JP2004046448A - Delivery data management system and method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To enable, in the delivery of digital data through a communication network, the timely use of the delivered digital data while surely preventing an illicit use such as duplicate. <P>SOLUTION: This system comprises a first device constituted to be communicable with a data delivery server, and a second device for storing unique identification information, which is constituted to be electrically connectable to the first device. The first device has the function of reading, on receipt of an acquisition request with data designation from a user, the identification information from the second device connected to the first device followed by transmitting to the data delivery server, and receiving designation data encoded based on the identification information (hereinafter referred to as "cipher data") and the function of decoding, on receipt of a user request with data designation from the user, the cipher data based on the identification information read from the second device connected to the first device to generate designation data, and deleting the generated designation data when the use is ended. <P>COPYRIGHT: (C)2004,JPO

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to a management technique for preventing illegal use of digital data distributed via a communication network, such as duplication.
[0002]
[Prior art]
In recent years, along with the adoption of broadband communication networks, download sales that distribute only software and the like via a communication network such as the Internet have become widespread, instead of package sales that sell software and the like stored in CD-ROMs or the like at stores. It is starting to spread.
[0003]
Compared to package sales, download sales can be used in a timely manner without being restricted by location and time, and the selling price is set lower because users do not have to pay for packaging and storage media. With so many benefits, the number of users is expected to increase in the future.
[0004]
[Problems to be solved by the invention]
Digital data such as software can be easily duplicated without wear and tear. When selling digital data, it is necessary to effectively prevent the use (illegal use) of the duplicated data by users other than authorized users. It is necessary to establish some framework for
[0005]
Conventionally, as a framework, a license key (a password composed of character data or the like) for using digital data is separately created, and only a user who has purchased the license key is notified of the license key, so that the user does not have a license key. In many cases, a framework for eliminating unauthorized use by users is adopted.
[0006]
However, under such a framework, if the license key is leaked or disclosed and the license key itself is duplicated, there is a problem that unauthorized use can no longer be prevented.
[0007]
As one measure against such a problem, there is a method in which a license key is not formed by character data or the like but is formed by a physical device called a hardware key (or dongle). In this method, a hardware key is provided to a user together with digital data, and the hardware key is configured so that the digital data cannot be used unless the computer is connected to the hardware key (for example, a program does not operate normally). This prevents unauthorized use of the replicated data alone. This method makes use of the fact that it is difficult to duplicate a hardware key, and can be said to have a higher effect of suppressing unauthorized use than a license key such as character data that can be easily duplicated.
[0008]
However, if such a hardware key method is adopted in download sales, the following problem occurs.
[0009]
The first is a problem related to hardware key distribution. For example, in the case of package sales, the distribution of the hardware key corresponding to software or the like does not pose a problem, since it may be sold together with the package. However, in the case of download sales, every time distribution is performed, the hardware key corresponding to the distribution data must be distributed to the user by mail or the like. The advantage of download sales that data is available in a timely manner will be greatly impaired.
[0010]
The second problem is that it is difficult to apply existing programs and the like when downloading and selling them. In the conventional hardware key method, it is necessary to make a program or the like correspond to a hardware key, for example, by inserting a software lock that refers to the hardware key during a program process. However, most of the existing programs and the like usually do not support hardware keys, except for those originally developed for hardware keys. This is because it is considered that it is practically impossible to perform such a task because it requires an unrealistic high-load operation such as analysis of a program.
[0011]
Therefore, the present invention provides a method for distributing digital data in a timely manner when distributing digital data via a communication network, particularly when distributing existing programs and the like, while reliably preventing unauthorized use such as duplication. The purpose is to provide a new framework that enables efficient use.
[0012]
[Means for Solving the Problems]
A distribution data management system according to the present invention includes a first device configured to be communicable with a data distribution server via a communication network, and configured to be electrically connectable to the first device. And a second device for storing, wherein the first device is connected to the first device when an acquisition request is made by designating data from a user. The device reads the identification information from the second device, transmits the identification information to the data distribution server, and receives designated data (hereinafter, referred to as “encrypted data”) encrypted based on the identification information from the data distribution server. When there is a function and a use request by designating data from the user, the identification information is read from the second device connected to the first device, and the encrypted data is decrypted based on the identification information. Designated data It generates data, characterized in that it and a function to delete the specified data thus generated when the use is finished.
[0013]
The encrypted data is encrypted based on the random number information determined by the data distribution server and the identification information. When the first device receives the encrypted data, the first device transmits the random number information used for the encryption. A function of receiving and writing the received random number information to a second device; and, when a use request is made by designating data from a user, identification of the data from a second device connected to the first device. Read out the information and the corresponding random number information, decrypt the encrypted data based on the identification information and the random number information to generate designated data, and delete the generated designated data when the use is completed. desirable.
[0014]
The first device, when receiving the encrypted data, has a function of receiving the usage restriction information of the encrypted data and writing the received usage restriction information to the second device, and designating and using the data from a user. When there is a request, it is desirable to read the corresponding use restriction information from the second device connected to the first device and generate the designated data on condition that the use restriction is satisfied.
[0015]
The second device stores the check information of the first device, and the first device reads the check information from the second device connected to the first device when starting up, It is desirable to have a function of determining whether or not the first device has been changed based on the check information.
[0016]
Further, when there is an acquisition request by designating data from the user, the identification information of the second device connected to the first device is received from the first device, and the user is notified based on the identification information. It is preferable to include a data distribution server having a function of encrypting designated data to generate encrypted data and transmitting the encrypted data to the first device.
[0017]
Further, the distribution data management system of the present invention includes a first device configured to be able to communicate with a data distribution server via a communication network. In this case, the first device is configured to be electrically connectable to the first device and is used in combination with the second device that stores unique identification information. When there is, the identification information is read from the second device connected to the first device, the identification information is transmitted to the data distribution server, and the data is encrypted based on the identification information from the data distribution server. And a function of receiving specified data (hereinafter referred to as “encrypted data”), and a function of receiving data from a user when the user requests data to be used from a second device connected to the first device. A function of reading the identification information, decrypting the encrypted data based on the identification information to generate designated data, and deleting the generated designated data when the use is completed.
[0018]
Further, the distribution data management system of the present invention is a distribution data management system used in combination with a data distribution server and a first device communicable via a communication network, wherein the distribution data management system is electrically connected to the first device. And a second device configured to store the unique identification information. In this case, the identification information is read out by the first device and transmitted to the data distribution server when the acquisition request is made by designating the data from the user, and the data distribution server encrypts the specified data. Preferably, it is used to generate encrypted data. Also, the identification information is read by the first device when a use request is made by designating data from a user, and is used to decrypt encrypted data of the designated data received from the data distribution server. It is characterized by being able to.
[0019]
The distribution data management system of the present invention is a distribution data management system used in combination with a first device and a second device that stores unique identification information configured to be electrically connectable to the first device. And a data distribution server configured to be communicable with the first device via a communication network. In this case, the data distribution server receives the identification information of the second device connected to the first device from the first device when there is an acquisition request by designating the data from the user, and It has a function of encrypting data specified by the user based on the identification information to generate encrypted data, and transmitting the generated encrypted data to the first device.
[0020]
In the distribution data management system of the present invention, it is preferable that the second device functions as an input device for the first device. Further, it is preferable that the second device is configured to be electrically connectable to the first device based on the USB standard. Further, it is preferable that the data distribution server has a function of executing a billing process for a user corresponding to the identification information in accordance with the designated data when the identification information is received from the first device. Preferably, the data is a game program.
[0021]
A distribution data management method according to the present invention includes a data distribution server, a first device configured to be communicable with the data distribution server via a communication network, and configured to be electrically connectable to the first device. And a second device for storing unique identification information, wherein the first device specifies the data from the user and requests the first device to acquire the data. Reading the identification information from a second device connected to the first device and transmitting the identification information to the data distribution server; and the data distribution server identifying the second device connected to the first device. Receiving from the first device, encrypting data specified by the user based on the identification information to generate encrypted data, and transmitting the generated encrypted data to the first device; But data distribution server Receiving the specified data (hereinafter, referred to as “encrypted data”) encrypted based on the identification information, and when the first device specifies the data from the user and issues a use request, The identification information is read from the second device connected to the first device, the encrypted data is decrypted based on the identification information to generate the specified data, and when the use is completed, the generated specified data is deleted. And a step of performing
[0022]
A program according to the present invention causes a computer to execute the steps of the distribution data management method according to the present invention. The program of the present invention can be installed or loaded on a computer through various recording media such as a CD-ROM, a magnetic disk, and a semiconductor memory.
[0023]
BEST MODE FOR CARRYING OUT THE INVENTION
(1st Embodiment)
Hereinafter, embodiments of the present invention will be described with reference to the drawings.
[0024]
FIG. 1 is a block diagram showing a configuration of a distribution data management system according to the first embodiment of the present invention. As shown in FIG. 1, the distribution data management system 1 includes a data distribution server 10, a first device 20, and a second device 30.
[0025]
The data distribution server 10 and the first device 20 are connected via a communication network (which may be any of a LAN, the Internet, a dedicated line, a packet communication network, a combination thereof, and the like, including both wired and wireless) They are configured to be able to communicate with each other.
[0026]
The first device 20 and the second device 30 are configured to be electrically connectable based on, for example, the USB (Universal Serial Bus) standard. When the first device 20 is connected to the second device 30, the first device 20 can refer to information stored in the second device. Although FIG. 1 shows only one of each of the first device 20 and the second device 30, a plurality of these devices can be provided according to the number of users.
[0027]
Here, in the present invention, what kind of digital data is to be distributed can be determined according to the design. Hereinafter, the present embodiment will be described by taking a case where a game program is targeted as an example.
[0028]
The data distribution server 10 is configured by an information processing apparatus having a general configuration including a control unit (CPU), input / output units (keyboard, mouse, display, etc.), storage units (RAM, ROM, hard disk, etc.). Can be.
[0029]
The data distribution server 10 is configured to be able to access a user database 11 and a game database 12. Each of the databases 11 and 12 only needs to be configured so as to be directly or indirectly accessible by the data distribution server 10, and is configured as a part of the data distribution server 10 in FIG. May be below.
[0030]
The user database 11 stores personal information and the like of a user who uses the second device 30 in association with unique identification information (hereinafter, referred to as “identification ID”) stored in the second device 30 described below. (See FIG. 2A).
[0031]
In the present embodiment, since it is assumed that the user uses the same second device 30 every time in principle, the user is specified by the identification ID. However, depending on the design, the user database 11 is configured to allow a single user to use a plurality of second devices 30 and to allow a plurality of users to share the same second device 30. Is also good.
[0032]
As the personal information, for example, name, address, e-mail address, age, occupation, gender, telephone number, information of the game distributed, information necessary for billing processing (credit card number, prepaid card number, balance information, etc.) And so on. It is desirable that the personal information be configured so that the user can input the information via the first device 20 or the like. However, the personal information may be configured so that the administrator or the like of the system 1 inputs the personal information instead.
[0033]
The game database 12 stores a game program, game-related information, and the like in association with identification information for identifying a game (hereinafter, referred to as a “game ID”) (see FIG. 2B).
[0034]
The game program may be various game programs such as a game for a personal computer, a game for a home game machine, an arcade game, and a game dedicated to the second device 20. However, it is assumed that the first device 20 has an environment in which the game program can be executed (for example, an emulator for a home game machine).
[0035]
The game-related information includes, for example, a game name, unit price information, and the like. The unit price information may be, for example, a usage fee per day.
[0036]
The data distribution server 10 executes an encryption process, a distribution process, a billing process, and the like of the game program by referring to these databases in response to a request from the user sent via the first device 20. Each of these processes will be described together in the description of the process executed by the first device 20.
[0037]
The first device 20 includes an information processing device having a general configuration including a control unit (CPU), an input / output unit (keyboard, mouse, display, etc.), a storage unit (RAM, ROM, hard disk, etc.) (A general personal computer or a mobile terminal owned by the user). However, the first device 20 may be configured as a dedicated device of the present system 1.
[0038]
The first device 20 stores an encrypted game program (hereinafter, referred to as “encrypted game data”), game-related information, and the like in association with the game ID in the storage unit (FIG. 3 ( a)). As described later, the encrypted game data and the like are transmitted from the data distribution server 10 and stored in the storage unit of the first device 20.
[0039]
Further, the first device 20 stores programs (launcher program, emulator program, etc.) corresponding to each process such as an initial check process, a game acquisition process, and a game execution process in its storage means. The emulator program may be configured as a part of the launcher program. FIG. 1 illustrates some of the functions realized when the control unit of the first device 20 executes each program.
[0040]
The second device 30 is configured as a dedicated device of the present system 1 in principle, and includes at least a storage unit that can be referred to from the first device 20 in a connected state.
[0041]
The second device 30 may be configured to further include input means such as operation buttons and a cross key, and may function as a controller (operation input device) when the first device 20 executes a game. In this case, the operation states of the operation buttons and the cross key are periodically converted into codes and read out from the first device 20.
[0042]
The second device 30 stores the above-mentioned identification ID in its storage means. As the identification ID, for example, a serial number or the like assigned to the second device 20 can be used.
[0043]
Further, the second device 30 stores, in its storage unit, random number information used when encrypting the game, usage period information for restricting the use of the game, and the like in association with the game ID ( FIG. 3 (b)). As will be described later, the random number information and the expiration date information are transmitted from the data distribution server 10 and written by the first device 20 in the storage unit of the second device 30.
[0044]
Further, the second device 30 stores check information of the launcher program in its storage means. As will be described later, the check information is calculated by the first device 20 at a timing such as when the launcher program is updated, and written into the storage unit of the second device 30.
[0045]
Note that the second device 30 may independently include a CPU. In this case, the process of reading data from the second device 30 by the first device 20 (the process of writing data to the second device 30) is performed by the first device 20. This is understood as a process in which the device 20 receives data from the second device 30 (a process of transmitting data to the second device 30).
[0046]
Next, a framework for managing distribution data, which is realized using the present system 1, will be described with reference to the processing flows shown in FIGS. Note that the steps can be executed in any order or in parallel as long as no inconsistency occurs in the processing contents.
[0047]
(Initial check processing: Fig. 4)
When a start command or the like is input by a user, the first device 20 executes (starts) a launcher program stored in the device (S100). However, the configuration may be such that the launcher program is automatically executed when the power of the first device 20 is turned on or when the second device 30 is electrically connected to the first device 20.
[0048]
First, the first device 20 performs an initial check process for determining whether or not the first device 20 (the launcher program) has been changed based on the launcher program (S101 to S109).
[0049]
Specifically, the first device 20 calculates check information for a launcher program stored in the device (S101). As such check information, for example, a checksum (a value obtained by summing codes of the launcher program as numbers) can be used.
[0050]
Further, the first device 20 reads out the check information stored from the storage unit of the second device 30 connected to the first device 20 (S102).
[0051]
Then, the first device 20 compares the check information calculated in S101 with the check information read in S102 (S103), and when they do not match, outputs a message such as "cannot start" and ends the processing. (S104).
[0052]
On the other hand, if they match, the first device 20 accesses the data distribution server 10 and requests current time information (S105). At this time, in consideration of, for example, a case where the connection with the data distribution server 10 is charged, the user is inquired in advance as to whether or not the data distribution server 10 can be accessed, and when the user performs an input indicating permission. Only the access may be started.
[0053]
As described above, in the present embodiment, while the launcher program is stored in the first device 20, the check information (such as checksum) of the launcher program itself is stored in the second device 30 which is physically different from the first device 20. In the initial check process, the subsequent process is executed only when the two match (that is, when the storage content of the first device 20 is not changed), so that the launcher program itself is tampered with incorrectly. This prevents unauthorized use of the encrypted game data.
[0054]
When receiving the request for the current time information, the data distribution server 10 transmits the current time information managed and stored by the server 10 (or another reliable server or the like) to the first device 20 (S106).
[0055]
The first device 20 receives the current time information from the data distribution server 10 (S107), extracts the game ID of the encrypted game data stored in the first device 20, and is connected to the first device 20. The usage expiration information corresponding to the extracted game ID is read from the storage means of the second device 30 (S108).
[0056]
Then, the first device 20 compares the received current time information with the read usage term information for each piece of cryptographic game data. It is deleted (S109). At this time, a configuration may be adopted in which a predetermined message or the like is output before deletion in order to draw the user's attention.
[0057]
As described above, in the present embodiment, since the deletion of the distributed encrypted game data is managed based on the expiration date information stored in the second device 30, the game providing side provides the game program in a rental format instead of a so-called out-of-sale. It is possible to set a fee system with a higher degree of freedom. In addition, since the current time information is acquired from the data distribution server 10, even if the current time managed and stored by the first device 20 is illegally changed, the encrypted game data is used beyond the expiration date. Can be prevented.
[0058]
It should be noted that the deletion of the encrypted game data may be managed based on usage restriction information such as the number of times of use instead of / in addition to the usage period.
[0059]
After the initial check processing, the first device 20 displays a predetermined menu screen on a display or the like (S110). The user can select “acquire game”, “execute game”, “end” and the like based on the menu screen.
[0060]
(Game acquisition processing: FIG. 5)
When “game acquisition” is selected on the menu screen, the first device 20 executes a game acquisition process based on the launcher program (S200 to S202, S209).
[0061]
Specifically, first, the first device 20 displays a list screen including a game name, a usage fee, and the like on a game that can be acquired on a display or the like (S200). At this time, the data distribution server 10 (game database 12) may be accessed to acquire the game-related information of the obtainable game and to display the acquired information on the list screen. The user can request acquisition by designating a desired game based on the list screen.
[0062]
When a game (game ID) is designated on the list screen, the first device 20 reads the stored identification ID from the storage unit of the second device 30 connected to the first device 20 (S201). .
[0063]
Then, the first device 20 transmits the specified game ID and the read identification ID to the data distribution server 10, and requests game acquisition (S202).
[0064]
When receiving the game acquisition request, the identification ID, and the game ID, the data distribution server 10 accesses the game database 11 and acquires the game program and the game-related information corresponding to the received game ID (S203). The game database 11 may receive a game ID or the like from the first device 20 and transmit a game program or the like corresponding to the game ID to the data distribution server 10.
[0065]
Further, the data distribution server 10 determines random number information used for encryption (S204). A conventional algorithm can be used to determine the random number information.
[0066]
In addition, the data distribution server 10 determines a usage period and a billing amount for the game for which the acquisition has been requested (S205). The usage period is determined by adding, for example, a default usage period (eg, one day or one week), a usage period determined according to a game, or a usage period determined according to a request from a user, to the current time. To decide. Further, the charge amount is determined by integrating the unit price information included in the acquired game-related information during the determined use period. It should be noted that the billing amount may be determined irrespective of the usage period.
[0067]
Then, the data distribution server 10 encrypts the game program according to a predetermined algorithm based on the received identification ID and the determined random number information, and generates encrypted game data (S206). As the encryption algorithm, it is conceivable to use a common symmetric key encryption algorithm such as RC2, RC5, DES, Triple-DES, and IDEA.
[0068]
Next, the data distribution server 10 transmits the determined random number information, the determined usage period, the generated encrypted game data, and the obtained game-related information to the first device 20 that has transmitted the game acquisition request. (S207).
[0069]
Further, the data distribution server 10 accesses the user database 11, acquires the personal information of the user corresponding to the received identification ID, obtains information necessary for the billing process included in the personal information, and the determined section. Based on the amount, a predetermined charging process is executed, and the information of the distributed game included in the personal information is updated (S208).
[0070]
An external payment processing system such as a payment system of a so-called credit card company, a prepaid charging system using the Internet, and a system for performing payment by paying at a store such as a convenience store can be used for the charging process. When these are used, the data distribution server 10 sends and receives data to and from a billing / settlement server of each system operating company and requests a billing procedure.
[0071]
When the first device 20 receives the encrypted game data, the random number information, the expiration date, and the game-related information from the data distribution server 10, the first device 20 transmits the received encrypted game data and the game-related information to the designated game ID (the received The storage unit of the first device 20 stores the received random number information and the usage period in the storage unit of the second device 30 in association with the game ID (the game ID of the encrypted game data) (S209). ), And returns to the display of the menu screen of S109 and the list screen of S200.
[0072]
(Game execution processing: FIG. 6)
When "execute game" is selected on the menu screen, first device 20 executes a game execution process based on the launcher program (S300 to S307).
[0073]
Specifically, the first device 20 first checks whether or not the use time limit is satisfied (use time limit check processing) (S300 to S301). That is, the game ID of the encrypted game data stored in the first device 20 is extracted, and the use ID corresponding to the extracted game ID is stored in the storage unit of the second device 30 connected to the first device 20. The term information is read (S300). Next, for each encrypted game data, the current time information received in the initial check processing is compared with the read usage period information, and if the current time has passed the usage period, the encrypted game data is deleted. (S301). At this time, a configuration may be adopted in which a predetermined message or the like is output before deletion in order to draw the user's attention.
[0074]
Next, the first device 20 displays, on a display or the like, a list screen including the game name, the use expiration date, and the like for the remaining cryptographic game data that has not been deleted (encrypted game data satisfying the use expiration date) ( S302). The user can specify a desired game based on the list screen and request execution (use).
[0075]
When a game (game ID) is designated on the list screen, the first device 20 identifies the identification ID stored in the storage unit of the second device 30 connected to the first device 20 and the designated ID. The random number information corresponding to the game ID is read (S303).
[0076]
Then, the first device 20 reads the encrypted game data corresponding to the specified game ID from the storage unit, and decrypts the encrypted game data based on the read identification ID and the random number information to generate a game program. (S304). At this time, a configuration may be adopted in which a part of the game program (for example, about 5% of the entire game program) is stored in a storage unit such as a RAM instead of a storage unit such as a hard disk which can be easily copied by file operation. desirable.
[0077]
As described above, in the present embodiment, since the encrypted game data is automatically decrypted based on the identification ID read from the second device 30, the user does not need to input a password or the like for decryption, and the operation burden is reduced. Is reduced.
[0078]
Next, the first device 20 executes a game based on the generated game program (S305). For example, when the game program is a game for a home game device, an emulator of the home game device is started using the storage address of the game program and the like as a parameter (executes the emulator program).
[0079]
Thereby, the user can play the game using the input means (such as the operation button and the cross key) of the second device 30.
[0080]
When the predetermined condition is satisfied (for example, when the user inputs an operation such as termination), the first device 20 terminates the execution of the game and returns to the execution of the launcher program (S306).
[0081]
Here, for the launcher program, during the game execution (or during the execution of the emulator program), a process of periodically checking the expiration date may be executed in parallel with the process of executing the game. As such a process, for example, the expiration date information of the game currently being executed is compared with the current time information, and a message or the like is output when a predetermined time (for example, 30 minutes) before the expiration date is reached. The game may be forcibly interrupted when a predetermined time (e.g., 5 minutes has elapsed) from the expiration date, or the user may perform a predetermined input operation to extend the expiration date (continuous purchase).
[0082]
Finally, based on the restored launcher program, the first device 20 deletes the generated game program from storage means such as a hard disk or a RAM (S307), and returns to the menu screen in S109, the display of the list screen in S302, and the like. .
[0083]
As described above, in the present embodiment, the device on the user side that uses the game program is configured to be separated from the first device 20 and the second device 30, and the encrypted game data distributed to the first device 20 is stored. Since the second device 30 which is physically different from the first device 20 stores the encryption key (identification ID, random number information) when generating the encrypted game data, the first device 20 during the execution of the game acquisition process is stored. If the combination of the game device and the second device 30 is not maintained, it is impossible to decrypt the encrypted game data and execute the game. Therefore, in order to illegally execute the game, not only the encryption game data but also the encryption key of the second device must be duplicated. However, the second device 30 configured as a dedicated device is analyzed and the encryption key is analyzed. Is not easy to extract, and it is not easy to physically duplicate the second device 30 itself. As a result, unauthorized use can be effectively suppressed. In other words, it can be said that the framework realized by the present invention has the same robust anti-fraud effect as the conventional hardware key system.
[0084]
Further, under the above framework, the second device 30 functions as a common hardware key for the cryptographic game data that has been properly distributed, so that the hardware key corresponding to the cryptographic game data is provided to the user each time the distribution is performed. There is no need to distribute, so the user can run the game in a timely manner.
[0085]
Further, under the above framework, the game program to be distributed is only subjected to encryption / decryption processing, and there is no need to modify or change the program itself. Therefore, it is possible to easily distribute an existing game program using the above framework.
[0086]
(Modification)
The present invention is not limited to the above embodiments and can be applied in various modifications.
[0087]
For example, in the first embodiment, it can be considered that the launcher program itself can be updated.
[0088]
In this case, first, the first device 20 transmits the version information of the launcher program stored in the storage unit to the launcher program distribution server. The launcher program distribution server may be shared by the data distribution server 10.
[0089]
The launcher program distribution server accesses the storage unit that stores the version information of the launcher program, reads the latest version information of the launcher program, and compares the read version information with the version information received from the first device 20. If the two are different, the storage unit that stores the launcher program is accessed to read the latest launcher program and transmit it to the first device 20.
[0090]
When receiving the latest launcher program, the first device 20 calculates the check information and writes the calculated check information into the storage unit of the second device 30 connected to the first device 20.
[0091]
In addition, the first device 20 updates the old launcher program stored in the device with the latest launcher program, and restarts the launcher program as needed.
[0092]
Such an update process may be configured to be automatically executed prior to the initial check process, or configured so that the user can select and request execution on a menu screen displayed after the initial check process. Is also good.
[0093]
【The invention's effect】
According to the present invention, when digital data is distributed via a communication network, particularly when an existing program or the like is distributed, timely distribution of the distributed digital data is prevented while reliably preventing unauthorized use such as duplication. Provide a new framework that enables efficient use.
[Brief description of the drawings]
FIG. 1 is a block diagram showing a configuration of a distribution data management system according to a first embodiment of the present invention.
FIG. 2 is a diagram for explaining a data structure in a user database 11 and a game database 12.
FIG. 3 is a diagram for explaining a data structure of data stored in a first device 20 and a second device 30.
FIG. 4 is a flowchart illustrating an initial check process.
FIG. 5 is a flowchart illustrating a game acquisition process.
FIG. 6 is a flowchart illustrating a game execution process.
[Explanation of symbols]
1 delivery data management system
10 Data distribution server
11 User database
12 Game Database
20 First device
30 Second device

Claims (14)

A first device configured to be communicable with the data distribution server via a communication network; and a second device configured to be electrically connectable to the first device and stores unique identification information. , A distribution data management system,
The first device is
When an acquisition request is made by designating data from the user, the identification information is read from the second device connected to the first device, and the identification information is transmitted to the data distribution server. A function of receiving designated data (hereinafter, referred to as “encrypted data”) encrypted based on the identification information;
When there is a use request by designating data from the user, the identification information is read from the second device connected to the first device, and the designated data is decrypted based on the identification information to decrypt the encrypted data. A distribution data management system comprising: a function of generating and deleting the generated specified data when the use is completed. The encrypted data is encrypted based on the random number information determined by the data distribution server and the identification information,
The first device is
A function of receiving random number information used for encryption when receiving the encrypted data, and writing the received random number information to a second device;
When there is a use request by designating data from the user, the identification information and the corresponding random number information are read from the second device connected to the first device, and encrypted based on the identification information and the random number information. 2. The distribution data management system according to claim 1, further comprising a function of decoding the data to generate designated data, and deleting the generated designated data when the use is completed. The first device is
When receiving the encrypted data, a function of receiving the usage restriction information of the encrypted data and writing the received usage restriction information to a second device;
When there is a use request by designating data from the user, the corresponding use restriction information is read from the second device connected to the first device, and the specified data is read on condition that the use restriction is satisfied. 3. The distribution data management system according to claim 1, wherein The second device stores the check information of the first device, and the first device reads the check information from the second device connected to the first device when starting up, The distribution data management system according to any one of claims 1 to 3, further comprising a function of determining whether a change has been made to the first device based on the check information. A distribution data management system including a first device configured to be communicable with a data distribution server via a communication network,
The first device is
Used in combination with a second device configured to be electrically connectable to the first device and storing unique identification information;
When an acquisition request is made by designating data from the user, the identification information is read from the second device connected to the first device, and the identification information is transmitted to the data distribution server. A function of receiving designated data (hereinafter, referred to as “encrypted data”) encrypted based on the identification information;
When there is a use request by designating data from the user, the identification information is read from the second device connected to the first device, and the designated data is decrypted based on the identification information to decrypt the encrypted data. A distribution data management system comprising: a function of generating and deleting the generated specified data when the use is completed. A distribution data management system used in combination with a data distribution server and a first device configured to be communicable via a communication network,
The distribution data management system includes a second device configured to be electrically connectable to the first device and storing unique identification information,
The identification information is
When an acquisition request is made by designating data from the user, the data is read out by the first device, transmitted to the data distribution server, and used to generate encrypted data by encrypting the designated data at the data distribution server. And
When a use request is made by designating data from a user, the data is read by the first device and used to decrypt the encrypted data of the designated data received from the data distribution server. Delivery data management system. The distribution data management system according to any one of claims 1 to 6, wherein the second device functions as an input device for the first device. The distribution data management system according to any one of claims 1 to 7, wherein the second device is configured to be electrically connectable to the first device based on a USB standard. The distribution data management system according to claim 1, wherein:
Further, when there is an acquisition request by designating data from the user, the identification information of the second device connected to the first device is received from the first device, and the user is notified based on the identification information. A distribution data management system, comprising: a data distribution server having a function of encrypting designated data to generate encrypted data and transmitting the encrypted data to a first device. A distribution data management system used in combination with a first device and a second device that stores unique identification information configured to be electrically connectable to the first device,
The distribution data management system includes a data distribution server configured to be communicable with the first device via a communication network,
The data distribution server receives the identification information of the second device connected to the first device from the first device when the data is specified by the user and receives an acquisition request. A distribution data management system comprising a function of encrypting data specified by a user to generate encrypted data, and transmitting the generated encrypted data to a first device. The data distribution server has a function of, when receiving the identification information from the first device, executing a billing process for a user corresponding to the identification information in accordance with designated data. Or the distribution data management system according to 10. The distribution data management system according to any one of claims 1 to 11, wherein the data is a game program. A data distribution server, a first device configured to be communicable with the data distribution server via a communication network, and a first device configured to be electrically connectable to the first device and storing unique identification information. A distribution data management method using the two devices;
The first device reads out the identification information from the second device connected to the first device when the user specifies the data and makes an acquisition request, and sends the identification information to the data distribution server. Transmitting,
A data distribution server receives identification information of a second device connected to the first device from the first device, encrypts data specified by a user based on the identification information, and generates encrypted data. Transmitting the generated encrypted data to a first device;
A step in which the first device receives specified data (hereinafter, referred to as “encrypted data”) encrypted based on the identification information from the data distribution server;
The first device reads out the identification information from the second device connected to the first device when the use request is made by designating the data from the user, and encrypts the encrypted data based on the identification information. Decrypting and generating designated data, and deleting the generated designated data when the use is completed, comprising the steps of: A program for causing a computer to execute the steps of the distribution data management method according to claim 13.

Images