JP2008060802A - Content management system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a content management system by which private copy is performed and eavesdropping of a key is prevented while protecting copyright. <P>SOLUTION: A security device has: a reading part which reads first key information of encrypted content transmitted from a server to a terminal and stored in the terminal and first key information from the terminal; a key information storage part which acquires and stores second key information generated by the server and a key generation part which generates decoding key information for decoding the content based on the first key information read by the reading part and the second key information stored in the key information storage part. Such a security device is delivered by a route which is not the one via a network. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to a content management system capable of improving the convenience of a legitimate user while protecting the copyright of digital data.

Conventionally, if data downloaded from a server to a terminal or purchased software (such as a CD) can be freely copied and used, copyright protection may not be sufficient. Therefore, by inputting an ID and a key when installing these software, it is possible to authenticate whether or not the user is a valid user and use it by a valid user. However, if this ID or key is known to a third party other than the user himself / herself, the ID or key is used by the third party, and it is substantially determined whether or not the user is a valid user. Authentication will not be possible.
On the other hand, when downloading music data from a server to a terminal, a user who purchases and downloads music properly can play the music. As described above, there is a technique for charging a fee-based content such as music data and allowing a legitimate user to browse and appreciate the content (for example, Patent Document 1).

Such digital data (music data, video data and document data) may be copyright-protected, and other platforms may be downloaded from the Internet (terminal device) or other platforms from which the digital data was created. You cannot move or copy to the platform.
Japanese Patent No. 3650045

However, in the above-described prior art, if the downloaded data cannot be copied uniformly, the copy cannot be performed although it is a private copy. On the other hand, if it is possible to copy or move digital data freely because it is a private copy, the copy of the digital data may be flooded and it may be difficult to protect the copyright. .
Also, as shown in the above-mentioned Patent Document 1, when digital data or the like is protected by a key (ID or key), when the key is transmitted to the terminal via the network, the key is wiretapped. Digital data may be used by a third party.

  The present invention has been made in view of such circumstances, and an object of the present invention is to provide a content management system capable of making a private copy while protecting the copyright and preventing the eavesdropping of the key. There is to do.

  In order to solve the above-described problem, the present invention provides first key information out of encrypted content and first key information transmitted from a server to a terminal device and stored in the terminal device. A reading unit read from the terminal device, a key information storage unit that acquires and stores the second key information generated by the server, the first key information read by the reading unit, and the key information storage unit And a key generation unit that generates decryption key information for decrypting the content based on the second key information.

  The security device may further include an input unit that accepts password data input, and an authentication unit that authenticates whether the password input from the input unit is valid. The information generation unit generates decryption key information when authentication is established based on an authentication result of the authentication unit.

  The present invention also provides a storage unit that receives encrypted content and first key information from a server and stores them, and second key information corresponding to the first key information and the first key information. And a decryption unit that reads out the key information for decrypting the content generated by the security device apparatus based on the decrypted content and decrypts the content with the read key information.

  The present invention is also a content management system for distributing content from a server to a terminal device and decrypting the content in the terminal device, wherein the server obtains key information capable of decrypting encrypted content by combining them. A key generation unit that generates first key information and second key information that can be generated, and the content is encrypted by the first encryption key and the second encryption key generated by the key generation unit. An encryption unit that converts the content encrypted by the encryption unit and the first key information to the terminal, and a writing unit that writes the second key information to the security device. The terminal device receives the encrypted content and the first key information from the server and stores them, the first key information and the first key information A decryption unit that reads out the key information for decrypting the content generated by the security device device based on the second key information corresponding to the key information of the key, and decrypts the content with the read key information. Features.

  As a result, the distribution data is encrypted in the distribution technology aiming to protect the copyright by preventing unauthorized use of software and digital data (music data, video data, text data, etc.) and user authentication. It is possible to divide the key to be divided into two, one is delivered together with the data, the other is stored in the external storage with personal authentication, and can be delivered in-kind, thereby managing the key securely, By authenticating the user, it can be determined whether the user is a valid user.

  As described above, according to the present invention, the key for encrypting and decrypting the content is divided into two, one is distributed together with the content, and the other is stored in the security device device. . Then, the security device device can be delivered to a legitimate user, and the user who receives the security device device can decrypt the content using the security device device. As described above, since the security device device can be delivered, it is possible to prevent data from being wiretapped on the network, and it is possible to pass the key information with a limited number of users.

  In addition, since a legitimate user who has received the security device can decrypt the content, it is possible to improve the degree of freedom of private copying while protecting the copyright of the content. Will improve. Further, it becomes possible to protect the security of software and digital data for providers of software and digital data.

Hereinafter, a content management system according to an embodiment of the present invention will be described with reference to the drawings. FIG. 1 is a schematic block diagram showing the configuration of a content management system according to an embodiment of the present invention.
In this figure, a server 1 is communicably connected to a terminal device 2 via a network 3. The terminal device 2 is a device that has a function of storing content and playing back the content, such as a personal computer, a portable content playback device such as a digital audio player, or an image playback device.

  The security device 4 has an area for storing key information written from the server 1 and is connectable to the terminal device 2 and has a function of providing the terminal device 2 with a key for decrypting content. The security device 4 is a device having a storage area inside and having a function of securely storing data in the storage area. For example, an IC card, a USB token, smartSD (registered trademark), etc. SD memory card, security device, etc. As will be described in detail later, the security device 4 is stored on the content provider side that manages the server 1, and when the content is distributed to the terminal device 2, the security device 4 is owned by the terminal device 2 that distributed the content. It is delivered to the user who becomes a person.

  In the server 1, the content storage unit 11 stores content to be distributed to terminals. This content is digital data, for example, music data, video data such as moving images or still images, software, programs, and the like. The key generation unit 12 generates first key information and second key information that can generate key information capable of decrypting the encrypted content by combining them. The first key information is, for example, Content_Key, and the second key information is ID_Key.

  The encryption unit 13 encrypts the content using the Content_Key and ID_Key generated by the key generation unit 12. Here, an encryption key is generated with the Content_Key and ID_Key, and the content to be delivered to the terminal device among the content stored in the content storage unit 11 is encrypted with this encryption key. The distribution unit 14 distributes the content encrypted by the encryption unit 13 and the Content_Key to the terminal device 2. The writing unit 15 writes the ID_Key generated by the key generation unit 12 in the security device device.

  The user registration unit 16 issues a user ID and inputs the user's personal information based on a registration request from a user as a content distribution destination. This input may be performed by receiving the personal information input from the terminal device 2 by the user via the network 3, or having the user mail the application form in which the personal information is entered. The personal information entered on the application form may be input by the operator via a keyboard or a mouse. This personal information includes information for specifying a destination to which the security device 4 is delivered, and includes, for example, contact information such as the user's address, postal code, name, and telephone number. The personal information is stored in association with the user ID issued to the user registration unit 16.

The user database 17 stores the user's personal information input from the user registration unit 16 and the user ID issued by the user registration unit 16 in association with each other. The authentication unit 18 authenticates whether or not the user ID input from the user is correct. For this authentication, if necessary, an access password may be issued to the user at the time of user registration, and the ID and access password may be used at the time of authentication.
The label printing unit 19 reads user information corresponding to ID_Key stored in the security device device 4 from the user database, and prints an address, a zip code, and a name on a delivery label based on the read user information. This label becomes a delivery slip when the security device 4 is delivered.

  Next, in the terminal device 2, the storage unit 21 receives the encrypted content and the Content_Key from the server and stores them. The decryption unit 22 reads the key information for decrypting the content generated by the security device device 4 based on the Content_Key and the ID_Key corresponding to the Content_Key, and decrypts the content stored in the storage unit 21 with the read key information. To do. The output unit 23 includes a display device such as a CRT (Cathode Ray Tube) and a liquid crystal display device, and an audio output device such as a speaker and headphones, and outputs the content decoded by the decoding unit 22 as an image and audio.

  Next, in the security device 4, the input unit 41 accepts password data input from the user and outputs the input data to the authentication unit 42. The authentication unit 42 authenticates whether the password input from the input unit 41 is valid. The key information storage unit 43 stores ID_Key written by the writing unit 15 of the server 1.

  The reading unit 44 transmits the Content_Key corresponding to the content to be decrypted from the encrypted content and the Content_Key transmitted from the server 1 to the terminal device 2 and stored in the storage unit 21 of the terminal device 2. Is read from the terminal device 2. The key generation unit 45 generates decryption key information for decrypting the encrypted content based on the Content_Key read by the reading unit 44 and the ID_Key stored in the key information storage unit 43. The key information generation unit 45 generates decryption key information based on the authentication result of the authentication unit 42 when authentication is established.

Next, the operation of the content management system in FIG. 1 will be described with reference to FIG. FIG. 2 is a data flow diagram for explaining the operation of the content management system.
In this figure, the user of the terminal device 2 first performs user registration with the server 1 when making a content distribution request. Here, the terminal device 2 transmits the personal information input from the user and the user registration request to the server 1 via the network 3. Here, personal information is transmitted using SSL (secure sockets layer) as necessary.

  When the server 1 receives the personal information and the user registration request from the terminal device 2 by the user registration unit 16, the server 1 issues a user ID and stores it in the user database 17 in association with the received personal information. The personal information is stored in the user database 17, whereby the user is registered (step S1). Here, the issued user ID is notified from the user registration unit 16 to the terminal device 2. When the user registration is completed, the user can make a content distribution request to the server 1 via the terminal device 2.

  After the user registration is completed, when there is content that the user wants to distribute, the user accesses the server 1 by the terminal device 2 and searches for the content stored in the server 1. When the content is selected by the user, the terminal device 2 receives the information input for identifying the content, the user ID, the password for decrypting the content, the purchase request and the authentication request indicating the purchase intention of the content. Are transmitted to the server 1 (step S2). Here, the password may be arbitrarily determined and input by the user every time content is requested.

  The authentication unit 18 of the server 1 refers to the user database 17 to authenticate whether or not the user ID transmitted from the terminal device 2 is correct, and notifies the terminal device 2 of the authentication result. Here, when the authentication is not established, the content is not distributed.

On the other hand, when the authentication of the authentication unit 18 is established (step S3), the authentication unit 18 sends an authentication result indicating that the authentication is established to the key generation unit 12, the password transmitted from the terminal device 2, and the user Output the ID.
When the authentication result, password, and user ID are output from the authentication unit 18, the key generation unit 12 generates Content_Key and ID_Key, and registers the Content_Key and ID_Key in the user database in association with the user ID.

When the Content_Key and ID_Key are generated by the key generation unit 12, the encryption unit 13 generates an encryption key based on the Content_Key and ID_Key (Step S4), and the content requested to be distributed from the terminal device 2 is stored as the content. The content read out from the storage unit 11 is encrypted using the generated encryption key (step S5).
When the content is encrypted, the distribution unit 14 distributes the encrypted content and the Content_Key generated by the key generation unit 12 to the terminal device 2 (step S6). Here, since the content is encrypted, it cannot be normally decrypted even if it is wiretapped by a third party. Further, since the content cannot be decrypted only by Content_Key, the content is protected.

On the other hand, when the ID_Key is generated, the writing unit 15 writes the password transmitted from the terminal device 2 in step S2 in the storage area of the authentication unit 42 of the security device device 4 connected to the server 1, and the key ID_Key is written in the information storage unit 43 (step S6).
When the ID_Key is written, the label printing unit 19 reads the user information corresponding to the ID_Key stored in the security device device 4 from the user database, and based on the read user information, the address, the zip code, and the name are delivered to the delivery label. (Step S7).

  The content distributor of the server 1 packs the security device 4 and affixes the delivery label printed by the label printing unit 19 for delivery. As a result, the security device device 4 reaches the user.

  When the user receives the delivered security device device 4, the user connects the security device device 4 to the terminal device 2 and inputs a content reproduction instruction to the terminal device 2.

  When the content reproduction instruction is input, the terminal device 2 displays a screen requesting password input by the output unit 23. Here, the user inputs the password input in step S <b> 2 from the input device provided in the terminal device 2. When the password is input by the user, the terminal device 2 inputs the input password to the input unit 41 of the security device device 4 (step S8).

  The input unit 41 of the security device device 4 outputs the input password to the authentication unit 42. When the password is input from the input unit 41, the authentication unit 42 compares whether or not the input password matches the password stored in the storage area inside the password authentication unit 42, and the password is valid. Authentication of whether or not there is. If the passwords do not match, an error indicating that the authentication is not established is output to the terminal device 2. As a result, the output unit 23 of the terminal device 2 displays that the password is in error, and the content is not reproduced.

  On the other hand, if the passwords match and authentication is established, the authentication unit 42 outputs to the key generation unit 45 that authentication has been established. When the authentication establishment is output from the authentication unit 42, the key generation unit 45 reads out the Content_Key associated with the content to be decrypted from the terminal device 2 by the reading unit 44 and obtains the ID_Key from the key information storage unit 43. The key information that can decrypt the content is generated by reading and using the Content_Key and ID_Key. Then, the key generation unit 45 outputs the generated key information to the decryption unit 22 of the terminal device 2 (step S9).

When the key information is input to the decryption unit 22, the terminal device 2 decrypts the content using the key information (step S10), and outputs the content decrypted by the output unit 23 (step S11).
Here, when the reproduction of the content is completed, or when the security device device 4 is disconnected from the terminal device 2, the content cannot be reproduced. Then, when the security device device 4 is connected to the terminal device 2 again and a password is input by the user, and authentication is established in the security device device 4, the content can be reproduced.

In addition, here, the user can copy the encrypted content and the Content_Key to another terminal device 2. When the content is reproduced on the copy destination terminal device 2, it is necessary to connect the security device device 4 to the copy destination terminal device 2 and input the password to decrypt the content. Accordingly, private copying can be freely performed, and only a legitimate user holding the security device 4 can reproduce the content, thereby protecting the copyright.
Note that when a new content distribution request is made, the processing is executed from step S2.

  In the above-described embodiment, when the content is reproduced, the password input to the terminal device 2 is output to the security device device 4. However, if the security device device 4 has a function of inputting a password, A password may be input to the device device 4.

In addition, here, any of the methods shown in the following (1) and (2) can be applied.
(1) When content is reproduced, after the password is input and authentication is established in the security device device 4, the security device device 4 can be reproduced when the security device device 4 remains connected to the terminal device 2, and the security device device When 4 is detached from the terminal device 2, reproduction is impossible.
According to the method (1), the copyright of the content can be protected more strictly.
(2) After the password is input and authentication is established in the security device apparatus 4, the security device apparatus 4 may be made reproducible even if it is detached from the terminal apparatus 2. In this case, for example, when device authentication is performed between a content and the terminal device 2 via a security module (for example, TPM (Trusted Platform Module) when the terminal device 2 is a PC) and the device authentication is established. The content may be reproducible even when the security device device 4 is detached from the terminal device 2. As a result, even if the decrypted content is copied to another terminal device of a third party, it cannot be played back and activated, so that security can be protected.
In addition, after the password is input and authentication is established in the security device apparatus 4, the security device apparatus 4 may be removed from the terminal apparatus 2 or a password (which may be the same as or different from the above-described password) is stored in the terminal apparatus 2. The content may be reproduced by inputting. In this case, a function for requesting password input is added to the content when the security device device 4 is not connected to the terminal device 2 after the password is input and the security device device 4 is authenticated. And download it with the content. When the content is reproduced, the password is requested to be input. Thus, after the password is input and the security device apparatus 4 is authenticated, the content can be reproduced by inputting the password without connecting the security device apparatus 4.
According to the method (2), after the security device device 4 is connected to the terminal device 2 and authentication of the input password is established and the content can be reproduced, the security device device 4 is connected to the terminal device 2. Even if it is removed from the content, it is possible to reproduce the content when a certain condition is satisfied, so that the usability of the user can be improved.
As for the methods (1) and (2), it is also possible to determine which method is applied according to the content protection level, for example.

Next, a second embodiment will be described with reference to FIG. Here, a case where content that has been distributed to the terminal device 2 is updated will be described. This update will be described, for example, when the content is a program and the program is updated.
The user accesses the server 1 from the terminal device 2 when performing content upgrade. When access is established (step S21), the terminal device 2 transmits information specifying the content to be upgraded, a user ID, and a purchase request indicating purchase intention from the terminal device 2 to the server 1 (step S22).

  When the server 1 receives the information specifying the content to be upgraded, the user ID, and the purchase request from the terminal device 2, the server 1 performs user authentication by the authentication unit 18, and corresponds to the user ID when authentication is established (step S 23). The Content_Key and ID_Key are read from the user database 17, and an encryption key for encrypting the content is generated by the read Content_Key and ID_Key. Then, the content for upgrade is read from the content storage unit 11, the content is encrypted with an encryption key (step S24), and transmitted to the terminal device 2 together with the Content_Key (step S25).

  When the user makes a distribution request for the content before the upgrade, the user connects the delivered security device device 4 to the terminal device 2 and inputs a password. The security device 4 authenticates the input password, and when the authentication is established, reads the Content_Key transmitted together with the upgrade content from the terminal device 2 and stores it in the read Content_Key and the key information storage unit 43. The key information is generated by the ID_Key and output to the terminal device 2 (step S26).

  The terminal device 2 decrypts the upgrade content encrypted with the key information output from the security device device 4 (step S27). As a result, the content program can be used (step S28), and the upgrade can be performed by installing this program.

  In the embodiment described above, a program for realizing the functions of the key generation unit 12, the encryption unit 13, the distribution unit 14, the writing unit 15, the user registration unit 16, and the authentication unit 18 of the server 1 in FIG. Alternatively, a program for realizing the functions of the decoding unit 22 and the output unit 23 of the terminal device 2 is recorded on a computer-readable recording medium, and the program recorded on the recording medium is read into a computer system and executed. The content may be managed accordingly. Here, the “computer system” includes an OS and hardware such as peripheral devices.

Further, the “computer system” includes a homepage providing environment (or display environment) if a WWW system is used.
The “computer-readable recording medium” refers to a storage device such as a flexible medium, a magneto-optical disk, a portable medium such as a ROM and a CD-ROM, and a hard disk incorporated in a computer system. Furthermore, the “computer-readable recording medium” dynamically holds a program for a short time like a communication line when transmitting a program via a network such as the Internet or a communication line such as a telephone line. In this case, a volatile memory in a computer system serving as a server or a client in that case, and a program that holds a program for a certain period of time are also included. The program may be a program for realizing a part of the functions described above, and may be a program capable of realizing the functions described above in combination with a program already recorded in a computer system.

  The embodiment of the present invention has been described in detail with reference to the drawings. However, the specific configuration is not limited to this embodiment, and includes designs and the like that do not depart from the gist of the present invention.

It is a schematic block diagram which shows the structure of the content management system by one Embodiment of this invention. It is a data flow chart for explaining operation of a contents management system. It is a data flow figure for demonstrating operation | movement of the content management system in 2nd Embodiment.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Server 2 Terminal device 3 Network 4 Security device 11 Content storage part 13 Encryption part 14 Distribution part 15 Writing part 22 Decoding part 23 Output part 42 Authentication part 43 Key information storage part 44 Reading part 45 Key generation part

Claims (4)

A read unit that reads out the first key information from the terminal device out of the encrypted content and the first key information transmitted from the server to the terminal device and stored in the terminal device;
A key information storage unit for acquiring and storing second key information generated by the server;
A key generation unit that generates decryption key information for decrypting the content, based on the first key information read by the reading unit and the second key information stored in the key information storage unit;
A security device device comprising: An input unit for accepting password data input;
An authentication unit that authenticates whether the password input from the input unit is valid;
The security device device according to claim 1, wherein the key information generation unit generates decryption key information when authentication is established based on an authentication result of the authentication unit. A storage unit that receives the encrypted content and the first key information from the server and stores the encrypted content and the first key information;
Read key information for decrypting the content generated by the security device device based on the first key information and second key information corresponding to the first key information, and read the content by the read key information. A decoding unit for decoding;
The terminal device characterized by having. A content management system that distributes content from a server to a terminal device and decrypts the content in the terminal device,
The server
A key generation unit that generates first key information and second key information capable of generating key information capable of decrypting encrypted content by combining;
An encryption unit that encrypts the content using a first encryption key and a second encryption key generated by the key generation unit, the content encrypted by the encryption unit, and the first key information A distribution unit that distributes to the terminal; and a writing unit that writes the second key information to a security device device;
The terminal device
A security device based on the storage unit that receives the encrypted content and the first key information from the server, and stores the first key information and the second key information corresponding to the first key information Reading key information for decrypting the content generated by the device, and decrypting the content with the read key information;
A content management system comprising:

Images