JP2002175205A - Method for configuring capsule of information and record medium stored with capsule of information - Google Patents

Abstract

PROBLEM TO BE SOLVED: To allow a program in a capsule to find out a capsule file including the program and find out data in the capsule from the capsule file. SOLUTION: In Jave environment, a class to which the program in the capsule belongs is acquired. A class pass to which the class is loaded is acquired as URL. The URL is converted to a file pass of a local file system. Therefore, the program in the capsule can specify the capsule file. In the capsule, an area recording a combination of a title for uniquely discriminating the data in each of the capsules, a position in the capsule file and length of the data from the position, is provided. The data in the capsule can be specified by reading information of the area.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a method for configuring an information capsule, and more particularly to a technique for specifying a capsule file in an information capsule, specifying and protecting data in a capsule, and further protecting a program in a capsule.

[0002]

2. Description of the Related Art With the spread of personal computers and portable terminals, an environment where anyone can easily distribute digital information through a network is being prepared. Also, M
With the advancement of coding technology such as PEG and information and communication technology,
The form of information that can be handled has expanded from textual information to high-quality still images, voices, and moving images, and attempts have been made to sell movies and music using networks. However, digital information has a feature that it is easy to copy and does not deteriorate. Therefore, when distributing information (content) having a certain value, a mechanism for preventing and protecting unauthorized use is indispensable.

Conventionally, there is encapsulation (information capsule) as a method for preventing digital information from being infringed by unauthorized use such as unauthorized copying. The information capsule is obtained by integrating a program and data and storing them in a file.
Here, the program in the information capsule is called a “program in a capsule”, the data in the information capsule is called “data in a capsule”, and the information capsule stored as one unit in permanent storage or the like is called a “capsule file”. The data in the capsule is accessed via the program in the same capsule. This allows the creator of the capsule to control operations on the data in the capsule.

As described above, the information capsule aims to provide a general-purpose mechanism for protecting the data in the capsule from unauthorized use / operation by storing the data in the capsule. One or a plurality of capsule data can be stored in the information capsule. The information capsule is recognized as an executable file from the environment (such as the OS).

[0005]

In order for the information capsule to operate properly, the capsule file is started as an executable file, and after the program in the capsule is loaded on the memory, the program is loaded into the same capsule, which has an operation pair. Data needs to be identified. To specify the same capsule data, the capsule program first specifies a capsule file as permanent storage that includes itself, and then specifies where in the capsule file the capsule data is located. Done in

However, the method of specifying the capsule file is as follows:
May vary depending on the platform providing access to persistent storage. As a solution to this, it is conceivable to use a cross-platform environment such as Java. However, in the Java environment, a program in a capsule loaded on a memory is a direct program for specifying a capsule file in which itself is stored. Does not provide a way.

Further, even if a capsule file containing the currently executing capsule program can be specified, the capsule data to be searched is only a part of the capsule file. It is necessary to identify the part where is stored. In order for the information capsule to be a general-purpose mechanism for storing one or more data in the capsule in the capsule and protecting them from unauthorized use / operation, the data in the capsule is stored in any place in the capsule file. A general-purpose mechanism is needed to identify the

Further, if it is possible to easily estimate where in the capsule file the data in the capsule is stored from a subject (person or program) other than the program in the capsule, only the data in the capsule is cut out and illegal There is a risk that an attack or operation may be performed. Therefore, it is desirable to provide a mechanism in which it is difficult for a subject other than the program in the capsule to know where the data in the capsule is stored in the capsule file.

Furthermore, if the program in the capsule is illegally analyzed, the method of specifying / operating the data in the capsule becomes clear, which may lead to the illegal extraction / operation of the data in the capsule. In addition, since the in-capsule program itself can be considered to be valuable information including know-how and the like, it is not preferable from this viewpoint that the in-capsule program is illegally analyzed. Therefore, it is desired to provide a mechanism that makes unauthorized analysis difficult even for the program in the capsule itself.

An object of the present invention is to provide a method for a program in a capsule to find a capsule file containing the program. It is still another object of the present invention to provide a method for a capsule program to find capsule data from a capsule file in which the program itself is included. Still another object of the present invention is to provide a method of making it difficult to illegally extract data in a capsule and a method of making it difficult to analyze a program in a capsule.

[0011]

According to the present invention, in a Java environment in which an information capsule executes, a class to which a program object being executed belongs is obtained, and a class path on which the class is loaded is obtained as a URL. U
By converting the RL into the file path of the local file system, the program in the capsule can specify the capsule file included therein.

Further, the present invention provides a combination of a name for uniquely identifying one or a plurality of capsule data in the capsule, a position in the capsule file, and a length continuously recorded from the position. Is provided in the capsule, and after specifying the capsule file, the above information is read from the data storage information recording area in the capsule, and where the data in the capsule is stored in the capsule file. Be able to identify what is being done.

Further, the present invention provides a method for encrypting a data storage information recording area in a capsule and combining a plurality of data in a capsule to collectively encrypt the data, or a method for recording a plurality of continuous data in a capsule. By dividing the data into regions and arranging them irregularly, or by combining them, it is difficult to illegally extract the data in the capsule.

Further, the present invention provides a program in a capsule file together with a special program loader (encrypted program loader) for encrypting a program in a capsule, for example, a portion for specifying and operating data in the capsule, and reading the encrypted program. To be stored. When the information capsule is activated, the encryption program loader is executed first, and after the correct encryption key is input, the encrypted program in the capsule is decrypted and loaded on the memory,
By adopting a mechanism that can be executed, illegal analysis of the program in the capsule can be made difficult.

[0015]

Embodiments of the present invention will be described below in detail with reference to the drawings. [Embodiment 1] In this embodiment, an in-capsule program finds a capsule file containing itself.

FIG. 1 shows an operation environment of the present embodiment. FIG.
, 100 is an information capsule, 110 is an execution environment such as a Java environment, and the entity is a computer system. The information capsule 100 is a capsule file containing a program 101 and data (contents), and is loaded into an execution environment 110 of a computer system and executed. Generally, a plurality of program files and data files exist in a capsule.

FIG. 2 shows a flowchart of the present embodiment. It is assumed that the information capsule 100 is stored on a permanent storage such as a hard disk of the execution environment 110. When the information capsule 100 is activated (step 201), the program 101 in the capsule is loaded on the memory (step 202). The capsule program 101
The class to which the class belongs is acquired (step 203), and the class path loaded with the class is acquired as a URL (step 204). Here, the URL is, for example, URL file: / some / where / caps
ule. jar! / Some / package / fo
o. It's like class. This class path is converted to a file path of the local file system (step 20).
5). Here, the file path is as follows: file path / some / where / capsul
e. It's like jar. This file path is the name of the capsule file, and the in-capsule program 101 can identify the capsule file that includes itself.

[Embodiment 2] In this embodiment, an in-capsule data storage information recording area is provided in a capsule, and after specifying a capsule file, information is read from the in-capsule data storage information recording area to specify the in-capsule data. It is a form.

FIG. 3 is a view for explaining the data structure of the data storage information recording area in the capsule. The data configuration of the in-capsule data storage information recording area is a combination of a position in the capsule file of one or a plurality of each in-capsule data and a length continuously recorded from the position. Here, the position in the capsule file may be an absolute position from the beginning of the capsule file, a relative position from a certain position in the capsule file, or the like. In addition, the length continuously recorded from the corresponding position is prepared in units of bytes, multiple bytes, or multiple recording length units,
It may be represented by the recording length type and the number of repetitions.

FIG. 4 shows a specific example of the configuration of the capsule file according to the present embodiment. Reference numeral 400 denotes a capsule file, in which an in-capsule data storage information recording area 410 is provided in the capsule, and as shown in 411, a name for uniquely identifying each in-capsule data in the capsule, And its length are recorded as data storage information in the capsule.

FIG. 5 is a block diagram of the capsule creating apparatus, and FIG. 6 shows an outline of a capsule file creating procedure. Input unit 5
10 inputs a program file and a data file to be created. Each of these files generally consists of a plurality of files. The data file is stored in the encryption unit 52 as needed.
Encrypt with 0. The combining unit 530 creates data storage information in the capsule from the program file and the data file, and also stores the program file, the data file,
A capsule file is generated by combining the data storage information recording areas in the capsule. The output unit 540 records and outputs the generated capsule file as an information capsule to an arbitrary recording medium. FIG. 7 shows a configuration example of the generated capsule file (information capsule).

FIG. 8 shows an execution procedure when the capsule file (information file) 700 of FIG. 7 is started on the execution environment. When the capsule file 700 is started (Step 801), the capsule file 700 is specified as described in FIG. 2 (Step 802), and the capsule file 700 is opened (Step 803). The capsule program (various processing modules) specified by the user or the like reads the capsule data storage information from the capsule data storage information recording area via the capsule data access module (step 804), and performs various processes (step 804). Step 805). Then, if necessary, the in-capsule data file is read based on the in-capsule data storage information (step 806), various processes are similarly performed (step 807), and the process ends (step 8).
08).

FIG. 9 shows that in step 806 of FIG.
It shows a detailed flowchart of a process of reading the data of the capsule file based on the in-capsule data storage information.

[Embodiment 3] This is an embodiment that makes it difficult to illegally extract capsule data by encrypting the capsule data storage information recording area. In this case, while encrypting the data storage information recording area in the capsule, (a) combining a plurality of data in the capsule and encrypting them collectively, (b) transferring the data in one capsule to a plurality of continuous recording areas Divide and arrange them randomly, combine (c), combine (a) and (b), etc. The encryption used may be a general encryption system such as a password, an IC card, or a PKI. .

FIGS. 10 and 11 show an outline of a capsule file creation procedure according to this embodiment. Here, FIG. 10 is based on the above (b), and FIG. 11 is based on the above (c). The capsule file creation device is basically the same as that shown in FIG.

[Embodiment 4] This makes it difficult to illegally analyze the program in the capsule by encrypting the program in the capsule. The encryption is performed for a main part of the program in the capsule, for example, a part for specifying and operating data in the capsule. Further, when the encrypted program in the capsule is stored in the capsule, if the mechanisms (a) to (c) described in the third embodiment are used, the analysis becomes more difficult.

FIG. 12 shows an outline of a capsule file creation procedure according to this embodiment. The difference from FIGS. 10 and 11 is that
Except for the encrypted program loader, each program file is also encrypted in addition to the data file.

The encryption program loader is a special program loader for reading an encrypted program, and cannot be encrypted. Here, as the program file,
In addition to the encryption program loader module, the data access module in the capsule, the user interface module, the video playback module, the music playback module,
It is assumed that there is an image display module or the like. Among these, the data access module in the capsule and the user interface module are always loaded at the time of startup. Other modules are loaded as needed.

FIG. 13 shows a processing flowchart at the time of startup. At the time of activation, first, the own capsule file is specified as described in FIG. 2 (step 1301), and the capsule file is opened (step 1302). Then, the encrypted program storage information is read (step 1303).
Specify the program to be loaded at startup (step 13
04), necessary program modules are loaded (step 1305). Step 1305 is repeated for necessary program modules, and when all are loaded, the processing is terminated (step 1306).

FIG. 14 is a detailed flowchart of loading a program module in step 1305 of FIG. For example, video playback, music playback,
The processing in FIG. 14 is also performed when each module for image display is loaded.

As described above, when the information capsule is activated, the encryption program loader is first executed, and after the correct encryption key is input, the encrypted program in the capsule is decrypted and loaded on the memory. By taking such a mechanism as to be executed, illegal analysis of the program in the capsule can be made difficult.

[0032]

As described above, according to the present invention,
The following effects can be achieved. (1) The program in the capsule can find the capsule file in which the program itself is included. (2) The program in the capsule can find the data in the capsule from the capsule file in which the program itself is included. (3) It is possible to make it difficult to illegally extract the data in the capsule and illegally analyze the program in the capsule.

[Brief description of the drawings]

FIG. 1 is a diagram showing an information capsule and an execution environment.

FIG. 2 is a processing flowchart according to the first embodiment of the present invention.

FIG. 3 is a diagram illustrating an example of a data configuration of an in-capsule data storage information storage area according to a second embodiment of this invention.

FIG. 4 is a diagram showing a specific example of capsule data storage information;

FIG. 5 is a block diagram of a capsule creation device.

FIG. 6 is a diagram illustrating an example of a capsule file creation procedure according to the second embodiment of the present invention.

FIG. 7 is a diagram illustrating a configuration example of a created capsule file.

FIG. 8 is a flowchart illustrating a procedure for executing a capsule file according to the second embodiment;

9 is a detailed flowchart of a process of reading data in a capsule in FIG. 8;

FIG. 10 is a diagram showing an example of a capsule file creation procedure according to the third embodiment of the present invention.

FIG. 11 is a diagram showing an example of another capsule file creation procedure according to the third embodiment of the present invention.

FIG. 12 is a diagram illustrating an example of a capsule file creation procedure according to the fourth embodiment of the present invention.

FIG. 13 is a processing flowchart at the time of starting a capsule file according to the fourth embodiment of the present invention.

14 is a detailed flowchart of a program module loading process in FIG.

[Explanation of symbols]

 REFERENCE SIGNS LIST 100 information capsule 101 capsule program 102 data in capsule 200 execution environment 400 capsule file 410 data storage information recording area in capsule 411 data storage information in capsule

Claims (6)

[Claims] 1. A method for configuring an information capsule including a program (hereinafter, a program in a capsule) and data (hereinafter, data in a capsule), comprising: obtaining a class to which the program in the capsule belongs in a Java environment; A configuration of an information capsule, wherein a class path loaded with a class is acquired as a URL, and the URL is converted into a file path of a local file system so that a program in the capsule can specify its own capsule file. Method. 2. A method of configuring an information capsule including a program (hereinafter, a program in a capsule) and data (hereinafter, data in a capsule), wherein one or a plurality of data in the capsule is uniquely identified in the capsule. Name, location in the capsule file,
An area for recording a combination of lengths continuously recorded from the position (hereinafter referred to as an in-capsule data storage information recording area) is provided in the capsule, and information in the in-capsule data storage information recording area is read. And a method of configuring an information capsule, wherein data in the capsule can be specified. 3. The method for constructing an information capsule according to claim 2, wherein the data in the capsule and the data storage area in the capsule are stored. 4. The method for constructing an information capsule according to claim 2, wherein a program in the capsule is encrypted. 5. A method for configuring an information capsule according to claim 4, wherein a program loader (hereinafter, an encrypted program loader) for reading an encrypted program is stored in the capsule. The configuration of the information capsule, wherein the encrypted program in the capsule is decrypted, loaded into the memory, and executed after the encryption program loader is executed and the correct encryption key is input. Method. 6. A recording medium, wherein the information capsule according to claim 1 is recorded in a computer-executable format.