JP2006217320A - Management server, device, and license managerial system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To enable a device to transfer additional application and its license to the other device without permitting illegal access or illegal copying. <P>SOLUTION: A management server correlates and manages a device ID of each device and an application ID of the additional application owing a license. When a license transfer request of the additional application comes from the device, the management server generates a key pair of an encoding key and a decoding key, and transmits the encoding key to a device transferring the license. The device transferring the license encodes the additional application by the encoding key, transmits it to a device of a license transfer destination, deletes the additional application after the completion of transmission, and gives information to the management server. The management server receives completion information, updates license information, and transmits the decoding key to the device of the license transfer destination. The device of the license transfer destination decodes the additional application by the received decoding key. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention manages a license of an additional application, transfers a license from a device that holds the additional application to another device, and can move the additional application without operating the transfer destination device The present invention relates to a server, a device, and a license management system.

  In home appliances such as TVs and refrigerators, multiple product lineups are offered, including models with many functions and models with few functions, so the user can decide which model to purchase according to the functions and prices of the devices. I have decided. In addition, new models equipped with new functions were released, and if you wanted to use those functions, you had to replace them.

  On the other hand, in a personal computer (hereinafter referred to as a PC), functions can be added without changing hardware or replacement by installing an application provided on a CD-ROM, for example. Even if a new application is purchased, the application can be downloaded from the same CD-ROM, so there is no need to purchase a new application. In addition to the CD-ROM, a method for downloading an application via the Internet is also provided.

  On the other hand, in recent years, so-called broadband environments such as ADSL (Asymmetric Digital Subscriber Line) and optical fibers have been rapidly spreading, and recently, not only PCs and mobile phones, but also AV devices such as TVs and DVD recorders, air conditioners and refrigerators, etc. The so-called “white goods” of home appliances are also increasing in number for networks. For this reason, such home appliances can also receive services using the Internet (or home / in-house LAN).

  Even in home appliances, a network system that downloads applications, setting data, etc. via the Internet as a service using the Internet and thereby provides functions and services according to the user's preference and environment is disclosed in, for example, Patent Literature 1 etc.

  Also, when an application can be downloaded by a device connected to the network, it is necessary to manage the license of the downloaded application. Many methods have been proposed for this purpose, but license management is possible even when applications are shared by multiple devices by using a memory card such as an SD (Super Density disc) card or CompactFlash (registered trademark) memory. Japanese Patent Application Laid-Open No. H10-228688 proposes a method that can perform the above.

Also, Patent Document 3 proposes a method that allows a license to be easily transferred from one device to another by managing licenses held by each device in the management server.
JP 2002-078036 A JP 2002-49436 A JP 2003-58657 A

  However, in the method of Patent Document 2, once a license is purchased, an application can be downloaded and used by a plurality of devices. Therefore, an application is downloaded and used indefinitely on devices owned by different users. There was a point.

  In addition, in the method of Patent Document 3, when transferring a license, the content itself is not moved. Therefore, in order to acquire the content with the device to which the license is transferred, the content is newly transferred from the server after the license is transferred. Need to get. That is, there is a problem in that both the device to which the license is transferred and the device to which the license is transferred have to operate the device, which takes extra time for the user. At the same time, if the content exists in the management server or in the device, the expiration date (or the number of times of use) is provided for the use of the content. There was a problem that it was difficult to manage applications that were supposed to be used.

  The present invention has been made in view of such a problem, and in a device to which a function can be added, the license of the additional function is appropriately managed, and the license can be separated by a safe and simple operation. It is an object of the present invention to provide a management station, a device, and a license management system that can be transferred to a device.

  In order to solve the above-described problem, a first invention of the present invention (corresponding to claim 1) is connected to a first device and a second device each having a unique device ID through a network. A management server for managing a license of an additional application held by one device and the second device, wherein a key generation unit that generates a key pair of an encryption key and a decryption key; And a control means for controlling the management information storage means stored therein, the key generation means, and the management information storage means, using as a license information a set of an application ID that uniquely represents the additional application and the device ID The control means has, from the first device, an own device ID and an application ID related to the additional application that is held. When receiving the license transfer request including the device ID of the second device that is the counterpart device to which the license of the additional application is transferred, the received device ID of the first device and the device ID of the second device Together with the device ID of the first device that is included in the device information held in the management information storage means and received in the license information, and the received application ID. If stored, the encryption key is transmitted to the first device out of the key pair of the encryption key and the decryption key generated by the key generation means, and transmitted from the first device. Upon receipt of the completion notification, the device ID in the license information regarding the additional application is changed from the device ID of the first device to the device ID of the second device, and A management server and transmits the No. key to the second device.

  The second invention of the present invention (corresponding to claim 2) further includes an application storage unit that holds a plurality of types of additional applications, and the control unit receives the device ID and the application ID from the first device. Is received in the application storage means only when a combination of the device ID and the application ID exists in the license information held in the management information storage means. The management server according to the first aspect of the present invention, wherein an additional application corresponding to the received application ID is transmitted to the first device.

  A third invention of the present invention (corresponding to claim 3) is a management server that manages a license for an additional application, and a device that is connected to the second device through a network and that has a device ID unique to the device. An information storage unit; a memory that stores the additional application; an encryption unit that encrypts the additional application; a user input unit that receives an input from a user; and a control unit that controls each unit. Receives from the user input means a license transfer request including an application ID that uniquely indicates the additional application held in the memory and a device ID of the second device that is a license transfer destination of the additional application. Upon receipt, the device ID stored in the device ID storage means is included in the license transfer request. In addition, when the encryption key is transmitted to the management server and received from the management server, the encryption key is passed to the encryption unit, and the encryption unit encrypts the encryption key using the encryption key. The additional application is transmitted to the second device, and when the transmission of the additional application is completed, the additional application is deleted from the memory, and a movement completion notification of the additional application is transmitted to the management server. It is a device.

  According to a fourth aspect of the present invention (corresponding to claim 4), when the control means receives a download request including an application ID indicating an additional application to be downloaded from the user input means, the download request includes the device The device ID is stored in the memory when an additional application corresponding to the application ID is received from the management server by adding the device ID held by the ID storage unit to the management server. 3 is an apparatus according to the present invention.

  A fifth invention of the present invention (corresponding to claim 5) is a management server that manages a license for an additional application, and a device that is connected to the first device through a network and that has a device ID unique to the device. An information storage unit, a memory for storing the additional application, a decryption unit for decrypting the encrypted data, and a control unit for controlling each unit, wherein the control communication unit encrypts data from the first device. When the encrypted additional application is received, the encrypted additional application is stored in the memory. When the decryption key for decrypting the encrypted additional application is received from the management server, the encrypted additional application stored in the memory is stored. The device is characterized in that the additional application is decrypted and stored in the memory.

  According to a sixth aspect of the present invention (corresponding to claim 6), the first device and the second device each having a unique device ID, the registered device ID as device information, and the additional application are uniquely identified. A license management system that manages a license of an additional application in a network in which a management server that is internally held as a license information is a set of the application ID and the device ID represented in FIG. The device stores an additional application therein, and the management server, from the first device, the device ID of the first device, an application ID that uniquely represents the additional application that performs license transfer, License transfer requirement including the device ID of the second device that is the device to which the license of the additional application is transferred The device ID of the first device and the device ID of the second device are both included in the device information, and the device ID of the first device received in the license information. Only when the received application ID and the received application ID are stored as a pair, generate a key pair of an encryption key and a decryption key, transmit the encryption key to the first device, and Upon receiving the encryption key, the device encrypts the stored additional application with the encryption key, and transmits the encrypted additional application to the second device. When the encrypted additional application is received from the first device, the encrypted additional application is stored therein. When the transmission of the encrypted additional application is completed, the first device completes transmission to the management server. When the management server receives the transmission completion notification from the first device, the management server receives the device ID in the license information related to the additional application from the device ID of the first device. The device ID of the second device is changed and the decryption key is transmitted to the second device. When the second device receives the decryption key from the management server, the stored encryption is stored. The license management system is characterized in that the added additional application is decrypted with the received decryption key.

In a seventh aspect of the present invention (corresponding to claim 7), the management server further holds a plurality of types of additional applications and receives a download request including the device ID and the application ID from the first device. And the received application ID held in the application storage means only when a set of the device ID and the application ID exists in the license information held in the management information storage means Send an additional application corresponding to the first device,
The license management system according to the sixth aspect of the present invention, wherein the first device stores the additional application received from the management server.

  According to the present invention, an additional function owned by a device and a license for the additional function can be transferred to another device only by operating the device on the license transfer side, and the additional function is illegally copied to a third device. It has the effect of preventing it from being possible.

  Embodiments of the present invention will be described below with reference to the drawings.

(Embodiment 1)
Hereinafter, Embodiment 1 of the present invention will be described with reference to FIGS.

  FIG. 1 is a block diagram showing an example of a license management system of the present invention.

  As shown in FIG. 1, the management server 101 is connected to a device 201a that is a license transfer source device and a device 201b that is a license transfer destination device via the Internet. The management server 101 sets the registered user ID, password, and device ID, which are device information, as user information 111, and sets the application ID and device ID of the additional application held by each device as license information 112. Each is stored in the management information storage unit 105. In the management server 101, the key generation unit 104 generates an encryption key and a decryption key in pairs, the communication unit 103 communicates with other devices via the Internet, and the control unit 102 controls the operation of each unit. .

  FIG. 2 is an example of the user information 111. For example, no. The user with 0 has a pair of a user ID “331001” and a password “UserAPass”, a device with a device ID “12345567890” (ie, device 201a), and a device with a device ID “12446015201” (ie, device 201b). Devices are registered.

  FIG. 3 is an example of the license information 112. The device (device 201a) having the device ID “1234567890” owned by the user having the user ID “331001” has a license for the additional application (that is, the additional application 121a) having the application ID “120001”. It is registered.

  Further, the device 201a has the additional application 121a in the memory 207a, and has a device ID 210a that is a device-specific value in the device information storage unit 205a that cannot be rewritten. In the present embodiment, it is assumed that the value of the device ID 210a is “12345567890” and the application ID indicating the additional application 121a is “120001”. In the device 201a, the communication unit 203a communicates with other devices via the Internet, the user input unit 204a accepts user input, and the encryption / decryption unit 206a encrypts and decrypts data. The control unit 202a controls the operation of each unit. Similarly, the device 201b has a device ID 210b that is a device-specific value in the device information storage unit 205b that cannot be rewritten. In the present embodiment, the value of the device ID 210b is “1246015201”. Similarly to the device 201a, the device 201b includes a communication unit 203b, a user input unit 204b, an encryption / decryption unit 206b, and a control unit 202b.

  It is assumed that the user has registered his / her user ID and password in the management server 101 in advance. In addition, when the device 201a and the device 201b are purchased, the user registers the device for each device in the management server 101. At this time, the types of additional applications owned by each device (licensed) are also registered. Each type of additional application is represented by a unique application ID.

  A method for transferring the additional application 121a held by the device 201a and its license to the device 201b in the system configured as described above will be described with reference to FIGS.

  FIG. 4 is a flow for transferring the license of the additional application 121a from the device 201a to the device 201b. FIG. 5 shows the license information 112 after the license transfer of the additional application 121a.

  First, when a user inputs a user ID, a password, an application ID indicating an additional application 121a to which a license is to be transferred, and a device ID 210b of a device 201b that is a license transfer destination device from the user input unit 204a, the control unit 202a The device ID 210a read from the information storage unit 205a and the user ID, password, application ID, and device ID 210b received from the user input unit 204a are transmitted as a license transfer request to the management server 101 via the communication unit 203a (step S401). ).

  When the management server 101 receives a license transfer request from the device 201 a via the communication unit 103, the control unit 102 refers to the user information 111 stored in the management information storage unit 105 and receives the license received from the communication unit 103. It is confirmed that the combination of the user ID, password, and device ID 210a included in the transfer request is registered in the user information 111. Further, the control unit 102 refers to the license information 112 stored in the management information storage unit 105 and confirms that the combination of the user ID, the device ID 210a, and the application ID is registered in the license information 112. As a result, it can be confirmed that the user who is trying to transfer the license is valid, the user has the device 201a, and the additional application 121a is legally held in the device 201a (step S402).

  Next, the control unit 102 refers to the user information 111 stored in the management information storage unit 105, and the combination of the user ID, password, and device ID 210b included in the license transfer request received from the communication unit 103 is the user. Confirm that the information 111 is registered. As a result, it can be confirmed that the user has the device 201b as the license transfer destination (step S403).

  When the control unit 102 can confirm that the license transfer request is valid in step S402 and step S403, the control unit 102 causes the key generation unit 104 to generate and hold the key pair of the encryption key 431 and the decryption key 432 (step S40). S404). Thereafter, the control unit 102 transmits the encryption key 431 generated by the key generation unit 104 to the device 201a via the communication unit 103 (step S405).

  When the device 201a receives the encryption key 431 from the management server 101 via the communication unit 203a, the control unit 202a encrypts the additional application 121a stored in the memory 207a using the encryption key 431. (Step S406), the additional application 121a encrypted through the communication unit 203a is transmitted to the device 201b (Step S407). When the device 201b receives the encrypted additional application 121a from the device 201a via the communication unit 203b, the control unit 202b temporarily stores the received encrypted additional application 121a in the memory 207b (step S408).

  In the device 201a, when the transmission of the encrypted additional application 121a is completed, the control unit 202a deletes the additional application 121a stored in the memory 207a (step S409). Thereafter, the control unit 202a transmits a completion notification indicating that the movement of the additional application 121a is completed to the management server 101 via the communication unit 203a (step S410).

  In the management server 101, when the communication unit 103 receives a completion notification from the device 201a, the control unit 102 changes the license information 112 stored in the management information storage unit 105. That is, the device ID related to the user ID “331001” and the application ID “120001” is changed from the device ID “123456676890” (state in FIG. 3) of the device 201a to the device ID “12446015201” (state in FIG. 5) of the device 201b. (Step S411). Thereafter, the control unit 102 transmits the decryption key 432 among the key pairs held in step S404 to the device 201b through the communication unit 103 (step S412).

  When the device 201b receives the decryption key 432 from the management server 101 via the communication unit 203b, the control unit 202b uses the received decryption key 432 to store the encrypted additional application 121a stored in the memory 207b. Decrypt and store again in the memory 207b (step S413).

  FIG. 6 shows the license management system after the license transfer of the additional application 121a. As shown in FIG. 6, the 121a additional application is transferred from the device 201a to the device 201b.

  With the above operation, the management server 101 can transfer the license of the additional application 121a from the device 201a to the device 201b, and simultaneously transfer the additional application 121a from the device 201a to the device 201b. During this time, the user only needs to operate the device 201a, and the device 201b does not need to be operated at all as long as it is properly connected to the network.

  Further, when the additional application 121a is transmitted from the device 201a to the device 201b, since it is encrypted by the encryption key 431, it is not wiretapped by a third party.

  In addition, the management server 101 generates a new key pair every time a license transfer request is received. For example, even if the decryption key used in the previous license transfer operation is stored, the license transfer operation from the next time onward. In this case, the decryption key stored in the encrypted additional application cannot be decrypted.

  Furthermore, since the management server 101 transmits the decryption key 432 to the device 201b after actually deleting the additional application 121a from the device 201a, for example, after receiving the additional application 121a at the device 201b, the management server 101 executes the additional application 121a at the device 201a. Even if the device 201a and the device 201b are disconnected from the network before deletion, the additional application 121a stored in the device 201b is encrypted and cannot be used as it is. As a result, the copy of the additional application 121a cannot be executed illegally.

  Note that the encryption key and the decryption key generated by the management server 101 may be a key pair based on public key encryption or a common key based on common key encryption. However, in the case of a key pair based on public key cryptography, it is not necessary to disclose a key generated as a so-called public key to a third party.

  From the viewpoint of safety, in all the operations described above, all communication between the management server 101 and the devices 201a and 201b is performed using an encrypted communication protocol such as SSL (Secure Socket Layer). Is desirable. In this way, unauthorized copying or eavesdropping of additional applications by authorized users or third parties can be prevented.

  The user information 111 stored in the management information storage unit 105 is a set of a user ID, a password, and a device ID, but may include other information. The license information 112 is a set of a user ID, a device ID, and an application ID, but may include other information.

  Moreover, the values of the user ID, password, device ID, and application ID shown in the figure are examples, and may be information such as other numerical values and character strings.

  Further, the device 201a and the device 201b may be able to add two or more types of additional applications. In this case, the device 201a and the device 201b have more memories. Here, the memory for storing the additional application does not need to be prepared for each additional application. For example, a plurality of additional applications may be stored in one memory having a large capacity.

(Embodiment 2)
In the present embodiment, a management server that allows the device to download an additional application in the first embodiment will be described with reference to FIGS.

  FIG. 7 is a block diagram showing an example of the license management system in the present embodiment.

  In FIG. 7, the same components as those in the license management system according to the first embodiment are denoted by the same reference numerals, and the description thereof is omitted. In FIG. 7, the management server 701 further includes an application storage unit 703 that stores the additional application 121a and the additional application 121b, and the control unit 702 controls the operation of each unit.

  FIG. 8 is an operation flowchart when the device 201a downloads the additional application 121a from the management server 101.

  Hereinafter, the operation in this embodiment will be described with reference to the drawings.

  In the present embodiment, it is assumed that no additional application is stored in the memory 207a of the device 201a.

  In the management server 701, as shown in FIG. 3, the license information 112 includes an application ID “120001” for the device (device 201a) having the device ID “123456890” owned by the user having the user ID “331001”. It is assumed that the license of the additional application (that is, the additional application 121a) is registered.

  When the user inputs a user ID, a password, and an application ID indicating the additional application 121a to be downloaded from the user input unit 204a, the control unit 202a receives the device ID 210a read from the device information storage unit 205a and the user input unit 204a. The user ID, password, and application ID are transmitted as a download request to the management server 701 via the communication unit 203a (step S801).

  When the management server 701 receives a download request from the device 201a via the communication unit 103, the control unit 702 refers to the user information 111 stored in the management information storage unit 105 and is included in the received download request. It is confirmed that the combination of the existing user ID, password, and device ID 210 a is registered in the user information 111. Also, the control unit 702 refers to the license information 112 stored in the management information storage unit 105 and confirms that the combination of the user ID, the device ID 210a, and the application ID is registered in the license information 112. Thereby, it can be confirmed that the user who is trying to download is valid, the user has the device 201a, and the license of the additional application 121a (step S802).

  When the control unit 702 can confirm that the download request is valid in step S802, the control unit 702 extracts the additional application 121a from the application storage unit 703 and transmits it to the device 201a via the communication unit 103 (step S803). In the device 201a, when receiving the additional application 121a from the management server 701 via the communication unit 203a, the control unit 202a stores the received additional application 121a in the memory 207a (step S804).

  Through the above operation, the device 201a can download the additional application 121a from the management server 701.

  When the downloaded additional application 121a is transferred to the device 201b including the license, it can be executed by the same operation as in the first embodiment.

  From the viewpoint of safety, in all the operations described above, it is desirable to perform all communication between the management server 701 and the device 201a using an encrypted communication protocol such as SSL.

  The present invention enables a device connected to the management server via the Internet to download an additional application and transfer a license to another device when necessary. Therefore, in a network-compatible device to which a new function or an optional function can be added, for example, when a replacement is performed, it is possible to provide a device that can be transferred by a simple operation including a license in the device for which these functions are replaced.

1 is a block diagram showing one configuration of a license management system according to Embodiment 1 of the present invention. The figure which shows an example of user information Figure showing an example of license information Flow chart explaining the operation to transfer the license of the additional application The figure which shows an example of the license information after license transfer 1 is a block diagram showing a configuration of a license management system after license transfer according to Embodiment 1 of the present invention. Block diagram showing one configuration of a license management system in Embodiment 2 of the present invention Flow chart explaining operation to download additional application from the same management server

Explanation of symbols

101, 701 Management server 102, 202a, 202b, 702 Control unit 103, 203a, 203b Communication unit 104 Key generation unit 105 Management information storage unit 111 User information 112 License information 121a, 121b Additional application 201a, 201b Device 204a, 204b User input Unit 205a, 205b Device information storage unit 206a, 206b Encryption / decryption unit 207a, 207b Memory 210a, 210b Device ID
703 Application storage

Claims (7)

A management server connected through a network to a first device and a second device each having a unique device ID, and managing a license of an additional application held by the first device and the second device;
Key generation means for generating a key pair of an encryption key and a decryption key;
A management information storage unit that internally holds a registered device ID as device information, and a set of an application ID that uniquely represents the additional application and the device ID as license information;
Control means for controlling the key generation means and the management information storage means,
The control means is the second device that is a counterpart device that transfers its own device ID, an application ID related to the additional application that is held, and the license of the additional application that is held from the first device. When the license transfer request including the device ID of the device is received, both the received device ID of the first device and the device ID of the second device are held in the management information storage unit. When the device ID of the first device received in the license information and the received application ID are stored as a pair, the license information is generated by the key generation unit. The encryption key and the decryption key key pair are transmitted to the first device,
Upon receiving a transmission completion notification from the first device, the device ID in the license information related to the additional application is changed from the device ID of the first device to the device ID of the second device, and the decryption is further performed. A management server that transmits a key to the second device. Furthermore, it has an application storage means that holds multiple types of additional applications,
When the control means receives a download request including the device ID and the application ID from the first device,
Corresponds to the received application ID held in the application storage means only when a set of the device ID and the application ID exists in the license information held in the management information storage means The management server according to claim 1, wherein the additional application to be transmitted is transmitted to the first device. A management server that manages licenses for additional applications, and a device connected to the second device through the network,
A device information storage means having a device ID unique to the device;
Memory to store additional applications,
An encryption means for encrypting the additional application;
User input means for receiving input from the user;
Control means for controlling each means,
The control means includes, from the user input means, a license including an application ID uniquely indicating the additional application held in the memory, and a device ID of the second device that is a license transfer destination of the additional application. Upon receiving the transfer request, add the device ID stored in the device ID storage means to the license transfer request and send it to the management server,
Upon receiving the encryption key from the management server, the encryption key is passed to the encryption means,
In the encryption means, the additional application encrypted using the encryption key is transmitted to the second device,
When the transmission of the additional application is completed, the device deletes the additional application from the memory and transmits a movement completion notification of the additional application to the management server. When receiving a download request including an application ID indicating an additional application to be downloaded from the user input unit, the control unit adds the device ID held by the device ID storage unit to the download request, Sent to the management server,
4. The device according to claim 3, wherein when an additional application corresponding to the application ID is received from the management server, the application is stored in the memory. A management server that manages licenses for additional applications, and a device connected to the first device through the network,
A device information storage means having a device ID unique to the device;
Memory to store additional applications,
Decryption means for decrypting the encrypted data;
Control means for controlling each means,
When receiving the encrypted additional application from the first device, the control communication unit stores the encrypted additional application in the memory and receives a decryption key for decrypting the encrypted additional application from the management server. A device that decrypts the encrypted additional application stored in the memory and stores the decrypted additional application in the memory. The first device and the second device each having a unique device ID, the registered device ID as device information, and the combination of the app ID and the device ID that uniquely represents an additional application as license information, An internal management server is a license management system for managing licenses of additional applications in a network connected to each other,
The first device stores an additional application therein,
The management server, from the first device, the device ID of the first device, an app ID that uniquely represents an additional application that performs license transfer, and the second device that is a license transfer destination device of the additional application. When the license transfer request including the device ID of the second device is received, both the device ID of the first device and the device ID of the second device are included in the device information, and the license information Only when the received device ID of the first device and the received application ID are stored as a pair, the key pair of the encryption key and the decryption key is generated, and the first device Send the encryption key,
Upon receipt of the encryption key, the first device encrypts the stored additional application with the encryption key, and transmits the encrypted additional application to the second device,
When the second device receives the encrypted additional application from the first device, it stores it inside,
When the transmission of the encrypted additional application is completed, the first device transmits a transmission completion notification to the management server,
Upon receiving the transmission completion notification from the first device, the management server changes the device ID in the license information related to the additional application from the device ID of the first device to the second device in the license information. Change the device ID to
Furthermore, the decryption key is transmitted to the second device,
When the second device receives the decryption key from the management server, the second device decrypts the stored encrypted additional application with the received decryption key. The management server further has a plurality of types of additional applications,
When receiving a download request including the device ID and the application ID from the first device,
Corresponds to the received application ID held in the application storage means only when a set of the device ID and the application ID exists in the license information held in the management information storage means Send the additional application to the first device,
The license management system according to claim 6, wherein the first device stores the additional application received from the management server.

Images