JP2002164885A - Data terminal device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a data terminal device which acquires a license for reproduction of an enciphered contents data when ciphered contents data are acquired from a recording medium. SOLUTION: A personal computer copies from a CD-ROM enciphered contents data, contents files 601-60n and a server information file to hard disc 530, and requests deliver of a license of enciphered contents data to a delivery server based on access means and access destination address contained in the server information file, and receives the license. Then, it is stored in license area 5215B of a memory of license management device 520 for storing the received license.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

[0001] 1. Field of the Invention [0002] The present invention relates to a data terminal device used in a data distribution system capable of protecting copyright of copied information.

[0002]

2. Description of the Related Art In recent years, with the progress of information communication networks such as the Internet, it has become possible for each user to easily access network information using a personal terminal using a cellular phone or the like.

In such an information communication network, information is transmitted by digital signals. Therefore, for example, even when music or video data transmitted in the information communication network described above is copied by each individual user, the data is copied with almost no deterioration in sound quality or image quality due to such copying. It is possible.

[0004] Therefore, when content data such as music data and image data, for which the writer's right exists, is transmitted over such an information communication network, appropriate copyright protection measures must be taken. , The rights of the copyright holder may be significantly infringed.

On the other hand, giving priority to the purpose of copyright protection,
If it is not possible to distribute content data through the rapidly expanding digital information communication network, basically, even for copyright owners who can collect a certain copyright fee when copying content data, On the contrary, it is disadvantageous.

Here, considering not a distribution via the digital information communication network as described above but a recording medium on which digital data is recorded as an example, a CD (compact disc) on which music data which is usually sold is recorded is considered. Regarding (2), music data can be freely copied from a CD to a magneto-optical disk (MD or the like) in principle as long as the copied music is stopped for personal use. However, an individual user who performs digital recording or the like pays a certain amount of the price of the digital recording device itself or a medium such as an MD indirectly to a copyright holder as a copyright fee.

In addition, when music data as a digital signal is copied from a CD to an MD, in consideration of the fact that such information is digital data with little copy deterioration, the music data is transferred from a recordable MD to another MD as music data. Copying is prohibited due to copyright protection due to the configuration of the device.

[0008] Even in such circumstances, distributing music data and image data to the public through a digital information communication network is itself an act limited by the public transmission right of the copyright holder. Sufficient measures need to be taken.

In this case, with respect to content data such as music data and image data which are copyrighted works transmitted to the public through the information communication network, once received content data can be further copied without permission or can be copied. However, it is necessary to prevent it from being used.

[0010] Therefore, a distribution server that holds encrypted content data obtained by encrypting the content data is a data server that distributes the encrypted content data to a memory card mounted on a terminal device such as a mobile phone via the terminal device. A distribution system has been proposed. In this data distribution system, a public encryption key of a memory card and a certificate thereof, which have been authenticated by a certificate authority in advance, are transmitted to a distribution server at the time of a distribution request of encrypted content data. After confirming the reception, the encrypted content data and the license key for decrypting the encrypted content data are transmitted to the memory card. When distributing the encrypted content data and the license key, the distribution server and the memory card generate a different session key for each distribution, and encrypt the public encryption key with the generated session key. The keys are exchanged between the memory cards.

[0011] Finally, the distribution server transmits to the memory card the license key encrypted with the public encryption key of each memory card and further encrypted with the session key and the encrypted content data. Then, the memory card records the received license key and the encrypted content data on the memory card.

When playing back the encrypted content data recorded on the memory card, the memory card is inserted into a mobile phone. The mobile phone has a dedicated circuit for decrypting the encrypted content data from the memory card and reproducing and outputting the decrypted content data to the outside in addition to the normal telephone function.

As described above, the user of the mobile phone can receive the encrypted content data from the distribution server using the mobile phone and reproduce the encrypted content data.

[0014] On the other hand, distribution of encrypted content data to personal computers using the Internet has also been performed.

[0015]

However, if a license for reproducing encrypted music data is also recorded and sold on a recording medium, the license is illegally copied or moved to another device. Only encrypted content data is recorded on media and sold. Therefore, it is not possible to reproduce the encrypted content data simply by purchasing the recording medium.

Accordingly, the present invention has been made to solve such a problem, and an object of the present invention is to provide a data terminal device for acquiring a license for reproducing encrypted content data when acquiring the encrypted content data from a recording medium. It is to provide.

[0017]

According to the present invention, there is provided a data terminal device comprising: a recording medium including encrypted content data and a server information file necessary for obtaining a license for reproducing the encrypted content data; A data terminal device that acquires encrypted content data and acquires a license from a distribution server based on a server information file, and a medium driving unit that acquires the encrypted content data and the server information file from a recording medium;
The connection means with the distribution server is determined according to the contents of the server information file acquired by the medium drive unit, the connection to the distribution server is requested by the determined connection means, the license distribution is requested, and the license is received from the distribution server. A storage unit that stores the encrypted content data obtained by the medium driving unit, and a device unit that stores the license received from the distribution server.

In the data terminal device according to the present invention, information necessary for accessing the distribution server is acquired from the server information file recorded on the recording medium, and the acquired information is used for reproducing the encrypted content data. The license is received from the distribution server and recorded on the data recording device.

Therefore, according to the present invention, a license for reproducing the encrypted content data can be obtained based on the server information file recorded on the recording medium.

Preferably, the control unit of the data terminal device comprises:
When the medium driving unit cannot acquire the server information file from the recording medium, the medium driving unit connects to the distribution server according to a user's instruction.

When the server information file is not recorded on the recording medium, the system waits for an instruction from the user, and is connected to the distribution server in accordance with the entered user instruction.

Therefore, according to the present invention, a license can be obtained from a distribution server even when encrypted content data is obtained from a recording medium that does not include a server information file.

Preferably, the control unit of the data terminal device comprises:
An address suitable for the determined connection means is obtained from the server information file, and a connection to the distribution server is made based on the obtained address.

In the data terminal device, the control unit determines connection means such as the Internet or a telephone line according to the contents of the server information file, and connects to the distribution server by URL or telephone number.

Therefore, according to the present invention, a license can be automatically obtained according to various devices.

Preferably, the control unit of the data terminal device comprises:
The authentication data held by the device unit is transmitted to the distribution server, and when the authentication data is authenticated in the distribution server, a license is received from the distribution server.

When the distribution server recognizes the data terminal device as a legitimate terminal device, the data terminal device receives a license from the distribution server.

Therefore, according to the present invention, it is possible to prevent unauthorized distribution of a license to encrypted content data.

Preferably, the control unit of the data terminal device comprises:
The public encryption key held by the device unit is transmitted to the distribution server, and the license encrypted with the public encryption key is received from the distribution server.

The data terminal device obtains a license by a public encryption method. Therefore, according to the present invention, a license can be acquired with a high security level.

Preferably, the storage unit of the data terminal device is
A content file that is obtained from the recording medium by the medium driving unit and stores the encrypted content data and plaintext information on the encrypted content data, and a license storage area provided in correspondence with the content file and in the device unit. A license management file for storing a registration number for designation is further stored.

A license management file for storing a registration number corresponding to the name of the encrypted content data is provided, and an area for storing a license is specified by the registration number.

Therefore, according to the present invention, a license can be associated with encrypted content data by a registration number.

Preferably, the data terminal device obtains the encrypted content data from the storage unit, obtains a license for the obtained encrypted content data from the device unit, and reproduces the encrypted content data using the obtained license. A reproduction unit is further provided.

In the data terminal device for which the license has been acquired, the encrypted content data is reproduced by the reproducing unit.

Therefore, according to the present invention, the encrypted content data can be obtained from the recording medium, and the encrypted content data can be reproduced.

Preferably, the reproducing unit of the data terminal device comprises:
The authentication data for the device unit is held, and when the authentication data is authenticated in the device unit, a license is acquired from the device unit.

When the validity of the reproducing unit requesting the license transmission is confirmed in the device unit holding the license, the reproducing unit acquires the license.

Therefore, according to the present invention, unauthorized reproduction of encrypted content data can be prevented.

Further, the data terminal device according to the present invention comprises:
Obtaining the encrypted content data and the server information file from a data terminal device capable of reading the encrypted content data and a server information file required for obtaining a license for reproducing the encrypted content data from the recording medium; A data terminal device that acquires a license from a distribution server based on the data terminal device that records the acquired encrypted content data and license in a data recording device, and an interface that controls data transfer with the data recording device, A transmission / reception unit for transmitting / receiving to / from the distribution server and a connection means for the distribution server are determined according to the contents of the obtained server information file, and the determined connection means is connected to the distribution server via the transmission / reception unit to obtain a license. Requests distribution and sends a license from the distribution server via the transceiver. And a control unit for receiving a scan control unit outputs the obtained encrypted content data and license via the interface to the data recording device.

In the data terminal device having no recording medium driving means, the encrypted content data and the server information file are sent from the data terminal device having the recording medium driving means, and the encrypted content data is transmitted based on the server information file. A license for reproducing data is received from the distribution server.

Therefore, according to the present invention, even a user of a data terminal device having no recording medium driving means can reproduce encrypted content data recorded and sold on a recording medium.

Preferably, the control unit of the data terminal device comprises:
If the server information file cannot be obtained from the data terminal device, the server connects to the distribution server according to the user's instruction.

When the server information file is not sent from the data terminal device, the system waits for an instruction from the user, and is connected to the distribution server according to the input user instruction.

Therefore, according to the present invention, even when encrypted content data is obtained from a recording medium that does not include a server information file, a license can be obtained from a distribution server.

Preferably, the control unit of the data terminal device comprises:
An address suitable for the determined connection means is obtained from the server information file, and a connection to the distribution server is made based on the obtained address.

In the data terminal device, the control unit determines connection means such as the Internet or a telephone line according to the contents of the server information file, and connects to the distribution server by URL or telephone number.

Therefore, according to the present invention, a license can be automatically obtained according to various devices.

Preferably, the control unit of the data terminal device comprises:
The authentication data held by the data recording means is transmitted to the distribution server, and when the authentication data is authenticated in the distribution server, a license is received from the distribution server.

When the distribution server recognizes that the data terminal device is a legitimate terminal device, the data terminal device receives a license from the distribution server.

Therefore, according to the present invention, it is possible to prevent unauthorized distribution of a license to encrypted content data.

Preferably, the control unit of the data terminal device comprises:
The public encryption key held by the data recording device is transmitted to the distribution server, and the license encrypted with the public encryption key is received from the distribution server.

The data terminal device obtains a license by the public encryption method. Therefore, according to the present invention, a license can be acquired with a high security level.

[0054] Preferably, the data terminal device further includes a reproducing unit that acquires the encrypted content data and the license from the data recording device, and reproduces the encrypted content data using the acquired license.

In the data terminal device for which the license has been acquired, the encrypted content data is reproduced by the reproducing unit.

Therefore, according to the present invention, even in a data terminal device having no recording medium driving means, encrypted content data can be obtained from the recording medium and the encrypted content data can be reproduced.

Preferably, the reproducing unit of the data terminal device comprises:
The authentication data for the data recording device is held, and when the authentication data is authenticated in the data recording device, a license is obtained from the data recording device.

In the data recording device holding the license, when the validity of the reproducing unit requesting the transmission of the license is confirmed, the reproducing unit acquires the license.

Therefore, according to the present invention, unauthorized reproduction of encrypted content data can be prevented.

[0060]

Embodiments of the present invention will be described in detail with reference to the drawings. In the drawings, the same or corresponding portions have the same reference characters allotted, and description thereof will not be repeated.

FIG. 1 shows that a data terminal device (personal computer or mobile phone) according to the present invention is a CD-RO
FIG. 1 is a schematic diagram conceptually illustrating an overall configuration of a data distribution system that acquires encrypted content data from M and receives a license for the acquired encrypted content data from a distribution server.

In the following, a description will be given of an example of the configuration of a data distribution system for distributing music data to users of personal computers via the Internet.
As will be apparent from the following description, the present invention is not limited to such a case, and can be applied to a case where content data as another copyrighted work, for example, image data, moving image data, and the like are distributed. Is possible.

Referring to FIG. 1, upon acquiring the encrypted music data from CD-ROM 60, personal computer 50 requests distribution of a license for reproducing the encrypted content data via modem 40 and Internet network 30 (distribution). Request) to the distribution server 10. The distribution server 10 that manages the copyrighted music data determines whether or not the personal computer 50 owned by the user of the personal computer who has accessed for data distribution has valid authentication data.
An authentication process is performed to determine whether or not the computer is a legitimate personal computer. The license is encrypted with a predetermined encryption method for a legitimate personal computer.
Deliver to 0.

Further, the personal computer 50 has a C
Fetching the encrypted content data from the D-ROM 60,
The captured encrypted content data is transferred to a USB (Uni
The data is transmitted to the mobile phone 100 via a verbal serial bus cable 70. Then, the mobile phone 100 records the encrypted content data on the inserted memory card 110, and issues a license distribution request to the distribution server 10 to the distribution server 10 via the mobile phone network, for a license for reproducing the encrypted content data. Send. Then, the distribution server 10 checks the validity of the memory card based on the authentication data, and if it is determined that the access is from a legitimate memory card, the distribution server 10 distributes the license to the memory card 110 via the mobile phone network. , A predetermined encrypted encryption license is transmitted to the communication carrier 20.
Pass to. As a result, a license for reproducing the encrypted content data acquired from the personal computer 50 is transmitted to the memory card 110. The mobile phone 100 has a built-in content playback device (not shown) for playing back encrypted content data recorded on the memory card 110 with a license, and the user of the mobile phone 100 can use a head connected to the mobile phone 100. Through the horn 130, the music played by the content playing device can be heard.

Usually, a portable telephone is read from a CD-ROM.
Since the encrypted content data cannot be obtained directly, the CD-R
The encrypted content data can be obtained from the OM.

Therefore, in the data distribution system shown in FIG. 1, personal computer 50 is connected to distribution server 1 via modem 40 and Internet network 30.
0 and receive a license from CD-ROM6
From 0, encrypted content data is obtained. In addition, the memory card 110 attached to the mobile phone 100 receives the encrypted content data acquired by the personal computer 50 from the CD-ROM 60, and receives a license for reproducing the encrypted content data from the distribution server 10. The user of the mobile phone 100 can acquire the encrypted content data from the CD-ROM via the personal computer 50.

With such a configuration, it is difficult to receive the license of the encrypted content data from distribution server 10 unless it is a legitimate personal computer or memory card.

Further, the distribution server 10 counts the frequency each time content data for one song is distributed, for example, so that the copyright generated each time the user of the personal computer receives (downloads) the content data. If the fee is collected together with the fee for using the Internet network, it becomes easier for the copyright holder to secure the copyright fee.

In the configuration as shown in FIG. 1, first, the system requires that the contents data to be distributed in an encrypted manner can be reproduced by the user of the portable telephone or the personal computer. Is a method for distributing an encryption key in communication, the second is a method itself for encrypting content data to be distributed, and the third is a method for encrypting content data thus distributed. This is a configuration that implements content data protection for preventing unauthorized copying.

In the embodiment of the present invention, especially when each session of distribution, movement, and reproduction occurs, the authentication and check functions for the destination of these content data are enhanced, and the non-authentication or decryption key decryption is performed. A configuration for enhancing copyright protection of content data by preventing output of content data to a broken recording device and a data playback terminal (a data playback terminal capable of playing content is also referred to as a mobile phone or a personal computer; the same applies hereinafter)). Will be described.

In the following description, the process of transmitting the license of the encrypted content data from the distribution server 10 to each personal computer or the like will be referred to as “distribution”.

FIG. 2 is a diagram for explaining characteristics of data, information, and the like for communication used in the data distribution system shown in FIG.

First, Dc is content data such as music data. The content data Dc is encrypted so as to be decryptable with the license key Kc. License key Kc
The encrypted content data {Dc} Kc, which has been encrypted so as to be able to be decrypted, is taken into the personal computer 50 from the CD-ROM 60 in this format.

In the following, it is assumed that the notation {Y} X indicates that the data Y has been encrypted so as to be decryptable with the decryption key X.

Further, from the CD-ROM 60, additional information Dc-inf as plain text information such as copyright or server access related to the content data is taken into the personal computer 50 together with the encrypted content data.

Further, the license of the encrypted content data is distributed from distribution server 10 to personal computer 50 or memory card 110. Further, a transaction ID, which is a management code for specifying distribution of a license key or the like from distribution server 10, is exchanged between distribution server 10 and personal computer 50, or between distribution server 10 and mobile phone 100. .

Further, the license includes a license key Kc, a content ID which is a code for identifying the content data Dc, and information such as the number of licenses and function limitation determined by designation from the user side. Recording device (memory card or license management device) generated based on license purchase condition AC
, Access restriction information ACm which is information relating to restrictions on license access, and reproduction restriction information AC which is control information relating to reproduction in a data reproduction terminal.
p exists. More specifically, the access control information ACm is control information for outputting a license or a license key from the memory card, the license management module, and the license management module to the outside. Number of licenses), restriction information on license transfer / copying, and license security level. The reproduction control information ACp is information for restricting reproduction after the content reproduction circuit receives a license key for reproduction, and includes reproduction time limit, reproduction speed change restriction, reproduction range designation (partial license), and the like.

Hereinafter, the transaction ID and the content ID are collectively referred to as a license ID, and the license key Kc, the license ID, the access restriction information ACm, and the reproduction restriction information ACp are collectively referred to as a license.

In the embodiment of the present invention, for each class of a recording device (memory card or license management device) or a cellular phone for reproducing content data,
A prohibition class list CRL (Certificate) so that distribution and reproduction of content data can be prohibited.
cat Revocation List). In the following, data in the prohibited class list may be represented by the symbol CRL as necessary.

In the prohibition class list related information, prohibition in which classes of mobile phones, memory cards, license management modules, and license management devices for which distribution, transfer, checkout, check-in, and reproduction of licenses are prohibited is listed. Class list data CR
L is included.

The prohibited class list data CRL is managed in the distribution server 10 and the memory card 110
Also, it is recorded and held in the personal computer 50. Such a prohibition class list needs to be upgraded and updated at any time, but data changes are basically made when distributing licenses such as encrypted content data and / or license keys. , The updating date and time of the prohibited class list received from the personal computer (license management device or license management module),
If it is determined that the banned class list has not been updated in comparison with the update date and time of the RL, the updated prohibited class list is delivered to the personal computer. The license management module, the license management device, and the mobile phone 100
The forbidden class list is exchanged between and the data change is the same as described above. Further, regarding the change of the prohibited class list, the distribution server 10 generates a difference CRL, which is difference data reflecting only the changed point,
According to this, it is also possible to adopt a configuration in which it is added to the prohibition class list CRL in the memory card, the hard disk, and the license management device.

As described above, the prohibited class list CRL is
By maintaining and operating not only in the distribution server but also in the memory card or the personal computer, the mobile phone and the memory card or the personal computer in which the class-specific decryption key specific to the type of the mobile phone and the memory card or the personal computer has been broken. Prohibit the supply of license keys to computers. For this reason, it is impossible to reproduce the content data in the mobile phone or the personal computer, and to acquire a new license in the memory card.

As described above, the prohibition class list CRL in the memory card or the license management device is configured to sequentially update data upon distribution. The management of the prohibition class list CRL in the memory card is performed independently of the upper level by using a memory card, a license management device, and a tamper resistant module (Tam) using a hard disk controlled by the license management module.
For example, by recording the information in a per-resistence module, it is impossible to falsify the prohibited class list data CRL from a higher level by a file system, an application program, or the like.
As a result, copyright protection for data can be further strengthened.

FIG. 3 is a diagram for explaining characteristics of data, information, and the like for authentication used in the data distribution system shown in FIG.

A portable telephone, a memory card, a license management device built in the personal computer 50,
And the license management module are provided with unique public encryption keys KPpy and KPmw, respectively. The public encryption keys KPpy and KPmw are provided with a secret decryption key Kpy and a memory card unique to the mobile phone, a memory card, a license management device, and a license management module. Each can be decrypted with the secret decryption key Kmw. These public encryption key and secret decryption key have different values for each type of mobile phone, memory card, license management device, and license management module. These public encryption keys and secret decryption keys are collectively called class keys.

Cpy is provided as a class certificate of a content reproduction device (mobile phone), and Cmw is provided as a class certificate of a memory card, a license management device, and a license management module.

These class certificates have different information for each class of the content reproduction device, the memory card, the license management device, and the license management module. A class key whose encryption by a class key has been broken, that is, a class key for which a secret decryption key has been obtained, is listed in a prohibited class list and is subject to license issuance.

The public encryption key and class certificate unique to these content reproduction device, memory card, license management device, and license management module are in the form of authentication data {KPpy // Cpy} KPa or authentication data {KPmw // In the format of Cmw @ KPa, the data is recorded in a data reproducing device (mobile phone), a memory card, a license management device, and a license management module at the time of shipment. As will be described in detail later, KPa is a public authentication key common to the entire distribution system.

For exchanging data between the memory card and the memory card, or exchanging data between the license management device and the license management device, or for maintaining confidentiality in exchanging data between the license management module and the license management module. The common keys Ks1 to Ks3 generated in the distribution server 10, the mobile phone 100, the memory card 110, the license management device, and the license management module each time the content data is distributed and reproduced are used as the encryption keys.

Here, the common keys Ks1 to Ks3 are unique common keys generated for each “session” which is a unit of communication or a unit of access between a distribution server, a mobile phone, a memory card, a license management device or a license management module. These common keys Ks1 to Ks3 are hereinafter referred to as “session keys”.
Also referred to as.

These session keys Ks1 to Ks3
Is managed by the distribution server, the mobile phone, the memory card, the license management device, and the license management module by having a unique value for each communication session. Specifically, the session key Ks1
Is generated by the distribution server for each distribution session. The session key Ks2 is generated for each distribution session and reproduction session by the memory card, the license management device, and the license management module, and the session key Ks3 is generated for each reproduction session in the mobile phone. In each session, these session keys are exchanged, a session key generated by another device is received, a license key and the like are transmitted after encrypting with the session key, and the security strength in the session is increased. Can be improved.

A public encryption key set for each medium of a memory card, a license management device, and a license management module is used as a key for managing data processing in the memory card 110, the license management device, and the license management module. KPmcx,
A secret decryption key Km unique to each memory card capable of decrypting data encrypted with the public encryption key KPmcx.
cx exists.

FIG. 4 is a schematic block diagram showing a configuration of distribution server 10 shown in FIG. The distribution server 10 stores an information database 304 for storing distribution information such as the content ID of the encrypted content data, and charging information for starting the access to the license key and the like for each user of the personal computer. C for managing charging database 302 and prohibited class list CRL
An RL database 306 and a menu database 307 for holding a menu of content data reproduced by the license held in the information database 304
And a distribution record database 3 for storing a log related to distribution of a transaction ID or the like for specifying distribution of content data and a license key for each license distribution.
08, information database 304, billing database 3
02, a data processing unit 310 for receiving data from the CRL database 306, the menu database 307, and the distribution record database 308 via the bus BS1 and performing predetermined processing, and the data processing unit 310 for communicating with the distribution carrier 20 via the communication network. A communication device 350 for exchanging data with the processing unit 310 is provided.

The data processing section 310 is controlled by the distribution control section 315 for controlling the operation of the data processing section 310 in accordance with the data on the bus BS1 and the session key Ks1 during the distribution session. Key generation unit 316 for generating an authentication data, and the authentication data {KPmw // Cm for authentication transmitted from the license management device and the license management module.
an authentication key holding unit 313 for holding a public authentication key for decrypting w @ KPa, and a communication device for transmitting authentication data {KPmw // Cmw} KPa for authentication sent from the license management device and the license management module. 3
50 and the authentication key holding unit 3
13 and a session key Ks1 generated by the session key generation unit 316 using the public encryption key KPmw obtained by the decryption processing unit 312. An encryption processing unit 318 for outputting to the bus BS1;
And a decryption processing unit 320 that receives data transmitted after being encrypted by the session key Ks1 from the bus BS1 and performs decryption processing.

The data processing unit 310 further transmits the license key Kc and the reproduction restriction information ACm given from the distribution control unit 315 to the memory card, license management device, and license management module obtained by the decryption processing unit 320. An encryption processing unit 326 for encrypting with the public encryption key KPmcx, and an encryption processing unit 3
26 includes an encryption processing unit 328 for further encrypting the output from the decryption processing unit 320 using the session key Ks2 given from the decryption processing unit 320 and outputting the encrypted data to the bus BS1.

The operation of the distribution server 10 in a distribution session will be described later in detail with reference to flowcharts.

FIG. 5 is a schematic block diagram for explaining a configuration of personal computer 50 shown in FIG. The personal computer 50 has a bus BS for exchanging data with each unit of the personal computer 50.
In order to receive the license of the encrypted content data from the distribution server 10 to the license management device 520 or the license management module 511 via the Internet network, the exchange of data between the distribution server 10 and the CD is controlled. A controller 510 for controlling the acquisition of the encrypted content data from the CD-ROM via the ROM drive 540 and a distribution server 10 for receiving a license from the distribution server 10; Exchange of keys, CD-
A license management device 520 for hardware managing a license for reproducing the encrypted content data obtained from the ROM 60, and a content included in the controller 510 and executing the acquisition of the encrypted content data from the CD-ROM 60 by a program And a management module 511.

The license management device 520 transmits and receives data when the license of the encrypted content data is received from the distribution server 10 by hardware, and manages the received license by hardware. Can receive a license and manage the license.

The personal computer 50 further includes
CD-ROM 60 via CD-ROM drive 540
And the entry number for specifying the storage area of the license of the encrypted content data received by the license management device 520 and the encrypted content data acquired from the license management device 520 are stored in association with the file name of the encrypted content data. Hard disk (HDD) 53 for storing license management files
Contains 0. The details of the content list file will be described later.

The personal computer 50 further comprises
A USB interface 550 for controlling transmission and reception of data between the controller 510 and the terminal 580 when transmitting the encrypted content data to the mobile phone 100 or the like.
A CD-ROM drive 540 for acquiring content data from the CD-ROM 60, a keyboard 560 for inputting instructions from the user, and a display 570 for visually giving various information to the user.
It includes a terminal 580 for connecting the USB cable 70 and a content reproduction device 1550 for reproducing encrypted content data by license.

As described above, the personal computer 50
Is a license management device 5 for receiving a license from the distribution server 10 via the Internet network 30.
20 and a CD-ROM drive 540 for acquiring encrypted content data from the CD-ROM 60.

FIG. 6 is a schematic block diagram for describing the configuration of mobile phone 100 shown in FIG.

The portable telephone 100 has a bus BS3 for transmitting and receiving data to and from each section of the portable telephone 100, an antenna 102 for receiving a signal wirelessly transmitted by the portable telephone network, and receiving a signal from the antenna 102. A transmitting / receiving unit 104 for converting the data into a baseband signal or modulating data from a mobile phone and giving the data to an antenna;
A controller 1106 for controlling the operation of the mobile phone 100 via the bus BS3, an operation panel 1108 for giving an external instruction to the mobile phone 100, and information output from the controller 1106 and the like are visually recognized by the mobile phone user. Display panel 1110 for giving information
And

The portable telephone 100 further includes a removable memory card 110 for storing content data (music data) from the distribution server 10 and decoding the content data.
And a memory interface 1200 for controlling transmission and reception of data between the memory card 110 and the bus BS3.
And a USB for controlling data transfer between the bus BS3 and the terminal 1114 when receiving the encrypted content data and the license from the personal computer 50.
An interface 1112 and a terminal 1114 for connecting the USB cable 70 are included.

The mobile phone 100 further converts the public encryption key KPp1 and the class certificate Cp1 that are set for each type (class) of the mobile phone into a public decryption key KP.
An authentication data holding unit 1500 that holds the authentication data {KPp1 // Cp1} KPa encrypted so that its validity can be authenticated by decrypting it with a. Here, it is assumed that the class y of the mobile phone (data terminal device) 100 is y = 1.

The portable telephone 100 further includes a decryption key Kp1 unique to the portable telephone (content reproducing device).
Kp1 holding unit 1502 for holding data and decoding the data received from bus BS3 with Kp1 and
And a decryption processing unit 1504 for obtaining a session key Ks2 generated by

Further, portable telephone 100 further includes a session key Ks3 for encrypting data exchanged with memory card 110 on bus BS3 in a reproduction session for reproducing the content data stored in memory card 110. And a session key Ks3 generated by the session key generation unit 1508 when receiving the license key Kc and the reproduction restriction information ACp from the memory card 110 in the reproduction session of the encrypted content data. Is encrypted by the session key Ks2 obtained by the decryption processing unit 1504 and the bus BS3
And a cryptographic processing unit 1506 for outputting to

The mobile phone 100 further includes a bus BS3
The above data is decrypted by the session key Ks3,
Upon receiving the encrypted content data {Dc} Kc from the bus BS3, the decryption processing unit 1510 that outputs the content key Kc and the playback restriction information ACp, decrypts the content data with the license key Kc acquired from the decryption processing unit 1510, and outputs the content data. Decoding processing unit 1516 and decoding processing unit 1
A music playback unit 1518 for receiving the output of 516 and playing back content data, a DA converter 1519 for converting the output of the music playback unit 1518 from a digital signal to an analog signal, and an output of the DA converter 1519 for a headphone or the like. And a terminal 1530 for outputting to an external output device (not shown).

In FIG. 7, the area surrounded by the dotted line constitutes a content reproducing device 1550 for decrypting the encrypted content data and reproducing the music data. Also, in FIG. 7, for simplification of description, only blocks related to the reproduction of music data of the present invention among the mobile phones are described, and blocks related to the call function originally provided in the mobile phones are partially described. Is omitted.

The operation of each component of the mobile phone 100 in each session will be described later in detail with reference to flowcharts.

FIG. 7 is a schematic block diagram for explaining a configuration of memory card 110. As described above, KPmw and Kmw are provided as the public encryption key and the secret decryption key unique to the memory card, and the class certificate Cmw of the memory card is provided. 3, respectively.

Therefore, memory card 110 has authentication data holding unit 1400 holding authentication data {KPm3 // Cm3} KPa, and Kmc holding unit 1 holding unique decoding key Kmc4 set for each memory card.
402, a Km holding unit 1421 holding a unique secret decryption key Km3 set for each type of memory card,
and a KPmc holding unit 1416 for holding a public encryption key KPmc4 that can be decrypted by mc4. The authentication data holding unit 1400 decrypts the secret encryption key KPm3 and the class certificate Cm3 that are set for each type and class of the memory card with the public authentication key KPa, thereby encrypting the authentication so that its validity can be authenticated. Data @ KPm
3 // Cm3｝ KPa.

By providing an encryption key for a recording device called a memory card, management of distributed content data and an encrypted license key is executed for each memory card, as will be apparent from the following description. It becomes possible to do.

The memory card 110 further includes an interface 1424 for exchanging signals with the memory interface 1200 via the terminal 1426, a bus BS4 for exchanging signals with the interface 1424,
From the data provided from the interface 1424 to the bus BS4, a unique private decryption key Km3 for each type of memory card is received from the Km holding unit 1421, and the distribution server 1
0 is the session key K generated in the distribution session
a decoding processing unit 1422 that outputs s1 to the contact point Pa;
a receiving the authentication key KPa from the holding unit 1414, and
4, a decryption unit 1408 that performs a decryption process using KPa from the data provided to the decryption unit 4 and outputs the decryption result to the encryption processing unit 1410, and a key selectively provided by the changeover switch 1442, and selectively provided by the changeover switch 1446. And an encryption processing unit 1406 for encrypting the data to be output to the bus BS4.

The memory card 110 further includes a session key generator 1418 for generating a session key Ks2 in the reproduction session, and a session key generator 14
18 decrypts the session key Ks2 output by
08 public encryption key KPpy or KP
an encryption processing unit 1410 that encrypts the data with mw and sends it to the bus BS4; a decryption processing unit 1412 that receives data encrypted with the session key Ks2 from the bus BS4 and decrypts the data with the session key Ks2 obtained from the session key generation unit 1418; The encryption processing unit 1417 for encrypting the license key Kc and the reproduction time limit ACp read from the memory 1415 in the reproduction session of the encrypted content data with the public encryption key KPmcx unique to the memory card 110 decrypted by the decryption processing unit 1412. And

The memory card 110 further includes a bus BS.
4, a decryption processing unit 1404 for decrypting the data on the private encryption key KPmc4 with the secret decryption key Kmc4 unique to the memory card 110, prohibited class list data CRL, and encrypted content data {Dc} Kc.
License for reproducing encrypted content data {Dc} Kc (Kc, ACp, ACm, license ID)
And a memory 1415 for receiving and storing, from the bus BS4, additional information Data-inf, a playlist of encrypted content data, and a license management file for managing licenses. The memory 1415 is configured by, for example, a semiconductor memory. Also, memory 1
515, a CRL area 1415A in which a prohibited class list CRL is recorded, a license area 1415B in which a license is recorded, and encrypted content data {Dc} Kc,
The data area 1415C records the related information Dc-inf of the encrypted content data, the playlist, and the license management file.

The details of the license management file and the playlist file will be described later.

The license area 1415B stores a license in a license-specific recording unit called an entry for recording a license (content key Kc, reproduction control information ACp, access restriction information ACm, license ID). When accessing a license, an entry in which the license is stored or an entry for which the license is to be recorded is specified by an entry number.

[0119] The memory card 110 further includes a bus BS.
4. Data is exchanged with the outside via bus 4 and bus BS
And a controller 1420 for controlling the operation of the memory card 110 by receiving reproduction information and the like between the memory card 110 and the memory card 110.

Note that all the components except the data area 1415C are configured in the tamper-resistant module area.

Hereinafter, for simplicity, the access control information ACm includes only the number of times of reproduction, which is control information for limiting the number of times of reproduction, and the reproduction circuit control information ACp includes only the number of times of reproduction, which is control information for defining a period during which reproduction is possible. And the access control information ACm and the reproduction circuit control information A
Cp is the reproduction number limit ACm and the reproduction time limit AC, respectively.
It is referred to as p.

FIG. 8 is a schematic block diagram showing the configuration of the license management device 520 built in the personal computer 50. License management device 520
Has basically the same configuration as the memory card 110.
Authentication data holding unit 52 of license management device 520
00, Kmc holding unit 5202, decryption processing unit 5204, encryption processing unit 5206, decryption processing unit 5208, encryption processing unit 5
210, a decryption processing unit 5212, a KPa holding unit 5214,
KPmc holding unit 5216, encryption processing unit 5217, session key generation unit 5218, controller 5220, Km
Holding unit 5221, decoding processing unit 5222, interface 5224, terminal 5226, changeover switches 5242, 52
46 denotes an authentication data holding unit 1400, a Kmc holding unit 1402, and a decryption processing unit 14 of the memory card 110, respectively.
04, encryption processing unit 1406, decryption processing unit 1408, encryption processing unit 1410, decryption processing unit 1412, KPa holding unit 1
414, KPmc holding unit 1416, encryption processing unit 141
7. Session key generator 1418, controller 14
20, Km holding unit 1421, decoding processing unit 1422, interface 1424, terminal 1426, changeover switch 14
42, 1446. However, the authentication data holding unit 5200 holds the authentication data in the format of {KPm7 // Cm7} KPa, the Km holding unit 5202 holds the secret decryption key Km7, and the Kmc holding unit 5221 stores the secret decryption key Kmc8. Hold.

The license management device 520 stores the prohibited class list CRL and the license (Kc, ACp, AC
m, license ID),
Included instead of memory 1415 of memory card 110. The memory 5215 stores the prohibited class list CRL.
It comprises an RL area 5215A and a license area 5215B in which a license is recorded.

Hereinafter, the operation of each session in the data distribution system shown in FIG. 1 will be described.

[Distribution] Next, the operation of distributing the license of the encrypted content data from the distribution server 10 to the license management device 520 of the personal computer 50 in the data distribution system shown in FIG. 1 will be described.

FIGS. 9 to 13 show a distribution operation (hereinafter also referred to as a distribution session) to a license management device 520 built in the personal computer 50, which occurs when the encrypted content data is purchased in the data distribution system shown in FIG. It is a 1st-5th flowchart for demonstrating.

Referring to FIG. 9, a user of personal computer 50 transmits a CD-RO through keyboard 560.
When an instruction to acquire encrypted content data is input from M60, controller 510 of personal computer 50 creates a list of content data according to the content list recorded on the CD-ROM, and confirms a license purchase request. (Step S78).
Then, a distribution request is made by designating the content ID (step S80), and a purchase condition AC for purchasing a license of the encrypted content data is input via the keyboard 560 (step S82). In other words, in order to purchase the license key Kc for decrypting the selected encrypted content data, the purchase condition AC is set by setting the playback count limit ACm and the playback time limit ACp of the encrypted content data.

When the purchase condition AC for the encrypted content data is input, it is determined whether or not the server information file has been obtained from the CD-ROM (step S84). If the server information file has not been obtained, step S1 is performed.
00, and when the server information file is obtained, the process proceeds to the next step S86 (step S8).
4).

If it is determined in step S84 that the server information file has been obtained, it is determined whether there is information on the content requested to be distributed (step S86). In other words, "Use the Internet to get this content data."
Information on connection means for connecting to the distribution server 10 according to the type of encrypted content data acquired from the CD-ROM 60, such as "Use a telephone line to acquire this content data." And
It is determined whether there is information such as an address to be accessed to acquire a license such as "Which server should be accessed for this content?" If there is no such information in step S86,
The process proceeds to step S100, and if there is information, the process proceeds to step S88.

If it is determined in step S86 that there is information on the content data, distribution server 10
Confirmation of the connection method with the server (step S88). That is, it is determined whether the connection is made via the Internet, a telephone line, or whether the connection is made via the Internet and a telephone line. If the connection is made via a telephone line, the process proceeds to step S90.
The process proceeds to step 94, and if the connection cannot be established via the Internet and the telephone line, the process proceeds to step S190 to end the distribution session.

When it is confirmed in step S88 that the connection is made via the telephone line, the telephone number is obtained from the server information file (step S90), and the obtained telephone number is dialed and connected to the distribution server 10 via the modem (step S90). Step S92). On the other hand, in step S88, when it is confirmed that the connection is made via the Internet, it is confirmed whether or not the line is connected (step S94). When the connection is not established, the flow shifts to step S190 to end the distribution session. When the connection of the line is confirmed, the process proceeds to step S96 (step S94).

In step S94, when the connection to the line is confirmed, the URL is obtained from the server information file (step S96), and the distribution server 10 is determined based on the URL.
Is connected (step S98). Step S8
4, when it is determined that there is no server information file, or when it is determined that there is no information on the content data in step S86, the user is instructed to connect to the distribution server 10 (step S100). The connection is confirmed (step S102).
If it is determined in step S102 that the connection has not been established, the process proceeds to step S190 to end the distribution session. If it is determined that the connection has been established, the process proceeds to the next step S104.

Referring to FIG. 10, after step S92, step S98 or step S102, controller 510 gives an instruction to output the authentication data to license management device 520 via bus BS2 (step S104). The controller 5220 of the license management device 520 includes a terminal 5226, an interface 522
4 and an instruction to output authentication data via the bus BS5. Then, the controller 5220 sends the authentication data $ KP from the authentication data holding unit 5200 via the bus BS5.
Read out m7 // Cm7｝ KPa, and {KPm7 // Cm
7Kpa is output via bus BS5, interface 5224 and terminal 5226 (step S10).
6).

The controller 510 of the personal computer 50 transmits the content ID, the license purchase condition data AC, and the distribution request to the distribution server 10 in addition to the authentication data {KPm7 // Cm7} KPa from the license management device 520. It transmits (step S108).

The distribution server 10 receives the distribution request, the content ID, the authentication data {KPm7 // Cm7} KPa, and the license purchase condition data AC from the personal computer 50 (step S110).
In the decryption processing unit 312, the license management device 52
The authentication data output from 0 is decrypted with the public authentication key KPa (step S112).

The distribution control unit 315 determines from the decryption processing result of the decryption processing unit 312 whether or not the processing has been performed normally, that is, the license management device 520 determines whether the public encryption key KPm7 and the certificate In order to authenticate that Cm7 is held, an authentication process is performed to determine whether or not an authorized organization has received authentication data encrypted for proving its validity (step S114). If it is determined that the authentication data is valid, the distribution control unit 315 approves and accepts the public encryption key KPm7 and the certificate Cm7. Then, the process proceeds to the next process (step S116). If it is not valid authentication data, it is rejected and the process ends without accepting the public encryption key KPm7 and the certificate Cm7 (step S198).

As a result of the authentication, when it is recognized that the device is a legitimate device, the distribution control unit 315 then stores the class certificate Cm7 of the license management device in the prohibited class list CR.
The CRL database 306 is inquired as to whether or not it is listed in L. If these class certificates are subject to the prohibited class list, the distribution session is ended here (step S198).

On the other hand, if the class certificate of the license management device 520 is not included in the prohibited class list, the process shifts to the next process (step S116).

As a result of the authentication, it is confirmed that the access is from a personal computer having a license management device having valid authentication data and that the class is not included in the prohibited class list. The unit 315 generates a transaction ID that is a management code for specifying distribution (step S118). Further, the session key generation unit 316 generates a session key Ks1 for distribution (step S120). The session key Ks1 is stored in the decryption processing unit 31
2 by the public encryption key KPm7 corresponding to the license management device 520 obtained by the encryption processing unit 318.
(Step S122).

The transaction ID and the encrypted session key Ks1 have the transaction ID //
As {Ks1} Km7, the bus BS1 and the communication device 3
The data is output to the outside through the device 50 (step S124).

Referring to FIG. 11, personal computer 50 has a transaction ID /// {Ks1} Km7
Is received (step S126), the controller 51
0 inputs the transaction ID // {Ks1} Km7 to the license management device 520 (step S1).
28). Then, in the license management device 520, the terminal 5226 and the interface 5224
, The decryption processing unit 5222 decrypts the received data given to the bus BS5 with the secret decryption key Km7 unique to the license management device 520 held in the holding unit 5221 to decrypt the session key Ks1. Then, the session key Ks1 is received (step S1).
30).

[0142] The controller 5220
After confirming the reception of the session key Ks1 generated in the above, the license management device 520 is instructed to generate the session key Ks2 generated at the time of the distribution operation to the session key generation unit 5218. Then, the session key generation unit 5218 generates a session key Ks2 (Step S132).

In the distribution session, controller 5220 extracts update date / time CRLdate of the prohibited class list recorded in memory 5215 in license management device 520 from memory 1415 and outputs it to change-over switch 5246 (step S134). ).

The encryption processing unit 5206 includes the changeover switch 52
The switch 52 is switched by the session key Ks1 given from the decryption processing unit 5222 via the contact point Pa of the switch 42.
The session key Ks2, the public encryption key KPmc8, and the update date and time CRLdate given by sequentially switching the contacts of 46 are encrypted as one data string,
{Ks2 // KPmc8 // CRLdate} Ks1 is output to the bus BS3 (step S136).

Encrypted data $ K output to bus BS3
s2 // KPmc8 // CRLdate @ Ks1 is transmitted from the bus BS3 to the interface 5224 and the terminal 522.
6 to the personal computer 50 and transmitted from the personal computer 50 to the distribution server 10 (step S138).

The distribution server 10 has a transaction ID
// \ Ks2 // KPmc8 // CRLdate \ Ks
1, the decryption processing unit 320 performs decryption processing using the session key Ks1, and the session key Ks2 generated by the license management device 520, the public encryption key KPmc8 unique to the license management device 520, and the prohibition in the license management device 520. An update date and time CRLdate of the class list is received (step S142).

The distribution control unit 315 generates the access restriction information ACm and the reproduction time limit ACp according to the content ID and the license purchase condition data AC acquired in step S110 (step S144). further,
The license key Kc for decrypting the encrypted content data is obtained from the information database 304 (step S146).

The distribution control unit 315 determines the generated license, that is, the transaction ID, the content I
D, the license key Kc, the reproduction time limit ACp, and the access restriction information ACm are provided to the encryption processing unit 326. The encryption processing unit 326 generates the public encryption key KPmc8 unique to the license management device 520 obtained by the decryption processing unit 320.
The license is encrypted by using the encrypted data {transaction ID // content ID // Kc // ACm
// Generate ACp @ Kmc8 (step S14)
8).

Referring to FIG. 12, in distribution server 10, based on the prohibited class list update date and time CRLdate transmitted from license management device 520, prohibited class list CRL held by license management device 520 is displayed.
Is determined to be the latest, and when the latest is determined, the process proceeds to step S152. Step S if not up to date
The process proceeds to 160 (step S150).

[0150] When it is determined that it is the latest, the encryption processing unit 328
Is the encrypted data output from the encryption processing unit 326 {transaction ID // content ID // Kc // A
License management device 5 for Cm // ACp @ Kmc8
20, encryption is performed using the session key Ks2 generated, and the encrypted data @ transaction ID
/// Content ID // Kc // ACm // ACp @ K
mc8 @ Ks2 is output to bus BS1. Then, the distribution control unit 315 determines that the encrypted data on the bus BS1 {transaction ID // content ID // Kc // AC
m // ACp {Kmc8} Ks2 is transmitted to the personal computer 50 via the communication device 350 (step S152).

The controller 510 of the personal computer 50 transmits the encrypted data {transaction ID // content ID // Kc // ACm // AC
p｝ Kmc8｝ Ks2 is received (step S154),
The data is input to the license management device 520 via the bus BS5. Decryption processing unit 5 of license management device 520
212 is the encrypted data {transaction ID //
Content ID // Kc // ACm // ACp @ Kmc
8｝ Ks2 is supplied to the terminal 5226 and the interface 522.
4 and decrypted by the session key Ks2 generated by the session key generator 5218,
｛Transaction ID // Content ID // Kc /
/ ACm // ACp @ Kmc8 is accepted (step S
158). Thereafter, the process proceeds to step S172.

On the other hand, if it is determined that the data is not the latest, the distribution control unit 315 sends the latest prohibited class list data CRLda from the CRL database 306 via the bus BS1.
te is obtained, and a difference CRL as difference data is generated (step S160).

The encryption processing unit 328 receives the output of the encryption processing unit 326 and the difference CRL of the prohibited class list supplied from the distribution control unit 315 via the bus BS1, and receives the session key generated by the license management device 520. Encrypt with Ks2. Encrypted data output from encryption processing section 328 {difference CRL /// transaction ID // content ID // Kc // ACm // A
Cp {Kmc8} Ks2 is transmitted to personal computer 50 via bus BS1 and communication device 350 (step S162).

The personal computer 50 transmits the encrypted data {differential CRL // transaction I
D // content ID // Kc // ACm // ACp｝
Kmc8 @ Ks2 is received (step S164), and is input to the license management device 520 via the bus BS5 (step S166). License management device 52
0, terminal 5226 and interface 52
The decoding processing unit 5212 decodes the received data given to the bus BS5 via the decoding processing unit 2412. Decryption processing unit 521
2 uses the session key Ks2 given from the session key generator 5218 to decode the data received on the bus BS5 and output it to the bus BS5 (step S168).

At this stage, an encryption license {transaction ID // content ID // Kc // ACm // ACp {Kmc8} that can be decrypted with the secret decryption key Kmc8 held in the Kmc holding unit 5221 is stored in the bus BS5.
And the difference CRL are output (step S168).
Difference CR received according to the instruction of controller 5220
L is used to update the CRL area 5215A in the memory 5215 based on the difference CRL (step S170).

Steps S152, S154, S156
S158 is an operation of distributing the license key Kc and the like to the license management device 520 when the prohibition class list CRL of the license management device 520 is the latest. Steps S160, S162, S164, S166, and S16
8. In S170, the license key K when the prohibition class list CRL of the license management device 520 is not the latest.
c) distribution operation to the license management device 520. In this way, it is checked every time whether the prohibited class list CRLdate sent from the license management device 520 is updated, the latest prohibited class list CRL is obtained from the CRL database 306, and the difference CRL is managed by the license management device 520. By distributing the license to the device 520, it is possible to prevent the distributed license from being output to a device whose class key or the like is broken and leaked.

Step S158 or step S170
After that, the encryption license {transaction ID // content ID /
/ Kc // ACm // ACp @ Kmc8 is decrypted by the decryption processing unit 5204 using the secret decryption key Kmc8, and the license (license key Kc, transaction ID, content ID, reproduction count restriction ACm, and reproduction time limit ACp) is received. (Step S172).

In this way, the distribution server and the license management device exchange the encryption keys generated respectively, execute encryption using the encryption keys received by each other, and transmit the encrypted data to the other party. Thereby, the mutual authentication can be effectively performed even in the transmission and reception of each encrypted data, and the security of the data distribution system can be improved.

Referring to FIG. 13, controller 510
Inputs the entry number for storing the license received by the license management device 520 to the license management device 520 (step S174). Then, the controller 5 of the license management device 520
220 is a terminal 5226 and interface 5224
And the license (the license key Kc, the transaction ID, the transaction ID, and the like) acquired in step S172 is stored in the license area 5215B of the memory 5215 specified by the received entry number.
Content ID, playback count limit ACm, and playback time limit A
Cp) is stored (step S176).

The controller 510 of the personal computer 50 transmits the transaction ID sent from the distribution server 10 and the license distribution acceptance to the distribution server 10 (Step S178).

The delivery server 10 has a transaction ID
And the receipt of the license distribution is received (step S18).
0), storage of billing data in billing database 302,
And transaction ID distribution record database 3
08 is recorded (step S182).

On the other hand, in step S178, the personal computer 50 generates a license management file including the license entry number, the transaction ID, and the content ID, and records it in the HDD 530 (step S184). And the controller 5
Reference numeral 10 denotes a content file ({Dc} Kc, Dc-D) read from the CD-ROM by the CD-ROM drive 540.
inf) to the HDD 530 (step S18).
6), the received content is added to the content list file recorded in the HDD 530 (step S1).
88), the entire operation ends.

As described above, the license management device 50 built in the personal computer 50 is a legitimate device, and at the same time, the public encryption key KPm7 that can be encrypted and transmitted together with the class certificate Cm7 is valid. After the confirmation, the class certificate Cm7 is not included in the prohibited class list, that is, the content data is only transmitted in response to the distribution request from the license management device not described in the class certificate list in which the encryption by the public encryption key KPm7 is broken. The license can be distributed, and distribution to an unauthorized license management device and distribution using the decrypted class key can be prohibited.

Note that the personal computer 50 sends U
Upon receiving the encrypted content data acquired from the CD-ROM 60 via the SB cable 70, the memory card 1
Mobile phone 1 with encrypted content data recorded in 10
00 receives the license from the distribution server 10 via the mobile phone network and records it on the memory card 110 in accordance with the flowcharts shown in FIGS. However, when the mobile phone 100 receives the license from the distribution server 10,
-Acquisition of encrypted content data from the ROM 60 is performed first. In this case, unless the encrypted content data is received first, the mobile phone 100 cannot obtain the server information file,
This is because the connection means with the distribution server is not understood.

[Move] In the data distribution system shown in FIG. 1, the license of the encrypted content data acquired from the CD-ROM 60 and the license of the encrypted content data distributed from the distribution server 10 to the license management device 520 of the personal computer 50 are obtained. Mobile phone 10
The operation of transmitting data to the memory card 110 inserted in the memory card 0 will be described. This operation is called “movement”.

FIG. 14 to FIG. 17 show the data distribution system shown in FIG. 1 in which the license of the encrypted content data received from the distribution server 10 by the license management device 520 and the encrypted content data acquired from the CD-ROM 60 are transmitted to the portable device. The first to fourth moving operations for moving to the memory card 110 mounted on the telephone 100
It is a 4th flowchart.

Referring to FIG. 14, when a movement request is input from keyboard 560 of personal computer 50 (step S300), controller 510 causes
The authentication data transmission request is sent to the USB interface 550,
The data is transmitted to the mobile phone 100 via the terminal 580 and the USB cable 70 (step S302). Then, the controller 1106 of the mobile phone 100 communicates with the terminal 1114, the USB interface 1112, and the bus B
A transmission request for authentication data is received via S3, and the bus BS
3 and a request to transmit authentication data to the memory card 110 via the memory card interface 1200. Then, the controller 142 of the memory card 110
0 receives a request for transmitting authentication data via the terminal 1426, the interface 1424, and the bus BS4 (step S304).

Upon receiving the authentication data transmission request, controller 1420 reads authentication data {KPm3 // Cm3} KPa from authentication data holding section 1400 via bus BS4, and reads the read authentication data {KPm3 //
Cm3 @ KPa to bus BS4, interface 1424
And output to the mobile phone 100 via the terminal 1426. The controller 1106 of the mobile phone 100
Are the memory card interface 1200 and the bus B
Authentication data via S3 {KPm3 // Cm3} KPa
Received, bus BS3, USB interface 111
2, authentication data $ KPm3 // to the personal computer 50 via the terminal 1114 and the USB cable 70.
Cm3 @ KPa is transmitted (step S306).

Then, the personal computer 50
Controller 510 receives authentication data {KPm3 // C via terminal 580 and USB interface 550.
m3 @ KPa is received (step S308), and the received authentication data {KPm3 // Cm3} KPa is transferred to the bus B.
The data is transmitted to the license management device 520 via S2. Controller 52 of license management device 520
Reference numeral 20 denotes the authentication data {KPm3 // Cm via the terminal 5226, the interface 5224, and the bus BS5.
3 KPa is received and the received authentication data KPm
3 // Cm3｝ KPa is supplied to the decoding processing unit 5208.
Authentication processing section 5208 uses authentication key KPa from KPa holding section 5214 to generate authentication data {KPm3 // Cm3}.
A KPa decryption process is performed (step S310). The controller 5220 determines from the decryption processing result in the decryption processing unit 5208 whether or not the processing has been normally performed, that is, whether the memory card 110 holds the public encryption key KPm3 and the certificate Cm3 from the authorized memory card. In order to perform authentication, an authentication process is performed to determine whether or not an authorized institution has received authentication data encrypted to prove its validity (step S312). If it is determined that the authentication data is valid, the controller 5220
Approves the public encryption key KPm3 and the certificate Cm3,
Accept. Then, control goes to the next process (step S314). If it is not valid authentication data, it is rejected and the process ends without accepting the public encryption key KPm3 and the certificate Cm3 (step S404).

As a result of the authentication, when the controller 5220 recognizes that the memory card is a legitimate memory card, the controller 5220 next determines whether or not the class certificate Cm3 of the memory card 110 is listed in the prohibited class list CRL. The CRL area 5215A is referred to, and when these class certificates are targets of the prohibited class list, the movement operation is ended here (step S40).
4).

On the other hand, if the class certificate of the memory card 110 is out of the prohibited class list, the process moves to the next step (step S314).

As a result of the authentication, it is confirmed that the access is from a portable telephone equipped with a memory card having valid authentication data, and that the class is not included in the prohibited class list. Acquires the transaction ID, which is the management code for specifying the transfer, from the license area 5215B of the memory 5215 (step S316).
Then, the session key generation unit 5218 generates a session key Ks22 for movement (step S31).
8). The session key Ks22 is stored in the decryption processing unit 5208.
Is encrypted by the encryption processing unit 5210 using the public encryption key KPm3 corresponding to the memory card 110 obtained in step S320 (step S320). Controller 522
0 is the encrypted data {Ks22} K via the bus BS5.
m3, the transaction ID obtained from the memory 5215 is added to the encrypted data {Ks22} Km3, and the transaction ID // {Ks22} Km3 is output via the bus BS5, the interface 5224, and the terminal 5226 (step S322).

Referring to FIG. 15, controller 510 of personal computer 50 receives transaction ID // {Ks22} Km3 via bus BS2 (step S324), and receives USB interface 550,
The transaction ID // {Ks22} Km3 is transferred to the mobile phone 1 via the terminal 580 and the USB cable 70.
00 (step S324). Then, the controller 1106 of the mobile phone 100 connects the terminal 111
4. Receive the transaction ID // Ks22 @ Km3 via the USB interface 1112 and the BS3, and receive the received transaction ID // Ks2
2 @ Km3 is transmitted to the memory card 110 via the memory card interface 1200. The controller 1420 of the memory card 110 includes a terminal 1426,
The transaction ID // {Ks22} Km3 is received via the interface 1424 and the bus BS4 (step S326). The decoding processing unit 1422 outputs {Ks22} K from the controller 1420 via the bus BS4.
m3, and receives the secret decryption key K from the Km holding unit 1421.
Decrypt {Ks22} Km3 with m3 and accept the session key Ks22 (step S328). Then, the session key generation unit 1418 generates a session key Ks2 (step S330), and the controller 1
420 is the CRL of the memory 1415 via the bus BS4.
Update date / time CRL of prohibited class list from area 1415A
date, and the obtained update date and time CRLdat
e to the changeover switch 1446 (step S33).
2).

Then, the encryption processing unit 1406 transmits the session key Ks2, the public encryption key KPmc4, and the forbidden class list CRLdate obtained by sequentially switching the terminals of the changeover switch 1446 to the decryption processing unit 1
The encrypted data {Ks2 // KPmc4 /
/ CRLdate @ Ks22 is generated. The controller 1420 transmits the encrypted data {Ks2 // KPmc4 //
The CRLdate @ Ks22 is connected to the mobile phone 10 via the bus BS4, the interface 1424, and the terminal 1426.
0 to the controller 1106 of the mobile phone 100.
Is the encrypted data {Ks2 // KPmc4 // CRLdate} via the memory card interface 1200.
Receive Ks22. Then, the controller 1106
The personal computer 5 via the USB interface 1112, the terminal 1114, and the USB cable 70
0 (step S334).

The controller 510 of the personal computer 50 has a terminal 580 and a USB interface 5.
50 and the encrypted data {Ks2 // KPmc4 //
CRLdate @ Ks22 is received (step S33)
6), encrypted data {Ks2 // K via bus BS2
Pmc4 // CRLdate @ Ks22 is input to the license management device 520 (step S338). Controller 5220 of license management device 520
Transmits the encrypted data {Ks2 // KPmc4 / via the terminal 5226, the interface 5224 and the bus BS5.
/ CRLdate \ Ks22 and the received encrypted data {Ks2 // KPmc4 // CRLdat
e｝ Ks22 is given to the decryption processing unit 5212. The decryption processing unit 5212 uses the session key Ks22 from the session key generation unit 5218 to generate the encrypted data {Ks2 /
/ KPmc4 // CRLdate @ Ks22 is decoded,
The session key Ks2, the public encryption key KPmc4, and the update date / time CRLdate of the forbidden class list are received (step S340).

Then, the personal computer 50
The controller 510 searches the license management file included in the content list file recorded on the HDD 530 based on the transaction ID acquired from the license management device 520 in step S324, and searches for the license management file including the acquired transaction ID. The license entry number included in the same license management file is read from HDD 530. Then, controller 510 inputs the read entry number to license management device 520 via bus BS2 (step S342). The controller 5220 of the license management device 520 includes a terminal 5226, an interface 5224, and a bus BS5.
, The transaction ID, the content ID, the license key Kc, the reproduction count limitation ACm, and the transaction ID from the area specified by the received entry number in the license area 5215B of the memory 5215.
The playback time limit ACp is read (step S344).

In response to receiving the number-of-reproductions limit ACm, the controller 5220 checks the number-of-reproductions limit ACm (step S346). That is, the controller 5220
Indicates whether the license to be transferred to the memory card 110 attached to the mobile phone 100 is not a license that cannot reproduce the encrypted content data due to the reproduction count restriction ACm based on the acquired reproduction count restriction ACm. Check. Play count is Play count limit AC
m, the encrypted content data cannot be reproduced by the license, and there is no point in moving the encrypted content data and the license to the memory card 110 attached to the mobile phone 100. It is.

In step S346, if the number of times of reproduction of the encrypted content data has reached the number of times limited by the number-of-times-of-reproduction limit ACm, the flow shifts to step S404, and the moving operation ends. In step S346, if the number of times of playback of the encrypted content data has not reached the number of times limited by the number-of-times-of-reproduction limit ACm, the process proceeds to step S348.

Referring to FIG. 16, encryption processing section 5217
Encrypts the license using the public encryption key KPmc4 unique to the license management device 520 obtained by the decryption processing unit 5212 and encrypts the encrypted data {transaction ID // content ID // Kc // ACm // AC
Generate p｝ Kmc4 (step S348). Then, based on the update date and time CRLdate of the prohibited class list transmitted from the memory card 110, the memory card 1
It is determined which of the prohibited class list CRL held by the license management device 320 and the prohibited class list 10 is newer. If it is determined that the prohibited class list held by the memory card 110 is newer or the same, the process proceeds to step S350.
If the prohibition class list held by the license management device 520 is not the latest, the process shifts to step S362 (step S350).

When it is determined that the memory card 110 is newer or the same, the encryption processing unit 5206 determines the encrypted data output from the encryption processing unit 5217 {transaction ID // content ID // Kc // ACm
// ACp @ Kmc4 to the session key generation unit 5218
Is encrypted by using the session key Ks2 generated in the encrypted data {transaction ID //
Content ID // Kc // ACm // ACp @ Kmc
4｝ Ks2 is output to the bus BS5. Then, the controller 5220 transmits the encrypted data on the bus BS5 {transaction ID // content ID // Kc // AC
m // ACp {Kmc4} Ks2 to interface 52
The data is transmitted to the personal computer 50 through the terminal 24 and the terminal 5226 (step S352). Then, the controller 5220 deletes the license in the entry number specified in the license area 5215B of the memory 5215 (Step S354).

The controller 510 of the personal computer 50 transmits the encrypted data {transaction ID /
/ Content ID // Kc // ACm // ACp @ Km
c4 @ Ks2 is received, the USB interface 550,
The data is transmitted to mobile phone 100 via terminal 580 and USB cable 70 (step S356).

Controller 1106 of mobile phone 100
Is the encrypted data via the terminal 1114, the USB interface 1112, and the bus BS3 {transaction ID // content ID // Kc // ACm // A
Cp {Kmc4} Ks2 is received, and the received encrypted data {transaction ID // content ID /
/ Kc // ACm // ACp {Kmc4} Ks2 is transmitted to the memory card 110 via the bus BS3 and the memory card interface 1200. The controller 1420 of the memory card 110 includes a terminal 1426,
Encrypted data via terminal 1424 and bus BS4 {transaction ID // content ID // Kc
// ACm // ACp {Kmc4} Ks2 is received (step S358).

The decryption processing unit 1412 of the memory card 110
Is the encrypted data {transaction ID // content ID // Kc // ACm // ACp {Kmc4} K
s2 is received via the bus BS4, decrypted by the session key Ks2 generated by the session key generation unit 1418, and {transaction ID // content ID // Kc // ACm // ACp} Kmc4 is received (step S360). . Thereafter, the flow shifts to step S376 shown in FIG.

On the other hand, if it is determined in step S350 that the license management device is newer, the controller 5220 of the license management device 520 transmits the CRL area 5215 of the memory 5215 via the bus BS5.
The latest prohibited class list data CRL is obtained from A (step S362).

The cryptographic processing unit 5206 includes a cryptographic processing unit 521
7 and the data CRL of the forbidden class list acquired from the memory 5215 by the controller 5220 from the memory 5215 via the bus BS5 via the changeover switches 5242 and 5246, respectively, and the session key generator 521
8 encrypts with the session key Ks2 generated. Encrypted data output from encryption processing section 5206 {CRL /// transaction ID // content ID / interface 5224 and terminal 5226
(Step S364). Then, the controller 5220
The license in the specified entry number in the license area 5215B of the memory 5215 is deleted (step S366).

As described above, the encryption keys generated respectively by the license management device and the memory card are exchanged, encryption is performed using the encryption keys received by each other, and the encrypted data is transmitted to the other party. Thereby, the mutual authentication can be effectively performed even in the transmission and reception of each encrypted data, and the security in the operation of moving the encrypted content data and the license can be improved.

Controller 510 of personal computer 50 outputs encrypted data {CRL /// transaction ID // content ID // Kc // A
Cm // ACp {Kmc4} Ks2 is received, and encrypted data {CRL // {transaction ID // content ID // Kc // ACm // via the USB interface 550, the terminal 580, and the USB cable 70.
ACp {Kmc4} Ks2 is transmitted to mobile phone 100 (step S368). The controller 1106 of the mobile phone 100 transmits the encrypted data $ C via the terminal 1114, the USB interface 1112, and the bus BS3.
RL // @ Transaction ID // Content ID /
/ Kc // ACm // ACp {Kmc4} Ks2, receives bus BS3 and memory card interface 12
00 and the encrypted data {CRL /// transaction ID // content ID // Kc // ACm // A
Cp @ Kmc4 @ Ks2 is transmitted to memory card 110. Then, the controller 142 of the memory card 110
0 is the encrypted data {CRL /// transaction ID // content ID // Kc // ACm via terminal 1426, interface 1424 and bus BS4.
// ACp {Kmc4} Ks2 is received (step S
370).

In memory card 110, decryption processing section 1412 decrypts the received data on bus BS4 using session key Ks2 given from session key generation section 1418, and decrypts CRL and $ transaction ID //
Content ID // Kc // ACm // ACp @ Kmc
4 is received (step 372). Controller 14
20 receives the data CRL received by the decoding processing unit 1412 via the bus BS4, and according to the received data CRL, the CRL area 1415 of the memory 1415.
A is rewritten (step S374).

Steps S352, S354, S356,
In S358 and S360, the prohibited class list CRL held by the memory card 110 is stored in the license management device 5
This is an operation of moving the license key Kc or the like to the memory card 110 when the license key is newer than or the same as the prohibited class list CRL of Step S362.
Steps 368, S370, S372, and S374 are operations of moving the license key Kc and the like to the memory card 110 when the prohibited class list CRL held by the memory card 110 is older than the prohibited class list CRL of the license management device 520. As described above, the update date / time CRLda of the prohibited class list sent from the memory card 110
In accordance with te, it is confirmed one by one and updated to the latest prohibited class list CRL. Can be prevented.

Referring to FIG. 17, after step S360 or step S374, the encryption license @ transaction ID /
/ Content ID // Kc // ACm // ACp @ Km
The decryption processing unit 1404 uses the secret decryption key Km
c4, the license (license key K
c, the transaction ID, the content ID, the reproduction count restriction ACm, and the reproduction expiration date ACp) are received (step S376).

Controller 510 of personal computer 50 transmits the entry number for storing the license transferred to memory card 110 to portable telephone 100 via USB interface 550, terminal 580, and USB cable 70, and transmits the entry number to portable telephone 100. The controller 1106 of the 100 receives the entry number via the terminal 1114, the USB interface 1112, and the bus BS3, and transmits the entry number to the memory card 110 via the bus BS3 and the memory card interface 1200 (step S378). Then, the memory card 11
0 controller 1420 receives the entry number via terminal 1426 and interface 1424 and stores memory 14 designated by the received entry number.
Step S376 is performed in the fifteen license areas 1415B.
(License key Kc, transaction ID, content ID, reproduction count restriction AC)
m and the playback time limit ACp) (step S38).
0).

The controller 510 of the personal computer 50 transmits the encrypted content data $ D to be transferred to the memory card 110 including the license entry number stored in the memory 1415 of the memory card 110 and the plaintext transaction ID and content ID.
A license management file for c @ Kc and the additional information Dc-inf is generated and transmitted to the memory card 110 (step S382).

Controller 142 of Memory Card 110
No. 0 receives the license management file via the mobile phone 100 and records the received license management file in the data area 1415D of the memory 1415 (step S384).

Then, the controller 510 of the personal computer 50 updates the license management file corresponding to the license transferred to the memory card 110 among the licenses recorded on the HDD 530 to no license (step S386). After that, the controller 51
0 acquires the encrypted content data {Dc} Kc and the additional information Dc-inf to be moved to the memory card 110 from the HDD 530, and {Dc} Kc // Dc-i
nf to the memory card 110 (step S39)
0). The controller 1420 of the memory card 110
{Dc} Kc // Dc-in via mobile phone 100
f (step S392), the {Dc} Kc // Dc-inf received via the bus BS4 is stored in the memory 141.
5 in the data area 1415C (step S39).
4).

Then, the personal computer 50
Controller 510 creates a playlist in which the songs moved to the memory card 110 are added.
6) The playlist and the instruction to rewrite the playlist are transmitted to the memory card 110 (step S398). The controller 1420 of the memory card 110
00, the playlist and the rewrite instruction are received (step S400), the playlist recorded in the data area 1415C of the memory 1415 is rewritten to the received playlist via the bus BS4 (step S402), and the moving operation is performed. Ends (step S404).

As described above, it is confirmed that the memory card 110 attached to the mobile phone 100 is a legitimate device, and at the same time, the public encryption key KPm3 that can be encrypted and transmitted together with the class certificate Cm3 is valid. Then, the content data is moved only in response to a move request to a memory card that is not described in the prohibited certificate list of the class certificate Cm3, that is, the class certificate list in which encryption with the public encryption key KPm3 has been broken. It is possible to prohibit movement to an unauthorized memory card and movement using a decrypted class key. Further, by using this moving operation, a user of the mobile phone 102 having no communication function with the distribution server 10 can also receive the encrypted content data and the license on the memory card via the personal computer 50, The convenience for the user is improved.

Although the transfer of the license from the license management device 520 of the personal computer 50 to the memory card 110 has been described above, the license is transferred from the memory card 110 to the license management device 5.
Transfer of the license to 20 is also performed according to the flowcharts shown in FIGS.

Referring to FIG. 18, the management of the license received by license management device 520 of personal computer 50 will be described. The HDD 530 of the personal computer 50 stores the content list file 150 and the content files 1531 to 153.
n and license management files 1521 to 152n.

The content list file is stored in the HDD 53
0 is a file for managing the content recorded in No. 0, and is an information file indicating a list of contents and the relationship between the corresponding content file and the license management file.

Content files 1531 to 153n
Is a file in which the encrypted content data {Dc} Kc obtained from the CD-ROM and the additional information Dc-inf are recorded. Note that the content files 1531 to 1531
153n is a copy of the content files 601 to 60n recorded on the CD-ROM. The license management files 1521 to 152n are recorded corresponding to the content files 1531 to 153n, respectively, and manage the license received by the license management device 520.

License management files 1521, 152
4 includes entry numbers 0 and 2, respectively. this is,
The license management device 520 is a number that designates a management region of a license (a license ID, a license key Kc, a playback count limit ACm, and a playback time limit ACm) that is received by the license management device 520 and managed in the license area 5215B of the memory 5215 of the license management device 520. .

Therefore, the contents file 1531
When moving the encrypted content data having the file name recorded in the mobile phone 100 to the memory card 110 attached to the mobile phone 100, if the content files 1531 to 153n are searched and the content file 1531 is extracted, the encrypted content data is reproduced. You can see where the licenses are managed. Content file 1531
Since the entry number included in the license management file 1521 corresponding to the license management file 1521 is “0”, the license for reproducing the encrypted content data having the file name recorded in the content file 1531 is stored in the license area of the memory 5215 of the license management device 520. It is recorded in the area specified by the entry number 0 of 5215B. Then, the license management file 152 of the content list file 150 recorded on the HDD 530
By reading the entry number 0 from 1 and inputting the read entry number 0 to the license management device 520, the license area 5215B of the memory 5215 is read.
The license can be easily taken out and transferred to the memory card 110. Then, after the license is moved, when the license duplication is prohibited, the license in the entry number 0 designated in the license area 5215B of the memory 5215 is deleted. "No license" is recorded in the field.

FIG. 19 shows the memory 1 of the memory card 110.
415, the playlist file 160 recorded in the data area 1415C, and the content file 1611
161n and license management files 1621-16
2n is shown. Playlist 160
Is an information list corresponding to the content list file 150 in the personal computer 50. The mobile phone 100 refers to this playback list and normally plays back in the order of the list. Content files 1611-
161n is the received encrypted content data {Dc}
The file name of Kc and the additional information Dc-inf is recorded. Also, the license management files 1621 to 162n
Are the content files 1611 to 161n, respectively.
Is recorded corresponding to.

The license management files 1621 to 1621
162n is a license area 1415 of the memory 1415.
C includes an entry number for designating the area of the license stored in C. Therefore, by reading the entry numbers from the license management files 1621 to 162n, it is possible to determine in which area the license for reproducing the encrypted content data corresponding to the license management files 1621 to 162n is stored, and to easily obtain the license. Can be issued.

Note that the license management file 1622
Represents “no license”, which corresponds to, for example, a case where the mobile phone 100 receives only encrypted content data from another mobile phone, and the encrypted content data exists in the memory 1415. This means that there is no license for reproducing the encrypted content data.

[Reproduction] Next, the reproduction operation of the content data recorded on the memory card 110 in the mobile phone 100 (hereinafter, also referred to as content reproduction device) will be described with reference to FIGS. Referring to FIG. 20, at the start of the playback operation, a playback instruction is input from the user of mobile phone 100 to mobile phone 100 via operation panel 1108 (step S).
1000). Then, controller 1106 reads authentication data {KPp1 // Cp1} KPa from authentication data holding section 1500 via bus BS3, and reads memory card 11 via memory card interface 1200.
The authentication data {KPp1 // Cp1} KPa is output to 0 (step S1002).

Then, memory card 110 receives authentication data {KPp1 // Cp1} KPa (step S1004). Then, the decryption processing unit 1408 of the memory card 110 receives the received authentication data {KPp1 //
Cp1 @ KPa is decrypted by the public authentication key KPa held in the KPa holding unit 1414 (step S100).
6), the controller 1420 performs authentication processing based on the decryption processing result in the decryption processing unit 1408. That is,
An authentication process is performed to determine whether the authentication data {KPp1 // Cp1} KPa is legitimate authentication data (step S1008). If decryption failed, step S
The flow shifts to 1048, where the reproducing operation ends. If the authentication data has been successfully decrypted, the controller 1420 determines whether or not the obtained class certificate Cp1 is included in the prohibited class list data CRL read from the memory 1415 (step S1010). In this case, the class certificate Cp
1 is given an ID, and the controller 1420
Determines whether the ID of the accepted class certificate Cp1 exists in the prohibited class list data. If it is determined that the class certificate Cp1 is included in the prohibited class list data, the process moves to step S1048, and the reproduction operation ends.

In step S1010, the certificate Cm
If it is determined that “1” is not included in the prohibited class list data CRL, the session key generation unit 1418 of the memory card 110 transmits the session key K for the reproduction session.
s2 is generated (step S1012). Then, the encryption processing unit 1410 encrypts the session key Ks2 from the session key generation unit 1418 with the public encryption key KPp1 decrypted by the decryption processing unit 1408, {Ks
2 @ Kp1 is output to the bus BS3 (step S101)
4). Then, controller 1420 outputs {Ks2} Kp1 to memory card interface 1200 via interface 1424 and terminal 1426 (step S1016). The controller 1106 of the mobile phone 100 includes the memory card interface 120
{Ks2} Kp1 is obtained via 0. And Kp
1 holding unit 1502 stores the secret decryption key Kp1 in the decryption processing unit 1
504.

[0209] The decryption processing unit 1504
{Ks2} Kp1 is decrypted by the secret decryption key Kp1 paired with the public encryption key KPp1 output from the public key 02 and the session key Ks2 is output to the encryption processing unit 1506 (step S1018). Then, session key generating section 1508 generates a session key Ks3 for the reproduction session, and outputs session key Ks3 to encryption processing section 1506 (step S1020). The encryption processing unit 1506 encrypts the session key Ks3 from the session key generation unit 1508 with the session key Ks2 from the decryption processing unit 1504, and {Ks3} Ks
2 and the controller 1106 outputs $ Ks via the bus BS3 and the memory card interface 1200.
3 @ Ks2 is output to memory card 110 (step S1022).

Then, the decryption processing unit 1412 of the memory card 110 includes the terminal 1426, the interface 142
4, and {Ks3} Ks2 are input via the bus BS4 (step S1024).

Referring to FIG. 21, decoding processing section 1412
Decrypts {Ks3} Ks2 using the session key Ks2 generated by the session key generation unit 1418, and outputs the session key K generated by the mobile phone 100.
s3 is received (step S1026).

[0212] The controller 1106 of the playback terminal obtains the entry number in which the license is stored from the license management file obtained in advance from the memory card 110, and stores the entry number obtained in the memory card 110 via the memory card interface 1200. Output (Step S1027).

In response to the input of the entry number, controller 1420 confirms the number-of-reproductions limit ACm of the input entry in license area 1514B (step S).
1028). In step S1028, by confirming the number-of-reproductions limit ACm, which is information on the restriction on the access to the memory, the reproduction operation is terminated if the reproduction is already disabled and if the reproduction number restriction is limited, After updating the data of the reproduction number limitation ACm and updating the reproducible number, the process proceeds to the next step (step S).
1030). On the other hand, when the number of times of reproduction is not limited by the number of times of reproduction restriction ACm, step S10
Step 30 is skipped, and the process proceeds to the next step (step S1032) without updating the reproduction count restriction ACm.

[0214] If it is determined in step S1028 that the reproduction is possible in the reproduction operation, the license key Kc and the reproduction time limit A of the reproduction request music recorded in the license area 1415C of the memory 1415 are determined.
Cp is output on bus BS4 (step S103)
2).

Obtained license key Kc and reproduction time limit AC
p is sent to the encryption processing unit 1406 via the contact point Pf of the changeover switch 1446. The encryption processing unit 1406 receives the decryption processing unit 141 via the contact Pb of the changeover switch 1442.
The license key Kc received through the changeover switch 1446 and the reproduction expiration date ACp are encrypted with the session key Ks3 received from No. 2 and {Kc // ACp} Ks3 is output to the bus BS4 (step S1034).

The encrypted data output to the bus BS4 is
The mobile phone 10 via the interface 1424, the terminal 1426, and the memory card interface 1200
Sent to 0.

In portable telephone 100, encrypted data {Kc // ACp} Ks3 transmitted to bus BS3 via memory card interface 1200 is decrypted by decryption processing section 1510, and license key K
c and the playback time limit ACp are received (step S103).
6). The decryption processing unit 1510 transmits the license key Kc to the decryption processing unit 1516, and outputs the playback time limit ACp to the bus BS3.
Output to

The controller 1106 receives the playback time limit ACp via the bus BS3 and checks whether or not playback is possible (step S1040).

[0219] In step S1040, when it is determined that reproduction is not possible due to the reproduction time limit ACp, the reproduction operation is terminated.

If it is determined in step S1040 that reproduction is possible, controller 1106 requests encrypted content data {Dc} Kc from memory card 110 via memory card interface 1200. Then, the controller 1420 of the memory card 110
Indicates that the encrypted content data {D
Acquires c を Kc, bus BS4, interface 142
4 and output to the memory card interface 1200 via the terminal 1426 (step S1042).

Controller 1106 of mobile phone 100
Acquires the encrypted content data {Dc} Kc via the memory card interface 1200, and
The encrypted content data {Dc} Kc is provided to the decryption processing unit 1516 via

[0222] The decryption processing unit 1516 decrypts the encrypted content data {Dc} Kc using the content key Kc output from the decryption processing unit 1510 to obtain the content data Data (step S1044).

Then, the decrypted content data Dc
Is output to the music playback unit 1518 and the music playback unit 1518
Reproduces the content data, the DA converter 1519 converts the digital signal into an analog signal,
Output to Then, the music data is output from the terminal 1530 to the headphone 130 via the external output device and reproduced (step S1046). Thus, the reproduction operation ends.

[0224] In the above description, the case where the encrypted content data recorded on the memory card 110 is reproduced by the mobile phone 100 has been described.
The encrypted content data stored in the HDD 530 can be reproduced by the license stored in the license management device 520. The operation at that time is shown in FIG.
This is performed according to the flowchart shown in FIG.

In the above, the personal computer 50 that has obtained the encrypted content data from the CD-ROM 60 receives the license for reproducing the encrypted content data from the distribution server 10, and transmits the encrypted content data and the license to the mobile phone 100. The moving session in which the user moves to the memory card 110 attached to the PC has been described. Therefore, in the present invention, the data distribution system shown in FIG. 22 is also possible.

That is, the personal computer 50 acquires the encrypted content data and the server information file from the CD-ROM 60, and connects to the distribution server 10 based on the acquired server information file.
The point that the license is received from 0 is the same as the data distribution system shown in FIG. In FIG. 22, the personal computer 50 moves the acquired encrypted content data and license to the terminal devices 120 and 121 via the USB cables 70 and 71.

Each of the terminal devices 120 and 121 is a terminal device having no communication function for transmitting and receiving data to and from the distribution server 10, and has a device having the same configuration as the license management device 520 built in the personal computer 50. ing. Then, the terminal devices 120 and 121
The license received from the personal computer 50 is stored in a built-in device. Also, the terminal device 120,
Reference numeral 121 stores and manages the encrypted content data on a hard disk or the like. Further, the terminal devices 120 and 121
Incorporates the above-described content reproduction device 1550, and can also reproduce encrypted content data received from the personal computer 50.

According to the data distribution system shown in FIG. 22, it does not have a communication function with
-Even if the terminal device does not have a function of obtaining encrypted content data from the ROM 60, the music data recorded on the CD-ROM 60 can be obtained together with the license.

According to the embodiment of the present invention, when the personal computer obtains the encrypted content data from the music CD, the personal computer also obtains the server information file including the means for accessing the server and the access destination. The license for reproducing the encrypted content data can be received from the distribution server simultaneously with the acquisition of the license.

The embodiments disclosed this time are to be considered in all respects as illustrative and not restrictive. The scope of the present invention is defined by the terms of the claims, rather than the description of the embodiments, and is intended to include any modifications within the scope and meaning equivalent to the terms of the claims.

[Brief description of the drawings]

FIG. 1 is a schematic diagram conceptually illustrating a data distribution system according to an embodiment of the present invention.

FIG. 2 is a diagram showing characteristics of data, information, and the like for communication in the data distribution system shown in FIG.

FIG. 3 is a diagram showing characteristics of data, information, and the like for communication in the data distribution system shown in FIG. 1;

FIG. 4 is a schematic block diagram showing a configuration of a distribution server in the data distribution system shown in FIG.

FIG. 5 is a schematic block diagram showing a configuration of a personal computer in the data distribution system shown in FIG.

FIG. 6 is a schematic block diagram showing a configuration of a mobile phone in the data distribution system shown in FIG.

FIG. 7 is a schematic block diagram showing a configuration of a memory card in the data distribution system shown in FIG.

8 is a schematic block diagram showing a configuration of a license management device built in the personal computer shown in FIG.

FIG. 9 is a first flowchart for explaining a license distribution operation in the data distribution system shown in FIG. 1;

FIG. 10 is a second flowchart for explaining a license distribution operation in the data distribution system shown in FIG. 1;

FIG. 11 is a third flowchart for explaining a license distribution operation in the data distribution system shown in FIG. 1;

FIG. 12 is a fourth flowchart illustrating the license distribution operation in the data distribution system illustrated in FIG. 1;

FIG. 13 is a fifth flowchart illustrating the license distribution operation in the data distribution system shown in FIG. 1;

FIG. 14 is a first flowchart for explaining an operation of transferring a license of encrypted content data in the data distribution system shown in FIG. 1;

FIG. 15 is a second flowchart for describing an operation of transferring a license of encrypted content data in the data distribution system shown in FIG. 1;

FIG. 16 is a third flowchart for explaining the operation of moving the license of the encrypted content data in the data distribution system shown in FIG. 1;

FIG. 17 is a fourth flowchart for explaining the operation of transferring a license of encrypted content data in the data distribution system shown in FIG. 1;

FIG. 18 is a diagram showing a configuration of a content list file on a hard disk of a personal computer.

FIG. 19 is a diagram showing a configuration of a playlist file in the memory card.

FIG. 20 is a first flowchart for describing a reproducing operation in the mobile phone.

FIG. 21 is a second flowchart for describing a reproducing operation in the mobile phone.

FIG. 22 is a schematic diagram conceptually illustrating another data distribution system according to the embodiment of the present invention.

[Explanation of symbols]

Reference Signs List 10 distribution server, 20 distribution carrier, 30 Internet network, 40 modem, 50,80 personal computer, 60 CD, 70,71 USB cable, 100 mobile phone, 110 memory card, 12
0,121 terminal device, 130 headphone, 150
Content list file, 160 playlist file, 302 accounting database, 304 information database, 306 CRL database, 307 menu database, 308 distribution record database, 31
0 Data processing unit, 312, 320, 1404, 140
8,1412,1422,1504,1510,151
6,5204,5208,5212,5222 decryption processing unit, 313 authentication key holding unit, 315 distribution control unit, 3
16. Session key generator, 318, 326, 32
8, 1406, 1410, 1417, 1506, 520
6, 5210, 5217, 5405 Encryption processing unit, 35
0 communication device, 510, 1106, 1420, 5220
Controller, 511, 811 license management module, 520, 820 license management device, 5
30 Hard disk, 540 CD-ROM drive, 550, 1112 USB interface, 560
Keyboard, 570 display, 580, 111
4,1426,1530,5226 terminal, 1108
Operation panel, 1110 display panel, 1200 memory card interface, 1400, 1500, 5200
Authentication data holding unit, 1402, 5202 Kmc holding unit, 1414, 5214 KPa holding unit, 1415, 5
215 memory, 1415A, 5215A CRL area, 1415B playlist area, 1415C, 521
5B license area, 1415D data area, 14
16,5216 KPmc holding part, 1418, 5218
Session key generation unit, 1421, 5221 Km holding unit, 1424, 5224 interface, 1442,
1446 changeover switch, 1502 Kp1 holding part, 15
18 Music playback unit, 1519 DA converter, 1521-1
52n, 1621-162n license management file, 1531-153n, 1611-1612n content file, 1550 content playback device.

──────────────────────────────────────────────────続 き Continued on the front page (51) Int.Cl. ⁷ Identification symbol FI Theme coat ゛ (Reference) G10K 15/02 H04L 9/00 675B G10L 11/00 G10L 9/00 E H04L 9/08 H04L 9/00 601C 601E (71) Applicant 000005108 Hitachi, Ltd. 4-6-1 Kanda Surugadai, Chiyoda-ku, Tokyo (71) Applicant 000004167 Nippon Columbia Co., Ltd. 4-14-14 Akasaka, Minato-ku, Tokyo (72) Inventor Yoshihiro Hori Osaka 2-5-5 Keihanhondori, Moriguchi-shi, Sanyo Electric Co., Ltd. (72) Inventor Toru Uemura 2-5-2-5 Keihanhondori, Moriguchi-shi, Osaka Sanyo Electric Co., Ltd. (72) Inventor Hatakeyama Takuhisa 4-1-1, Kamiodanaka, Nakahara-ku, Kawasaki-shi, Kanagawa Prefecture Inside Fujitsu Limited (72) Inventor Masataka Takahashi Unoki, Kawakita-gun, Ishikawa Prefecture 98, Uno-Kenu, Town 2 PFU Co., Ltd. (72) Inventor Takashi Tsunehiro 292, Yoshida-cho, Totsuka-ku, Yokohama-shi, Kanagawa Pref. Hitachi Laboratory System Development Laboratory Yokohama Laboratory (72) Inventor Yoshio Omori Kanagawa 5-1, Minatomachi, Kawasaki-ku, Kawasaki-ku, Japan Japan F-term in the Columbia Co., Ltd. Kawasaki Plant (reference) 5J104 AA07 AA13 AA15 AA16 EA06 EA19 KA02 KA05 NA02 NA03 NA06 NA35 NA37 NA38 NA41 NA42 PA07 PA11

Claims (15)

[Claims] An encrypted content data is obtained from a recording medium including an encrypted content data and a server information file necessary for obtaining a license for reproducing the encrypted content data, and based on the server information file. A data drive device for obtaining the license from a distribution server by using a media drive unit that obtains the encrypted content data and the server information file from the recording medium; and a server information file that is obtained by the medium drive unit. Determine the connection means with the distribution server according to the content,
A control unit that connects to the distribution server by the determined connection unit, requests distribution of the license, and receives the license from the distribution server; and stores the encrypted content data acquired by the medium driving unit. And a device unit for storing a license received from the distribution server. 2. The control unit, when the medium drive unit cannot acquire the server information file from the recording medium, connects to the distribution server according to a user instruction.
The data terminal device according to claim 1. 3. The data according to claim 1, wherein the control unit acquires an address suitable for the determined connection unit from the server information file, and connects to the distribution server based on the acquired address. Terminal device. 4. The control unit transmits authentication data held by the device unit to the distribution server, and receives the license from the distribution server when the authentication data is authenticated by the distribution server. The data terminal device according to any one of claims 1 to 3. 5. The control unit according to claim 4, wherein the control unit transmits a public encryption key held by the device unit to the distribution server, and receives a license encrypted by the public encryption key from the distribution server. Data terminal equipment. 6. The content file which is obtained from the recording medium by the medium drive unit and stores the encrypted content data and plain text information on the encrypted content data, wherein the content file is 4. The license management file according to claim 1, further comprising: a license management file that is provided corresponding to the license information and stores a registration number for designating a storage area of the license in the device unit. Data terminal equipment. 7. A reproducing unit that obtains the encrypted content data from the storage unit, obtains a license for the obtained encrypted content data from the device unit, and plays back the encrypted content data using the obtained license. The data terminal device according to any one of claims 1 to 6, further comprising: 8. The data according to claim 7, wherein the playback unit holds authentication data for the device unit, and acquires the license from the device unit when the authentication data is authenticated in the device unit. Terminal device. 9. A method for reading encrypted content data and server information from a data terminal device capable of reading encrypted content data and a server information file necessary for obtaining a license for reproducing the encrypted content data from a recording medium. A data terminal device for acquiring a file, acquiring the license from the distribution server based on the server information file, and recording the acquired encrypted content data and the license in a data recording device; and An interface for controlling transmission and reception of data between the transmission and reception units; a transmission and reception unit for transmitting and receiving data to and from the distribution server; By means of connecting to the distribution server via the transmitting and receiving unit A control unit for requesting the distribution of the license and receiving the license from the distribution server via the transmission / reception unit, wherein the control unit transmits the acquired encrypted content data and the license via the interface. A data terminal device that outputs to a data recording device. 10. The data terminal device according to claim 9, wherein the control unit connects to the distribution server according to a user's instruction when the server information file cannot be obtained from the data terminal device. 11. The data according to claim 9, wherein the control unit acquires an address suitable for the determined connection unit from the server information file, and connects to the distribution server based on the acquired address. Terminal device. 12. The control unit transmits authentication data retained by the data recording means to the distribution server, and receives the license from the distribution server when the distribution server authenticates the authentication data. The data terminal device according to any one of claims 9 to 11. 13. The control unit according to claim 12, wherein the control unit transmits a public encryption key held by the data recording device to the distribution server, and receives a license encrypted by the public encryption key from the distribution server. The data terminal device according to claim 1. 14. The apparatus according to claim 9, further comprising: a reproducing unit that acquires the encrypted content data and the license from the data recording device, and reproduces the encrypted content data with the acquired license. 2. The data terminal device according to claim 1. 15. The reproduction unit according to claim 14, wherein the reproduction unit holds authentication data for the data recording device, and acquires the license from the data recording device when the authentication data is authenticated in the data recording device. The data terminal device according to claim 1.