JP2004021478A - Security management system, security management method and security management program of digital information, and recording medium for recording the same - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To secure effectively security of digital information, to realize effective prevention of theft, alteration breakage or the like of data, and to realize efficient reuse of the digital information by an authenticated user. <P>SOLUTION: When generating an original management information 105 by enciphering provided digital information 104 and recording it in an optical disc 101b, security information including an inherent identification code 106a and a secret key 106b inherent to the digital information is recorded together therewith. When generating duplicated management information 107 from the optical disc 101b in response to a duplication request from the authenticated user and recording it in an optical disc 101c, duplicated security information 108 including an inherent identification code 108a, the secret key 106b and an authentication key 108c inherent to the user is recorded together therewith. <P>COPYRIGHT: (C)2004,JPO

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to a digital information security management system and security management method, a security management program, a security management program, and a computer-readable recording recording the same, which ensure effective security and enable efficient reuse of data by an authenticated user. Media related.
[0002]
[Prior art]
2. Description of the Related Art Conventionally, with the development of information technology, various information has been digitized and distributed as digital information. In order to exchange digital information, an information provider may distribute the information via a network such as (1) the Internet or (2) a recording medium such as a CD-ROM. In addition, relatively large amounts of digital information including graphics information, digital still images, and moving images may be distributed in addition to small-scale text information. In recent years, CD-R / CD-RW (DISC) and rewritable (Writable) DVDs (DVD-RAM, DVD-R / W, etc.) have been used for distributing such digital information. Is coming.
[0003]
[Problems to be solved by the invention]
However, distribution of digital information at a user level for users has the following problems. Here, the user-level distribution of digital information and its security-related problems will be specifically described along with potential requirements for digital information.
(1) Regarding digitalization in the medical field, the following items can be considered.
Customers (patients) have a portable diagnostic history and medical data, and there is a potential need to have multiple physicians diagnosed for their illness, and clinic doctors want to refer to medical data of patients in hospitals (wasteful). There is a request to add findings. However, when communication (information exchange) is performed between a plurality of doctors, there is a risk that patient information leaks (leakage) or is falsified. In addition, unauthorized access due to malicious intent of a third party is expected.
In addition, medical institutions have demands for centralized management of medical image data and on-demand data distribution, but on the other hand, there are drawbacks that the operation is complicated on the user side and that it takes time to search.
[0004]
(2) Regarding digitalization in the construction field, the following items can be considered.
In the construction field, there is a potential need to share design drawings, photos, and text information at the site, management, and design zones. On the other hand, there are problems such as careless alteration of the shared data, leakage to a third party, and loss.
In addition, there is a demand that the active ideas of the site be utilized in the design, but there is a problem that the history of mistakes and alterations by a legitimate operator may become unclear.
On the construction side, there is a demand for centralized management of construction-related data such as design drawings and on-demand data distribution.On the other hand, on the customer side, the disadvantage is that operation becomes complicated and search takes time. is there.
In addition, there is a demand for real-time files of data such as the progress of construction work and photographs at the time of completion to a management center that manages the information, while there is a possibility that malicious third parties can acquire such information by impersonation There is.
[0005]
(3) The following items can be considered regarding the digitalization of legal or real estate related office business.
Legal or real estate-related offices have the potential to save customer time and labor by simplifying the creation of application documents and other documents by converting the customer's real estate drawings and photos into electronic data (text information, etc.). There is a request. On the other hand, there is a risk of unauthorized access or leak to a third party, and loss of data of the owner or client.
Further, for example, there is a request to update information on sale or acquisition of real estate and to retain the history. However, there is a risk that a malicious third party may falsify this request.
Furthermore, there is a problem that the operation of the user is complicated and a search takes time in response to a request for cost reduction by centralized management of electronic data and a request for on-demand data distribution.
[0006]
(4) The following items can be considered regarding the digitalization of IT improvement activities.
There is a potential need to make the current situation and the flow after the improvement by the introduction of IT, the improvement method and the improvement effect into graphics, to digitize the photos and video text information, and to share them among related departments. On the other hand, there is a risk of malicious access outside the company and information leakage.
There is also a demand that the recorded information be updated in accordance with the progress of subsequent improvements, and that past results be retained. On the other hand, there is a problem that the update takes too much time (authorization process, issuance process).
Further, there is a demand for cost reduction by centralized management of electronic data and on-demand data distribution. On the other hand, there is a problem that the operation of the user is complicated, and the search takes time.
[0007]
Overseas, partner companies, etc. have a request to provide guidance as a condition of license as intellectual property. On the other hand, there is a problem that it is difficult to manage documents as intellectual assets.
As described above, there are various potential demands for recording and distributing digital information on a movable recording medium (offline medium) for effective use. In order to achieve this, security including intellectual property such as copyright of recorded digital information is effectively secured, and another user is supplemented, corrected, deleted, or changed with respect to distributed digital information. (Hereinafter referred to as “secondary processing”) must be performed easily and efficiently under a certain rule, and security must be effectively ensured even after the processing. However, conventionally, it has been difficult to achieve this.
[0008]
SUMMARY OF THE INVENTION The present invention has been made to solve the above problems, and has a security management system, a security management method, a security management program, and a security management program when digital information as described above is distributed using an offline medium. The purpose is to effectively secure security including intellectual assets of digital information providers on recording media and to effectively prevent data theft, falsification, destruction, etc. by impersonating a malicious third party. The purpose of the present invention is to realize efficient reuse of digital information by an authenticated user (ease of retrieval, easiness of secondary processing, and storage of the history).
[0009]
[Means for Solving the Problems]
According to the present invention, in order to achieve the above object, security information including an identification code unique to a recording medium and a secret key unique to the digital information is generated by encrypting provided digital information to generate original management information and generating the original management information. Together with an original management means for recording on the first recording medium, an access management means for permitting access to the authenticated user, and the first information in response to a copy request of the digital information from the user authenticated by the access management means. From the recording medium, and records the duplicate management information on the second recording medium together with the identification code unique to the recording medium and the copy security information including the secret key and the authenticated user-specific authentication key. It is characterized by a digital information security management system having copy management means.
According to this security management system, provided digital information is recorded on a recording medium and managed as encrypted original management information. In addition, access to the recording medium is limited to the authorized user. Even if the user requests, a recording medium recording the copy management information together with the copy security information will be provided. Rather, the security of the provided digital information is ensured.
[0010]
An information providing station having means for generating digital information; encrypting the digital information provided by the information providing station to generate original management information; converting the original management information into an identification code unique to a recording medium; An original management means for recording on the first recording medium together with security information including a unique secret key, an access management means for permitting access to an authenticated user, and a method for transmitting the digital information from the user authenticated by the access management means. Generating copy management information from the first recording medium in response to a copy request, and combining the copy management information with copy security information including an identification code unique to the recording medium, the secret key, and the authenticated user-specific authentication key; An information management station having duplication management means for recording data on a second recording medium; Means for requesting a copy of information; means for recognizing the copy security information recorded on the second recording medium provided by the information management station without error; and means for recognizing the copy security information without error. A restoring means for restoring original digital information from the copy management information recorded on the second recording medium, and encrypting the restored digital information upon detecting a duplication operation of the second recording medium. Secondary copy information to generate secondary copy information, and to record the secondary copy information on a third recording medium together with the secondary copy security information including the identification code unique to the recording medium and the secret key and the authentication key. Digital information security management system comprising an information utilization station having means.
[0011]
According to this security management system, provided digital information is recorded on a recording medium and managed as encrypted original management information. In addition, access to the recording medium is limited to authorized users. The information utilization station provides a recording medium on which copy management information is recorded together with copy security information at the request of a user who is permitted to access. When the recording medium is recognized without error, the copy management information can be restored and the provided digital information can be reused. Further, even if a user who is permitted to access makes a request, a recording medium on which the copy management information is recorded is provided, so that the original is not falsified and the security of the provided digital information is ensured.
In any of the above security management systems, it is preferable to provide a means for encrypting the security information. According to this configuration, the security level of digital information can be improved.
[0012]
A means for requesting the information management station to permit the secondary processing of the restored digital information; and a means for requesting the information management station to perform the secondary processing on the restored digital information. It is preferable that a means for generating secondary digital information processed next is provided in the information utilizing station.
According to this configuration, in the information use station, a user permitted to perform secondary processing can generate secondary digital information.
Further, the access management means is configured to exclude access of an unauthorized user of the secondary processing, and the original data management means provides digital information provided by the information providing station from the information using station. The original management information may be generated by encrypting the original management information together with the secondary digital information.
With this configuration, the information management station eliminates access of a user who is not authorized for secondary processing. Also, original management information reflecting the secondary processing provided by the information use station is generated.
Further, the information management station may be provided with means for recording the history of generation of the original management information by the original management means. In this way, the generation history of the original management information can be managed.
[0013]
Then, the present invention encrypts the provided digital information to generate original management information, and stores the original management information together with security information including an identification code unique to a recording medium and a secret key unique to the digital information in a first recording mode. A copy management information is generated from the first recording medium in response to a copy request of the digital information of a user who has been authenticated to access the recording medium, and the copy management information is stored in an identification code unique to the recording medium, the secret key, and Digital recording is performed on a second recording medium together with the copy security information including the authenticated user-specific authentication key, and a second recording medium recording the copy management information together with the copy security information is generated. Provide a security management method for information.
According to this security management method, provided digital information is encrypted and managed as original management information. Access to the recording medium is limited to authorized users. Even if the user requests, a recording medium recording the copy management information together with the copy security information will be provided. Thus, the security of the provided digital information is ensured.
[0014]
A security management method for digital information implemented by an information management station and an information use station, wherein the information management station encrypts the provided digital information to generate original management information, and manages the original data. The information is recorded on the first recording medium together with the security information including the identification code unique to the recording medium and the secret key unique to the digital information. Accordingly, the copy management information is generated from the first recording medium, and the copy management information is stored in the second storage medium together with the identification code unique to the recording medium and the copy security information including the secret key and the authenticated user-specific authentication key. A second recording medium on which the copy management information is recorded together with the copy security information is generated on a recording medium. The information using station restores the original digital information from the copy management information recorded by recognizing the copy security information recorded on the second recording medium provided from the information management station without error, When the duplication operation of the second recording medium is detected, the restored digital information is encrypted to generate secondary duplication information, and the secondary duplication information is converted into an identification code unique to the recording medium, the secret key, and the authentication. A security management method for digital information, wherein the method is recorded on a third recording medium together with secondary copy security information including a key.
According to this security management method, provided digital information is encrypted and managed as original management information, and limited to users who are permitted to access the recording medium. At the request of a user who is permitted access, a recording medium on which the copy management information is recorded together with the copy security information is provided to the information utilizing station, and the copy management information is restored and provided by recognizing the recording medium without error. Digital information can be reused. Further, even if a user who is permitted to access makes a request, a recording medium on which the copy management information is recorded is provided, so that the original is not falsified and the security of the provided digital information is ensured.
[0015]
In any of the above security management methods, it is preferable that the security information be encrypted and recorded. According to this configuration, the security level of digital information can be improved.
Further, in the information use station, the information management station requests permission of the secondary processing of the restored digital information to the information management station, and when the request for the secondary processing is received from the information management station in response to the request, It is preferable to generate secondary digital information by secondary processing of the restored digital information.
According to this configuration, in the information use station, a user permitted to perform secondary processing can generate secondary digital information.
In this case, in the information management station, the access of the unauthorized user of the secondary processing is excluded, the provided digital information is encrypted together with the secondary digital information provided from the information use station, and the original management information is encrypted. Is preferably generated.
With this configuration, the information management station eliminates access of a user who is not authorized for secondary processing, and generates original management information reflecting the secondary processing provided by the information using station.
Further, a generation history of the original management information may be recorded. In this way, the generation history of the original management information can be managed.
[0016]
Then, the present invention encrypts the provided digital information to generate original management information, and stores the original management information together with security information including an identification code unique to a recording medium and a secret key unique to the digital information in a first recording mode. A function of recording on a medium, a function of permitting access to an authenticated user, and generating copy management information from the first recording medium in response to a copy request of the digital information of a user permitted to access by the function. And a function for causing a computer to record the copy management information in a second recording medium together with an identification code unique to a recording medium and copy security information including the secret key and the authenticated user-specific authentication key. It also provides an information security management program.
When the computer is operated according to this security management program, the provided digital information can be encrypted and recorded on a recording medium as original management information and managed, and only the user who is permitted to access the recording medium can use the digital information. Even if requested, a recording medium that records the copy management information together with the copy security information will be created.
The security management program may have a function of encrypting and recording security information when recording the security information on the first recording medium.
The present invention also provides a computer-readable recording medium recording the digital information security management program.
[0017]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.
FIG. 1 is a system configuration diagram showing the overall configuration of a digital information security management system 100 according to the present invention. As shown in the figure, a security management system 100 according to the present invention has an information management station 1, an information providing station 50, and an information using station 70, and each is connected via a network (not shown).
The information management station 1 is a data processing center having means for encrypting provided digital information, generating original management information, recording the original management information on a recording medium, and centrally managing the information. For example, if the security management system 100 is introduced in the field of the medical business, the information management station 1 is considered to be installed in a relatively large hospital (hospital) in the area. Also, when introduced in the construction industry, the information management bureau 1 becomes a data management center installed at the construction industry headquarters, and in the case of small or medium-sized offices related to law or real estate, it is jointly established in that area. It is thought to be a data management company that also provided software services.
[0018]
FIG. 2 is a diagram showing a main configuration of the information management station 1 and an information providing station 50 and an information using station 70 together with a movable recording medium (offline medium) exchanged in the system.
The information management station 1 is provided with an information processing device 5, a security management unit 10, and a changer 25.
The information processing device 5 is a personal computer (hereinafter, referred to as a “personal computer”) in which a program for operating a business system 3 used for media distribution under the control of an OS (operating system) 2 is installed. The information processing device 5 is connected to the security management unit 10 via the network 6.
The security management unit 10 includes a server 12 in which a file system 11 is installed, a RAID 13, an optical disk device 14, and a tape drive 15.
[0019]
As shown in FIG. 3, the server 12 includes a control device 20 including a CPU, a ROM, a RAM, and the like, an input device 21, a display device 22, and a recording device 23, which are electrically connected to each other. ing.
The control device 20 controls the entire operation of the server 12, operates the built-in CPU according to a control program stored in the ROM, and functions as each unit constituting the security management system 100 according to the present invention. That is, the control program stored in the ROM of the control device 20 is a program for causing the server 12 to realize each function constituting the security management system 100 according to the present invention. This control program may be always stored in the ROM of the server 12, but may be recorded on a recording medium such as a CD-ROM and installed as needed. Alternatively, the information may be stored in the recording device 23 and loaded when the power of the server 12 is turned on.
[0020]
The server 12 is connected to the optical disk device 14 via an interface 24. The interface 24 is a bidirectional communication interface with the optical disk device 14, and conforms to standard interfaces such as ATAPI and SCSI. . The interface 24 is connected to an ATAPI / SCSI interface 43 of the optical disk device 14, which will be described later. The interface 24 may be a cable connection using a communication line such as a communication cable (for example, a SCSI cable), but may be a wireless connection using infrared rays or the like.
The input device 21 includes at least one input means (not shown) of a keyboard, a mouse, a pointing device, and the like, and inputs various information operated and input by the user to the control device 20. The display device 22 has a display unit such as a CRT, a liquid crystal display panel, and a plasma display panel (PDP), and displays various information input from the control device 20. The information from the input device 21 may be input in a wireless manner. Further, the input device 21 and the display device 22 may be integrated, and for example, a CRT with a touch panel or a liquid crystal display device may be used.
[0021]
The server 12 has an OS, and the operation of all devices is managed by the OS.
The recording device 23 stores data necessary for the CPU of the control device 20 to execute processing.
A RAID (Redundant Array of Inexpensive Disks) 13 is configured such that a plurality of hard disks are connected in parallel, and all of them are controlled like a single disk device, thereby speeding up data reading and writing and improving durability against failure. External storage device.
[0022]
FIG. 6 shows the internal configuration of the optical disk device 14. FIG. 6 is a functional block diagram showing an example of the main part of the internal configuration of the optical disk device 14.
The optical disk device 14 is a device capable of reading from and writing to an optical disk 101 (for example, DVD + RW, DVD + R) as a recording medium, and includes a spindle motor 30, an optical pickup 31, a motor driver 32, a read amplifier 33, and servo means 34. , A DVD decoder 35, an ADIP decoder 36, and a laser controller 37, a DVD encoder 38, a DVD-ROM encoder 39, a buffer RAM 40, a buffer manager 41, a DVD-ROM decoder 42, an ATAPI It has a / SCSI interface 43 and a D / A converter 44, and further has a ROM 45, a CPU 46, and a RAM 47. In FIG. 6, “LB” indicates a laser beam, and “Audio” indicates an audio output signal.
[0023]
In FIG. 6, arrows indicate the direction in which data flows mainly. For simplification of the drawing, the CPU 46 that controls each block in FIG. Omitted. The ROM 45 stores a control program described in a code decodable by the CPU 46. When the power of the optical disk device 14 is turned on, the program is loaded into a main memory (not shown), and the CPU 46 controls the operation of each unit according to the program, and temporarily stores data and the like necessary for the control in the RAM 47. I do. The configuration and operation of the optical disk device 14 are as follows.
[0024]
The optical disc 101 is driven to rotate by a spindle motor 30. The spindle motor 30 is controlled by a motor driver 32 and servo means 34 so that the linear velocity or the angular velocity is constant. This linear velocity or angular velocity can be changed stepwise. The optical pickup 31 incorporates a semiconductor laser, an optical system, a focus actuator, a track actuator, a light receiving element, and a position sensor, and irradiates the optical disc 101 with laser light LB. The optical pickup 31 can be moved in the sledge direction by a seek motor. In these focus actuator, track actuator, and seek motor, the spot of the laser beam LB is located at a target location on the optical disc 101 by the motor driver 32 and the servo means 34 based on signals obtained from the light receiving element and the position sensor. Is controlled as follows.
[0025]
When reading (reading) information recorded on the optical disk 101, the reproduction signal obtained by the optical pickup 31 is amplified by the read amplifier 33, binarized, and input to the DVD decoder 35. The input binary data is subjected to 8/16 demodulation in the DVD decoder 35. It should be noted that the recording data is modulated in a group of 8 bits (8/16 modulation). In this modulation, 8 bits are converted to 16 bits. In this case, the combined bits are attached so that the number of “1” and “0” up to that time are equal on average. This is called “DC component suppression”, and the slice level fluctuation of the DC-cut reproduction signal is suppressed.
[0026]
Then, the demodulated data is subjected to deinterleaving and error correction processing. After that, the data is input to the DVD-ROM decoder 42, and further error correction processing is performed to improve the reliability of the data. The data on which the error correction processing has been performed twice is temporarily stored in the buffer RAM 40 by the buffer manager 41, and is transferred to the server 12 at a stretch via the ATAPI / SCSI interface 43 in a state where the data is prepared as sector data. You. In the case of music data, the data output from the DVD decoder 35 is input to the D / A converter 44 and extracted as an analog audio output signal Audio.
[0027]
When writing (writing), the data sent from the server 12 through the ATAPI / SCSI interface 43 is temporarily stored in the buffer RAM 40 by the buffer manager 41. Thereafter, the write operation is started. In this case, the laser spot needs to be positioned at the write start point before that. When the optical disc 101 is a DVD + RW / DVD + R, this point is obtained by a wobble signal that is previously carved on the optical disc 101 by meandering tracks. When the optical disk 101 is a DVD-RW / DVD-R, it is obtained by land pre-pits instead of a wobble signal, and by DVD-RAM / DVD-RAM / WO by pre-pits.
[0028]
When the optical disc 101 is a DVD + RW / DVD + R, the wobble signal includes address information called ADIP (Address in pre-groove). This address information is extracted by the ADIP decoder 36. The ADIP decoder 36 generates a synchronizing signal, and the synchronizing signal is input to the DVD encoder 38, thereby enabling data to be written to an accurate position on the optical disk 101. The data in the buffer RAM 40 is subjected to addition of an error correction code and interleaving in the DVD-ROM encoder 39 and the DVD encoder 38, and is recorded on the optical disk 101 via the laser controller 37 and the optical pickup 31. Further, a configuration may be employed in which address information is obtained from land pre-pits or pre-pits.
The optical disk device 14 may be a device physically separate from the server 12 as shown in the figure, but may be built in the server 12.
[0029]
The tape drive 15 is a drive device for reading and writing data on and from a magnetic tape, and is provided for recording original management information, copy management information, and the like recorded on the optical disk 101 and backing them up.
The changer 25 houses a plurality of optical discs 101 as recording media such as a CD-R / CD-RW, a DVD-RAM, and a DVD-R / W, and takes out the housed optical disc 101 according to an instruction from the server 12. It is set on the optical disk device 14.
[0030]
As shown in FIG. 2, the information providing station 50 has an input device such as a keyboard and a mouse and a display device such as a liquid crystal display as means for generating digital information, and includes a CPU, a ROM, a RAM, and an external storage device. A built-in personal computer 51 is provided. Then, the CPU is operated by the program stored in the ROM to generate digital information. Note that these programs can use existing programs. For example, if the security management system 100 is introduced in the field of the medical business, the information providing station 50 needs an environment in which a doctor who provides medical data to a relatively large hospital (hospital) in the area operates the personal computer 51. Can be assumed. In the case of introduction in the construction industry, it becomes a design office, and in the field of law or real estate, an office of a judicial scrivener is assumed.
[0031]
As shown in FIG. 2, the information use station 70 has a personal computer 71 having an input device such as a keyboard and a mouse and a display device such as a liquid crystal display, and having a CPU, a ROM, a RAM, and an external storage device. ing. Then, according to the program stored in the ROM, the CPU is operated to create data for requesting the information management station 1 to copy digital information, and to transmit the data to the information management station 1. For example, when introducing the security management system 100 in the field of the medical business, the information use station 70 can assume an environment in which a doctor of a clinic in the area operates the personal computer 71. In the case of introduction in the field of construction industry, law, or real estate, an environment in which a client of a design office or a law office operates the personal computer 71 can be assumed.
[0032]
Next, the operation of the security management system 100 configured as described above will be described. The security management system 100 is configured around an information management station 1. The information management station 1 mainly performs three operations: generation and management of original management information, user authentication and access management, and generation of copy management information. In the information providing station 50, digital information is generated. Then, in the information use station 70, three operations of a digital information copy request, restoration of original digital information, and management of secondary copy are performed. Hereinafter, these operations will be described in detail in order with reference to FIGS. 4, 5, 7, and 8. FIG. 5 is an explanatory diagram mainly showing the operation of the information management station 1 among the operations by the security management system 100.
[0033]
1) Operation of the information providing station 50
In the information providing station 50, a user who is an information transmitter (information provider) operates the personal computer 51 to generate digital information 104. The digital information 104 is, for example, document (document) information such as an application document created by a law or real estate-related office staff by a document compilation program, and is digital information (e.g., digitalized) of a client's real estate drawing and photograph. Text information). Further, it is a diagnosis history and medical data of a patient by a still image or a moving image created by operating a computer graphics program by a clinic doctor. The user such as a staff member or a doctor records the created digital information 104 on the optical disk 101a, and sends the optical disk 101a to the information management station 1 by mail or the like to provide the digital information 104. In addition to transmitting the optical disk 101a, the information providing station 50 may transmit the information to the information management station 1 via a communication line if security can be ensured by using a dedicated line or the like.
The recording medium uses the optical disk 101a in consideration of the data volume amount. However, when the data volume amount is relatively small, for example, in the case of document information, a magnetic disk (FD) may be used. Alternatively, a magneto-optical disk (MO) may be used.
[0034]
2) Operation of information management station 1
a) Generation and management of original management information
In the information management station 1, the information processing device 5 records the digital information 104 provided on the optical disc 101 a by the information distribution station 50 by operating the media distribution business system 3 and fetches the digital information 104 via the network 6. Send to
When the security management unit 10 activates the file system 11 and receives the digital information 104, the server 12 operates as follows according to the flowchart shown in FIG. FIG. 7 is a flowchart showing a procedure of operations related to generation and management of original management information by the security management unit 10. In FIG. 7, steps are abbreviated as S.
[0035]
When the server 12 receives the digital information 104, the CPU of the control device 20 operates according to the program stored in the ROM, and proceeds to step 1 from a main routine (not shown). Is received and a predetermined check is performed. If there is no problem (error) in the storage application, the process proceeds to step 2. In step 2, the authenticity of the received digital information 104 is confirmed, and the digital information 104 is new digital information (creative document) provided from the information providing station 50 or a secondary information described later provided from the information using station 70. It is determined whether the information is digital information (secondary processing doctrine) or not. If the former is the case, the process branches to step 4; assign. Since the information provided by the information providing station 50 is new digital information, step 4 is executed here (the case of proceeding to step 5 will be described later).
[0036]
Subsequently, when the process proceeds to step 6, a management number assigned according to whether the document is a creation document or a secondary processing document is assigned. In step 7, the assigned management number and pattern label are printed, and the digital information 104 is managed. Then, the process proceeds to step 8 after being attached to a first recording medium serving as an original, that is, an optical disk 101b. In step 8, the CPU of the control device 20 operates as the original data management means, and generates information 105 obtained by encrypting the digital information 104 (this encrypted information is referred to as “original data management information”) 105. Here, a known technique can be used to encrypt the digital information 104. For example, public key cryptography using the same key can be used for both encryption and recovery, and private key cryptography using a private key dedicated to itself and a public key distributed to others may be used.
In the following step 9, the CPU of the control device 20 operates as the original data management means to generate the security information 106. The security information 106 includes an identification code (U) unique to the first recording medium on which the original management information 105 generated in step 8 is to be recorded, ie, the optical disc 101b. ₀ Key) 106a and a secret key (X _i Key) 106b.
[0037]
In step 10, the CPU of the control device 20 instructs the optical disk device 14 to cause the CPU 46 to operate each unit according to the program stored in the ROM 45, to record the security information 106 in a specific area of the optical disk 101b, The management information 105 is recorded. At this time, the optical disc 101b records the original management information 105 and the security information 106 as follows. For example, when the optical disc 101b is a DVD + RW, the secret key (X _i Key) 106b is recorded in the “Reserved area” in the “Lead-in” area, and the identification code (U ₀ Key) 106a is recorded in “Inner Disc Identification Zone” in the “Lead-in” area. Further, the original management information 105 is recorded in the “Data” area.
[0038]
When the server 12 generates the security information 106, the secret key (X _i Key) 106 b is generated as unique to the digital information 104. When one piece of original management information 105 (digital information 104) is recorded on the optical disc 101b (in the case of a single session), the secret key (X _i Key) 106b is assigned to each optical disk unit to generate security information 106. However, when the recording area of the optical disc 101b is divided into a plurality of sessions to form a multi-session, and different original management information is recorded in each session, the secret key (X _i Key) 106b and record the “Reserved area” in the “Lead-in” area of each session. Also, different original management information may be recorded on each track in each session, and different original management information may be recorded on each packet in that track. Private key (X _i Key) is recorded.
[0039]
After the security information 106 is generated, the security information 106 may be recorded after being encrypted. By doing so, the security level of the digital information 104 can be improved.
When the server 12 records the security information 106 and the original management information 105 on the optical disk 101b as described above, the process proceeds to step 11, where the optical disk device 14 stores the optical disk 101b in the changer 25, and the process ends. As described above, in the security management system 100, the digital information 104 generated by the information providing station 50 is encrypted by the information management station 1 and then becomes the original management information 105. It is recorded in. The optical disk 101b serves as an original for managing the provided digital information 104.
[0040]
b) User authentication and access management
The information management station 1 performs user authentication and access management in parallel with generation and management of the original management information described above. That is, when there is an access request to the system from an external user, the CPU of the control device 20 operates as an access management unit to make the user input information necessary for authentication. Then, the CPU of the control device 20 determines whether or not the user can be authenticated based on the input content, and issues an access permission key to the user when the user is authenticated, and does not issue an access permission key when the user is not authenticated. Continue processing and request the user who wants to obtain, browse, etc. the digital information that is the source of the original management information, by requesting another step to input the access permission key, and to eliminate the access of the user without the input. ing. By doing so, in the security management system 100, the security of the original management information is reliably ensured.
[0041]
c) Generation of copy management information
The information management station 1 responds to a digital information copy request from a user who wants to view and use the digital information provided by the information providing station 50, according to the flowchart shown in FIG. Has been generated. In this case, it is assumed that the user operates the personal computer 71 in the information use station 70. When the user accesses the server 12 by inputting the access permission key, the CPU of the control device 20 operates according to the program stored in the ROM and proceeds from the main routine (not shown) to step 20 to authenticate the user who has accessed the server. In the following step 21, transmission b of the user's digital information access request (copy request) is accepted. Here, when the predetermined requirement is satisfied, the server 12 sends a unique authentication key (P _i Key) is issued. This authentication key (P _i Key) is transmitted via a network together with the restoration table 120 described later, or is notified to the user in writing.
[0042]
Then, the process proceeds to step 22, where the user is allowed to select one of the duplication of digital information managed as an original and a request for secondary processing to be described later. If the user selects the former, the process proceeds to step 23, and the process proceeds to step 23. Is selected, the process proceeds to step 24 (the case of proceeding to step 24 will be described later). Here, the process proceeds to step 23 because the digital information 104 managed as the original is copied. In step 23, the CPU of the control device 20 operates as copy management means, selects the corresponding original management information according to the copy request of the digital information 104, and records the selected original management information 105 on the optical disc 101b. From the original management information 105, and generates the same copy management information 107 as the original management information 105. At this time, when the CPU of the control device 20 instructs the optical disk device 14, the optical disk device 14 instructs the changer 25 to take out the optical disk 101b, read and reproduce the recorded original management information 105, and generate the copy management information 107. I do. Subsequently, the process proceeds to step 25, where the CPU of the control device 20 operates as the copy management unit to generate the copy security information 108. This copy security information 108 is an identification code (U) unique to the second recording medium for copy in which the copy management information 107 generated in step 23 is to be recorded, that is, _i Key) 108a and a secret key (X _i Key) 106b and the authentication key (P _i Key) 108c.
[0043]
Then, proceeding to step 26, when the CPU of the control device 20 operates as duplication management means and instructs the optical disk device 14, the CPU 46 operates each unit according to the program stored in the ROM 45, and specifies the duplication security information 108 for the optical disk 101c. In addition to the recording in the area, the duplication management information 107 is recorded to create the optical disk 101c for duplication, and the process of executing the step 28 is ended as necessary. At this time, the optical disc 101c records the copy management information 107 and the copy security information 108 as follows. For example, when the optical disc 101c is a DVD + RW, the secret key (X _i Key 106b and the authentication key (P _i Key) 108c is recorded in the “Reserved area” in the “Lead-in” area, and the identification code 108a is recorded in the “Inner Disc Identification Zone” in the “Lead-in” area. The copy management information 107 is recorded in the “Data” area.
[0044]
Note that the copy security information 108 includes the secret key (X _i Key) 106b may be assigned to each optical disk and recorded. However, when the optical disk 101c is used for multi-sessions and different copy management information is recorded in each session, a secret key (X _i Key) 106b. Alternatively, different copy management information may be recorded on each track in each session, and different copy management information may be recorded on each packet in that track. In each case, a unique copy management information may be recorded for each copy management information. Secret key (X _i Key) is recorded.
[0045]
As described above, in the security management system 100, when a request for duplication of the digital information 104 provided from the information providing station 50 is issued from the authenticated user, the reproduction is performed from the optical disc 101b that manages the digital information 104 as an original under certain requirements. The duplication management information 107 obtained by duplication is recorded together with the duplication security information 108 to generate the duplication optical disk 101c. Only the specific (authorized user) user can obtain the duplication optical disc 101c, so that the security of the provided digital information can be effectively secured. In addition, even if the user requests, the duplication optical disk 101c is provided, and since there is no rewriting of the original (optical disk 101b), falsification or destruction of data can be effectively prevented.
[0046]
Further, since the optical disk 101c is a movable offline medium, provision c to the information use station 70 can be executed by mail or other means. As a result, the user of the information utilizing station 70 can browse the digital information as described below and perform secondary processing as necessary. At this time, a restoration table 120 to be described later is transmitted or its contents are printed and the information management station 1 notifies the information use station 70.
In the above operation, step 28 may be executed following step 26. In step 28, the optical disc device 14 is operated according to the instruction of the CPU of the control device 20, and the history (for example, recording date and time, digital Information creator, data volume, etc.). By executing step 28, the writing history of the optical disk 101b can be managed, and the creation history of the recording medium serving as the original can be managed.
[0047]
3) Operation of information utilization station 70
a) Digital information copy request
As described above, when the user desires to browse digital information managed by the information management station 1, the information use station 70 requests the information management station 1 to copy the digital information. In this case, the user operates the personal computer 71 to specify desired digital information, and creates data (copy request data) for requesting the copy. Then, the user executes transmission d of the copy request data to the information management station 1 via the network. Then, the information management station 1 generates the second recording medium on which the copy management information is recorded under the certain requirements as described above, that is, the optical disc 101c.
[0048]
b) Restoration of original digital information
The information utilization station 70 reads the copy management information 107 recorded on the provided optical disk 101c and restores the original digital information 104 as follows.
First, the user of the information utilizing station 70 sets the optical disk 101c in a predetermined optical disk reproducing device, and operates the personal computer 71 to receive the above-described restoration table 120 or to input the data by operating the input device. Then, the personal computer 71 reads the restoration table 120, instructs the optical disk reproducing apparatus to reproduce the information recorded on the optical disk 101c, and reads the recorded copy security information 108. The copy security information 108 includes an identification code (U _i Key) 108a. Its identification code (U _i When the restoration table 120 is searched with the key 108a, the restoration table 120 identifies the identification code (U) unique to the optical disc 101b in which the original management information 105 is recorded. ₀ Key) 106a and an identification code (U _i Key 108a is recorded in association with the information, and information indicating that the optical disk 101c is a duly authorized (authorized and valid) copy of the optical disk 101b is recorded. Thereby, the personal computer 71 recognizes the copy security information 108 without error.
[0049]
Subsequently, the personal computer 71 transmits the secret key (X _i Key) and authentication key (P _i Key) is read, and the original digital information 104 is restored from the copy management information 107 based on these keys.
In this way, the user of the information utilizing station 70 can restore the original digital information 104 from the copy management information 107 obtained by requesting the copy, and can use the digital information 104 by browsing the contents.
c) Management of secondary replication
On the other hand, in the information use station 70, it is expected that the user will make a secondary copy in which the optical disk 101c is erroneously or illegally copied to another recording medium. In this case, the CPU of the personal computer 71 As a result, the inconvenience due to the secondary duplication is eliminated as follows.
[0050]
First, it is assumed that the user operates the input device of the personal computer 71 to instruct to copy the optical disc 101c to another recording medium, that is, the optical disc 101d as the third recording medium. Then, the personal computer 71 detects the duplication operation, and as shown in FIG. 4, encrypts the original digital information obtained by restoring the duplication management information 107 to generate the secondary duplication information 109, and generates the secondary duplication information 109. It is recorded in a specific area, and the secondary copy security information 110 is generated, and is also recorded in a specific area of the optical disc 101d. The secondary copy security information 110 includes an identification code (U) unique to the optical disc 101d as the third recording medium. _j Key) 110a and a secret key (X _i Key) 106b and the authentication key (P _i Key) 108c. In this manner, the secondary copy information 109 obtained by encrypting the restored original digital information 104 can be recorded on the optical disc 101d.
[0051]
When reproducing the secondary copy information 109 recorded on the optical disc 101d, the personal computer 71 instructs the optical disc reproducing apparatus to reproduce the information recorded on the optical disc 101d in the same manner as in the case of the optical disc 101c. The next copy security information 110 is read. However, the identification code (U _j Since the Key) 110a is not registered in the restoration table 120, the secondary copy security information 110 cannot be correctly recognized. That is, even if the restored original digital information 104 is copied to another optical disk 101d, the secondary copy information 109 recorded there cannot be reproduced.
As described above, even if a user who is permitted to use digital information obtains the information, even if the user uses the digital information, the information using station 70 cannot reproduce the information recorded therein even if the user copies the obtained optical disk 101c. The range in which digital information can be used is limited. Thus, when the user of the information providing station 50 that provides digital information has an intellectual property right such as a copyright, the intellectual property can be appropriately protected.
[0052]
By the way, the security management system 100 is configured mainly on the above-described operation. By operating as described above, the security including the intellectual property of the digital information provider is ensured, and the malicious third party is provided. Prevention of data plagiarism, falsification, and the like can be realized. However, in the information use station 70 described above, the usable range of the digital information recorded on the optical disc 101c obtained by the user is limited. When the user performs secondary processing on the obtained digital information, the security management system 100 operates as follows.
[0053]
4) Operation of information utilization station 70 regarding secondary processing
a) Request for secondary processing of digital information
In the information use station 70, when the user desires the secondary processing of the digital information managed by the information management station 1, the user operates the personal computer 71 to request the secondary processing (secondary processing request data). And transmits e to the information management station 1.
b) Secondary processing of digital information
Further, in the information use station 70, when a secondary processing permission key described later is transmitted from the information management station 1, the CPU of the personal computer 71 detects the key and transmits the secondary processing permission key. The original optical information 101f is read, and the original digital information 104 is restored. Then, the user appropriately operates the input device of the personal computer 71 to perform secondary processing by supplementing and correcting the digital information 104, and performs secondary processing of the difference (change) of the digital information 104 due to the secondary processing. 111 is generated and recorded on the optical disk 101e. The optical disc 101e is processed by the information management station 1 by providing the information f to the information management station 1.
[0054]
5) Operation of information management station 1 regarding secondary processing
a) User authentication and access management
In performing the user authentication and the access management, the information management station 1 excludes the access by the unauthorized user who is not permitted to perform the secondary processing of the digital information among the users of the information use station 70. That is, in step 22 after the authentication key is issued to the user in step 21 as described above, the process proceeds to step 24 in accordance with the selection of the secondary processing request by the user, and the CPU of the control device 20 operates as the access management means. Then, the user is required to input information necessary for permitting the secondary processing. Then, the CPU of the control device 20 determines whether or not the secondary processing is possible based on the input contents, and issues a secondary processing permission key to the user when the authentication is performed, and issues a secondary processing permission key when the authentication is not performed. do not do. Thereafter, a user who desires secondary processing of digital information is requested to input a secondary processing permission key, and the access of a user who does not have the input is excluded. By doing so, the security management system 100 limits users who can perform secondary processing of digital information to specific users, effectively secures the security including the intellectual assets of the digital information provider, It is possible to realize efficient reuse of information by an authenticated user.
[0055]
b) Generation of recording medium for secondary processing
Then, when the permission key for the secondary processing is input, the CPU of the control device 20 advances the processing to step 27 to generate the optical disk 101f for secondary processing, and executes step 28 as necessary. , And the process ends. The copy management information 107 and the copy security information 108 are stored in a specific area on the optical disc 101f, as in the optical disc 101c. However, an identification code unique to the optical disc 101f is recorded in the identification code 108a. The secondary processing optical disk 101f is provided by mail or the like to the information utilization station 70, and further provided with an identification code (U ₀ Key) 106a and an identification code (U _k Key) 108a is notified of the restoration table recorded in association with the key 108a.
[0056]
c) Generation and management of original management information after secondary processing
Next, when the information management station 1 receives the optical disk 101e from the information use station 70, the secondary digital information 111 recorded on the provided optical disk 101e is fetched by operating the media distribution business system 3, and 6 to the security management unit 10.
When the security management unit 10 activates the file system 11 and receives the secondary digital information 111, the server 12 operates as follows according to the flowchart shown in FIG.
When the server 12 receives the secondary digital information 111, the CPU of the control device 20 operates according to the program stored in the ROM, and proceeds to step 1 from a main routine (not shown). Then, steps 1, 2, and 3 are sequentially executed in the same manner as described above. Since it is the secondary digital information 111 provided by the information using station 70 in the determination in step 3, the process proceeds to step 5, and Is assigned a unique management number (management ID).
[0057]
Subsequently, the process proceeds to step 30, where the secondary digital information 111 is merged with the original digital information 104 before the secondary processing to generate the digital information 104 incorporating the difference, and then the process proceeds to step 6. Thereafter, the original document management information 105 and the security information 106 are generated by performing the encryption process in the same manner as described above, and are recorded on the original optical disc 101b as new original digital information.
By doing as described above, not only the efficient reuse of the digital information by the authenticated user can be realized, but also the contents of secondary processing such as correction by the reuse are reflected in the original original, In addition, security is effectively ensured after the secondary processing in the same manner as before the processing.
When step 28 is executed following step 27, the history of the secondary processing can be recorded on the optical disk 101b, so that the history by the information utilizing station 70 can be effectively managed.
[0058]
【The invention's effect】
As described above, according to the present invention, security including the intellectual property of the provider of digital information is effectively secured, and theft, falsification, destruction, and the like of data by impersonating a malicious third party are effectively performed. Is prevented. In addition, efficient reuse of digital information by an authenticated user can be realized.
[Brief description of the drawings]
FIG. 1 is a system configuration diagram showing the overall configuration of a digital information security management system according to the present invention.
FIG. 2 is a diagram showing a main configuration of an information management station, and an information providing station and an information using station together with recording media exchanged in the system.
FIG. 3 is a functional block diagram showing an internal configuration of a server, an optical disk, and an interface between the two.
FIG. 4 is an explanatory diagram showing an operation of an information utilizing station among operations by the security management system.
FIG. 5 is an explanatory diagram mainly showing an operation of an information management station among operations by the security management system.
FIG. 6 is a functional block diagram illustrating an example of a main part of an internal configuration of the optical disc device.
FIG. 7 is a flowchart illustrating a procedure of an operation related to generation and management of original management information by a security management unit;
FIG. 8 is a flowchart illustrating a procedure of an operation relating to generation of copy management information by a security management unit.
[Explanation of symbols]
1: Information management station 5: Information processing device
10: Security management unit
11: File system 12: Server
14: Optical disk device 20: Control device
21: Input device 22: Display device
23: Recording device 24: Interface
25: Changer 30: Spindle motor
31: Optical pickup 32: Motor driver
46: CPU 47: RAM
50: Information provision station 70: Information use station
51, 71: PC
100: Security management system
101, 101a, 101b, 101c: optical disk
101d, 101e, 101f: optical disk
104: Digital information 105: Original management information
106: Security information 107: Copy management information
108: Copy security information
109: Secondary copy information 111: Secondary digital information
110: Secondary copy security information

Claims (15)

Original data management means for encrypting provided digital information to generate original data management information and recording the original data management information on a first recording medium together with security information including an identification code unique to a recording medium and a secret key unique to the digital information. When,
Access control means for granting access to authenticated users;
Generating copy management information from the first recording medium in response to a copy request of the digital information from a user authenticated by the access management unit, and using the copy management information as an identification code unique to the recording medium, the secret key, A copy management unit for recording the copy security information including the authenticated user-specific authentication key on a second recording medium together with the copy security information. An information providing station having means for generating digital information,
The digital information provided by the information providing station is encrypted to generate original management information, and the original management information is stored in the first recording medium together with security information including an identification code unique to the recording medium and a secret key unique to the digital information. Original management means for recording, access management means for permitting access to an authenticated user, and copy management information from the first recording medium in response to a digital information copy request from a user authenticated by the access management means And copy management information for causing the copy management information to be recorded on a second storage medium together with copy security information including a recording medium-specific identification code, the secret key, and the authenticated user-specific authentication key. Management bureau,
Means for requesting the information management station to copy the digital information; means for recognizing the copy security information recorded on the second recording medium provided by the information management station without error; Restoring means for restoring original digital information from the copy management information recorded on the second recording medium when the security information is recognized without error; and Encrypts the restored digital information to generate secondary copy information, and stores the secondary copy information together with an identification code unique to the recording medium and secondary copy security information including the secret key and the authentication key on a third recording medium; A digital information security management system, comprising: an information utilization station having secondary copy management means for recording the information in a digital copy. The digital information security management system according to claim 1 or 2,
A digital information security management system, comprising means for encrypting the security information. The digital information security management system according to claim 2 or 3,
Means for requesting the information management bureau for permission for secondary processing of the restored digital information, and secondary processing of the restored digital information when receiving permission for secondary processing from the information management bureau. Means for generating secondary digital information, wherein the means for generating secondary digital information is provided in the information utilizing station. The access management means is configured to exclude access of an unauthorized user of the secondary processing,
The original management means is configured to encrypt the digital information provided from the information providing station together with the secondary digital information provided from the information using station to generate the original management information. The digital information security management system according to claim 4. The digital information security management system according to any one of claims 2 to 5,
A digital information security management system, characterized in that the information management station is provided with a unit for recording a generation history of the original management information by the original management unit. Encrypting the provided digital information to generate original management information, causing the original management information to be recorded on a first recording medium together with security information including an identification code unique to a recording medium and a secret key unique to the digital information,
Generating copy management information from the first recording medium in response to a copy request of the digital information of a user who has authenticated access;
The copy management information is recorded on a second recording medium together with a recording medium-specific identification code, copy security information including the secret key and the authenticated user-specific authentication key, and the copy management information is stored together with the copy security information. A security management method for digital information, wherein a second recorded medium is generated. An information management station and a security management method for digital information realized by an information use station,
In the information management station, provided digital information is encrypted to generate original management information, and the original management information is first recorded together with security information including an identification code unique to a recording medium and a secret key unique to the digital information. Recording on a medium, generating copy management information from the first recording medium in response to a copy request of the digital information from a user who is authorized to access the information use station, and generating the copy management information unique to the recording medium. A second recording medium is recorded on a second recording medium together with an identification code, the secret key and copy security information including the authenticated user-specific authentication key, and the copy management information is recorded together with the copy security information. And
In the information using station, the original digital information is restored from the copy management information recorded by recognizing the copy security information recorded on the second recording medium provided from the information management station without error, Upon detecting the duplication operation of the second recording medium, the restored digital information is encrypted to generate secondary duplication information, and the secondary duplication information is recorded with an identification code unique to the recording medium, the secret key, and A security management method for digital information, wherein the security information is recorded on a third recording medium together with secondary copy security information including an authentication key. 9. The digital information security management method according to claim 7, wherein the security information is encrypted and recorded. The security management method for digital information according to claim 8 or 9,
The information utilization station requests the information management station for permission of secondary processing of the restored digital information, and the information processing station receives the permission of the secondary processing from the information management station in response to the request. A digital information security management method characterized by generating secondary digital information obtained by subjecting digital information to secondary processing. In the information management station, the access of an unauthorized user of the secondary processing is excluded, and the provided digital information is encrypted together with the secondary digital information provided from the information using station to generate the original management information. 11. The security management method for digital information according to claim 10, wherein: The digital information security management method according to any one of claims 8 to 11,
A security management method characterized by recording a generation history of the original management information. A function of encrypting the provided digital information to generate original management information and recording the original management information on a first recording medium together with security information including an identification code unique to the recording medium and a secret key unique to the digital information; ,
The ability to grant access to authenticated users,
Generating copy management information from the first recording medium in response to a copy request of the digital information of a user permitted to access by the function, and using the copy management information as an identification code unique to the recording medium, the secret key, and A digital information security management program for causing a computer to realize a function of recording on a second recording medium together with duplicate security information including an authenticated user-specific authentication key. The digital information security management program according to claim 13, wherein the computer implements a function of encrypting the security information when recording the security information on the first recording medium. A computer-readable recording medium recording the digital information security management program according to claim 13.

Images