JP2001350728A - Authentication system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To originate a call for cancel only in the case of fault by completing purchase processing especially before download in a communication service concerning electronic settling processing or the like. SOLUTION: In the authentication system for performing data communication through broadcasting waves or public line between a receiving terminal and a center facility, the receiving terminal has a receiving means for receiving data, selecting means for selecting data, input means for reading out a terminal side ID, authentication list comparing means for performing authenticating processing, error detecting means for detecting an error, purchasing processing means for performing purchasing processing, enciphering means for applying enciphering processing, transmitting means for transmitting various kinds of data to the center facility by utilizing the public line, and writing means for writing various kinds of data on a recording medium.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

The present invention relates to an electronic approval process (E)
C: Electric Commercial), and particularly relates to an authentication system that defines an authentication procedure necessary for realizing the exchange of services such as trading and buying and selling products, particularly software download, in communication services triggered by broadcasting. It is.

[0002]

2. Description of the Related Art In recent years, Wo in the Internet has been increasing.
The Internet (for example, “electronic shopping” and “electronic commerce”) is being realized using ld Wide Web (hereinafter, referred to as “WWW”). E-commerce (for example, “television shopping”) is becoming widespread.

[0003] In such electronic transactions on the Internet or on a television screen using broadcasting, users such as consumers cannot conduct transactions or buy and sell directly with stores that provide services.

[0004] Therefore, when making a decision electronically, a guarantee of the user's identity and a guarantee of the service provider (equivalent to a "store" in the case of electronic shopping) are preciously and safely traded. Is a very important technical point.

[0005] When performing client-server type electronic commerce using the Internet or broadcasting,
A method based on a public key cryptosystem for performing authentication from a server side to a client side (user / user) is generally used.

[0006] As a typical technique, a SET (Secure Electric Trans) disclosed by VISA / Master Card, which is already in practical use, is disclosed.
An action (electronic) approval technique is known.

Accordingly, as an example of the prior art, a credit decision using SET will be described below. FIG. 4 shows a procedure for credit approval when a user purchases a product from a store or gives or receives a service using the Internet after authenticating the user and the store.

Here, it is assumed that the user 401, the store 402, and the authenticator 403 are connected to the Internet 400, and the user 401, the store 402, and the authenticator 40 are connected.
Reference numeral 3 denotes an environment where information can be exchanged (data transmission / reception) via the Internet.

Note that the store 402 is also connected to a financial institution such as a bank via a network, and is configured to be able to perform a transfer operation or the like based on the credit card ID of the user 401 as necessary. .

Each of the user 401, the store 402, and the authentication machine 403 is provided with an information terminal (a personal computer, a workstation, etc.) and a server, and also incorporates software necessary for making a credit decision. Shall be

[0011] Here, between the authentication machines (CA: Certify)
The term “category authority” refers to a third-party organization that certifies the identity of a user or a store using credit approval electronically from a fair and neutral standpoint.

The inter-authentication machine 403 mainly performs the following operations.

(1) Examination of the status of a user or a store, registration in a database, and maintenance management.

(2) Issuance of a “public key certificate” to a user or a store.

(3) Generation of a public key and a pair of a secret key.

(4) Sending a public key and a secret key to a user.

"Public key certificate" means an electronic identification card of a user. Specifically, registration information such as a name for identifying the user, a public key sent to the user, and a digital signature for certifying that the public key of the user is valid are given. ing.

Since the digital signature is given, the "public key certificate" has a structure in which a third party who is not the user cannot forge the public key certificate.

Therefore, in order to execute a conventional credit decision procedure as described below, the user 401
And the store 402 must have issued the certificates of the respective public keys from the same certification organization.

In FIG. 4, the procedures from S400 to S403 are performed by an off-line means such as mailing or bringing directly to the certification organization 403. Basically, the procedure is completed only once. That is, the user 401 and the store 402
Sends a necessary document by mail or the like in order to have the inter-authorization machine 403 issue its own public key, and applies for a "public key certificate" (S400, S402).

In the inter-authentication machine 403 receiving the application,
After confirming the identity by document examination or the like, a “public key certificate” is sent to the user 401 and the store 402. Of course, in some cases, a "public key certificate" may not be issued (S401, S403).

User 401 that has received the "public key certificate"
And the store 402 executes the credit decision
The information described in the “public key certificate” and the secret key to be paired are input to the information terminal that executes the credit decision.

For example, in order to encrypt information transmitted from the user 401, a public key certificate and a private key are input and stored in a recording medium (such as a hard disk) of the information terminal.

Steps S400 to S409 are processing for actually purchasing a product by a conventional credit decision. First, the user 401 accesses the WWW browser of the store 402 via the Internet 400 (S404 to S409).

At this time, the user 401 enters the W
Necessary information such as a product is obtained from the WWW browser (browsing of the homepage), and if the product is a desired product, data of an order intention display (for example, a product name, a quantity, etc.) is input to the WWW browser (S404). ).

Here, the WWW browser of the store 402 indicates a homepage (hereinafter referred to as “HP”) from which detailed information such as product introduction and price is transmitted to the user 402.

The store 402 sends an estimate / slip to the user 401 in response to the order intention display (S405).

The user 401 who has received the estimate / slip,
The order slip and the credit card number and the like in which the required quantity and the like are entered are transmitted to the store 402 (S406).

The store 402 extracts only the order information,
The information necessary for authentication, such as the remaining credit card number, is transferred to the inter-authentication machine 403 (S407).

After confirming the information necessary for the approval, the inter-authentication machine 403 returns the examination result indicating whether the authentication has been completed to the store 402 (S408).

If the authentication has not been performed normally (in the case of an expired card or a stolen card, etc.), the examination result of the authentication failure is returned to the store 402.

At the store 402 that has received the examination result, if the authentication is completed normally, the usage statement is written to the user 401.
Send to If the authentication is not performed normally, the fact is transmitted to the user 401, and the credit decision is not established (S409).

Thus, the purchase of the goods by the credit approval is completed. However, as described above, if the user's contracting certifying institution and the store's contracting certifying institution are different, for example, the certification cannot be performed normally, and the result of the non-authentication examination will be sent. It does not hold.

[0034]

However, in the above-described configuration, for example, if a user tries to receive a service such as downloading software from a store, it cannot be canceled after completing the purchase procedure. Problems will arise.

For example, in the case of purchasing a product such as food or an electric appliance, if the above-described series of credit procedures are completed normally, the user can be safely and reliably provided to the user several days later by mail. It is a mechanism to receive the desired product.

On the other hand, when purchasing a product such as software, the user downloads the desired software via the Internet or a broadcasting network and obtains the user's hand (actually, a personal computer, a mobile phone, a receiver for digital broadcasting, etc. Recording medium), but the communication network may be congested or shut down unexpectedly,
Software downloads do not always end safely and reliably.

The present invention solves the above-mentioned conventional problems. After a user has completed a credit procedure for purchasing software, the software is downloaded, and a cancel call is automatically made according to the situation. Therefore, an object of the present invention is to provide an authentication system that can cancel the purchase of a product (software).

The cancellation call means that the user notifies a broadcasting station or an authentication organization (information collection center) that the purchase of the product is to be canceled.

The present invention provides an authentication system which defines an authentication procedure required for securely and reliably realizing media distribution of video, audio, games, software and the like in a communication service triggered by broadcasting. The purpose is to:

[0040]

In order to achieve this object, an authentication system according to the present invention uses broadcast data (video, audio, additional information, etc.), authentication results examined by a center facility, and processing for purchase. Receiving means for receiving data necessary for the public line via a public line, and distributing broadcast data received by the receiving means based on selection conditions, such as video, audio, and additional information data, for video, audio, and additional information data. Is sent to the display means, authentication data necessary for authenticating the user and data necessary for the purchase processing are sent to the authentication list comparison means, and the receiving terminal has a terminal ID such as an IC card. Is provided with a slot in which a medium in which is recorded a terminal can be inserted.
Input means for reading the ID, the terminal-side ID read by the input means, and authentication data necessary for authenticating the user sent from the selection means, and the user himself uses the authentication system. The authentication list comparison means for sending the confirmation that the confirmation has been made, or sending data necessary for the purchase processing sent from the sorting means to the purchase processing means, and the receiving terminal has a terminal ID such as an IC card recorded therein. If an error occurs when writing to a recording medium because it has not only a slot that can be loaded with a media that has been loaded, but also a slot that can be loaded with a recording medium that records downloaded software And error detection, such as when a recording medium is not installed in the slot and notifies the purchase processing means of an error. When the information is sent, purchase cancellation processing is performed with the center facility through the transmission means, and purchase processing for performing processing necessary for product purchase when the authentication list comparison means is authenticated as the user himself / herself. Means, and encryption means for encrypting the data and securely transmitting the data required for purchase processed by the purchase processing means to a center facility so that the data is not hacked and leaked by a third party. A transmission unit for transmitting data required for purchase encrypted by the encryption unit and a notification regarding authentication to a center facility, and a writing unit for writing downloaded software to a recording medium. Have.

With the above components, when performing a service such as software download in a communication system triggered by broadcasting, purchase can be canceled even after a predetermined purchase procedure is completed.

The additional information data means data for data broadcasting based on the broadcasting standard and data for transmitting software of various media (video, audio, game, etc.).

Although the present invention has been described with respect to satellite digital broadcasting such as BS and CS, the present invention can be implemented in other broadcasting forms such as cable television broadcasting (CATV) and terrestrial digital broadcasting. is there.

[0044]

Embodiments of the present invention will be described below in detail with reference to the accompanying drawings.

FIG. 1 shows a receiving terminal 103 receiving a broadcast wave (broadcast data) transmitted from a center facility 101 via a satellite 102. The receiving terminal 103 analyzes the broadcast data and displays the analyzed broadcast data on a television receiver (hereinafter, referred to as “television”). User 1
In step 05, the user operates the remote controller 106 or the keyboard 110 to perform a procedure for purchasing a desired product from the image on the television screen (the screen is a “purchase screen” when purchasing a product).

The receiving terminal 103 is equipped with a modem 107 which is a device for performing data communication with an external device through a public line. The modem 107 is connected to the center equipment 101 via a public line, and a terminal ID 108 The mechanism is such that the user 105 can be authenticated from the information. Information necessary for product purchase (product number, order quantity, etc.) is transmitted by connecting to the center facility 101, and conversely, the center facility 101 notifies the user 105 of the verified authentication result. There is.

The center equipment 101 not only creates a video and transmits it to the satellite 102 as broadcast data, but also the user himself / herself tries to purchase a product as described in the above-mentioned “prior art”. It may play a role of confirming whether or not.

The feature of the hardware aspect of the receiving terminal 103 is not only that the modem 107 is mounted as described above, but also that a medium 108 such as an IC card for holding the terminal ID and a recording medium 109 can be inserted. Is also installed. The recording medium 109 is a floppy (registered trademark) disk (FD: Floppy D)
isk), MO (Magneto Opti)
cal Disk), PD (Phase: Phase)
Change Rewritable Disk), DV
Although a removable disk such as a D-RAM or a memory card is assumed, it may be recorded on a fixed device such as a hard disk.

When the user 105 is authenticated by the terminal-side ID 108, the user 105 receives a desired product (software) while watching the television screen.
06 or the operation of the keyboard 110 to input information (product number, order quantity, etc.) necessary for product purchase.
The information necessary for the purchase of the product is input to the modem 107.
To the center facility 101, and is notified of a request for product distribution (in the case of the present patent, software download using broadcasting).

The software sent from the center facility 101 to the user 105 is received by the receiving terminal 103 and recorded on the storage medium 109. The recording medium 109 in which the software is recorded is not only installed in the receiving terminal 103 to execute the software, but also installed in multiple devices such as a personal computer, so that a new service can be developed. The operation of the television screen is not limited to remote control operation, and may be a model in which other devices such as a keyboard are connected and operated to perform processing such as product purchase.

FIG. 2 shows a block transition diagram of the authentication system 200.

The authentication system 200 includes receiving means 201,
It comprises a selection unit 202, an input unit 203, an authentication list comparison unit 204, an error detection 205, a purchase processing unit 206, an encryption unit 207, a transmission unit 208, and a writing unit 209. Hereinafter, each processing unit will be described.

The receiving means 201 receives broadcast data (video / video data).
(Voice, additional information, etc.)
02 is a unit for distributing the broadcast data as video / audio / additional information data.
Terminal side ID using slot mounted on receiving terminal
Input means for reading out the authentication list comparing means 204
Is a means for comparing the terminal-side ID read by the input means with authentication data required for authenticating a user sent from the selection means.
05 is a means for detecting whether there is an error at the time of normal download, and the purchase processing means 206 performs processing necessary for product purchase when the authentication list comparison means is authenticated as the user himself / herself. And encryption means 207
Is a means for encrypting data in order to safely transmit necessary data, and a transmitting means 208 is means for transmitting data necessary for purchase encrypted by the encrypting means to a center facility, The writing unit 209 is a unit for writing the downloaded software to a recording medium.

FIG. 3 shows an authentication system 20 according to the embodiment.
0 shows the hardware configuration. The authentication system 200
A digital signal transmitted by a broadcast wave is received by a tuner 301, and the digital signal is subjected to 8-phase phase modulation in an 8PSK demodulation 302. The demodulated digital signal is converted by the TS decoder 303 into a transport stream (hereinafter, referred to as “TS”). The video stream is output to the video decoder 304 and the audio stream is output to the audio decoder 305 by demodulated TS decoding to separate the video stream, the audio stream, and the additional information data. By such processing, the authentication system 200
Then, normal video and audio are reproduced.

The data is temporarily stored in the main memory (RAM) 3.
10 or a non-volatile memory (NVRAM) 308 or the like, and the processing is performed by the CPU 311. CPU
At 311, various procedures relating to the purchase process are also performed. In addition to normal video and audio playback processing, there is also the possibility of transferring the data in the main memory to the video and audio decoders simultaneously with the presentation of the text and graphics, and performing the video and audio playback processing. , FIG.

Next, an operation sequence of the authentication system according to the embodiment of the present invention will be described with reference to FIGS. FIG. 5 illustrates the operation sequence for explaining a part of the procedure when the download is completed normally, and FIG. 6 illustrates the operation sequence when the download fails.

(Step 1) First, the user receives the broadcast data transmitted from the center equipment (transmission unit) at the receiving terminal, and the program contents displayed on the television screen (in the case of the present invention, particularly, the "product purchase screen" Is assumed to be displayed), it is assumed that users download desired media (in the case of the present invention, various media such as video, audio, games, software, etc., using broadcasting). Begin) purchase process. At this time, the center equipment (sending unit) provides a unique I
D (this is referred to as a content ID, hereinafter referred to as “CID”) and the time during which the program is being broadcast (broadcast time), and the CID and broadcast time are stored in the memory of the receiving terminal. Is done.

(Step 2) Next, the receiving terminal performs an authentication process between the receiving terminal and the center equipment (authentication processing unit) based on the terminal ID read from the IC card or the like. Note that an IC card is a card issued when a user completes various procedures with a certification organization (in the present invention, a part of the center equipment) and is a means for authenticating the user. . The IC card holds an ID or the like that is uniquely assigned to each user. Like a prepaid card, a user pays a certain amount of money in advance when proceeding with a certification organization, and the information of a certain amount of money is stored in a recording medium such as an IC card as described above, and every time a product is purchased, the amount of money is charged. A usage that changes information may be used.

(Step 3) When the authentication processing is completed in Step 2, the purchase instruction is notified from the receiving terminal to the medium holding the terminal-side ID, and the CID is also sent at the same time. With the terminal-side ID, the pair of the CID pair and the notification of the purchase command sent from the receiving terminal are subjected to communication encryption Ec and then sent to the center facility (authentication processing unit) via the receiving terminal. Communication encryption means a dedicated encryption method for transmitting important information via a public line.

On the other hand, in the center equipment (authentication processing unit), it is conceivable that the product which the user tried to purchase cannot be normally downloaded, and it is assumed that the purchase of the product has to be canceled halfway. Against this background,
A cancel ID (hereinafter, referred to as “CaID”) is set, and when canceling the purchase of a product, the purchase cancellation operation is performed using the CaID.

The CaID is a value that is set each time a product is purchased. (1) Update No. (2) Card ID
(3) A cancel ID is determined by a combination of three parameters of the CID.

CaID = f (update No., card ID, CID)... Here, the update No. means that even after the purchase instruction has been sent to the center facility (authentication processing unit) in step 3, the user has to purchase the product. The information may be changed, which means the user's product information change history (version information). For example, a change in the quantity corresponds to the product information change history, and in such a case, an update number is set. Also, Card I
D means a value (terminal-side ID) assigned to a single recording medium such as an IC card.

As described above, the center equipment (authentication processing unit)
Then, when the setting of the cancellation ID is completed, the receiving terminal is next notified to (1) E (Kt, Ks (i)) (2) CaI
D (3) Iks is communication encrypted Ec and sent.

Ec (E (Kt, Ks (i))), CaID, Iks... E (Kt, Ks (i)) is an encrypted title key Kt and i of a plurality of system keys Ks. This means that decryption is performed using the system key Ks.

Here, the key for encryption / decryption will be described with reference to FIG. First, the title key is a key for decrypting the encrypted content C (media such as software) to be transmitted. E (C, Kt) as shown in FIG. 7 means that the encrypted content C is decrypted using the title key Kt.
That is, E (A, B) generally means that A is decoded using B.

Since the title key Kt is an important key for decrypting the encrypted content C, E (K
t, Ks (i)). The system key Ks is used to decrypt the title key Kt thus encrypted. However, there are a plurality of system keys Ks, and it is assumed that the center equipment (authentication processing unit) and the receiving terminal have the same system key Ks in a one-to-one relationship. In the present embodiment, this is used as Ks (i).

The center equipment (authentication processing unit) holds an index Iks as information for specifying which system key Ks is held among a plurality of system keys Ks.

It is assumed that CIDs are repeatedly transmitted to the center equipment in an unauthorized manner, and in preparation for the above case, the number of connections is counted by the center equipment, and access exceeding a certain level is performed. When performing, as a function of the center equipment, a system that holds information that can specify an access destination, such as information from any receiving terminal, may be used.

(Step 4) In step 3, the communication encryption Ec is transmitted from the center facility (authentication processing unit) (E (Kt,
Ks (i))), CaID, and Iks are received by the receiving terminal and decoded by the terminal-side ID, and the receiving terminal holds the decoded cancel ID.

(Step 5) After Step 4, by performing certain procedures such as key encryption / decryption processing, software desired by the user is sent from the center equipment (sending unit), and the receiving terminal performs The software can be downloaded.

As described above, steps 1 to 5 are
This is an operation sequence until data is normally stored in a media card when downloading software using a broadcast wave. However, it is not always possible to normally save data to the recording medium, and download failure may occur due to various causes such as communication errors with the center equipment, poor radio wave conditions, writing errors on the recording medium, etc. Can be Therefore, the operation sequence when the download fails will be described below.

(Step 6) The failure of the download is detected by the recording medium I / F ASIC and immediately notified to the receiving terminal.

(Step 7) Based on the terminal ID, an authentication process is performed between the receiving terminal and the center equipment (authentication processing unit). Since the processing is the same as Steps 2 and 3, detailed description is omitted.

(Step 8) When the authentication processing is completed in step 7, the purchase cancellation processing is actually performed. First, the CaID held in the receiving terminal in step 4, the broadcast time,
Further, three parameters of the cause of the download failure are sent to the terminal ID. The terminal-side ID encrypts the above three parameters and replies to the receiving terminal.

The receiving terminal performs communication encryption Ec on the three parameters that are encrypted and returned, and sends them to the center facility (authentication processing unit). The center facility (authentication processing unit) acquires the card ID and the CID by decrypting the communication encryption Ec and performing reverse conversion from the CaID. That is, it means the inverse transformation of the first expression. Card ID and CI
When D is obtained, communication encryption Ec is performed, and ACK is sent to the receiving terminal.

When the receiving terminal receives the communication encrypted Ec ACK, it sends it to the terminal ID, decrypts the communication encrypted Ec, and returns an ACK to the receiving terminal.

ACK (ACKnowledgem)
ent) is an affirmative reply sent from the transmitting computer to the receiving computer in communication between the computers, and is transmitted when data transfer ends normally.

[0078]

According to the first aspect of the present invention, the user can use the receiving terminal to perform data communication with the center equipment via a public line or the like, and thus download software or the like from a communication service triggered by broadcasting. And can be stored in a recording medium.

According to the second aspect of the present invention, the user can easily complete the authentication process between the receiving terminal and the center equipment by mounting the terminal ID such as an IC card on the receiving terminal. Therefore, it is possible to complete the purchase decision processing before downloading.

According to the third aspect of the present invention, the recording medium I / F A
Since the download failure can be detected by the SIC, a cancel call can be made.

According to the fourth aspect of the present invention, when the content is transmitted by broadcasting, the content I of the content is transmitted.
D can be retained, and the update number can be easily obtained. Also, by reading a card such as an IC card holding a receiving-side ID, the card ID can also be acquired, so that the three parameters are determined and a cancel ID can be set.

According to the fifth aspect of the present invention, the cancel ID
Is a value composed of three parameters of an update No, a card ID, and a content ID. Therefore, the card ID and the content ID can be obtained by performing an inverse conversion of the method for determining the cancel ID.

According to the invention of claim 6, the receiving terminal, the terminal side I
D. When various types of data are communicated with the recording medium I / F ASIC, various types of keys can be used to securely exchange data. Therefore, data can be securely communicated without being tampered with. It becomes possible.

According to the seventh aspect of the present invention, when the content ID is tampered with and sent to the center facility, the title key corresponding to the tampered content ID is sent, but the majority is illegal. Since no title key is sent, the purchase process does not proceed normally.

According to the eighth aspect of the present invention, the receiving terminal is uniquely assigned a terminal ID, and the process of adapting the cancellation ID to another receiving terminal and proceeding with the processing is performed between the receiving terminal and the center equipment. Is considered illegal when performing the authentication process.

In the ninth aspect of the present invention, similarly to the eighth aspect, the receiving terminal is uniquely assigned a terminal ID,
Proceeding the process by adapting the content ID to another receiving terminal is regarded as illegal when performing the authentication process between the receiving terminal and the center facility.

According to the tenth aspect of the present invention, as a function of the center equipment, when a certain or more access is performed, information for identifying an access destination such as information from any receiving terminal is held. Therefore, it is possible to check a user who accesses illegally.

[Brief description of the drawings]

FIG. 1 is an overall configuration diagram according to the present invention.

FIG. 2 is a block transition diagram according to an embodiment of the present invention.

FIG. 3 is a hardware configuration diagram according to the embodiment;

FIG. 4 is an operation sequence diagram in a conventional example.

FIG. 5 is an operation sequence diagram in the embodiment of the present invention.

FIG. 6 is an operation sequence diagram in the embodiment.

FIG. 7 is an explanatory diagram of various keys in the embodiment.

[Explanation of symbols]

 101 Center equipment 102 Satellite 103 Receiving terminal 104 Television 105 User 106 Remote control 107 Modem 108 Terminal ID 109 Recording medium 110 Keyboard 200 Authentication system 201 Receiving means 202 Sorting means 203 Input means 204 Authentication list comparing means 205 Error detection 206 Purchasing means 207 Encryption means 208 Transmission means 209 Writing means 301 Tuner 302 8PSK demodulation 303 TS decoder 304 Video decoder 305 Audio decoder 306 Presentation processing 307 I / O 308 NVRAM 309 EEPROM 310 RAM 311 CPU 312 Modem 400 Internet 401 User 403 Store 403 Certification body

──────────────────────────────────────────────────続 き Continued on the front page (51) Int.Cl. ⁷ Identification symbol FI Theme coat ゛ (Reference) H04L 9/32 G06F 9/06 660A H04N 7/16 H04L 9/00 673A 673D 673E (72) Inventor Satoru Matsunaga 1006, Kazuma Kadoma, Kadoma, Osaka Prefecture Matsushita Electric Industrial Co., Ltd. JJ05 NB06 5B076 BB06 FA06 FB02 5B085 AA08 AE09 AE12 AE29 BA06 BC01 BG06 5C064 BA07 BB01 BC16 BC20 BC25 BC27 BD02 BD04 BD08 BD09 5J104 AA07 KA01 NA02 NA35 NA38 PA05 PA10

Claims (10)

[Claims] 1. An authentication system for performing data communication between a receiving terminal and a center facility via a broadcast wave or a public line, wherein the receiving terminal selects a receiving unit for receiving data and data. Selection means, input means for reading the terminal-side ID, authentication list comparison means for performing authentication processing,
Error detection for detecting errors, purchase processing means for performing purchase processing, encryption means for performing encryption processing, transmission means for transmitting various data to the center facility using a public line, and various data for the recording medium An authentication system comprising writing means for writing a password. 2. Between the receiving terminal and a center facility,
2. The authentication system according to claim 1, wherein in an authentication system for performing data communication via a broadcast wave or a public line, a purchase process is completed before a download is attempted. 3. Between the receiving terminal and a center facility,
3. An authentication system for performing data communication via a broadcast wave or a public line, wherein a cancel call is made from a receiving terminal to a center facility only when a download fails. Authentication system. 4. When a cancellation call is made to the center equipment, an update N is issued each time a product is purchased.
4. The authentication system according to claim 3, wherein a cancel ID is set from three parameters of o, card ID, and content ID. 5. The authentication system according to claim 4, wherein when the cancel call is made, a card ID and a content ID are acquired from the cancel ID. 6. Even if a third party illegally attempts to falsify information held in a receiving terminal, the information can be safely and reliably provided between the receiving terminal and a center facility or in processing within the receiving terminal. 6. The authentication system according to claim 1, wherein various types of data are exchanged. 7. Even if a third party illegally acquires a content ID held in a receiving terminal and falsifies and sends the content ID to a center facility, serious effects on purchase processing and purchase cancellation processing are obtained. The authentication system according to any one of claims 1 to 6, wherein the authentication system is not provided. 8. When a third party illegally holds a cancel ID held in a receiving terminal, no unauthorized processing such as purchase processing or purchase cancel processing is performed even if the third party tries to adapt to another receiving terminal. The authentication system according to claim 1. 9. A content ID that is illegally excluded by a third party
The authentication system according to claim 1, wherein the authentication system does not perform an unauthorized process such as a purchase process or a purchase cancel process, even if it is acquired and adapted to another receiving terminal. 10. A receiving terminal sends a request to a center facility.
The center equipment counts the number of connections when the purchase processing command (content ID transmission) is repeatedly and illegally transmitted, and holds information that can specify the access destination when attempting to access more than a certain amount. 10. The authentication system according to claim 1, wherein the authentication system can perform the authentication.