JP2008054348A - Information processing apparatus - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an information processing apparatus which enables a legitimate user to effectively utilize contents while attaining copyright protection. <P>SOLUTION: An information processing system includes: a transmission device A and a reception device B connected to a local network L1 provided in the house of Mr. X; a short-range radio unit E communicable with these transmission device A and reception device B only within the house; a reception device C, outside the house, connected to the local network L1 via the Internet L2; and a reception device D outside the house. A range in which transmission of a short-range specific ID is performed is limited within a range physically covered by short-range radio, content transmission/reception enabled range can be limited, the transmission device A and the reception device B are prevented from being connected infinitely, and utilization of contents to attain copyright protection within a range of private use can be achieved. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to an information processing apparatus for transmitting various contents that need to be copyright protected.

  With the spread and digitization of computer networks in recent years, products called digital information home appliances are becoming popular. In addition, with the start of terrestrial digital broadcasting, digital broadcasting compatible TVs, set-top boxes, DVD recorders, and the like are expected to become more widespread in the future. If these digital home appliances are connected via a network, the user can enjoy various contents via the network, and the utility value is great.

Here, content refers to various digital data, for example, document data such as text data and still image data, as well as moving image data and audio data such as MPEG2 and MPEG4. While this kind of digital data content has the advantage that it can be easily duplicated without degradation, attention must be paid to the copyright of the content. For example, consider a case in which a content to be copyright protected is transmitted from a certain transmitting device to a receiving device. The scope of exchange of content that should be protected by copyright is limited to a certain range, for example, within the scope of legitimate authority such as the scope of private use of Article 30 of copyright, or within a narrower range. It is desirable to restrict the content from being exchanged with a third party beyond that range (see Patent Document 1).
JP 2004-173247 A

  However, when AV data is transmitted using IP (Internet Protocol), IP can transmit data without physical restrictions such as cable length, so that there is a tendency for copyright law problems. In other words, for IP, a technology for logically connecting remote IP networks, such as VPN (Vertual Private Network), has become widespread, and when this technology is used, it connects to the home network of Mr. X's house in A area. AV data can be transmitted by logically connecting the connected device to the home network of Mr. Y's house in District B (physically separated from District A). For this reason, the content of Mr. X's house does not close to the home network in Mr. X's house, and the remote Mr. Y can also connect to Mr. X's home network and browse the contents owned by Mr. X.

  The present invention has been made in view of the above-described problems, and an object of the present invention is to provide an information processing apparatus that can be used effectively by authorized users while protecting copyright.

According to one aspect of the present invention, in an information processing apparatus that transmits encrypted content for copyright protection with a first communication apparatus via a network,
Unique information storage means for storing general and publicly disclosed first unique information for identifying other communication devices from all communication devices;
The first unique information is transmitted to the second communication device while receiving the first unique information of the second communication device transmitted from the second communication device. Specific information transmission means,
Unique information storage judging means for judging whether or not the first unique information received by the first unique information transmission means is stored in the unique information storage means;
A first authentication / key exchange unit that performs an authentication / key exchange process with the second communication device when it is determined by the unique information storage determination unit;
When the authentication / key exchange process by the first authentication / key exchange means is successful, the first communication device is encrypted when used by the first communication device to communicate with the second communication device. Unique information receiving means for receiving the second unique information from the second communication device;
Second authentication / key exchange means for performing authentication / key exchange processing with the first communication device using the received second unique information of the first communication device. An information processing apparatus characterized by the above is provided.

According to another aspect of the present invention, in an information processing apparatus that transmits encrypted content for copyright protection with a first communication apparatus via a network,
Unique information storage means for storing general and publicly disclosed first unique information for identifying other communication devices from all communication devices;
The first unique information is transmitted to the second communication device while receiving the first unique information of the second communication device transmitted from the second communication device. Specific information transmission means,
Unique information storage judging means for judging whether or not the first unique information received by the first unique information transmission means is stored in the unique information storage means;
A first authentication / key exchange unit that performs an authentication / key exchange process with the second communication device when it is determined by the unique information storage determination unit;
When the authentication / key exchange processing by the first authentication / key exchange means is successful, the second communication device used when the first communication device communicates with the second communication device. In the case of not having the unique information, unique information receiving means for receiving the encrypted second unique information of the second communication device from the second communication device;
Second authentication / key exchange means for performing authentication / key exchange processing with the first communication device, using the received second unique information of the received second communication device; , An information processing apparatus comprising:

  According to the present invention, since the unique information is transmitted before the content transmission using an interface different from the interface for transmitting the content, it is possible to provide a restriction so that the unique information is not obtained illegally. Can be copyright protected. In addition, since all the unique information possessed by the second communication device is received, even if the own device does not possess the unique information of the first communication device in advance, content transmission is performed with the first communication device. It can be performed. Accordingly, content transmission can be performed while protecting the copyright of the content with a large number of communication devices.

  Hereinafter, an embodiment of the present invention will be described with reference to the drawings.

(First embodiment)
FIG. 1 is a block diagram showing an overall configuration of a first embodiment of an information processing system according to the present invention. The information processing system shown in FIG. 1 includes a transmitting device A and a receiving device B connected to a local network L1 provided in Mr. X's home, and a short-range wireless device capable of communicating only with the transmitting device A and the receiving device B at home. E, a receiving device C outside the house (Mr. X's separate house) connected to the local network L1 via the Internet L2, and a receiving device D outside the house (Mr. Y's house).

  In FIG. 1, each device (receiving devices C and D) connected to the Internet L2 and the local network L1 may be connected to a router device (not shown) or the like.

  As the physical layer and link layer of the local area network 1, various forms such as a wireless LAN compliant with IEEE802.11, Ethernet (registered trademark), and IEEE1394 can be adopted. When the Internet protocol (IP) is used as the network layer of the local area network 1, it may be IPv4 or IPv6. In addition, although devices other than the transmitting device A and the receiving device B may be connected to the local area network 1, they are omitted here for simplicity.

  Here, the content refers to digital content such as moving image data such as MPEG2 and MPEG4, audio data such as MP3, text data, and image data. Here, for simplicity of explanation, transmission of digital content (hereinafter simply referred to as content) to be transmitted with copyright protection will be described.

  Consider a case in which content is transmitted from the transmitting apparatus A to the receiving apparatuses B, C, and D. At this time, what should be noted is the copyright of the content. As described above, the range in which the content is exchanged is limited to a certain range, for example, within the range of legitimate authority such as the range of private use of copyright Article 30 or within a narrower range. For example, it is desirable not to allow other people to exchange content beyond that range.

  That is, the transmission / reception of content is permitted from the transmission device A owned by Mr. X to the reception devices B and C, but the content is not transmitted to the reception device D having a different owner. As a method of limiting the distribution range to a certain distribution, in this embodiment, a procedure of “registration” is provided in advance between the transmission device and the reception device, and each other device, one device, or the third device. Register the ID of. A mechanism is introduced in which content transmission and decryption of encrypted content are not permitted between devices that are not registered.

  FIG. 2 is a block diagram illustrating an example of the internal configuration of the transmission apparatus A. As shown in FIG. 2, the transmitting apparatus A includes a network interface unit 1, a packet processing unit 2, an authentication / key exchange processing unit 3, a short-range wireless interface unit 4, and a short-range wireless authentication / key exchange processing unit. 5, a short distance ID list management unit 6, a short distance unique ID management unit 7, a short distance wireless encryption processing unit 8, a short distance ID registration determination processing unit 9, an encryption processing unit 10, and a content supply unit 11. And have.

  The network interface unit 1 executes physical layer processing and data link layer processing for communicating with the receiving device B. The packet processing unit 2 performs network layer / transport layer processing for communicating with the receiving apparatus B. The authentication / key exchange processing unit 3 performs authentication / key exchange processing with the receiving device B. The short-range wireless interface unit 4 executes physical layer processing and data link layer processing with the short-range wireless device E. The short-range wireless authentication / key exchange processing unit 5 performs authentication / key exchange processing with the short-range wireless E. The short distance ID list management unit 6 inputs the short distance unique ID of the receiving device B from the short distance wireless interface unit 4 and stores it in the short distance ID list, or based on a request from the short distance ID registration determination processing unit 9. Output a short-range ID list. The short-range unique ID management unit 7 stores a short-range unique ID, which is an ID unique to the short-range radio of the transmission device A, and outputs it via the short-range radio interface unit 4 and the network interface unit 1. The short-range wireless encryption processing unit 8 encrypts / decrypts the short-range unique ID and the short-range ID list using a key obtained as a result of the short-range wireless authentication / key exchange process. The short distance ID registration determination processing unit 9 determines whether or not the short distance unique ID of the receiving device B input from the network interface unit 1 is registered in the short distance ID list. The encryption processing unit 10 encrypts the content to be transmitted. The content supply unit 11 accumulates content and supplies it to the packet processing unit.

  In the following example, it is assumed that information processed by the packet processing unit 2 is transmitted by the Internet protocol, and short-range radio is assumed to be radio used for, for example, infrared rays or a radio tag (RF tag). To do. Here, the term short-range radio is used, but it is not limited to radio. What is important here is that information processed by the network interface unit 1 is performed in a logical address space, and is not limited to a physical range. On the other hand, the short-range wireless interface unit 4 is such that information exchanged is limited to a physical range such as infrared rays, wireless tags, IC cards and magnetic cards (not wireless).

  FIG. 3 is a block diagram showing an example of the internal configuration of the receiving apparatus B. As shown in FIG. 3, the receiving apparatus B includes a network interface unit 21, a packet processing unit 22, an authentication / key exchange processing unit 23, a short-range wireless interface unit 24, and a short-range wireless authentication / key exchange processing unit. 25, a short-distance ID list management unit 26, a short-distance unique ID management unit 27, a short-range wireless encryption processing unit 28, a short-range ID registration determination processing unit 29, an encryption processing unit 30, and a content processing unit 31 And have.

  The network interface unit 21 performs physical layer processing and data link processing for communicating with the transmission apparatus A. The packet processing unit 22 performs network layer / transport layer processing for communicating with the transmission apparatus A. The authentication / key exchange processing unit 23 performs authentication / key exchange processing with the transmission apparatus A. The short-range wireless interface unit 24 executes physical layer processing and data link layer processing with the short-range wireless device E. The short-range wireless authentication / key exchange processing unit 25 performs authentication / key exchange processing with the short-range wireless E. The short distance ID list management unit 26 inputs the short distance unique ID of the transmission device A from the short distance wireless interface unit 24 and accumulates it in the short distance ID list, or based on the request of the short distance ID registration determination processing unit 29, Output a short-range ID list. The short-range unique ID management unit 27 stores the short-range unique ID of the receiving device B and outputs the short-range unique ID via the short-range wireless interface unit 24 or the network interface unit 21. The short-range wireless encryption processing unit 28 encrypts / decrypts the short-range unique ID and the short-range ID list using a key obtained as a result of the short-range wireless authentication / key exchange process. The short distance ID registration determination processing unit 29 determines whether or not the short distance unique ID of the transmission apparatus A input from the network interface unit 21 is registered in the short distance ID list. In the encryption processing unit 30, the receiving device B decrypts the received content. The content processing unit 31 performs processing for outputting or storing received content to a display device or the like.

  These network interface unit 21, packet processing unit 22, authentication / key exchange processing unit 23, short-range wireless interface unit 24, short-range wireless authentication / key exchange processing unit 25, short-range ID list management unit 26, short-range unique The ID management unit 27, the short-range wireless encryption processing unit 28, and the short-range ID registration determination processing unit 29 may be the same as those of the transmission apparatus A.

  The short distance ID list management unit 26 receives the short distance unique ID from the communication partner only when the short distance wireless authentication / key exchange processing unit 25 authenticates the communication partner as a legitimate device. It has a function to add the short distance unique ID to the ID list.

  FIG. 4 is a diagram showing an example of the short distance ID list stored in the short distance ID list management units 6 and 26. The short distance ID list is composed of required items and optional items. The required items include the short-range unique ID of the other communication device (sending device A or receiving device B), and the optional items include the registration date and time registered in the short-range ID list and the short MAC address of the network interface unit. Contains distance specific information.

  It is assumed that a finite number (for example, N) of short distance unique IDs can be recorded in the short distance ID list. That is, the short distance ID list management units 6 and 26 have a nonvolatile storage area for storing the short distance ID list.

  The short distance ID list management units 6 and 26 add the short distance unique ID to the short distance ID list after receiving the short distance wireless unique ID from the communication partner, but the short distance wireless unique ID is already in the short distance ID list. If it exists, do nothing. If there is a registration date / time as an option item, this date / time may be updated. If N short-distance unique IDs have already been recorded, the addition of a new short-distance ID list is refused, or if there is a registration date and time as an optional item, the shortest unique ID of the oldest registration date and time After deleting the ID, a message prompting the user to select which short-distance unique ID should be added or which short-distance unique ID should be deleted may be displayed, and any short-distance unique ID may be deleted.

  Here, the authentication / key exchange processing means that the device has a license and a certificate issued during the license period, correctly licensed from a licensing institution having a transmitting device, a receiving device, and a short-range wireless device. This refers to the process of generating a common key when mutually authenticating and confirming that the device is a legitimate device. Note that it is desirable that the short-range unique ID provided in the transmission device A or the reception device B has a unique ID according to the license.

  As a certification method, a well-known method such as ISO / IEC 9798-3 or ISO / IEC 9798-2 may be used. The cryptographic processing units 10 and 30 and the short-range wireless cryptographic processing units 8 and 28 have a function of encrypting content, a short-range ID list or a short-range unique ID using a key shared by the authentication process. A well-known method such as AES may be used as an encryption algorithm for encrypting and decrypting data.

  FIG. 5 is a block diagram showing an example of the internal configuration of the short-range wireless device E. As shown in FIG. 5, the short-range wireless device E includes a short-range wireless interface unit 41, a short-range wireless authentication / key exchange processing unit 42, a short-range wireless device ID list management unit 43, and a short-range wireless encryption process. Part 44.

  The short-range wireless interface unit 41 executes physical layer processing and data link layer processing for communicating with the transmission device A and the reception device B by short-range wireless communication. The short-range wireless authentication / key exchange processing unit 42 performs authentication / key exchange processing with the transmitting device A and the receiving device B. The short-range wireless device ID list management unit 43 inputs the short-range unique IDs of the transmitting device A and the receiving device B from the short-range wireless interface unit 41 and accumulates a finite number of short-range unique IDs in the short-range ID list. , Or output the accumulated short-range ID list. The short-range wireless encryption processing unit 44 encrypts / decrypts the short-range unique ID and the short-range ID list using the key obtained as a result of the short-range wireless authentication / key exchange process. That is, the short-range wireless device ID list management unit 43 has a nonvolatile storage area for storing the short-range ID list.

  6 and 7 are sequence diagrams illustrating an example of a processing procedure of a short-range unique ID registration process (hereinafter referred to as an ID registration process) performed between the transmission device A, the reception device B, and the short-range wireless device E. It is. In the ID registration process shown in FIGS. 6 and 7, the transmitting device A or the receiving device B registers the mutual ID or the ID of one device with the other device via the short-range wireless device E.

  FIG. 6 shows a processing procedure for registering the short-range unique ID of the receiving device B in the short-range ID list of the short-range wireless device E. First, the receiving device B transmits a short-distance ID registration request to the short-range wireless device E (step S1). Based on this request, the short-range wireless device E and the receiving device B perform authentication processing and key exchange processing as to whether or not they are valid devices (step S2).

  If the authentication fails, a predetermined error process is performed and the subsequent processes are not performed. If the authentication is successful (steps S3 and S4), the short-range wireless device E transmits a list of short-range unique IDs registered in the short-range ID list to the receiving device B (step S5). At this time, it is desirable to attach a signature so that the list of short-range unique IDs is not altered on the communication path, or to encrypt and transmit using a key shared by authentication / key exchange processing. If no short-range unique ID is registered in the short-range ID list of the short-range wireless device E, a message to that effect may be transmitted to the receiving device B.

  When receiving the short distance unique ID list, the receiving apparatus B adds the contents to the short distance ID list in the receiving apparatus (step S6). If the short-range unique ID list already exists in the short-distance ID list, an overwrite process may be performed instead of an additional process.

  Thereafter, the receiving device B transmits the short-range unique ID stored in its own device to the short-range wireless device E (step S7). At this time, it is desirable to attach a signature so that the short-range unique ID is not altered, or to encrypt and transmit using a key shared by authentication / key exchange processing.

  When the short-range wireless device E receives the short-range unique ID of the receiving device B, the short-range wireless device E adds the content to the short-range ID list in the short-range wireless device E (step S8). At this time, if the short-distance unique ID is already registered in the short-distance ID list, the overwriting process may be performed instead of the additional process.

  Note that the series of processing is performed by short-range radio using the short-range radio interface unit 41 provided in the transmission device A, the reception device B, and the short-range radio device E. At this time, in order to confirm that the short-range radio is used, the round trip response time is measured between the transmission device A or the reception device B and the short-range radio device E, and only when it is below a certain upper threshold. A series of processes shown in FIG. 6 may be performed.

  Through the above processing, the receiving device B can receive the list of short-range unique IDs stored in the short-range wireless device E, and the short-range wireless device E can receive the short-range unique ID of the receiving device B. it can.

  FIG. 7 shows a processing procedure for registering the short-range unique ID of the transmission device A in the short-range ID list of the short-range wireless device E. In this example, it is assumed that the process of FIG. 7 is performed after the process of FIG.

  First, the transmitting apparatus A transmits a short distance ID registration request to the short distance wireless apparatus E (step S11). Based on this request, the short-range wireless device E and the transmitting device A perform an authentication process and a key exchange process as to whether or not they are legitimate devices (step S12). If the authentication fails, a predetermined error process is performed and the subsequent processes are not performed. If the authentication is successful (steps S13 and S14), the short-range wireless device E transmits a list of short-range IDs registered in the short-range ID list to the transmission device A (step S15). Since the short-range unique ID of the receiving device B is registered in the short-range ID list of the short-range wireless device E in the procedure of FIG. 6 described above, the transmitting device A receives the short-range unique ID of the receiving device B. Is added to the short-distance ID list (step S16).

  When sending short-range unique IDs, it is desirable to attach a signature so that the list of short-range unique IDs is not altered, or to encrypt and use a key shared by authentication / key exchange processing. .

  Thereafter, the transmitting device A transmits the short-range unique ID of its own device to the short-range wireless device E (step S17). At this time, it is desirable to attach a signature so that the short-range unique ID is not altered, or to encrypt and transmit using a key shared by authentication / key exchange processing. When the short-range wireless device E receives the short-range unique ID of the transmission device A, the short-range wireless device E adds the content to the short-range ID list in the short-range wireless device E (step S18).

  By the above procedure, the short-range unique ID of the receiving device B is in the short-range ID list of the transmitting device A, and the short-range unique IDs of the transmitting device A and the receiving device B are in the short-range ID list of the short-range wireless device E. Become registered.

  6 shows an example in which a short-distance ID registration request is transmitted from the receiving device B to the short-range wireless device E, but conversely, the short-range ID is transmitted from the short-range wireless device E to the receiving device B. A registration request may be transmitted to initiate a short-range wireless authentication / key exchange request. Similarly, FIG. 7 shows an example in which the short-distance ID registration request is transmitted from the transmitting device A to the short-range wireless device E, but the reverse may be possible.

  When the short-range unique ID of the transmitter or receiver is recorded on the short-range wireless device E and the short-range unique ID list exceeds the recordable number, (1) the shortest registered first A method of deleting the unique distance ID and recording the newly entered short distance unique ID, (2) A method of returning an error to the transmitting device and the receiving device, and (3) A method of prompting the user to delete which short distance unique ID (4) There are methods that combine them.

  The ID registration process has been described above. Hereinafter, a content transmission process performed when transmitting and receiving AV content from the transmission device A to the reception device B will be described.

  8 and 9 are sequence diagrams illustrating an example of a processing procedure of content transmission processing performed between the transmission device A, the reception device B, and the short-range wireless device E. In the content transmission process shown in FIG. 8 and FIG. 9, the transmission device A has the ID of the reception device B prior to the transmission of the content, or conversely the reception device B has the ID of the transmission device A. If at least one of them holds it, the content transmission is permitted, and if not, the content transmission is rejected.

  FIG. 8 shows a procedure for transmitting content from the transmission device A to the reception device B when the short-distance ID of the reception device B is included in the short-distance ID list of the transmission device A. First, the receiving device B transmits a content reception request to the transmitting device A (step S21). Based on this request, the transmitting device A and the receiving device B perform authentication / key exchange processing (step S22). If the authentication / key exchange process ends normally and the key is shared between the transmitting device A and the receiving device B, the receiving device B encrypts the short-range unique ID using the shared key. Transmit (step S23).

  The transmitting apparatus A that has received the short distance unique ID of the receiving apparatus B checks whether or not the short distance unique ID is registered in the short distance ID list in the transmitting apparatus A (step S24). In this case, in the ID registration process, since the short-distance unique ID of the receiving apparatus B is registered in the short-distance ID list of the transmitting apparatus A, this check is successful, and notification that the ID check process is successful is notified. After transmitting the message to be received to the receiving apparatus B (step S25), the transmitting apparatus A starts content transmission (step S26).

  9 differs from FIG. 8 in that the short-range unique ID of the receiving device B is not included in the short-range ID list of the transmitting device A, but conversely, the short-range unique ID of the transmitting device A is The processing procedure when included in the short-distance ID list is shown. The processing procedure of FIG. 9 is the case where the ID registration processing procedures of FIGS. 6 and 7 are reversed, that is, the short-range unique ID of the transmission device A is transmitted to the short-range radio device E, and then the short-range radio device E This corresponds to the case where the short-range unique ID of the receiving apparatus B is transmitted.

  After receiving apparatus B makes a content reception request to transmitting apparatus A (step S31), transmitting apparatus A and receiving apparatus B perform authentication / key exchange processing (step S32), and transmitting apparatus A is short distance from receiving apparatus B. The unique ID is received (step S33). The processing so far may be the same processing as in FIG.

  After that, the transmitting apparatus A that has received the short distance unique ID from the receiving apparatus B checks whether or not the short distance unique ID is registered in the short distance ID list (step S34). In this case, since the short distance unique ID of the receiving apparatus B is not registered in the short distance ID list of the transmitting apparatus A, the check process fails. Next, the transmitting apparatus A notifies the receiving apparatus B that the ID check has failed (step S35), and the short-range unique ID is encrypted and transmitted (step S36).

  The receiving device B that has received the short-range unique ID of the transmitting device A checks whether the short-range unique ID exists in the short-range ID list (step S37). This time, it is assumed that the short-distance unique ID of the transmitting apparatus A is registered in the receiving apparatus B in advance in the ID registration process. Therefore, this checking process is successful, and the receiving apparatus B performs the ID checking process. Is transmitted to the receiving device A (step S38), the transmitting device A starts content transmission (step S39).

  Note that the series of processing in the content transmission processing is performed by the same interface used for content transmission / reception.

  Through the above procedure, in the content transmission process, it was confirmed that the transmission device A has the short-distance unique ID of the reception device B or the reception device B has the short-distance unique ID of the transmission device A. After that, it is possible to realize transmission of content.

  In this example, a short-distance authentication / key exchange process and an authentication / key exchange process are performed following the content reception request. However, an authentication / key exchange process and an ID check process are performed prior to the content reception request. May be.

  In this example, a combination of ID check processing and authentication / key exchange processing is used, such as secure transmission / reception by encrypting a short-range unique ID using a key shared in authentication / key exchange processing. However, a second authentication / key exchange process separate from the authentication / key exchange process is performed, and the short-range unique ID is secured using the second key shared in the second authentication / key exchange process. It is also possible to take a method of transmitting to

(Modification 1 of the first embodiment)
In the ID registration process described above, after the transmitting device A and the receiving device B perform authentication / key exchange with the short-range wireless device E, both the short-range unique ID and the device unique ID may be transmitted. Note that when transmitting both the short-range unique ID and the device-specific ID, the device-specific ID does not necessarily have to be kept secret, but the short-range unique ID is in a state that can be altered or eavesdropped during communication. It must be transmitted securely, for example by encryption.

  Here, the device unique ID refers to a unique ID uniquely assigned to the transmission device A and the reception device B.

  10 and 11 are block diagrams showing an example of the internal configuration of the transmitting device A and the receiving device B that transmit both the short-range unique ID and the device unique ID. The transmitting apparatus A in FIG. 10 is different from the transmitting apparatus A in FIG. 2 only in that the authentication / key exchange processing unit 3a has a device unique ID. The receiving apparatus B in FIG. 3 is different from the receiving apparatus B of FIG. 3 only in that the processing unit 23a has a device unique ID.

  The device unique ID is a certificate that proves that the transmitting device A and the receiving device B have a public key with a valid license when the public key method is applied to authentication / key exchange processing of content transmission processing. It may be an included value.

  FIG. 12 is a diagram illustrating an example of a short-distance ID list held by the transmission device A, the reception device B, and the short-range wireless device E that transmit both the short-range unique ID and the device unique ID. The short distance list of FIG. 12 has a device unique ID as an essential item in addition to the list of FIG. The short-range unique ID must be stored as a secret value so that it cannot be obtained from other devices when transmitted / received from a short-range wireless device, and must be stored so that it cannot be obtained from other devices. Need not be a secret value, but may be obtained from a general-purpose interface such as a network interface unit.

  In addition, since the device unique ID may be viewable by the user, the short-range wireless device displays the value of the device unique ID in the short-range unique ID list of the currently registered transmitter or receiver. Such an interface may be provided.

  FIG. 13 is a diagram showing an example of a display panel of a short-range wireless device having a function of displaying the value of the device unique ID. The display unit 45 displays a device unique ID, a registration date and time, and device unique information. Below the display unit 45, an operation unit 46 for moving a cursor in the display unit 45 and erasing display contents is provided.

  FIG. 14 is a sequence diagram illustrating an example of a processing procedure of content transmission processing using a device unique ID. First, the receiving device B transmits a content reception request to the transmitting device A (step S41). The transmitting apparatus B transmits the device unique ID of the own device and an authentication / key exchange request (step S42). Based on the content reception request received from the receiving device B, the transmitting device A transmits the device unique ID of the own device to the transmitting device B (step S43), and from the short-distance ID list acquired in the ID registration process, A short distance unique ID corresponding to the device unique ID is searched (step S44).

  Similarly, the receiving device B searches for the short-distance unique ID corresponding to the device unique ID of the transmitting device A from the short-distance ID list acquired by the ID registration process (step S45). If either the transmitting device A or the receiving device B succeeds in this search, a message notifying that the search is successful is transmitted to the partner device. This example shows a case where the short-distance ID list of the receiving apparatus B includes the short-distance unique ID of the transmitting apparatus A, and the receiving apparatus B notifies the transmitting apparatus A that the check process has been successful. A message to be transmitted is transmitted (step S46).

  Thereafter, the transmitting device A and the receiving device B perform an authentication / key exchange process for confirming whether or not they are valid devices mutually licensed (step S47), and the short-range unique ID obtained from the search result and Then, a key for encrypting and transmitting the content using the short-range unique ID of the own device is generated (steps S48 and S49). When the authentication / key exchange and key generation are successful, the transmitting device A encrypts the content and transmits it to the receiving device B (step S50).

  When performing the above communication, it may be transmitted and received as a network layer packet such as IP (Internet Protocol), or may be transmitted and received as a data link layer frame.

(Modification 2 of the first embodiment)
In the processing of FIG. 14, signature verification is not performed, but device unique ID check and signature verification may be combined. The processing procedure in this case is as shown in FIG.

  First, the receiving device B transmits a content reception request to the transmitting device A (step S51). Based on this request, the transmitting device A and the receiving device B start an authentication / key exchange process for confirming whether or not the devices are valid licensed devices (step S52). In the authentication / key exchange process, a public key method such as ISO / IEC 9798-3 is used, and the transmitting device A and the receiving device B transmit the public key to each other. At this time, the device unique ID is also transmitted together with the public key (step S53). The signature issued by the license authority is attached to the public key, but the device unique ID is also signed.

  The transmitting device A and the receiving device B each verify the signature (steps S54 and S55), and if the signature is correct, search the short distance unique ID corresponding to the device unique ID from the short distance ID list acquired by the ID registration process ( Step S56). Thereafter, processing similar to the processing procedure of FIG. 14 is performed (steps S57 to S59), and a key for encrypting content using the short-range unique ID obtained from the search result and the short-range unique ID of the own device is used. Generate (steps S60 and S61). If the authentication / key exchange and key generation are successful, the transmitting device A encrypts the content and transmits it to the receiving device B (step S62).

  The above-mentioned device unique ID can be transmitted in plain text. FIG. 15 illustrates an example in which a device unique ID is included in a certificate. However, even if a device unique ID is wiretapped, a device having a short range unique ID corresponding to the device unique ID is not registered. Therefore, it is not possible to generate a valid key for decrypting the content. In addition, even if the device unique ID is altered during communication, the device that does not have a short-range unique ID because the short-range unique ID of the device itself is used to generate a key for encrypting content. Does not generate the same key, and the content is not decrypted illegally.

  As described above, in the first embodiment, prior to transmission / reception of content, either the transmission device A and the reception device B are short-range wireless or short-range wireless devices E, or each other is short-range unique. When the ID is shared and content is transmitted / received, it is checked whether the transmitting device A and the receiving device B share the short-range unique ID. In order to limit the range in which the short-range unique ID is transmitted to the range within which the short-range radio can physically reach, the transmission range of the content can be transmitted and received by the transmitting device A and the short-range radio device E. That the receiver B and the short-range wireless device E exist within a certain range for a certain period of time while the short-range unique ID is transmitted. It is possible to prevent the transmission apparatus A and the reception apparatus B from being connected indefinitely, and it is possible to realize use within the range of private use of contents that need to be protected for copyright.

(Second Embodiment)
In the second embodiment, a transmission apparatus A and a reception apparatus B that do not directly share a short-range unique ID can communicate with each other via an authentication bridge apparatus.

  FIG. 16 is a block diagram showing the overall configuration of the information processing system according to the second embodiment of the present invention. The information processing system of FIG. 16 includes transmission devices A and C and a reception device B that can communicate with the short-range wireless device X. The transmission devices A and C are configured in the same manner as in FIG. 2, for example, the reception device B is configured in the same manner as in FIG. 3, and the short-range wireless device X is configured in the same manner as in FIG. The short-range unique ID values of the transmitting devices A and C are A and C, respectively, and the short-range unique ID value of the receiving device B is B.

  Assume that nothing is registered in the short-range ID list of the short-range wireless device X as an initial state. First, the short-range wireless device X performs ID registration processing in the order of the transmission device A, the reception device B, and the transmission device C. As a result, the short-range unique ID of the transmission device A is registered in the short-range ID list of the reception device B, and the short-range IDs of the transmission device A and the reception device B are registered in the short-range ID list of the transmission device C. Furthermore, the short-range unique IDs of the transmission device A, the reception device B, and the transmission device C are registered in the short-range ID list of the short-range wireless device X. That is, the transmitting apparatus A is in a state in which content can be transmitted to the receiving apparatus B and the transmitting apparatus C. The above state is shown in FIG.

  In this state, as shown in FIG. 17, ID registration processing is performed in the order of the reception device D and the transmission device C using the short-range wireless Y. As a result, the short distance unique ID of the receiving apparatus D is registered in the short distance ID list of the transmitting apparatus C in addition to the short distance unique IDs of the transmitting apparatus A and the receiving apparatus B registered so far. In addition, the short-range unique IDs of the receiving device D and the transmitting device C are registered in the short-range ID list of the short-range wireless device X. The state up to this point is shown in FIG.

  In the state of FIG. 17, the receiving device D is in a state in which content can be transmitted from the transmitting device C, but the short-range unique ID value of the receiving device D is not registered in the short-distance ID list of the transmitting device A. In addition, since the short-distance unique ID of the transmitting device A is not registered in the short-distance ID list of the receiving device D, the ID check process of the content transmission process fails, and the content is transmitted from the transmitting device A to the receiving device D. Transmission is not possible.

  From the standpoint of the user who performs ID registration processing, it is necessary to perform ID registration processing with all devices using the short-range wireless device X, and ID registration processing can be performed with a short-range wireless device other than the short-range wireless device X. Even if the process is performed, an appropriate grouping is not formed. This indicates that the user himself / herself needs to remember which short-range wireless device he / she has performed ID registration processing on. That is, the problem here is that the device cannot communicate with the short-range wireless device due to the order of registration even though it exists within a certain physical range with the short-range wireless device.

  Therefore, in the second embodiment, the transmitting device A and the receiving device B that do not directly share the short-range unique ID communicate with each other through the devices having the short-range unique IDs of both the transmitting device A and the receiving device B. Realize a technique that can be used. This makes it possible to manage which devices share the short-range unique ID with which devices and are in a communicable state between devices, and automatically search for routes without user intervention. Convenience can be improved.

  FIG. 18 is a block diagram showing an example of the internal configuration of the bridge device. The bridge device may be a transmission device or a reception device, or may be a relay device that performs only authentication processing between the transmission device and the reception device as a bridge device. Hereinafter, for the sake of simplicity, only functions necessary as a relay device will be described.

  18 includes a network interface unit 51, a packet processing unit 52, an authentication / key exchange processing unit 53, a short-range wireless interface unit 54, a short-range wireless authentication / key exchange processing unit 55, a short-range It has an ID list management unit 56, a short-range unique ID management unit 57, a short-range wireless encryption processing unit 58, a short-range ID registration determination processing unit 59, a proxy ID check processing unit 60, and an encryption processing unit 61. . Except for the point that the proxy ID check processing unit 60 is provided, the configuration is almost the same as the transmission device A in FIG. 10 and the reception device B in FIG. 11.

  The proxy ID check processing unit 60 performs a search process to check whether the device unique IDs of both the transmission device and the reception device input from the network interface unit 51 are registered in the short distance ID list. Only if both are registered, continue processing and allow authentication / key exchange processing. If one or both are not registered, refuse authentication / key exchange processing and handle errors. I do.

  FIG. 19 is a sequence diagram illustrating a processing procedure of content transmission processing in which a transmission device and a reception device communicate via a bridge device. Here, an example is assumed in which the bridge device, the transmission device, and the reception device possess both the device unique ID and the short-range unique ID. That is, it is assumed that each device has a built-in short-distance ID list as shown in FIG. In the ID registration process, each device receives both the device unique ID and the short range unique ID from the short range wireless device, and adds them to the short range ID list. In the content transmission process, it is assumed that a check process is performed to check whether or not the ID of a device to be communicated is registered by the method shown in FIGS.

  The transmission device, the reception device, and the bridge device in FIG. 19 correspond to the transmission device A, the reception device D, and the transmission device C in FIG. That is, it is assumed that the transmission device C has the device unique IDs of the transmission device A and the reception device D in the short-distance ID list, and the transmission device A and the reception device D do not have both device unique IDs.

  In the following communication processing, packets may be transmitted / received as network layer packets such as IP (Internet Protocol) or data link layer frames such as Ethernet. Here, the description will be made assuming that IP is used.

  First, the receiving device transmits a content reception request to the transmitting device (step S71), and then transmits an authentication / key exchange request and a device unique ID (step S72). When the transmitting device receives them, it transmits the device unique ID of its own device to the receiving device (step S73). Each of the transmission device and the reception device performs a search process to determine whether the received device unique ID is registered in the short distance ID list (steps S74 and S75). In this case, since the transmitting device and the receiving device do not have both device unique IDs, this search process fails (steps S76 to S78).

  Next, the receiving device searches for a bridge device having the device unique ID of the transmitting device to be communicated (step S79). If the search is successful, a proxy ID check request request, the device unique ID of the own device, and the address of the transmitting device that is the communication target of content transmission / reception are transmitted to the bridge device (step S80). This proxy ID check request request is a message for requesting the bridge device having the device unique IDs of both the transmission device and the reception device to perform ID check processing with the transmission device and return the result. Further, in this case, the address of the transmitting device means the IP address of the transmitting device.

  The bridge device that has received this proxy ID check request request transmits the device unique ID of its own device to the receiving device (step S81), and each of the bridge device and the receiving device registers the received device unique ID in the short distance ID list. A search process is performed to determine whether or not there is any (steps S82 and S83). Since the transmitting device C, which is a bridge device, has the device unique ID of the receiving device D in the short-range ID list, the ID check process is successful (step S84), a message that informs the receiving device of this, and a proxy ID A message indicating that the check request request has been accepted is transmitted to the receiving apparatus (step S85).

  If the bridge device approves the proxy ID check processing request, the bridge device transmits the proxy ID check request and the device unique ID of the device itself (step S86). The transmitting device that has received the proxy ID check request transmits the device unique ID of its own device to the bridge device (step S87).

  Thereafter, the transmission device and the bridge device each perform a search process to determine whether or not the received device unique ID is registered in the short distance ID list (steps S88 and S89). In this case, since the bridge device has the device unique ID of the transmission device in the short-range ID list, the search process is successful (step S90), and the bridge device notifies the transmission device of success. Further, thereafter, the bridge device and the transmission device perform authentication / key exchange processing (step S91). At this time, both short-range unique ID values are used for key generation. Using this key, the short distance unique ID of the receiving apparatus is transmitted (step S92).

  The bridge device notifies the receiving device that the proxy ID check processing with the transmitting device has been successful (step S93), and performs authentication / key exchange processing (step S94). At this time, the short-range unique ID values of both the bridge device and the receiving device are used for key generation. The short distance unique ID of the transmission device is transmitted using this key (step S95).

  Through the above procedure, both the transmission device and the reception device can acquire the short-range unique ID. Thereafter, the transmitting device and the receiving device perform authentication / key exchange processing for confirming whether or not they are legitimate licensed devices (step S96), and encrypt the contents using both short-range unique IDs. The key for generating is generated (steps S97 and S98). Thereafter, the content encrypted using this key is transmitted from the transmission device to the reception device (step S99).

  Note that the authentication and key exchange processing between the bridge device and the receiving device does not necessarily have to be performed after the authentication and key exchange processing between the transmitting device and the bridge device is completed, and that the proxy ID check request between the bridge device and the receiving device has been accepted. You may make it carry out after the message to notify.

(Modification 1 of 2nd Embodiment)
In the processing of FIG. 19 and FIG. 20, an example in which the short-range unique ID of the transmission device and the reception device is used to generate a key for encrypting the content has been shown. Good. The processing procedure in this case is as shown in FIG. The sequence diagram of FIG. 21 is executed after steps S71 to S84 of FIG. Processing up to the authentication / key exchange processing (steps S107 and S109) is the same as that in FIG.

  In FIG. 20, the bridge device transmits the short-range unique ID of the transmission device to the reception device and the short-range unique ID of the reception device to the transmission device. In FIG. 21, the short-distance unique ID of the bridge device itself is received by the reception device. (Step S110).

  Through the above processing, the transmission device and the reception device each have the short-distance unique ID of the bridge device. Thereafter, the transmission device and the reception device perform authentication / key exchange processing for confirming whether or not the devices are valid licensed devices (step S111). A key for encrypting the content is generated using the short-range unique ID of the bridge device (steps S112 and S113).

(Modification 2 of the second embodiment)
If bridge device X does not have the device unique ID of the transmitting device requested by the receiving device in its own short-range ID list, proxy ID check for other bridge device Y having the device unique ID of the transmitting device You may send a request. In this case, the bridge device X performs the same operation as the reception device in FIGS. 20 and 21, the bridge device Y performs the same operation as the bridge device X, and finally the transmission device and the reception device have both short-distance unique IDs. Can be used to generate a key for encrypting the content.

  FIG. 22 is a sequence diagram illustrating an example of a processing procedure when two bridge devices X and Y relay between a transmission device and a reception device. In FIG. 22, in order to simplify the description, the processes in FIGS. 20 and 21 are simplified. The receiving device transmits a proxy ID check request and the device unique ID of the receiving device to the bridge device X (steps S121 and S122).

  In this example, since the bridge device X does not have the device unique ID of the transmission device in the short-distance ID list, it cannot send a proxy ID check request to the transmission device. Therefore, a proxy ID check request is transmitted to the bridge device Y having the device unique ID of the transmission device (steps S123 and S124).

  Since the bridge device Y has the device unique ID of the transmission device, it transmits a proxy ID check request and the device unique ID of the bridge device Y to the transmission device (steps S125 and S126). The ID check process between the transmission device and the bridge device Y is successful (steps S127 and S128). Thereafter, the bridge device Y encrypts the short-range unique ID of the receiving device and transmits it to the transmitting device (steps S129 and S130), and further encrypts and transmits the short-range unique ID of the transmitting device to the bridge device X. (Step S131). The bridge device X that has received the short-range unique ID of the transmitting device transmits the short-range unique ID of the transmitting device to the receiving device (step S132).

  Thereby, since the transmission device and the reception device share the short-range unique ID with each other, it is possible to generate a key for encrypting the content using these values (steps S133 to S135).

  Note that the following method is conceivable as a procedure for searching for a bridge device having the device unique ID of the transmission device to be communicated with by the reception device in step S121 in FIG. (1) A method to search for bridge devices in the same subnet using a broadcast IP address, (2) A method to send a search request to devices registered in the short-range ID list of its own device, (3) Device-specific There is a method in which each device holds an ID relationship table, or a method that combines (1), (2), and (3).

  In the method (1) for searching for a bridge device using a broadcast IP address, a proxy ID check request message is transmitted using the broadcast IP address. When another device in the same subnet receives this message, it searches whether the device unique ID of the transmission device of the search request is included in the short-range ID list in its own device. If so, this is notified to the receiving device that is the message sender of the proxy ID check request. If it is not included and the device belongs to another subnet, a proxy ID check request is further transmitted to the other subnet as a proxy. In this case, in order to prevent the proxy ID check request message from looping, the number of requests across subnets may be limited.

  Since the broadcast address is an address that is valid only within the subnet, according to this method, the search range can be limited to the subnet.

  In the method (2) of transmitting a search request to a device registered in the short-distance ID list of the own device, a proxy ID check request is transmitted only to a device registered in the short-distance ID list.

  The method of possessing the device unique ID relationship table (3) by each device will be described below. In the case of this method, each device has a table (hereinafter referred to as a device unique ID relation table) indicating the possession status of the device unique ID as shown in FIG. This table indicates that a device whose device unique ID is AA possesses device unique IDs XX and BB in the short-range ID list.

  That is, the device with the device unique ID AA means that the ID check process with the devices with the device unique IDs XX and BB succeeds. Similarly, a device with device unique ID XX means that the ID check process with device unique ID ZZ succeeds.

  FIG. 24 is a diagram showing a short distance unique ID and a short distance ID list which each device has. If the receiving device Y (the device unique ID is YY and the device unique ID AA is registered in the short-distance ID list) possesses the table shown in FIG. 23, the receiving device Y communicates with the transmitting device Z. In order to perform the above, it is understood that the ID check process may be performed via the transmitting device A and the transmitting device X as a bridge device.

  FIG. 25 is a block diagram showing an example of the internal configuration of the transmitting apparatus A having the device unique ID relationship table, and FIG. 26 is a block diagram showing an example of the internal configuration of the receiving apparatus Y having the device unique ID relationship table.

  25 has an ID search unit 12 in addition to the configuration of FIG. 10, and a device unique ID relation table 13 is provided inside the ID detection unit 12. 26 has an ID search unit 31 in addition to the configuration of FIG. 11, and a device unique ID relation table is provided inside the ID search unit 31. When the ID search units 12 and 31 acquire the device unique ID relationship table from the short-range wireless interfaces 4 and 24 or the network interface units 1 and 21 and communicate with the communication partner, which bridge device should be used for communication? Has the role of searching for communication paths.

  This is particularly useful when the receiving device needs to perform ID check processing via the transmitting device and the bridge device, and the device unique ID of the bridge device is registered on the transmitting device side instead of the bridge device. is there. The reason is as follows.

  In FIG. 24, the receiving apparatus Y can communicate with the transmitting apparatus B by regarding the transmitting apparatus A as a bridge apparatus. This is because the receiving apparatus Y has the unique ID of the transmitting apparatus A, and the transmitting apparatus B has the unique ID of the transmitting apparatus A.

  Here, it is assumed that the reception device Y transmits a proxy ID check request message to the transmission device A (in this case, the bridge device). Since the transmitting device A does not have the device unique ID of the transmitting device B, the search process for not having the ID of the transmitting device B in the transmitting device A fails depending on the configuration of the device. The proxy ID check request may not be sent to the server. However, if it is known in advance that the receiving device Y can communicate with the transmitting device B via the transmitting device A, the transmitting device A explicitly indicates this to the transmitting device A, so that the transmitting device A transmits the transmitting device B. Can be sent a proxy ID check request.

  The important point here is that the device unique ID does not need to be kept secret, so it is not necessary to keep secret information indicating which device and which device share each other's device unique ID. is there. By searching the device unique ID relation table, each device can know which device should make a proxy ID check request in order to connect to the communication partner device. The device unique ID relationship table may be distributed by short-range wireless devices, stored in an arbitrary server on the network (for example, a server installed in a home network), and acquired by each device at an arbitrary timing. You may do it.

(Modification 3 of the second embodiment)
FIG. 27 is a diagram for explaining a unique ID registration method different from that of the first embodiment. In FIG. 27, unique IDs are allocated to the short-range radio apparatuses X and Y, and each ID and ID are registered by the receiving apparatus and the transmitting apparatus in the ID registration process. In the content transmission process, a check process is performed to check whether the registered unique IDs match.

  FIG. 28 is a block diagram showing an example of the internal configuration of the short-range radio apparatuses X and Y in the registration method shown in FIG. The short-range wireless devices X and Y differ from FIG. 5 in that they have a short-range wireless device unique ID and a short-range wireless device unique public ID instead of having a short-range ID list. The short-range wireless device unique ID and the short-range wireless device unique public ID are non-rewritable values unique to the short-range wireless device. In particular, it is desirable that the short-range wireless device unique ID should not be illegally obtained from other devices. The short-range wireless device unique ID and the short-range wireless device unique public ID are managed by the short-range wireless ID list management unit 43 in FIG.

  FIG. 29 is a block diagram showing an example of the internal configuration of the transmitting apparatus A in the registration method shown in FIG. The transmission apparatus A in FIG. 10 is different from the transmission apparatus A in FIG. 10 in that it does not have an ID unique to the transmission apparatus such as a short-distance unique ID or a unique ID, and the short-distance unique ID management unit 7 in FIG.

  FIG. 30 is a block diagram showing an example of the internal configuration of the receiving apparatus B in the registration method shown in FIG. 11 is different from the receiving apparatus B in FIG. 11 in that it does not have an ID unique to the receiving apparatus such as a short-distance unique ID or a unique ID. The short-distance unique ID management unit 27 in FIG.

  FIG. 31 is a sequence diagram showing an example of the procedure of the ID registration process in the ID registration method shown in FIG. First, the transmitting device A transmits a short-range wireless device unique ID registration request to the short-range wireless device X (step S141). Based on this request, the transmitting device A and the short-range wireless device X perform an authentication process and a key exchange process as to whether or not they are mutually valid devices (step S142).

  If the authentication fails, a predetermined error process is performed and the subsequent processes are not performed. When the authentication is successful (steps S143 and S144), the short-range wireless device X transmits the short-range wireless device unique ID and the short-range wireless device-unique public ID provided in its own device to the transmitting device A (step S145). ). The transmitting device A that has received the short-range wireless device unique ID and the short-range wireless device unique public ID adds this to the short-range ID list (step S146). Note that it is desirable to save this short-range ID list so that it cannot be rewritten illegally.

  In FIG. 31, an example in which the short-range wireless device unique ID registration request is transmitted from the transmission device A to the short-range wireless device X is shown. The wireless device unique ID registration request may be transmitted to start the authentication / key exchange process. Note that the series of processing is performed by short-range radio using the short-range radio interface unit 41 provided in the transmission device A, the reception device B, and the short-range radio device X.

  The processing procedure for registering the short-range wireless device unique ID in the transmission device has been described above, but the same processing procedure may be performed for the reception device. In FIG. 27, the short-range radio device unique public ID “x” and the short-range radio device unique ID “xx” corresponding to the short-range radio device X in accordance with these procedures are the transmission device A, the reception device B, and the transmission device C. And the short-range wireless device unique public ID “yy” of the short-range wireless device Y and the corresponding short-range wireless device unique ID “y” are registered in the transmitting device C and the receiving device D. ing.

  In this situation, the IDs registered in the short-range ID list do not match between the transmitting device A, the receiving device B, and the receiving device D, and content transmission cannot be performed. In order to solve this problem, the transmission apparatus C in which the values of both the short-range radio apparatuses X and Y are registered is regarded as a bridge apparatus, and the same system as described in the second embodiment is applied. Thus, communication between the transmission device A and the reception device D and the reception device C and the reception device D becomes possible. The processing procedure will be described below.

  32 and 33 are sequence diagrams showing the processing procedure of AV communication processing in which the transmitting device and the receiving device communicate with each other via the bridge device in the state shown in FIG. In the following communication processing, packets may be transmitted / received as network layer packets such as IP (Internet Protocol) or data link layer frames such as Ethernet. Here, the description will be made assuming that IP is used.

  First, the reception device transmits a content reception request to the transmission device (step S151), and then continues to authenticate and exchange the short-range wireless device unique public ID “y” of the short-range wireless device Y registered in the reception device. "Is transmitted (step S152). Upon receiving them, the transmission device performs a search process to determine whether or not the short-range wireless device unique public ID “y” is registered in the short-range ID list in the transmission device (step S153). In this case, the ID registration processing is not performed by the short-range wireless device Y in the transmission device, and the short-range wireless device unique public ID “y” is not registered in the short-range ID list, so this search processing fails. (Steps S154 and S155).

  Next, the receiving device searches for a bridge device having the short-range wireless device specific public ID of the transmitting device to be communicated (step S156). When the search is successful, a proxy ID check request request to the bridge device, the short-range wireless device unique public ID “y” registered in the short-range ID list of the own device, and a transmission device that is a communication target of content transmission / reception Is sent (step S157). This proxy ID check request request is a message for requesting the bridge device with the short-range wireless device specific public ID of both the transmission device and the reception device to perform ID check processing with the transmission device and return the result. It is. Further, in this case, the address of the transmitting device means the IP address of the transmitting device.

  The bridge device that has received this proxy ID check request request performs a search process to determine whether or not the received short-range wireless device unique public ID “y” is registered in the short-range ID list (step S158). Since the transmitting device C, which is a bridge device, has the short-range wireless device unique public ID “y” of the short-range wireless device X in the short-range ID list, the ID check process is successful (step S159). The receiving apparatus performs an authentication process for confirming whether or not the devices are mutually licensed (step S160). If the authentication process is successful, the bridge device transmits a message notifying that the proxy ID check request request has been accepted to the receiving device (step S161).

  The bridge device requests the transmission device for a proxy ID check, and transmits the short-range wireless device unique public ID (step S162). The transmission device performs a search process to determine whether or not the short-range wireless device unique public ID “x” received from the bridge device is registered in the short-range ID list (step S163). In this case, since the transmission device performs registration processing using the short-range wireless device X, the short-range wireless device unique public ID “x” is included in the short-range ID list, so the search processing is successful, and the bridge device Is notified of the success of the search process (step S164). Further, after that, the bridge device and the transmission device perform authentication / key exchange processing (step S165). When the authentication is successful, the bridge device encrypts the transmission device with the short-range wireless device unique ID “xx”. The short-range wireless device unique ID “yy” is transmitted (step S166). Thereafter, the bridge device notifies the receiving device that the proxy ID check process with the transmitting device has been successful (step S167).

  Through the above procedure, the transmission device and the reception device can share the common short-range wireless device unique ID “yy”. Thereafter, the transmitting device and the receiving device perform authentication / key exchange processing for confirming whether or not the devices are valid licensed devices (step S168), and use the short-range wireless device unique ID “yy”. Then, a key for encrypting the content is generated (steps S169 and S170). Thereafter, the content encrypted using this key is transmitted from the transmission device to the reception device (step S171).

  As described above, in the second embodiment, even when devices are registered using different short-range wireless devices in the ID registration process, both the transmitting device and the receiving device that do not have the device-specific IDs By using a bridge device having a device unique ID, content transmission can be performed while protecting copyright.

  This eliminates the need for the user to memorize which short-range wireless device records the unique ID of which transmitting device or receiving device when there are multiple short-range wireless devices in the home. Usability can be improved.

  Further, since the content transmission process is performed prior to the actual content transmission, the communication path used in the content transmission process and the content transmission path are not necessarily the same. This indicates that the presence of a bridge device is essential in the content transmission processing, but the bridge device is not necessary during the transmission of AV content. Further, since the bridge device is not involved in the content transmission / reception itself, for example, it is not necessary to perform a process of re-encrypting the content in the bridge device, and the configuration of the bridge device can be facilitated.

  Further, the ID registration method applicable to the second embodiment is not limited to the first embodiment. In the first embodiment, a method has been described in which the short-range wireless device additionally records the unique ID of the transmitting device or the receiving device. However, the problem described here is that the devices are not appropriately grouped by the user's hand. In this case, the transmitting device and the receiving device cannot communicate with each other, and as a solution, a bridge device is used to enable communication between devices in different groups.

1 is a block diagram showing the overall configuration of a first embodiment of an information processing system according to the present invention. The block diagram which shows an example of an internal structure of the transmitter A. The block diagram which shows an example of an internal structure of the receiver B. The figure which shows an example of the short distance ID list stored in the short distance ID list management parts 6 and 26. The block diagram which shows an example of the internal structure of the short-range radio | wireless apparatus E. FIG. The figure which shows the process sequence which registers the short distance specific ID of the receiver B in the short distance ID list of the short distance wireless apparatus E. The figure which shows the process sequence which registers the short distance unique ID of the transmitter A in the short distance ID list of the short distance wireless apparatus E. The figure which shows the procedure until it transmits a content from the transmission apparatus A to the receiving apparatus B, when the short distance unique ID of the receiving apparatus B is included in the short distance ID list of the transmitting apparatus A. The figure which shows the process sequence in case the short distance specific ID of the transmitter A is contained in the short distance ID list of the receiver B. The block diagram which shows an example of an internal structure of the transmitter A which transmits both short-distance specific ID and apparatus specific ID. The block diagram which shows an example of the internal structure of the receiver B which transmits both short-distance specific ID and apparatus specific ID. The figure which shows an example of the short distance ID list | wrist which the transmitter A, the receiver B, and the short distance radio | wireless apparatus E which transmit both short distance unique ID and apparatus unique ID have. The figure which shows an example of the display panel of the short-range radio | wireless apparatus which has a function which displays the value of apparatus specific ID. The sequence diagram which shows an example of the process sequence of the content transmission process using apparatus specific ID. The sequence diagram which shows the process sequence in the case of performing combining a check of apparatus unique ID, and verification of a signature. The block diagram which shows the whole structure of 2nd Embodiment of the information processing system which concerns on this invention. The figure which shows the example which performs ID registration processing in order of the receiver D and the transmitter C using the short-distance wireless Y. The block diagram which shows an example of an internal structure of a bridge | bridging apparatus. The sequence diagram which shows the process sequence of the content transmission process which a transmission apparatus and a receiving apparatus communicate via a bridge device. The sequence diagram following FIG. The sequence diagram which shows the modification of FIG. The sequence diagram which shows an example of the process sequence in case two bridge | bridging apparatuses X and Y relay between a transmitter and a receiver. The figure which shows an apparatus specific ID relationship table. The figure which shows the short distance specific ID and short distance ID list which each apparatus has. The block diagram which shows an example of an internal structure of the transmitter A which has an apparatus specific ID relationship table. The block diagram which shows an example of the internal structure of the receiver Y which has an apparatus specific ID relationship table. The figure explaining the unique ID registration method different from 1st Embodiment. FIG. 28 is a block diagram showing an example of the internal configuration of the short-range wireless devices X and Y in the registration method shown in FIG. FIG. 28 is a block diagram showing an example of an internal configuration of a transmission apparatus A in the registration method shown in FIG. The block diagram which shows an example of the internal structure of the receiver B in the registration method shown in FIG. The sequence diagram which shows an example of the process sequence of ID registration processing in the ID registration method shown in FIG. FIG. 28 is a sequence diagram illustrating a processing procedure of AV communication processing in which the transmission device and the reception device communicate with each other via the bridge device in the state illustrated in FIG. 27. The sequence diagram following FIG.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Network interface part 2 Packet processing part 3 Authentication / key exchange processing part 4 Short distance wireless interface part 5 Short distance wireless authentication / key exchange processing part 6 Short distance ID list management part 7 Short distance unique ID management part 8 Short distance wireless encryption Processing unit 9 Short-distance ID registration determination processing unit 10 Cryptographic processing unit 11 Content supply unit 21 Network interface unit 22 Packet processing unit 23 Authentication / key exchange processing unit 24 Short-range wireless interface unit 25 Short-range wireless authentication / key exchange processing unit 26 Short range ID list management unit 27 Short range unique ID management unit 28 Short range wireless encryption processing unit 29 Short range ID registration determination processing unit 30 Cryptographic processing unit 31 Content processing unit 41 Short range wireless interface unit 42 Short range wireless authentication / key exchange Processing unit 43 Short-range wireless ID list management unit 44 Short-range wireless encryption processing unit 5 Network interface unit 52 Packet processing unit 53 Authentication / key exchange processing unit 54 Short range wireless interface unit 55 Short range wireless authentication / key exchange processing unit 56 Short range ID list management unit 57 Short range unique ID management unit 58 Short range wireless encryption processing 59 Short-distance ID registration determination processing unit 60 Proxy ID check processing unit 61 Cryptographic processing unit

Claims (4)

In an information processing apparatus that transmits encrypted content for copyright protection with a first communication apparatus via a network,
Unique information storage means for storing general and publicly disclosed first unique information for identifying other communication devices from all communication devices;
The first unique information is transmitted to the second communication device while receiving the first unique information of the second communication device transmitted from the second communication device. Specific information transmission means,
Unique information storage judging means for judging whether or not the first unique information received by the first unique information transmission means is stored in the unique information storage means;
A first authentication / key exchange unit that performs an authentication / key exchange process with the second communication device when it is determined by the unique information storage determination unit;
When the authentication / key exchange process by the first authentication / key exchange means is successful, the first communication device is encrypted when used by the first communication device to communicate with the second communication device. Unique information receiving means for receiving the second unique information from the second communication device;
Second authentication / key exchange means for performing authentication / key exchange processing with the first communication device using the received second unique information of the first communication device. An information processing apparatus characterized by the above. In an information processing apparatus that transmits encrypted content for copyright protection with a first communication apparatus via a network,
Unique information storage means for storing general and publicly disclosed first unique information for identifying other communication devices from all communication devices;
The first unique information is transmitted to the second communication device while receiving the first unique information of the second communication device transmitted from the second communication device. Specific information transmission means,
Unique information storage judging means for judging whether or not the first unique information received by the first unique information transmission means is stored in the unique information storage means;
A first authentication / key exchange unit that performs an authentication / key exchange process with the second communication device when it is determined by the unique information storage determination unit;
When the authentication / key exchange processing by the first authentication / key exchange means is successful, the second communication device used when the first communication device communicates with the second communication device. In the case of not having the unique information, unique information receiving means for receiving the encrypted second unique information of the second communication device from the second communication device;
Second authentication / key exchange means for performing authentication / key exchange processing with the first communication device, using the received second unique information of the received second communication device; An information processing apparatus comprising: The unique information transmission means sends a proxy confirmation request for the first unique information of the first communication device, the first unique information of itself, and the first communication device to the second communication device. The address information of the communication device
The first authentication / key exchanging means receives the information indicating that the proxy confirmation performed between the first and second communication devices is successful from the second communication device, and The information processing apparatus according to claim 1, wherein an exchange process is performed. A unique information relation registering means for registering the first and second unique information of other communication devices capable of communicating in association with each other;
The first unique information transmission means transmits the first unique information of itself to the second communication device determined based on the registered content of the unique information relation registration means, and the second unique information transmission means The information processing apparatus according to claim 1, wherein the first unique information of the second communication apparatus transmitted from the communication apparatus is received.

Images