JP2003203005A - Information processing system, information processing device and method, recording medium, and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To attain easy designation of disclosed sections and undisclosed sections in an electronic document. <P>SOLUTION: When a document data to be protected is acquired in a step S1 and the document is not prepared in a prescribed format (XML form), the document is converted into the prescribed format. In steps S2 to S4, a protective area of the document data is defined, and the type of protection and disclosing conditions are defined in the respective protection areas. In a step S5, the protection area is extracted and the extracted protection area is classified into protection files for each protection group. In a step S6, the protection files classified for each protection group is enciphered. In a step S7, files having unprotected areas other than the enciphered protection file and protected areas are enciphered to be capsuled, which is handled as one protected data. <P>COPYRIGHT: (C)2003,JPO

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an information processing system, an information processing apparatus and method, a recording medium, and a program, and particularly to an information processing system and information processing suitable for use in restricting use of data. The present invention relates to an apparatus and method, a recording medium, and a program.

[0002]

2. Description of the Related Art Conventionally, as a method of restricting the use of an electronic document existing on a network such as the Internet, for example, an administrator of the electronic document gives a password to the user in advance and acquires the password. Only users can use electronic documents.

In electronic commerce, the use of electronic documents is restricted by combining encryption and payment for the electronic documents. For example, only the title part of an electronic document is made public, and the text is encrypted. Then, only the user who has paid the price can read the encrypted part.

[0004]

By the way, in the case of an electronic document in which encryption of an electronic document and payment settlement are combined as in the above-mentioned electronic commerce, the user grasps the encrypted portion. Therefore, there is a problem that it is difficult to judge whether or not it is worth paying for the electronic document.

Further, by designating a part to be disclosed and a part (private part) whose use is to be restricted, the original electronic document is dispersed as an entity although it is continuous. Therefore, on the side of providing the electronic document, there is a problem that the setting for the public portion and the non-public portion is complicated and the operation becomes complicated.

Furthermore, there is a problem that it is difficult for the user to use the provided electronic document as one continuous document because the provided electronic documents are dispersed.

The present invention has been made in view of such a situation, and it is possible to easily specify a public portion and a non-public portion in an electronic document while maintaining the continuity of the electronic document, and to protect the electronic document. It allows the documents to be used as a series.

[0008]

In an information processing system according to the present invention, an information storage device acquires an acquisition unit for acquiring data in a predetermined file format, and a setting unit for setting a protected area of the data acquired by the acquisition unit. An extracting means for extracting data in the protected area set by the setting means; a first encrypting means for encrypting the data in the protected area extracted by the extracting means with a first encryption key; Second encryption means for encrypting data in the protected area encrypted by the encryption means and data in the unprotected area other than the protected area with the second encryption key to provide protected data, and second encryption Information processing apparatus, comprising: protection data encrypted by the means, a first decryption key for decrypting the protection data, and a storage means for storing a second decryption key for decrypting the data in the protected area. But information storage A first receiving unit that requests the device to deliver the data and receives the data and the first decryption key delivered based on the request, and the first receiving unit receives the data received by the first receiving unit. When the use of the display control means for decrypting with the decryption key for controlling the display and the use of the protected area of the data whose display is controlled by the display control means is instructed, the information storage device is decrypted with the protected area. Requesting transmission of the second decryption key for receiving the second decryption key, and receiving the second decryption key distributed based on the request, and the second receiving means received by the second receiving means. And a decryption unit that decrypts the protected area using the decryption key.

In the information processing system of the present invention, an information storage device sets a protection area for data in a predetermined file format, extracts data in the set protection area,
The extracted data in the protected area is encrypted with the first encryption key, and the encrypted data in the protected area and the encrypted data in the unprotected area are encrypted with the second encryption key as protected data, which is then encrypted. The protected data, the first decryption key for decrypting the protected data, and the second decryption key for decrypting the data in the protected area are accumulated, and the information processing device transmits the data to the information storage device. , The data and the first decryption key delivered based on the request are received, the received data is decrypted and displayed, and the use of the protected area of the data is instructed, The information storage device is requested to transmit the second decryption key for decrypting the protected area, the second decryption key distributed based on the request is received, and the received second decryption key is received. The protected area is decrypted using the key

A first information processing apparatus of the present invention comprises an acquisition means for acquiring data of a predetermined file format, a first setting means for setting a protected area of the data acquired by the acquisition means, and a first setting means. Extraction means for extracting data in the protected area set by the setting means, first encryption means for encrypting data in the protected area extracted by the extraction means with a first encryption key, and first encryption The second encryption means for encrypting the protected area data encrypted by the means and the unprotected area data other than the protected area with the second encryption key to form the protected data, and the second encrypting means. The present invention is characterized by comprising encrypted protection data, a first decryption key for decrypting the protection data, and a storage means for storing a second decryption key for decrypting the data in the protected area.

When the transmission of the protected data is requested from another device, there is further provided a transmitting device for reading the corresponding protected data and the first decryption key accumulated by the accumulating device and transmitting them to the other device. be able to.

The second setting means for setting the disclosure condition for the protection area and the second setting means when the use of the data of the protection area included in the protection data is requested by another device. It is possible to further provide a payment means for performing payment payment to another device based on the disclosed condition, and the transmission means is stored in the storage means after the payment payment is made by the payment means. The second decryption key for decrypting the protected area can be read and transmitted to another device.

A second setting means for setting the protection type for the protected area may be further provided.

The predetermined file format may be a file format capable of designating an area.

A first information processing method according to the present invention is directed to an acquisition control step for controlling acquisition of data in a predetermined file format, and a first protection area for data whose acquisition is controlled by the processing of the acquisition control step. Setting step, first
An extraction step of extracting data of the protected area set by the processing of the setting step, and a first encryption step of encrypting the data of the protected area extracted by the processing of the extraction step with a first encryption key, A second encryption step of encrypting the data of the protected area encrypted by the processing of the first encryption step and the data of the non-protected area other than the protected area with the second encryption key to obtain protected data; The storage of the protected data encrypted by the processing of the second encryption step, the first decryption key for decrypting the protected data, and the second decryption key for decrypting the data in the protected area is controlled. And a storage control step.

The program recorded on the first recording medium of the present invention is an acquisition control step for controlling acquisition of data in a predetermined file format, and a data protection area whose acquisition is controlled by the processing of the acquisition control step. First to set
Setting step, and an extraction step of extracting data of the protected area set by the processing of the first setting step,
A first encryption step of encrypting data of the protected area extracted by the processing of the extraction step with a first encryption key;
A second encryption step of encrypting the data of the protected area encrypted by the processing of the first encryption step and the data of the non-protected area other than the protected area with the second encryption key to obtain protected data; The storage of the protected data encrypted by the processing of the second encryption step, the first decryption key for decrypting the protected data, and the second decryption key for decrypting the data in the protected area is controlled. And a storage control step.

A first program of the present invention comprises an acquisition control step for controlling acquisition of data of a predetermined file format, and a first setting for setting a protected area of data whose acquisition is controlled by the processing of the acquisition control step. Step and first
An extraction step of extracting data of the protected area set by the processing of the setting step, and a first encryption step of encrypting the data of the protected area extracted by the processing of the extraction step with a first encryption key, A second encryption step of encrypting the data of the protected area encrypted by the processing of the first encryption step and the data of the non-protected area other than the protected area with the second encryption key to obtain protected data; The storage of the protected data encrypted by the processing of the second encryption step, the first decryption key for decrypting the protected data, and the second decryption key for decrypting the data in the protected area is controlled. And causing the computer to execute the storage control step.

A first information processing apparatus and method of the present invention,
In the program, the protection area of the acquired data in the predetermined file format is set, the data of the set protection area is extracted, and the data of the extracted protection area is encrypted with the first encryption key, The encrypted protected area data and the unprotected area data are encrypted with the second encryption key to be protected data, and the encrypted protected data, the first decryption key for decrypting the protected data, and , A second decryption key for decrypting the data in the protected area is stored.

The second information processing apparatus of the present invention requests the distribution of data to another apparatus and acquires the data distributed based on the request, and the first acquisition means.
If there is a protected area in the display control means that controls the display of the data acquired by the acquisition means and the data whose display is controlled by the display control means, and if the use of the protected area is instructed, another device is displayed. On the other hand, a second acquisition unit that requests the transmission of the decryption key for decrypting the protected area, and acquires the decryption key that is distributed based on the request, and the decryption key acquired by the second acquisition unit. And a decryption unit for decrypting the protected area.

A second information processing method of the present invention includes a first acquisition control step of requesting data distribution to another device and controlling acquisition of data distributed based on the request. There is a protected area in the display control step that controls the display of the data whose acquisition is controlled by the processing of the first acquisition control step and the data whose display is controlled by the processing of the display control step. When instructed, a second acquisition control step of requesting the transmission of the decryption key for decrypting the protected area to another device and controlling the acquisition of the decryption key distributed based on the request. , And a decryption step of decrypting the protected area using the decryption key whose acquisition is controlled by the process of the second acquisition control step.

The program recorded on the second recording medium of the present invention requests distribution of data to another device and controls acquisition of the distributed data based on the request. An acquisition control step, a display control step for controlling the display of data whose acquisition is controlled by the processing of the first acquisition control step, and a data whose display is controlled by the processing of the display control step have a protected area,
If you are instructed to use the protected area,
Requested to transmit the decryption key for decrypting the protected area, and obtained by the processing of the second acquisition control step for controlling the acquisition of the decryption key distributed based on the request and the second acquisition control step. And a decryption step of decrypting the protected area using the controlled decryption key.

A second program of the present invention requests the distribution of data to another device, and controls the acquisition of the data distributed according to the request, the first acquisition control step and the first acquisition control step. A display control step for controlling the display of the data whose acquisition is controlled by the processing of the acquisition control step of
When a protected area exists in the data whose display is controlled by the processing of the display control step and the use of the protected area is instructed, request the other device to send the decryption key for decrypting the protected area. And a second acquisition control step of controlling acquisition of the decryption key distributed based on the request,
The computer is made to execute a decryption step of decrypting the protected area by using the decryption key whose acquisition is controlled by the processing of the second acquisition control step.

A second information processing apparatus and method of the present invention,
In addition, the program requests distribution of data to another device, acquires the data distributed based on the request, displays the acquired data, and instructs to use the protected area of the data. In this case, the other device is requested to send the decryption key for decrypting the protected area, the decryption key distributed based on the request is obtained, and the obtained decryption key is used to protect the decryption key. The area is decoded.

[0024]

BEST MODE FOR CARRYING OUT THE INVENTION Embodiments of the present invention will be described below with reference to the drawings.

FIG. 1 is a diagram showing a configuration example of an embodiment of a data protection system according to the present invention. In this system, in the network 3 such as the Internet,
The document protection setting device 1, the document storage device 2, and the document use devices 4-1 to 4-N (hereinafter, document use terminal device 4-1).
When it is not necessary to individually distinguish 4 to 4-N, the document utilization terminal device 4 is simply connected.

The document protection setting device 1 edits data such as an electronic document or acquires the edited data from another device (not shown). The document protection setting apparatus 1 performs a predetermined process (for example, a data format conversion, a protected part extraction, and a data encapsulation) in order to protect the data, and the predetermined part is protected (hereinafter, protected data). (Referred to as data) is transmitted to the document storage device 2 via the network 3 and stored therein.

The document storage device 2 receives and stores the protected data transmitted via the network 3. The document storage device 2 is also accessed from the document use terminal device 4 via the network 3, and upon receiving a distribution request for predetermined data, reads the corresponding protected data and distributes (provides) it via the network 3. When the document storage device 2 further receives a key distribution request for reading the protected data from the document use terminal device 4, the document storage device 2 pays a payment to the document use terminal device 4, and then reads the protected data. Reads the key and distributes (provides) via network 3.
To do.

The document use terminal device 4 requests the document storage device 2 via the network 3 to deliver desired data. The document use terminal device 4 is also connected to the network 3
If the data delivered via the protected data is protected data, payment for the payment is requested to request the distribution of the key for reading the protected data. Then, the document use terminal device 4 that has received the key can read the protected data.

The document utilization terminal device 4 is, for example, a personal computer or PDA (Personal Digital Assistant).
t) or electronic devices connectable to the network 3 such as a mobile phone.

The network 3 may be a public line network, a local area network, a network such as the Internet, or a wired or wireless network such as digital satellite broadcasting.

In FIG. 1, the document storage device 2 acquires and stores the protection data transmitted from the document protection setting device 1 via the network 3, but it does not acquire it via the network 3. Of course, the storage method is not particularly limited. Further, the document protection setting device 1 and the document storage device 2 may be configured as one device so that the document protection setting device 1 stores the protected data and pays for the value.

FIG. 2 shows the document protection setting device 1 shown in FIG.
3 is a block diagram showing a configuration example of FIG.

The CPU (Central Processing Unit) 11 is an RO
A program stored in an M (Read Only Memory) 12 or a RAM (Random Access M) from the recording / playback unit 21.
Various processes are executed according to the program loaded in the emory) 13. The RAM 13 also appropriately stores data necessary for the CPU 11 to execute various processes.

The cipher creation unit 14 stores the data edited by the editing module 16 (the data that has been converted into a predetermined file format by the format conversion unit 31 and then extracted by the extraction unit 32 into the protected portion and the unprotected portion). The summary data created by the summary creating unit 15 is read out via the bus 17, and the protected part is encrypted and the data is encapsulated. The cipher creation unit 14 further generates a decryption key for decrypting the encapsulated protected data.

The summary creating section 15 has a protection level of "summary display" among the data edited by the editing module 16.
If specified (below), create a summary of that data. For example, in the case of text data, the first one line or one phrase is the summary. The method of creating the summary data can be arbitrarily defined.

The editing module 16 comprises a format converting section 31 and an extracting section 32.
Has not been converted into a predetermined format (a file format in which an area can be designated) recorded in the recording / reproducing unit 21 based on an instruction input by the user by operating the input unit 19. Data consisting of text, images, etc. is read out via the input / output interface 18 and the bus 17 and converted into a predetermined format. The extraction unit 16 records the data converted into a predetermined format by the format conversion unit 31 or records / records data based on the user's instruction input from the input unit 19.
The protected part and the unprotected part of the data recorded in the reproduction unit 21 in a predetermined format are extracted, and the protection level and the disclosure condition are specified for the protected part.

The CPU 11 to the editing module 16 are connected to each other via a bus 17. An input / output interface 18 is also connected to the bus 17.

The input / output interface 18 is a CRT (Cathode Ray) for inputting an operation command by a user, an input section 19 including buttons, switches, a keyboard, a mouse, a jog dial, etc. and an operation screen.
Tube, LCD (Liquid Crystal Display) and other displays, and an output unit 20 including a speaker,
A recording / reproducing unit 21 including a hard disk and a communication unit 22 including a modem and a terminal adapter are connected.

The recording / reproducing unit 21 records the optical disc 41, the magnetic disc 42, the magneto-optical disc 43, the semiconductor memory 44, or the like acquired from another device via the communication unit 22 or mounted in the drive 23. The data that is read from the medium and consists of text and images in various formats is recorded. The recording / reproducing unit 21 also records data, which is created by the user when the input unit 19 is operated, and which includes text and images. At this time, if the user creates the data in a file format in which the area can be designated, the format conversion processing by the format conversion unit 31 is not necessary. Recording / playback unit 2
Further, 1 stores the protected data which is created by the cipher creating unit 14 and is encapsulated, and the decryption key for decrypting the protected data.

The communication unit 22 performs communication processing with other devices via the network 3. For example, the CPU 11 causes the communication unit 22 to execute communication processing with the document storage device 2 and record / record
The protected data recorded in the reproduction unit 21 and the decryption key for decrypting the protected data are transmitted. The CPU 11 may delete the protected data transmitted to the document storage device 2 and the decryption key for decrypting the protected data from the recording / reproducing unit 21 as necessary.

A drive 23 is connected to the input / output interface 18 if necessary, and the magnetic disk 4
1, an optical disk 42, a magneto-optical disk 43, a semiconductor memory 44, or the like is mounted as appropriate, and a computer program read from the RAM 13 is stored in the RAM 13 as necessary.
Alternatively, it is installed in the recording / playback unit 21.

FIG. 3 is a block diagram showing a configuration example of the document storage device 2 shown in FIG. CPU5 shown in the figure
1 to RAM 53, recording / reproducing unit 57 and communication unit 5
Reference numeral 8 denotes the CPU 11 to R of the document protection setting apparatus 1 shown in FIG.
Since the AM 13 and the recording / reproducing unit 21 and the communication unit 22 have basically the same configuration, the description thereof will be appropriately omitted.

The CPU 51 requests the document protection setting apparatus 1 to deliver protected data and a decryption key via the bus 55, the input / output interface 56, the communication section 58, and the network 3, and the document protection setting apparatus 1 sends the request. The recording / reproducing unit 57 records the acquired protected data and the decryption key for reading the protected portion. Alternatively, the document protection setting device 1 can be used without requesting the distribution of the protected data and the decryption key.
The protected data and the decryption key transferred (provided) from are received and recorded in the recording / reproducing unit 57.

When the CPU 51 receives a data distribution request from the document using terminal device 4 via the network 3, the communication unit 58, the input / output interface 56 and the bus 55, the corresponding protected data from the recording / reproducing unit 57. Is read and delivered to the document using terminal device 4 via the communication unit 58 and the network 3.

When the CPU 51 further receives a request for distribution of a key for reading the protected portion from the document using terminal device 4, the CPU 51 causes the authentication / settlement section 54 to perform the authentication process and the payment settlement process for the document using terminal device 4. Let it run. CPU51
Based on the processing result notified from the authentication / settlement unit 54,
The decryption key for reading the protected portion is read from the recording / reproducing unit 57 and delivered to the document using terminal device 4 via the communication unit 58 and the network 3.

Under the control of the CPU 51, the authentication / settlement unit 54 executes the authentication process of the document using terminal device 4, and if the authentication is successful, the consideration settlement process is executed and the process completion is confirmed by the CPU 51.
To notify.

FIG. 4 shows the document use terminal device 4 shown in FIG.
3 is a block diagram showing a configuration example of FIG. CP shown in the figure
Since the U 71 to 73 and the input unit 77 to the communication unit 80 have basically the same configuration as the CPU 11 to the RAM 13 and the input unit 19 to the communication unit 22 of the document protection setting apparatus 1 shown in FIG. Description is omitted as appropriate.

The CPU 71 operates the bus 7 based on an instruction input by the user by operating the input section 77.
5, the document storage device 2 is requested to deliver predetermined data via the input / output interface 76, the communication unit 80, and the network 3, and the acquired data is output by the output unit 7.
8 Display. The CPU 71 also requests the distribution of the key for reading the protected part of the data based on the instruction from the user input from the input unit 77, and obtains the decryption key that is distributed after the payment for payment is made. And supplies it to the decoding unit 74.

Under the control of the CPU 71, the decryption unit 74 decrypts the protected (encrypted) portion of the data using the decryption key and displays it on the display of the output unit 78.

Next, an example of protected data applied in the present invention will be described. FIG. 5 shows an example in which an XML (eXtensible Markup Language) format is used as a method of designating a protected part.

<Protect package = "pp"> and </ pr shown in FIG.
The package name is "pp" in the range 91 surrounded by otect>.
It is shown that the document constituent unit (hereinafter, referred to as a file) is treated as one constituent unit. <protect g
In a range 92 surrounded by roup = "a"> and </ protect>, the protection condition for the protection group a is shown, and the data part 101 is protected by the protection group a. <pro
In the range 93 surrounded by tect group = "b"> and </ protect>, the protection condition for protection group b is shown.
The data section 102 is protected by the protection group b.

In a range 94 surrounded by <protect group = "b"> and </ protect>, the protection conditions for the protection group b are shown, and further, <protect group = "a"> and </ protect
In the range 95 surrounded by>, the protection condition for the protection group a is shown. That is, the range 94 has a nested structure in which the range 95 is specified, and the data portion 103 is protected by the protection group a and the contents thereof are protected by the protection group b, so that the two protection groups are protected. When the disclosure conditions of a and b are satisfied,
It has been shown that it can be used.

Hereinafter, in the present invention, the protected data is XM
I will explain the case of writing in L format, but this is a preferable example to have expandability and versatility,
The file format is not limited to this as long as the area can be specified.

In the above-mentioned protected data, not only one file can be treated as a constituent unit, but also two or more files can be treated as a constituent unit and a protected portion can be designated. FIG. 6 shows an example in which a protected portion is specified across two files.

Files 110-1 and 110 shown in FIG.
0-2 is an independent file, but the range 111 and the file 110 in the file 110-1 are
The range 113 in −2 indicates that the package name “pp” is treated as one structural unit. That is, since the package names are the same, the files 110-1 and 110-2 are treated as one structural unit.

In the range 112 of the file 110-1 and the range 114 of the file 110-2, the protection condition for the protection group a is shown, and the same disclosure condition is designated. Also, the range 11 of the file 110-2
5 shows the protection condition for the protection group b, and the disclosure condition different from the range 112 and the range 114 (protection group a) is designated.

Next, with reference to FIG. 7, an example of a protected document designated using the XML format will be described. Figure 7A shows the XM
An example of the protected data 121 described in the L format is shown in FIG.
B shows a display screen 131 which is a display example of a protected document.

Data part 122 in protected data 121
Describes unprotected text data and is displayed (disclosed) as a display area 132 on the display screen 131. <Img src = "ia"> in protected data 121
An image image (file name “ia”) is designated in the data portion 123 indicated by, and is displayed (disclosed) as an image 133 on the display screen 131. A protection condition for the protection group a is shown in a range 124 surrounded by <protect group = "a"> and </ protect> in the protection data 121, and the protection area 1 is displayed on the display screen 131.
The layout is displayed (protected) as 34.

Here, in the case of the layout display, only predetermined data corresponding to the number of characters of the protected portion is presented. For example, when the three characters “ABC” are protected, the protected area 134 is displayed with “***”, “####”, or the like, or is displayed as “3 characters”. In addition to the layout display, there are non-display or summary display (the details will be described later).

<Protect group in protected data 121
In the range 125 surrounded by "b"> and </ protect>, the protection condition for the protection group b is shown, and <a herf = "h
Data part 126 indicated by a "> ka </a> and <img src =" i
The data part 127 and the like indicated by b "> are protected by the protection group b. The data part 126 is specified with a hyperlink (link destination" ka ").
Specifies the image image (file name “ib”).
These are layout-displayed (protected) as a protected area 135 on the display screen 131. This protected area 13
Even if the hyperlink is designated in 5, the hyperlink is not displayed, and if the image image is designated to be displayed in a frame, it is displayed as a frame display 137.

Here, in the case of the frame display, only the frame line showing the size of the image is presented. In addition to the frame display, there are non-display or semi-disclosure (the details will be described later).

<a herf="ha"> k in protected data 121
A hyperlink (link destination “kb”) is specified in the data portion 128 indicated by a </a>, and even if the destination indicated by this link is protected, it is displayed as a portion 138 on the display screen 131. It is displayed (disclosed).

Next, referring to the flow chart of FIG.
The document protection process executed by the document protection setting device 1 will be described.

In step S1, the editing module 1
Reference numeral 6 denotes files 181-1 and 181-2 of the document data to be protected which are recorded in the recording / reproducing unit 21 (see FIG.
3) is acquired. For example, when the document data acquired from the recording / playback unit 21 is not created in a predetermined format (XML format), the format conversion unit 31 converts the document data into a predetermined format. The CPU 11 causes the display of the output unit 20 to display the document data acquired by the editing module 16 and converted into a predetermined format.
Thereby, for example, the display screen 131 as shown in FIG. 9A is displayed.

The creator of the protected data is the document consisting of the text and images displayed on the output unit 20 (FIG. 9A).
Referring to, the input unit 19 is used to set the area to be protected. For example, there is a method of designating an area by dragging with a mouse, or designating an area by inputting coordinates.

FIG. 9B shows a display example of the display screen 131 when the protection area is designated. In this example, the protection area 134 and the protection area 135 are designated.

In step S2, the editing module 1
When the user designates the protection area, the reference numeral 6 sets the protection area in the document data. If the user does not specify the protected area, the entire document is set as the protected area. Further, when a plurality of documents are acquired in the process of step S1, each is set as an independent protection area.

After designating the protection area of the document data, the creator uses the input unit 19 to select the protection type (protection level) of the protection area. For example, by placing the mouse cursor on the protected area 134 and further right clicking, the input window 141 as shown in FIG. 9C is displayed.
Is displayed.

In the input window 141 of FIG. 9C, a button 151-1 for setting "non-display", a button 151-2 for setting "layout display", and a type of protection of text data, and The button 151-3 for setting the "summary display" is displayed, and the button 152-1 for setting the "non-display", which is the type of protection of the image data, and the "frame display" are set. A button 152-2 for setting and a button 152-3 for setting “semi-disclosure” are displayed.

Here, referring to FIGS. 10 and 11, buttons 151-1 to 151-3 and button 152-.
A display example when 1 to 152-3 is selected will be described.

FIG. 10 shows buttons 151-1 to 151-.
FIG. 10A shows a display example when 3 is selected, and FIG.
Shows a typical display example when the text is not designated as the protected area.

For example, the button 151-1 is selected,
When the "non-display" protection type is specified, the text is hidden so that the content and the number of characters of the text are unknown as shown in FIG. 10B. Further, when the button 151-2 is selected and the protection type of "layout display" is designated, the display is such that the number of characters of the text can be understood as shown in FIG. 10C. Further, when the button 151-3 is selected and the protection type of “summary display” is designated,
A summary of the textual content is displayed, as shown in FIG. 10D.

FIG. 11 shows buttons 152-1 to 152-.
FIG. 11A shows a display example when 3 is selected, and FIG.
Shows a normal display example when an image is not designated as a protected area.

For example, the button 152-1 is selected,
When the "non-display" protection type is designated, as shown in FIG. 11B, the image is hidden so that the content or size of the image is unknown. Also, the button 152-2 is selected,
When the protection type of “frame display” is designated, only the frame line representing the size of the image is displayed as shown in FIG. 11C. Further, when the button 152-3 is selected and the protection type of “semi-disclosure” is designated, a half image is displayed as shown in FIG. 11D. As a semi-disclosure method,
Prepare an image filter such as a diagonal grid in advance and disclose the original image data combined with the image filter, or disclose the original image data with intentionally noise-free. There is a way.

Although not shown here, it is possible to set the type of protection of music data and the type of protection of other various data. For example, as a semi-disclosure method of music data, there is a method of disclosing the beginning part of the music or disclosing the music data having a lower sampling rate.

Then, the creator selects one of the buttons 151-1 to 151-3 when the protected area is text, and the buttons 152-1 to 151 when the protected area is an image.
52-3 is selected. Alternatively, a predetermined protection type (for example, hidden) is selected by default,
The button may be selected when changing to another protection type.

Returning to the description of FIG. 8, in step S3, the editing module 16 receives the selection of the protection type from the user and sets the protection type for each protected area in the document data. If the user does not specify the type of protection, the protected area is "hidden".
Set to. Further, the protection type is individually set in an independent continuous area.

As described above with reference to FIG. 9C, the creator designates one or more protection areas, further designates the protection type of each protection area, and then uses the input unit 19 to specify each protection area. Specify the disclosure conditions for the protected area.

Here, an example of the disclosure condition document specified using the XML format will be described with reference to FIG. Figure 1
2A shows an example of the disclosure condition data 161 for creating a window in XML format for requesting the usage permission range and its consideration to the user who tried to use the protected document, and FIG. 12B is a table of the disclosure condition document. An input window 171 is shown as an example.

<Protect p in disclosure condition data 161
In the range 162 surrounded by ermit = "a"> and </ protect>, the usage permission range and the consideration of the protection group a are set, and the corresponding value is set based on the input from the user. Is described. <P in disclosure condition data 161
In a range 163 surrounded by _notion> and </ p_notion>, a warning sentence to be displayed to the user who tries to use the protected document is described, and is displayed as a warning sentence 172 in the input window 171. Disclosure condition data 1
Range 1 surrounded by <p_range> and </ p_range> in 61
In 64, the consideration requested to the user who tries to use the protected document is specified, and the input window 171
Is displayed as a permission range 173.

<P_i n in the disclosure condition data 161
data part 165 indicated by ame = "view" price = "500yen">
Is specified as a consideration (500 yen) for the usage condition of "browsing", and the consideration for the usage condition of "printing" (500 yen) is indicated in the data portion 166 indicated by <p_i name = "print" price = "800yen">. 800 yen) is specified, <p_i name = "secondary use" price = "3
In the data portion 167 indicated by 000yen ">, the consideration (3000 yen) for the usage condition of" browsing "is specified. These are used when the user browses, prints, or makes secondary use in the input window 171. Selected button 174
Through 176.

As described above, the creator of the protected document can arbitrarily set the name of the item (use permitted range) and the price for the item.

<P_sig in the disclosure condition data 161
The date and time and the creator's name are specified in the data section 168 indicated by date = "2001/10/25" name = "ohto"/>, and the input window 171 displays a copyright in the display area 177. .

As described above, the creator can specify the disclosure condition of the protected document for each protection group.
Then, in step S4, the editing module 16
Receives the specification of the disclosure condition by the user and sets the disclosure condition for each protected area of the document data. Further, the disclosure condition of the protected area is set by treating a plurality of continuous areas as a group. Therefore, for example, when the permission range of “viewing” and the consideration of “500 yen” are set in a predetermined protection area in which the protection group a is set, all other protection areas set in the protection group a are The disclosure conditions apply.

In step S5, the extraction unit 32 extracts the protection area (including protection type and disclosure condition) set in the processing of steps S2 to S4. Specifically, as shown in FIG. 13, an unprotected file obtained by extracting a part other than the protected area set in the process of step S2 from the files 181-1 and 181-2 acquired in the process of step S1. 182-1 and 182-2 (hereinafter, when it is not necessary to individually distinguish the unprotected files 182-1 and 182-2, they are simply referred to as unprotected files 182)
And files 183-1 and 1 in which the protected area is extracted
83-2. Then, the files 183-1 and 183-2 extracted from the protected area portion are further shown in FIG.
As shown in, the corresponding portion is divided into protection files 201-1 and 201-2 for each protection group.

In FIG. 14, protected file 201-1
The data portion 211 indicated by <protect package = "pg" group = "a"> indicates a file in which the portion corresponding to the protection group a with the package name "pg" is extracted and recorded together, and is protected. <Protect package = "of file 201-2
The data part 221 indicated by pg "group =" b "> indicates a file in which the parts corresponding to the protection group b having the package name" pg "are extracted and collectively recorded.

<Protect gro in file 183-1
The data portion 191 indicated by up = "a" ref = "1"/> is a protection area included in the protection group a, and indicates that protection data exists at the reference position of "1". This data portion 191 is extracted, and <p
Range 21 surrounded by rotect data = "fa.p.1> and </ protect>"
2 and the content of the protected data is recorded in the data section 213. The file name recorded in the protected file 201-1 is the file name of the file 183-1 (f
ap) and "1" designated as the reference position are newly created. In this case, "File name +
Although named as "." + Reference position ", this is merely an example and may be unique information that can uniquely identify the protected portion.

<Protect gro in file 183-1
A range 192 surrounded by up = "a" ttype = "rayout" ref = "2"> and </ protect> is a protection area included in the protection group a, and the protection type is set to "layout display". Is
It is shown that the protected data exists at the reference position of "2". In a range 193 surrounded by <p> and </ p>, data that only the number of characters of protected data is known is described. In the data part 194 indicated by <p_img type = "frame" w = "10 h =" 10 "ref =" 3 ">, the protection type is" frame display ".
In the figure, the size of the frame is set to 10 × 10, and it is shown that the protected data exists at the reference position of “3”. This range 192 is extracted, and <p of the protected file 201-1 is
Range 21 surrounded by rotect data = "fa.p.2> and </ protect>"
4, and the content of the protected data is recorded in the data section 215.

<Protect gro in file 183-1
A range 195 surrounded by up = "b" ttype = "summary" ref = "4"/> and </ protect> is a protection area included in the protection group b, and the protection type is "summary display". Is set, "4"
It is shown that protected data exists at the reference position of. In a range 196 surrounded by <p> and </ p>, summary data is described. <p_img type = "half" w = "5 h =" 5 "
In the data part 197 indicated by ref = "5">, the protection type is "semi-disclosure", and the size of the frame is set to 5x5.
It is shown that the protected data exists at the reference position of "5". This range 195 is extracted and protected file 2
The data part 223 is indexed in the range 222 surrounded by <protect data = "fb.p.4> and </ protect> of 01-2.
The contents of the protected data are recorded in.

The description of the protected part (not shown) in the file 183-2 is extracted, and the protected file 201-1 is extracted.
The contents of the protected data are recorded in the data portion 217 by being indexed into the range 216 surrounded by <protect data = "fb.p.1> and </ protect>.

As described above, the files 183-1, 18
The part of the protection area included in the protection group a of 3-2 is
The portions of the protected area that are collectively recorded in the protected file 201-1 and are included in the protection group b of the files 183-1 and 183-2 are collectively recorded in the protected file 201-2.

Returning to the explanation of FIG. 8, in step S6, the cipher creation section 14 encrypts the protection area extracted as described above. That is, the protected file 201
-1,201-2 (hereinafter, protected file 201-
If it is not necessary to individually distinguish 1, 201-2, the protection file 201 will be referred to as the encryption key 202-1,
Each is encrypted in 202-2 (FIG. 14). At this time, as shown in FIG. 15A, the protected file 20
A decryption key 242 for decrypting 1 is generated.

In step S7, the cipher creation unit 14
Is treated as one piece of protected data 121 by collectively encrypting and encapsulating the protected file 201 and the non-protected file 182 that have been encrypted using the encryption key 202 in the process of step S6 with the encryption key 231. To be possible. At this time, as shown in FIG. 15A, a decryption key 241 for decrypting the protected data 121.
Is generated.

In step S8, the CPU 11 causes the protected data 121 encapsulated in the process of step S7.
To the document storage device 2 via the network 3,
Have it recorded there. Further, the decryption key 241 for decrypting the protected data 121 and the decryption key 242 for decrypting the protected file 201 are also transferred to the document storage device 2 and recorded therein.

As a result, as shown in FIG. 15B,
The document storage device 2 includes the protected data 121 transferred from the document protection setting device 1, a decryption key 241 for decrypting the protected data 121, and a decryption key for decrypting the protected file 201 included in the protected data 121. 242 is recorded, and the use of the protected data can be restricted for the document use terminal device 4.

Next, the protected document display processing executed by the document using terminal device 4 will be described with reference to the flowchart of FIG.

When the user operates the input section 77 to request the acquisition of a predetermined content, the CPU 71, in step S21, via the bus 75, the input / output interface 76, the communication section 80 and the network 3,
The document storage device 2 is requested to deliver predetermined content. As shown in FIG. 17, the CPU 71 acquires the content (protected data 121) delivered from the document storage device 2 and also acquires the decryption key 241 for decrypting the content in step S22.

In step S23, the CPU 71 causes the decryption unit 74 to transfer the content obtained in the process of step S21 to the decryption key 24 obtained in the process of step S22.
After the decoding is performed using 1, the display of the output unit 78 is displayed. Thereby, for example, the display screen 131 including the protection area 134 and the protection area 135 as shown in FIG. 18A is displayed.

When the user wants to use the protected area 134 in which data is protected on the display screen 131 of FIG. 18A, the user selects (clicks) the protected area 134 with the input unit 77 such as a mouse. The CPU 71 receives an input from the user and is associated with the protected area 134, and the input window 17 as shown in FIG. 18B.
1 is displayed on the output unit 78.

In the case of the example in FIG. 18B, a warning sentence 172 presented to the user who tries to use the protected document, a permission range 173 presented to the user who tries to use the protected document, and a case of browsing the protected document Button 1 selected for
74, Button 17 selected when printing a protected document
5 and a button 176 selected when the protected document is secondarily used are displayed, and a display area 177 is displayed.
The copyright is displayed on.

The user can enter the input window 17 shown in FIG. 18B.
One of the buttons 174 to 176 of the item (use permitted range) to be used is selected based on the warning sentence 172 shown in 1.

In step S24, the CPU 71 specifies the protected area and the disclosure condition of the protected area by the user (select one of the buttons 174 to 176).
In response, in step S25, the price corresponding to the button selected by the user is paid. Specifically, CP
The U71 requests the document storage device 2 via the network 3 to execute payment settlement according to the selected button. As a result, the authentication / settlement unit 54 of the document storage device 2
Acquires the user information necessary for payment in advance from the document using terminal 4, executes the authentication process based on the user information, and executes the payment process when authenticated. After the payment process, the CPU 51 of the document storage device 2
As shown in FIG. 19, the protected file 20 corresponding to the protected area 134 recorded in the recording / reproducing unit 57 is recorded.
The decryption key 242 for decrypting 1 is delivered to the document using terminal device 4 via the network 3.

At step S 26, the CPU 71 acquires the decryption key 242 distributed from the document storage device 2. In step S27, the CPU 71 causes the decryption unit 74
In addition, the protected area 134 selected in the process of step S24
Is decrypted using the decryption key 242 acquired in the process of step S26, and then displayed on the output unit 78. As a result, the protection area 134 can be used as shown in FIG.

As described above, the document protection setting apparatus 1 can continuously handle the protected portion and the unprotected portion, and set the protection level for the protected portion from a plurality of types. You can Further, the document use terminal device 4 is
Depending on the type of protected data (for example, layout display, summary display, frame display, semi-disclosure, etc.), it is possible to understand the content to some extent, and whether it is worth paying for the protected portion. This makes it easier to judge whether or not the protected data can be used as continuous data.

Further, in the above, the document protection setting device 1
Using the input unit 19 of, a predetermined file format (for example,
A protected document created from 1 in XML format), or
A protected document created in another file format is acquired from another device and converted into a predetermined file format by the format conversion unit 31 of the editing module 16 and the like is used, but the invention is not limited to this. For example, it is also possible to acquire and use a protected document created in a predetermined file format by another device. That is, the extraction unit 32
However, in extracting the protected area and the non-protected area of the protected document, it is sufficient that the file is converted into a file format that can specify the area.

The series of processes described above can be executed by hardware, but can also be executed by software. When a series of processes is executed by software, a program that constitutes the software can execute various functions by installing a computer in which dedicated hardware is installed or various programs. It is installed from a recording medium into a possible personal computer such as a general-purpose computer.

As shown in FIG. 2, a recording medium for recording a program installed in a computer and put into a state executable by the computer is a magnetic disk 41 (including a flexible disk) or an optical disk 4.
2 (CD-ROM (Compact Disc-Read Only Memory), DVD (D
igital Versatile Disc)), magneto-optical disc 43
Package media (including MD (Mini-Disc) (registered trademark)) or semiconductor memory 44, or RO in which programs are recorded temporarily or permanently
The M12 and the recording / reproducing unit 21 are included. The recording of the program on the recording medium may be carried out via a wired network or a wireless communication medium such as a digital satellite broadcasting network 3 such as a public network, a local area network or the Internet via an interface such as a router or a modem as necessary. It is done by using.

In the present specification, the steps for describing the program recorded on the recording medium are not limited to the processing performed in time series according to the order described, but may not necessarily be performed in time series. It also includes processing executed in parallel or individually.

Further, in the present specification, the system means
It represents the entire apparatus composed of a plurality of devices.

[0110]

According to the information processing system of the present invention, the information storage device sets a protection area for data in a predetermined file format, extracts data in the set protection area, and extracts the data in the extracted protection area. Data is encrypted with the first encryption key, encrypted data in the protected area and data in the unprotected area are encrypted with the second encryption key as protected data, and the encrypted protected data and protected data are decrypted. And a second decryption key for decrypting the data in the protected area, and the information processing apparatus requests the information storage apparatus to distribute the data, When the data received based on the data and the first decryption key are received, the received data is decrypted and displayed, and the use of the protected area of the data is instructed, the information storage device is notified of the protected area. Second to decrypt Since the request for transmitting the decryption key is made, the second decryption key delivered based on the request is received, and the protected area is decrypted by using the received second decryption key, the electronic document It is possible to easily specify the public part and the non-public part in the electronic document while maintaining the continuity of the protected document, and to use the protected document as a continuous document.

Further, according to the first information processing apparatus and method and the program of the present invention, the protection area of the acquired data of the predetermined file format is set, and the data of the set protection area is extracted, The extracted data in the protected area is encrypted with the first encryption key, and the encrypted data in the protected area and the data in the unprotected area are encrypted with the second encryption key as protected data, and the encrypted protection is performed. Since the data, the first decryption key for decrypting the protected data, and the second decryption key for decrypting the data in the protected area are stored, the electronic document can be stored while maintaining the continuity of the electronic document. You can easily specify the public and private parts of a document.

Furthermore, according to the second information processing apparatus and method and the program of the present invention, another device is requested to deliver data, and the data delivered based on the request is acquired. , Display the acquired data,
When the use of the protected area of the data is instructed, another device is requested to transmit the decryption key for decrypting the protected area, and the decryption key distributed based on the request is acquired, Since the protected area is decrypted using the obtained decryption key, the protected documents can be used as a continuous document.

[Brief description of drawings]

FIG. 1 is a diagram showing a configuration example of an embodiment of a data protection system according to the present invention.

FIG. 2 is a block diagram showing a configuration example of a document protection setting device in FIG.

FIG. 3 is a block diagram showing a configuration example of the document storage device of FIG.

FIG. 4 is a block diagram showing a configuration example of the document using terminal device of FIG.

FIG. 5 is a diagram showing an example of protected data in XML format.

FIG. 6 is a diagram showing an example of a case where a protected portion is specified across two files.

FIG. 7 is a diagram illustrating an example of a protected document designated using an XML format.

FIG. 8 is a flowchart illustrating a document protection process.

FIG. 9 is a diagram showing a display example of an input window displayed when a protection type of a protection area is selected.

FIG. 10 is a diagram illustrating types of text protection.

FIG. 11 is a diagram illustrating types of image protection.

FIG. 12 is a diagram illustrating an example in which a disclosure condition is specified.

FIG. 13 is a diagram illustrating extraction of a protection area.

FIG. 14 is a diagram showing a protection file in which protection areas are collectively recorded for each protection group.

FIG. 15 is a diagram showing a state in which protected data and a decryption key are transferred from a protected document setting device to a document storage device and recorded.

FIG. 16 is a flowchart illustrating a protected document display process.

FIG. 17 is a diagram illustrating a state in which the document utilization terminal device acquires a decryption key recorded in the document storage device.

FIG. 18 is a diagram showing a display example of protected data.

FIG. 19 is a diagram illustrating a state in which the document using terminal device acquires the decryption key of the protected area recorded in the document storage device.

FIG. 20 is a diagram showing a display example when a protected area is decrypted.

[Explanation of symbols]

1 document protection setting device, 2 document storage device, 3 network, 4 document using terminal device, 11 CPU,
14 cipher creation unit, 15 digest creation unit, 16 editing module, 21 recording / playback unit, 22 communication unit,
31 format conversion unit, 32 extraction unit, 51
CPU, 54 authentication / payment unit, 57 recording / playback unit, 58 communication unit, 71 CPU, 74 decryption unit,
78 output unit, 80 communication unit

─────────────────────────────────────────────────── ─── Continuation of front page (51) Int.Cl. ⁷ Identification code FI theme code (reference) G06F 17/60 ZEC G06F 17/60 ZEC H04L 9/16 H04L 9/00 643

Claims (13)

[Claims] 1. An information processing system comprising an information storage device that stores data and an information processing device that acquires the data, wherein the information storage device includes an acquisition unit that acquires the data in a predetermined file format, Setting means for setting a protection area of the data acquired by the acquisition means, extraction means for extracting data of the protection area set by the setting means, and data of the protection area extracted by the extraction means A first encryption unit that encrypts with a first encryption key, data in the protected area encrypted by the first encryption unit, and data in an unprotected area other than the protected area in a second Second encryption means for encrypting with a cryptographic key into protected data, the protected data encrypted by the second encrypting means, and for decrypting the protected data And a storage unit that stores a second decryption key for decrypting the data in the protected area, wherein the information processing device requests the information storage device to deliver the data. Then
First receiving means for receiving the data and the first decryption key delivered based on the request, and decrypting the data received by the first receiving means with the first decryption key A display control unit for controlling the display, and when the use of the protected area of the data whose display is controlled by the display control unit is instructed, the information storage device is decrypted for the protected area Requesting transmission of the second decryption key for receiving the second decryption key, and receiving the second decryption key delivered based on the request, and the second receiving unit receiving the second decryption key. An information processing system, comprising: a decryption unit that decrypts the protected area using a second decryption key. 2. An acquiring unit for acquiring data in a predetermined file format, a first setting unit for setting a protected area of the data acquired by the acquiring unit, and a setting unit for the first setting unit. Extracting means for extracting data in the protected area; first encrypting means for encrypting the data in the protected area extracted by the extracting means with a first encryption key; and the first encrypting means. A second encryption unit that encrypts the encrypted data in the protected area and the data in the unprotected area other than the protected area with a second encryption key to provide protected data; and the second encryption unit. And a first decryption key for decrypting the protected data, and a storage unit for storing a second decryption key for decrypting the data in the protected area. Features The information processing apparatus. 3. When the transmission of the protected data is requested from another device, the corresponding protected data and the first decryption key stored in the storage means are read out to the other device. The information processing apparatus according to claim 2, further comprising a transmitting unit that transmits. 4. A second setting unit for setting a disclosure condition for the protection area, and when the use of data of the protection area included in the protection data is requested from the other device, the second setting unit 2 further comprises a settlement means for performing payment settlement to the other device based on the disclosure condition set by the setting means, wherein the transmission means performs the payment settlement by the settlement means. 4. The information processing apparatus according to claim 3, wherein after that, the second decryption key for decrypting the protected area, which is accumulated in the accumulating unit, is read and transmitted to the other device. . 5. The information processing apparatus according to claim 2, further comprising second setting means for setting a protection type for the protection area. 6. The information processing apparatus according to claim 2, wherein the predetermined file format is a file format capable of designating an area. 7. An acquisition control step for controlling acquisition of data in a predetermined file format; a first setting step for setting a protected area of the data whose acquisition is controlled by the processing of the acquisition control step; An extraction step of extracting the data of the protection area set by the processing of the setting step of 1; and a first encryption for encrypting the data of the protection area extracted by the processing of the extraction step with a first encryption key. An encryption step, data of the protected area encrypted by the processing of the first encryption step, and data of an unprotected area other than the protected area are encrypted with a second encryption key to obtain protected data. A second encryption step, the protection data encrypted by the processing of the second encryption step, a first decryption key for decrypting the protection data, and The information processing method characterized by including a storage control step of controlling storage of a second decryption key for decrypting the data of the serial protection area. 8. An acquisition control step for controlling acquisition of data in a predetermined file format; a first setting step for setting a protected area of the data whose acquisition is controlled by the processing of the acquisition control step; An extraction step of extracting the data of the protection area set by the processing of the setting step of 1; and a first encryption for encrypting the data of the protection area extracted by the processing of the extraction step with a first encryption key. An encryption step, data of the protected area encrypted by the processing of the first encryption step, and data of an unprotected area other than the protected area are encrypted with a second encryption key to obtain protected data. A second encryption step, the protection data encrypted by the processing of the second encryption step, a first decryption key for decrypting the protection data, and A second recording medium that is computer-readable program, wherein is recorded to include a storage control step of controlling storage of the decryption key for decrypting the data of the serial protection area. 9. An acquisition control step for controlling acquisition of data in a predetermined file format; a first setting step for setting a protected area of the data whose acquisition is controlled by the processing of the acquisition control step; An extraction step of extracting the data of the protection area set by the processing of the setting step of 1; and a first encryption for encrypting the data of the protection area extracted by the processing of the extraction step with a first encryption key. An encryption step, data of the protected area encrypted by the processing of the first encryption step, and data of an unprotected area other than the protected area are encrypted with a second encryption key to obtain protected data. A second encryption step, the protection data encrypted by the processing of the second encryption step, a first decryption key for decrypting the protection data, and Program for executing a storage control step of controlling storage of a second decryption key for decrypting the data of the serial protection area. 10. A first acquisition unit that requests distribution of data to another device and acquires the data distributed based on the request, and the first acquisition unit that acquires the data. Display control means for controlling the display of data, a protection area exists in the data whose display is controlled by the display control means, if the use of the protection area is instructed, to the other device, Second acquisition means for requesting transmission of a decryption key for decrypting the protected area, and acquiring the decryption key delivered based on the request; and the decryption obtained by the second acquisition means. An information processing apparatus, comprising: a decryption unit that decrypts the protected area using a key. 11. A first acquisition control step of requesting distribution of data to another device, and controlling acquisition of the data distributed on the basis of the request; and a first acquisition control step. A display control step of controlling display of the data whose acquisition is controlled by processing, and a protection area exists in the data whose display is controlled by the processing of the display control step, and use of the protection area is instructed. In this case, a second acquisition control step of requesting the other device to transmit the decryption key for decrypting the protected area, and controlling the acquisition of the decryption key delivered based on the request. And a decryption step of decrypting the protected area by using the decryption key whose acquisition is controlled by the process of the second acquisition control step. 12. A first acquisition control step of requesting the distribution of data to another device and controlling acquisition of the data distributed based on the request, and a first acquisition control step. A display control step of controlling display of the data whose acquisition is controlled by processing, and a protection area exists in the data whose display is controlled by the processing of the display control step, and use of the protection area is instructed. In this case, a second acquisition control step of requesting the other device to transmit the decryption key for decrypting the protected area, and controlling the acquisition of the decryption key delivered based on the request. And a decryption step of decrypting the protection area by using the decryption key whose acquisition is controlled by the process of the second acquisition control step. A recording medium in which possible programs are recorded. 13. A first acquisition control step of requesting distribution of data to another device, and controlling acquisition of the data distributed on the basis of the request, and a first acquisition control step. A display control step of controlling display of the data whose acquisition is controlled by processing, and a protection area exists in the data whose display is controlled by the processing of the display control step, and use of the protection area is instructed. In this case, a second acquisition control step of requesting the other device to transmit the decryption key for decrypting the protected area, and controlling the acquisition of the decryption key delivered based on the request. A program for executing a decryption step of decrypting the protected area using the decryption key whose acquisition is controlled by the process of the second acquisition control step.