JP2006018692A - Electronic right transfer processing method, electronic right transfer management system, and device and program therefor - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To transfer an electronic right while protecting the anonymity of a transfer source user and a transfer destination user. <P>SOLUTION: A right transfer processor 10 forms right transfer information, generates a distributed information group in which the right transfer information is partially restorable from a combination of specified distributed information I and II, and the right transfer information is entirely restorable from all distributed information I, II and III, and distributes and transmits the distributed information I and II to a right transfer processor 20 and the distributed information II to a right transfer management device 30. The right transfer processor 20 partially restores the right transfer information from the distributed information I and II to confirm the content thereof, and then transmits the distributed information I and II to the device 30. The right transfer management device 30 entirely restores the right transfer information from the distributed information I, II and III to verify the transfer of the electronic right, and executes the transfer processing of the electronic right. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to transfer management technology for electronic rights such as online tickets, content usage rights, and electronic bills.

  Managing the issuance and exercise of so-called electronic rights such as online tickets that manage admission to concerts and movie theaters, content usage rights that manage the use of digital content, and electronic bills that manage the transfer of electronic cash and value The system is generically called an electronic rights management system.

  In these electronic rights management systems, identification information such as a right ID that uniquely represents an electronic right and authentication information such as a user ID and a password that represent the owner of the electronic right are combined as electronic rights management server as rights owner information. It is stored in etc. When an owner of an electronic right exercises an electronic right, the owner must identify his own electronic right or identification information such as a right ID that uniquely represents the electronic right, and proof that he is the owner. By presenting authentication information such as a user ID and password, by comparing with the rights owner information stored in the electronic rights management server, etc., it is the rightful owner of electronic rights and possessing electronic rights When things are certified, electronic rights can be exercised.

  Conventionally, several techniques for realizing transfer of electronic rights in such an electronic rights management system have been proposed (see, for example, Patent Document 1, Patent Document 2, Patent Document 3, etc.).

  For example, in Patent Document 1, the transfer right user assigns the transfer authorization information for the transfer source user who assigns the electronic right together with the electronic right itself or the identification information thereof and the transfer source user authentication information to establish the transfer. In addition, the transfer authorization information is submitted to the transferee user who assigns the electronic rights, and the electronic rights management server assigns the electronic rights to the transferee users who transfer the electronic rights. When the transfer authentication information for establishing the certificate is submitted, the transferee user is judged as a new owner of the electronic right, and the right holder information of the electronic right is rewritten with the transferee user authentication information. This realizes the transfer of electronic rights.

  Also, in Patent Document 2, a transfer source user who assigns an electronic right owns the electronic right itself or its identification information and the user ID of the transfer destination user who assigns the electronic right together with the authentication information of the transfer source user. The electronic right management server submits the authentication information such as the user ID of the transfer source user to the electronic right management server. In this case, the transfer destination user is determined as a new owner of the electronic right, and the transfer of the electronic right is realized by rewriting the right holder information of the electronic right with the authentication information of the transfer destination user. .

  Further, in Patent Document 3, a transfer source user who assigns an electronic right arbitrarily divides the electronic right that he owns and submits a part thereof together with authentication information of the transfer source user to an electronic rights management server or the like. A part of the electronic right is submitted to the transferee user who assigns the electronic right, and the electronic right management server submits a part of the electronic right to the transferee user who assigns the electronic right to the electronic right. In this case, the transfer destination user is determined as a new owner of the electronic right, and the transfer of the electronic right is realized by rewriting the right owner information of the electronic right with the authentication information of the transfer destination user. .

JP 2001-14409 A “Ticket Sales Information Management Method” JP 2002-269279 A "Online Ticket Assignment Management Method and Management Server System Therefor" Japanese Patent Application Laid-Open No. 2003-248738 “Method for transferring right to use digital contents, use right transfer management device, use right transfer enforcement device, use right transfer management program, use right transfer enforcement program”

  As described above, in the electronic rights management system, several techniques for enabling transfer of electronic rights have been proposed. However, these conventional techniques have the following problems.

  First, the prior art has a problem that it is impossible to specify and confirm transfer conditions when transferring electronic rights. Electronic rights are inherently associated with consideration. Therefore, when assigning electronic rights, for example, charging information for consideration for the assignment of electronic rights or information that specifies or restricts the subject of assignment of electronic rights is used by the transfer source. It is desirable that the transfer of electronic rights should be carried out when specified by the user and confirmed and agreed by the transferee user.

  However, the conventional techniques represented by Patent Documents 1 to 3 do not assume such designation and confirmation of transfer conditions, and transfer of electronic rights is performed regardless of the establishment of the transfer conditions. become. Therefore, the payment of electronic rights and the transfer of electronic rights should be performed fairly, but electronic rights were transferred without payment of electronic rights, or conversely, the payment of electronic rights was paid. Nevertheless, there is room for illegal activities such as electronic rights not being transferred. In addition, there is room for illegal activities such as the transfer of electronic rights to be performed at an unreasonably high or low price for the original value of electronic rights.

  Secondly, in the prior art, when transferring electronic rights, it is impossible to maintain the anonymity of the transfer source user and / or the transfer destination user, or the transfer source user and the transfer destination while maintaining anonymity. There is a problem that both or one of the users cannot be specified. Originally, an electronic right allows only a specific user to exercise and assign the right, and an electronic rights manager or electronic rights management server, etc., assigns a destination by a source user to identify the right holder. It is desirable that the designation of the user is possible, the authentication information of both the transfer source user and the transfer destination user is grasped, and the transfer of the electronic right is executed when the authentication is established.

  However, Patent Document 1 and Patent Document 3 do not assume designation of a transfer destination user by a transfer source user, and the transfer of electronic rights is executed regardless of the legitimacy of the transfer destination user. Become. Therefore, in these prior arts, there is room for the electronic right that should originally be transferred to an authorized transfer destination user to be transferred to an incorrect user or a fraudulent user.

  On the other hand, Patent Document 2 allows a transferee user to designate a transferee user. In this case, the transferee user knows authentication information such as a user ID for specifying the transferee user. The anonymity of the transferee user is not maintained. Further, Patent Document 3 includes a user ID of the transfer source user, a user terminal ID for specifying the transfer source user's terminal, etc. in a part of the electronic rights that the transfer source user submits to the transfer destination user. It is necessary and the anonymity of the transfer source user is not maintained. Therefore, in these conventional techniques, it becomes possible to collate the user's personal information based on the authentication information such as the user ID or the user terminal ID of the transfer source user or the transfer destination user, and the user's personal information There is room for infringement. Further, there is room for the third user to illegally transfer or accept electronic rights by misrepresenting the authentication information of the transfer source user or transfer destination user.

  The present invention has been made in view of the above-described circumstances of the prior art, and is transfer in a situation where the transfer source user and the transfer destination user remain anonymous, that is, both or one user ID or Electronic rights can be transferred without exposing authentication information such as passwords to the other party, and electronic rights can be transferred under correct transfer conditions agreed by both the user and the recipient user It is an object of the present invention to provide an electronic right assignment processing method, an electronic right assignment management system, an apparatus thereof, and a program for realizing the above.

  The present invention relates to a restoration control described in Japanese Patent Application No. 2003-366538, which is an extension of the conventional (k, n) threshold secret sharing method and (d, k, n) threshold secret sharing method, and which is already filed by the present applicant. Use type secret information distribution method.

The (k, n) threshold secret sharing method is an integer distribution number n of 2 or more, which is the number of distributed information distribution, and an integer of 2 or more, n or less, which is the minimum number of distributed information necessary for restoring the secret information S. (K−1) degree polynomial f (x) with secret information S as a constant term
f (x) = S + r ₁ x +... r _k−1 x ^k−1 mod p (1)
(R ₁ ,..., R _k−1 : random number, p: prime number), and the secret information distributor who owns or distributes the original secret information S by deposit is each shared information holder i that stores the shared information. The distributed information Wi = f (i) is distributed to (i = 1, 2,..., N).

  This (k, n) threshold secret sharing method can restore the original secret information S by solving simultaneous equations relating to f (x) if any k pieces of distributed information are gathered among n pieces of shared information. However, there is a feature that the original secret information S cannot be restored because the simultaneous equations relating to f (x) cannot be solved even if up to (k−1) pieces of distributed information are collected. Therefore, even if up to (n−k) pieces of shared information are lost or destroyed, the original secret information S can be restored, and up to (k−1) pieces of shared information can be obtained by leakage or theft. However, it is possible to realize a method for safely storing the secret information in which the original secret information S cannot be restored.

The (d, k, n) threshold secret sharing method is an extension of the above (k, n) threshold secret sharing method, and is an integer number n of 2 or more, which is the number of distributed information distribution, and the secret information S. An integer threshold value k of 2 or more and n or less, which is the minimum number of shared information necessary for complete restoration of the information, and a shortage number of shared information that allows partial restoration of the secret information S with respect to the threshold value k 2 The secret information S is divided into S ₀ , S ₁ ,..., S _d−1 from an integer division number d of k or less, and the divided secret information (division information) is a constant term (k−1). ) The following polynomial f (x)
_{f (x) = S 0 +} S 1 x + ... S d-1 x d-1 r 1 x d + ... r kd x k-1 mod P ... (2)
(R ₁ ,..., R _k−d : random number, p: prime number) and the secret information distributor who owns or distributes the original secret information S by deposit is each shared information holder i that stores the distributed information. The distributed information W _i = f (i) is distributed to (1 = 1, 2,..., N).

This (d, k, n) threshold secret sharing method is similar to the (k, n) threshold secret sharing method described above. If any k pieces of shared information are gathered among n pieces of shared information, f ( The original secret information S can be restored by solving the simultaneous equations relating to x), but the simultaneous equations relating to f (x) cannot be solved even if any (k−d) pieces of distributed information are collected. The secret information S cannot be restored. However, when any (k−d + 1) to (k−1) pieces of distributed information are collected, the division information S ₀ , S ₁ ,..., S _{d−1 is} obtained from simultaneous equations relating to f (x). Since the relational expression is obtained, possible values can be obtained as the pieces of divided information S ₀ , S ₁ ,..., S _d−1 , and the original secret information S can be partially restored.

  The (k, n) threshold secret sharing method and the (d, k, n) threshold secret sharing method are described in detail in “A. Shamir,“ How to Share a Secret ”, Commun. Of ACM, Vol. 22, No. 11, pp. 612-613, 1979 ”and“ GR Blakley, C. Meadows, “Security of ramp schemes”, Proc. Of Crypto '84, Lecure Notes on Computer. Sci., 196, pp. 242-268, 1984 ".

The restoration control type secret information distribution method previously proposed by the present applicant is a method obtained by further extending the above (k, n) threshold secret distribution method and (d, k, n) threshold secret distribution method. If there are k pieces of shared information among the pieces of shared information, the original secret information S can be restored by solving simultaneous equations relating to f (x), but up to (k−d) pieces of shared information can be obtained. Even if all of them are used, simultaneous equations relating to f (x) cannot be solved, so that the original secret information S cannot be restored. However, by defining a distribution function for distributing information in a specific format, when any (k−d + 1) to (k−1) pieces of distributed information are arranged in a specific combination, f (x ), The specific division information S ₀ , S ₁ ,..., S _d−1 can be obtained, and the original secret information S can be partially restored.

This restoration control type secret information distribution method is basically based on the threshold value k and the threshold value k, which are two or more integers, which is the minimum number of shared information necessary for complete restoration of the secret information S. An integer division number d of 2 or more and k or less that determines the number of shared information deficiencies that allow partial restoration of the secret information S, and d pieces of division information S ₀ , S _{1 ,.} Enter the conditions for distributing the secret information S such as _-1 .
A prime number p larger than the maximum division information S _t (0 ≦ t ≦ d−1), and a random number r _i (1 ≦ 1 ≦ k−d) smaller than the prime number p and not 0 (k−d), (K (k−1) / 2) random numbers a _j (1 ≦ j ≦ k (k−1) / 2) are generated,
f (x) = S ₀ + S ₁ (x−a ₁ ) +... + S _d−1 (x−a _{(d−1) (d−2) / 2 + 1} ) (x−a _{(d−1) (d− 2) / 2 + 2) ...} (x-a (d-1) (d-2) / 2 + d-1) + r 1 (x-a d (d-1) / 2 + 1) (x-a d (d-1) _{/ 2 + 2)} ... (x- _{ad (d-1) / 2 + d} ) + ... + rk _-d (x-a _{(k-1) (k-2) / 2 + 1} ) (x-a _{(k-1) ( k-2) / 2 + 2} ) (x-a _{(k-1) (k-2) / 2 + k-1} ) mod P (3)
The shared information f (x) of the secret information S expressed by the following formula is generated.

For example, when the dispersion function f (x) in the above formula (3) is k = 3 and d = 2,
f (x) = S0 + S1 (x-a1) + r (X-a2) (x-a3) mod P (4)
The simultaneous equations for any two pieces of distributed information Wx and Wx + b (x> 0, b> 0) can be expressed by the following determinant.

上記行列式の左項を掃き出し法により変形すると、

When the left term of the above determinant is transformed by the sweep method,

となり、ａ_１，ａ_２，ａ_３の値によっては−ｘ^２＋（２ａ_１−ｂ）＋ａ_１ｂ−ａ_１ａ_２−ａ_１ａ_３＋ａ_２ａ_３＝０，もしくは２ｘ＋ｂ−ａ_２−ａ_３＝０を満たすｘとｂがある場合に、連立方程式から分割情報（部分情報）のＳ_０のみ、もしくはＳ_１のみを求めることができる。

Depending on the values of a ₁ , a ₂ , and a ₃ , −x ² + (2a ₁ −b) + a ₁ b−a ₁ a ₂ −a ₁ a ₃ + a ₂ a ₃ = 0, or 2x + b−a ₂ − When there are x and b satisfying a ₃ = 0, only S _{0 of the} division information (partial information) or only S ₁ can be obtained from the simultaneous equations.

  In the present invention, the right transfer processing device possessed by the transfer source user who transfers the electronic right includes identification information indicating the electronic right to be transferred, authentication information indicating the transfer source user who owns the electronic right, and further transfer The right transfer information including the transfer condition indicating the condition that holds is input and created, and the transfer control secret sharing method can be used to partially restore the right transfer information from the specific shared information. The rights transfer information is distributedly encoded into a plurality of pieces of shared information so that all rights transfer information can be restored from the shared information group, and the electronic rights are assigned to the shared information that allows the rights transfer information to be partially restored. It is sent to the rights assignment processing device possessed by the transferee user, and the remaining shared information is sent to the rights assignment management device that manages the rights information of the electronic rights in association with the information on the owner. The rights assignment processing device, based on the distributed information sent from the rights assignment processing device, partially identifies the electronic rights identification information and transfer conditions, etc., excluding the authentication information of the transfer source user, etc. Then, the shared information is sent to the right transfer management device. The right assignment management device completely restores the right information based on the distributed information group sent from the right assignment processing device and the right assignment processing device, verifies whether the electronic right can be transferred, and the owner of the electronic right. By rewriting information from the authentication information of the transfer source user to the authentication information of the transfer destination user, the right transfer of the electronic right is executed.

  According to the present invention, in the transfer process of electronic rights, the transfer source user and the transfer destination user of the electronic rights are kept anonymous, and both the transfer source user and the transfer destination user agree. The transfer of electronic rights under the correct transfer conditions can be realized easily.

  For example, when the distributed information I, II among the distributed information I, II, III generated by the right transfer processing device possessed by the transfer source user is sent to the right transfer processing device possessed by the specific transfer destination user, and any In either case, when sending to a right transfer processing device owned by a user or disclosing it to any public device, authentication information such as the user ID and password of the transfer source user is concealed from the transfer destination user. The transfer source user does not need to know authentication information such as the user ID and password of the transfer destination user, and the transfer of the electronic right specified by the identification information is executed under the transfer conditions agreed by both parties. Therefore, it is possible to maintain anonymity between users who transfer electronic rights and to transfer electronic rights based on an agreement.

  As a result, the electronic right transfer source user can transfer the electronic right independent of the distribution medium or the communication medium. For example, an intermediary can be obtained by any means such as e-mail, Internet website, auction site, etc. Since it is possible to negotiate and transfer electronic rights without using the Internet, the opportunity for electronic rights assignment increases dramatically. On the other hand, in the transfer of electronic rights not via an intermediary, the user to whom electronic rights are transferred may negotiate and transfer electronic rights after confirming the electronic rights to be transferred and the conditions for the transfer. As a result, the security of the transfer of electronic rights is dramatically improved. Furthermore, it is possible for the administrator of electronic rights to easily manage the distribution of electronic rights from the user who transferred the electronic rights to the user of the transfer destination, while at the same time suppressing illegal distribution and transferring the electronic rights. Since the management fee associated with the transfer can be collected from the transfer source user and the transfer destination user, the convenience of transfer management of electronic rights is dramatically improved. Therefore, it is expected that the opportunity and convenience of the distribution of electronic rights will be dramatically increased and activated.

  In the following, as one embodiment of the present invention, a right transfer of an electronic ticket using an electronic right transfer management system will be described.

  In this embodiment, for an electronic ticket purchased by a transfer source user, identification information uniquely indicating the electronic ticket is recorded in the right transfer management device as right owner information together with the user authentication information. . The right transfer of the electronic ticket is realized by rewriting the authentication information of the transfer source user in the right owner information with the authentication information of the transfer destination user in the record on the right transfer management device.

  FIG. 1 is a diagram for explaining an electronic ticket right transfer processing sequence according to an embodiment of the present invention. Here, the right assignment information is distributedly encoded into three pieces of shared information I, II, and III. However, it is only necessary that the specific part of the right assignment information can be restored from a combination of specific pieces of shared information. Need not be three.

  Based on the result of the negotiation that the transfer-destination user who transfers the electronic ticket and the transfer-destination user who receives the electronic ticket related to the transfer of rights, first, the transfer-source user uses the right transfer processing device 10 to transfer the electronic ticket to be transferred. The right transfer information is constructed by using the restoration control type secret sharing method, and constructing the right transfer information including the identification information to be shown, the authentication information indicating the transfer source user, and the transfer conditions such as the transfer amount at the time of transfer of the right. A group of distributed information I, II, and III is generated (step 1). Here, from the shared information I and II, the transfer conditions such as the identification information indicating the electronic ticket and the transfer amount can be restored in the right transfer information, but the authentication information such as the user ID and password of the transfer source user Cannot be restored. The transfer source user declares the transfer of rights by sending the shared information III among the generated shared information I, II, III to the rights transfer management device 30 possessed by a rights manager such as a ticket service provider (step) 2) Next, the distributed information I and II are sent to the right assignment processing device 20 possessed by the transferee user (step 3).

  In the right transfer processing device 20, the transferee user transfers transfer information such as the transfer amount and the identification information of the electronic ticket to be transferred among the transfer information I and II sent from the transfer source user. Only the information related to the confirmation of the rights that can be restored and billing is partially restored to confirm the contents of the transfer process (step 4), and the rights information possessed by the rights manager such as a ticket service provider is transferred to the distributed information I and II. It is sent to the management apparatus 30 and an update of the rights owner information is requested (step 5).

  A rights manager, such as a ticket service provider, completes rights assignment information in the rights assignment management device 30 from the shared information I and II sent from the transferee user and the shared information III sent from the transferee user in advance. The electronic ticket is confirmed after confirming the match between the authentication information of the transfer source user included in the restored right transfer information and the right holder information of the electronic ticket, and confirming or substituting the transfer condition. Is transferred to the transfer destination user authentication information to realize transfer of the electronic ticket (step 6).

  FIG. 2 is a functional configuration diagram of the electronic rights assignment management system in one embodiment of the present invention. In the electronic rights assignment management system according to the present embodiment, the rights assignment processing device 10, the rights assignment processing device 20, and the rights assignment management device 30 are connected via a communication line 40 such as the Internet in a network. In the electronic right transfer process of the present invention, it is only necessary to exchange data between the apparatuses, and it is not necessary to be connected via a network.

  The right assignment processing apparatus 10 includes assignment information input means 11, assignment information distribution means 12, and assignment information output means 13. The assignment information processing unit 10 receives assignment information, generates right assignment information, and decentralizes and encodes the right assignment information. Then, a shared information group is generated, and a part of the shared information group is sent to the right assignment processing device 20 and the right assignment management device 30. Specifically, the transfer information input means 11 includes identification information indicating electronic rights to be transferred, rights transfer information including authentication information indicating a transfer source user who owns and transfers the electronic rights, or the identification information and In addition to the authentication information, an input of right transfer information including transfer conditions for determining whether transfer processing can be executed is accepted. The transfer information distribution unit 12 generates a shared information group by distributing and encoding the right transfer information that has received the input into a plurality of shared information. The shared information output unit 13 sends a shared information group that can partially restore the right transfer information among the shared information group generated by the transfer information distribution unit 12 to the right transfer receiving processing device 20, and the remaining shared information. Is sent to the right assignment management device 30. Note that at least one of the shared information to be generated may have a predetermined value with the right assignment management apparatus 30 in advance, and in this case, sending of the distributed information to the right assignment management apparatus 30 is omitted. it can.

  The rights assignment processing device 20 includes a shared information input unit 21, a transfer information restoration unit 22, a transfer information confirmation unit 23, an authentication information input unit 24, and a shared information output unit 25. Accepts input, partially restores right transfer information from the input shared information, confirms the restored right transfer information to the user, and accepts input of authentication information of the user who receives the transfer of the electronic right Then, the input shared information and the authentication information are sent to the right transfer management device 30. Specifically, the shared information input unit 21 receives input of shared information output by the right assignment processing device 10. The transfer information restoring means 22 restores the right transfer information that can be partially restored from the inputted shared information. The transfer information confirmation unit 23 displays the right transfer information restored by the transfer information restoration unit 22 on a display or the like and presents it to the transfer destination user. As a result, the transfer destination user can confirm the necessary transfer contents except for the authentication information of the transfer source user. The authentication information input unit 24 receives an input of authentication information indicating a transfer destination user who receives the transfer of the electronic right. The shared information output unit 25 sends the shared information input by the shared information input unit 21 and the authentication information of the transfer destination user input by the authentication information input unit 24 to the right transfer management device 30.

  The rights assignment management device 30 includes rights information management means 31, authentication information management means 32, distributed information input means 33, assignment information restoration means 34, rights assignment determination means 35, rights assignment execution means 36 and rights information storage unit 37, authentication. The information storage unit 38 and the transfer information storage unit 39 are configured to store information on electronic rights and their owners, and store information on users of the devices. The right transfer processing device 10 and the right transfer processing device 20 Receiving the input of the shared information group and the authentication information from the server, completely restoring the right transfer information from the input shared information group, determining whether or not to execute the right transfer based on the restored right transfer information, and the determination result And rights assignment is executed based on the restored rights assignment information.

  Specifically, the right information management unit 31 manages input, storage, authentication, change, output, and the like of right information of electronic rights managed by the device 30. Rights information of electronic rights managed by the device 30 (identification information indicating electronic rights and authentication information relating to the owner) is stored in the rights information storage unit 37. The authentication information management unit 32 manages the input, storage, authentication, change, output, and the like of authentication information of users of electronic rights managed by the device 30. Detailed authentication information of the user of the electronic right managed by the device 30 is stored in the authentication information storage unit 38. The shared information input means 33 accepts inputs such as the shared information output by the right assignment processing device 10 and the shared information output by the right assignment processing device 20 and the authentication information of the transfer destination user. The transfer information restoration unit 34 restores all right transfer information from the input shared information group. The right assignment determination unit 35 verifies whether or not the identification information indicating the electronic right to be assigned included in the restored right assignment information exists in the right information storage unit 37, and if it exists, the identification information It is verified whether or not the authentication information of the owner of the identification right stored in association with the authentication information indicating the transfer source user included in the restored right transfer information matches. Further, the right assignment determination means 35 refers to the detailed authentication information stored in the authentication information storage unit 38 if necessary, and establishes an assignment condition indicating a condition for establishing the assignment included in the restored right assignment information. Further verify or substitute. The rights assignment execution means 36 receives the authentication information of the owner of the electronic right stored in the rights information storage unit 37 from the rights assignment processing device 20 when all the verifications in the rights assignment judgment means 35 are established. Rewrite the authentication information of the transferee user. In the transfer information storage unit 39, the result of the right transfer process is stored as transfer information.

  In the embodiment of FIG. 2, the right assignment processing device 10 and the right assignment processing device 20 are described as different devices, but the elements constituting each device may be combined and mounted as one device. In addition, the present embodiment does not limit the configuration of each device to the configuration in the present embodiment, and the right assignment processing device 10 assigns rights created by inputting information on the electronic rights to be assigned and the transfer source user. The shared information group generated by distributing and encoding the information is output to the rights assignment processing device 20 and the rights assignment management device 30, and the rights assignment processing device 20 partially restores the rights assignment information from the input shared information. The shared information and information about the transfer destination user are output to the rights assignment management device 30. The rights assignment management device 30 completely restores the rights assignment information from the given distributed information group, and then obtains the rights owner information of the electronic rights. It is only necessary to have a rewriting function, and FIG. 2 shows an example of the configuration.

  Hereinafter, an example of the operation of each device in the electronic right assignment management system shown in FIG. 2 will be described in detail by taking the right assignment of an electronic ticket as an example. In the following description, the right transfer information of the electronic ticket is distributed and encoded into the three pieces of shared information I, II, and III.

<Operation Example of Rights Assignment Device 10>
In the following, a process for generating the right transfer information and shared information I, II, III of the electronic ticket in the right transfer processing device 10 of the transfer source user will be described.

  It is assumed that the transfer source user negotiates with the transfer destination user in advance about the electronic ticket to be transferred, and determines the transfer amount and the like with mutual agreement. First, in the right assignment processing device 10, the assignment information input means 11 assigns identification information such as a user ID and password by a transfer source user, identification information such as a ticket ID representing an electronic ticket to be transferred, and a transfer amount. Accepts the input of the condition, encodes it to form right assignment information, and stores it in the internal memory of the right assignment processing apparatus 10 or the like.

  In the present embodiment, “endo” is the user ID indicating the transfer source user, “gu8che3” is the password, “T0000000l” is the ticket ID indicating the electronic ticket to be transferred, and “2500” is the transfer amount indicating the transfer condition. Assume that it has been entered. In the embodiment, it is assumed that encoding is performed using a shift JIS code, and the encoding results are “656E646F2020”, “67753873863653300”, “54303030303030331”, and “303235030”, respectively. FIG. 3 shows a configuration example of the right assignment information in this embodiment.

  This example does not particularly define the configuration of the right transfer information and the encoding method for the input value. In this embodiment, the right transfer information is composed of a 6-byte user ID, an 8-byte password, a 9-byte ticket ID of the ticket to be transferred, and a 5-byte transfer amount. Information that enables authentication and information that enables identification of a ticket to be transferred need only be included in a minimum length, and are not limited to the configuration of this embodiment. In addition, the right transfer information may include other information. In addition to including the conditions related to ticket transfer in the form of transfer amount as in this embodiment, for example, transfer execution date and time, transfer expiration date, transfer destination user, etc. A configuration including a personal identification number and a password for confirming transfer and a password can be considered. Furthermore, as an encoding method, in this embodiment, the input value is encoded by a shift JIS code, and “20” indicating blank or “00” indicating no input is input for an input that is less than the specified length. ”,“ 30 ”indicating the number 0, etc., but other encoding methods and assignment methods may be used, and by using a means such as calculating a hash value or encrypting the rights, It may be possible to improve safety against leakage or alteration of transfer information.

  Further, the present invention does not particularly stipulate the method and format for inputting the user ID, password, ticket ID to be transferred, and transfer amount. The user ID and password recorded in advance in the right transfer processing device 10 or recorded on an external recording medium such as an IC card may be input as a file, or the ticket ID to be transferred is included in the ticket to be transferred. It may be acquired from ticket information or a ticket image.

  Next, in the right assignment processing apparatus 10, the assignment information distribution unit 12 generates the distribution information I, II, and III using the restoration control type secret sharing method based on the configured right assignment information as follows. .

  The transfer information distribution means 12 firstly divides information S0 consisting of the user ID and password of the transfer source user who does not permit the right transfer processing device 20 to restore the right transfer information, and the electronic ticket that allows the right transfer processing device 20 to restore the right transfer information. Is divided into two pieces of division information S1 consisting of the ticket ID and the transfer amount. In the example of FIG. 3, S0 and S1 are electronic data each having a length of 14 bytes, S0 is “656E646F202067753387368653300”, and S1 is “54303030303003030313032353030”.

Next, the transfer information distribution unit 12 generates the shared information I, II, and III using a special function f (x) called a distribution function for distributedly encoding the right transfer information. The dispersion function f (x) in the present embodiment is expressed by the following equation (7) using the above equation (4) as a1 = 7, a2 = 1, and a3 = 5.
f (x) = S0 + S1 (x-7) + R (x-1) (x-5) (mod P) (7)
In Expression (7), x is an information number for distributedly encoding electronic data to generate distributed data Wx, S0 and S1 are division information obtained by dividing the right transfer information, and R is division information S0 and S1 from the distributed data Wx. Is a random character string (which corresponds to r in the above equation (4)), and P represents a fixed character string for remainder calculation.

  The dispersion function f (x) in the above formula (7) is calculated by substituting 2 for x, f (2) is W2, and substituting 3 for x, f (3) is W3, and 4 is substituted for x. When f (4) calculated in this way is W4, W3 and W4 to S0 can be restored, W2 and W4 to S1 can be restored, and W2 and W3 and W4 or any three Wx can be restored to S0, S1, and R. This is the dispersion function. Further, since the original pieces of divided information S0 and S1 are not known from the individual distributed data Wx including W2, W3 and W4, the divided information S0 and S1 can be safely distributed. Such a special distribution function f (x) can be obtained by the restoration control-type secret information distribution method described in Japanese Patent Application No. 2003-366538, which has already been outlined, and is not limited to Expression (7). .

  In this embodiment, since the division information S0 and S1 are 14 bytes in length, a 14-byte hexadecimal character string P = FFFFFFFFFFFFFFFFFFFFFFFFFFB5 is used as the fixed character string P. In this embodiment, P is described as a fixed character string, but the actual P used in the calculation is treated as numerical information. In the case of numerical information, the fixed character string P is preferably a prime number. Note that the size and value of the fixed character string P are not particularly defined in this embodiment, and are arbitrarily determined from the viewpoint of the assumed length of electronic data to be distributed and encoded and the security strength against brute force attacks. You can do it.

  The distribution function f (x) and the fixed character string P are commonly used not only by the right assignment processing device 10 but also by the right assignment processing device 20 and the right assignment management device 30. The means for sharing these pieces of information between each device is not specified in the present invention, but for example, these pieces of information may be always built into a fixed memory in each device as fixed information. Means such as a common use of a recording medium such as an IC card storing such information can be considered.

  The shared information I, II, III is generated as follows. The transfer information distribution unit 12 first determines a random character string R in the distribution function f (x) of the above equation (7) at random. The random character string R is a 14-byte hexadecimal character string and needs to be smaller than the fixed character string P. In this embodiment, it is assumed that R = 1A2B3C4D5E6F708192A3B4C5D6E7 is obtained as a random character string.

Next, the transfer information distribution unit 12 distributes f (2) obtained by substituting x = 2 into the distribution function f (x) of the above equation (7), and f (4) obtained by substituting x = 4. F (6) into which II and X = 6 are substituted is calculated as shared information III, and is stored in the internal memory of the right assignment processing apparatus 10 or the like. In this embodiment, S0 = 656E646F202067753387665653300, S0 = 54303030303030313032353030, R = 1A2B3C4D5E6F708192A3B4C5D6E7 and P = FFFFFFFFFFFFFFFFFFFFFFFFFFB5 are calculated as the respective distributed information I, II, III.
Distributed information I = f (2) = S0-5S1-3R = 71FBBE9613E124FF8A974F09BCC5 (mod P)
Distributed information II = f (4) = S0-3S1-3R = 1A5C1EF67444855FECF7B3741D70 (mod P)
Distributed information III = f (6) = S0−S1 + 5R = 941661C1C81D69CCE475BE0D3553 (mod P)
From the calculated dispersion information, the division information S1 is obtained from the dispersion information I and II, S0 and S1 from all the dispersion information I, II, and III, and the random character string R according to the characteristic of the distribution function f (x) described above. Can be restored. FIG. 4 shows a calculation example of the shared information generation process in the present embodiment.

  The shared information output means 13 in the rights transfer processing device 10 includes the shared information III of the generated shared information I, II, and III together with the user ID and password of the transfer source user and a rights manager such as a user ticket service provider. It transmits to the rights assignment management device 30 that has it, makes a ticket assignment declaration, and transmits the shared information I and II to the rights assignment processing device 20 that the destination user has.

  Note that this embodiment does not particularly define the output and transmission methods and contents in the distributed information output means 13. The distributed information III and information that is a means for authenticating the transfer source user may be submitted to the right assignment management device 30, and the distributed information I and II may be submitted to the right assignment processing device 20, respectively. Instead of direct communication through a line, other communication means such as mail may be used, or physical means using an external recording medium such as an IC card may be used for submission. Also, when submitting via a network line, it is desirable to increase the security of the submission via the network line by, for example, encrypting and submitting using the public key of the ticket service provider or transferee user.

  In this embodiment, each time a transfer source user transfers a ticket, the distributed information III is calculated and submitted to a rights manager such as a ticket service provider. It is also possible to set the shared information III in advance when registering and always use the same shared information III. In this case, the transfer source user's right transfer processing device 30 may generate the shared information III at the time of user registration, or a ticket service provider or the like generates the shared information III and transfers it at the right transfer management device 30. It may be distributed to former users. Note that the present invention does not particularly define a method for generating the shared information III in this case. The shared information III may be any value as long as it is smaller than the fixed character string P. For example, the rights transfer management device 30 such as a ticket service provider confirms authentication information such as the user ID and password of the transfer source user from the shared information III. In order to be able to do so, the remainder by the fixed character string P may be calculated after encryption with the public key of the ticket service provider.

  Hereinafter, generation of shared information in the transfer information distribution unit 12 in the right transfer processing apparatus 10 when the shared information III is a fixed value will be described.

  The transfer information distribution unit 12 uniquely determines a random character string R used in the distribution function f (x) based on the distribution information III and the distribution function f (x). In the case of Expression (7), the distribution information III is f (6) obtained by substituting x = 6 into the distribution function f (x). Therefore, f (6) = S0−S1 + 5R = III is set to R By solving, the random character string R can be determined from the following equation (8).

本実施例においては、分散情報IIIを「９４１６６１ＣＩＣ８１Ｄ６９ＣＣＥ４７５ＢＥ０Ｄ３５５３」と与えると、上記の式（８）にＳ０＝６５６Ｅ６４６Ｆ２０２０６７７５３８７３６８６５３３００、Ｓ１＝５４３０３０３０３０３０３０３０３１３０３２３５３０３０を代入して算出する事で、Ｒ＝１Ａ２Ｂ３Ｃ４Ｄ５Ｅ６Ｆ７０８１９２Ａ３Ｂ４Ｃ５Ｄ６Ｅ７が得られる。

In the present embodiment, when the distributed information III is given as “941661CIC81D69CCE475BE0D3553”, R = 1A2B3C4D5E6F7C4D5E6F7C6D7E6F7C6D5E6F7F6C6D5E6F7 is obtained by substituting S0 = 656E646F20206773387368653300 and S1 = 543030303030303323353030 into the above equation (8).

  The transfer information dispersal unit 12 calculates the disperse information I and II using the calculated R, and obtains disperse information I = 71FBBE9613E124FF8A974F09BCC5 and disperse information II = 1A5CIEF6744185555FECF7B3741D70. In this way, it is also possible in the present invention to calculate the random number character string R and then calculate the enemy information I and II after setting the distributed information III to a predetermined value.

<Operation Example of Rights Assignment Processing Device 20>
In the following, a description will be given of a process in which the transfer destination user's right assignment processing device 20 receives the shared information I and the shared information II from the transfer source user and partially restores the right transfer information.

  The rights assignment processing device 20 first receives the shared information I and II in the shared information input means 21 and stores them in the internal memory of the rights assignment processing device 20. In this embodiment, it is assumed that shared information I = 71FBBE9613E124FF8A974F09BCC5 and shared information II = 1A5CIEF67441855FECF7B3741D70 output and transmitted by the right transfer processing device 10 are input.

  This embodiment does not particularly define the input target, method, and format of the shared information input means 21. It is only necessary to input the shared information I and II at a minimum, and it is also possible to accept the input of ticket information such as a ticket ID of a ticket to be transferred or a ticket image. In addition to accepting the input of the shared information I and II directly transmitted from the right transfer processing device 10 as an input means, in addition to the user's keyboard input, file name input and drag-and-drop input on the screen, etc. In addition, an input by reading from an external recording medium such as an IC card may be accepted.

  Next, the transfer information restoring means 22 restores the division information S1 in the right transfer information from the input shared information I and II according to a predetermined calculation process. The distribution information I and II in the present embodiment is f (2) obtained by substituting x = 2 into the dispersion function f (x) of Expression (7) and f (4) obtained by substituting x = 4. The following simultaneous equations can be established.

したがって、分散情報ＩとIIから分割情報Ｓ１を求める式は以下のようになる。ただし、分割情報Ｓ０と乱数文字列Ｒはこの方程式からは得る事ができない。

Therefore, the equation for obtaining the division information S1 from the shared information I and II is as follows. However, the division information S0 and the random number character string R cannot be obtained from this equation.

本実施例においては、図４に示したように、分散情報Ｉ＝７１ＦＢＢＥ９６１３Ｅ１２４ＦＦ８Ａ９７４Ｆ０９ＢＣＣ５、分散情報II＝１Ａ５ＣＩＥＦ６７４４１８５５ＦＥＣＦ７Ｂ３７４１Ｄ７０である事から、上記の式（１０）により分割情報Ｓ１を算出すると、Ｓ１＝５４３０３０３０３０３０３０３０３１３０３２３５３０３０を得る。

In the present embodiment, as shown in FIG. 4, since the shared information I = 71FBBE9613E124FF8A974F09BCC5 and the shared information II = 1A5CIEF67441855FECF7B3741D70, when the divided information S1 is calculated by the above equation (10), S1 = 54303030303030330

  When the calculated division information S1 is divided into a 9-byte ticket ID and a 5-byte transfer amount according to a predetermined configuration and is reverse-encoded, the ticket ID to be transferred as shown in FIG. 3 is “T0000000l”. “2500” is obtained as the transfer amount. Since the division information S0 cannot be calculated, the user ID and password of the transfer source user in the right transfer information shown in FIG. 3 cannot be restored. FIG. 5 shows a calculation example of the transfer information restoration process in the present embodiment.

  The transfer information confirmation unit 23 displays the restored ticket ID and the transfer amount display, etc., to prompt the transfer destination user to confirm the ticket ID and transfer amount as a result of the negotiation with the transfer source user. . If the transfer destination user confirms the ticket ID and transfer amount and does not agree to transfer, the transfer processing may be interrupted.

  The present embodiment does not particularly define the contents of display in the transfer information confirmation unit 23. The transfer destination user only needs to be able to confirm the minimum information regarding the ticket to be transferred. As other information, detailed information on the ticket to be transferred is acquired and displayed based on the ticket ID, or the distributed information I , II and ticket information sent together with the ticket image may be displayed.

  Next, the right transfer processing device 20 receives input of authentication information such as a user ID and a password by the transfer destination user in the authentication information input means 24. In this embodiment, it is assumed that “hirota” is input as the user ID of the transfer destination user and “kh3hjs9” is input as the password.

  Note that the present invention does not particularly define the method and format for inputting the user ID and password. Each time an input from a keyboard or the like may be accepted, or a user ID and password recorded in advance on the rights assignment processing device 20 or on an external recording medium such as an IC card may be input as a file. good. Further, the present invention does not define the timing for inputting authentication information. You may make it receive the input of the authentication information of a transferee user at the time of starting of this apparatus, initialization, and arbitrary timings.

  The shared information output means 25 sends the distributed information I and II and the authentication information such as the user ID and password of the transfer destination user to the rights transfer management device 30 possessed by a rights manager such as a ticket service provider via the communication line 40. To update the ticket information.

  The present embodiment does not particularly define the output and communication method and contents in the distributed information output means 25. It suffices that at least the shared information I and II and information as a means for authenticating the transferee user are submitted to the right transfer management device 30, and other communication means such as mail is used instead of direct communication through the network line. It may be used or submitted by physical means using an external recording medium such as IC strength. Also, when submitting via a network line, it is desirable to increase the security of the submission via the network line by, for example, encrypting and submitting using the public key of the ticket service provider.

<Operation Example of Rights Assignment Management Device 30>
In the following, in the rights assignment management device 30 possessed by a rights manager such as a ticket service company, the distributed information III, the authentication information of the origination user, and the destination user possesses from the rights assignment processing device 10 possessed by the source user. A process for restoring rights assignment information and a process for assigning an electronic right upon receipt of the distributed information I and II and authentication information of the transferee user from the rights assignment processor 20 will be described.

  In the right assignment management device 30, the right information management means 31 manages the input, storage, authentication, change, and output of the right information of the electronic rights managed by the device. Rights information of electronic rights managed by the device is stored in the rights information storage unit 37. FIG. 6 shows a storage example of the right information in the right information storage unit 37 in the present embodiment.

  In this embodiment, the configuration of the right information managed and stored in the right information management means 31 and the right information storage unit 37 is not particularly specified. At a minimum, it is only necessary to manage and store a combination of identification information for uniquely identifying each electronic right and authentication information for uniquely identifying the owner of the electronic right. The date and time and other information may be included.

  In the right information management apparatus 30, the authentication information management means 32 manages the input, storage, authentication, change, and output of the authentication information of the user of the electronic right managed by the apparatus. The authentication information storage unit 38 stores the authentication information of the user of the electronic right managed by the apparatus. FIG. 7 shows a storage example of authentication information in the authentication information storage unit 38 in the present embodiment.

  In this embodiment, the configuration of authentication information managed and stored in the authentication information management means 32 and the authentication information storage unit 38 is not particularly specified. At a minimum, authentication information for uniquely authenticating each individual user who uses electronic rights only needs to be managed and stored, and other personal information such as the user's name, gender, address, telephone number, and email address. And other information such as a usage history of electronic rights, an available balance in which electronic rights can be purchased or sold, and the like.

  The right assignment management device 30 first uses the shared information input means 33 to transmit the shared information III transmitted from the right assignment processing device 10 possessed by the transfer source user via the communication line 40 or the like, and the user of the transfer source user, for example. Accepts input of authentication information consisting of ID and password. In this embodiment, as shown in FIGS. 3 and 4, it is assumed that “941661CIC81D69CCE475BE0D3553” is input as the shared information III, “endo” is the user ID, and “gu8sh3” is the password. The authentication information management means 32 stores the distributed information III in the internal memory, the authentication information storage unit 38 or the like in association with the user ID of the transfer source user when the transfer source user is authenticated. When a ticket ID is received as an input, it may be stored in the right information storage unit 37 in association with the ticket ID of the electronic right. If authentication of the transfer source user is not established, processing such as returning an error message to the right transfer processing device 10 can be performed.

  Next, the rights transfer management device 30 uses the shared information I and II transmitted from the rights transfer processing device 20 of the transfer destination user via the communication line 40 or the like in the shared information input means 33 and the transfer destination use, for example. The authentication information consisting of the user's user ID and password is received and stored in an internal memory or the like. In this embodiment, it is assumed that “71FBBE9613E124FF8A974F09BCC5”, “1A5CIEF67441855FECF7B3741D70”, “hirota” as the user ID, and “kh3hjs9” as the password are input as the distributed information I and II. The authentication information management means 32 may store the shared information I and II in the internal memory or the authentication information storage unit 38 when the transfer source user authentication is established.

  Note that this embodiment does not particularly define the input target, method, and format of the shared information input means 33. It is only necessary to input shared information III, transfer source user authentication information, shared information I, II, and transfer destination user authentication information, and ticket IDs and ticket images of tickets to be transferred. It is also possible to accept input of ticket information such as. In addition to accepting input of shared information I, II, III and authentication information directly transmitted from the rights assignment processing device 10 and the rights assignment processing device 20 as input means, the user's keyboard input and file name input In addition to input by drag and drop on the screen, input by reading from an external recording medium such as an IC card may be accepted.

  The transfer information restoring means 34 completely restores the division information S0, S1 of ticket information, that is, the right transfer information, according to a predetermined calculation process from the input shared information I, II and shared information III, and the ticket ID, transfer amount and transfer Obtain the user ID and password of the former user.

  First, the transfer information restoring means 34 restores the division information S1 in the right transfer information from the input shared information I and II according to a predetermined calculation process. The distribution information I and II in the present embodiment is f (2) obtained by substituting x = 2 into the dispersion function f (x) of Expression (7) and f (4) obtained by substituting x = 4. Similar to equation (9) above, the following simultaneous equations can be established.

したがって、分散情報ＩとIIから分割情報Ｓ１を求める式は、先の式（１０）と同じく以下のようになる。ここでも、分割情報Ｓ０と乱数文字列Ｒはこの方程式からは得る事ができない。

Therefore, the equation for obtaining the division information S1 from the shared information I and II is as follows, similar to the previous equation (10). Again, the division information S0 and the random character string R cannot be obtained from this equation.

本実施例においては、分散情報Ｉ，IIがそれぞれ、分散情報Ｉ＝７１ＦＢＢＥ９６１３Ｅ１２４ＦＦ８Ａ９７４Ｆ０９ＢＣＣ５、分散情報II＝１Ａ５ＣＩＥＦ６７４４１８５５ＦＥＣＦ７Ｂ３７４１Ｄ７０である事から、上記の式（１２）によりＳ１を算出すると、Ｓ１＝５４３０３０３０３０３０３０３０３１３０３２３５３０３０を得る。算出したＳ１を所定の構成に従って９ｂｙｔｅのチケットＩＤと５ｂｙｔｅの譲渡金額に分割し、逆符号化を行うと、図３に示した、譲渡の対象となるチケットＩＤとして「Ｔ０００００００ｌ」と譲渡金額として「２５００」が得られる。

In the present embodiment, since the shared information I and II are respectively the shared information I = 71FBBE9613E124FF8A974F09BCC5 and the shared information II = 1A5CIEF67441855FECF7B3741D70, when S1 is calculated by the above equation (12), S1 = 543030303030303130303530 When the calculated S1 is divided into a 9-byte ticket ID and a 5-byte transfer amount according to a predetermined configuration and subjected to reverse encoding, “T0000000l” as the transfer target ticket ID shown in FIG. 2500 "is obtained.

  The transfer information restoring means 34 acquires the user ID of the transfer source user as information on the owner of the electronic right stored in the right information storage unit 37 based on the restored ticket ID, and then acquires the acquired user Based on the ID, the distributed information III stored in the internal memory or the authentication information storage unit 38 is acquired. If identification information such as a ticket ID of the electronic right is input in the shared information input means 33, the distributed information III stored in the right information storage unit 37 in association with the ticket ID is acquired. You can also do it.

  The transfer information restoring unit 34 completely restores the right transfer information based on the input shared information I and II and the acquired shared information III. The distribution information I, II, and III in the present embodiment are f (2) obtained by substituting x = 2 into the dispersion function f (x) in the equation (7), f (4) obtained by substituting x = 4, and x = Since f (6) is substituted with 6, the following simultaneous equations can be established.

この連立方程式を行列式で表わすと次のようになる。

This simultaneous equation is expressed as a determinant as follows.

上記行列式を掃き出し法などにより解く事で、分割情報Ｓ０、Ｓ１と乱数文字列Ｒの計算式および値を得る事ができる。本実施例においては、分散情報Ｉ，II，IIIがそれぞれ、Ｉ＝７１ＦＢＢＥ９６１３Ｅ１２４ＦＦ８Ａ９７４Ｆ０９ＢＣＣ５、II＝１Ａ５ＣＩＥＦ６７４４１８５５ＦＥＣＦ７Ｂ３７４１Ｄ７０、III＝９４１６６１ＣＩＣ８１Ｄ６９ＣＣＥ４７５ＢＥ０Ｄ３５５３である事から、上記の行列式を解いてＳ０、Ｓ１、Ｒを算出すると、Ｓｌ＝６５６Ｅ６４６Ｆ２０２０６７７５３８７３６８６５３３００、Ｓ２＝５４３０３０３０３０３０３０３０３１３０３２３５３０３０、Ｒ＝１Ａ２Ｂ３Ｃ４Ｄ５Ｅ６Ｆ７０８１９２Ａ３Ｂ４Ｃ５Ｄ６Ｅ７が得られる。図８に権利分散情報復元処理の計算例を示す。図８の分割情報Ｓ０，Ｓ１、乱数文字列Ｒは、図４の同Ｓ０，Ｓ１，Ｒに対応する。

By solving the above determinant by the sweep-out method or the like, the calculation formulas and values of the division information S0 and S1 and the random character string R can be obtained. In this embodiment, since the shared information I, II, and III are I = 71FBBE9613E124FF8A974F09BCC5, II = 1A5CIEF67441855FECF7B3741D70, III = 941661 CIC81D69CCE475BE0D3553 656E646F202067753387368653300, S2 = 543030303030330313032353030, R = 1A2B3C4D5E6F708192A3B4C5D6E7 is obtained. FIG. 8 shows a calculation example of right distribution information restoration processing. The division information S0, S1 and the random character string R in FIG. 8 correspond to S0, S1, R in FIG.

  When the calculated S0 is divided into a 6-byte user ID and an 8-byte password according to a predetermined configuration and subjected to inverse encoding, “endo” is obtained as the user ID of the transfer source user, and “gu8sh3” is obtained as the password. Similarly, when S1 is divided into a 9-byte ticket ID and a 5-byte transfer amount according to a predetermined configuration, and reverse encoding is performed, “T0000000l” as the ticket ID to be transferred and “2500” as the transfer amount are obtained. .

  The right assignment determination unit 35 determines whether or not the right assignment of the electronic right can be executed according to the right assignment information of the electronic right indicated by the restored transfer source user. First, the right assignment determination unit 35 acquires a user ID and a password, which are authentication information of the owner having the right of the electronic ticket stored in the right information storage unit 37, based on the restored ticket ID. When the password is not stored in the right storage unit 37, the password stored in the authentication information storage unit 38 is acquired based on the acquired user ID. Next, in the restored right assignment information, whether or not the user ID and password, which are the authentication information of the transfer source user, match the user ID and password acquired from the right information storage unit 37 or the authentication information storage unit 38. To verify. These values match when the electronic ticket to be transferred is correctly assigned to the transfer source user and the shared information I, II, III is correctly generated by the transfer source user. If they do not match, the distributed information I and II are not distributed information of correct right transfer information regarding the electronic ticket, the right regarding the electronic ticket has already been transferred to another user, or the registration is canceled from the registration of the ticket service provider. For this reason, it is preferable to perform processing such as returning an error message such as an unprocessable notification to the right transfer processing device 20.

  Next, the right assignment determination unit 35 determines whether or not the right assignment can be executed according to the assignment conditions such as the transfer amount in the restored right assignment information. In the present embodiment, since the transfer condition is only the transfer amount, the right transfer determination means 35 charges the transfer destination user for the transfer amount and gives a refund to the transfer source user. Such a billing process can be realized, for example, by subtracting the transfer amount from the available balance of the transfer destination user recorded in the authentication information storage unit 38 and adding the transfer amount to the available balance of the transfer source user. . If the transferable user's available balance does not reach the transfer amount, the transfer condition cannot be achieved, and therefore an error message such as a transfer non-establishment notice is returned to the right transfer processing device 10 and the right transfer processing device 20. It is better to perform processing.

  Note that this embodiment does not particularly define the determination and substitution method regarding the achievement of the transfer condition in the right transfer determination means 35. In the present embodiment, the charging process is performed on the available balance in the authentication information storage unit 38 based on the transfer amount, but the charging process and determination may be performed depending on an external device or the like. In addition to the transfer amount as a transfer condition, a determination is made based on personal information such as the age, gender, and address of the transfer destination user, and if the transfer of rights information includes transfer conditions specifying the transfer destination user, the transfer destination The determination can also be made based on the user ID of the user. Further, when the transfer amount specified as the transfer condition is unfair as the price of the original electronic right, it is desirable to determine whether to approve the right transfer or limit the transfer amount.

  In the right assignment determination means 35, the identification information in the right assignment information restored from the shared information I, II, III, the authentication information, the identification information stored in the right information storage unit 37 and the authentication information storage unit 38, and the authentication information match. When the transfer condition in the transfer right information is satisfied, the transfer right execution unit 36 transfers the ticket user ID of the ticket ID recorded in the transfer information storage unit 37 from “endo” of the transfer source user. The information is rewritten to “hirota” of the previous user, and the information on the right owner is updated. Note that it is preferable to perform processing such as returning a message such as a transfer establishment notice to the right assignment processing device 10 and the right assignment processing device 20. Further, by recording the transfer target ticket ID, the user IDs of the transfer source user and the transfer destination user, the transfer amount, the date and time of transfer, and the like as transfer information in the transfer information storage unit 39, the history of right transfer You may leave it.

<Disclosure of distributed information>
In the present embodiment, the shared information I and II are output from the right transfer device 10 possessed by the transfer source user to the right transfer device 20 possessed by the transfer destination user. , II can be output to any of a plurality of rights assignment processing devices without specifying a transfer destination user, or can be disclosed to a public device on the Internet such as a bulletin board or Web. In that case, transfer conditions such as transfer amount can be arbitrarily set by the transfer source user, and a plurality of users who have received any rights transfer processing device received or obtained shared information I, II has been acquired Among the plurality of users, the user who agrees on the transfer amount and first submits the distributed information I and II to the ticket service provider's right transfer management device 30 and issues a ticket information update request is the transfer destination user. Can be.

  The processing functions of some or all of the devices 10, 20, and 30 in the electronic rights transfer management system shown in FIG. 2 are configured by a computer program, and the program is executed using the computer to implement the present invention. It goes without saying that you can do it. In addition, a program for realizing the processing function by a computer can be recorded and stored in a recording medium readable by the computer, for example, FD, MO, ROM, memory card, CD, DVD, removable disk, etc. Can be provided, and the program can be distributed through a network such as the Internet.

It is explanatory drawing of the processing sequence of the right assignment in one Example of this invention. It is a functional block diagram of the electronic rights transfer management system in one Example of this invention. It is a figure which shows the structural example of the right assignment information in a right assignment processing apparatus. It is a figure which shows the example of a calculation of the transfer information distribution means in a rights transfer processing apparatus. It is a figure which shows the example of a calculation of the transfer information restoration means in a rights transfer processing apparatus. It is a figure which shows the example of a storage of the rights information in a rights assignment management apparatus. It is a figure which shows the example of a memory | storage of the authentication information in a right transfer management apparatus. It is a figure which shows the example of a calculation of the transfer information restoration means in a rights transfer management apparatus.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 Rights transfer processing apparatus 11 Assignment information input means 12 Assignment information distribution means 13 Distribution information output means 20 Rights assignment processing apparatus 21 Distribution information input means 22 Assignment information restoration means 23 Assignment information confirmation means 24 Authentication information input means 25 Distribution information output means 30 Rights Assignment Management Device 31 Rights Information Management Unit 32 Authentication Information Management Unit 33 Distributed Information Input Unit 34 Transfer Information Restoration Unit 35 Rights Assignment Determination Unit 36 Rights Assignment Execution Unit 37 Rights Information Storage Unit 38 Authentication Information Storage Unit 39 Assignment Information Storage Unit 40 network

Claims (18)

The rights transfer processing device possessed by the transfer-source user who transfers the electronic rights, the rights transfer processing device possessed by the transfer-destination user who receives the electronic rights, and the rights information of the electronic rights and information relating to the owner are managed in association with each other. An electronic rights assignment processing method in an electronic rights assignment management system comprising a rights assignment management device,
The right transfer processing device creates right transfer information including identification information indicating an electronic right to be transferred and authentication information indicating a transfer source user who owns and transfers the electronic right, and a combination of specific distributed information The right transfer information is divided into a plurality of pieces of distributed information so that identification information indicating the electronic right to be transferred can be partially restored, excluding at least authentication information indicating the transfer source user. Distributed information that allows the right assignment information to be partially restored to the right assignment processing device and the remaining distributed information to the right assignment management device,
The rights assignment processing device restores identification information indicating an electronic right to be assigned in the rights assignment information from the distributed information sent from the rights assignment processing device, confirms the contents, and confirms the contents. Send the information to the rights transfer management device;
The right assignment management device completely restores the right assignment information based on the distributed information sent from the right assignment processing device and the distributed information sent from the right assignment processing device, and the restored right When the owner information of the electronic right to be transferred indicated by the identification information included in the transfer information matches the authentication information indicating the transfer source user included in the restored right transfer information, the electronic right By transferring the owner information from the transfer source user authentication information to the transfer destination user authentication information, the transfer of the right of the electronic right between the transfer source user and the transfer destination user is executed.
An electronic rights transfer processing method characterized by things. In the electronic rights transfer processing method according to claim 1,
The right assignment processing device includes assignment information indicating conditions for establishing transfer, in addition to identification information indicating electronic rights to be assigned and authentication information indicating a transfer source user who owns and assigns the electronic rights. Identification information indicating the electronic rights to be transferred and conditions for the transfer to be established by creating the right transfer information and excluding at least authentication information indicating the transfer source user from the combination of specific shared information The rights assignment information is distributedly encoded into a plurality of pieces of shared information so that the assignment conditions indicating the rights can be partially restored, and the shared information that allows the rights assignment information to be partially restored is provided to the rights assignment processing device. , Send the remaining shared information to the right transfer management device,
The rights assignment processing device restores, from the distributed information sent from the rights assignment processing device, the identification information indicating the electronic rights to be transferred and the transfer conditions indicating the conditions for the transfer in the rights transfer information. Confirm the content, and send the shared information to the right transfer management device,
The rights assignment management device completely restores the rights assignment information based on the shared information sent from the rights assignment processing device and the shared information sent from the rights assignment processing device, and the restored The owner information of the electronic right to be transferred indicated by the identification information included in the right transfer information matches the authentication information indicating the transfer source user included in the recovered right transfer information, and the recovered right When the transfer conditions described in the transfer information can be confirmed or executed, the owner information of the electronic right is rewritten from the transfer source user authentication information to the transfer destination user authentication information. Transfer of the electronic rights between the user and the transferee user,
An electronic rights transfer processing method characterized by things. The rights transfer processing device possessed by the transfer-source user who transfers the electronic rights, the rights transfer processing device possessed by the transfer-destination user who receives the electronic rights, and the rights information of the electronic rights and information relating to the owner are managed in association with each other. An electronic rights assignment processing method in an electronic rights assignment management system comprising a rights assignment management device,
The right transfer processing device creates right transfer information including identification information indicating an electronic right to be transferred and authentication information indicating a transfer source user who owns and transfers the electronic right, and a combination of specific distributed information The identification information indicating the electronic right to be transferred excluding at least the authentication information indicating the transfer source user from among the right transfer information can be partially restored, and the distributed information other than the combination is The rights assignment information is distributedly encoded into a plurality of pieces of shared information so that the rights assignment information becomes predetermined shared information with the rights assignment management device, and the rights information is partially restored to the rights information. Sent to the transfer processing device,
The rights assignment processing device restores identification information indicating the electronic rights to be assigned in the rights assignment information from the distributed information sent from the rights assignment processing device, confirms the contents, Send the information to the rights transfer management device;
The rights assignment management device completely restores the rights assignment information based on shared information sent from the rights assignment processing device and shared information predetermined between the rights assignment processing device, When the owner information of the electronic right to be transferred indicated by the identification information included in the restored right assignment information matches the authentication information indicating the transfer source user contained in the restored right assignment information, By transferring the owner information of the electronic right from the authentication information of the transfer source user to the authentication information of the transfer destination user, the right transfer of the electronic right is executed between the transfer source user and the transfer destination user. ,
Electronic rights transfer management method characterized by things. In the electronic rights transfer processing method according to claim 3,
The right assignment processing device includes assignment information indicating conditions for establishing transfer, in addition to identification information indicating electronic rights to be assigned and authentication information indicating a transfer source user who owns and assigns the electronic rights. Identification information indicating the electronic rights to be transferred and conditions for the transfer to be established by creating the right transfer information and excluding at least authentication information indicating the transfer source user from the combination of specific shared information The right transfer information is converted into a plurality of shared information so that the transfer conditions can be partially restored, and the shared information other than the combination becomes the predetermined shared information with the right transfer management device. Distributed information that is distributed to enable partial restoration of the rights assignment information is sent to the rights assignment processing device,
The rights assignment processing device restores, from the distributed information sent from the rights assignment processing device, the identification information indicating the electronic rights to be transferred and the transfer conditions indicating the conditions for the transfer in the rights transfer information. Confirm the content, and send the shared information to the right transfer management device,
The rights assignment management device completely restores the rights assignment information based on shared information sent from the rights assignment processing device and shared information predetermined between the rights assignment processing device, The owner information of the electronic right to be transferred indicated by the identification information included in the restored right assignment information matches the authentication information indicating the transfer source user contained in the restored right assignment information, and the restoration If the establishment of the transfer conditions described in the right transfer information is confirmed or executed, the transfer is performed by rewriting the owner information of the electronic right from the transfer source user authentication information to the transfer destination user authentication information. Execute the right transfer of the electronic right between the former user and the transferee user;
Electronic rights transfer management method characterized by things. The rights transfer processing device possessed by the transfer-source user who transfers the electronic rights, the rights transfer processing device possessed by the transfer-destination user who receives the electronic rights, and the rights information of the electronic rights and information relating to the owner are managed in association with each other. An electronic rights assignment management system comprising a rights assignment management device,
The right assignment processing device includes means for creating right assignment information including identification information indicating an electronic right to be assigned, authentication information indicating a transfer source user who owns and assigns the electronic right, and specific distributed information A plurality of rights assignment information, so that identification information indicating an electronic right to be assigned is excluded from at least the authentication information indicating the assignment source user in the right assignment information. Means for generating a shared information group that is distributedly encoded into the shared information, and the shared information that allows the right transfer information to be partially restored in the shared information group, and the remaining shared information Means for sending to the rights assignment management device,
The rights assignment processing device is configured to restore identification information indicating an electronic right to be assigned in the rights assignment information from the distributed information sent from the rights assignment processing device, and confirm the restored contents. And means for sending the shared information to the rights assignment management device,
The rights assignment management device is configured to completely restore the rights assignment information based on the shared information sent from the rights assignment processing device and the shared information sent from the rights assignment processing device, and the restoration It is determined whether or not the owner information of the electronic right to be transferred indicated by the identification information included in the transferred right transfer information matches the authentication information indicating the transfer source user included in the restored right transfer information If the owner information of the electronic right is rewritten from the authentication information of the transfer source user to the authentication information of the transfer destination user when it is determined that it matches, the transfer source user and the transfer destination user Means for transferring the rights of the electronic rights between
Electronic rights transfer system characterized by things. In the electronic rights transfer management system according to claim 5,
The right assignment processing device includes assignment information indicating conditions for establishing transfer, in addition to identification information indicating electronic rights to be assigned and authentication information indicating a transfer source user who owns and assigns the electronic rights. Identification information indicating the electronic rights to be transferred and conditions for the transfer to be established by creating the right transfer information and excluding at least authentication information indicating the transfer source user from the combination of specific shared information Generating a shared information group in which the rights assignment information is distributedly encoded into a plurality of pieces of shared information so that the assignment conditions indicating Send the remaining shared information to the rights assignment processing device to the rights assignment management device,
The rights assignment processing device restores, from the distributed information sent from the rights assignment processing device, the identification information indicating the electronic rights to be transferred and the transfer conditions indicating the conditions for the transfer in the rights transfer information. And confirming the contents, and sending the shared information to the right transfer management device,
The right assignment management device completely restores the right assignment information based on the distributed information sent from the right assignment processing device and the distributed information sent from the right assignment processing device, and the restored right The owner information of the electronic right to be transferred indicated by the identification information included in the transfer information matches the authentication information indicating the transfer source user included in the recovered right transfer information, and the recovered right transfer When the transfer condition described in the information is confirmed or executed, the transfer source user is rewritten from the transfer source user authentication information to the transfer destination user authentication information. Execute the transfer of the electronic rights between the user and the transferee user,
Electronic rights transfer management system characterized by things. The rights transfer processing device possessed by the transfer-source user who transfers the electronic rights, the rights transfer processing device possessed by the transfer-destination user who receives the electronic rights, and the rights information of the electronic rights and information relating to the owner are managed in association with each other. An electronic rights assignment management system comprising a rights assignment management device,
The right assignment processing device includes means for creating right assignment information including identification information indicating an electronic right to be assigned, authentication information indicating a transfer source user who owns and assigns the electronic right, and specific distributed information The identification information indicating the electronic right to be transferred, excluding at least the authentication information indicating the transfer source user from the combination of the right transfer information, can be partially restored, and the distribution other than the combination Means for generating a shared information group in which the rights transfer information is distributedly encoded into a plurality of shared information so that the information becomes predetermined shared information with the rights transfer management device; Means for sending distributed information to the rights assignment processing device that enables partial restoration of the rights assignment information,
The rights assignment processing device is configured to restore identification information indicating an electronic right to be assigned in the rights assignment information from the distributed information sent from the rights assignment processing device, and confirm the restored contents. And means for sending the shared information to the rights assignment management device,
The rights assignment management device is configured to completely restore the rights assignment information based on shared information sent from the rights assignment processing device and shared information determined in advance between the rights assignment processing device. Whether the owner information of the electronic right to be transferred indicated by the identification information included in the restored right assignment information matches the authentication information indicating the transfer source user contained in the restored right assignment information. If it is determined that it matches the means for determining whether or not the owner of the electronic right is rewritten from the authentication information of the transfer source user to the authentication information of the transfer destination user, the transfer source user and the transfer destination Means for transferring the electronic right to and from the user,
Electronic rights transfer management system characterized by things. In the electronic rights transfer management system according to claim 7,
The right assignment processing device includes assignment information indicating conditions for establishing transfer, in addition to identification information indicating electronic rights to be assigned and authentication information indicating a transfer source user who owns and assigns the electronic rights. Identification information indicating the electronic rights to be transferred and conditions for the transfer to be established by creating the right transfer information and excluding at least authentication information indicating the transfer source user from the combination of specific shared information The rights assignment information can be restored in part so that the shared information other than the combination becomes predetermined shared information with the rights assignment management device. Generating a distributed information group that is distributed and encoded, and sending the shared information that can partially restore the right transfer information to the right transfer processing device.
The rights assignment processing device restores, from the distributed information sent from the rights assignment processing device, the identification information indicating the electronic rights to be transferred and the transfer conditions indicating the conditions for the transfer in the rights transfer information. Confirm the content, and send the shared information to the right transfer management device,
The rights assignment management device completely restores the rights assignment information based on shared information sent from the rights assignment processing device and shared information predetermined between the rights assignment processing device, The owner information of the electronic right to be transferred indicated by the identification information included in the restored right assignment information matches the authentication information indicating the transfer source user contained in the restored right assignment information, and the restoration If the establishment of the transfer conditions described in the right transfer information is confirmed or executed, the transfer is performed by rewriting the owner information of the electronic right from the transfer source user authentication information to the transfer destination user authentication information. Execute the right transfer of the electronic right between the former user and the transferee user;
Electronic rights transfer management system characterized by things. A right transfer processing device used by a transfer source user to transfer electronic rights to a transfer destination user,
Transfer information input means for receiving input of right transfer information including identification information indicating an electronic right to be transferred, and authentication information indicating a transfer source user who owns and transfers the electronic right;
Transfer information distribution means for generating distributed information by distributedly encoding the transferred right information into a plurality of distributed information so that a specific part of the transferred right information can be restored from a combination of specific shared information;
Among the generated shared information group, distributed information that can partially restore the right transfer information is transferred to the right transfer processing device of the transfer destination user who receives the electronic right, and the remaining shared information is transferred to the right information of the electronic right. Distributed information output means for sending to a rights transfer management device that manages information relating to the owner in association with each other;
A right transfer processing device characterized by comprising: The right assignment processing device according to claim 9,
The transfer information input means includes, in addition to identification information indicating an electronic right to be transferred, authentication information indicating a transfer source user who owns and transfers the electronic right, and transfer conditions for determining whether or not transfer processing can be executed. A right transfer processing device characterized by receiving input of right transfer information. The right assignment processing apparatus according to claim 9 or 10,
The transfer information distribution unit generates the shared information so that at least one of the generated distributed information has a predetermined value with the transfer control device. A rights assignment processing device used by a transferee user to transfer electronic rights from a transferee user,
A shared information input unit that receives input of shared information output by the right transfer processing device according to any one of claims 9 to 11,
Transfer information restoring means for restoring rights transfer information that can be partially restored from the input shared information group;
Transfer information confirmation means for presenting the restored right transfer information to a transferee user;
Authentication information input means for receiving input of authentication information indicating a transferee user who receives the transfer of the electronic right;
A distributed information output means for sending the shared information and the authentication information of the transferee user to a rights transfer management device that manages the rights information of the electronic rights and the information about the owner in association with each other;
A rights assignment processing device characterized by comprising: The right to manage the rights information of the electronic rights and the information related to the owner in association with each other, accept the rights assignment information for assigning the electronic rights from the assigning user to the assignee, and execute the transfer of the electronic rights A transfer management device,
Right information storage means for storing the identification information indicating the electronic right and the authentication information of the user who owns the electronic right in association with each other;
The shared information sent by the rights assignment processing device according to any one of claims 9 to 11 and the shared information sent by the rights assignment processing device according to claim 12 and the authentication information of the transferee user are received. Distributed information input means;
Transfer information restoring means for restoring all right transfer information from the inputted shared information group;
It is verified whether or not the identification information indicating the electronic right to be transferred included in the restored right assignment information exists in the right information storage means. If there is, the electronic information stored in association with the identification information is stored. A right assignment determination means for verifying whether the authentication information of the right user and the authentication information indicating the transfer source user included in the restored right assignment information match;
When all the verifications in the right assignment determination unit are established, the authentication information of the user of the electronic right stored in the right information storage unit is used as the authentication information of the transfer destination user input from the right transfer processing device. A right assignment execution means for rewriting,
A right transfer management device characterized by comprising: The right assignment management device according to claim 13,
The rights assignment management device characterized in that the rights assignment determination means further verifies or substitutes the fulfillment of assignment conditions or the like indicating conditions for fulfillment of assignment included in the restored right assignment information. The rights assignment management device according to claim 13 or 14,
The right transfer management device, wherein the transfer information restoring means restores all right transfer information from shared information set in advance between the input shared information group and the right transfer processing device.   The program for making a computer perform the processing function in the right transfer processing apparatus of any one of Claims 9 thru | or 11.   A program for causing a computer to execute a processing function in the right assignment processing device according to claim 12.   The program for making a computer perform the processing function in the right transfer management apparatus of any one of Claim 13 thru | or 15.

Images