JP2006050017A - Content sales system and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a content sales system and program whereby media unique information can be transmitted to a distribution server, contents can be purchased even when a medium is not in a download terminal, input and transmission of accounting information by the download terminal are not required, and the distribution server manages no personal information. <P>SOLUTION: Since the system is configured such that a mobile apparatus 10 transmits the accounting information to the distribution server 30 to purchase acquisition rights of an encrypted content key, the contents can be purchased even when a DVD medium 40 does not exist in a DVD recorder 20, entry and transmission of the accounting information are not required by the DVD recorder 20. Since the distribution server 30 has only to manage purchase IDs and content IDs, the distribution server needs not to manage personal information. Since the DVD recorder 20 contains the DVD medium 40 and transmits a download request of the contents including media unique information after the acquisition of the purchase ID by the mobile apparatus 10, the DVD recorder 20 can transmit the media unique information to the distribution server 30. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a content sales system and program in which a download terminal acquires content via a network, and more particularly to a content sales system and program including a mobile carrier, a download terminal, and a distribution server.

  In recent years, with the development of communication technologies such as mobile phones and the Internet, content sales systems that sell content to download terminals via a network have been used. Hereinafter, in this specification, not the form which sells DVD package media, such as a movie, but the sales system which downloads to recordable DVD media etc. using a DVD recorder etc. is made into object. The sales method for downloading uses the DVD package media that has already been widely used, and therefore has advantages such as easy access to existing infrastructure and the ability to use content protection technology for DVD media from the perspective of content providers. .

  When this type of content sales system is further improved, according to the inventor's consideration, for example, “content copyright protection technology”, “content sales”, “remote control of DVD / HDD recorder”, “cell phone, etc.” It is necessary to consider some related technologies such as “services using”. Hereinafter, it demonstrates in order.

(Content copyright protection technology)
In general, there are several standards and technologies for copyright protection and sales (see Non-Patent Document 1, for example). In particular, in content network sales, a plurality of content protection technologies have been proposed. Their commonality is to sell content keys for encrypting content and decrypting content. Here, the content key is sold in a form that can be used only by a specific device or medium on the purchaser side in order to prevent unauthorized copying. For this reason, the content key is sold after being encrypted by a distribution server or the like on the seller side based on the unique identification information of the purchaser's device or media.

(Content sales)
In the content protection technology as described above, it is necessary to transmit the unique information of the device or the media to the distribution server that sells the content key when the content is purchased, and to have the content key encrypted on the distribution server.

(Remote control of DVD / HDD recorder)
A DVD / HDD recorder or the like has a function of making a reservation for recording a program by accessing the DVD / HDD recorder from outside the house using a mobile phone or the like. For example, Patent Document 1 discloses a function in which a mobile phone transmits a program information mail, a service server records a recording reservation information log, transmits recording reservation operation information, and the VTR device makes a program recording reservation. ing. Patent Documents 2 and 3 disclose a function of inputting a barcode or G code to a communication terminal and controlling a recording / playback apparatus operating device.

  In this way, by applying the function of making a program recording reservation from a mobile phone or the like, it is possible to control the DVD recorder and download the content to the HDD in advance.

  However, in order to acquire the content key, unlike the recording reservation function, it is necessary to transmit the media-specific information to the sales server, but the DVD media is not always inserted into the DVD recorder. When the DVD medium is not inserted, the media-specific information cannot be transmitted, so that it is impossible to make a reservation sale by a mobile phone from outside the house.

(Service using mobile phone etc.)
A service using a coupon with a mobile phone or the like is known. For example, Patent Document 4 discloses a technique in which a store transmits coupon data to a mobile terminal, a user brings the mobile terminal to the store, wirelessly transmits coupon data to a POS register or a coupon issuing machine, and receives a coupon service. Is disclosed. Patent Document 5 discloses a technique including a ticket purchasing unit, a ticket center that transmits an identification code for identifying a ticket to a portable terminal, and a portable terminal that displays the identification code on a display unit. Patent Document 6 discloses a technique for protecting ticket information using public key cryptography.

However, content sales using DVD media require information specific to the DVD media, so the above-described coupon related technology cannot be used as it is.
UDAC-MB (Universal Distribution with Access Control-Media Base) (http://www.keitaide-music.org) JP 2003-179907 A JP 2003-115139 A JP 2003-125469 A JP 2002-207907 A JP 2003-242287 A JP 2003-66836 A

  As described above, in the conventional content sales system, the user inserts the DVD medium into the DVD recorder, accesses the distribution server that sells the content, and purchases the content by operating on the operation screen of the DVD recorder. This is a prerequisite.

  According to the study of the present inventor, if only the content right is purchased from a mobile phone or the like, and the DVD media is inserted into the DVD recorder later to download the content and acquire the content key, the following problems occur: It is considered that (1) to (4) occur.

  (1) When purchasing content, it is necessary to transmit media-specific information to the distribution server because of a copyright protection mechanism, and information on DVD media cannot be acquired on a mobile phone. The transmission of the media specific information to the distribution server is necessary because the reproduction of the content is permitted only to a specific DVD medium. In the existing copyright protection mechanism, the content is encrypted depending on a specific DVD medium, so that it cannot be reproduced even if it is copied to another DVD medium.

  (2) In order to acquire information on the DVD medium, the user needs to insert the DVD medium into the DVD recorder. Even if the DVD recorder is remotely controlled from a mobile phone and content is to be purchased on the DVD recorder, the content key cannot always be acquired because the DVD medium is not always inserted into the DVD recorder.

  (3) Temporarily, only a reservation of content is made on a mobile phone, and a method of officially purchasing content on a DVD recorder later, and from a user's point of view, what is a method for purchasing content on a normal DVD recorder? No change and no merit. In particular, it is not preferable to input / send settlement information on a DVD recorder, considering that a DVD recorder generally has a poor GUI and is used by a plurality of people such as family members.

  (4) If only a content reservation is made on a mobile phone and a content key is later obtained on a DVD recorder, an individual who has purchased which content as viewed from the business owner who sells the content. Information is managed on the distribution server, which is not preferable.

  The present invention has been made in consideration of the above circumstances, and can transmit media-specific information to the distribution server, can purchase content even if the media is not held in the download terminal, and input and transmit settlement information on the download terminal. It is an object of the present invention to provide a content sales system and program that do not need to manage personal information on a distribution server.

  In the first invention, a distribution server capable of distributing encrypted content transmits a purchase ID to a mobile carrier, and a download terminal to which the purchase ID is input is based on the purchase ID and media ID, the distribution server A content sales system that downloads an encrypted content key obtained by encrypting a content key for decrypting the encrypted content, wherein the distribution server receives payment information from the mobile carrier holding device. When the right to acquire the encrypted content key is sold, a content selling means for issuing a purchase ID indicating completion of the sale and transmitting the purchase ID to the mobile carrier, and the purchase ID is the encryption Purchase information storage means stored in association with the content ID of the encrypted content, and the download terminal Receiving a download request including the purchase ID, media ID, and content ID from the purchase ID storage means for confirming the purchase ID with reference to the purchase information storage means, and encryption of the content ID corresponding to the confirmed purchase ID Content key encryption means for encrypting a content key for decrypting encrypted content based on the media ID and obtaining an encrypted content key, and content key transmission for returning the obtained encrypted content key to the download terminal And the download terminal includes a download request transmission unit that transmits the download request to a distribution server, and an encrypted content key reception unit that receives an encrypted content key from the distribution server. It is.

  According to a second aspect of the present invention, a distribution server capable of distributing encrypted content executes a payment process with a mobile carrier, and the download terminal to which the user ID used for the payment process is input is the user ID and the media A content sales system for downloading an encrypted content key obtained by encrypting a content key for decrypting the encrypted content from the distribution server based on an ID, wherein the distribution server includes: When the user ID and the payment information are received from the holding device and the right to acquire the encrypted content key is sold, the user ID, the content ID of the encrypted content, and the non-issue of the encrypted content key are indicated. Purchase history storage means for storing issuance state information in association with the user I from the download terminal And means for receiving a download request including a media ID and a content ID, and encrypting a content key for decrypting encrypted content corresponding to the user ID and the content ID included in the download request based on the media ID. Content key encrypting means for obtaining an encrypted content key, a content key transmitting means for transmitting the obtained encrypted content key to the download terminal, and the issuance when transmitting the encrypted content key to the download terminal State information changing means for changing the state information to indicate that it has been issued, and the download terminal receives a download request transmission means for transmitting the download request to a distribution server, and receives an encrypted content key from the distribution server And an encrypted content key receiving means Content is a sales system.

  Here, the mobile carrier and the mobile carrier holding device may be an integrated single device or separate devices. In the case of a single device, the mobile carrier holding device is a mobile phone, for example, and the mobile carrier is a memory in the mobile phone. In the case of separate devices, the mobile carrier holding device is, for example, a communication terminal provided outside the home, and the mobile carrier is a memory device that can be attached to and detached from the communication terminal.

(Function)
In the first invention, the mobile carrier holding device purchases the right to acquire the encrypted content key by transmitting the payment information to the distribution server, so that the content can be purchased even if the media is not held in the download terminal. It is not necessary to input / send payment information on the download terminal. Further, since the distribution server only needs to manage the purchase ID and the content ID, there is no need to manage personal information on the distribution server. In addition, since the download terminal obtains the purchase ID by the mobile carrier, the download terminal holds the media and transmits a download request including the media ID (media specific information), so that the media specific information can be transmitted to the distribution server.

  In the second invention, similarly to the first invention, the media is held in the download terminal by the configuration in which the mobile carrier holding device purchases the right to acquire the encrypted content key by sending the payment information to the distribution server. You can purchase content without having to enter and send payment information on the download terminal. Further, since the distribution server only has to manage the user ID and the content ID, it is not necessary to manage personal information (name, address, etc.) on the distribution server. Further, since the download terminal obtains the user ID by the mobile carrier, the download terminal holds the media and transmits a download request including the media ID (media specific information), so that the media specific information can be transmitted to the distribution server.

  That is, in both the first and second inventions, the media-specific information can be transmitted to the distribution server, the content can be purchased even if the media is not held in the download terminal, and payment information is input / transmitted on the download terminal. Without having to manage personal information on the distribution server.

  As described above, according to the present invention, media-specific information can be transmitted to the distribution server, contents can be purchased even if the media is not held in the download terminal, and payment information is not input / transmitted on the download terminal. It is possible to provide a content sales system and program that do not require management of personal information on the distribution server.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings, but before that, an outline of each embodiment will be described. In each embodiment, the purchase of a content key is divided into two stages: acquisition of a right and acquisition of a content key bound to a specific medium. Rights acquisition and billing are performed on the mobile device, for example, a purchase ID is acquired. Later, when the media is inserted, the DVD recorder (download terminal) transmits the purchase ID and the unique information of the media to the distribution server, and acquires the bound content key. Only when the purchase ID is valid and is not bound to any media, the distribution server generates a content key bound to the media and returns it to the download terminal.

  Here, in the first embodiment, the purchase ID is displayed on a mobile device such as a mobile phone and is manually input to the DVD recorder. The purchase ID may be a disposable ID that disappears when bound to the media, or a random number of about 10 digits.

  In the second embodiment, the purchase ID is encrypted with a password to prevent guessing of the purchase ID. When inputting to the DVD recorder, manually enter the password. The encrypted purchase ID has a long bit length. Therefore, in order to save input time, short-distance communication is performed between the mobile device and the DVD recorder, and the encrypted purchase ID is transferred from the mobile device to the DVD recorder.

  In the third embodiment, purchased content is selected by a portal. The user purchases content on the portal, accesses the portal from the DVD recorder, and selects the purchased content on the GUI.

  The fourth embodiment relates to user registration of a DVD recorder when using a portal. Register the portal user on the mobile device. Next, the portal is accessed from the DVD recorder, and the DVD recorder is registered. At this time, short distance communication is performed between the mobile device and the DVD recorder, and identification information of the mobile device is transmitted. On the portal side, the mapping between the device information of the DVD recorder and the identification information of the mobile device is managed.

(First embodiment)
The first embodiment purchases content on a mobile device such as a mobile phone and obtains a purchase ID while away from home. By entering a purchase ID on a DVD recorder at home, the content key is acquired, and the content is downloaded and played.

  FIG. 1 is a schematic diagram showing a configuration of a content sales system according to the first embodiment of the present invention. This system includes a mobile device 10, a DVD recorder 20, and a distribution server 30.

  The mobile device 10 is a normal device having a browser / mail function 11 such as a mobile phone. When the content right is purchased, the function 12 for displaying the purchase ID transmitted from the distribution server is necessary, but this may be realized by using a browser / mail function. An application for displaying a purchase ID may be used.

  The DVD recorder 20 includes a purchase ID input function 21, an encrypted content key request function 22, and a DVD drive function 23. Actually, in addition to these functions, a function for downloading contents and a function for reproducing DVD contents are required, but these are out of the scope of the present invention and are not described for the sake of simplicity.

  The purchase ID input function 21 is a function for the user to input a purchase ID. The purchase ID can be a random code of about 10 digits, for example. An existing method such as inputting with a remote control can be used. When the user inputs a purchase ID, the function 21 passes the purchase ID to the encrypted content key request function 22 and issues a request for an encrypted content key.

  The encrypted content key request function 22 acquires the media specific information from the DVD medium 40 using the DVD drive function 23, and issues an encrypted content key request to the distribution server 30 together with the purchase ID. The encrypted content key request includes at least a purchase ID and media specific information. The media-specific information is determined by the specification of the DVD media 40. For example, in media such as DVD-RAM, key bundle information called media ID and MKB is equivalent. Note that the encrypted content key request function 22 may perform other communications when requesting an encrypted content key. For example, communication for authentication between the DVD drive function 23 and the distribution server. Since these functions are determined by the specifications of each DVD medium 40 and are within the scope of existing technology, details are omitted here.

  The DVD drive function 23 has access to the DVD medium 40 and a necessary information read / write function.

  The distribution server 30 includes a portable content sales function 31, a content key transmission function 32, an encrypted content key generation function 33, a purchase information DB 34, a ticket information DB 35, and a content key DB 36.

  The mobile content sales function 31 has a list display of content that can be purchased, content purchase, and billing / settlement functions for access from the mobile device 10. These functions are the same functions as existing EC sites. The portable content sales function 31 issues a purchase ID and records it in the purchase information DB 34 when content selection, billing / settlement, and the like are completed in a manner similar to normal EC site processing. As shown in FIG. 2, the purchase information DB 34 is a memory storing a table in which a content ID and purchase conditions are described for each purchase ID, and the purchase ID must be unique in the DB. The purchase information DB 34 is not limited to the memory, and may be another storage device, or may be outside the distribution server 30 such as a hard disk connected via a dedicated line. As described above, any other storage device may be used, and it may be arranged outside the distribution server as well in other DBs 35, 36, and 38 to be described later.

  The portable content sales function 31 replies to the mobile device 10 when a purchase ID is issued. How to reply: (a) Display as an HTML screen, (b) Reply to an application running on the mobile device 10, display on the screen, (c) Reply as an email, etc. A realization method used on a mobile site may be used. The purchase information DB 34 may record information such as purchase conditions. For example, information such as whether it is for sale or rental, and how many days it can be viewed for rental may be recorded.

  The content key transmission function 32 receives an encrypted content key request from the DVD recorder 20 and returns an encrypted content key. Upon receiving the purchase ID from the DVD recorder 20, the content key transmission function 32 searches the purchase information DB 34 and confirms that an entry for the purchase ID exists. If no entry exists, an error is returned. If there is an entry, the content ID of the entry is acquired and passed to the encrypted content key generation function 33 together with the media specific information received from the DVD recorder 20, and the encrypted content key is received.

  Next, the content key transmission function 32 deletes the entry of the purchase ID in the purchase information DB 34, generates a ticket instead, and adds the entry to the ticket information DB 35. As shown in FIG. 3, the ticket information DB 35 is a memory in which a table in which a media ID, a content ID, an encrypted content key, and a purchase condition are described is stored for each ticket ID. Data including a media ID (media unique information) and a content ID may be stored. When the ticket ID and the encrypted content key sequence are used, when the DVD recorder 20 erroneously deletes the encrypted content key after the DVD recorder 20 acquires the encrypted content key, the DVD recorder 20 returns the ticket ID. By presenting, it becomes possible to re-acquire the issued encrypted content key.

  When the content key transmission function 32 generates the ticket information, it returns the ticket information and the encrypted content key to the DVD recorder 20.

  The encrypted content key generation function 33 receives the content ID and the media specific information, and outputs the encrypted content key. The content key encryption method is determined by the specifications of the DVD medium 40. For example, in a DVD-RAM or the like, a media ID is used when generating an encryption key for encrypting a content key. The encrypted content key generation function 33 reads the content key from the content key DB 36 using the content ID as a key, adds a predetermined encryption process, and outputs it as an encrypted content key. As shown in FIG. 4, the content key DB 36 is a memory that stores a table in which a content key is described for each content ID.

  Next, the operation of the system configured as described above will be described with reference to the flowchart of FIG.

  The user accesses the site of the content distribution server 30 with the mobile device 10 such as a mobile phone and purchases the right of the content while away from home (ST1). At the time of purchase, billing / settlement is completed on the distribution server 30 (ST2).

  The distribution server 30 issues a purchase ID (ST3), and the ID is displayed on the mobile device 10. The purchase ID is used only for a short period of time from purchase to generation of the encrypted content key, and may be reused when no longer needed. The purchase ID need only have a length that cannot be guessed by others, and may be a random number of about 10 digits depending on the number of users and the frequency of purchase. The display of the ID may be displayed in a browser in the form of HTML, or may be displayed on a dedicated application. Alternatively, the distribution server 30 may transmit an email in which a purchase ID is written to the mobile device 10 after the accounting is completed. The purchase ID may be displayed by a method performed on an existing EC site.

  After acquiring the purchase ID (ST4), the user returns to the home, inserts the DVD medium 40 into the DVD recorder 20, and then inputs the purchase ID (ST5). The purchase ID may be input using the remote controller of the DVD recorder 20 or the like, and the input means of the existing DVD recorder 40 can be used. When the purchase ID is input, the DVD recorder 20 reads the media-specific information from the DVD medium 40 and transmits it to the distribution server 30 together with the purchase ID (ST6).

  The distribution server 30 checks the validity of the purchase ID (ST7), and then creates ticket information (ST8). The ticket is information on a set of media specific information and content ID. At the same time, the content key is encrypted using the media specific information (ST9), and is returned to the DVD recorder 20 together with the ticket information.

  When receiving the encrypted content key, the DVD recorder 20 stores it in the DVD medium 40 (ST10). The ticket information is held on the DVD recorder 20 side and can be used for reacquisition when the encrypted content key is deleted by mistake.

  The DVD recorder 20 stores the encrypted content key in the DVD medium 40, and then starts downloading the encrypted content (ST11). Simultaneously with the download, reproduction may be started using a piece of downloaded content. In this case, after inputting the purchase ID, the user can immediately reproduce the content with a waiting time of about the communication time with the distribution server 30 (ST12).

  Note that after obtaining the encrypted content key, it is not possible to obtain a content key for another DVD medium using the same purchase ID. This is realized by receiving the purchase ID from the DVD recorder 20 on the distribution server side, generating ticket information and deleting the purchase ID data at the same time.

  As described above, according to the present embodiment, the DVD device 40 is held in the DVD recorder 20 by the configuration in which the mobile device 10 purchases the right to acquire the encrypted content key by transmitting the payment information to the distribution server 30. The content can be purchased without the need to input / send settlement information on the DVD recorder 20. Further, since the distribution server 30 only has to manage the purchase ID and the content ID, there is no need to manage personal information on the distribution server. Moreover, since the DVD recorder 20 holds the DVD medium 40 after acquiring the purchase ID by the mobile device 10 and transmits a download request including the media ID (media specific information), the media specific information can be transmitted to the distribution server 30. .

  That is, according to the present embodiment, the media specific information can be transmitted to the distribution server 30, the content can be purchased even if the DVD medium 40 is not held in the DVD recorder 20, and payment information is input / transmitted on the DVD recorder 20. Therefore, it is not necessary to manage personal information on the distribution server 30.

  Moreover, since it can be purchased on the mobile device 10 from the viewpoint of the purchaser, the content can be purchased by accessing the content sales site when desired. The purchase ID is a random number of about 10 digits and can be easily input on the DVD recorder 20.

  From the content sales side, it is possible to increase sales opportunities by making it possible to purchase content with the mobile device 10 or the like that has a lot of time. At this time, in the content sales site, it is only necessary to send back a purchase ID of about 10 digits in addition to the function of the normal EC site, so that it is not necessary to significantly change the function of the existing EC site.

  For the developer of the DVD recorder 20, since purchase and settlement of contents are performed on the mobile device 10, it is not necessary to incorporate a GUI function for realizing these on the DVD recorder 20, and a purchase ID of about 10 digits is input. It is enough to have a GUI to do. For example, an existing remote controller can be used, and development of the DVD recorder 20 is facilitated.

  The DVD recorder 20 can request re-acquisition of the encrypted content key any number of times by presenting the ticket information to the distribution server 30. For example, in a DVD-RAM, the content key is recorded in an area that can be freely accessed by the user of the DVD medium 40, so that the user can often delete it by mistake. However, in the case of re-acquisition, it must be the same media as the DVD media 40 used when the encrypted content key is first issued. This is a condition for preventing illegal copying of DVD content due to re-acquisition.

  After inserting the DVD medium 40 into the DVD recorder 20, the content can be viewed immediately. Simultaneously with the purchase of the rights, the DVD recorder 40 can be remotely controlled to start downloading the content. If the download is completed when the user returns to the home, the content can be reproduced immediately by simply obtaining the encrypted content key.

  Alternatively, after inserting the DVD medium 40, the decryption and reproduction of the encrypted content may be started simultaneously with the download of the encrypted content. Unlike streaming, the downloaded content is recorded on the DVD medium 40, so if there is only the DVD medium 40, it can be watched many times later.

  Since the distribution server 30 makes a payment at the time of content right purchase and manages only the purchase ID, management of personal information becomes unnecessary. In other words, after binding to the media, only information related to the media and the content is required, and information for identifying an individual is not necessary. Also, unlike the method of binding to a device, device-specific information is not required. Device information may be able to identify an individual, and it is not preferable to manage it for a long time.

  The DVD recorder 20 does not need to have a billing mechanism by realizing the billing process with the payment function of the mobile device 10. In particular, it is often difficult for the DVD recorder 20 to make a payment due to the limited user interface and the fact that not all users but one family uses them. For this reason, it is advantageous for consumers to complete the settlement with the personal mobile device 10.

(Second Embodiment)
In the first embodiment, if a purchase ID is presumed by another person, the encrypted content key may be acquired by the other person first. Since the encrypted content key can be issued only to one specific medium, if it is first obtained by another person, it cannot be obtained by itself.

  The second embodiment describes a method for exchanging the purchase ID more safely in consideration of such a situation. Usually, as a method for making it difficult to guess the purchase ID, a method of increasing the data length of the ID can be considered. However, it becomes difficult to input a purchase ID having a long data length with the remote controller of the DVD recorder 20 or the like. Therefore, in the second embodiment, the purchase ID is encrypted with a password, and the encrypted purchase ID is transferred between the mobile device and the DVD recorder by near field communication.

  FIG. 6 is a schematic diagram showing the configuration of a content sales system according to the second embodiment of the present invention. The same parts as those in FIG. Is mainly described. In the following embodiments, the same description is omitted.

  That is, the present embodiment is a modification of the first embodiment, and has a configuration in which the purchase ID is protected with a password.

  Accordingly, the mobile device 10c includes a purchase ID transmission function 13 for transmitting a password for receiving a purchase ID to the distribution server, instead of the purchase ID display function 12 described above.

  The distribution server 30c has a function of encrypting the issued purchase ID with a password in the content sales function 31 for the above-described form and transmitting the obtained encrypted purchase ID to the mobile device 10c.

  The DVD recorder 20c includes a password input function 24 and a purchase ID reception function 25 in place of the purchase ID input function 21 described above.

  The password input function 24 sends a password manually input by the user to the purchase ID receiving function.

  The purchase ID receiving function 25 is a function for receiving an encrypted purchase ID from the mobile device 10c, a function for decrypting an encrypted purchase ID based on a password input via the password input function 24, and a function obtained by decryption. And a function for sending the purchased purchase ID to the encrypted content key request function 22.

  Next, the operation of the content sales system configured as described above will be described with reference to the flowchart of FIG.

  When the user is away from home, the user accesses the site of the content distribution server 30a with the mobile device 10a such as a mobile phone and purchases the right of the content. At the time of purchase, a password arbitrarily selected by the user is input by the mobile device 10a (ST1a) and transmitted to the distribution server 30a. At the time of purchase, charging / settlement is completed on the distribution server 30a (ST2). The distribution server 30a records purchase information in the purchase information DB 34. The purchase ID is encrypted using a password and returned to the mobile device 10a (ST3a). The encryption method may be any method. For example, a hash value of a password is obtained, and the purchase ID is encrypted using this as an encryption key to obtain an encrypted purchase ID. The encryption purchase ID has a block length corresponding to the encryption algorithm. To prevent the purchase ID from being easily guessed by others, the block length may be made sufficiently long. The encrypted purchase ID is returned to the mobile device 10a and stored in the mobile device 10a (ST4a).

  After acquiring the encrypted purchase ID, the user returns to the home and performs near field communication between the DVD recorder 20a and the mobile device 10a. The purchase ID transmission function 13 of the mobile device 10a transmits the encrypted purchase ID to the purchase ID reception function 25 of the DVD recorder 20a. The near field communication may be infrared communication, Bluetooth, wireless LAN, or the like.

  When receiving the encrypted purchase ID from the mobile device 10a (ST5a-1), the purchase ID receiving function 25 requests the user to input a password using the password input function 24. The password input function 24 displays a message prompting the input of a password on the control screen of the DVD recorder 20a. When the user inputs a password using a remote controller or the like (ST5a-2), password input function 24 returns the input password to purchase ID reception function 25.

  The purchase ID receiving function 25 generates an encryption key from the password, decrypts the encrypted purchase ID (ST5a-3), and obtains the purchase ID, as in the encryption processing on the distribution server 30a side.

  Thereafter, as in the first embodiment, the purchase ID and the media specific information are transmitted to the distribution server 30a (ST6), and the encrypted content key is acquired.

  As described above, according to the present embodiment, in addition to the effects of the first embodiment, the purchase ID is encrypted and becomes a block length data having a sufficient length determined by the encryption algorithm. I can't. Further, in addition to the encrypted purchase ID, a correct purchase ID cannot be obtained unless the password is known, and therefore, there is a low possibility that the purchase ID is guessed or known to others.

  The purchase ID is performed by short-range communication between the mobile device 10a and the DVD recorder 20a, and decrypted by a manually entered password. If the password is a random number of about 4 digits, for example, the labor of inputting can be greatly reduced.

(Third embodiment)
When a user purchases content on a mobile device such as a mobile phone while away from home, a list of purchased content is displayed on the personal portal site. By accessing the portal from the home DVD recorder and selecting the content to be played back, the content key is acquired, and the content is downloaded and played back.

  FIG. 8 is a schematic diagram showing the configuration of a content sales system according to the third embodiment of the present invention. This embodiment is a modification of the first embodiment, and is a mode in which content is purchased by accessing the electronic commerce site from the mobile device 10b.

  The mobile device 10b is a normal device having a browser / mail function 11 such as a mobile phone. In the same manner as a normal EC site, the content sales portal site of the distribution server 30b is accessed, and content rights are purchased, purchased content is confirmed, and settlement is performed.

  The DVD recorder 20 b includes a purchase content selection function 26 and a DVD drive function 23.

  The purchased content selection function 26 has a function equivalent to a browser and accesses the portal site for the DVD recorder of the distribution server 30b. When accessing, authenticate and display a personalized portal screen. Authentication is performed with the user ID. As an authentication mechanism, the user may input an ID / password on the screen, or the DVD recorder 20b may store the ID / password. The system adopted in the existing network connection type DVD recorder / HDD recorder may be used. The screen may be displayed on a TV screen or a PC connected to the DVD recorder 20b. The screen display and input function may be a method already adopted in a DVD recorder / HDD recorder or the like. A list of previously purchased contents is displayed on the portal screen. When the user selects the content, the purchased content selection function 26 acquires the media specific information from the DVD medium 40 using the DVD drive function 23, and issues an encrypted content key request to the distribution server 30b together with the ID of the selected content. The encrypted content key request includes a user ID, a content ID, and media specific information.

  The DVD drive function 23 has a function of accessing the DVD medium 40 and reading / writing necessary information.

  The distribution server 30b has a portable content sales portal function 37, a purchase history DB 38, and a DVD recorder content portal function 39 instead of the functions 31, 32 and DB 34 described above.

  The portable content sales portal function 37 has a list display of purchaseable contents, purchase of contents, and billing / settlement functions for access from the mobile device 10b. In addition, a list of purchased contents may be confirmed. When accessing the portal from the mobile device 10b, an individual ID / password is input to identify the individual. The personal authentication may use an authentication function provided by the mobile phone company of the mobile device 10b. In this case, the user can save the trouble of inputting the ID / password on the mobile device 10b. The portable content sales portal function 37 records the ID of the content purchased by the user in the purchase history DB 38.

  As shown in FIG. 9, the purchase history DB 38 is a memory that stores a table in which a user ID, a content ID, a state, and a ticket ID are described. In addition, information such as purchase conditions may be recorded. For example, information such as whether it is for sale or rental, and how many days it can be viewed for rental may be recorded. The state is “purchased (the encrypted content key has not been issued)” at the time of purchase, and the ticket ID is blank.

  The DVD recorder portal function 39 transmits a content list screen in response to browser access from the DVD recorder 20b, and prompts the user to select content to be reproduced. At this time, the DVD recorder portal function 39 authenticates the user. As a method of authentication, the same method as that for a normal EC site or a DVD recorder / HDD recorder site can be adopted. When the portal function 39 for the DVD recorder acquires the user ID as the authentication result, it searches the purchase history DB 38, acquires a list of purchase histories associated with the user ID, and displays the content selection screen g shown in FIG. It is transmitted to the recorder 20b and displayed. When the user selects the content and the ID of the selected content is transmitted together with the media specific information, the purchase history DB 38 is searched using the user ID and the content ID as a key, and the status and ticket ID are checked. When the state is “purchased”, the ticket information is generated, and at the same time, the DB state is changed to “key issued”, the ticket ID is rewritten with the ID of the generated ticket information, and the ticket information is recorded in the ticket information DB 35.

  Next, the encrypted content key generated by the encrypted content key generation function 33 is returned to the DVD recorder 20b. If the status is “key issued”, the ticket information DB 35 is searched using the ticket ID as a key, and generated ticket information is acquired. After confirming that the media ID of the ticket information and the media ID transmitted from the DVD recorder 20b are the same, the encrypted content key cached in the ticket information DB 35 is returned.

  Next, the operation of the system configured as described above will be described with reference to the flowchart of FIG.

  When the user is away from home, the user accesses the site of the content distribution server 30b using the mobile device 10b such as a mobile phone and purchases the content right (ST21). At the time of purchase, charging / settlement is completed on the distribution server 30b (ST22). The distribution server 30b records the purchase history in the purchase history DB 38 (ST23). At this time, the purchased content may be confirmed on the mobile device 10b. The newly purchased content is listed up in the purchased content list. At this point, the content is in a “purchased” state.

  After purchasing the content right, the user returns to the home, inserts the DVD medium 40 into the DVD recorder 20b, and then accesses the personal portal of the distribution server 24 through the DVD recorder 20b (ST24).

  The portal site lists the contents purchased by the individual. Depending on the content, the state is either “purchased” or “key issued”. “Key issued” indicates that the content key has already been issued for a specific DVD medium. For example, when the content key is deleted by mistake, the same DVD medium is inserted and this content is selected. In the case of “purchased”, a new DVD medium 40 is inserted and content is selected (ST25).

  The DVD player 20b acquires the media specific information from the DVD media 40 and transmits it to the distribution server together with the ID of the selected content (ST26).

  The distribution server 30b checks whether the selected content is “purchased” or “key issued” (ST27). If it has been purchased, ticket information is generated based on the media-specific information (ST28), and the information in the purchase information DB 34 is set to “key issued”. The ticket information is information on a set of media unique information and a content ID as in the first embodiment. The distribution server 30b encrypts the content key using the media specific information (ST29), and returns it to the DVD recorder 20b together with the ticket information. At this time, the encrypted content key may be cached for later reissue.

  Steps ST30 to ST32 after the DVD recorder 20b receives the encrypted content key are the same as ST10 to ST12 of the first embodiment.

On the other hand, if “issued” in step ST27, the already issued ticket information is checked to check whether the media unique information sent from the DVD recorder 20b matches the media unique information described in the ticket information. (ST33). If they do not match, the request is discarded because the same DVD content is copied to a plurality of DVD media. If they match, the encrypted content key already cached is returned (ST34).
Thereafter, the DVD recorder 20b executes steps ST30 to ST32 as described above.

  As described above, according to the present embodiment, the DVD media 40 is held in the DVD recorder 20b by the configuration in which the mobile device 10b purchases the right to acquire the encrypted content key by transmitting the payment information to the distribution server 30b. The content can be purchased without the need to input / send settlement information on the DVD recorder 20b. Further, since the distribution server 30b only needs to manage the user ID and the content ID, it is not necessary to manage the name, address, settlement information, and the like on the distribution server 30b. In addition, since the DVD recorder 20b acquires the user ID by the mobile device 10b, the DVD recorder 20b holds the DVD medium 40 and transmits a download request including the media ID (media unique information), so the media unique information is transmitted to the distribution server 30b. it can.

  From the viewpoint of the purchaser, it is possible to freely select and play back content from a list of previously purchased content. Furthermore, a plurality of contents can be downloaded and reproduced by overwriting one DVD medium 40. In content sales where a copy of DVD content is downloaded to recordable DVD media, users will be charged separately for the DVD media in addition to the content, so the ability to download and play multiple content on a single media is a cost advantage There is.

  In the present embodiment, user ID and content ID information is managed on the distribution server 30b. In this case, the risk of managing personal information on the distribution server side can be avoided if the user ID is set as an anonymous ID that is not tied to a specific individual and is not tied directly to the personal information required for payment. it can.

(Fourth embodiment)
In the third embodiment, when the portal is accessed from a mobile device and when the portal is accessed from a DVD recorder, user authentication is required. In general, access by a mobile device includes a method of mapping an ID / password on the screen of the mobile device, and mapping to a user ID from device identification information (for example, a telephone number) of the mobile device. . On the other hand, in the user authentication on the DVD recorder side, there is a method of mapping to the user ID from the device information (for example, MAC address, etc.) unique to the DVD recorder in order to save the trouble of inputting the user ID / password. . However, in this case, the user can access the portal only with a specific DVD recorder. For example, after purchasing content on a mobile device, downloading it with a DVD recorder at a friend's home and viewing it together is difficult with this method. Therefore, in the fourth embodiment, a method for authenticating a user using a mobile device when accessing a portal from a DVD recorder will be described.

  FIG. 12 is a schematic diagram showing a configuration of a content sales system according to the fourth embodiment of the present invention. As shown in the figure, a device information transmission function 14 of the mobile device 10c, a device information reception function 27 of the DVD recorder 20c, and a gateway 50 are added. The gateway 50 is a communication carrier facility such as the mobile device 10c and is a server system that relays the mobile device 10c and the Internet. The gateway 50 includes an authentication function 51, a user DB 52, and a user inquiry function 53.

  The authentication function 51 has the function of collating the device information (device ID) received from the mobile device 10c with the user DB 52 and acquiring the user ID, and the function of presenting the user ID and accessing the distribution server 30c. Yes.

  As shown in FIG. 13, the user DB 52 is a memory in which device information of the mobile device 10c and a user ID are stored in association with each other.

  When receiving a user inquiry including device information from the distribution server 30c, the user inquiry function 53 has a function of referring to the user DB 52 and returning a user ID related to the device information to the distribution server.

  Next, the operation of the content sales system configured as described above will be described with reference to the flowchart of FIG.

  Access from the mobile device 10 c is connected to the portable content sales portal function 37 c via the authentication function 51. At this time, the browser / mail function 11 acquires the device ID of the mobile device 10c from the device information transmission function 14, and transmits it to the authentication function 51 of the gateway 50 (ST21c-1).

  The authentication function 51 collates the device ID with the user DB 52 as shown in FIG. 13, and acquires the user ID (ST21c-2). Access to the distribution server 30c is performed by presenting a user ID instead of device information (ST21c-3).

  When accessing the distribution server 30c from the DVD recorder 20c, short-range communication is performed between the device information transmission function 14 of the mobile device 10c and the device information reception function 27 of the DVD recorder 20c to exchange device information (ST24c). -1). The short-range communication may be any of several methods shown in the second embodiment. Upon receiving the device information (ST24c-2), the device information receiving function 27 accesses the DVD recorder portal function 39c using the purchased content selection function 26c. At this time, the device information is presented (ST24c-4).

  The DVD recorder portal function 39c transmits device information to the user inquiry function 53 of the gateway 50 (ST24c-4) and receives a user ID (ST24c-5 to 6).

  As a result, the portal function 39c transmits the purchased content display screen g of the user ID to the DVD recorder 20c (ST24c-7). The subsequent steps ST25 to ST34 are the same as those in the third embodiment.

  As described above, according to the present embodiment, in addition to the effects of the third embodiment, the DVD server 20c makes a user inquiry to the gateway 50 when accessing the distribution server 30c from the DVD recorder 20c. The trouble of performing user authentication on the 20c side can be omitted.

  For example, when the user accesses the portal from the DVD recorder 20c, the user only needs to bring the mobile device 10c closer, and does not require an operation for user authentication. Moreover, it is not limited to a specific DVD recorder 20c, and a personal portal can be accessed even from a DVD recorder 20c having an equivalent function of another person.

  In addition, although each said embodiment demonstrated the case where mobile devices, such as a mobile phone, were used, it replaced with a mobile device and replaced with a mobile device (for example, SD card etc.), and a memory device. It is good also as a structure which consists of a communication terminal holding detachably. Specifically, in a state where a communication terminal is provided at a station and the memory device is held in the communication terminal, the user accesses the distribution servers 30 and 30a to 30c by the operation of the communication terminal and executes the settlement process. It may be deformed. After the settlement process, the user may take the memory device home and input a purchase ID in the memory device to the DVD players 20 and 30a to 30c. In addition, the methods described in each of the embodiments described above are programs that can be executed by a computer, such as a magnetic disk (floppy (registered trademark) disk, hard disk, etc.), an optical disk (CD-ROM, DVD, etc.), a magneto-optical disk ( MO), and can be stored and distributed in a storage medium such as a semiconductor memory.

  In addition, as long as the storage medium can store a program and can be read by a computer, the storage format may be any form.

  In addition, an OS (operating system) operating on the computer based on an instruction of a program installed in the computer from the storage medium, MW (middleware) such as database management software, network software, and the like implement the present embodiment. A part of each process may be executed.

  Further, the storage medium in the present invention is not limited to a medium independent of a computer, but also includes a storage medium in which a program transmitted via a LAN, the Internet, or the like is downloaded and stored or temporarily stored.

  Further, the number of storage media is not limited to one, and the case where the processing in the present embodiment is executed from a plurality of media is also included in the storage media in the present invention, and the media configuration may be any configuration.

  The computer according to the present invention executes each process according to the present embodiment based on a program stored in a storage medium, and includes a single device such as a personal computer or a system in which a plurality of devices are connected to a network. Any configuration may be used.

  In addition, the computer in the present invention is not limited to a personal computer, but includes a processing unit, a microcomputer, and the like included in an information processing device, and is a generic term for devices and devices that can realize the functions of the present invention by a program. .

  Note that the present invention is not limited to the above-described embodiment as it is, and can be embodied by modifying the constituent elements without departing from the scope of the invention in the implementation stage. Moreover, various inventions can be formed by appropriately combining a plurality of constituent elements disclosed in the embodiment. For example, some components may be deleted from all the components shown in the embodiment. Furthermore, constituent elements over different embodiments may be appropriately combined.

It is a mimetic diagram showing composition of a contents sales system concerning a 1st embodiment of the present invention. It is a schematic diagram which shows the structure of purchase information DB in the embodiment. It is a schematic diagram which shows the structure of ticket information DB in the embodiment. It is a schematic diagram which shows the structure of content key DB in the same embodiment. It is a flowchart for demonstrating the operation | movement in the embodiment. It is a schematic diagram which shows the structure of the content sales system which concerns on the 2nd Embodiment of this invention. It is a flowchart for demonstrating the operation | movement in the embodiment. It is a schematic diagram which shows the structure of the content sales system which concerns on the 3rd Embodiment of this invention. It is a schematic diagram which shows the structure of purchase history DB in the same embodiment. It is a schematic diagram which shows the structure of the content selection screen in the embodiment. It is a flowchart for demonstrating the operation | movement in the embodiment. It is a schematic diagram which shows the structure of the content sales system which concerns on the 4th Embodiment of this invention. It is a schematic diagram which shows the structure of user DB in the embodiment. It is a flowchart for demonstrating the operation | movement in the embodiment.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 10,10a-10c ... Mobile device, 11 ... Browser / mail function, 12 ... Purchase ID display function, 13 ... Purchase ID transmission function, 14 ... Device information transmission function, 20, 20a-20c ... DVD recorder, 21 ... Purchase ID Input function, 22 ... encrypted content key request function, 23 ... DVD drive function, 24 ... password input function, 25 ... purchase ID reception function, 26 ... purchased content selection function, 27 ... equipment information reception function, 30, 30a-30c ... distribution server 31, 31a ... portable content sales function, 32 ... content key transmission function, 33 ... encrypted content key generation function, 34 ... purchase information DB, 35 ... ticket information DB, 36 ... content key DB, 37, 37c ... Portable content sales portal function, 38 ... Purchase history DB, 39, 39c ... DVD recorder Only portal function, 40 ... DVD media.

Claims (19)

A distribution server capable of distributing encrypted content transmits a purchase ID to the mobile carrier, and a download terminal to which the purchase ID is input receives the encrypted content from the distribution server based on the purchase ID and media ID. A content sales system for downloading an encrypted content key obtained by encrypting a content key for decryption,
The distribution server
When the payment information is received from the mobile carrier holding device and the right to acquire the encrypted content key is sold, a purchase ID indicating completion of the sale is issued and the purchase ID is transmitted to the mobile carrier. Content sales means,
Purchase information storage means for storing the purchase ID in association with the content ID of the encrypted content;
Upon receiving a download request including the purchase ID, media ID, and content ID from the download terminal, a purchase ID confirmation unit that confirms the purchase ID with reference to the purchase information storage unit;
Content key encryption means for encrypting a content key for decrypting the encrypted content of the content ID corresponding to the confirmed purchase ID based on the media ID, and obtaining an encrypted content key;
Content key transmission means for returning the obtained encrypted content key to the download terminal,
The download terminal is
Download request transmitting means for transmitting the download request to a distribution server;
A content sales system comprising: encrypted content key receiving means for receiving an encrypted content key from the distribution server. The content sales system according to claim 1,
The distribution server
Means for associating the content ID with the media ID after confirming the purchase ID, while invalidating the purchase ID in the purchase information storage means;
Means for ignoring download requests with the same purchase ID after the invalidation;
Ticket information issuing means for issuing ticket information including the associated content ID and media ID to a download terminal;
Ticket information storage means for storing the ticket information;
Means for re-transmitting the encrypted content key corresponding to the ticket information to the download terminal when ticket information is presented from the download terminal;
The download terminal is
Means for transmitting an encrypted content key reacquisition request including the ticket information to the distribution server;
Content sales system characterized by comprising The content sales system according to claim 1,
The download request transmission means includes
A content sales system comprising a unique information reading function for reading a media ID from a held medium when the purchase ID is inputted. The content sales system according to claim 1,
The mobile carrier holding device comprises:
Means for transmitting a password for receiving issuance of the purchase ID to the distribution server;
The distribution server
Means for encrypting the issued purchase ID with the password and transmitting the obtained encrypted purchase ID to a mobile carrier holding device;
The download terminal is
Means for receiving the encrypted purchase ID output from the mobile carrier;
And a means for decrypting the encrypted purchase ID based on the input password to obtain the purchase ID. A distribution server capable of distributing encrypted content executes a payment process with a mobile carrier, and the download terminal to which the user ID used for the payment process is input is based on the user ID and the media ID. A content sales system for downloading an encrypted content key obtained by encrypting a content key for decrypting the encrypted content from a distribution server,
The distribution server
When the user ID and payment information are received from the mobile carrier holding device and the right to acquire the encrypted content key is sold, the user ID, the content ID of the encrypted content, the encrypted content key A purchase history storage means in which issuance status information indicating unissued is associated and stored;
Means for receiving a download request including the user ID, media ID and content ID from the download terminal;
Content key encryption means for encrypting a content key for decrypting encrypted content corresponding to the user ID and content ID included in the download request based on the media ID, and obtaining an encrypted content key;
Content key transmitting means for transmitting the obtained encrypted content key to the download terminal;
State information changing means for changing the issuance state information to indicate that it has been issued when transmitting the encrypted content key to a download terminal;
The download terminal is
Download request transmitting means for transmitting the download request to a distribution server;
A content sales system comprising: encrypted content key receiving means for receiving an encrypted content key from the distribution server. The content sales system according to claim 5,
The distribution server
Means for receiving the download request, referring to the purchase history storage means, and determining whether or not the issue status information indicates issued;
A ticket information storage means for storing, as ticket information, a user ID, a media ID, and a content ID included in the download request when the result of the determination indicates unissued;
A means for confirming that the media ID included in the download request matches the ticket information in the ticket information storage means when the result of the determination indicates issued;
Retransmitting means for retransmitting the encrypted content key corresponding to the download request to the download terminal after confirming the match;
Content sales system characterized by comprising The content sales system according to claim 5,
The mobile carrier holding device, the distribution server and the gateway device that can communicate with the download terminal,
The gateway device is
User carrier information storage means for storing the mobile carrier ID and user ID in association with each other;
Means for receiving a user inquiry including a carrier ID from the distribution server, and returning a user ID related to the carrier ID to the distribution server;
The download terminal is
Means for receiving a carrier ID output from the mobile carrier;
Means for presenting the carrier ID when accessing the distribution server,
The distribution server
A content sales system comprising: means for querying the presented gateway ID to the gateway device for access from the download terminal and obtaining a user ID. A distribution server capable of distributing encrypted content transmits a purchase ID to the mobile carrier, and a download terminal to which the purchase ID is input receives the encrypted content from the distribution server based on the purchase ID and media ID. A content sales system for downloading an encrypted content key obtained by encrypting a content key for decryption, which is a program used in the distribution server,
A computer of the distribution server;
When the payment information is received from the mobile carrier holding device and the right to acquire the encrypted content key is sold, a purchase ID indicating completion of the sale is issued and the purchase ID is transmitted to the mobile carrier. Content selling means,
Means for writing the purchase ID in a memory in association with the content ID of the encrypted content;
Upon receiving a download request including the purchase ID, media ID and content ID from the download terminal, purchase ID confirmation means for confirming the purchase ID with reference to the memory;
Content key encryption means for encrypting a content key for decrypting the encrypted content of the content ID corresponding to the confirmed purchase ID based on the media ID, and obtaining an encrypted content key;
Content key transmitting means for returning the obtained encrypted content key to the download terminal;
Program to function as. The program according to claim 8, wherein
A computer of the distribution server;
Means for validating the purchase ID in the memory while associating the content ID and the media ID after confirming the purchase ID;
Means for ignoring download requests with the same purchase ID after the invalidation;
Ticket information issuing means for issuing ticket information including the associated content ID and media ID to a download terminal;
Means for writing the ticket information into a memory;
Means for retransmitting the encrypted content key corresponding to the ticket information to the download terminal when the ticket information is presented from the download terminal;
Program to function as. The program according to claim 8, wherein
A computer of the distribution server;
Means for encrypting the issued purchase ID based on a password input from the mobile carrier and transmitting the obtained encrypted purchase ID to the mobile carrier;
Program to function as. A distribution server capable of distributing encrypted content transmits a purchase ID to the mobile carrier, and a download terminal to which the purchase ID is input receives the encrypted content from the distribution server based on the purchase ID and media ID. A content sales system for downloading an encrypted content key obtained by encrypting a content key for decryption, which is a program used for the download terminal,
A computer of the download terminal;
Download request transmitting means for transmitting a download request including the purchase ID, media ID and content ID to a distribution server;
Encrypted content key receiving means for receiving the encrypted content key from the distribution server;
Program to function as. The program according to claim 11,
A computer of the download terminal;
Means for transmitting a request for reacquisition of an encrypted content key including the ticket information to the distribution server with respect to the ticket information including the content ID and the media ID issued by the distribution server;
Program to function as. The program according to claim 11,
The download request transmission means includes
A program including a procedure for reading a media ID from a held media when the purchase ID is input. The program according to claim 11,
Means for receiving the purchase ID from the mobile carrier as an encrypted purchase ID encrypted with a password;
Means for decrypting the encrypted purchase ID based on the input password and obtaining the purchase ID;
Program to function as. A distribution server capable of distributing encrypted content executes a payment process with a mobile carrier, and the download terminal to which the user ID used for the payment process is input is based on the user ID and the media ID. A content sales system for downloading an encrypted content key obtained by encrypting a content key for decrypting the encrypted content from a distribution server, the program used for the distribution server,
A computer of the distribution server;
When the user ID and payment information are received from the mobile carrier holding device and the right to acquire the encrypted content key is sold, the user ID, the content ID of the encrypted content, the encrypted content key Means for associating and issuing status information indicating unissued, into the first memory;
Means for receiving a download request including the user ID, media ID and content ID from the download terminal;
Content key encryption means for encrypting a content key for decrypting encrypted content corresponding to the user ID and content ID included in the download request based on the media ID, and obtaining an encrypted content key;
Content key transmitting means for transmitting the obtained encrypted content key to the download terminal;
State information changing means for changing the issuance state information in the first memory to indicate issued when transmitting the encrypted content key to the download terminal;
Program to function as. The program according to claim 5,
A computer of the distribution server;
Means for referring to the first memory upon receiving the download request and determining whether or not the issue status information indicates issued;
Means for writing the user ID, the media ID, and the content ID included in the download request into the second memory as ticket information when the result of the determination indicates unissued;
Means for confirming that the media ID included in the download request and the ticket information in the second memory match when the result of the determination indicates issued;
Re-sending means for re-sending the encrypted content key corresponding to the download request to the download terminal after confirming the match;
Program to function as. The program according to claim 15, wherein
When the content sales system includes a gateway device having a function of returning a user ID related to the carrier ID to the distribution server upon receiving a user inquiry including the carrier ID from the distribution server,
A computer of the distribution server;
Means for inquiring of the presented carrier ID to the gateway device for access from the download terminal and obtaining a user ID;
Program to function as. A distribution server capable of distributing encrypted content executes a payment process with a mobile carrier, and the download terminal to which the user ID used for the payment process is input is based on the user ID and the media ID. A content sales system for downloading an encrypted content key obtained by encrypting a content key for decrypting the encrypted content from a distribution server, the program used for the download terminal,
A computer of the download terminal;
Download request transmitting means for transmitting a download request including the user ID, media ID and content ID to a distribution server;
Encrypted content key receiving means for receiving an encrypted content key from the distribution server;
Program to function as. The program according to claim 18, wherein
Upon receiving a user inquiry including a carrier ID from the distribution server, the content sales system includes a gateway device having a function of returning a user ID related to the carrier ID to the distribution server, and the distribution server includes the download server. For the access from the terminal, inquiring the presented carrier ID to the gateway device and obtaining the user ID,
A computer of the download terminal;
Means for receiving a carrier ID from the mobile carrier;
Means for presenting the carrier ID when accessing the distribution server;
Program to function as.

Images