JP2004072423A - Contents distribution system, center server, user terminal device, mobile authentication apparatus, computer program, storage medium, and contents distribution method for center server - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a contents distribution system by which key data decoding encryption contents data is distributed in real time and securely. <P>SOLUTION: The center server of the contents distribution system comprises: a cipher server generating contents key data inherent to each contents data to encrypt the contents data; a contents distribution server distributing the encryption contents data formed by encrypting the contents data to user terminal device requesting the desired contents data; an approval server conducting approval for distributing the encryption contents key data to a card; and a license authentication server authenticating the card by a first authentication means and distributing control information data containing the encryption contents key data in securely to the card. <P>COPYRIGHT: (C)2004,JPO

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention provides a content distribution system for performing settlement processing using a mobile authentication device and distributing content, a center server, a user terminal device, a mobile authentication device, a computer program, a storage medium, and content distribution of the center server. About the method.
[0002]
[Prior art]
2. Description of the Related Art In recent years, in the information-oriented society, with the development of networks such as the Internet, electronic commerce (EC) via networks has been actively traded.
[0003]
In electronic commerce, generally, a supplier (user) who supplies or provides goods or services and a consumer (user) who purchases the goods or services are transacted (traded) via a network.
[0004]
Among the electronic commerce transactions, there is a service for delivering (streaming) digital contents to a user terminal device that the user views. When using the above services, the user who uses the user terminal is authenticated between the center server and the user terminal as necessary, and the desired content data such as video, audio, and text is selected. Then, the service is a service in which desired content data is distributed by settingtle the charge for the content data.
[0005]
As a settlement means for the above-mentioned billing, a card-like device (mobile authentication) such as a cash card (Cash Card) or a credit card (Credit Card) generally used in a financial institution or the like can be carried and carried. Device) is often used.
[0006]
When distributing the content data, the content data and the like are encrypted and transmitted in order to prevent the third party from falsifying, eavesdropping, or impersonating the content data.
[0007]
Further, in the above-mentioned content distribution system, to settle billing for content data is to distribute key data for decrypting the encrypted content data to the user terminal device for a fee. . That is, the content data distribution system is realized by safely distributing the key data to be decrypted only to the user who made the payment.
[0008]
[Problems to be solved by the invention]
However, in e-commerce, in order to authenticate a user who is provided with a service or the like or a card which is a mobile authentication device owned by a user used as a payment means, a personal identification number (ID number) of the user or a mobile device is required. It is necessary to input personal information such as an ID number for using the authentication device to the user terminal device. However, every time there is an authentication procedure, the input operation needs to be performed. Could be seen by others.
[0009]
Furthermore, even if the user of the accessing user terminal device is authenticated, if the center server from which the content data is distributed is an unjustified center server due to impersonation or the like, the content data is normally stored in the user terminal device. Was not sent in some cases.
[0010]
In a system for distributing content data, it is important to safely distribute key data for decrypting encrypted content data, but many systems are realized by the system. For this reason, these systems are not uniform and the procedures are different for each system, so the specifications of devices such as a center server or user terminal device are various, and it is difficult to use them in common. .
[0011]
The present invention has been made in view of the above problems, and an object of the present invention is to provide key data for decrypting encrypted content data by using a mobile authentication device that can be carried around. An object of the present invention is to provide a new and improved content distribution system capable of real-time secure distribution.
[0012]
[Means for Solving the Problems]
In order to solve the above problems, according to a first aspect of the present invention, a mobile authentication device, a user terminal device capable of reading at least control information data stored in the mobile authentication device, and a mobile authentication device are managed. And a center server for delivering at least one or more content data to the user terminal device in real time. The center server of the content distribution system generates content key data unique to each piece of content data and encrypts the content data, and the content server sends the content data to a user terminal device that requests the desired content data. A content distribution server that distributes encrypted content data obtained by encrypting the content, a payment server that makes payment for distributing the encrypted content key data to the mobile authentication device, and authentication of the mobile authentication device by the first authentication means. And a license authentication server for securely delivering control information data including the encrypted content key data to the mobile authentication device.
[0013]
According to the present invention, a content distribution system includes a center server that distributes encrypted content data in real time in response to a request from a user terminal device, and a mobile authentication for making payment for the content data at the time of distribution. Mutual authentication is performed with the device, and when the authentication is performed, the content key data for decrypting the encrypted content data is encrypted and securely delivered from the center server to the mobile authentication device. With this configuration, the user terminal device can perform mutual authentication, receive encrypted content data in which the content data has been encrypted, and constantly transmit and receive the mutual data by a third party using multiplexed security means. This makes it possible to securely transmit and receive content data and the like, and furthermore, the mobile authentication device can securely store personal information data such as content key data. The content data may be distributed in real time (live), or may be distributed on demand after recording or production. In addition, the content distribution server, encryption server, The license authentication server, WWW server, settlement server, or management server may not be included in the center server, and may be connected to the center server and the outside via a network. Further, the mobile authentication device has a function of crediting credit such as consumer credit (ID function) for authenticating an individual or sales credit (payment function) for deferring and paying a settlement price when purchasing a product or the like. It has.
[0014]
The mobile authentication device is at least either a non-contact type or a contact type IC card. With this configuration, the infrastructure can be shared (general system format) regardless of the type (non-contact type or contact type) of a device capable of reading and writing data stored in the IC card.
[0015]
The mobile authentication device is a card provided with at least one or both of a magnetic stripe and an IC. With this configuration, a more general-purpose system can be put to practical use regardless of the type of device that can read and write data of the mobile authentication device.
[0016]
The mobile authentication device further stores at least personal key data or personal information data. With this configuration, it is possible to reliably process the payment using the user's personal information data, and it is also possible to receive and store the encrypted content key data, and to safely distribute the content data or the content key data. It is possible to settle the payment.
[0017]
The content key data or personal key data is a public key encryption method. With such a configuration, it is possible to manage the content key data or the personal key data and reduce the data capacity.
[0018]
The content key data or personal key data is a common key encryption method. With such a configuration, decryption of the encrypted data becomes complicated, and it becomes more difficult for a third party to eavesdrop on the contents of the data, and therefore, the data can be transmitted safely.
[0019]
The control information data may be composed of at least one of the distribution date and time information of the content key data, the expiration date information, or the valid use count information, or any combination thereof. With such a configuration, it is possible to manage distribution such as setting a time limit for viewing the content data.
[0020]
The license authentication server generates encrypted encrypted content key data from the content key data using the personal key data. With this configuration, the content data is encrypted by the content key data. Thus, the content key data for decryption can be transmitted more safely to the destination by encrypting the content key data for decryption with the personal key data.
[0021]
The license authentication server securely distributes the control information data to the mobile authentication device after the payment for the mobile authentication device is made. With this configuration, if the distribution of the encrypted content key data ends abnormally after the payment, the distribution key data distribution process is started again without performing a new payment process, thereby further improving the processing efficiency. Further, the control information data can be transmitted more safely by the encryption transmission means after the personal key and the mutual authentication with the mobile authentication device.
[0022]
The user terminal device authenticates with the mobile authentication device by the second authentication means, and further securely reads the control information data including the encrypted content key data stored in the mobile authentication device. With this configuration, the control information data can be more securely read by the mutual authentication with the mobile authentication device and the encrypted transmission unit after the mutual authentication.
[0023]
The payment server authenticates with the mobile authentication device by the third authentication means, and makes a secure payment to the mobile authentication device. With this configuration, the control information data can be more securely read by the mutual authentication with the mobile authentication device and the encrypted transmission unit after the mutual authentication.
[0024]
The user terminal device may be configured to decrypt the encrypted content key data using the personal key data.
[0025]
The first authentication means, the second authentication means, or the third authentication means may be mutual authentication between the mobile authentication device and the license authentication server. In this specification, “secure” means that in data transmission / reception after mutual authentication is performed, data transmission / reception is performed after data is encrypted for each data transmission / reception.
[0026]
Further, according to another aspect of the present invention for solving the above-mentioned problem, the mobile authentication device is managed and at least a user terminal device capable of reading at least control information data stored in the mobile authentication device. A center server for delivering one or more content data in real time is provided. Note that this center server has substantially the same configuration as the center server employed in the content distribution system, and thus a detailed description is omitted.
[0027]
Further, according to another aspect of the present invention, the computer manages the mobile authentication device, and at least one or at least one user terminal device capable of reading control information data stored in the mobile authentication device. A center server that delivers two or more content data in real time generates content key data unique to each content data, encrypts the content data, and transmits the content data to a user terminal device that requests the desired content data. Distribute the encrypted content data, make payment for distributing the encrypted content key data to the mobile authentication device, authenticate with the mobile authentication device by the first authentication means, and further encrypt the mobile authentication device. Center that securely distributes control information data containing encrypted content key data Computer readable storage medium having computer program and the computer program is stored to function as over bar is provided.
[0028]
Further, according to another aspect of the present invention, a user terminal device capable of reading at least control information data stored in a mobile authentication device and receiving at least one or more content data distributed from a center server in real time. Is provided. This user terminal device can decrypt the encrypted content data, whose content data has been encrypted by the center server, using the content key data in real time, and can display the decrypted content data in real time. Display device. Note that this user terminal device has substantially the same configuration as the user terminal device used in the above-described content distribution system, and thus detailed description is omitted.
[0029]
Further, according to another aspect of the present invention, a computer can read at least control information data stored in a mobile authentication device and receive at least one or more content data distributed from a center server in real time. User terminal capable of decrypting, in real time, the encrypted content data in which the content data has been encrypted by the center server using the content key data, and displaying the decrypted content data in real time A computer program functioning as an apparatus and a computer-readable storage medium storing the computer program are provided.
[0030]
Further, according to another aspect of the present invention, there is provided a mobile authentication device which is managed by a center server and stores at least control information data which can be read by a user terminal device. The mobile authentication device authenticates with the center server by the first authentication means, makes a payment for receiving the encrypted content key data encrypted by the center server, and sets the control information including the encrypted content key data. Receive data securely. Note that the mobile authentication device has substantially the same configuration as the mobile authentication device employed in the content distribution system, and thus a detailed description is omitted. In addition, the mobile authentication device provides credit such as consumer credit (ID function) for authenticating an individual or sales credit (payment function) for deferring and paying the settlement price when purchasing a product or the like. It has the function to do. For example, a mobile terminal, a mobile phone, or an IC (Integrated Circuit) card can be used.
[0031]
Further, according to another aspect of the present invention, a mobile authentication device, which is managed by a center server and stores at least control information data readable by a user terminal device, authenticates with the center server by a first authentication means. And a program for causing the center server to settle to receive the encrypted content key data and to function as a mobile authentication device for securely receiving control information data including the encrypted content key data. A readable storage medium having stored therein is provided.
[0032]
Further, according to another aspect of the present invention, the mobile authentication device, the user terminal device capable of reading at least the control information data stored in the mobile authentication device, and the mobile authentication device are managed and provided to the user terminal device. A content distribution method for a center server that distributes at least one or two or more pieces of content data in real time is provided. In the content distribution method of the center server, the center server generates content key data unique to each content data, encrypts the content data, and transmits the content data to the user terminal device that requests the desired content data. And distributes the encrypted content key data to the mobile authentication device for payment, authenticates the mobile authentication device with the first authentication means, and further encrypts the mobile authentication device. It is characterized in that control information data including encrypted content key data is securely delivered.
[0033]
The mobile authentication device may be configured to be at least one of a non-contact type and a contact type or both. As a method of transmitting data to be distributed to the mobile authentication device, data such as control information data can be distributed by transmission according to one method.
[0034]
The mobile authentication device may be configured as a card provided with at least one or both of a magnetic stripe and an IC.
[0035]
The mobile authentication device may be configured to further store at least personal key data or personal information data.
[0036]
The content key data or the personal key data may be configured to be a public key encryption method.
[0037]
The content key data or the personal key data may be configured to be a common key encryption method.
[0038]
The control information data may be configured to include at least any one or any combination of distribution date and time information, expiration date information, and valid use count information of the content key data.
[0039]
The center server may be configured to generate encrypted encrypted content key data from the content key data using the personal key data.
[0040]
The center server may be configured to securely distribute the control information data to the mobile authentication device after the payment for the mobile authentication device is made. Note that secure means that, in data transmission and reception after mutual authentication is performed, transmission and reception are performed after data is encrypted for each data transmission and reception.
[0041]
The center server may be configured to authenticate with the mobile authentication device by a third authentication unit, and to make a secure payment to the mobile authentication device.
[0042]
The user terminal device may be configured to authenticate with the mobile authentication device by the second authentication means, and to securely read the control information data including the encrypted content key data stored in the mobile authentication device. .
[0043]
The first authentication means may be configured so that the second authentication means or the third authentication means is mutual authentication between the mobile authentication device and the license authentication server.
[0044]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings. In the following description and the accompanying drawings, components having substantially the same functions and configurations are denoted by the same reference numerals, and redundant description will be omitted.
[0045]
(1. Overall system configuration)
First, a concept of a business model of a content distribution system or the like according to the present embodiment will be described with reference to FIG. In this specification, the term “content” refers to moving image data or still image data such as a movie or broadcast program, music data, text data such as characters, or digital data (content data) including any combination. . The content data is content data compressed according to a moving image compression standard such as MPEG2 or MPEG4, but may be uncompressed content data. Data is a general term for digital data that can be read by computer devices.
[0046]
(1.1 System configuration)
As shown in FIG. 1, in recent electronic commerce, a user terminal device 2 which is an information processing device, which is an information processing device, via a network 6 such as the Internet, and a center which is a content supplier side. Servers 1 are interconnected.
[0047]
Among these information processing devices, the user terminal device 2 constitutes one or more of the user terminal devices 2 (2a, 2b,..., 2n). The user terminal device 2 is an information processing device including at least a central processing unit (CPU), a communication device, and a storage device, and is generally a computer device, such as a PDA (Personal Data Assistants) or a mobile phone. An information processing apparatus such as the one described above is included.
[0048]
The center server 1 is a server group composed of various types of servers necessary for distributing or paying for contents. Each server includes at least a central processing unit (CPU), a communication device, and a storage device. This is an information processing device provided, generally a computer device, but also includes an information processing device such as a portable terminal such as a PDA as described above.
[0049]
Next, a typical operation example of the present system will be described.
[0050]
First, content data as content is encrypted in advance by the encryption server 14 and is stored (stored) as a database in the content distribution server 8.
[0051]
It is assumed that there is an order from a certain user terminal device 2, for example, the user terminal device 2 b, which desires to distribute contents to the center server 1 via the network 6. The center server 1 authenticates the IC card 4b via the user terminal device 2b, and after the authentication, sends the encrypted encrypted content data according to the order received from the user terminal device 2b to the content distribution server. 8 to the user terminal device 2b via the network 6.
[0052]
Note that the delivery (stream delivery) of the encrypted content data may be real-time (live) or may be on-demand delivery after recording or production.
[0053]
The user terminal device 2b that has received the encrypted content data is decrypted by a decryption device provided in the user terminal device, so that the media player can view video or audio.
[0054]
On the other hand, key data (content key data) for encrypting the content data is generated by the license authentication server 10 and supplied to the encryption server 14, and is also encrypted by the encryption device of the license authentication server 10. The content key data is transmitted to the user terminal device 2b via the network 6 or the like.
[0055]
In the user terminal device 2b, the actual content data can be decrypted by decrypting the encrypted content key data and obtaining the content key data. The personal key data for decryption corresponding to the personal key data for encrypting the content key data is transmitted from the center server 1 to the IC card 4b in advance or for each order. The IC card 4b is a card-like device that is a mobile authentication device.
[0056]
Further, the center server 1 performs settlement with electronic money built in the IC card 4b before delivering content data or transmitting content key data to the user terminal device 2b. Therefore, the private key data can be held and settled by the IC card 4b, and the convenience for the user is improved.
[0057]
(2 Configuration of each component of the content distribution system)
Next, the configuration of each component of the content distribution system according to the present embodiment will be described.
[0058]
(2.1 Network 6)
The network 6 connects the center server 1 and the user terminal device 2 with each other so as to be capable of bidirectional communication with each other. Includes closed networks. In addition, the connection method includes a satellite communication network and the like regardless of wired or wireless.
[0059]
(2.2 User terminal device 2)
The user terminal device 2 receives the content data distributed from the center server 1. As shown in FIG. 3, the user terminal device 2 has a display device and the like, and is used for browsing a Web (Web, WWW: World Wide Web) page created using HTML (Hyper Text Markup Language) or the like. Browser program is executable. The user can select desired content from a web page displayed on a display by a browser program or the like with a mouse or the like and receive distribution from the center server.
[0060]
Further, the user terminal device 2 is connected to a reader / writer device 3 for transmitting and receiving data to and from the IC card 4, and between the IC card 4 and the reader / writer device 3, non-contact data is transmitted using electromagnetic waves. Transmission and reception are performed. The data stored in the IC card 4 is transmitted to the center server 1 via the reader / writer device 3, or the data transmitted from the center server 1 is transmitted to the IC card via the reader / writer device 3. Is done.
[0061]
As shown in FIG. 2, the user terminal device 2 includes a communication device 20 for transmitting and receiving content data, a central processing unit (CPU) 22, a storage device 24, and a decryption device for decrypting encrypted content data. 26 is an information processing apparatus including a mutual authentication device 28 for performing mutual authentication between the IC card 4 and the IC card 4, and is generally a computer device. The mutual authentication will be described later in detail.
[0062]
(2.3 Reader / writer device 3)
As shown in FIG. 3, the reader / writer device 3 is connected to the user terminal device 2 via a predetermined interface compliant with, for example, RS-485A. When a predetermined control signal or the like is supplied from the user terminal device 2, the reader / writer device 3 performs a predetermined process.
[0063]
As shown in FIG. 4, the IC card 4 is held over the reader / writer device 3 to read / write data between the center server 1 or the user terminal device 2 and the IC module 50 provided in the IC card 4. Is performed. In order to read / write such data, cryptographic communication such as TripleDES is adopted, and data reading / writing is performed after mutual authentication between devices. For example, 13.56 MHz is adopted as the communication frequency. Note that the present invention can be implemented even if the reader / writer device 3 is provided integrally with the user terminal device 2. The IC card 4 and the mutual authentication will be described later in detail.
[0064]
Although the reader / writer device 3 according to the present embodiment has been described as an example in which the reader / writer device 3 is connected to the user terminal device 2 via an interface, the present invention is not limited to such an example. The present invention is also applicable to a case in which the writer device 3 is provided as an integral part of the user terminal device 2.
[0065]
(2.4 IC card 4)
The surface of the IC card 4 which is a portable mobile authentication device is made of PET (polyethylene terephthalate) which has little effect on the environment even if it is erased. As shown in FIG. 5A, an IC module 50 and an antenna (communication means) 51 for transmitting and receiving data to and from the reader / writer device 3 are provided inside the IC card 4. The IC card 4 is a card characterized by power saving and durability in which a weak electromagnetic wave from the reader / writer device 3 is captured by the antenna 51 and charged or operated.
[0066]
FIG. 5B is an explanatory diagram conceptually showing a functional configuration of the IC module 50. As shown in FIG. 5B, the IC module 50 includes a processing circuit 53, a mutual authentication device 54, and a memory 52 (memory 52a, memory 52b, and memory 52c). The memory 52 is composed of three memories 52a, 52b, and 52c, but is not limited to this example, and may be implemented by increasing or decreasing according to the added function or the capacity of data.
[0067]
The processing circuit 53 according to the present embodiment employs a high-speed CPU. Further, data is transmitted and received between the IC card 4 and the reader / writer device 3 by cryptographic communication such as TripleDES.
[0068]
In the memory 52, the encrypted content key data, personal key data for decrypting the encrypted content key data (encrypted content key data), the ID number of the user, or the electronic money (e.g. Personal information data such as value data) or control information data such as the expiration date of the content key data is stored in each of the memories 52a, 52b and 52c. The memory 52 is a readable and writable storage medium, and is composed of, for example, an electrically writable and erasable EEPROM (Electrically Erasable and Programmable ROM).
[0069]
Here, the electronic money refers to money information electromagnetically written in the memory 52 of the IC card 4, and refers to a mechanism that allows online shopping without cash using the money information. For example, Edy (eddy) and the like can be cited as electronic money.
[0070]
Further, by storing an operating system dedicated to the IC card 4 in the memory 52, it is possible to efficiently use the memory 52. For example, a plurality of access rights to the IC card 4 can be set, and stored data can be managed by individual key data. Further, an application can be safely added to the memory 52 later as needed.
[0071]
Further, since the IC card 4 has the memory 52 and has a large amount of information that can be stored, the IC card 4 is widely used for electronic commerce and personal identification cards and pass cards. Further, the IC card 4 is a non-contact type IC card for the purpose of eliminating the trouble of removing the IC card 4 from the card storage case.
[0072]
Therefore, the non-contact type IC card 4 has an embedded transmitting / receiving means (antenna) for transmitting / receiving data in a wireless manner such as radio waves, and holds the IC card 4 over the reader / writer device 3 so that the IC card 4 It is possible to transmit and receive data without bringing the reader / writer device 3 into contact with the reader / writer device 3.
[0073]
As shown in FIG. 6, the reader / writer device 3 includes a pair of control boards 61 and an antenna 60, and transmits and receives data between the center server 1 or the user terminal device 2 and the IC card 4 described later. The IC card 4 is detected by the reader / writer device 3, the IC card 4 is detected, the mutual authentication between the IC card 4 and the reader / writer device 3, the IC card 4 is read (read), and the IC card 4 is written ( A series of processes of (write) can be performed in about 0.2 seconds. The communication distance between the IC card 4 and the reader / writer device 3 varies depending on the size of the antenna 60 and the like.
[0074]
(2.5 Center server 1)
For example, when there is access from the user terminal device 2b, the center server 1 authenticates the IC card 4b and distributes the selected content data in accordance with the order (request) from the user terminal device 2b. It is a group of two or more servers. Each server is an information processing device including at least a central processing unit (CPU), a communication device, and a storage device, and is generally a computer device.
[0075]
As shown in FIG. 1, the center server 1 responds to requests from the content distribution server 8, the license authentication server 10, the settlement server 12, the encryption server 14, the management server 16, and the user terminal device 2. And a WWW server 18 for transmitting data for displaying the Web page to the user terminal device 2.
[0076]
(2.5.1 content distribution server 8)
The content distribution server 8 is an information processing device that distributes content data selected by the user terminal device 2 to the user terminal device 2 according to an instruction from the license authentication server 10.
[0077]
As shown in FIG. 7, the content distribution server 8 includes a central processing unit (CPU) 72, an input device 74 such as a mouse and a keyboard, a communication device 76 for transmitting and receiving external data, and an output device such as a display device. The information processing apparatus includes an apparatus 78 and a content DB (Data Base) 80, and is generally a computer apparatus.
[0078]
The content DB 80 stores encrypted content data obtained by encrypting the content data by the encryption server 14. One or two or more pieces of encrypted content data are stored in the content DB 80, and at the time of distribution, the corresponding encrypted content data is called from a storage destination pointer, and is distributed to the user terminal device 2.
[0079]
The content distribution server 8 distributes the encrypted content data transmitted from the encryption server 14 to the user terminal device 2 via the communication device 76 in real time, and stores the data in the content DB 80.
[0080]
(2.5.2 License authentication server 10)
The license authentication server 10 authenticates the IC card 4 via the user terminal device 2 and uses the personal key data unique to each IC card 4 to authenticate the content data selected by the user terminal device 2 as desired. The encrypted content key data obtained by encrypting the content key data to be encrypted is delivered to the user terminal device 2.
[0081]
The license authentication server 10 includes, as shown in FIG. 8, a license authentication device 80 for authenticating a user registered in the IC card 4, a central processing unit (CPU) 81 for controlling the devices to be configured, and the like. , An input device 82 such as a mouse and a keyboard, an output device 83 such as a display device, a communication device 84 for transmitting and receiving data via a network, and an encryption device for encrypting content key data using personal key data. 85, a content key generation device 86, a mutual authentication device 87 for performing mutual authentication with the IC card 4, and a license DB 88 holding personal information or personal key data of a registered user.
[0082]
The license authentication device 80 authenticates a registered user held in the license DB 88 based on personal information stored in the memory 52 of the IC card 4 or the like.
[0083]
The content key generation device 86 generates content key data for encrypting the content data. In the content key data according to the present embodiment, one content key data is generated for one content data.
[0084]
The mutual authentication device 87 authenticates each other between the mutual authentication device 54 provided in the IC card 4 and the mutual authentication device 87 provided in the license server 10. The mutual authentication according to the present embodiment will be described later in detail.
[0085]
The license DB 88 is a data readable / writable storage device, and performs personal information data such as at least an ID number and a user name for each registered user, and performs encryption / decryption generated for each user. And private key data, which is a common key for
[0086]
The personal key data corresponding to the generated personal key data one-to-one corresponds to, for example, personal key data used for decrypting encrypted content key data (encrypted content key data). It is stored in the memory 52 or the like of the IC card 4 held by the user.
[0087]
(2.5.3 settlement server 12)
In the present embodiment, the settlement server 12 performs the settlement of the charge for distributing the content data (or the content key data) to the user terminal device 2 by subtracting the electronic money held in the IC card 4. However, the present invention is not limited to this example, and by connecting to a settlement server such as a financial institution, the user terminal device 2 performs a credit process and a process of creating settlement data for performing settlement of billing, and actually performs settlement. This may be performed by a settlement server (not shown) such as another financial institution.
[0088]
As shown in FIG. 9, the settlement server 12 includes a mutual authentication device 100 for performing mutual authentication with the IC card 4, a central processing unit (CPU) 101, an input device 102 such as a mouse and a keyboard, and a display device. Output device 103, a communication device 104 for transmitting and receiving data from the outside, a payment device 105 for performing payment on the IC card 4 based on charging information of the content data transmitted from the license authentication server 10, And a settlement information DB 106 that holds information such as settlement results for each user.
[0089]
(2.5.4 Encryption server 14)
When the content data is stored in real time, the encryption server 14 creates encrypted content data obtained by encrypting the content data based on the content key data generated and transmitted by the license authentication server 10.
[0090]
The created encrypted content data is transmitted to the content distribution server 8 in real time. In the present embodiment, one piece of content data is encrypted while being received in real time. However, the present invention is not limited to such an example. 8 can also be implemented.
[0091]
As shown in FIG. 10, the encryption server 14 includes an encryption device 90 for encrypting received content data using content key data, a central processing unit 91, an input device 92 such as a mouse or a keyboard, and the like. The communication device 93 includes a communication device 93, a display device 94, and a storage device 95 having a function such as a cache for storing content data as necessary when encrypting.
[0092]
The content data is transmitted to the encryption server 14 from a content transmission device (not shown) that transmits the recorded or produced content data for distribution. The content data transmission device is provided inside or outside the center server 1, and transmits content data to the communication device 93 of the encryption server 14 via a communication device (not shown).
[0093]
(2.5.5 Management server 16)
The management server 16 is a device that manages the distribution of the content data. The management server 16 relates to the content key data based on the personal information of the user transmitted from the license authentication server 10 or the name and type of the content distributed to the user. Create usage information data including the delivery date, expiration date, etc.
[0094]
The management server 16 is an information processing device including at least a central processing unit (CPU) (not shown), a communication device (not shown), and a storage device (not shown). Typically, it is a computer device. The management server 16 transmits the created usage information data to the license authentication server 10.
[0095]
(2.5.6 WWW server 18)
The WWW server 18 is a device that transmits Web page data for displaying a Web page on the display device 29 of the user terminal device 2 to the user terminal device 2 in response to a request from the user terminal device 2. An information processing device including at least a central processing unit (CPU) (not shown), a communication device (not shown), and a storage device (not shown). It is.
[0096]
Note that a Web page is hypertext file data described in HTML (Hypertext Markup Language) on the WWW (World Wide Web) and any one of text, still image, audio, or moving image, or arbitrary one. This is an information page that can be displayed on the display device 29 or the like where the media data composed of the combination is fused.
[0097]
In response to a Web page display request from the user terminal device 2, the WWW server 18 reads out data (Web page data) of the corresponding Web page from a storage device (not shown) provided in the WWW server 18. , A program or a computer device (information processing device) having a function of transmitting Web page data to be displayed by the user terminal device 2 to the user terminal device 2.
[0098]
(3. Screen configuration in content distribution system)
Next, in order to deepen the understanding of the content distribution system according to the present embodiment, the content is displayed on the display device 29 of the user terminal device 2 to which the content distribution system according to the present embodiment is applied with reference to the accompanying drawings. An example of a screen configuration of a Web page will be described.
[0099]
The following screens are displayed on the display device 29 using browsing software (browser program). However, the content distribution system according to the present embodiment can be implemented regardless of the type of the browser program. It is possible.
[0100]
(3.1 Top page screen and related screens)
On the top page screen when using the content distribution service in the content distribution system, first, a login screen is displayed on the display device 29 of the user terminal device 2. As shown in FIG. 11, the login screen includes an ID 1100 that is a personal identification number (ID number) of the user, a PW 1101 that is a password, and a “login” button.
[0101]
The ID number of the user for using the content distribution service and the password arbitrarily set by the user are input to the ID 1100 and PW 1101 of the login screen, and the “login” button is selected by clicking the mouse or the like. The authentication is performed in the license authentication server 10, and the use of the content distribution service is started.
[0102]
Although the login screen according to the present embodiment has been described by way of example in which an ID number and a password are input to ID 1100 and PW 1101, respectively, the present invention is not limited to this example. By storing the information in the IC card 4 and selecting the “log-in” button without inputting the ID 1100 and the PW 1101, the content distribution service can be used.
[0103]
Further, even for a user whose ID number and password have not been registered, it is possible to use the content distribution service even if the ID 1100 and PW 1101 have not been input. In this case, it is also possible to provide a difference in preferential services such as the amount of charge between a registered user and an unregistered user.
[0104]
Next, the screen shown in FIG. 12 is a “content data list screen” on which a list of contents that can be distributed to the user terminal device 2 is displayed. As shown in FIG. 12, the “content data list screen” includes a “content name” which is a title of the content data, a “time” which is a viewing time of the content data, and a “charge” charged for the content data. And "data" which is a data capacity necessary for distributing content data.
[0105]
When the "check box" of the content data desired to be distributed is selected by clicking the mouse or the like and the "selection" button is selected, the license authentication server 10 or the settlement server 12 actually authenticates the user's IC card 4 and Payment is performed, and the content data is distributed to the user terminal device 2.
[0106]
When the title of the content data of "content name" is displayed in, for example, yellow text, it indicates the content data being played or performed in real time, and is displayed in red text. Represents content data recorded or produced in advance. Therefore, when the content data displayed in yellow text is selected and the distribution is started, it is possible to view the performance pattern in real time.
[0107]
Next, the screen shown in FIG. 13 is a “content data display screen” in which distribution of content data is started and content data is displayed on the display device 29 of the user terminal device 2. As shown in FIG. 13, the “content data display screen” includes a content screen 130 on which content data composed of a moving image, a still image, text, or the like is displayed, and a memory unit 131 indicating the time from the start to the end of the content data. , A slide 132 indicating the current position of the content data, a “play” button, and a “stop” button.
[0108]
The memory unit 131 indicates a relative time axis in which the left end is the start and the right end is the end. Therefore, the length of the memory unit 131 is the same regardless of whether the viewing time of the content data is 3 hours or 3 minutes.
[0109]
The slide 132 represents the time of the current content data being viewed while moving in the memory unit 131 every moment. Therefore, the slide 132 is located at the left end when the content distribution starts, and is located at the right end when the content distribution ends.
[0110]
When the authentication is not performed by the license authentication server 10 or the settlement server 12, the content data is not distributed to the user terminal device 2 and nothing is displayed on the content screen 130.
[0111]
(4. Operation of content distribution system)
Next, an embodiment of the operation of the content distribution system configured as described above will be described. In the following embodiment, the operation of the content distribution system when the user using the user terminal device 2 is registered in the content distribution system and the content distribution service is used using the IC card 4 will be described. I do.
[0112]
First, the operation of the content distribution system according to the present embodiment will be described with reference to FIG. 14. When content data is transmitted in real time, such as live, to the encryption server 14 included in the center server 1, encryption is performed. The server 14 encrypts the received content data using the content key data transmitted from the license authentication server 10 (S100). In the case of distributing content data compressed according to a moving image compression standard such as MPEG2, the content data is compressed by an encoding process before performing an encryption process by an encryption server.
[0113]
The content key data is a data string composed of 128 bits, and is unique to the content data in one-to-one correspondence. Further, the content key data is generated by the license authentication server 10 every time the content data is transmitted to the encryption server 14. Note that the generated content key data is also held in the license authentication server 10.
[0114]
Next, when desired content data is selected from a “content data list screen” displayed on the display device 29 of the user terminal device 2 shown in FIG. Is transmitted to the WWW server 18. The distribution request data includes information such as a content name desired to be distributed, an ID for identifying the content, or a user ID number.
[0115]
When the WWW server 18 receives the desired distribution data, the WWW server 18 transmits the desired distribution data to the license authentication server 10.
[0116]
The license authentication server 10 included in the center server 1 includes a payment server 12 and a user terminal 2 for making a payment for the content data (or content key data) to the user terminal device 2 based on the received desired distribution data. Mutual authentication with the IC card 4 attached to the device 2 is performed (S102). The mutual authentication will be described later in detail.
[0117]
As a result of the mutual authentication, if the payment is not authenticated, the settlement server 12 transmits the non-delivery data to the license authentication server 10. The license authentication server 10 displays, via the WWW server 18, a message indicating that the content has not been distributed without being authenticated to the user terminal device 2 that has requested distribution, based on the non-delivery data. Is transmitted to the user terminal device 2.
[0118]
As a result of the mutual authentication, when the license authentication server 10 is authenticated, the license authentication server 10 gives the payment server the point of the money value data, which is the electronic money stored in the IC card 4, based on the desired distribution data. The payment process of subtracting the amount is securely executed. The money value data is point data exchanged equivalently to money. For example, the money value data of 1000 points is exchanged with the money value data of 1000 points, and the money value data of 1000 points is stored in the IC card 4. Is done. The money value data and the personal information data according to the present embodiment stored in the IC card 4 are stored in advance, but are not limited to such an example. It is also possible to carry out the operation.
[0119]
When the payment processing is abnormally terminated, the license authentication server 10 displays, via the WWW server 18, to the user terminal device 2 a message indicating that distribution is impossible due to payment failure.
[0120]
When the settlement processing is completed normally, the license authentication server 10 of the center server 1 uses the personal key data corresponding to the IC card 4 that has been mutually authenticated one-to-one to encrypt the content data to be distributed. The used content key data is encrypted. Note that the personal key data registered in the license authentication server 10 is also stored in the IC card 4 in advance, but the personal key data according to the present embodiment is not limited to this example, and is not stored in advance. It is also possible to newly transmit personal key data for each distribution.
[0121]
Next, when the encryption of the content key data (encrypted content key data) is completed, mutual authentication between the license authentication server 10 and the IC card 4 is performed to distribute the encrypted content key data to the IC card 4 (S108). ).
[0122]
When mutual authentication between the license authentication server 10 and the IC card 4 is performed, the license authentication server 10 securely distributes the encrypted content key data for decrypting the encrypted content data to be distributed to the IC card 4. (S110). The distributed encrypted content key data is stored in the IC card 4.
[0123]
When mutual authentication is not performed, the license authentication server 10 causes the WWW server 18 to transmit Web page data for displaying an error message on the display device 29 to the user terminal device 2.
[0124]
The IC card 4 storing the encrypted content key data performs mutual authentication with the user terminal device 2 in order to make the user terminal device 2 decrypt the encrypted content key data (S112).
[0125]
As a result of the mutual authentication, when the IC card 4 is authenticated, the IC card 4 securely transmits the encrypted content key data and the previously stored personal key data to the user terminal device 2 (S114). The transmission and reception of data between the IC card 4 and the user terminal device 2 are performed by electromagnetic waves via the reader / writer device 3.
[0126]
If the mutual authentication is abnormally terminated without being authenticated, an error message is displayed on the display device 29 of the user terminal device 2 (not shown). It should be noted that the error message is not the same, and it is also possible to change the message to a different message depending on the cause of non-authentication before displaying the message.
[0127]
Next, the decryption device 26 of the user terminal device 2 decrypts the encrypted content key data received via the communication device 20 using the received personal key data (S120). The encrypted content key data becomes content key data by being decrypted.
[0128]
When the user terminal device 2 decrypts the encrypted content key data, the user terminal device 2 transmits to the license authentication server 10 decryption end data indicating that the decryption processing has been completed, and the license authentication server 10 Distribution of data is started, and the encrypted content data is received.
[0129]
Upon receiving the encrypted content data, the user terminal device 2 decrypts the encrypted content data using the content key data in real time, whereby the desired content is displayed on the display device 29 in real time ( S122). If the decrypted content data is compressed according to a moving image compression standard such as MPEG2, the content data is decoded and then displayed on the display device 29.
[0130]
Regarding the transmission and reception of the content key data, since the security is further maintained by the encryption of the content key data using the personal key data and the encryption performed after the mutual authentication, the user can be securely and surely provided. Delivery to the terminal device 2 becomes possible.
[0131]
(4.1 Mutual authentication)
Here, the mutual authentication according to the present embodiment will be described with reference to FIG. FIG. 15 is a data flow diagram illustrating mutual authentication according to the present embodiment. In the following operation, mutual authentication between the license authentication server 10 and the IC card 4 will be described. Mutual authentication between the user terminal device 2 or the settlement server 14 and the IC card 4 is substantially the same as the following case. It is.
[0132]
As for the mutual authentication, as shown in FIG. 15, first, an authentication process of authenticating the IC card 4 from the license authentication server 10 in the mutual authentication will be described. The mutual authentication device 87 of the license authentication server 10 uses a 64-bit random number. R _A Data is generated (S12). Random number R _A After the data generation, the previously stored K _B Using key data, a random number R _A K data _B [R _A ] The data is encrypted (S14). The encryption is performed by a DES (Data Encryption Standard) method, and the key data used in the mutual authentication is composed of a 64-bit data string. However, other encryption methods can be used.
[0133]
Next, the license authentication server 10 checks the encrypted K _B [R _A The data is transmitted to the mutual authentication device 54 of the IC card 4 via the communication device 84. Note that K _B [R _A When data is transmitted to the mutual authentication device 54, the data is transmitted via the communication device 20 of the user terminal device 2 or the like. _B [R _A The data is transmitted to the IC card 4 via the antenna 60 of the reader / writer device 3 without any processing (passing as it is).
[0134]
Next, the mutual authentication device 54 sets the K stored in the memory 52 in advance. _B K received using key data _B [R _A ] The data is decrypted (S16). Further, the previously stored K _A Using the key data, the R decrypted in S16 _A The data is encrypted (S18).
[0135]
Next, the encrypted K _A [R _A The data is transmitted from the antenna 51 of the IC card 4 to the communication device 84 of the license authentication server 10 via the reader / writer device 3 by electromagnetic waves.
[0136]
Mutual authentication device 87 sends K _A [R _A ] When the data is received, the previously stored K _A Using key data, K _A [R _A ] The data is decrypted (S20).
[0137]
R decrypted in S20 _A Data and the R generated in S12 _A It is determined whether the two are the same by comparing with the data (S22). In the process of S22, when it is determined that they are the same, that is, the K used by the mutual authentication device 87 of the license authentication server 10 and the mutual authentication device 54 of the IC card 4 are used. _A , K _B It is determined that the key data is the same, and the IC card 4 is authenticated.
[0138]
Next, a description will be given of an authentication process of performing authentication of the license authentication server 10 from the IC card 4 in the mutual authentication. The mutual authentication device 54 of the IC card 4 uses the 64-bit random number R _B Data is generated (S24). Random number R _B After the data generation, the previously stored K _A Using key data, a random number R _B K data _A [R _B ] The data is encrypted (S26). Note that the encryption is performed by the DES (Data Encryption Standard) method, but can be performed by another method.
[0139]
Next, the IC card 4 stores the encrypted K _A [R _B The data is transmitted to the reader / writer device 3 via the antenna 51, _A [R _B ] Data is transmitted to the mutual authentication device 87 of the license authentication server 10 via the network 6. Note that K _A [R _B When data is transmitted to the mutual authentication device 87, the data is transmitted through the communication device 20 of the user terminal device 2 or the like. _A [R _B ] Data is transmitted to the IC card 4 via the network 6 without any processing (passing as it is).
[0140]
Next, the mutual authentication device 87 transmits the K _A K received using key data _A [R _B ] The data is decrypted (S28). Further, the previously stored K _B Using the key data, the R decrypted in S28 _B The data is encrypted (S30).
[0141]
Next, the encrypted K _B [R _B The data is transmitted from the communication device 84 of the license authentication server 10 to the mutual authentication device 54 of the IC card 4 via the network 6, the user terminal device 2, and the like.
[0142]
Mutual authentication device 54 uses K _B [R _B ] When the data is received, the previously stored K _B Using key data, K _B [R _B ] The data is decrypted (S32).
[0143]
R decrypted in S32 _B Data and the R generated in S24 _B It is determined whether the two are the same by comparing with the data (S34). In the process of S34, when it is determined that they are the same, that is, the K used by the mutual authentication device 54 of the IC card 4 and the mutual authentication device 87 of the license authentication server 10 is used. _A , K _B It is determined that the key data is the same, and the license authentication server 10 is authenticated.
[0144]
When the license authentication server 10 and the IC card 4 are mutually authenticated, it is considered that they have been mutually authenticated, and after the authentication processing, data transmission / reception between both the license authentication server 10 and the IC card 4 is started.
[0145]
An outline of data transmission / reception after the authentication processing will be described. A random number R generated during mutual authentication between the license authentication server 10 and the IC card 4 is described. _A , R _B Is set as an identification number ID, and K is determined by the set identification number ID. _ID Using the key data, the K _ID Data such as content data is transmitted or received after being encrypted or decrypted by the key data.
[0146]
After mutual authentication, the license authentication server 10 and the IC card 4 exchange the K _ID By sharing the key data and transmitting and receiving the encrypted data, it is possible to prevent eavesdropping and falsification of the data from outside such as a third party. The same applies to data transmission and reception after mutual authentication according to the present embodiment.
[0147]
The preferred embodiment of the present invention has been described with reference to the accompanying drawings, but the present invention is not limited to this example. It is obvious that those skilled in the art can envisage various changes or modifications within the scope of the technical idea described in the claims, and those modifications naturally fall within the technical scope of the present invention. It is understood to belong.
[0148]
In the above embodiment, the case where the mobile authentication device is the IC card 4 has been described as an example, but the present invention is not limited to such an example. For example, a portable terminal device such as a mobile phone (not shown) or a PDA (Personal Digital Assistants, not shown) can be implemented. In the case of a mobile phone, payment information data is transmitted / received by a wireless method such as radio waves transmitted / received from the mobile phone, and payment is made for goods or services including content data based on the payment information data. It is possible to make a payment by displaying a bar code or the like on a display via a display (not shown) of a mobile phone without transmitting / receiving payment information data. Is also possible.
[0149]
In the above embodiment, the case where the user terminal device 2 is a computer device has been described as an example, but the present invention is not limited to this example as long as the terminal device can display a Web page. For example, the present invention can be implemented in a set-top box (STB) or a television receiver (TV).
[0150]
In the above-described embodiment, the case where key data is set in advance between the license authentication server 10 and the IC card 4 and mutual authentication is performed by generating a random number has been described. If possible, the present invention is not limited to such an example, and any other example of mutual authentication can be implemented.
[0151]
In the above embodiment, the case where the IC card 4 as the mobile authentication device is a non-contact type IC card has been described as an example, but the present invention is not limited to this example. For example, a magnetic stripe card, a contact type IC card, a fusion card equipped with a non-contact type IC and a magnetic stripe, or a fusion card equipped with a contact type IC and a magnetic stripe can be provided by providing a reader / writer device corresponding to each card. Can be implemented. Note that the IC of the IC card includes both a case where a CPU (Central Processing Unit) is provided and a case where the CPU is not provided.
[0152]
【The invention's effect】
As described above, according to the present invention, content data can be settled in real time with one card, and content key data for encrypting content data and decrypting the content data before distribution is included. When distributing the control information data, the content key data is encrypted, the devices are mutually authenticated before transmission and reception, and the encrypted transmission is performed, so that the content data can be transmitted more securely through the network. It becomes possible to store and settle data such as content key data in the mobile authentication device by distribution. Further, by using a general-purpose card, it is possible to construct a general-purpose system in which the content data distribution and settlement methods are shared.
[Brief description of the drawings]
FIG. 1 is a block diagram illustrating a schematic configuration of a content distribution system according to an embodiment;
FIG. 2 is a block diagram illustrating a schematic configuration of a user terminal device according to the embodiment;
FIG. 3 is a front view showing a schematic configuration of a user terminal device according to the embodiment;
FIG. 4 is an explanatory diagram showing an outline of a method of using the card according to the present embodiment.
FIGS. 5A and 5B are explanatory diagrams showing a schematic configuration of a card according to the present embodiment, FIG. 5A is an explanatory diagram showing an internal configuration of the card, and FIG. 5B is a block diagram showing an IC module; is there.
FIG. 6 is an explanatory diagram illustrating a schematic configuration of a reader / writer device according to the present embodiment;
FIG. 7 is a block diagram illustrating a schematic configuration of a content distribution server according to the embodiment;
FIG. 8 is a block diagram illustrating a schematic configuration of a license authentication server according to the embodiment;
FIG. 9 is a block diagram illustrating a schematic configuration of a settlement server according to the present embodiment.
FIG. 10 is a block diagram showing a schematic configuration of an encryption server according to the present embodiment.
FIG. 11 is an explanatory diagram showing a screen of a top page according to the embodiment;
FIG. 12 is an explanatory diagram showing a content data list screen according to the embodiment;
FIG. 13 is an explanatory diagram showing a content data display screen according to the present embodiment.
FIG. 14 is a data flow diagram showing a process of distributing content data according to the present embodiment.
FIG. 15 is a data flow diagram showing a process of mutual authentication according to the present embodiment.
[Explanation of symbols]
1: Center server
2: User terminal device
3: Reader / writer device
4: IC card
6: Network
8: Content distribution server
10: License authentication server
12: Payment server
14: Encryption server
16: Management server
18: WWW server

Claims (76)

A mobile authentication device, a user terminal device capable of reading at least control information data stored in the mobile authentication device, and at least one or two or more contents for the user terminal device by managing the mobile authentication device A content distribution system comprising a center server for distributing data in real time, comprising:
An encryption server that generates content key data unique to each of the content data and encrypts the content data;
A content distribution server that distributes encrypted content data obtained by encrypting the content data to the user terminal device that requests desired content data;
A payment server for performing payment for distributing the encrypted content key data to the mobile authentication device;
A license authentication server for authenticating with the mobile authentication device by first authentication means and further securely delivering the control information data including the encrypted content key data to the mobile authentication device. Content distribution system. The content distribution system according to claim 1, wherein the mobile authentication device is at least one of a non-contact type and a contact type or an IC card. The content distribution system according to claim 1, wherein the mobile authentication device is a card provided with at least one of a magnetic stripe and an IC or both. The content distribution system according to claim 1, wherein the mobile authentication device further stores at least personal key data or personal information data. The content distribution system according to claim 1, wherein the content key data or the personal key data is a public key encryption method. The content distribution system according to claim 1, wherein the content key data or the personal key data is in a common key encryption system. 2. The content according to claim 1, wherein the control information data includes at least one of distribution date / time information, expiration date information, and / or valid use count information of the content key data, or an arbitrary combination thereof. 3. Delivery system. 2. The content distribution system according to claim 1, wherein the license authentication server generates the encrypted encrypted content key data from the content key data using the personal key data. 3. The content distribution system according to claim 1, wherein the license authentication server securely distributes the control information data to the mobile authentication device after the payment for the mobile authentication device is made. The user terminal device authenticates with the mobile authentication device by second authentication means, and further securely reads the control information data including the encrypted content key data stored in the mobile authentication device. The content distribution system according to claim 1, characterized in that: The content distribution system according to claim 1, wherein the payment server authenticates the mobile authentication device by a third authentication unit, and further performs secure payment to the mobile authentication device. The content distribution system according to claim 4, wherein the user terminal device decrypts the encrypted content key data using the personal key data. 2. The content distribution system according to claim 1, wherein the first authentication unit performs mutual authentication between the mobile authentication device and the license authentication server. 11. The content distribution system according to claim 10, wherein the second authentication unit is a mutual authentication between the mobile authentication device and the user terminal device. The content distribution system according to claim 11, wherein the third authentication unit is a mutual authentication between the mobile authentication device and the payment server. A center server that manages a mobile authentication device and distributes at least one or more content data in real time to a user terminal device capable of reading at least control information data stored in the mobile authentication device, comprising:
An encryption server that generates content key data unique to each of the content data and encrypts the content data;
A content distribution server that distributes encrypted content data obtained by encrypting the content data to the user terminal device that requests desired content data;
A payment server for performing payment for distributing the encrypted content key data to the mobile authentication device;
A license authentication server for authenticating with the mobile authentication device by first authentication means and further securely delivering the control information data including the encrypted content key data to the mobile authentication device. Yes, a center server. 17. The center server according to claim 16, wherein the mobile authentication device is at least one of a non-contact type and a contact type IC card. 17. The center server according to claim 16, wherein the mobile authentication device is a card including at least one of a magnetic stripe and an IC or both. 17. The center server according to claim 16, wherein the mobile authentication device further stores at least personal key data or personal information data. 17. The center server according to claim 16, wherein the content key data or the personal key data is in a public key encryption system. 17. The center server according to claim 16, wherein the content key data or the personal key data is in a common key encryption system. 17. The center according to claim 16, wherein the control information data comprises at least one of distribution date / time information, expiration date information, and / or valid use count information of the content key data, or an arbitrary combination thereof. server. The center server according to claim 16, wherein the license authentication server generates the encrypted encrypted content key data from the content key data using the personal key data. 17. The center server according to claim 16, wherein the license authentication server securely distributes the control information data to the mobile authentication device after the payment for the mobile authentication device is made. The user terminal device authenticates with the mobile authentication device by second authentication means, and further securely reads the control information data including the encrypted content key data stored in the mobile authentication device. The center server according to claim 16, characterized in that: 17. The center server according to claim 16, wherein the payment server authenticates with the mobile authentication device by a third authentication unit, and further performs secure payment with respect to the mobile authentication device. 17. The center server according to claim 16, wherein the first authentication unit performs mutual authentication between the mobile authentication device and the license authentication server provided in the center server. 26. The center server according to claim 25, wherein the second authentication unit performs mutual authentication between the mobile authentication device and the user terminal device. 27. The center server according to claim 26, wherein the third authentication unit is a mutual authentication between the mobile authentication device and the settlement server provided in the center server. A center that manages a mobile authentication device using a computer and distributes at least one or more content data in real time to a user terminal device capable of reading at least control information data stored in the mobile authentication device. On the server:
The center server generates content key data unique to each of the content data, encrypts the content data,
Distributing encrypted content data obtained by encrypting the content data to the user terminal device requesting desired content data;
Making a payment to deliver the encrypted content key data to the mobile authentication device,
A first authentication unit authenticates with the mobile authentication device, and further causes the mobile authentication device to function as a center server that securely distributes the control information data including the encrypted content key data. , Computer programs. A center that manages a mobile authentication device using a computer and distributes at least one or more content data in real time to a user terminal device capable of reading at least control information data stored in the mobile authentication device. On the server:
The center server generates content key data unique to each of the content data, encrypts the content data,
Distributing encrypted content data obtained by encrypting the content data to the user terminal device requesting desired content data;
Making a payment to deliver the encrypted content key data to the mobile authentication device,
A first authentication unit authenticates with the mobile authentication device, and further causes the mobile authentication device to function as a center server that securely distributes the control information data including the encrypted content key data. , A computer-readable storage medium storing a computer program. A user terminal device capable of reading at least control information data stored in a mobile authentication device and receiving in real time at least one or more content data distributed from a center server,
A decryption device for decrypting the encrypted content data in which the content data has been encrypted by the center server using content key data in real time;
A display device capable of displaying the decrypted content data in real time. 33. The user terminal device according to claim 32, wherein the mobile authentication device is at least one of a contactless type and a contact type IC card. 33. The user terminal device according to claim 32, wherein the mobile authentication device is a card including at least one or both of a magnetic stripe and an IC. The user terminal device according to claim 32, wherein the mobile authentication device further stores at least personal key data or personal information data. 33. The user terminal device according to claim 32, wherein the content key data or the personal key data is a public key encryption system. 33. The user terminal device according to claim 32, wherein the content key data or the personal key data is in a common key encryption system. 33. The use according to claim 32, wherein the control information data includes at least one of distribution date / time information, expiration date information, and / or valid use count information of the content key data, or an arbitrary combination thereof. Terminal device. 36. The user terminal device according to claim 35, wherein the user terminal device decrypts the encrypted content key data included in the control information data using the personal key data. The user terminal device according to claim 32, wherein the control information data is securely delivered to the mobile authentication device after the mobile authentication device has settled the payment. The user terminal device authenticates with the mobile authentication device by a second authentication unit, and further reads the control information data including the encrypted content key data stored in the mobile authentication device. 33. The user terminal device according to claim 32, 33. The user terminal device according to claim 32, wherein the mobile authentication device authenticates with the center server by a third authentication unit, and is further settled by the center server. 42. The user terminal device according to claim 41, wherein the second authentication unit is a mutual authentication between the mobile authentication device and the user terminal device. 43. The user terminal device according to claim 42, wherein the third authentication unit is a mutual authentication between the mobile authentication device and the settlement server provided in the center server. A user terminal device capable of using a computer to read at least control information data stored in a mobile authentication device and to receive at least one or more content data delivered from a center server in real time,
The user terminal device decrypts the encrypted content data in which the content data has been encrypted by the center server using content key data in real time,
A computer program for causing a user terminal device to display the decrypted content data in real time. A user terminal device capable of using a computer to read at least control information data stored in a mobile authentication device and to receive at least one or more content data delivered from a center server in real time,
The user terminal device decrypts the encrypted content data in which the content data has been encrypted by the center server using content key data in real time,
A computer-readable storage medium storing a computer program, wherein the computer program causes the decrypted content data to function as a user terminal device capable of displaying the content data in real time. A mobile authentication device managed by a center server and storing at least control information data readable by a user terminal device, comprising:
The mobile authentication device authenticates with the center server by first authentication means,
Making a payment to receive the encrypted content key data encrypted by the center server,
The mobile authentication device, wherein the control information data including the encrypted content key data is securely received. 49. The mobile authentication device according to claim 47, wherein the mobile authentication device is at least one of a non-contact type and a contact type IC card. 48. The mobile authentication device according to claim 47, wherein the mobile authentication device is a card provided with at least one or both of a magnetic stripe and an IC. The mobile authentication device according to claim 47, wherein the mobile authentication device further stores at least personal key data or personal information data. The mobile authentication device according to claim 47, wherein the content key data or the personal key data is a public key encryption method. The mobile authentication device according to claim 47, wherein the content key data or the personal key data is a common key encryption method. 49. The mobile device according to claim 47, wherein the control information data comprises at least one of distribution date / time information, expiration date information, and / or valid use count information of the content key data, or an arbitrary combination thereof. Authentication device. The mobile authentication device according to claim 47, wherein the encrypted content key data is encrypted from the content key data by the center server using the personal key data. The mobile authentication device according to claim 47, wherein the control information data is settled by the center server and then securely delivered to the mobile authentication device. The mobile authentication device authenticates with the user terminal by second authentication means, and the control information data including the encrypted content key data is read by the user terminal device. Item 48. The mobile authentication device according to Item 47. 48. The mobile authentication device according to claim 47, wherein the mobile authentication device authenticates with the center server by a third authentication unit, and is settled securely by the center server. The mobile authentication device according to claim 47, wherein the first authentication unit is a mutual authentication between the mobile authentication device and the license authentication server. 57. The mobile authentication device according to claim 56, wherein the second authentication unit is a mutual authentication between the mobile authentication device and the user terminal device. The mobile authentication device according to claim 57, wherein the third authentication unit is a mutual authentication between the mobile authentication device and the payment server. A mobile authentication device managed by a center server and storing at least control information data readable by a user terminal device, comprising:
The mobile authentication device authenticates with the center server by first authentication means,
Making a payment to receive the encrypted content key data encrypted by the center server,
A program for causing a mobile authentication device to securely receive the control information data including the encrypted content key data. A mobile authentication device managed by a center server and storing at least control information data readable by a user terminal device, comprising:
The mobile authentication device authenticates with the center server by first authentication means,
Making a payment to receive the encrypted content key data encrypted by the center server,
A readable storage medium storing a program, wherein the control information data including the encrypted content key data is caused to function as a mobile authentication device that securely receives the control information data. A mobile authentication device, a user terminal device capable of reading at least control information data stored in the mobile authentication device, and at least one or two or more contents for the user terminal device by managing the mobile authentication device A center server content distribution method that distributes data in real time:
The center server generates content key data unique to each of the content data, encrypts the content data,
Distributing encrypted content data obtained by encrypting the content data to the user terminal device requesting desired content data;
Making a payment to deliver the encrypted content key data to the mobile authentication device,
Content distribution of a center server, wherein the first authentication means authenticates with the mobile authentication device, and further securely distributes the control information data including the encrypted content key data to the mobile authentication device. Method. 64. The method according to claim 63, wherein the mobile authentication device is at least one of a non-contact type and a contact type IC card. 64. The method of claim 63, wherein the mobile authentication device is a mobile authentication device including at least one of a magnetic stripe and an IC. 64. The method of claim 63, wherein the mobile authentication device further stores at least personal key data or personal information data. 64. The method of claim 63, wherein the content key data or the personal key data is a public key encryption method. 64. The method of claim 63, wherein the content key data or the personal key data is in a common key encryption system. 64. The center according to claim 63, wherein the control information data comprises at least one of distribution date / time information, expiration date information, or valid use count information of the content key data or an arbitrary combination. Server content distribution method. 64. The content distribution method for a center server according to claim 63, wherein the center server generates the encrypted encrypted content key data from the content key data using the personal key data. . 64. The method according to claim 63, wherein the center server securely distributes the control information data to the mobile authentication device after a payment is made to the mobile authentication device. 64. The contents distribution of the center server according to claim 63, wherein the center server authenticates with the mobile authentication device by a third authentication unit, and further performs secure payment with respect to the mobile authentication device. Method. The user terminal device authenticates with the mobile authentication device by second authentication means, and further securely reads the control information data including the encrypted content key data stored in the mobile authentication device. 64. The content distribution method for a center server according to claim 63, wherein the method is characterized in that: 64. The method of claim 63, wherein the first authentication unit performs mutual authentication between the mobile authentication device and the license authentication server. 74. The method according to claim 73, wherein the second authentication unit is a mutual authentication between the mobile authentication device and the user terminal device. 73. The method of claim 72, wherein the third authentication unit is a mutual authentication between the mobile authentication device and the payment server.

Images