JP2003114830A - Contents management system and information storage medium - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a contents management system allowing a contents provider side to perform a more detailed use limitation in respect to the use of contents. SOLUTION: In this contents management system for using contents data stored in a storage medium by a contents user terminal, the storage medium stores protection information including use limitation information showing the condition for using encrypted contents data and key information in a protection area where the read from the outside is limited. The contents user terminal performs a mutual authentication with the storage medium. The contents user terminal further reads the protection information from the protection area of the storage medium only when the mutual authentication is successful, and judges whether the contents data stored in the storage medium are usable or not on the basis of the use limitation information included in the read protection information. A management server transmits use limitation update information for updating the use limitation information to the contents user terminal.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a content management system and an information recording medium, and more specifically, to a content management system for utilizing content recorded in a portable recording medium in a content utilization terminal and the same. The present invention relates to an information recording medium.

[0002]

2. Description of the Related Art In recent years, various forms have been considered as a method of supplying contents such as programs and image data to a user. For example, a form in which contents recorded on a portable recording medium are distributed to users in advance is considered. In this mode, when the user uses the content, the terminal can use the content by transmitting a request to use the content to the management server and receiving a usage permission from the management server. By using the system described above, it is possible to construct a service model in which a server charges for a content in response to a request to use the content. Such a model is considered to be a very useful service model from the viewpoint of the content supplier.

As a conventional example for realizing the above-mentioned content supply system, there is an invention described in Japanese Patent Laid-Open No. 9-34841. FIG. 17 is a block diagram showing the configuration of a conventional content supply system. 17, the content supply system is a CD-ROM 91.
A user PC 92 (terminal), a CD-ROM key open center 93 (server), and a communication network 94. The CD-ROM 91 stores encrypted content and is distributed to users in advance. When using the content, the user attaches the distributed CD-ROM 91 to the user PC 92 and requests the user PC 9 to purchase the content stored in the CD-ROM 91.
Send from 2. C that received the request via the communication network 94
The D-ROM key opening center 93 transmits the key corresponding to the content requested for purchase to the user PC 92. At this time, the CD-ROM key open center 93 performs a billing process or the like according to the transmission of the key. The user PC 92, which has received the key from the CD-ROM key opening center 93, decrypts and uses the content in the CD-ROM 91 using the key. As described above, the contents in the CD-ROM 91 can be supplied online.

As described above, in the content supply system that requires the permission of the server when using the content that has been distributed in advance, it is necessary to limit the usage so that the distributed content cannot be freely used. is there. As described above, conventionally, the usage restriction is canceled by receiving the encryption key itself for restricting the usage of the content from the server.

[0005]

However, in the invention described in the above publication, it is possible to install the software in the hard disk of the user PC 92 by using the key transmitted from the CD-ROM key opening center 93. Become. Therefore, once the user PC 92 receives the key, the content can be freely used thereafter. That is, the user, once receiving the key,
You can freely use the content as many times as you want for many hours. As described above, in the conventional content management method that restricts the use of content only by the key transmitted from the server, the content provider cannot make detailed restrictions on the use of the content. It was For this reason, content providers
It was not possible to carry out a detailed billing method such as billing according to the usage amount and usage period of the content. For example, the content supplier may charge according to the usage status of the content, that is, the number of times of usage, usage time, etc., or may limit the usage period of the content and charge further when updating it. I couldn't.

[0006] Therefore, an object of the present invention is to provide a content management system in which the content supplier side can make more detailed usage restrictions regarding the usage of content.

[0007]

[Means for Solving the Problems and Effects of the Invention] A first invention is a content management system in which content data recorded in a portable recording medium is used by a content usage terminal, and the content usage terminal and the content are used. The recording medium includes a recording medium that is attachable to and detachable from the usage terminal and a management server that can communicate with the content usage terminal. A medium-side authentication unit for performing the above, protection information including the use restriction information indicating the condition for using the encrypted content data, and the key information for decrypting the encrypted content data, The content use terminal cooperates with the medium-side authentication unit to write the protected area. A terminal-side authentication unit that performs mutual authentication with the medium, and a protection information reading unit that reads the protection information from the protected area of the recording medium only when mutual authentication is successful between the terminal-side authentication unit and the recording medium, A usage determination unit that determines whether the content data recorded on the recording medium is available based on the usage restriction information included in the protection information read by the protection information reading unit, and the usage determination unit records the content data on the recording medium. When the determined content data is determined to be usable, the content decryption that decrypts the content data that is encrypted and recorded on the recording medium by using the key information included in the protection information read by the protection information reading unit The management server is provided with a content execution unit and a content execution unit that executes the content data decrypted by the content decryption unit. The usage restriction update information for updating the usage restriction information is transmitted to the content use terminal, and when the usage restriction update information is transmitted from the management server, the terminal-side authentication unit performs mutual authentication with the recording medium. The content use terminal performs the use recorded in the protected area of the recording medium only when the terminal side authentication unit succeeds in mutual authentication with the recording medium according to the use restriction update information transmitted from the management server. An update unit for updating the restriction information is further provided.

According to the first aspect, the content data is executed when it is determined that the content data can be used based on the use restriction information. As described above, in the present invention, the use of the content is restricted by the use restriction information. Also,
Since the usage restriction information is recorded in the protected area, its contents cannot be illegally changed by the user. Therefore, by freely setting the usage constraint information by the content supplier before distributing the recording medium, the usage constraint of the content can be set in detail. Further, according to the present invention, the usage restriction information recorded on the recording medium is updated by transmitting the usage restriction update information from the management server. Since the contents of the usage constraint update information are set on the management server side, the usage constraint information can be freely changed from the management server side using the usage constraint update information. Therefore, the management server side, that is, the content manager (supplier) can make more detailed usage restriction of the content by the usage restriction information.

A second invention is an invention according to the first invention, wherein the content usage terminal uses the content data recorded in the recording medium by the usage determining section when the content data is unavailable. The management server further includes a usage request unit that sends usage request information indicating a usage request of the content data determined to be impossible to the management server, and the management server receives the usage request information from the usage request unit of the content usage terminal. In response to this, the usage restriction update information regarding the content data related to the transmitted usage request information is transmitted to the content usage terminal, and the content decryption unit is recorded in the protected area by the update unit. In response to the update of the usage constraint information, the content data regarding the updated usage constraint information is decrypted.

According to the second aspect of the invention, when it is determined that the content cannot be used based on the use restriction information, the management server transmits the use restriction update information to the content use terminal. Therefore, even when it is determined that the content cannot be used, the usage restriction information is changed according to the usage request, so that the content data can be executed.

A third invention is an invention according to the second invention, wherein the protection information further includes a content identifier for identifying the content data recorded on the recording medium, and the usage requesting unit is As the usage request, usage request information including a content identifier indicating the content data related to the usage request is transmitted to the management server, and the management server is indicated by the content identifier transmitted from the usage request unit of the content usage terminal. The usage restriction update information regarding the content data is transmitted to the content using terminal.

According to the third aspect, the content data relating to the usage request is specified by the content identifier. Further, since the content identifier is recorded on the recording medium, the content use terminal does not need to hold information for specifying the content data related to the use request in advance. Therefore, according to the present invention, the content use terminal can easily specify the content data related to the use request.

A fourth invention is according to the first invention, wherein the usage restriction update information is information indicating a condition for using the content data, and the update unit is transmitted from the management server. The usage constraint information recorded in the protected area of the recording medium is updated so that the conditions are the same as the conditions indicated by the incoming usage constraint update information.

According to the fourth aspect, the usage restriction update information has the same contents as the usage restriction information. Therefore, when the usage constraint information recorded on the recording medium is updated by the usage constraint update information, the usage constraint update information held on the management server side and the usage constraint information held on the recording medium are the same. It shows the contents of. As described above, according to the present invention, the contents of the usage restriction information recorded on the recording medium can be grasped on the management server side without the need to create a special database showing the usage history.

A fifth aspect of the invention is an invention according to the first aspect of the invention, wherein the usage constraint update information is information indicating a change amount before and after updating when the usage constraint information recorded on the recording medium is updated. The update unit updates the usage constraint information recorded in the protected area of the recording medium based on the amount of change indicated by the usage constraint update information transmitted from the management server.

According to the fifth aspect, regardless of the content of the usage restriction information recorded on the recording medium, the usage amount of the content is changed by an equal amount to the content usage terminal transmitting the usage restriction update information. can do. Therefore, the content supplier can supply the same service to the user of the content use terminal by transmitting the same use restriction update information from the management server to the plurality of content use terminals.

A sixth invention is according to the first invention, wherein the content usage terminal stores a usage constraint update information storage section for storing usage constraint update information transmitted from the management server, and the record. Whether or not the protection information recorded on the medium includes the usage constraint information corresponding to the usage constraint update information stored in the usage constraint update information storage unit is checked by the terminal side authentication unit with the recording medium. In addition, the terminal side authentication unit, when a new recording medium is mounted, further performs mutual authentication with the newly mounted recording medium. If the usage restriction information determination unit determines that there is usage restriction information corresponding to the usage restriction update information stored in the usage restriction update information storage unit, the update unit stores the usage restriction information in the usage restriction update information storage unit. According use restriction update information that updates the use restriction information recorded on the recording medium.

According to the sixth aspect, the content use terminal determines whether or not the use restriction information is updated each time the recording medium is attached. Here, when the management server transmits the usage restriction update information, the recording medium is not always attached to the content usage terminal. According to the present invention, however, even if the content usage terminal cannot update the usage restriction information because the recording medium is not installed at the time of receiving the usage restriction update information, the content usage terminal will not be able to update the usage restriction by installing the recording medium thereafter. Information can be updated. Therefore, it is possible to reliably update the usage restriction information using the usage restriction update information transmitted from the management server.

A seventh invention is an invention according to the sixth invention, wherein the content use terminal, when the usage restriction information is updated by the updating unit, uses the usage restriction corresponding to the updated usage restriction information. The system further includes a discarding unit that discards the update information from the usage restriction update information storage unit.

According to the seventh aspect of the present invention, the usage constraint update information used to update the usage constraint information is discarded from the usage constraint update information storage section. Therefore, it is possible to prevent the usage constraint information from being updated many times by the same usage constraint update information, and to prevent meaningless update processing.

An eighth invention is an invention dependent on the seventh invention, wherein the management server, together with the usage restriction update information,
Updatable period information indicating a period during which the usage constraint information can be updated by the usage constraint update information is transmitted to the content use terminal, and the usage constraint update information storage unit stores the updatable period information transmitted from the management server. When the usage constraint information determining unit determines that there is usage constraint information corresponding to the usage constraint update information stored in the usage constraint update information storage unit, the content usage terminal stores the usage constraint update information. The update determination unit determines whether to update the usage constraint update information recorded on the recording medium based on the updatable period information stored in the update unit, and the update unit uses the update determination unit. Only when it is determined that the restriction information is updated, the usage restriction information recorded on the recording medium is updated, and the discarding section has to update the usage restriction information by the update determination section. If there boss, the use restriction update information and update period information corresponding to the determined use restriction information and not the update is discarded from use restriction update information storage unit.

According to the eighth aspect of the invention, the usage restriction update information is limited to within the period indicated by the updatable period information.
The usage restriction information recorded on the recording medium is updated. When the update processing is not performed within the updatable period, the usage constraint update information after the updatable period is discarded from the usage constraint update information. Therefore, according to the present invention, it is possible to avoid useless processing such as repeatedly performing update determination for unnecessary usage restriction update information that is not updated.

A ninth invention is according to the first invention, wherein the content use terminal transmits acquisition request information indicating an acquisition request for requesting acquisition of content data to the management server. Only when mutual authentication is successful between the acquisition request unit and the recording medium in the terminal side authentication unit, the information transmitted from the management server according to the acquisition request information transmitted from the acquisition request unit is recorded in the recording medium. The management server further includes a recording unit for recording, and the management server includes encrypted content data which is content data related to the acquisition request information transmitted from the acquisition request unit of the content using terminal, and usage restriction information regarding the content data. And the key information for decrypting the content data to the content using terminal, and the recording unit
Of the information transmitted from the management server, at least the usage restriction information and the key information are recorded in the protected area.

According to the ninth aspect, the content use terminal can acquire the content from the management server in response to the acquisition request. Further, since the use restriction information and the key information of the acquired content are recorded in the protected area of the recording medium, it is possible to prevent unauthorized use.

A tenth invention is according to the ninth invention, wherein a content identifier for identifying the content recorded on the recording medium is further recorded in the protected area, and the acquisition request is issued. The unit transmits information including the content identifier recorded in the recording medium as the acquisition request information when acquiring the content data related to the content data recorded in the recording medium, and the management server sets the acquisition request unit. The encrypted content data, which is the content data related to the content data indicated by the content identifier transmitted from, the usage restriction information on the content data, and the key information for decrypting the content data. Send to the content usage terminal.

According to the tenth aspect, the content use terminal can newly obtain the content data related to the content data recorded on the recording medium. As a result, the user can easily acquire content different from the content currently held. Therefore, the opportunity for the user to acquire new content increases, so for the content supplier side,
The use of content can be promoted.

An eleventh invention is according to the tenth invention, wherein the acquisition requesting unit provides the management server with usage restriction information corresponding to content data indicated by the content identifier, in addition to the content identifier. The management server changes the content of the usage restriction information to be transmitted to the content usage terminal according to the content of the usage restriction information transmitted from the acquisition request unit.

According to the eleventh aspect of the invention, the usage restriction information on the newly acquired content changes according to the content of the usage restriction information transmitted as the acquisition request. That is, when there are a plurality of content usage terminals, the management server can change the content of the usage restriction information for each content usage terminal that transmits the acquisition request. Therefore, it is possible to make detailed usage restrictions for each content usage terminal.

A twelfth aspect of the invention is an invention according to the first aspect, wherein the usage limitation information is limited number of times information indicating the number of times the content data recorded on the recording medium can be used, and recording At least one of time limit information indicating the time when the content data recorded on the medium can be used and time limit information indicating the time when the content data recorded on the recording medium can be used. Contains one.

According to the twelfth aspect, the content supplier who sets the usage restriction information can restrict the usage of the content data in any of the usage count, usage time and usage date and time.

A thirteenth aspect of the present invention is a portable information recording medium which can be attached to and detached from a content use terminal that uses content data, and includes a content data recording section in which encrypted content data is recorded, and a content use terminal. As a part of the mutual authentication processing performed between the content-using terminal, a medium-side authenticating unit that authenticates with the content using terminal, a content identifier for identifying the content data, and the encrypted content data are used. Protection information including usage restriction information indicating a condition for and key information for decrypting the encrypted content data, and a protected area in which reading from the outside is recorded in a restricted state, The protected area can be read by the content use terminal only when the mutual authentication process performed with the content use terminal is successful. Characterized in that the capacity.

A fourteenth invention is an invention according to the thirteenth invention, wherein the usage restriction information can use the restriction data indicating the number of times the content data can be used and the content data. At least one of the time limit information indicating the time and the time limit information indicating the date and time when the content data can be used is included.

[0033]

1 is a block diagram showing the configuration of a content management system according to a first embodiment of the present invention. In FIG. 1, the content management system includes a memory card 1, a content use terminal 2, and a management server 3. Communication between the content use terminal 2 and the management server 3 is performed via a network (not shown). The memory card 1 is a portable recording medium. The memory card 1 is detachably attached to the content use terminal 2. Content data is recorded in the memory card 1.

When using the content data, the content use terminal 2 accesses the memory card 1. When accessing the protected area 13 of the memory card 1, mutual authentication is performed between the memory card 1 and the content use terminal 2. When the protected area 13 of the memory card 1 is accessible, the content usage terminal 2 determines whether the content data is available based on the usage restriction information recorded in the protected area 13 of the memory card 1. To judge. Here, the usage restriction information is information indicating a condition for using the content data. The content use terminal 2 executes the content data only when it is determined that the content data is available. In the present embodiment, the use of content data is restricted by the use restriction information recorded in the memory card 1 as described above.

When it is determined that the content data is unavailable, the content use terminal 2 transmits the content identifier to the content server. Here, the content identifier is information for identifying the content data, and is information unique to the content data. The management server 3 transmits the usage restriction information on the content data indicated by the received content identifier to the content usage terminal 2. Memory card 1
The contents of the usage restriction information recorded in the
Is updated with the contents of the usage restriction information transmitted from.
As a result, the content use terminal 2 can use the content data.

Next, the memory card 1 will be described in detail. As shown in FIG. 1, the memory card 1 includes a medium-side authentication unit 11, a public area 12, and a protected area 13. The medium-side authentication unit 11 performs an authentication process on the memory card 1 side in the mutual authentication performed between the memory card 1 and the content use terminal 2. Medium side authentication section 1
The authentication process performed by 1 constitutes a part of the mutual authentication process performed between the memory card 1 and the content use terminal 2. In addition, in the present embodiment, the medium-side authentication unit 11 is realized by the CPU included in the memory card 1 executing a predetermined authentication processing program. The protected area 13 is an area that can be accessed only after mutual authentication between the memory card 1 and the content use terminal 2. The public area 12 is an area that can be accessed without the mutual authentication.

FIG. 2 is a diagram showing the structure of files and directories recorded in the memory card 1 shown in FIG. The memory card 1 is distributed to each user after the information shown in FIG. 2 is recorded in advance. Note that the information recorded in the memory card 1 shown in FIG. 2 is, for example, wired communication with a predetermined server (may be the management server 3 or another dedicated server). Alternatively, it may be acquired by wireless data communication, or may be acquired in the form of broadcasting. Further, the information may be acquired by reading from another information recording medium.

FIG. 2A is a diagram showing the structure of files and directories recorded in the public area 12. FIG. 2B is a diagram showing the structure of files and directories recorded in the protected area 13. Public area 1
In 2, the encrypted content data and management information for managing the encrypted content data are recorded. Specifically, in the public area 12, the content file 122 and the manager file 121 are recorded in a specific directory (“DATA” shown in FIG. 2A). The content file 122 is a file in which encrypted content data is stored. Further, in FIG. 2A, the file name of the content file 122 is “00001.ht.
m "," 00002. jpg "and" 00003. w
A file "av" is shown. The manager file 121 is a file in which management information for managing the content file 122 is stored. Further, in FIG. The protection information file 131 is recorded in a specific directory (“GUARDED” shown in FIG. 2B). The protection information file 131 includes at least the above-mentioned content identifier and usage restriction information. Here, the two directories have a correspondence relationship. That is, the public area 12
The protection information regarding the content file 122 placed in the directory is recorded in the protection information file 131 in the directory of the protected area 13.

The content file 122 has a file name of "5-digit number + extension". The manager file 121 is composed of management information and a header for managing it. The number of management information corresponds to the number of content data. Further, each management information corresponds to each content data. That is, the nth management information is “n +
Content file 12 having a file name of "extension"
Corresponds to 2. For example, the first management information corresponds to the content file 122 whose file name is “00001.htm”. Here, the management information includes encrypted information. The encryption information is information indicating whether or not the corresponding content file 122 is encrypted. Therefore, the content use terminal 2 can determine whether or not the content data is encrypted, based on the content of the encrypted information.

The protection information file 131 is composed of protection information and a header for managing it. The number of protection information corresponds to the number of content data, like the management information. Further, each protection information corresponds to each content data. That is, the nth protection information corresponds to the content file 122 having the file name of “n + extension”. For example, the first protection information corresponds to the content file 122 whose file name is “00001.htm”. The protection information includes the above-mentioned content identifier, key information, and usage restriction information.
The key information is information indicating an encryption key for decrypting the encrypted content data. Therefore, terminals (including terminals that do not have a mutual authentication function) cannot use content data only by accessing the public area, and use content data unless they access the protected area and acquire key information. Can not.

The use restriction information indicates information on restrictions when using the corresponding content data. In the present embodiment, the usage restriction information includes usage frequency information and
It includes usage time information and usage date and time information. The usage count information is information indicating the number of times the content data can be used. In the present embodiment, the usage count information includes information indicating a predetermined usage limit count,
The information includes the total number of times of use up to the present. For example, in the usage count information, information indicating that the predetermined usage count is 5 times and that the total usage count up to now is 3 times is recorded. This shows that the content data can be used twice. The usage time information is information indicating the time when the content data can be used. In the present embodiment, the usage time information includes information indicating a predetermined usage time limit and a total usage time up to the present. For example, the usage time information has recorded therein information indicating that the predetermined usage time is 12 hours, and that the total usage time up to now is 5 hours. The usage date / time information is information indicating the date / time when the content data can be used. In the usage date / time information, for example, the period during which the corresponding content data can be used is 2 from August 1, 2001.
Information indicating that it is December 31, 001 is recorded.

Next, details of the content use terminal 2 will be described. FIG. 3 shows the content use terminal 2 shown in FIG.
FIG. 3 is a block diagram showing the hardware configuration of the above. The content use terminal 2 has a content reading function and a content preview / playback function. The content use terminal 2 is realized as a personal computer for executing programs for realizing these functions. In FIG. 3, the content use terminal 2 includes a central processing unit (hereinafter referred to as “CPU”) 201 and an input device 2.
02, a display device 203, a main memory 204, and a read-only memory (hereinafter referred to as “ROM”) 205.
A communication interface 206 and a memory card interface 207. CPU201 is RO
The program stored in M205 is stored in the main memory 20.
Run using 4. Data transmission / reception between the content use terminal 2 and the server via an external network (not shown) is performed through the communication interface 206. Reading and writing of the memory card 1 is performed via the memory card interface 207. Further, the content use terminal 2 of the present embodiment may be configured to have a content recording function in addition to the above-mentioned function.
In this case, the content use terminal 2 can acquire the content data from the outside (for example, the management server 3) via the communication interface 206 and record it in the memory card 1.

FIG. 4 shows the content use terminal 2 shown in FIG.
3 is a block diagram showing the functional configuration of FIG. In FIG. 4, the content use terminal 2 includes a terminal side authentication unit 21, a content use processing unit 22, an input unit 23, and a display unit 24.
It has and. The input unit 23 and the display unit 24 are respectively the input device 202 and the display device 203 shown in FIG.
Is realized by In this embodiment, the terminal side authentication unit 2
1 and the content use processing unit 22 are realized by the CPU 201 executing a predetermined program stored in the ROM 205.

The first operation example of the content management system according to this embodiment will be described below. First explained below
In the operation example of, the content use terminal 2 is the memory card 1
The operation when using the content data recorded in the above will be described. FIG. 5 is a flowchart showing the flow of processing of the content use terminal 2 in the first operation example.
When using the content data recorded on the memory card 1 attached to the content using terminal 2, first, the content using terminal 2 specifies the content data to be used (step S101). That is, the input unit 23
Receives an instruction from the user who specifies the content data to be used. An instruction for designating the content data to be used among the content data recorded in the memory card 1 is input to the input unit 23 by the user. That is, the user uses the input device 202 to specify the content data to be used. Thereby, the content use terminal 2 can specify the content data to be used based on the instruction from the input unit 23.

Next, the content use terminal 2 needs to read the use restriction information from the memory card 1 in order to determine whether or not the specified content data is usable, but the use restriction information is stored in the memory card 1. Protected area 1
It is recorded in 3. Therefore, the content use terminal 2
Performs mutual authentication with the memory card 1 (step S102). Here, the mutual authentication is performed as follows by the medium side authentication unit 11 and the terminal side authentication unit 21 cooperating. That is, the content use terminal 2 passes the preset device key of itself to the medium-side authentication unit 11 of the memory card 1. Further, the memory card 1 passes its own preset memory card key to the terminal side authentication unit 21 of the content use terminal 2. The medium-side authenticating unit 11 and the terminal-side authenticating unit 21 of the memory card 1 and the content using terminal 2 authenticate the other party based on the received respective keys. The result of authentication by the medium-side authentication unit 11 is notified to the content use terminal 2. The content using terminal 2 includes a medium side authenticating section 11 and a terminal side authenticating section 21.
It is determined whether the mutual authentication is successful based on the authentication result of. That is, when the authentication by the medium side authentication unit 11 and the terminal side authentication unit 21 is successful, the content use terminal 2 determines that the mutual authentication is successful. On the contrary, if either or both of the medium-side authenticating unit 11 and the terminal-side authenticating unit 21 do not succeed, the content use terminal 2 determines that the mutual authentication has not succeeded. For example,
Mutual authentication fails if the terminal does not have a function of reading the protected area or if the memory card is set to prohibit reading of the protected area. The medium-side authentication unit 11 and the terminal-side authentication unit 21 may be realized by a CPU that executes a predetermined authentication program for mutual authentication processing, or may be realized by a dedicated chip that performs mutual authentication processing. Good.

Next, the content use terminal 2 determines whether the mutual authentication in step S102 is successful (step S103). When the mutual authentication is completed, the content use terminal 2 can access the protected area 13 of the memory card 1. Therefore, when the mutual authentication is not successful, the content use terminal 2 ends the process without performing the content use process after step S103. On the other hand, when the mutual authentication is successful, the content use terminal 2 performs the content use process after step S104. The content use processing will be described below.

The content use processing is performed in the content use processing unit 22 of the content use terminal 2. Here, as shown in FIG. 4, the content usage processing unit 22
Is a usage determination unit 221 and a content decryption unit 222.
A content execution unit 223 and a current date / time acquisition unit 224
And a usage restriction information updating unit 225. In addition,
The content usage processing unit 22 is realized by the CPU 201 executing a content usage processing program for performing content usage processing. Each component included in the content usage processing unit 22 represents a subroutine in the content usage processing program.

In the content use processing, first, the content use processing unit 22 reads the protection information recorded in the protected area 13 for the content data specified in step S101 (step S10).
4). Next, the content usage processing unit 22 performs usage determination processing (step S105). Here, the usage determination process is performed by the usage determination unit 221. That is, the usage determining unit 221 acquires the protection information corresponding to the specified content data from the memory card 1. Based on the use restriction information (use count information, use time information, and use date / time information) included in the acquired protection information, the use determining unit 221 determines whether or not the content data can be used. Hereinafter, the usage determination process will be described in detail.

FIG. 6 is a flow chart showing details of step S105 shown in FIG. First, the usage determination unit 22
1 determines whether or not the number of times of use is limited, that is, whether or not the number of times of use is set in the acquired use restriction information (step S1051). If the result of determination in step S1051 is that the number-of-uses information has not been set, the use determination unit 221 performs the process of step S1053. On the other hand, as a result of the determination in step S1051,
When the usage count information is set, the usage determination unit 221
Determines whether the total number of times of use up to now is less than a predetermined number of times of use based on the number of times of use information (step S1052). As a result of the determination in step S1052, when the total number of times of use up to the present is less than the predetermined number of times of use limitation, the use determining unit 221 performs the process of step S1053. On the other hand, step S105
As a result of the determination of 2, when the total number of times of use up to the present is equal to or more than the number of times of use limitation, the use determining unit 221 determines that the content data is unusable (step S105).
9) Then, the usage determination process ends.

In step S1053, the usage determining unit 221 determines whether the usage time is limited, that is, whether the usage time information is set in the acquired usage restriction information. As a result of the determination in step S1053, when the usage time information is not set, the usage determination unit 221 performs the process of step S1055. on the other hand,
When the use time information is set as a result of the determination in step S1053, the use determining unit 221 determines whether the total use time up to the present is less than the predetermined use time limit based on the use count information. Is determined (step S
1054). If the result of determination in step S1054 is that the total usage time up to the present time is less than the predetermined usage time limit, the usage determination unit 221 performs the processing in step S1055. On the other hand, as a result of the determination in step S1054, if the total usage time up to the present time is equal to or longer than the usage time limit, the usage determination unit 221 determines that the content data is unusable (step S1059), and the usage determination processing is performed. finish.

In step S1055, the use determining unit 221 determines whether or not the use date / time is restricted, that is, whether or not the use date / time information is set in the obtained use restriction information. As a result of the determination in step S1055, if the use date / time information is not set, the use determination unit 221 performs the process of step S1058. on the other hand,
When the use date / time information is set as a result of the determination in step S1055, the use determination unit 221 inputs the current date / time from the current date / time acquisition unit 224 (step S105).
6). Here, the current date and time acquisition unit 224 acquires the current date and time, for example, using the internal clock of the content use terminal 2 or by accessing an external server that discloses the current date and time through the network. After step S1056, the usage determining unit 221 determines that
Based on the current date and time and the usage date and time information acquired in 1056, it is determined whether or not the current date and time is within the usage restriction date and time (step S1057). Step S10
As a result of the determination of 57, when the current date and time is within the range of the use restriction date and time, the use determining unit 221 determines that the content data is available (step S1058), and ends the use determining process. On the other hand, as a result of the determination in step S1057, if the current date and time is not within the range of the use restriction date and time, the use determining unit 221 determines that the content data is unusable (step S1059) and ends the use determining process. . By the above usage determination processing, the usage determination unit 22
1 can determine whether the content data is available.

Returning to the description of FIG. 5, next, the content use processing unit 22 determines whether or not the determination result of step S105 is available (step S106). When the usage determination unit 221 determines that the content data is available as a result of the determination in step S106, the content usage processing unit 22 reads the content file 122 from the memory card 1 and decrypts the content data (step S107). The content data is decrypted by the content decryption unit 222. That is, the content decryption unit 222 decrypts the encrypted content data recorded in the memory card 1, using the key information acquired in step S104. Note that the determination result obtained by the use determination process is notified from the use determining unit 221 to the content decrypting unit 222.

Next, the content execution unit 223 executes the content data input from the content decryption unit 222 (step S108). Content execution unit 22
3 is reproduction / playback according to the type of the content file 122.
Execute. In addition, the content execution unit 223 displays the content data using the display unit 24 as needed. Further, the content execution unit 223 accesses the usage restriction information of the memory card 1 and updates the usage restriction information. Specifically, the content execution unit 223 updates the total number of times of use and the total time of use for the number-of-uses information and the time-of-use information included in the usage restriction information. For example,
The content execution unit 223 performs processing such as increasing the total number of times of use once or adding the current time of use to the total time of use.

On the other hand, as a result of the determination in step S106, when the use determining unit 221 determines that the content data is unusable, the content use processing unit 22 determines whether to update the use restriction information. (Step S109). That is, the content usage processing unit 2
2 asks the user whether to update the usage restriction information. Specifically, the display unit 24 displays a message notifying that the content data is unavailable. Further, the content usage processing unit 22 waits for an instruction input from the user regarding whether to update the usage restriction information. On the other hand, the user uses the input device 202 to instruct whether to update the usage restriction information. In the present embodiment, the input unit 23 accepts the input of either one of "update the usage restriction information" and "do not update the usage restriction information" as an instruction from the user. The content usage processing unit 22 determines whether to update the usage restriction information based on this input. In step S109, when the instruction not to update the usage restriction information is input to the input unit 23, the content usage processing unit 22 ends the content usage processing.

On the other hand, in step S109, when an instruction to update the usage restriction information is input to the input section 23, the content usage processing section 22 sends the usage request information to the management server 3 as a content data usage request. It transmits to (step S110). The usage request information is information indicating a usage request for content data. In the present embodiment, the content usage processing unit 22 transmits usage request information including a content identifier included in the protection information acquired from the memory card 1 to the management server 3 as a content data usage request. When the content identifier is transmitted, the user identifier unique to the user is transmitted together with the content identifier. The user identifier is information for identifying each user. The user identifier may be set by the content supplier for each user, or if the content identifier is transmitted and received by electronic mail, a mail address may be used as the user identifier. The management server 3, which has received the content identifier, transmits the usage constraint update information corresponding to the content identifier to the content use terminal 2. Here, the usage restriction update information is information for updating the usage restriction information recorded in the memory card 1. The details of the processing in the management server 3 will be described below.

FIG. 7 is a block diagram showing the functional configuration of the management server 3 shown in FIG. In FIG. 7, the management server 3 includes an information processing section 31 and a content data storage section 3
2 and a management table storage unit 33. The information processing unit 31 is realized by the CPU of the management server 3 executing a program for performing a predetermined process shown in a flowchart described later. The content data storage unit 32 stores content data to be used in the content use terminal 2.
Further, the content data storage unit 32 stores content data and a content identifier indicating the content data in association with each other. In addition, in the first operation example, the management server 3 may be configured without the content data storage unit 32. The management table storage unit 33 stores various tables described later. The management server 3 is realized as a personal computer that executes the above functions by program processing.

FIG. 8 is a diagram showing a usage restriction update table stored in the management table storage unit of the management server 3 according to the first embodiment. As shown in FIG. 8, the usage restriction update table stores content identifiers and usage restriction update information in association with each other. Here, the usage restriction update table is created for each user. That is, the management server 3 holds as many use restriction update tables as the number of registered users.

FIG. 9 is a flowchart showing the processing flow of the management server 3 in the first operation example. First, the management server 3 receives the usage request information from the content usage terminal 2 (step S201) and identifies the user who has issued the usage restriction information update request (step S202).
Specifically, the management server 3 specifies the usage constraint update table to be referred to from the usage constraint update tables held in the management server 3 based on the user identifier transmitted together with the content identifier. Next, the management server 3 determines the usage constraint update information to be transmitted (step S203). Specifically, the management server 3 identifies the usage constraint update information corresponding to the content identifier received from the content usage terminal 2 with reference to the usage constraint update table identified in step S202. Further, the management server 3 transmits the specified usage restriction update information to the content usage terminal 2 (step S20).
4). With reference to FIG. 8 as an example, when the content identifier “ABC_MAGAZINE_010101” is transmitted from the content use terminal 2, the management terminal transmits the use restriction update information “number of times: addition three times”. Note that the usage restriction update information “number of times: addition three times” indicates that the usage restriction number included in the usage number information recorded in the memory card 1 is added three times and updated. Further, in FIG. 8, the usage restriction update information “time: add 3 hours, date / time: extend January” is calculated by adding the usage restriction time included in the usage time information recorded in the memory card 1 by 3 hours. It indicates that the usage restriction date and time included in the usage date and time information recorded in the memory card 1 is extended by one month and updated. As described above, the usage restriction update information may be information that updates a plurality of conditions regarding usage restrictions.

When the usage constraint update information is information indicating the amount of change before and after the update when updating the usage constraint information recorded in the memory card 1 as in the present embodiment, the usage constraint update table is , Does not necessarily have to be created for each user. Further, when the usage restriction update table is not created for each user, the usage request information transmitted from the content usage terminal may not include the user identifier.

FIG. 10 is a diagram showing an example of a usage restriction update table in another embodiment. In another embodiment, the usage restriction update information may be information indicating the usage restriction count, usage restriction time, or usage restriction date and time included in the usage restriction information, as shown in FIG. 10. In this case, the information indicating the number of times of use restriction and the like included in the use restriction information recorded in the memory card 1 is updated to the same content as the content of the use restriction update information. For example, when the usage restriction information includes the usage count information, the usage restriction count included in the usage count information is updated to be the same as the usage restriction count indicated by the usage restriction update information.

Further, the management server 3 needs to update the usage constraint update information stored in the usage constraint update table after the usage constraint update information is transmitted. This is to prevent the usage restriction update information transmitted before and the usage restriction update information to be transmitted next from being the same content when the update request for the same content data is sent multiple times by the same user. Is. Note that, as shown in FIG. 10, when the usage constraint update information is information indicating the condition for using the content data, the usage constraint update information is different for each user to be held on the management server 3 side. The table needs to be created for each user.

Returning to the description of FIG. 5, when the usage restriction update information is transmitted from the management server 3 to the content usage terminal 2, the content usage processing section 22 records it in the usage restriction information updating section 225 in the memory card 1. The usage restriction information that has been set is updated (step S111). That is,
The usage restriction information updating unit 225 updates the content of the usage restriction information stored in the protected area 13 of the memory card 1 according to the content of the usage restriction update information transmitted from the management server 3. For example, if the usage restriction update information is “time: 3 hours added, date / time: January extended”, the usage restriction information update unit 225 determines the usage restriction information based on the amount of change indicated by the usage restriction update information. To update. That is, the usage restriction information updating unit 225 accesses the protected area 13 of the memory card 1 and updates the usage restriction number included in the usage frequency information recorded in the memory card 1 to a value obtained by adding three times. Further, the use date / time information recorded in the memory card 1 is updated so that the date / time (period) indicated by the use date / time information is extended by one month.

After the update processing by the usage restriction information updating section 225, the content usage processing section 22 proceeds to step S105.
Process. That is, the content usage processing unit 22
Causes the usage determining unit 221 to perform the above-described usage determining process again. In this case, since the usage restriction information recorded in the memory card 1 has been updated, it is determined that the content data can be used. Therefore, the content use terminal 2 can execute the content data. This is the end of the description of the processing in the content use terminal in the first operation example.

In the above description, the key information is encrypted and recorded in the protected area 13, and the memory card encryption key generated by the mutual authentication performed between the memory card 1 and the content use terminal 2. May be decrypted by. In this case, even if the protected area is illegally accessed without performing the mutual authentication, the key information cannot be decrypted because the memory card encryption key is not generated. Therefore, since the content data is not decrypted, it is possible to prevent unauthorized use of the content data. Further, in the above embodiment, all the content data recorded on the memory card is encrypted,
Assuming that the use is restricted, step S10
Although the mutual authentication is always performed after the content data is specified in No. 1, the content data may include unencrypted data in other embodiments. In this case, the content use terminal 2 performs step S
After 101, it is necessary to judge whether or not the specified content data is encrypted. The determination can be made by referring to the management information recorded in the public area 12. The key information is
If the corresponding content data is not encrypted,
It is preferable to set a random numerical value so that it is not noticed that it is not encrypted (for example, if all are set to 0, it is apparent that it is not encrypted).

Next, a second operation example according to this embodiment will be described. In the second operation example described below, the usage restriction update information is transmitted from the management server 3 at an arbitrary timing, and the content usage terminal 2 records it in the memory card 1 based on the transmitted usage restriction update information. The usage restriction information is updated. For example, the management server 3 transmits the usage restriction update information about the specific content data when the purpose is to promote the use of the specific content data.

FIG. 11 is a flowchart showing the processing flow of the management server 3 in the second operation example. First,
The management server 3 identifies the user who transmits the usage restriction update information (step S301). The user to be transmitted may be manually determined by the content supplier who manages the management server 3, or may be automatically determined so that it is transmitted only to the user who satisfies some condition.
Further, it may be determined that all the users registered in the destination terminal table described later are the transmission targets.
Next, the management server 3 determines the content usage terminal to which the usage restriction update information is transmitted (step S30).
2). Here, the content usage terminal to which the usage restriction update information is transmitted is determined as follows. That is,
The management server 3 holds a transmission destination terminal table that associates the above-mentioned user identifier with a terminal identifier that is information for identifying the content use terminal and is unique to each content use terminal. The management server 3 can determine the content use terminal to be transmitted from the user who transmits the use restriction update information by referring to the destination terminal table. The management server 3 transmits the usage restriction update information to the content usage terminal determined as described above (step S303).

FIG. 12 is a diagram showing an example of a destination terminal table stored in the management table storage section of the management server 3 in the second operation example. The destination terminal table associates the users registered in the content management system with the content use terminals used by each user. As shown in FIG. 11, the destination terminal table stores user identifiers and terminal identifiers in association with each other. In FIG. 11, the user identifier “userA” and the terminal identifiers “terminalA” and “termin”.
"alB" is associated with each other. This means that a user whose user identifier is "userA" has terminal identifiers "terminalA" and "terminalA".
B ″ means that two content utilization terminals can be used. Here, as shown in FIG. 11, it is indicated by a user identifier in which one user identifier is associated with a plurality of terminal identifiers. When transmitting the usage constraint update information to the user, the management server 3 sets all associated terminals as the destination terminals.
When transmitting the usage constraint update information to the user “userA”, the management server 3 sets “terminal
The usage restriction update information is transmitted to the two content usage terminals “A” and “terminalB”.

In this embodiment, the management server 3
Sends the updatable period information regarding the usage constraint update information together with the usage constraint update information. The updatable period information is information indicating a period during which the usage constraint information can be updated by the usage constraint update information. For example, the updatable period information may be information indicating that the update is possible within one month after the transmission, or information indicating that the update is possible during the fiscal year 2002.

The usage restriction update information, the content identifier, and the updatable period information transmitted from the management server 3 are received by each content usage terminal. In response to this, each content use terminal performs the update process of the use restriction information. Hereinafter, the update processing of the usage restriction information in each content usage terminal will be described by taking the content usage terminal 2 as an example.

FIG. 13 is a flow chart showing the flow of processing of the content use terminal 2 in the second operation example. First, the content use terminal 2 receives the use restriction update information, the content identifier, and the updatable period information transmitted from the management server 3 (step S40).
1). Next, the content use terminal 2 stores the use restriction update information, the content identifier, and the updatable period information transmitted from the management server 3 in its own storage device, for example, the main memory 204 shown in FIG. 3 ( Step S402). Here, the information stored in the storage device is preferably unwritable in order to prevent falsification. Next, the content use terminal 2 determines whether or not a memory card is attached (step S403). When the memory card is not attached in step S403, the content use terminal 2 waits until the memory card is attached (step S40).
4). During the standby in step S404, the content use terminal 2 performs other processing including processing that is irrelevant to the present invention, and performs the processing of step S405 in response to the insertion of the memory card. On the other hand, when the memory card is attached in step S403, the content use terminal 2 performs the process of step S405.

In step S405, the content use terminal 2 performs mutual authentication with the attached memory card. Although not shown, if the mutual authentication fails, the content use terminal 2 does not perform the process of step S406 and the subsequent steps. After step S405, the content use terminal 2 determines whether or not the attached memory card has use restriction information corresponding to the information transmitted from the management server 3 (step S406). Specifically, the content use terminal 2 determines whether or not the same content identifier as the content identifier transmitted from the management server 3 is recorded in the memory card. If there is no corresponding usage restriction information in step S406, the content usage terminal 2 waits until a memory card is newly installed (step S407). During the standby of step S406, the content use terminal 2 performs other processing including processing that is irrelevant to the present invention, and in response to the memory card being newly installed, step S40.
Process 5 is performed.

On the other hand, in step S406, if there is corresponding usage restriction information, the content usage terminal 2
It is determined whether the usage restriction update information is within the valid period (step S408). Specifically, the content use terminal 2 can update the use restriction information by the use restriction update information transmitted from the management server 3 together with the updatable period information based on the updatable period information stored in step S402. Or not. More specifically, it is determined whether or not the usage restriction update information is within the valid period depending on whether or not the period indicated by the updatable period information stored in step S402 has elapsed. When it is determined in step S408 that the usage constraint update information is within the valid period, the content usage terminal 2 updates the usage constraint information recorded in the memory card (step S409). Specifically, the content usage terminal 2 is identified by the content restriction information recorded in the memory card and transmitted from the management server 3 according to the usage restriction update information transmitted from the management server 3. The usage restriction information on the content data to be updated. As described above, the management server 3 can cause the content use terminal 2 to update the use restriction information recorded in the memory card. After step S409, the content use terminal 2 performs the process of step S410. On the other hand, if it is determined in step S408 that the usage constraint update information is not within the valid period, the content use terminal 2 sends the usage constraint update information determined to be not within the valid period from the storage device storing it. Discard (step S41)
0). Further, the content use terminal 2 discards the updatable period information corresponding to the use restriction information. This is the end of the description of the process in the content management system in the second operation example.

Next, a third operation example according to this embodiment will be described. The third operation example described below is an operation when the user requests content data (hereinafter referred to as related content data) related to the content data recorded in the memory card 1. Specifically, the content use terminal 2 requests the management server 3 to acquire related content data. Further, in response to the acquisition request, the management server 3 transmits related content data and usage restriction information to the content usage terminal 2. According to the above, for example, in the case where the content is a monthly magazine, if the user has the content of this month's issue, the user can easily purchase the content of the next month's issue even if the content is not distributed by the recording medium. can do. In addition, in the third operation example, the content use terminal 2 needs to have a function of recording the content data and the like in the memory card 1.

FIG. 14 is a flow chart showing the flow of processing of the content use terminal 2 in the third operation example. Further, FIG. 15 is a flowchart showing the flow of processing of the management server 3 in the third operation example. The third operation example will be described below with reference to FIGS. 14 and 15. First, the content use terminal 2 transmits content data acquisition request information to the management server 3 (step S501). The acquisition request information is information indicating an acquisition request for content data. In the present embodiment, the acquisition request information includes the content identifier recorded in the memory card 1. That is, step S5
In 01, the content use terminal 2 reads out the content identifier recorded in the memory card 1 and sends it to the management server 3 as acquisition request information. Here, it is assumed that mutual authentication is performed between the content use terminal 2 and the memory card 1 before making the acquisition request. The acquisition request information may include usage restriction information corresponding to the content identifier, if necessary.

Here, referring to FIG. 15, the management server 3
The processing of will be described. The management server 3 receives the acquisition request information (step S601) and determines whether the acquisition request is valid (step S602). Step S
The determination of 602 is performed by referring to the related content table. FIG. 16 is a diagram showing an example of a related content table held in the management server 3 in the third operation example.

As shown in FIG. 16, the related content table associates a content identifier, a related content identifier, usage restriction information, key information, and privilege processing information. The related content identifier indicates the content identifier of the content data related to the content data indicated by the received content identifier. Here, the received content identifier is the content use terminal 2
It means the content identifier transmitted from. The content data indicated by the received content identifier is called received content data. The usage restriction information is usage restriction information regarding the content data indicated by the corresponding content identifier. The key information is key information for decrypting the content data indicated by the corresponding content identifier. The privilege process information is information referred to in the privilege process described later. If there is no related content identifier, the privilege processing information is not set.

Returning to the explanation of step S602, the management server 3 which has received the received content identifier will transmit the content data indicated by the corresponding related content identifier to the content use terminal 2. Figure 1
Taking 6 as an example, "ABC_MAGAZINE_010101"
When the content identifier is received, the management server 3
Sends the content data indicated by the content identifier “ABC_MAGAZINE_010102” to the content use terminal 2. In addition, the correspondence between the received content identifier and the related content identifier is not limited to one related content identifier corresponding to one received content identifier. For example, "ABC_MAGAZINE_010101-ABC_MAGAZ
INE_010110 ”(The number at the end of the content identifier is 010
10 content identifiers from 101 to 010110 are shown. ), One related content identifier corresponds to a plurality of received content identifiers, or vice versa.

As a specific example of the correspondence between the received content identifier and the related content identifier, there is a case where a sequel content is acquired or a case where a special content is acquired. The sequel content is, for example, the content of the next month's issue with respect to the content of this month's issue when the content is a monthly magazine. In this case, the related content table is associated with the content of this month's issue and the content of the next month's issue. Also,
The special edition contents are like special edition contents when the contents are series contents. For example, when all the content identifiers of the content of a book consisting of 10 volumes in total are transmitted to the management server 3, the content of the special edition of the book can be acquired. In this case, the content of 10 volumes of the series and the content of the special edition are associated with each other in the related content table. As described above, by making it possible to acquire the content data related to the content data recorded on the memory card, it is possible to promote acquisition of new content.
As a result, the use of the content can be promoted.

The determination in step S602 is made based on whether or not the content identifier received from the content using terminal 2 has a received content identifier corresponding to the related content table. That is, when the related content identifier corresponding to the content identifier received from the content use terminal 2 is stored in the related content table, the management server 3 determines that the acquisition request is valid. Further, in this case, the management server 3 performs the process of step S603. On the other hand, when the related content identifier corresponding to the content identifier received from the content use terminal 2 is not stored in the related content table (for example, in FIG. 16, “MUSIC_POPS_TQ2”).
51POLK ”is transmitted), the management server 3 determines that the acquisition request is invalid. In this case, the management server 3 sends a message indicating that the transmitted acquisition request is invalid to the content use terminal 2 To (step S
606), the process ends.

In step S603, the management server 3
Specifies the related content data to be transmitted. Specifically, the management server 3 refers to the related content table described above and identifies the related content identifier corresponding to the received content identifier. Next, the management server 3 performs a privilege granting process (step S604). The privilege granting process is a process performed according to the content of the usage restriction information transmitted from the content usage terminal 2. Therefore, the privilege granting process is a process performed when the usage constraint information is received from the content usage terminal 2, and is not performed when the acquisition request information from the content usage terminal 2 does not include the usage constraint information. . In the present embodiment, as the privilege granting process, the management server 3 changes the content of the usage restriction information regarding the related content data to be transmitted according to the content of the usage restriction information transmitted from the content usage terminal 2. Specifically, the management server 3 determines the privilege process based on the correspondence shown in the related content table.

The following are specific examples of the privilege granting process in this embodiment. For example, the usage restriction number indicated by the usage restriction information regarding the related content data is changed according to the usage restriction number indicated by the usage restriction information regarding the received content data (content data indicated by the reception content identifier). More specifically, when the usage restriction number indicated by the usage restriction information on the received content data is 1 to 5, the usage restriction number indicated by the usage restriction information on the related content data is set to 5. Further, when the number of use restrictions indicated by the use limit information regarding the received content data is 6 to 10, the number of use limits indicated by the use restriction information regarding the related content data is set to 3 times. As described above, as a specific example of the privilege granting process, when the number of times of use indicated by the use restriction information about the received content data (the number of times the received content data can be used) is small, the use restriction information about the related content data is obtained. It is conceivable to set a relatively large number of times of use limitation indicated by. this is,
This is because if the number of times of use indicated by the use restriction information regarding the received content data is small, it is considered that the number of times of using the content data is large, and thus the number of times of using the related content data is expected to be large. If the total number of uses up to the present is recorded as the number of uses information, according to the total number of uses,
The number of times of usage restriction indicated by the usage restriction information regarding the related content data may be changed.

Further, as another specific example of the privilege granting process in the present embodiment, it is possible to increase the usage restriction number of the usage restriction information of the related content data in exchange for the usage restriction frequency of the usage restriction information of the received content data. Conceivable. More specifically, the usage restriction number indicated by the usage restriction information regarding the received content data is three times, and the usage restriction number indicated by the usage restriction information regarding the related content data is increased by one from the predetermined number (see FIG. 16). . In this case, the management server 3 transmits the usage constraint information on the related content data and the usage constraint information on the received content data to the content usage terminal 2. Here, the usage restriction information on the received content data is the number of times that is three times less than the usage restriction number when received from the content usage terminal 2,
It is transmitted to the content use terminal 2. As described above, as a specific example of the privilege granting process, it is conceivable to increase the number of times the related content data is used in exchange for the number of times the received content data is used. by this,
The user can increase the number of times of use of newly acquired content (related content) having a high possibility of use, instead of the number of times of use of old content (reception content) having a low possibility of use. Therefore, use of the related content can be promoted by the privilege granting process.

After the privilege granting process in step S604, the management server 3 performs a sending process (step S60).
5). That is, the management server 3 includes the encrypted content data that is the content data identified in step S603, the content identifier (related content identifier) corresponding to the content data, and the usage restriction information corresponding to the content data. And key information for decrypting the content data are transmitted to the content use terminal 2. The usage restriction information and key information to be transmitted are determined based on the related content table shown in FIG. For example, the content identifier received by the management server 3 is “ABC_MAGAZINE_010101”
If so, in step S603, the related content data is specified as the related content data indicated by “ABC_MAGAZINE_010102”. Therefore, in step S605, the content identifier is “ABC_MAGAZINE_010.
The column of "102" is referenced to determine the corresponding usage restriction information and key information. The management server 3 determines in step S
According to the privilege granting process in 604, if necessary, the content of the usage restriction information received from the content usage terminal 2 is transmitted to the content usage terminal 2. This is the end of the process of the management server 3 in the third operation example.

Returning to the description of FIG. 14, the content use terminal 2 receives from the management server 3 the content data relating to the acquisition request (related content data), the content identifier corresponding to the content data, the usage restriction information and the key information. It is received (step S502). Then, the content use terminal 2 records the received information in the memory card 1 (step S503). Here, the content use terminal 2 records at least the use restriction information, the content identifier, and the key information in the protected area. In the present embodiment, the content use terminal 2 records the content data as a content file in the public area, and records the usage restriction information, the content identifier, and the key information in the protected area. When the usage restriction information transmitted from the content usage terminal 2 to the management server 3 is changed and transmitted as the privilege granting process from the management server 3, the content usage terminal 2 determines that the usage restriction on the memory card 1 is concerned. Update the information content. This is the end of the description of the processing in the content management system in the third operation example.

In this operation example, acquisition request information including the content identifier of the content data related to the content data related to the acquisition request is transmitted as the acquisition request. However, in other embodiments, the acquisition request information is acquired. The acquisition request information including the content identifier of the requested content data itself may be transmitted. In this case, the acquisition request distinguishes the acquisition request for acquiring the content data related to the content data indicated by the content identifier to be transmitted from the acquisition request for acquiring the content data indicated by the content identifier to be transmitted. There is a need. Therefore, the content use terminal 2 needs to include the information for identifying the above two acquisition requests in the acquisition request information and transmit it. In addition to the related content table, the management server 3 needs to hold a table that associates the content identifier with the content data indicated by the content identifier.

In the first embodiment, the usage restriction information recorded in the protected area 13 of the memory card 1 includes the usage count information, usage time information and usage date / time information. In the above embodiment, the use restriction information is not limited to the above. For example, the usage restriction information may be expressed by converting the usage amount into points. Further, the usage restriction information does not necessarily have to include all the above three pieces of information, and may include any one or two. Further, the protection information may include usage restriction information and a check value for checking whether the content identifier has been tampered with. The check value may be in a format corresponding to the usage restriction information and the content identifier, and may be stored in a file different from the protection information file 131.

In the first embodiment, the usage restriction information (the usage count information, the usage time information and the usage date / time information) is a value indicating a predetermined usage restriction condition and the total usage up to the present. And information indicating the value. For example, the number-of-uses information is information including a predetermined number of times of use and a total number of times of use up to the present. Here, in another embodiment, the usage restriction information may be information indicating only a condition for using the content data. For example, the usage count information may be information indicating the number of times the content data can be used. In this case, for example, the usage count information indicates that the content data can be used two more times. Then, when the content data is used, the content use terminal updates the use count information recorded in the memory card. Further, the usage restriction update information may have the same format as the usage restriction information. That is, the usage restriction update information may be information indicating a condition for using the content data. At this time, the content use terminal 2
The usage restriction information recorded in the protected area of the memory card 1 is updated so that the conditions are the same as the conditions indicated by the usage restriction update information transmitted from the management server 3. For example, when the usage constraint update information indicates that the content data can be used 10 times, the content usage terminal receiving the usage constraint update information uses the content recorded in the protected area of the memory card 1. The restriction information is updated to the content indicating that the content data can be used 10 more times. As described above, the usage restriction information and the usage restriction update information may have the same format.

In the first embodiment, the memory card 1 has the public area 12 and the protected area 13. However, in other embodiments, the memory card 1 has only the protected area 13. May be. In this case, all files will be placed in the protected area 13. Further, although the memory card 1 is used as the information recording medium in the first embodiment, it may be a disk, tape, or other information recording medium.

Further, in the first embodiment, the management server 3 may perform the billing process in response to the usage request and the acquisition request for the content data. That is, the management server 3 transmits the usage constraint update information and the usage constraint information to the content use terminal 2 in response to the usage request and the acquisition request, but charges according to the transmitted usage constraint update information and the usage constraint information. You may go. More specifically, the charging process may be performed in the transmission processing of the usage restriction information in step S204 shown in FIG. 9 or the transmission processing of the content or the like in step S605 shown in FIG. For example, when determining the usage constraint update information in step S203, the user specified in step S202 may be charged according to the content of the usage constraint update information determined in step S203. Also,
The timing of the billing process is not limited to the timing of the transmission process, and may be performed according to, for example, the process of determining the usage restriction information in step S203. Furthermore, the management server 3
As the privilege granting process in the third operation example, the process may be performed such that the billing amount is changed according to the usage restriction information transmitted from the content usage terminal 2. For example, the charge amount may be reduced (the discount amount may be increased) as the number of times of use restriction indicated in the use restriction information decreases.

Next, another example of use of the content management system will be described as the second embodiment of the present invention. The second embodiment provides a content management system according to the present invention,
This is a form used for a door locking system in an accommodation facility such as a hotel. FIG. 17 is a diagram conceptually showing the structure of the content management system according to the second embodiment. In addition,
The present embodiment can be realized by using each component of the content management system according to the first embodiment. Therefore, the same components as those of the content management system according to the first embodiment are designated by the same reference numerals. The content management system includes a memory card 1 which is a door card key and a content use terminal 2 which is a door locking device.
And a management server 3 that manages the door locking device.

When the memory card 1 which is a card key is attached to the content use terminal 2 which is a door locking device,
Mutual authentication is performed between the memory card 1 and the content use terminal 2. Through such mutual authentication, the content use terminal 2 can access the protected area of the memory card 1. Here, in the public area of the memory card, a character string for unlocking the door is recorded as content data. As the character string, a different character string is set for each door of each room of the accommodation facility. That is, the door of each room of the accommodation facility is set to be unlocked by a different character string. In the protected area, conditions for using the character string are recorded as usage restriction information. Here, in the present embodiment,
It is assumed that the date and time (period) in which the character string can be used is recorded as the use restriction information. More specifically, the usage restriction information indicates the period during which the user (guest) can stay. A content identifier for identifying content data is recorded in the protected area.

After mutual authentication, the content use terminal 2
The usage restriction information recorded in the protected area is read. Further, the content use terminal 2 determines whether or not the content data (character string for unlocking the door) can be used based on the read use restriction information. Specifically, the content use terminal 2 determines whether or not the character string for unlocking the door can be used from the use restriction date and time indicated as the use restriction information and the current date and time. To do. In the present embodiment, the availability of the content data means that the guest can use the room. On the other hand, the unavailable content data means that the guest cannot use the room. For example, if the scheduled stay date has been exceeded or the check-out time has been exceeded, the guest cannot use the room because the current date and time is not included in the period of the use restriction date and time.

If the content data is available as a result of the determination, the content use terminal 2 unlocks the door using the character string. On the other hand, as a result of the judgment,
If the content data is not available, the content use terminal 2 transmits the use request information of the content data to the management server 3. This usage request information includes
The content identifier recorded in the protected area is included. The management server 3 determines whether or not to send the usage restriction update information in response to the usage request from the content usage terminal 2. In the present embodiment, the determination process is to determine whether the guest can extend the stay (extend). For example, the management server 3 retrieves the reservation status of the room to which the usage request information is transmitted from the accommodation reservation database. As a result of the search, if the room to which the usage request information has been transmitted is a vacant room, it is determined to transmit the usage restriction update information. Conversely, if there is a reservation in the room to which the usage request information has been transmitted, it is determined that the usage restriction update information will not be transmitted. As a result of the determination, when the usage constraint update information is transmitted to the content usage terminal 2, the content usage terminal updates the usage constraint information of the memory card 1 according to the usage constraint update information. Furthermore, the content use terminal 2
Reads out a character string for unlocking the door from the memory card 1 and unlocks the door using the character string. As described above, the content management system according to the present invention can also be applied to the door locking system in the accommodation facility.

As described above, according to the present invention, it is possible for the content supplier side to use the content by determining whether or not the content data is available from the use restriction information recorded on the recording medium. (EN) Provided is a content management system capable of more detailed usage restrictions.

In the present invention, the content data is encrypted, and the key information for decrypting the content data is recorded in the protected area. Therefore, the content use terminal does not need to hold the information (key information and use restriction information) necessary to use the content, and need not acquire the key information each time the content is used. Therefore, when using the content data previously used in another terminal, the content can be easily used. That is, as in the conventional method, when the terminal acquires the key information from the management server, when the content data is used in another terminal, the terminal (when the key is held in another terminal used by the user You also have to get new key information from the server. On the other hand, according to the present invention, the content use terminal does not need to communicate with the management server as long as the condition of the use restriction information is satisfied. Therefore, it is possible to simplify the processing when the content recorded on the recording medium is used by a plurality of devices.

[Brief description of drawings]

FIG. 1 is a block diagram showing a configuration of a content management system according to a first embodiment of the present invention.

FIG. 2 is a diagram showing a structure of files and directories recorded in the memory card 1 shown in FIG.

FIG. 3 is a block diagram showing a hardware configuration of a content use terminal 2 shown in FIG.

FIG. 4 is a block diagram showing a functional configuration of the content use terminal 2 shown in FIG.

FIG. 5 is a flowchart showing a processing flow of the content use terminal 2 in the first operation example.

FIG. 6 is a flowchart showing details of step S105 shown in FIG.

7 is a block diagram showing a functional configuration of a management server 3 shown in FIG.

FIG. 8 is a diagram showing a usage restriction update table held in the management server 3 according to the first embodiment.

FIG. 9 is a flowchart showing a processing flow of the management server 3 in the first operation example.

FIG. 10 is a diagram showing an example of a usage restriction update table according to another embodiment.

FIG. 11 is a flowchart showing a processing flow of the management server 3 in the second operation example.

FIG. 12 is a diagram showing an example of a destination terminal table held by the management server 3 in the second operation example.

FIG. 13 is a content use terminal 2 in the second operation example.
3 is a flowchart showing the flow of the processing of FIG.

FIG. 14 is a content use terminal 2 in the third operation example.
3 is a flowchart showing the flow of the processing of FIG.

FIG. 15 is a flowchart showing a processing flow of the management server 3 in the third operation example.

FIG. 16 is a diagram showing an example of a related content table held in the management server 3 in the third operation example.

FIG. 17 is a diagram conceptually showing the structure of the content management system according to the second embodiment.

FIG. 18 is a block diagram showing a configuration of a conventional content supply system.

[Explanation of symbols]

1 ... Memory card 2 ... Content usage terminal 3 ... Management server 11 ... Media side authentication section 12 ... Public area 13 ... Protected area 21 ... Terminal side authentication unit 22 ... Content Usage Processing Unit 23 ... Input section 24 ... Display 221 ... Usage determination unit 222 ... Content decryption unit 223 ... Content execution unit 224 ... Current date and time acquisition unit 225 ... Usage restriction information update unit 31 ... Information processing unit 32 ... Content data storage unit 33 ... Management table storage unit

   ─────────────────────────────────────────────────── ─── Continued front page    (72) Inventor Naohiko Noguchi             1006 Kadoma, Kadoma-shi, Osaka Matsushita Electric             Sangyo Co., Ltd. (72) Inventor Mitsuhiro Sato             1006 Kadoma, Kadoma-shi, Osaka Matsushita Electric             Sangyo Co., Ltd. (72) Inventor Takashi Shimoshima             1006 Kadoma, Kadoma-shi, Osaka Matsushita Electric             Sangyo Co., Ltd. F term (reference) 5B017 AA03 AA06 BA07 BB09 BB10                       CA09 CA16                 5B065 BA10 CC08 PA04 PA16 ZA07                 5B085 AE01 AE29 BA06 BG02 BG03                       BG04 BG07                 5J104 AA07 KA02 NA27 NA38 NA41

Claims (14)

[Claims] 1. A content management system in which content data recorded on a portable recording medium is used by a content use terminal, the content use terminal, a recording medium detachable from the content use terminal, and the content. A recording medium that includes a management server that can communicate with a usage terminal; the recording medium includes a content data recording unit that records encrypted content data; a medium-side authentication unit that performs authentication between the content usage terminal; Protection information including use restriction information indicating conditions for using the encrypted content data and key information for decrypting the encrypted content data,
And a protected area recorded in a state in which reading from the outside is restricted, wherein the content use terminal cooperates with the medium side authentication section, and performs a terminal side authentication section that performs mutual authentication with the recording medium. A protection information reading unit that reads the protection information from a protection area of the recording medium only when mutual authentication with the recording medium is successful in the terminal-side authentication unit; and a protection read by the protection information reading unit. A usage determination unit that determines whether or not the content data recorded on the recording medium is available based on usage restriction information included in the information, and content data recorded on the recording medium by the usage determination unit is available If it is determined that the data is encrypted and recorded on the recording medium using the key information included in the protection information read by the protection information reading unit. The management server includes a content decryption unit that decrypts the content data, and a content execution unit that executes the content data decrypted by the content decryption unit, wherein the management server has a usage constraint for updating the usage constraint information. The update information is transmitted to the content use terminal, and the terminal side authentication unit performs mutual authentication with the recording medium when the use restriction update information is transmitted from the management server, and uses the content. The terminal uses the content recorded in the protected area of the recording medium only when mutual authentication with the recording medium is successful in the terminal side authentication unit according to the use restriction update information transmitted from the management server. The content management system further comprising an update unit that updates the restriction information. 2. When the content use terminal determines that the content data recorded on the recording medium is unavailable, the content use terminal indicates a use request of the content data determined to be unavailable. The management server further includes a usage request unit that sends request information to the management server, and the management server receives the usage request information from the usage request unit of the content usage terminal. The usage restriction update information about the content data related to the usage request information is transmitted to the content usage terminal, and the content decoding unit updates the usage restriction information recorded in the protected area by the updating unit. The content according to claim 1, wherein the content data relating to the updated usage restriction information is decrypted accordingly. Management systems. 3. The protection information further includes a content identifier for identifying content data recorded on the recording medium, and the usage request unit, as the usage request, includes the content data related to the usage request. The usage request information including the content identifier shown is transmitted to the management server, and the management server sends the usage restriction update information regarding the content data indicated by the content identifier sent from the usage request unit of the content usage terminal. The content management system according to claim 2, wherein the content management system transmits the content to a content use terminal. 4. The use restriction update information is information indicating a condition for using the content data, and the update unit has the same condition as the condition indicated by the use restriction update information transmitted from the management server. So that
The content management system according to claim 1, wherein the usage restriction information recorded in the protected area of the recording medium is updated. 5. The usage restriction update information is information indicating a change amount before and after updating when updating the usage restriction information recorded in the recording medium, and the update unit is transmitted from the management server. The content management system according to claim 1, wherein the usage restriction information recorded in the protected area of the recording medium is updated based on the amount of change indicated by the incoming usage restriction update information. 6. The content use terminal, wherein the use restriction update information storage section for storing the use restriction update information transmitted from the management server, and the protection information recorded on the recording medium include the usage restriction information. Use for determining whether or not there is usage constraint information corresponding to the usage constraint update information stored in the restriction update information storage unit only when mutual authentication with the recording medium is successful in the terminal-side authentication unit A limit information determination unit is further provided, and when the recording medium is newly mounted, the terminal-side authentication unit performs mutual authentication with the newly mounted recording medium, and the updating unit uses the usage information. If the usage constraint information determining unit determines that there is usage constraint information corresponding to the usage constraint update information stored in the constraint update information storage unit, the usage constraint information is stored in the usage constraint update information storage unit. According use restriction update information are, updates the usage restriction information recorded on the recording medium, the content management system of claim 1. 7. The content use terminal, when the usage restriction information is updated by the updating unit, discards the usage restriction update information corresponding to the updated usage restriction information from the usage restriction update information storage unit. The content management system according to claim 6, further comprising a discarding unit. 8. The management server transmits, together with the usage constraint update information, updatable period information indicating a period during which the usage constraint information can be updated by the usage constraint update information, to the content usage terminal, The usage restriction update information storage section further stores updatable period information transmitted from the management server, and the content use terminal corresponds to the usage restriction update information stored in the usage restriction update information storage section. When the usage restriction information determination unit determines that there is usage restriction information, the usage restriction update information recorded in the recording medium is based on the updatable period information stored in the usage restriction update information storage unit. Further comprising an update determination unit that determines whether or not to update the usage restriction information. Only when the usage restriction information recorded on the recording medium is updated, and when the discarding unit determines that the update determining unit does not update the usage restriction information, The corresponding usage constraint update information and updatable period information are discarded from the usage constraint update information storage unit,
The content management system according to claim 7. 9. The content use terminal, an acquisition request section that transmits acquisition request information indicating an acquisition request for requesting acquisition of content data to the management server, and the recording medium in the terminal-side authentication section. And a recording unit that records the information transmitted from the management server according to the acquisition request information transmitted from the acquisition request unit only in the case where mutual authentication is successful between the recording unit and the recording medium, The management server decrypts the encrypted content data that is the content data related to the acquisition request information transmitted from the acquisition request unit of the content using terminal, the usage restriction information regarding the content data, and the content data. Key information for encryption, and the recording unit is transmitted from the management server. The content management system according to claim 1, wherein at least usage restriction information and key information among the received information are recorded in the protected area. 10. A content identifier for identifying a content recorded on the recording medium is further recorded in the protected area, and the acquisition request unit is content data recorded on the recording medium. Information including a content identifier recorded in the recording medium is transmitted as acquisition request information when acquiring the content data related to the, and the management server indicates by the content identifier transmitted from the acquisition request unit. Transmitted to the content use terminal is encrypted content data that is related to the content data to be reproduced, usage restriction information about the content data, and key information for decrypting the content data. The content management system according to claim 9. 11. The acquisition request unit transmits, in addition to the content identifier, usage restriction information corresponding to content data indicated by the content identifier to the management server, and the management server is configured to use the content usage terminal. 11. The content of the usage constraint information transmitted to the device is changed according to the content of the usage constraint information transmitted from the acquisition request unit.
Content management system described in. 12. The use restriction information may use limit number information indicating the number of times content data recorded on the recording medium can be used, and content data recorded on the recording medium. At least one of time limit information indicating a possible time period and time limit information indicating a date and time when the content data recorded on the recording medium can be used is included. The content management system according to 1. 13. A portable information recording medium, which is detachable from a content using terminal that uses content data, between a content data recording section recording encrypted content data, and the content using terminal. As a part of the mutual authentication process performed, a medium-side authentication unit that authenticates with the content usage terminal, a content identifier for identifying content data, and a content identifier for using the encrypted content data A protection area in which protection information including usage restriction information indicating a condition and key information for decrypting the encrypted content data is recorded in a state in which reading from the outside is restricted; The area is defined by the content use terminal only when the mutual authentication process performed with the content use terminal is successful. Characterized in that it is possible up only, the information recording medium. 14. The use restriction information includes limit number information indicating the number of times the content data can be used, time limit information indicating a time when the content data can be used, and the content data using 14. At least one of the restricted date and time information indicating the possible date and time is included.
The information recording medium described in.