JP2001195509A - Contents providing system, contents distributing method, and storage medium - Google Patents

Abstract

PROBLEM TO BE SOLVED: To restore contents data while protecting a copyright even when the contents data distributed through a network are temporarily destroyed. SOLUTION: A PC stores the backup of distributed music contents on a hard disk and transmits the use log information on the music contents stored on the hard disk to an EMD server. When the music contents on the hard disk are destroyed, for example, the PC acquires the use log information from the EMD server and reproduces the backup data stored on the hard disk corresponding to the use log information.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a content providing system for providing content data such as music data via a network, a content distribution method, and a storage medium.

[0002]

2. Description of the Related Art In recent years, online distribution of music content using networks such as the Internet and cable television has begun to be put into practical use.

In such a music content distribution system, when distributing music content via a network, a content distributor provides the music content on the Web, for example. In addition, a user using the music distribution system uses his / her personal computer to access Web or the like provided by a content distributor and download desired music content.

[0004]

By the way, in such a music distribution system, generally, downloaded music contents are charged, for example, via a network.

[0005] However, for example, if data in a personal computer owned by a user is destroyed, music content once purchased is also lost. Therefore, to restore the music content,
Had to buy content.

[0006] The present invention has been made in view of such circumstances, and even if content data distributed via a network is once destroyed, the content data is protected while protecting the copyright. It is an object to provide a content providing system, a content distribution method, and a storage medium that can restore content data.

[0007]

A content providing system according to the present invention has a content server that distributes content data via a network, and a reproduction control program that reproduces and / or controls the content data. The content data distributed from the server is stored in a storage medium to reproduce and / or control the backup data of the distributed content data in the storage medium, and the use log information of the content data is transmitted to the content server. The content processing device, when the content data can no longer be obtained from the storage medium, obtains the usage log information from the content server, and stores the usage log information in the storage medium in accordance with the usage log information. Backup of stored content data Characterized by the reproduction and / or control of the updater.

In the content providing system, the data processing device reproduces and / or controls the backup restoration data based on the usage log information reacquired from the content server.

A content providing system according to the present invention includes a content server for delivering content data via a network, and a playback control program for playing back and / or controlling the content data, wherein the content delivered from the content server is provided. A data processing device that stores and reproduces and / or controls data stored in a storage medium, and transmits usage log information of the content data to the content server. When the content data can no longer be obtained, the content data that can no longer be obtained is redistributed from the content server, the use log information is obtained from the content server, and the content data re-distributed in accordance with the use log information Playback and / or control Characterized in that it.

In this content providing system, the data processing device reproduces and / or controls the redistributed content data based on the usage log information reacquired from the content server.

A content distribution method according to the present invention includes a data processing device having a reproduction control program for reproducing and / or controlling content data, and a content server for distributing the content data to the data processing device via a network. In the content distribution method performed between the content servers, the content server distributes the content data to the data processing device, and the data processing device stores the content data distributed from the content server in a storage medium to reproduce and / or reproduce the content data. Or controlling and storing backup data of the distributed content data in a storage medium, wherein the data processing device transmits usage log information of the content data to the content server, and the data processing device Content data from When it is no longer possible, the content server transmits the usage log information to the data processing device, and the data processing device transmits the backup data of the content data stored in the storage medium according to the usage log information. It is characterized by performing reproduction and / or control.

In this content distribution method, the data processing device reproduces and / or controls the backup restoration data based on the usage log information reacquired from the content server.

A content distribution method according to the present invention includes a data processing device having a reproduction control program for reproducing and / or controlling content data, and a content server for distributing content data to the data processing device via a network. In the content distribution method performed between the content servers, the content server distributes the content data to the data processing device, and the data processing device stores the content data distributed from the content server in a storage medium to reproduce and / or reproduce the content data. Or performing control, the data processing device transmits usage log information of the content data to the content server, and when the data processing device cannot acquire the content data from the storage medium, the content server The con Content data to the data processing device, and transmits the usage log information to the data processing device, and the data processing device reproduces and / or controls the content data redistributed in accordance with the usage log information. It is characterized by doing.

In this content distribution method, the data processing apparatus reproduces and / or reproduces the redistributed content data based on the usage log information reacquired from the content server.
Alternatively, control is performed.

A storage medium according to the present invention is installed in a data processing device, acquires content data distributed from a content server via a network, and stores a reproduction control program for reproducing and / or controlling the content data. The playback control program stores the content data distributed from the content server in the storage medium to perform playback and / or control, and stores backup data of the distributed content data in the storage medium. Storing, transmitting the use log information of the content data to the content server, and when the content data cannot be obtained from the storage medium, obtains the use log information from the content server; The command stored on the storage medium Characterized by the reproduction and / or control of the backup data Ceiling data.

In this storage medium, the data processing device in which the reproduction control program is installed reproduces and / or controls the restored data of the backup based on the use log information reacquired from the content server.

A storage medium according to the present invention is installed in a data processing device, acquires a content data distributed from a content server via a network, and stores a reproduction control program for reproducing and / or controlling the content data. The playback control program stores the content data distributed from the content server in a storage medium to perform playback and / or control, and transmits the usage log information of the content data to the content server. Transmitting, when the content data cannot be obtained from the storage medium, the content data that cannot be obtained is redistributed from the content server, and the usage log information is obtained from the content server; Is redistributed according to Characterized by the reproduction and / or control of Ceiling data.

In this storage medium, the data processing apparatus in which the reproduction control program is installed reproduces and / or controls the redistributed content data based on the usage log information reacquired from the content server.

[0019]

BEST MODE FOR CARRYING OUT THE INVENTION Hereinafter, as a best mode of the present invention, a music content distribution system to which the present invention is applied will be described in detail with reference to the drawings. This music content distribution system is a system that downloads a music content from a server to a personal computer or a portable device via a network, and further manages the downloaded music content and music content read from a CD.

(1) Overall Music Content Distribution System
Configuration FIG. 1 is a diagram showing the overall configuration of a music content distribution system to which the present invention is applied.

This music content distribution system includes a personal computer 1, a network 2 such as the Internet or a local area network, a registration server 3
And a plurality of EMDs (Electrical Music Distribution) for distributing music data (hereinafter, referred to as contents)
It comprises a server 4 (4-1, 4-2, 4-3) and a WWW server 5 (5-1, 5-2). The personal computer 1 also has a USB cable 7 (7-
1, 7-2, 7-3), a storage medium such as a memory card is stored therein, and the portable device 6 (6-) is a portable music player for playing back contents.
1, 6-2, 6-3) are connected.

The personal computer 1 is connected to an EMD registration server 3 and an EMD server 4 via a network 2.
(4-1, 4-2, 4-3), WWW (World Wide We
b) Connected to server 5 (5-1, 5-2).

The personal computer 1 receives the content compressed by a predetermined compression method from the EMD server 4 (4-1, 4-2, 4-3), encrypts the content by a predetermined encryption method, and records it. . In addition, the personal computer 1
In this method, content read from a CD (Compact Disc) or the like is compressed by a predetermined compression method, and is encrypted and recorded by a predetermined encryption method. As a compression method, for example, ATR
A method such as AC (Adaptive Transform Acoustic Coding) 3 (trademark) or MP3 (MPEG Audio Layer-3) is used. In addition, DES (Data Enc.
ryption Standard) is used.

When receiving the distribution of the content, the personal computer 1 also receives and records the usage condition information indicating the usage condition of the content. When recording the content read from a CD or the like, the personal computer 1 generates usage condition information according to the reproduction condition of the content and records the generated usage condition information.

The personal computer 1 also stores the encrypted and recorded contents together with the usage condition information and the related information such as the title of the song and the performer.
Via (7-1, 7-2, 7-3), the usage condition information is updated in accordance with the fact that the portable device 6 (6-1, 6-2, 6-3) has recorded and stored the portable device 6 (6-1, 6-2, 6-3). I do. This process is called checkout. The usage condition information indicates the number of times that the content can be checked out, which is recorded by the personal computer 1 when checking out, by one.
Decrease. When the number of check-outs is 0,
The corresponding content cannot be checked out.

The personal computer 1 is a US computer.
The contents stored in the portable device 6 (6-1, 6-2, 6-3) are erased (or used) via the B cable 7 (7-1, 7-2, 7-3). The use condition information is updated in accordance with the deletion. This erasing process is called check-in. When the check-in is performed, the number of times that the content can be checked out recorded by the personal computer 1 is increased by one.

It should be noted that the personal computer 1 cannot check in the content checked out to the portable device 6 by another personal computer. That is, only the content checked out by the personal computer 1 itself can be checked in.

In the EMD registration server 3, the personal computer 1 uses the EMD server 4 (4-1, 4-2, 4-3).
When the acquisition of content from the personal computer 1 is started, the personal computer 1 and the EMD server 4 (4-
A program for transmitting an authentication key required for mutual authentication with the personal computer 1 and connecting to the EMD server 4 (4-1, 4-2, 4-3). Is transmitted to the personal computer 1.

The EMD server 4 (4-1, 4-2, 4-
3) corresponds to the request of the personal computer 1,
The content is supplied to the personal computer 1 via the network 2 together with the use condition information and the content-related data (for example, a song title or a player).

Each EMD server 4 (4-1, 4-2, 4-
The content distributed in 3) is compressed by a predetermined compression method. The compression method may be different for each server. Also, each EMD server 4 (4-1, 4-2, 4)
The content supplied in (3) is distributed by being encrypted by a predetermined encryption method. The encryption method may be different for each server.

The WWW server 5 (5-1, 5-2) responds to a request from the personal computer 1 by reading a content (for example, a CD (eg,
CD album name or CD sales company) and CD
Data corresponding to the content read from (for example,
Song name or composer name) to personal computer 1
To supply.

The portable device 6 (6-1, 6-2,
6-3) is a device that reproduces the content supplied from the personal computer 1 (that is, the content that has been checked out) and outputs the content to headphones (not shown) or the like.

Each portable device 6 (6-1, 6-
2, 6-3) has a storage medium for storing contents. As the storage medium, for example, a non-removable IC memory mounted on an internal substrate of the device, a removable memory card, or the like is used. The portable device 6 (6-1, 6-2, 6-3) is a physical interface 7 (7-1, 7-2, 7-3) such as a USB.
Is connected to the personal computer 1 via the PC and contents are transferred. At this time, the content is transferred in an encrypted and compressed state, and usage condition information is also added.

Each portable device 6 (6-1, 6-
2, 6-3) are usually used in a state where the connection with the personal computer 1 is disconnected, and when a reproduction command is given by the user in this state, the encrypted content is read from the storage medium and reproduced. . Further, each portable device 6 (6-1, 6-2, 6-3) is based on usage condition information added to each content, and
Restriction of reproduction, control of content deletion, etc., update of usage condition information, etc. are performed as necessary.

Hereinafter, the portable devices 6-1 and 6-
When there is no need to distinguish 2, 6-3 individually, it is simply referred to as a portable device 6.

Next, the configuration of the personal computer 1 will be described with reference to FIG.

CPU (Central Processing Unit) 1
1 actually executes various application programs (details will be described later) and an OS (Operating System). ROM (Read-only Memory) 12
Generally, it stores basically fixed data of a program used by the CPU 11 and calculation parameters. RAM (Random Access Memory) 13 is a CPU
11 stores a program used in the execution and parameters that change as appropriate in the execution. These are C
They are interconnected by a host bus 14 composed of a PU bus or the like.

The host bus 14 is connected via a bridge 15 to a PCI (Peripheral Component Interconnect / In).
terface) It is connected to an external bus 16 such as a bus.

The keyboard 18 is operated by the user when inputting various commands to the CPU 11. Mouse 1
Numeral 9 is operated by the user when pointing or selecting a point on the screen of the display 20. The display 20 is a liquid crystal display device or a CRT (Cathode Ray Tube).
), And displays various information as text or images. An HDD (Hard Disk Drive) 21 drives a hard disk and records or reproduces a program executed by the CPU 11 or information on the hard disk.

The drive 22 reads data or a program recorded on the mounted magnetic disk 41, optical disk 42 (including CD), magneto-optical disk 43, or semiconductor memory 44, and reads the data or program. RA connected via the interface 17, the external bus 16, the bridge 15, and the host bus 14.
M13.

The USB port 23 (23-1, 23-2,
23-3) has a USB cable 7 (7-1, 7-2,
7-3), the portable device 6 (6-1, 6).
-2, 6-3) are connected. The USB port 23 is connected to the HDD 21, the CPU 11, the external bus 16, the bridge 15, or the host bus 14 via the interface 17.
Or data supplied from the RAM 13 (including, for example, content or a command of the portable device 6)
To the portable device 6 (6-1, 6-2, 6-3).

IEC (International Electrotechnical)
Commission) 60958 The audio input / output interface 24 having the terminal 24a executes digital audio input / output or analog audio input / output interface processing.
The speaker 45 outputs a predetermined sound corresponding to the content based on the sound signal supplied from the sound input / output interface 24.

The keyboard 18, mouse 19, display 20, HDD 21, drive 22, USB port 23, and audio input / output interface 24 are connected to the interface 17.
Are connected to the CPU 11 via the external bus 16, bridge 15, and host bus 14.

The communication unit 25 is connected to the network 2 and stores data (for example, a registration request or a content transmission request) supplied from the CPU 11 or the HDD 21 in a packet of a predetermined format, and 2 via the network 2 and the data (for example, an authentication key or content) stored in the packet received via the network 2.
M13 or to the HDD 21.

The C of the adapter 26 which is integrally formed as a semiconductor IC and is attached to the personal computer 1
The PU 32 is connected to the CPU 11 of the personal computer 1 via the external bus 16, the bridge 15 and the host bus 14.
Cooperates with and executes various processes. RAM 33 is a CP
U32 stores data and programs necessary for executing various processes. The nonvolatile memory 34 stores data that needs to be retained even after the power of the personal computer 1 is turned off. When the encrypted program is transferred from the personal computer 1, the ROM 36 stores a program for decrypting the program. An RTC (Real Time Clock) 35 performs a clocking operation and provides time information. Semiconductor ICs
It is designed in a secure environment and is resistant to malicious external access. Please note that this feature
It may be constituted by a software program.

The communication unit 25 and the adapter 26 are connected to the CPU via the external bus 16, the bridge 15 and the host bus 14.
11 is connected.

Next, the configuration of the portable device 6 will be described with reference to FIG.

The power supply circuit 52 converts the power supply voltage supplied from the dry battery 51 into internal power of a predetermined voltage,
53 to the display unit 67 to drive the entire portable device 6.

When the USB controller 57 is connected via the USB connector 56 to the personal computer 1 via the USB cable 7, the USB controller 57 transfers data including the content transferred from the personal computer 1 via the internal bus 58, It is supplied to the CPU 53.

The data transferred from the personal computer 1 is composed of 64 bytes of data per packet, and is transferred from the personal computer 1 at a transfer rate of 12 Mbit / sec.

The data transferred to the portable device 6 is composed of a header and contents. The header stores a content ID, a file name, a header size, a content key, a file size, a codec ID, file information, and the like, as well as usage condition information and the like necessary for a playback restriction process and the like. The content is encoded and encoded by an encoding method such as ATRAC3.

The header size represents the data length of the header (for example, 33 bytes), and the file size represents the data length of the content (for example, 33,636,138 bytes).

The content key is a key for decrypting the encrypted content, and is encrypted based on a session key (temporary key) generated in a process of mutual authentication between the personal computer 1 and the portable device 6. In this state, the data is transmitted from the personal computer 1 to the portable device 6.

The portable device 6 is connected to the USB cable 7
USB port 23 of personal computer 1 via
When the portable device 6 and the personal computer 1 are connected to each other, the portable device 6 and the personal computer 1 execute a mutual authentication process. The mutual authentication process is, for example, a challenge-response authentication process. By the way, portable device 6
The DSP 59 performs decryption (decryption) when performing challenge-response authentication.

The challenge response method is, for example,
This is a method in which the portable device 6 responds to a certain value (challenge) generated by the personal computer 1 with a value (response) generated using a secret key shared with the personal computer 1. In the challenge-response mutual authentication process, the value generated by the personal computer 1 changes every time the authentication process is performed. Therefore, for example, the value generated by using the secret key output from the portable device 6 is read. Even if the personal computer 1 is issued and receives a so-called spoofing attack, the personal computer 1 can detect fraud in the next mutual authentication processing because the values used for the mutual authentication are different.

The content ID is an ID corresponding to the content for specifying the content.

The codec ID is an ID corresponding to the content encoding method.
1 "corresponds to ATRAC3, and codec ID" 0 "
Is MP3 (Moving Picture Experts Group)
udio Layer-3).

The file name is a name of a content file (described later) recorded in the personal computer 1 corresponding to the content in ASCII (American National Sta.).
ndard Code for Information Interchange) This is data converted into a code, and the file information is data obtained by converting a song name, an artist name, a lyricist name, or a composer name corresponding to the content into ASCII code.

When the portable device 6 receives the content write command together with the content from the personal computer 1, the CPU 53 executing the main program read from the RAM 54 or the ROM 55
Upon receiving the write command, the flash memory controller 60 controls the flash memory controller 60 to write the content received from the personal computer 1 into the flash memory 61.

The flash memory 61 has a capacity of about 64 MBytes.
e and has a storage capacity of e. Further, the flash memory 61 stores in advance a reproduction code for decompressing a content compressed by a predetermined compression method.

The flash memory 61 may be made detachable as a memory card from the portable device 6.

When a reproduction command corresponding to a user's pressing operation of a play / stop button (not shown) is supplied to the CPU 53 through the operation key controller 62, the CPU 5
3 makes the flash memory controller 60 read out the reproduction code and the content from the flash memory 61 and transfer them to the DSP 59.

The DSP 59 converts the content into a CRC based on the reproduction code transferred from the flash memory 61.
(Cyclic Redundancy Check) After an error is detected by the method, the data is reproduced, and the reproduced data (indicated by D1 in FIG. 3) is supplied to the digital / analog conversion circuit 63.

The DSP 59 is integrally formed with a transmitting circuit provided inside, and reproduces contents based on a master clock MCLK from a transmitter 59A made of an external crystal, and also executes a master clock MCL.
K, a bit clock BCLK of a predetermined frequency generated by an internal oscillation circuit based on the master clock MCLK, and an operation clock L composed of an L channel clock LCLK and an R channel clock RCLK in frame units.
RCLK is supplied to the digital / analog conversion circuit 63.

The DSP 59 supplies the above-mentioned operation clock to the digital / analog conversion circuit 63 according to the reproduction code when reproducing the content, and stops supplying the operation clock according to the reproduction code when not reproducing the content. The digital / analog conversion circuit 63 is stopped to reduce the power consumption of the entire portable device 6.

Similarly, the CPU 53 and the USB controller 57 also execute predetermined processing based on the master clock MCLK supplied from the oscillator 53A or 57A, to which the crystal oscillator 53A or 57A is externally attached.

With this configuration, the portable device 6 does not need a clock generation module for supplying a clock to each circuit block such as the CPU 53, the DSP 59, and the USB controller 57, and simplifies the circuit configuration. In addition, the size can be reduced.

The digital-to-analog conversion circuit 63 converts the reproduced content into an analog audio signal and supplies the analog audio signal to the amplification circuit 64. The amplifier circuit 64 amplifies the audio signal and supplies the audio signal to the headphones via the headphone jack 65.

As described above, when the play / stop button is pressed, the portable device 6 plays back the content stored in the flash memory 61 under the control of the CPU 53, and also plays the play / stop button during playback. When is pressed, playback of the content is stopped.

When the play / stop button is pressed again after the stop, the portable device 6 resumes the reproduction of the content from the position where it stopped under the control of the CPU 53. When the playback / stop button stops playback by a pressing operation and a few seconds elapse without any operation being applied, the portable device 6 automatically turns off the power and reduces power consumption.

Incidentally, when the playback / stop button is pressed after the power is turned off, the portable device 6 does not play the content from the previous stop position, but
Play from the song.

The CPU 53 of the portable device 6
Controls the LCD controller 68 so that the display unit 67
In addition, the state of the playback mode (eg, repeat playback, intro playback, etc.), equalizer adjustment (ie, adjustment of the gain corresponding to the frequency band of the audio signal), song number, playing time, playback, stop, fast forward, fast reverse, etc. , The volume and the remaining amount of the dry battery 51 are displayed.

Further, the portable device 6 has an EEP
A so-called FAT (File Allo) such as the number of contents written in the flash memory 80 in the ROM 68, the block positions of the flash memory 61 in which the respective contents are written, and various other types of memory storage information.
cation Table).

Incidentally, in the present embodiment, the content is treated as 64 KByte as one block, and
The block position corresponding to the music content is stored in the FAT.

When the FAT is stored in the flash memory 61, for example, when the content of the first music is written in the flash memory 61 under the control of the CPU 53, the block position corresponding to the content of the first music is written in the flash memory 61 as the FAT. Then, when the content of the second song is written to the flash memory 61,
The block position corresponding to the content of the music piece is written as a FAT in the flash memory 61 (the same area as the first music piece).

As described above, the FAT is rewritten each time content is written to the flash memory 61,
Further, the same data is double-written for reserve for data protection.

When the FAT is written to the flash memory 61, the same area of the flash memory 61 is rewritten twice in response to one writing of the content. The specified number of rewrites has been reached, and rewriting of the flash memory 61 cannot be performed.

Therefore, the portable device 6 uses the FAT
Is stored in the EEPROM 68 to reduce the frequency of rewriting of the flash memory 61 corresponding to one content writing.

An FAT that has been frequently rewritten is stored in an EEPROM.
By storing the FAT in the flash memory 61, the portable device 6 can increase the number of times that the content can be written by several tens of times or more as compared with the case where the FAT is stored in the flash memory 61. Furthermore, the CPU 53
Since the FAT is written in the ROM 68 so as to be additionally written, the frequency of rewriting the same area of the EEPROM 68 is reduced, thereby preventing the EEPROM 68 from becoming unrewritable in a short period of time.

When the portable device 6 is connected to the personal computer 1 via the USB cable 7 (hereinafter referred to as USB connection), the portable device 6 is connected to the USB based on an interrupt signal supplied from the USB controller 57 to the CPU 53. Recognize that

When the portable device 6 recognizes that the USB connection has been made, the personal computer 1
External power having a specified current value is supplied via the SB cable 7 and the power supply circuit 52 is controlled to
The supply of power from the

When the USB connection is established, the CPU 53
The content reproduction process of SP59 is stopped. Thus, the CPU 53 prevents the external power supplied from the personal computer 1 from exceeding the specified current value, and performs control so that the external power having the specified current value is always received.

As described above, when the CPU 53 is connected to the USB, the CPU 53 switches the power supplied from the dry battery 51 to the power supplied from the personal computer 1, so that the external power from the personal computer 1 having a low power unit price is used. The power consumption of the dry battery 51 having a high power unit price is reduced, and thus the life of the dry battery 51 can be extended.

When the CPU 53 receives the supply of external power from the personal computer 1 via the USB cable 7, the CPU 53 stops the reproduction process of the DSP 59, thereby reducing the radiation from the DSP 59. As a result, the personal computer 1 1 is further reduced.

Next, functions of the personal computer 1 realized by executing a program installed in the personal computer 1 will be described.

FIG. 4 is a diagram showing a functional configuration of the personal computer 1 realized by executing a predetermined program and the like.

The content management program 111 uses the EM
D selection program 131, check-in / check-out management program 132, copy management program 13
3. Movement management program 134, encryption method conversion program 135, compression method conversion program 136, encryption program 137, use condition conversion program 139, use condition management program 140, authentication program 141, decryption program 142, PD driver 143, purchase And a plurality of programs such as a purchase program 144 and a purchase program 145.

The content management program 111 is described by, for example, shuffled instructions or encrypted instructions.
The contents of the processing are hidden from the outside, and it is difficult to read the contents of the processing (for example, even if the user directly reads the content management program 111, the instruction cannot be specified).

When the content management program 111 is installed in the personal computer 1, the EMD selection program 131
11 is received from the EMD registration server 3 via the network 2 at the time of EMD registration. EM
The D selection program 131 sends the EMD server 4 (4-1,
4-2, 4-3), the purchase application 115 or the purchase programs 144, 14
5 causes the EMD server 4 (4-1, 4-2, 4-3) to execute communication (for example, download content when purchasing the content).

The check-in / check-out management program 132 checks the contents of the content files 161-1 to 16-N based on the setting of check-in or check-out and the use condition files 162-1 to 162-N recorded in the content database 114. The content stored in the portable device 6 is checked out or the content stored in the portable device 6 is checked in.

The check-in / check-out management program 132 uses the use conditions stored in the use condition files 162-1 to 162-N recorded in the content database 114 in response to the check-in or check-out processing. Update information.

The copy management program 133 transfers the contents stored in the content files 161-1 to 161-N to the portable device 6 based on the usage rule files 162-1 to 162-N recorded in the content database 114. Or copy the content from the portable device 6 to the content database 114.

The movement management program 134 transfers the contents stored in the content files 161-1 to 161-N to the portable device 6 based on the usage rule files 162-1 to 162-N recorded in the content database 114. Or transfer the content from the portable device 6 to the content database 1
Move to 14.

The encryption system conversion program 135 is a system for encrypting the contents received by the purchase application program 115 from the EMD server 4-1 via the network 2, and the purchase program 144 received from the EMD server 4-2 via the network 2. The content encryption method is converted to the same encryption method as the content stored in the content files 161-1 to 161-N recorded in the content database 114.

The compression method conversion program 136 includes a method for compressing the content received from the EMD server 4-1 by the purchase application program 115 via the network 2 and a method for compressing the content received from the EMD server
-2 is converted to the same compression scheme as the content stored in the content files 161-1 to 161-N recorded in the content database 114.

The encryption program 137 reads the content (unencrypted) read from, for example, a CD and supplied from the recording program 113 in the content file 161 stored in the content database 114.
-1 to 161 -N are encrypted by the same encryption method as the content stored therein.

The compression / expansion program 138 is, for example, C
D, and the content (uncompressed) supplied from the recording program 113 is stored in the content file 16 stored in the content database 114.
Encoding is performed in the same encoding scheme as the contents stored in 1-1 to 161-N. Compression / expansion program 1
38 expands (decodes) the encoded content.

The use condition conversion program 139 includes the use condition information (so-called Usage Rule) of the content received by the purchase application program 115 from the EMD server 4-1 via the network 2, and the purchase program 144 corresponds to the EMD server 4. -2, the usage rule information of the content received from the content database 114 is stored in the usage rule file 162-1.
The format is converted to the same format as the usage rule information stored in the storage 162 -N.

Before executing the content copy, move, check-in, or check-out process, the usage condition management program 140 executes
4 use condition files 162-1 to 16-16 recorded in
The falsification of the usage rule information is detected based on the hash value corresponding to the usage rule information stored in 2-N. The usage condition management program 140 copies, moves,
The use condition information stored in the use condition files 162-1 to 162-N recorded in the content database 114 in association with the check-in or check-out process corresponds to the use condition information in response to updating. Update the hash value.

The authentication program 141 executes a mutual authentication process between the content management program 111 and the purchase application program 115 and a mutual authentication process between the content management program 111 and the purchase program 144. The authentication program 141 stores an authentication key used in the mutual authentication process between the EMD server 4-3 and the purchase program 145.

The authentication key used by the authentication program 141 in the mutual authentication process is determined when the content management program 111 is installed in the personal computer 1.
When it is not stored in the authentication program 141 and the registration processing is normally executed by the display operation instruction program 112, it is supplied from the EMD registration server 3 and stored in the authentication program 141.

The decryption program 142 executes the content file 16 recorded in the content database 114.
When the personal computer 1 reproduces the content stored in 1-1 to 161-N, the content is decrypted.

When the PD driver 143 checks out a predetermined content to the portable device 6,
Alternatively, when a predetermined content is checked in from the portable device, the portable device 6 is supplied with the content or a command for causing the portable device 6 to execute a predetermined process.

The purchase program 144 is installed together with the content management program 111, and the EMD
It is supplied from the registration server 3 via the network 2 or is supplied after being recorded on a predetermined CD. When installed in the personal computer 1, the purchase program 144 transmits and receives data to and from the content management program 111 via a predetermined format interface of the content management program 111.

The purchase program 144 is described by, for example, shuffled instructions or encrypted instructions, concealing the processing contents from the outside, and makes it difficult to read the processing contents (for example, , The user directly enters the purchase program 144
Is read, the instruction cannot be specified, etc.).

The purchase program 144 requests the EMD server 4-2 to transmit predetermined contents via the network 2, and receives the contents from the EMD server 4-2. In addition, the purchase program 144
When content is received from the EMD server 4-2, a billing process is executed.

The purchase program 145 is a program installed together with the content management program 111, and is connected to the EMD server 4 via the network 2.
-3 is requested to transmit predetermined contents, and E-3
The content is received from the MD server 4-3. Further, the purchase program 145 executes a billing process when receiving the content from the EMD server 4-3.

The display operation instruction program 112 includes a filtering data file 181, a display data file 1
82, an image of a predetermined window is displayed on the display 20 based on the image files 183-1 to 183-K or the history data file 184, and the content management program 1 is displayed based on an operation on the keyboard 18 or the mouse 19.
11 is instructed to execute processing such as check-in or check-out.

The filtering data file 181 is
Data for weighting each content stored in the content files 161-1 to 161-N recorded in the content database 114 is stored in the HDD 21.

The display data file 182 stores data corresponding to the content stored in the content files 161-1 to 161-N recorded in the content database 114 and is recorded on the HDD 21.

The image files 183-1 to 183-K are
Images corresponding to the content files 161-1 to 161-N recorded in the content database 114,
Alternatively, an image corresponding to a package described later is stored and H
It is recorded on DD21.

Hereinafter, the image files 183-1 to 183-
When it is not necessary to distinguish K individually, it is simply referred to as an image file 183.

The history data file 184 stores a history of the number of times the content stored in the content files 161-1 to 161-N recorded in the content database 114 has been checked out, checked in, and the date of the content. The data is stored in the HDD 21
It is recorded in.

At the time of registration processing, the display operation instruction program 112 stores the content management program 1 stored in advance in the EMD registration server 3 via the network 2.
11 as well as receiving the authentication key and the EMD selection program 131 from the EMD registration server 3 and sending the authentication key and E to the content management program 111.
An MD selection program 131 is supplied.

The recording program 113 displays an image of a predetermined window, and displays the image on the keyboard 18 or the mouse 19.
Then, data such as the recording time of the content is read from the CD, which is the optical disk 42 mounted on the drive 22, based on the operation of.

The recording program 113 transmits data (eg, album name, album name, etc.) corresponding to the CD to the WWW server 5-1 or 5-2 via the network 2 based on the recording time of the content recorded on the CD. Or the name of an artist) or data corresponding to the content recorded on the CD (for example, a song name), and the WWW server 5-1 or 5-2 requests the transmission of the data corresponding to the CD or the data recorded on the CD. Data corresponding to the content being received.

The recording program 113 supplies the received data corresponding to the CD or the data corresponding to the content recorded on the CD to the display operation instruction program 112.

When a recording instruction is input, the recording program 113 reads contents from the CD, which is the optical disk 42 mounted on the drive 22, and outputs the contents to the content management program 111.

The content database 114 stores the content compressed by a predetermined method and encrypted by a predetermined method supplied from the content management program 111 in any of the content files 161-1 to 161-N. (Record on HDD 21). The content database 114 stores a content file 161-1.
-161-N, the use condition information corresponding to the content stored in each of the use condition files 162-1 -162-N respectively corresponding to the content files 161-1 -161-N in which the content is stored. Is stored (recorded in the HDD 21).

The content database 114 may record the content files 161-1 to 161-N or the use condition files 162-1 to 162-N as records.

For example, the usage condition information corresponding to the content stored in the content file 161-1 is:
It is stored in the usage rule file 162-1. The usage rule information corresponding to the content stored in the content file 161-N is described in the usage rule file 162-N.
Is stored in

Hereinafter, the content files 161-1 to 16-1 will be described.
When it is not necessary to distinguish 61-N individually, it is simply referred to as a content file 161. Hereinafter, when it is not necessary to individually distinguish the usage rule files 162-1 to 162-N, they are simply referred to as usage rule files 162.

Application program for purchase 115
Is supplied from the EMD registration server 3 via the network 2 or recorded on a predetermined CD-ROM and supplied. The purchase application program 115 requests the EMD server 4-1 to transmit predetermined content via the network 2, and
And supplies the content to the content management program 111. Further, the purchase application program 115 executes a billing process when receiving the content from the EMD server 4-1.

Next, the correspondence between the data stored in the display data file 182 and the content files 161-1 to 161-N stored in the content database will be described.

Content files 161-1 to 161-
The content stored in any one of N belongs to a predetermined package. The package is more specifically either an original package, a my select package, or a filtering package.

The original package includes one or more contents, and corresponds to the classification of the contents in the EMD server 4 (for example, corresponding to a so-called album) or one CD. The content belongs to any one of the original packages, and cannot belong to a plurality of original packages. Also, the original package to which the content belongs cannot be changed. The user
Part of the information corresponding to the original package can be edited (addition of information or change of added information).

The MySelect package includes one or more contents arbitrarily selected by the user. The user can arbitrarily edit which content belongs to the My Select package. Content can simultaneously belong to one or more MySelect packages. Further, the content does not need to belong to any of the my select packages.

The contents selected based on the filtering data stored in the filtering data file 181 belong to the filtering package. The filtering data is supplied from the EMD server 4 or the WWW server 5 via the network 2 or is recorded on a predetermined CD and supplied. The user can edit the filtering data stored in the filtering data file 181.

The filtering data is used as a reference for selecting a predetermined content or calculating a weight corresponding to the content. For example, if the filtering data corresponding to the J-POP (Japanese pop) best ten of the week is used, the personal computer 1 can obtain the content of the Japanese pop No. 1 of this week to the Japanese pop 10 of this week.
The content of the order can be specified.

The filtering data file 181 is
For example, filtering data that selects content in descending order of the period checked out in the past month,
Filtering data to select content that has been checked out frequently in the past six months, or "Love" in the song title
And filtering data for selecting a content containing the character “.”

As described above, the contents of the filtering package correspond to the contents display data 221 (including the data set by the user in the contents display data 221) or the history data 184 corresponding to the contents, and the filtering data. Let me choose.

The driver 117 drives the audio input / output interface 24 under the control of the content management program 111 or the like to input digital content supplied from the outside and supply it to the content management program 111. Alternatively, the content supplied from the content database 114 via the content management program 111 is output as digital data, or an analog signal corresponding to the content supplied from the content database 114 via the content management program 111 is output. .

FIG. 5 is a diagram showing an example of a display operation instruction window displayed on the display 20 by the operation instruction program 112 when the display operation instruction program 112 is activated.

In the display operation instruction window, a button 201 for activating the recording program 113, a button 202 for activating the EMD selection program 131,
A button 203 for displaying a field for setting check-in or check-out processing, a button 204 for displaying a field for editing a MySelect package, and the like are arranged.

When button 205 is selected, field 211 displays data corresponding to the original package. When the button 206 is selected, the field 211 displays data corresponding to the My Select package. When the button 207 is selected, the field 211 displays data corresponding to the filtering package.

The data displayed in the field 211 is
Data related to the package, such as a package name or an artist name.

For example, in FIG. 5, the package name “first” and the artist name “A Taro”, the package name “second” and the artist name “A Taro”
Are displayed in the field 211.

A field 212 includes a field 211
The data corresponding to the content belonging to the package selected in is displayed. The data displayed in the field 212 is, for example, the title of the music, the playing time, or the number of checkouts.

For example, in FIG. 5, since the package corresponding to the package name “second” is selected, the song title “South Bar” corresponding to the content belonging to the package corresponding to the package name “second” and checkout The number of possible times (for example, one eighth note corresponds to one checkout, and two eighth notes indicate two checkouts), the song title "Northern Graveyard" and the number of possible checkouts (eighth note Is displayed in the field 212).

As described above, one eighth note as the number of possible check-outs displayed in the field 212 is:
Indicates that the corresponding content can be checked out once.

The rest displayed as the number of possible checkouts displayed in the field 212 indicates that the corresponding content cannot be checked out (the number of possible checkouts is 0. (However, the personal computer 1 cannot reproduce the content. Yes.)) The treble clef as the number of possible check-outs displayed in the field 212 indicates that the number of check-outs of the corresponding content is not limited (the user can check out any number of times).

It should be noted that the number of possible check-outs may be indicated not only by the number of predetermined figures (for example, a circle, a star, a month, etc.) as shown in FIG. 5, but also by a number or the like.

In the display operation instruction window, images and the like (image files 183-1 to 183-FIG. 4 in FIG. 4) associated with the selected package or content are displayed.
A field 20 for displaying (corresponding to any of K)
8 are arranged. The button 209 is clicked when reproducing the selected content (outputting sound corresponding to the content to the speaker 45).

When button 205 is selected, field 21
1, when data corresponding to the original package is displayed, when a song title of predetermined content displayed in the field 212 is selected and an erasing operation is performed, the display operation instruction program 112 111, corresponding to the selected song name,
A predetermined content stored in the content database 114 is deleted.

When a button (a button 255 to be described later) of a window displayed by the recording program 113 is selected (activated), when a content read from a CD is recorded in the content database 114, a display operation instruction program is executed. Reference numeral 112 displays, in the display operation instruction window, a field 213 for displaying the title of the content stored in the portable device 6 specified in advance.

When the button of the window displayed by the recording program 113 is selected and the content read from the CD is recorded in the content database 114, the display operation instruction program 112 causes the content management program 111 to send the content database 1
The content read out from the CD recorded in 14 is checked out to the portable device 6 designated in advance.

In the field 213, a symbol indicating whether or not the content can be checked into the personal computer 1 is displayed at the leftmost of the field 213 in correspondence with the title of the content. For example, field 2
13 indicates that the content corresponding to the music title of the content can be checked in to the personal computer 1 (that is, the personal computer 1).
Checked out from). “X” located at the leftmost of the field 213 indicates that the content corresponding to the title of the content is the personal computer 1.
Cannot be checked in (ie, not checked out from personal computer 1, for example, checked out from another personal computer)
It is shown that.

When the display operation instruction program 112 displays the field 213 in the display operation instruction window,
The display operation instruction program 112 displays, in the display operation instruction window, the name of the portable package (the package to which the content stored in the portable device 6 belongs) to which the content stored in the portable device 6 specified in advance belongs. Field 21
4. Button 210 for closing field 213 and button 2 for executing check-in or check-out
15 is displayed.

Further, when the display operation instruction program 112 displays the field 213 in the display operation instruction window, the display operation instruction program 112 checks the content corresponding to the music title selected in the field 212 in the display operation instruction window. Button 2 to set out
16, a button 217 for setting a check-in of the content corresponding to the song name selected in the field 213, a button 218 for setting a check-in of all the content corresponding to the content name displayed in the field 213, and check-in or check-out A button 219 for canceling the setting is arranged.

The personal computer 1 does not execute the check-in or check-out process only by setting the check-in or check-out by operating the buttons 216 to 219.

After check-in or check-out is set by operating buttons 216 to 219, button 2
15 is clicked, the display operation instruction program 1
12 causes the content management program 111 to execute a check-in or check-out process. That is,
When the button 215 is clicked, the display operation instruction program 112 causes the content management program 111 to transmit the content to the portable device 6 or to execute a predetermined command corresponding to the check-in, based on the check-in or check-out setting. (For example, a command for erasing predetermined content stored in the portable device 6) and the use condition file 1 corresponding to the transmitted content or command.
The use condition information stored in 62 is updated.

When the check-in or check-out is executed, the display operation instruction program 112 updates the history data stored in the history data file 184 in accordance with the transmitted content or the transmitted command. The history data includes information identifying the checked-in or checked-out content, the date on which the content was checked in or checked out, and the portable device 6 on which the content was checked out.
And the like.

Since the check-in or check-out setting process can be executed in a short time, the user can quickly know the state after the execution of the check-in or check-out process. By reducing the number of check-out processes, the entire time required for check-in or check-out (including setting and execution) can be shortened.

FIG. 6 is a diagram for explaining an example of a window displayed on the display 20 by the recording program 113.

For example, based on the information on the CD received from the WWW server 5-2, the recording program 113 displays the title of the CD such as “asynchronized” in the field 251. CD received from WWW server 5-2
Recording program 113, based on the information of
At 52, for example, an artist name such as “Kwai” is displayed.

On the basis of the CD information received from the WWW server 5-2, the recording program 113
For example, the song titles such as "Heat", "Planet", "Black", and "Soul" are displayed in the portion where the song title is displayed. Similarly, the recording program 113 performs
For example, an artist name such as “Kwai” is displayed in a portion displaying 53 artists.

After the recording program 113 receives the information of the predetermined CD, the recording program 113 stores the information of the CD in a predetermined directory of the HDD 21.

When button 254 or the like is clicked, CD
Recording program 11 when an instruction to acquire the
3 first searches a predetermined directory of the HDD 21. The recording program 113 stores C in the directory.
When the information of D is stored, a dialog box (not shown) is displayed to allow the user to select whether to use the information of the CD stored in the directory.

When the button 256 for instructing the start of recording of the content arranged in the window displayed by the recording program 113 is clicked, the recording program 113 reads the content from the CD stored in the drive 22 and reads the content. The content read from the CD is supplied to the content management program 111 together with the information on the CD. The compression / decompression program 138 of the content management program 111 compresses the content supplied from the recording program 113 by a predetermined compression method, and the encryption program 137 encrypts the compressed content. The use condition conversion program 139 generates use condition information corresponding to the compressed and encrypted content.

The content management program 111 supplies the compressed and encrypted content to the content database 114 together with the usage condition information.

The content database 114 generates a content file 161 and a usage rule file 162 corresponding to the content received from the content management program 111, stores the content in the content file 161 and stores the usage rule information in the usage rule file 162. Is stored.

When the content and the usage condition information corresponding to the content are stored in the content database 114, the content management program 111 supplies the CD information and the usage condition information received from the recording program 113 to the display operation instruction program 112. .

The display operation instruction program 112 is based on the use condition information and CD information corresponding to the content stored in the content database 114 in the recording process.
The display data to be stored in the display data file 182 is generated.

[0164] In the window displayed by the recording program 113, when the content read from the CD is recorded in the content database 114, the content is automatically displayed.
Portable device 6 for reading content read from CD
Button 25 for setting whether or not to check out
5 are arranged.

For example, when the button 255 is clicked, the recording program 113 displays a pull-down menu indicating the portable device 6. When the user selects a portable device 6 from the pull-down menu, the portable device 6 is automatically selected.
Check out the content recorded from the CD. When the user selects “do not check out” from the pull-down menu, the personal computer 1
Does not check out when recording content from a CD.

As described above, when the content read from the CD is recorded in the content database 114 simply by activating the button 255 of the window displayed by the recording program 113, the personal computer 1 is designated in advance. The content read from the CD can be checked out by the portable device 6.

(2) Handling between Different Formats There are many content distributors that provide music contents, and for each distributor, the encryption method and compression method of the content, and usage condition information Format is different. Therefore, in general, the user has to purchase a content management application or a portable device for reproduction or check-in / check-out for each distributor of the content to be provided. Therefore, the user can transfer music content stored on one personal computer to one personal computer.
Could not be handled by one management application or portable device.

Therefore, in the present system, the content having a different format for each distributor is uniformly handled on the personal computer 1 as described above.

Hereinafter, the unified handling of content having different formats for each distributor in this music content distribution system will be described with reference to FIG.

Multiple EMDs Connected to Network 2
The server includes, for example, an EMD server (A) 4-1 that distributes music content provided by the music provider A, and an EM server that distributes music content provided by the music provider B.
The D server (B) 4-2 and the EMD server (X) 4-3 that distribute music content provided by the music provider company X are assumed. Each EMD server 4 (4-1, 4-2,
In 4-3), music contents provided in a lineup unique to each company are provided to the personal computer 1 owned by the user via the network 2. In each of the EMD servers 4 (4-1, 4-2, and 4-3), an encryption method for music content, a format of usage rule information, a compression method for music content, a charging method for music content, and the like. However, each company's own method is adopted and music contents are distributed by different methods.

The personal computer 1 has a reproduction application (A) 311 for purchasing, managing and reproducing music contents from the EMD server (A) 4-1 as application software for reproducing and managing music contents. And a reproduction application (B) 312 for purchasing, managing and reproducing music contents from the EMD server (B) 4-2, and a device driver (A) 313 for transferring the music contents to the portable device (A) 6-1. And a device driver (B) 314 for transferring music content to the portable device (B) 6-2.
And have been installed. The reproduction applications 311 and 312 shown in FIG. 7 correspond to the purchase application program 115 and the driver 117 shown in FIG.

The personal computer 1 has H
A comprehensive management unit (X) 315 that comprehensively manages all music contents stored in the DD 21 is installed. This comprehensive management unit (X) 31
5 further includes an EMD reception interface 316,
It comprises an EMD transmission interface 317 and a PD driver 318.

Here, portable device (A) 6-1 is a dedicated device corresponding to music provider A, and portable device (B) 6-2 is a dedicated device corresponding to music provider B. It is assumed that the portable device (X) 6-3 is a dedicated device corresponding to the music provider X. Here, the music content stored in the memory card is encrypted by an encryption method unique to each music provider, and the compression method and the format of usage condition information are different. Therefore, for example, it is assumed that music content cannot be transferred by directly connecting to another device driver or the like.

The reproduction application (A) 311
It performs a process of connecting to the EMD server, a process of uploading a log file and the like, a process of downloading music content, a content key, usage condition information, and the like. The reproduction application (A) 311 is compatible with the corresponding EM.
Connection processing is performed only for the D server. Here, the reproduction application (A) 311
Performs processing corresponding to the EMD server (A) 4-1.
Connection processing cannot be performed for another EMD server. Also, the reproduction application (A) 311
Authentication processing when connected to the MD server (A) 4-1; authentication processing when connected to the portable device (A) 6-1;
It performs encryption / decryption processing of music content and usage condition information stored in the HDD 21. The reproduction application (A) 311 is, for example, an EMD server (A)
The music content downloaded from 4-1 and its use condition information are encrypted with a content key, and the content key is encrypted with a session key and stored in the HDD 21. It should be noted that the encryption method employs a unique method for each reproduction application. for that reason,
Even music content stored in the same HDD 21 in the personal computer 1 cannot be decrypted by other reproduction applications unless it is a dedicated reproduction application.

Also, the reproduction application (A) 31
1 also manages usage condition information added to each music content. For example, a reproduction application (A)
Numeral 311 describes the reproduction count limit value in the usage condition information,
In the case where the number of times of reproduction of the content is restricted, a process of decrementing the limit of the number of times of reproduction or reproduction by one for each reproduction or duplication is performed.

The reproduction application (A) 31
Reference numeral 1 denotes a comprehensive management unit (X) 315 for storing music content and usage condition information managed by itself on the HDD 21.
To the EMD receiving interface 316.

The reproduction application (B) 312
It performs a process of connecting to the EMD server, a process of uploading a log file and the like, a process of downloading music content, a content key, usage condition information, and the like. The reproduction application (B) 312 is compatible with the corresponding EM.
Connection processing is performed only for the D server. Specifically, the reproduction application (B) 312
Performs processing corresponding to the EMD server (B) 4-2,
Connection processing cannot be performed for another EMD server. Also, the reproduction application (B) 312
Authentication processing when connected to the MD server (B) 4-2, authentication processing when connected to the portable device (B) 6-2,
It performs encryption / decryption processing of music content and usage condition information stored in the HDD 21. The reproduction application (B) 312 is, for example, an EMD server (B)
The music content downloaded from 4-2 and its use condition information are encrypted with a content key, and the content key is encrypted with a session key and stored in the HDD 21.

Also, the reproduction application (B) 31
2 also manages usage condition information added to each music content. For example, a reproduction application (B)
Numeral 312 describes a reproduction count limit value in the usage condition information,
In the case where the number of times of reproduction of the content is restricted, a process of decrementing the limit of the number of times of reproduction or reproduction by one for each reproduction or duplication is performed.

Further, the reproduction application (B) 31
Reference numeral 2 denotes a comprehensive management unit (X) 315 which stores music content and usage condition information managed by itself on the HDD 21.
To the EMD receiving interface 316.

The device driver (A) 313 is application software for transferring music contents to the portable device (A) 6-1. The device driver (A) 313 is a portable device (A) 6
-1 is transferred.

The device driver (B) 314 is application software for transferring music contents to the portable device (B) 6-2. The device driver (B) 314 is a portable device (B) 6
-2 to transfer the music content.

The comprehensive management unit (X) 315 is an EMD
It is application software dedicated to the music provider X that receives music content from the server (X) 4-3, and also includes a device driver (A) 313 and a device driver (B) 314, and a reproduction application (A) 311 and a reproduction. Application (B) 312
It is also management software that transfers music content and usage condition information to and from the personal computer 1 to comprehensively manage the music content. In addition, music content managed by the user can be transferred to a dedicated portable device (X) 6-3, which is a portable music playback device.

The comprehensive management unit (X) 115
Performs a process corresponding to the content management program 111 shown in FIG.

The PD driver 318 is an interface module for connection with the portable device (X) 6-3, and performs authentication processing and encryption processing with the portable device (X) 6-3. When transferring music contents and the like to the other portable devices 8 and 9, the PD driver 318 transfers the music contents and use condition information via the device driver (A) 313 or the device driver (B) 314. I do.

The receiving interface 316 for EMD is
Receiving music content and usage condition information from the playback application (A) 311 and the playback application (B) 312, and receiving the music content and usage condition information transferred from the EMD server (X) 4-3 via the network 2. It receives and transmits and receives music content and usage condition information to and from the PD driver 318.

The EMD receiving interface 316
When music content and usage condition information are received from the reproduction application (A) 311 and the reproduction application (B) 312, the mutual authentication process, the conversion of the encryption method, and the usage condition information added to the music content to be transferred are performed. The conversion of the format of the music content to be transferred, the conversion of the compression method of the music content to be transferred, and the like are performed. Encryption method, usage condition information,
The conversion of the compression method is performed by the reproduction application (A) 31.
1 and the system used by the playback application (B) 312 are converted to the system used by the comprehensive management unit (X) 315. Here, comprehensive management unit (X) 3
The system used by the F.15 is hereinafter referred to as a unified transfer protocol. Then, the EMD receiving interface 316
Transmits the music content and the usage condition information converted into the unified transfer protocol to the device driver (A) 313 and the device driver (B) 314 via the PD driver 318. Further, the EMD receiving interface 316 transmits the music content and the usage condition information converted into the unified transfer protocol to the PD driver 318.
To the portable device (X) 6-3.

As described above, the music contents provided from the EMD server (A) 4-1 and the EMD server (B) 4-2 are temporarily downloaded by the reproduction application (A) 311 and the reproduction application (B) 312. Then, the encryption method, compression method, and usage condition information of the music content are converted into a unified transfer protocol and transferred to the comprehensive management unit (X) 315. The comprehensive management unit (X) 315 includes the EMD server (A) 4-1 and the EMD
The music content of each content provider downloaded from the server (B4-2) and the EMD server (X) 4-3 can be comprehensively managed.

The EMD receiving interface 31
Reference numeral 6 has functions of copying (copying), moving (moving), checking in, and checking out music content.

The EMD receiving interface 316 is
In accordance with a copy command and a move command from the user, for example, a process of copying or moving music content managed by the playback application (A) 311 or the playback application (B) 312 to the comprehensive management unit (X) 315 is performed. Do. At this time, the reception interface for EMD 316 uses an encryption method and a compression method for music content,
The description format of the usage conditions is converted into a unified transfer protocol.

Further, in accordance with a CD ripping command or a check-in command from the user, an external medium such as a compact disc or the portable device 6 (6-1, 6-2, 6-6) is used.
The processing for copying or checking in the music content stored in (-3) to the comprehensive management unit (X) 315 is performed. At this time, the EMD receiving interface 316
If the description format of the encryption method, compression method, and use condition of the music content is not a unified transfer protocol, these are converted into a unified transfer protocol.

In accordance with the check-out command from the user, the music contents managed by the comprehensive management unit (X) 315 are transferred to the portable device (X) 6-6.
3 is performed. At this time, the reception interface 316 for EMD performs conversion of the encryption format and the compression format of the music content and the description format of the use condition if the description format is not the unified transfer protocol,
Use a unified transfer protocol. At this time, the number of times that the use condition can be checked out is reduced by one.

In the comprehensive management unit (X) 315, as shown in FIG. 8, a unified transfer protocol is provided in a lower layer of the application layer, and data transfer with another reproduction application is performed in this layer. . Then, the comprehensive management unit (X) 315 sets the lower layer of this unified transfer protocol to http (hiper
Data transfer with the EMD server (X) 4-3 is performed as Text Transfer Protocol).

In the music content distribution system configured as described above, the comprehensive management unit (X) 315 acquires the music content distributed from the EMD server (A) 4-1 and the EMD server (B) 4-2. , Playback and management. Then, the EMD server (X) 4-
3. EMD server (A) 4-1 and EMD server (B)
The music content distributed from 4-2 can be transferred to the portable device (X) 6-3.

As described above, in the music content distribution system, the conversion of the encryption method of the music content to be transferred and the conversion of the music content to be transferred between the reproduction application and the device driver are performed mainly by the comprehensive management unit (X) 315. The format of the added usage condition information is converted, the compression method of the music content to be transferred is converted, and the music content is transferred using the unified transfer protocol. Therefore, for example, the music content downloaded from the EMD server (A) 4-1 by the playback application (A) 311 and the music content downloaded from the EMD server B 4-2 by the playback application (B) 312 are stored in the comprehensive management unit ( X) 315. For this reason, for example, the artist's music content provided only from the music provider A can be transferred to the portable device (X) 6-3. That is, in this music content distribution system, the encryption method of music content, the format of usage condition information, the compression method of music content,
Since the contents are converted into the unified transfer protocol, the music contents of various systems stored in the hard disk of the personal computer 1 can be transferred to the comprehensive management unit (X) 315.
And the portable device (X) 6-3. In particular, in music content distribution systems,
At the time of transfer, since the encryption method and the usage condition information are converted, the degree of freedom in handling the music content can be increased while protecting the copyright of the music content.

That is, in the music content distribution system, at least the encryption method and the usage condition information are converted between the playback applications for playing and controlling the music content, and the music content and the usage condition information are transferred. As a result, in the music content distribution system, even if there are a plurality of reproduction applications, music content stored in, for example, the HDD 21 in the personal computer 1 can be freely moved,
Unified music content management can be performed. Further, since the use condition information is transferred together with the music content, the use condition does not overlap with one music content, and the copyright of the music content can be surely protected.

(3) Use Condition Information (Description of Commonly Used Use Condition Information) Next, an example of a format of use condition information used for the reproduction application (A) 311 will be described.

The reproduction application (A) 311 uses, for example, usage condition information described in a table format as shown in FIG. 9A.

[0198] In the left column of the table, policies of use conditions are described in the column direction, and in the right column, specific values of each policy are described. For example, as a policy, a reproduction start date (f
rom), a reproduction end date (to), a price for one reproduction (pay / play), and the like. Such usage condition information is distributed from the EMD server (A) 4-1 in a state where it is added to each music content as shown in FIG. 9B. The reproduction application (A) 311 includes:
The music content is controlled according to the described policy and its value. For example, in the usage condition information, the playback start date (from) is October 25, 1999, the playback end date (to) is November 24, 1999, and the price (pay / play) for one playback is yes /. It is assumed that 10 yen is described. In this case, the music content can be reproduced from October 25, 1999, and the reproduction is prohibited even if there is a reproduction command from the user before that. The music content can be reproduced until November 24, 1999, and thereafter, the music content is deleted. The music content is set so as to charge 10 yen each time it is reproduced. For example, the number of times the user reproduces the music content is separately stored as log information, and the log information is stored in the EMD server. (A) Upload to 4-1 and perform a charging process for the number of viewings for the viewing user.

(Description of Use Condition Information Used by Comprehensive Management Unit (X) 315) Next, use condition information used by the comprehensive management unit (X) 315 will be described. The usage condition information described below is added to music content downloaded from the EMD server (X) 4-3, and is used when the comprehensive management unit (X) 315 controls the music content. The usage condition information is transmitted between the reproduction application (A) 311 and the comprehensive management unit (X) 315.
And, it is used as a unified format when transferring music content between the reproduction application (B) 312 and the comprehensive management unit (X) 315. Less than,
This use condition information is referred to as unified use condition information.

As shown in FIG. 10, the unified use condition information includes an index file 331, an automaton file 332, a parameter file 333, and a history file 334. Each file is in XML (eX
tensible Markup Language).

The index file 331 describes reference information of each file.

The automaton file 332 contains
As shown in FIG. 7, an automaton description section 341 in which usage conditions are described in an automaton, an authentication code (MAC: Message Authentication Code) 342 using a content key,
A signature (Sig) 343 of the content provider and a certificate (Cert) 344 for verifying the signature are added. Here, the content key is K _C , and the private key and public key of the content provider who created the content are K ⁻¹ _E and K ¹ _E , respectively.

[0203] The automaton description section 341 describes the operation state of the music content by the Extended State Machine described in the tuple column.

Specifically, the automaton description unit 341 sets the current set of operating states of music content to Q,
A set of input symbols representing events of the music content is represented by Σ, and a set of operating states of the music content after the state transition is represented by Q ′ as follows. Q ′ = {d | d = δ (q, α) | q Q, α}, δ:
Q × Σ → Q｝ As shown in this equation, a set of states Q ′ after state transition is represented as d. This d is defined by a function δ having variables q and α. q indicates one operation state in a set Q of operation states of music content.
α indicates one event in the set of events Σ. The function δ is a mapping of a set of powers of Q and Σ to Q.

Then, based on the above Q, Σ, Q ′,
The tuple is represented as {<q, α, d> | q, dQ, α}. Note that <q, α, d> indicates a certain combination of permutations of q, α, and d.

Here,】 includes reproduction (Play) and duplication (cop
y), payment amount (pay Y), playback start date and time (from YM
D), playback end date and time (to YMD), usable days (in Dday)
Events such as s) and null event (ε) are described as follows. Σ = ｛Play, copy, pay Y, from YMD, to YMD, in Ddays,
ε｝ Thus, the automaton description unit 341 is described as described above.

A specific description example of the automaton description section 341 will be described.

For example, FIG. 13 shows a description example of a tuple sequence of an automaton indicating an operation transition of music content as shown in FIG.

This automaton makes a state transition as described below.

First, the state transits from the initial state q0 to the states q1 and q5. After the state q1 and the state q5, they operate in parallel.

In state q1, when a payment event (pay10) of a predetermined amount (for example, 10 yen) occurs, the state transits to state q2. When a play event (play) occurs in the state q2, the state transits to the state q1. In other words, this automaton indicates that the music content can be reproduced only once when a payment of 10 yen is made. When a payment event (a.pay1000) of a predetermined amount (for example, 1000 yen) occurs in the state q1, the state q
Transition to 3. In the state q3, the play event (pla
When y) occurs, the state transits to the state q3 again. That is, in this automaton, it is shown that the music content can be reproduced without any limitation when the payment of 1000 yen is made. In addition, when a payment event (pay10 × n) of n times the amount of one reproduction (for example, 10 yen) occurs in the state q1, the state transits to the state q4. After transitioning to the state q4, the play event (pla
When y) occurs, the state transits to the state q4 again. When n play events have occurred in state q4, the state transits to state q1. That is, this automaton indicates that the music content can be reproduced n times when a payment of 10 × n yen is made.

In state q5, a predetermined amount of money (for example, 10
When a payment event (pay100) of 0 yen occurs, the state transits to the state q6. In the state q6, the copy event (c
(Opy), the state transits to the state q5. When a copy event (copy) occurs in the state q6, the state transits to the state q8. In the state q8, the play event (pl
When ay) occurs, the state transits to the state q8 again. When a copy event (copy) occurs in the state q8, the state transits to the state q9. The state q9 is a terminal state in which no transition is made to any state and no event can be generated. In other words, this automaton indicates that music content can be copied once to another device when a payment of 100 yen is made. This automaton also indicates that the copied music content can be reproduced any number of times, but cannot be reproduced if copied to another device or the like.

In state q5, a predetermined amount of money (for example, 20
When a payment event (a.pay2000) of ¥ 00 occurs, the state transits to the state q7. In the state q7, when a copy event (copy) occurs, the state transits to the state q7 again. In the state q7, the copy event (cop)
When y) occurs, the state transits to the state q8. In state q8,
When a play event (play) occurs, the state transits to the state q8 again. When a copy event (copy) occurs in the state q8, the state transits to the state q9.
The state q9 is a terminal state in which no transition is made to any state and no event can be generated. That is, this automaton indicates that the music content can be copied to another device without restriction on the number of payments when a payment of 2,000 yen is made. This automaton also indicates that the copied music content can be reproduced any number of times, but cannot be reproduced if copied to another device or the like.

If the automaton which makes a state transition as described above is described by a tuple sequence, it becomes as shown in FIG.

[0215] The automaton description unit 341 may describe parallel composition of operation states in order to update the operation of music content. For example, parallel synthesis of the operations a ₀ and the operation a ₁ is expressed as follows in tuple sequence. <Q ₀ , α, a ₀ . q ₀ ><q ₀ , α, a ₁ . q ₀ > The automaton description section 341 may describe an action associated with a state transition. For example, the action is
It is represented by tuple as follows. <Q ₀ , α, q ₁ ; action> This action is represented as a function using a predefined variable. Further, the variable includes an ID, a scope, and an initial value. The scope includes classes such as music contents, albums, and the entire system. For example, a variable representing the purchase price of the album (a) is n, and a. n:
= 1000. An example of the automaton description unit 341 in which the action for the variable is described as described above is shown below. _{<Q 0, pay100, q 1} , a. n: = a. n-100> ··· (1) <q 0, pay (a.n), q 1, a. n: = 0> ··· (2 ) <q 1, play, q 2> ··· (3) This example purchase price of one music content {equation (1)} is, album purchase {formula ( 2) It has an effect on the price of $.

The automaton description section 341 as described above
14 includes an entry ID 345, a content ID 346, version information 347, variable information 348, and a tuple column 349, as shown in FIG.

A specific example of the automaton description unit 341 in which the description format is determined as described above will be described.

Note that events and commands used in the description of the automaton below are based on DTD (Document Type Definition) defined based on the XML specification.
Is defined in For example, as shown in FIG. 15, a reproduction operation (play), a duplication operation (copy), a reproduction right purchase (pay-fo
r-play), copy right purchase (pay-for-copy), album reproduction right purchase (pay-for-album-play), album copy right purchase (pay-for-album-copy), availability start date (from ), End-of-use date (to), and null behavior (null) as events
Defined by DTD.

FIG. 16 shows a case where the music content is
It is an example of description of the automaton description part 341 in XML language which shows that reproduction is possible from the 1st of the month.

The description shown in FIG. 16 is an automaton as shown in FIG. This automaton includes an initial state q1 and a state q2. State q1
In the date, the start date (from) of September 1999
On the first day of the month, the state transits to the state q2. And state q
When a reproduction event (play) occurs in step 2, the music content is reproduced and the state transits to the state q2 again. In this way, this automaton can transfer music contents to 199
Control is performed so that reproduction can be performed from September 1, 1997.

FIG. 18 shows that the music content is
It is an example of description of the automaton description part 341 in XML language which shows that reproduction | regeneration is possible until October 31.

The description shown in FIG. 18 is an automaton as shown in FIG. This automaton includes a state q1 in an initial state and a state end in a terminal state. When a playback event (play) occurs in state 2, music content is played back, and the state transits to state q2 again. In the state 2, the use end date (to) 1999
When October 31 is reached, the state transits to the state end. When the state becomes end, no transition occurs to any state and no event occurs. In this way, the automaton controls the music content so that it can be reproduced until October 31, 1999.

FIG. 20 is an automaton in XML language indicating that the reproducible period of the music content is from September 1, 1999 to October 31, 1999, and the reproducible number is 16 times. 4 is a description example of a description unit 341.

The description shown in FIG. 20 is an automaton as shown in FIG. This automaton includes an initial state q1, a state q2, and a terminal state end. In the state q1, the usable start date (from
When m) is September 1, 1999, the state transits to the state q2. Then, when a playback event (play) occurs in state q2, the music content is played back, and
Transition to 2. In state 2, when the use end date (to) is October 31, 1999, or when a 16-time playback event (play × 16) occurs, the state end
Transition to. When the state becomes end, no transition occurs to any state and no event occurs. Thus, in this automaton, the playback period of the music content is set to be from September 1, 1999 to October 31, 1999, and the number of times of playback is controlled to 16 times.

FIG. 22 shows that the number of times the music content has been reproduced is one.
It is a description example of the automaton description part 341 by XML language which shows that it limits to six times.

Next, the parameter file 333 contains
As shown in FIG. 23, a parameter description section 351, an authentication code 352 using a content key, a signature 353 of a content provider, and a certificate 354 for verifying the signature are added. Here, the content key is K _C , and the private key and public key of the content provider who created the content are K ⁻¹ _E and K ¹ _E , respectively.

The parameter file 333 can be rewritten by a content provider different from the content provider that created the automaton file 332 (for example, a secondary provider such as a content retailer or a content intermediary). is there. As shown in FIG. 24, the rewritten parameter file 333 stores the unique entity I given to each provider or intermediate company.
D55 is added. Here, K ′ _C is the content key of the secondary provider, and K ′ _C = H (K _C , EntityID)
Becomes Here, H is a one-way hash function. The content key K ′ _C of the secondary provider is created from the content key K _C of the primary provider. The primary provider and the secondary provider are distinguished by their certificates.

As a method of verifying the parameter file 333, if the content key is obtained, the verification is performed by the MAC. If the content key is not obtained due to security or the like, the verification is performed by the signature and the certificate.

The protocol verified by the MAC is as follows. The primary provider of the content is S, the secondary provider is A, and the terminal is B. S → A indicates transmission from S to A, S → B indicates transmission from S to B, and A → B indicates transmission from A to B. Also,
ID _A indicates the ID of device A.

S → A: K ′ _C = H (K _C , ID _A ) S → B: X = E _Ks (K _C ) A → B: ID _A , Parameters, M = MACK ′ _C (Para
meters) B: M MAC _K ' _c (Parameters)? In the parameter description section 351, a coefficient of a function for changing a value described in the automaton section 41 of the automaton file 31 is described. For example, in the example shown in FIG. 13, in the automaton unit 41, for example, the price of the music content may be a function as follows. <Q ₀ , pay (f ₁ (10)), q ₁ ><q ₁ , pay (f ₂ (10) × n), q ₂ > In this case, the functions f ₁ and f ₂ are, for example, It is determined as follows. f ₁ (n) = 0.9n f ₂ (n) = 90 + 0.1n By defining the function in this way, for example, the primary provider determines the default value of the price, and the secondary provider rewrites the parameter file 333. You can change the price.

The parameter description section 351 as described above
As shown in FIG. 25, it is composed of an entry ID 356, a content ID 357, and coefficient information 358.

[0232] The history file 334 is a file that describes the trajectory of the operation of the music content that operates in the automaton description section 341 based on the content of the description. The history file 334 contains the tuple of the automaton description 41 described above.
Record the status and variables in. For example, in the example shown in FIG. 13 described above, when the reproduction is performed twice, it becomes <q ₀ , q ₁ , q ₀ , q ₁ >, whereby the locus of the following operation can be obtained. <Pay10, play, pay10, play> These are totaled and, for example, the comprehensive management unit (X) 31
5, the user can calculate the payment amount of the user.

As described above, in the music content distribution system, since the use condition information is described by the automaton in which the policy itself and its specific value are programmed, the degree of freedom in describing the use condition of the content can be increased. it can.

(4) Squirrels such as destroyed music contents
Store and re-download will now be a description backup the music content by comprehensive management unit (X) 315.

First, a method of managing the key of the music content by the comprehensive management unit (X) 315 will be described with reference to FIG.

The comprehensive management unit (X) 315 stores music contents C1, C2, C3... Cn in the HDD 21 in the personal computer 1. In addition, the comprehensive management unit (X) 315
1, C2, C3... Cn corresponding to the content key Kc
1, Kc2, Kc3,... Kcn are also stored. The content key Kc has a one-to-one relationship with the music content C. In addition, each music content C1, C2,
Content IDs for identification are added to C3... Cn. This content ID is C
ID1, CID2, CID3,... CIDn.

Music contents C1, C2, C3... C
n is the content key Kc1, Kc2, Kc3,.
n, E (Kc1, C1), E (Kc
2, C2), E (Kc3, C3) ... E (Kcn, C
n) and the HDD of the personal computer 1
21. Here, E (K, C) indicates that the content C is encrypted with the key K. Normal,
The content ID is recorded in the header or the like of the music content C and is encrypted together with the music content C, or the MAC is added to the music content C so that the content ID cannot be separated from the music content body. Has become.

The contents keys Kc1, Kc2, Kc
3... Kcn are encrypted with the storage key KS, and E (KS, Kc1), E (KS, Kc2), E (K
S, Kc3)... E (KS, Kcn) are recorded on the HDD 21 of the personal computer 1. The storage key KS has so-called tamper resistance, and is stored in a recording area that cannot be referred to by a normal user.

In the comprehensive management unit (X) 315 in which key management is performed as described above, for example, the music content C1
In the case of playing back the content key Kc1, the content key Kc1 is decrypted using the storage key KS, and subsequently, the music content C1 is decrypted using the content key Kc1. As a result, the comprehensive management unit (X) 315
Can reproduce the music content C1.

In the comprehensive management unit (X) 315 in which the key management is performed as described above, for example, the music content C1 is transferred from the HDD 21 to the portable device (X) 6-
3, when the portable device (X) 6-3 is cross-authenticated, the content key Kc1 is decrypted using the storage key KS when the authentication is completed. The content key Kc1 is encrypted with the session key, and the encrypted content key Kc1 and the encrypted music content C1 are transferred to the portable device (X) 6-3. Then, the content key Kc1
And the music content C1 are deleted from the HDD 21. As a result, the comprehensive management unit (X) 315
Transmits the music content C1 to the portable device (X) 6
-3.

Next, when the HDD 21 is destroyed,
A description will be given of a method of restoring music content when music content or a content key cannot be reproduced from the HDD 21.

First, at normal time, the comprehensive management unit (X) 315 stores the backup data of the encrypted music content C and the content key Kc in the HDD 21 or another recording medium.

In a normal state, the comprehensive management unit (X) 315 stores the purchase record of the music content downloaded from the EMD server (X) 4-3 and the content IDs of all the music contents stored in the HDD 21.
Is managed as usage log information. This log information is obtained when music content is downloaded from the EMD server (X) 4-3 or when the portable device (X)
When music content is controlled such as moving to 6-3, the content is updated. The log information is stored in the HDD2
It is stored in another area or another recording medium. The comprehensive management unit (X) 315 uploads this log information to the EMD server (X) 4-3 periodically or every time it is accessed.

If the music content C or the content key Kc stored in the HDD 21 of the comprehensive management unit (X) 315 has been destroyed, the following processing is performed.

If the music content C or the content key Kc has been destroyed, the comprehensive management unit (X) 315
First accesses the EMD server (X) 4-3 to perform user authentication.

Subsequently, the EMD server (X) 4-3 refers to the use log information of the comprehensive management unit (X) 315 based on the user ID of the authenticated user, and
Generate a CV (Integrity Check Value). The matching verification value ICV is based on the CID, which is the content ID of the music content C described in the usage log information, and the storage key KS of the comprehensive management unit (X) 315.
It is generated as follows. ICV = H (KS, CID1
|| CID2 || ... || CIDn) where H
(K, Data) is a one-way hash function whose value changes depending on the key K.

Subsequently, the EMD server (X) 4-3 stores the generated consistency verification value ICV in the comprehensive management unit (X) 3.
15 to be sent.

Subsequently, the comprehensive management unit (X) 315
If the music content C or the content key Kc is backed up, the backup data is restored and the music content C or the content key Kc is stored in the HDD.
21. If the music content C or the content key Kc is not backed up, the EMD server (X) 4-3 redistributes the destroyed music content C or the content key Kc. At this time, EM
The D server (X) 4-3 refers to the purchase history of the user and does not perform the charging process if the content has been purchased before.

The comprehensive management unit (X) 315 performs the above processing to restore the destroyed music content C or content key Kc.

Then, the comprehensive management unit (X) 315
Is the restored music content C or content key Kc
When the reproduction or control of the music content is performed, the CID of the music content is checked using the matching verification value ICV. As described above, by checking the resurrected music content C or the content key Kc using the matching verification value ICV, for example, a certain music content Ci is moved to the portable device (X) 6-3 and If the data is erased, even if a malicious user remembers and restores the encrypted music content Ci (E (Kci, Ci)), the data can be reproduced or controlled. I can't do it.

When the storage key KS, not the music content C and the content key Kc, has been destroyed, the comprehensive management unit (X) 315 is reinstalled. Even in this case, the EMD server (X) 4-
If user information is registered and the log information is uploaded, the restoration and re-downloading can be performed by the above-described method.

As described above, in the music content distribution system, for example, when the hard disk crashes or the like,
Even if your music content is destroyed,
It can be restored while protecting the copyright. For example, if the music content has been officially purchased, it can be restored free of charge.

(5) Master key of comprehensive management unit and
A portable device (X) 6 is provided between the authentication method and other distribution method comprehensive management unit (X) 315 and the portable device (X) 6-3.
-3 unique ID and authentication key (MG-ID / IK),
The unique master key (O) of the comprehensive management unit (X) 315
MG-MK), mutual authentication is performed.

When mutual authentication is performed between the comprehensive management unit (X) 315 and the portable device (X) 6-3, the music content is transferred from the comprehensive management unit (X) 315 to the portable device (X) 6-3. (Check-out) or return (check-in) of music content from the portable device (X) 6-3 to the comprehensive management unit (X) 315. Note that the comprehensive management unit (X) 315 stores the encrypted music content in the HDD 21 of the personal computer 1, and the portable device (X) 6-3
The encrypted music content is stored in a storage medium such as an internal memory card. Therefore, comprehensive management unit (X)
When music content is transmitted from 315 to the portable device (X) 6-3, the personal computer 1
Is transferred to the memory card mounted on the portable device (X) 6-3. In addition, portable device (X) 6-3
When the music content is transmitted to the comprehensive management unit (X) 315 from the portable device (X) 6-3, the music content on the memory card attached to the portable device (X) 6-3 is transferred to the HDD 21 of the personal computer 1. Become.

The portable device (X) 6-3 has an ID
Information (MG-ID), authentication keys for multiple generations (MG-I
K) and a plurality of generations of master keys (OMG-MK) are stored in advance from the factory. These keys and the like will not be supplied to the portable device (X) 6-3 from the outside later. The portable device (X) 6-3 may transmit the authentication key (MG-IK) and the master key (OMG-
MK) is updated. Portable device (X) 6
No.-3 performs mutual authentication using the authentication key and master key of the newest generation whose generation has been updated, and does not perform mutual authentication with the authentication key and master key of the old generation. Hereinafter, the portable device (X) 6-3 is 100th generation from the 0th generation to the 99th generation.
It is assumed that an authentication key (MG-IK [0-99]) and a master key (OMG-MK [0-99]) for the generation are held. Note that the i-th generation authentication key is (MG-IK
[I]), and the i-th generation master key is represented by (OMG-M
K [i]).

Also, the comprehensive management unit (X) 315
By holding the master key (OMG-MK)
Music content can be transferred and stored in the personal computer 1 from an audio compact disc or the like. In addition, the comprehensive management unit (X) 315
By holding the master key (OMG-MK)
Music content can be downloaded from the EMD server (X) 4-3 and stored in the personal computer 1.

Here, the comprehensive management unit (X) 315 can transfer the music contents from the compact disc, but cannot download the music contents from the EMD server (X) 4-3. MK) and EMD from compact discs
The master key (OMG-MK) that can transfer music content from the server (X) 4-3 is different from the master key (OMG-MK). Hereinafter, music content can be transferred from a compact disc, but the EMD server (X)
A key that cannot download music contents from 4-3 is also called a ripping-only key, and is a key that can transfer music contents from a compact disc and the EMD server (X) 4-3. EM
Also called D key.

In this example, the master key of the 0th generation (OMG-MK [0]) is a key exclusively for ripping, and the master keys of the first and subsequent generations (OMG-MK [1-9]) are used.
9]) is the EMD key.

Next, a description will be given of a processing procedure using the ripping-only key.

The comprehensive management unit (X) 315 has a CD-R
When installed from the OM, as shown in FIG. 27, together with the CD-ROM 361 storing the installation software of the comprehensive management unit (X) 315,
A portable device (X) 6-3 and a floppy (registered trademark) disk 362 are sold, for example, as a set.
In the floppy disk 362, the ID information (MG-ID) of the portable device (X) 6-3, the 0th generation authentication key (MG-IK [0]), the 0th generation master key (O
MG-MK [0]).

Next, in order to enable use of the sold portable device (X) 6-3 or the like, first, the CD-R
The OM 361 is mounted on the personal computer 1 (step S11). Subsequently, the comprehensive management unit (X) 315 is installed in the personal computer 1 from the CD-ROM 361 (step S12). Then
The comprehensive management unit (X) 315 is stored in the hard disk of the personal computer 1 (step S13). Subsequently, the ID information (MG-ID) of the portable device (X) 6-3 stored in the floppy disk 362 and the 0th generation authentication key (MG-IK)
[0]) and the 0th generation master key (OMG-MK
[0]) is stored in the personal computer 1 (step S14).

As a result, the comprehensive management unit (X) 315 can store the music content provided by the music CD 363 or the like in the hard disk of the personal computer 1 (step S15). In addition, the 0th generation master key (OMG-MK
[0]) is a ripping-only key, so that music content cannot be downloaded from the EMD server (X) 4-3.

The portable device (X) 6-3
Holds an authentication key and a master key for 100 generations in which the generation is updated, but in an initial setting state,
It is the 0th generation. Therefore, the comprehensive management unit (X) 3 holding the 0th generation authentication key and the master key
15 and the portable device (X) 6-3 can be mutually authenticated. Therefore, the music content provided by the music CD 363 or the like can be transferred to the portable device (X).
6-3 can be stored in the memory card (step S16).

On the other hand, when the comprehensive management unit (X) 315 is provided via a network, as shown in FIG. 28, together with the portable device (X) 6-3, the address of the EMD registration server 3 on the Internet is provided. , A user ID and a password are provided.

Subsequently, in order to enable use of the portable device (X) 6-3 or the like sold, first, the user I
The user accesses the EMD registration server 3 on the network using the password D and the password (step S21). Subsequently, the EMD registration server 3 authenticates the user ID and the password (Step S22). Next, if there is no problem in the authentication, the EMD registration server 3 installs the comprehensive management unit (X) 315, the ID information (MG-ID) of the portable device (X) 6-3,
The 0th generation authentication key (MG-IK [0]) and the 0th generation master key (OMG-MK [0]) are transmitted to the personal computer 1 (step S23). continue,
The personal computer 1 is a comprehensive management unit (X)
Activate the installation software 315 to install the comprehensive management unit (X) 315,
ID information of the portable device (X) 6-3 (MG-I
D), the 0th generation authentication key (MG-IK [0]), and the 0th generation master key (OMG-MK [0]).
21 (step S24). Then, the comprehensive management unit (X) 315 is stored in the hard disk (step S25).

As a result, the comprehensive management unit (X) 315 transfers the music content provided by the music CD 363 or the like to the HDD 2 of the personal computer 1.
1 (step S2).
6). In addition, the 0th generation master key (OMG-MK
[0]) is a ripping-only key, so that music content cannot be downloaded from the EMD server (X) 4-3.

The portable device (X) 6-3
Holds an authentication key and a master key for 100 generations in which the generation is updated, but in an initial setting state,
It is the 0th generation. Therefore, the comprehensive management unit (X) 3 holding the 0th generation authentication key and the master key
15 and the portable device (X) 6-3 can be mutually authenticated. Therefore, the music content provided by the music CD 363 or the like can be transferred to the portable device (X).
6-3 can be stored in the memory card (step S27).

Note that the present invention is not limited to the method shown in FIGS. 27 and 28, and the comprehensive management unit (X) 315 and the 0th generation master key (OMG-MK
[0]) is stored in the CD-ROM 361, and the ID for authentication with the portable device (X) 6-3 and the 0th generation authentication key (MG-ID / IK) are provided via the network. Is also good.

Next, a description will be given of a procedure for updating the ripping-dedicated key to an EMD key so that the music content downloaded from the EMD server (X) 4-3 can be handled.

The comprehensive management unit (X) 315 is configured as shown in FIG.
Alternatively, according to the procedure shown in FIG. 28, the HDD is provided via a removable medium such as a CD-ROM or a network such as the Internet, and
21. At this time, the comprehensive management unit (X) 315 includes a 0th generation master key (OMG-MK [0]) dedicated to ripping, an authentication ID and a 0th generation authentication key (MG-ID / IK [0]). ]), And the key generation of the portable device (X) 6-3 remains at the default.

First, the personal computer 1 shown in FIG.
As shown in FIG. 9, the user accesses the EMD registration server 3 on the network using the user ID and the password (step S31). Subsequently, the EMD registration server 3
Authentication of the user ID and the password is performed (step S3
2). Subsequently, if there is no problem in the authentication, the EMD registration server 3 transmits the ID information (OMG) of the personal computer 1.
-ID), and the comprehensive management unit (X) 315
A public key (OM) for connecting to the MD server (X) 4-3
G-PK), a private key (OMG-KS) and a public key certificate (Cert [PK]) are generated (step S3).
3). Subsequently, the EMD registration server 3 transmits the generated public key (OMG-PK), secret key (OMG-KS), and public key certificate (Cert [PK]) to the personal computer 1 (step S34). .

Subsequently, the EMD registration server 3 checks the ID information (MG-ID) of the portable device (X) 6-3, the i-th authentication key (MG-IK [i]), and the i-th master key. (OMG-MK [i]) is transmitted to the personal computer 1 (step S35). Subsequently, the comprehensive management unit (X) 315 of the personal computer 1
Received ID information (MG-ID), i-th generation authentication key (MG-IK [i]), i-th generation master key (OMG
-MK [i]), these keys are updated to the i-th generation (step S36). Subsequently, the comprehensive management unit (X) 315 performs authentication with the portable device (X) 6-3 (step S37). When the portable device (X) 6-3 is authenticated, the portable device (X) 6-3 updates its own key generation to the i-th generation (step S38).

As a result, the comprehensive management unit (X) 315 can store the music content provided by the music CD 363 or the like in the hard disk of the personal computer 1 and can read the music content from the EMD server (X) 4-3. The downloaded music content can be stored in the HDD 21 of the personal computer 1.

Next, a procedure for updating the generation of the EMD key and the like will be described.

The comprehensive management unit (X) 315 includes an i-th generation master key (OMG-MK [i]) and an authentication I
D and the 0th generation authentication key (MG-ID / IK [i]), and the key generation of the portable device (X) 6-3 is also the ith generation.

First, as shown in FIG. 30, when the personal computer 1 accesses the EMD registration server 3 for some processing, the EMD registration server 3 authenticates the ID of the comprehensive management unit (X) 315, and (I + k)
Generation authentication key (MG-IK [i + k]) and (i +
k) The master key of the generation (OMG-MK [i + k]) is transmitted to the personal computer 1 (step S4).
1). Subsequently, the comprehensive management unit (X) 315 of the personal computer 1 updates the received authentication key and master key to the (i + k) th generation (step S42).
Subsequently, the comprehensive management unit (X) 315 performs authentication with the portable device (X) 6-3 (step S4).
3). When the portable device (X) 6-3 is authenticated, the portable device (X) 6-3 updates its key generation from the i-th generation to the (i + k) -th generation (step S44).

As shown in FIG. 31, on the other hand, the generation of the authentication key and the like used by the portable device (X) 6-3 is the (i + k) th generation, and the comprehensive management unit (X) 315 If the generation of the held authentication key or the like is the i-th generation, the portable device (X) 6-
3 and the comprehensive management unit (X) 315, the authentication fails (step S51). If the authentication fails, the comprehensive management unit (X) 315 issues a key request to the EMD registration server 3 (step S52). When there is a key request, the EMD registration server 3 authenticates the ID of the comprehensive management unit (X) 315, and generates an (i + k) th generation authentication key (MG-IK [i + k]) and an (i + k) th generation master. The key (OMG-MK [i + k]) is transmitted (step S53). Next, the comprehensive management unit (X)
315 converts the received authentication key and master key to the (i +
k) Update to a generation (step S54). Subsequently, the comprehensive management unit (X) 315 performs authentication with the portable device (X) 6-3 (step S55).

As a result, the comprehensive management unit (X) 315 can store the music content provided by the music CD 363 or the like in the hard disk of the personal computer 1 and can read the music content from the EMD server (X) 4-3. The downloaded music content can be stored in the HDD 21 of the personal computer 1 (step S38).

As described above, in the music content distribution system, the master key and the authentication key used by the comprehensive management unit (X) 315 and the portable device (X) 6-3 are divided into a key dedicated to ripping and a server connection key. Further, the server connection key is downloaded via a network. For this reason, in the music content distribution system, the security of the music content distributed from the server is enhanced. For example, even if the key dedicated to ripping is broken, the music content downloaded from the server cannot be broken.

In the music content distribution system,
The master key and the authentication key used by the comprehensive management unit (X) 315 and the portable device (X) 6-3 are updated after generation. Furthermore, comprehensive management unit (X)
At 315, the master key and the authentication key are supplied via the network, and the generation is updated. For this reason, the security of the music content is enhanced.

[0281]

According to the present invention, the data processing device can use the log data based on the usage log information reacquired from the content server.
It restores the backup or reproduces and / or controls the redistributed content data.

Thus, according to the present invention, even if the content data distributed via the network is once destroyed, the content data can be restored while protecting the copyright. .

[Brief description of the drawings]

FIG. 1 is a diagram showing a configuration of a music content distribution system according to an embodiment of the present invention.

FIG. 2 is a diagram showing a configuration of a personal computer in the music content distribution system.

FIG. 3 is a diagram showing a configuration of a portable device in the music content distribution system.

FIG. 4 is a diagram illustrating functions of the personal computer.

FIG. 5 is a diagram illustrating an example of a display operation instruction window.

FIG. 6 is a diagram showing a display example of a recording program displaying on a display.

FIG. 7 is a diagram for describing unified handling of content having a different format for each distributor in the music content distribution system.

FIG. 8 is a diagram illustrating a relationship between a unified transfer protocol layer and an application layer.

FIG. 9 is a diagram illustrating a format of generally used usage condition information.

FIG. 10 is a diagram for explaining files constituting unified use condition information used in the comprehensive management unit.

FIG. 11 is a diagram illustrating a configuration of an automaton file of the unified usage condition information.

FIG. 12 is a diagram for explaining an example of an automaton indicating an operation transition of music content described in an automaton description section of the automaton file.

FIG. 13 is a diagram expressing the automaton in a tuple sequence.

FIG. 14 is a diagram illustrating a configuration of the automaton description unit.

FIG. 15 is a diagram showing an event and a command defined in the DTD defined based on the XML specification.

FIG. 16 is a diagram showing a first description example of the automaton description section.

FIG. 17 is a state transition diagram of the first description example.

FIG. 18 is a diagram showing a second description example of the automaton description section.

FIG. 19 is a state transition diagram of the second description example.

FIG. 20 is a diagram illustrating a third description example of the automaton description unit.

FIG. 21 is a state transition diagram of the third description example.

FIG. 22 is a diagram illustrating a fourth description example of the automaton description unit.

FIG. 23 is a diagram illustrating a configuration of a parameter file of the unified usage condition information.

FIG. 24 is a diagram illustrating a configuration when the parameter file is updated.

FIG. 25 is a diagram illustrating a configuration of a parameter description section of the parameter file.

FIG. 26 is a diagram illustrating a content management method by the comprehensive management unit.

FIG. 27 is a diagram illustrating a processing procedure when the comprehensive management unit is installed from a CD-ROM.

FIG. 28 is a diagram illustrating a processing procedure when a comprehensive management unit is downloaded from a network and installed.

FIG. 29 is a diagram illustrating an update procedure for updating a ripping key to an EMD key.

FIG. 30 is a diagram for describing a first example of a procedure for updating an EMD key.

FIG. 31 is a diagram illustrating a second example of the procedure for updating the EMD key.

[Explanation of symbols]

1 personal computer, 2 networks, 3
EMD registration server, 4EMD server, 6 portable device, 7 USB interface, 21 hard disk, 311, 312 playback application, 31
3,314 device driver, 315 comprehensive management unit, 316 EMD reception interface, 317
Transmission interface for EMD, 318 PD driver

 ──────────────────────────────────────────────────続 き Continuing on the front page (72) Inventor Mitsuru Tanabe 6-7-35 Kita-Shinagawa, Shinagawa-ku, Tokyo Inside Sony Corporation (72) Inventor Yuichi Emo 6-7-35 Kita-Shinagawa, Shinagawa-ku, Tokyo Inside Sony Corporation (72) Inventor Ichiro Sato 6-7-35 Kita-Shinagawa, Shinagawa-ku, Tokyo Sony Inside (72) Inventor Muneki Ebihara 6-35, Kita-Shinagawa, Shinagawa-ku, Tokyo Sony Inside the corporation

Claims (6)

[Claims] 1. A content server for delivering content data via a network, and a playback control program for playing back and / or controlling the content data, wherein the content data delivered from the content server is stored in a storage medium. A data processing device that performs playback and / or control and stores backup data of the distributed content data in a storage medium, and transmits usage log information of the content data to the content server. When the content data can no longer be obtained from the storage medium, the usage log information is obtained from the content server, and according to the usage log information, reproduction of backup data of the content data stored in the storage medium and / or Or controlling. Content providing system. 2. A content server for delivering content data via a network, and a playback control program for playing back and / or controlling the content data, wherein the content data delivered from the content server is stored in a storage medium. A data processing device for performing reproduction and / or control of the content data and transmitting usage log information of the content data to the content server. The data processing device, when it becomes impossible to obtain content data from the storage medium, The content data that cannot be obtained is redistributed from the content server, the usage log information is obtained from the content server, and the redistributed content data is reproduced and / or controlled in accordance with the usage log information. Content providing system Beam. 3. A data processing device having a reproduction control program for reproducing and / or controlling content data,
In a content distribution method performed between a content server that distributes content data to the data processing device via a network, the content server distributes the content data to the data processing device, and the data processing device includes: The content data distributed from the content server is stored in a storage medium for playback and / or control, and backup data of the distributed content data is stored in the storage medium, and the data processing device uses the content data. Transmitting log information to the content server; and when the data processing device cannot acquire content data from the storage medium, the content server transmits the usage log information to the data processing device. But the above usage log Content distribution method characterized by the reproducing and / or controlling backup data of contents data stored in the storage medium in accordance with the distribution. 4. A data processing device having a reproduction control program for reproducing and / or controlling content data,
In a content distribution method performed between a content server that distributes content data to the data processing device via a network, the content server distributes the content data to the data processing device, and the data processing device includes: The content data distributed from the content server is stored in a storage medium for playback and / or control, the data processing device transmits usage log information of the content data to the content server, and the data processing device performs When content data cannot be obtained from the storage medium, the content server redistributes the content data that cannot be obtained to the data processing device, and transmits the usage log information to the data processing device; The processing equipment used above Content distribution method characterized by the reproduction and / or control of the re-distributed contents data in accordance with the grayed information. 5. A storage medium which is installed in a data processing device, acquires content data distributed from a content server via a network, and stores a reproduction control program for reproducing and / or controlling the content data. The reproduction control program stores the content data distributed from the content server in a storage medium to reproduce and / or control the content data and stores backup data of the distributed content data in the storage medium. The use log information is transmitted to the content server, and when the content data cannot be obtained from the storage medium, the use log information is obtained from the content server, and stored in the storage medium according to the use log information. Backup of content data A storage medium for reproducing and / or controlling data. 6. A storage medium which is installed in a data processing device, acquires content data distributed from a content server via a network, and stores a reproduction control program for reproducing and / or controlling the content data. The playback control program stores the content data distributed from the content server in a storage medium to perform playback and / or control, transmits use log information of the content data to the content server, When the content data can no longer be obtained from, the content data that can no longer be obtained is redistributed from the content server,
Obtain the usage log information from the content server,
A storage medium for reproducing and / or controlling redistributed content data according to the usage log information.