error tolerance of the listening right data, the same data is transmitted four times as shown in FIG. 10B. Of course, the numerical value of four times is an example, and an appropriate number of repetitions is set according to the error rate. When repeating four times, (256 × 4 = 1024
Bit) separates the data.

In order to decrypt the data of the use period and the encryption of the data MP, comparison and collation and error correction by ECC are performed, a decryption key is obtained, and then the data MP is decrypted with the decryption key. it can. EDC (error detection code)
May be added to perform error detection. Further, scrambling may be performed as a whole (for example, randomization using a maximum long period (M) sequence) as needed.

According to the present invention, electronic money and electronic use rights having basically a limited period, and electronic money having no period limitation,
Since the system has a mixture of electronic usage rights, FIG.
2 are prepared.

In the transmission format of the listening right data described above, the important part is only 32 bits, but this part is protected by encryption and ECC (tampering can be checked). As a result, it is possible to prevent the listening right data from being illegally obtained or falsified.

FIG. 11 is a flowchart showing one form of service provision. It is assumed that the type of the listening right data having a limited use period is MA, and the type of the listening right data having a limited use period is MB. A type MB with a limited use period can be purchased at a lower price than a type MA without it. Also, the services that the user can receive are different depending on the type. When the provision of the service is started in step S1 of FIG. 11, it is determined in step S2 whether the provided service is of the type MA.

If the type MA is determined, step S3
In, it is determined whether there is listening right data (MA or MB) owned by the user. If there is, the provided service is received (step S4).

If the result of step S2 is negative (that is, the provided service is not for type MA), it is determined in step S6 whether the service is for MB type. If so, it is determined in step S7 whether there is MB type listening right data, and if so, the service is received in step S8. If the result of step S6 or S7 is negative, the service cannot be received.
Service provision is suspended.

Further, in the case of the listening right data having a limited period, the use of the content can be performed without any restriction during the period. For example, you can listen to audio content unlimitedly. The flowchart in FIG. 12 illustrates such a process.

When the provision of the service is started in step S11 of FIG. 12, it is determined in step S12 whether or not there is listening right data of type MB (limited in period) of the current month. If there is, the provided service is received (step S13). In step S13,
The listening right data is checked. This is because even in the case of one month's listening right data, services that can be received differ depending on the price. If it is determined in step S12 that there is no listening right data of type MB for the current month, a playback fee is charged based on the listening right data of type MA (step S14). Step S1
At 4, it is checked that there is listening right data of type MA.

In the above-described embodiment, audio content has been mainly described. However, content other than audio, such as video data, still image data, character data, computer graphic data, game software, and computer programs, can also be used. The present invention can be applied in the same manner as described above.

[0091]

As is apparent from the above description, according to the present invention, the electronic money and the electronic use right having a limited time and the electronic use right without the electronic right are mixed.
A variety of services can be provided. In addition, for those with a limited period, a user merit can be provided by adding an added value such as lowering the charge. Further, by preparing a service that can use electronic money and an electronic right to use for a limited time, a user merit can be generated. Furthermore, it is possible to provide a monthly unlimited listening service in cooperation with the reproduction charging system.

[Brief description of the drawings]

FIG. 1 is a block diagram schematically showing an entire system according to an embodiment of the present invention.

FIG. 2 is a block diagram for describing listening right data according to an embodiment of the present invention.

FIG. 3 is a block diagram for explaining a listening right data charger according to an embodiment of the present invention.

FIG. 4 is a block diagram for describing listening right data according to the embodiment of the present invention.

FIG. 5 is a block diagram for explaining a function performed by a settlement center in one embodiment of the present invention.

FIG. 6 is a block diagram illustrating an example of a player according to an embodiment of the present invention.

FIG. 7 is a flowchart illustrating an example of a charging process according to an embodiment of the present invention.

FIG. 8 is a block diagram illustrating an example of a listening right data charger according to an embodiment of the present invention.

FIG. 9 is a more detailed block diagram of a secure decoder according to an embodiment of the present invention.

FIG. 10 is a schematic diagram illustrating an example of a data configuration of listening right data according to an embodiment of the present invention.

FIG. 11 is a flowchart illustrating an example of service provision according to an embodiment of the present invention.

FIG. 12 is a flowchart illustrating another example of service provision according to an embodiment of the present invention.

[Explanation of symbols]

1 ... medium in which contents are stored, 11 ... encryption decoder, 12 ... compression / encoding decompression machine, 21 ...
・ System controller, 101 ・ ・ ・ Record company,
103: copyright management mechanism, 104: user device, 109: listening right data, 110: settlement center, 201: player, 202: secure decoder, 204: listening right Data charger

 ──────────────────────────────────────────────────続 き Continued on the front page F term (reference) 5B049 AA05 BB11 BB46 CC05 CC31 CC39 DD01 DD04 EE05 EE28 FF03 FF04 FF06 GG03 GG04 GG06 GG07 GG10 5J104 AA12 MA05 NA02 PA11 PA12 9A001 BB01 BB03 BB04 EE05 H05 DD05 JJ25 JJ27 JJ66 JJ67 JJ76 KK08 KK31 KK37 KK43 KK58 KK60 LL02 LL03

Claims (9)

[Claims] 1. Electronic money having an effect equivalent to cash, the use period of which is limited. 2. An electronic right to use software, such as content reproduction, wherein the period of use is limited. 3. A system in which electronic money or an electronic use right with a limited use period, electronic money or an electronic use right with an unlimited use period are mixed. 4. The electronic money or electronic right-of-use system according to claim 3, wherein a service to be provided is different depending on whether the use period is limited or not. 5. The electronic money or electronic right-of-use system according to claim 3, wherein a system with a limited use period is provided at a lower price than a system without a use period. 6. The electronic money or electronic right-of-use system according to claim 3, wherein if the period of use is limited, the remaining period is not reduced. 7. The electronic money or electronic right-of-use system according to claim 3, wherein an identifier for discriminating the one with a limited use period from the one without a use period is provided. 8. The electronic money or electronic right-of-use system according to claim 3, wherein the information of the use period is encrypted. 9. The electronic money or electronic right-of-use system according to claim 3, wherein the information of the use period is protected by an error detection and / or error correction code.