JP2010039567A - Distribution device and management device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To make it hard for a third party to obtain a decryption key for decrypting a ciphered content. <P>SOLUTION: A distribution device includes a processor 101 which performs processing for distributing ciphered content information to a user, processing for decrypting ciphered key information corresponding to the ciphered content information using the ciphered key information, on receipt of a key charge or key charge payment completion information from the user; processing for distributing the decrypted key information to the user; processing for managing a set of a content ID indicative of the ciphered content information corresponding to the key information having been distributed to the user, a user ID indicative of the user to whom the key information has been distributed, and a distributor ID indicative of an agent or a user having distributed the ciphered content information; and processing for passing information including the key charge information corresponding to the key charge or the key charge payment completion information and each ID to a management device. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to a distribution device and a management device for a content distribution system used for distributing arbitrary content such as electronic books (eBooks), music, and moving images.

Patent Document 1 describes a content distribution system that can facilitate distribution of content. The technique described in Patent Document 1 is a technique that keeps in mind that the distribution window apparatus and the management center apparatus are always connected via a network.
JP 2004-94677 A

  Depending on the location of the distribution window device, it may be difficult to always connect the distribution window device and the management center device. Therefore, there is a request to store the decryption key for decrypting the encrypted content in the distribution window device. However, storing the decryption key in the distribution window device causes a security problem such as the decryption key being stolen.

  An object of the present invention is to provide a distribution device and a management device in which it is difficult for a third party to obtain a decryption key for decrypting encrypted content.

  A distribution device according to an example of the present invention distributes encrypted content information to a user, and receives key price or key price paid information from the user, the key information that can decrypt the encrypted content information to the user. A distribution device of a content distribution system for distributing content by distributing the first storage device in which the encrypted content information and encryption key information obtained by encrypting the key information are stored; A second storage device storing encryption key decryption information for decrypting the encryption key information; a process for distributing the encrypted content information to the user; and When receiving the key price paid information, the process of decrypting the encryption key information corresponding to the encrypted content information using the encryption key information, A process for distributing key recording information to the user, a content ID indicating encrypted content information corresponding to the key information distributed to the user, a user ID indicating a user distributing the key information, and the encrypted content The management device receives information including a process for managing a set of distributor IDs indicating a distributor or a user who has distributed information, key price information corresponding to the key price or the key price paid information, and each ID. And a processor for executing processing for passing.

  According to the present invention, it becomes difficult for a third party to obtain a decryption key for decrypting encrypted content.

  Embodiments of the present invention will be described below with reference to the drawings.

  FIG. 1 is a schematic diagram showing the configuration of a content distribution system according to the first embodiment of the present invention. This content distribution system includes a management center device 10, a distribution window device 20, a content storage medium 30, a key storage medium 40, and a user terminal 50.

  Here, the management center device 10 has a function of transmitting the corresponding distribution fee information to the distribution window device 20 based on the notification from the distribution window device 20 (purchase history information 22 including key price information). The key price information may be key price paid information.

  Here, as shown in FIG. 2, the content / key DB 1 and the content / key DB 21 hold a set of encryption key information and content provider ID for each encrypted content information. Other information related to can be recorded. The content provider is a person who has the copyright of the content and wants to distribute the content in the content distribution system. Each DB (database) can be realized by a hardware configuration such as a memory or a hard disk, and may be read as a data storage device.

  As shown in FIG. 3, the encrypted content information includes, for each content ID, a browsing rule (content browsing rule and management information determined by the content provider), browsing history, electronic content (first part of plaintext, system key). The second part encrypted, the third part encrypted with the content key), and the distribution history (sales counter ID, first introducer user ID, next introducer user ID,...) is there.

  In this content distribution system, the term “content” means information including electronic content and browsing rules. The system key means a key shared by the management center device 10 and the user terminal 50 in the content distribution system.

  As shown in FIG. 4, the key information obtained by decrypting the encryption key information includes a content key (a key for decrypting the encrypted content) and a key attribute (an attribute of the key information, such as an expiration date) for each content ID. It is provided. That is, the key information is transmitted and received as one unit in the content distribution system.

  As shown in FIG. 5, the purchase history DB 2 holds a content ID, a purchaser's user ID, a settlement window ID (to be described later), and a distribution history for each purchase history ID. As will be described later, the purchaser's user can also be an introducer. The distribution history is a history of the ID of the person who has distributed, and is initially a distribution window ID, but after that, it becomes a user ID indicating the user who introduced the encrypted content.

  The distribution window device 20 is a computer that holds a distribution window ID indicating the own device 20 in advance, and has a distribution function such as the distribution window ID and encrypted content, and a purchase history management function. For example, (1) a store in a station (2) Terminal devices placed in bookstores, (3) Server devices connected to the Internet (virtual stores on the Web), (4) Encrypted content input wirelessly Hot spots (eg, automatic ticket gates at stations, transmitting stations located in smoking areas (such as ashtrays) at any location), (5) CD-ROMs and DVD distribution devices located at CD shops, etc. It can be realized by this form.

  The distribution window device 20 also has the same content / key DB 21 as the content / key DB 1.

  The distribution function described above is specifically composed of the following functions (D1) to (D7).

  (D1) A function of reading the user ID in the key storage medium 40 when the content storage medium 30 is inserted by a user operation.

  (D2) A function of reading the content ID to be downloaded from the content automatic extraction information in the content storage medium 30 when the key storage medium 40 is inserted. Here, the content automatic withdrawal information is information for specifying the encrypted content information to be downloaded in advance, and is not limited to mere ID information, but as ID control information that combines time information such as day of the week and date and ID information. Also good. In the case of the ID control information, for example, it is preferable for switching the encrypted content information to be downloaded, such as downloading certain encrypted content information on Monday and downloading other encrypted content information on Tuesday.

(D3) A content designating function that displays a list of contents that can be distributed from the distribution window device 20, and reads a content ID to be downloaded from the list by a user operation.
It should be noted that at least one of the functions (D2) and (D3) is sufficient.

  (D4) A function of searching for the content / key DB 21 based on the content ID and confirming that the corresponding encrypted content information exists when the key price is received by the user's operation.

(D5) A function of storing the encrypted content information in the content storage medium 30.
(D6) A function for decrypting the encryption key information using the decryption key information.
(D7) A function of reading the key storage medium ID from the key storage medium 40, encrypting the key information with a key encryption unit (not shown) using the key storage medium ID, and writing it to the key storage medium.

  In addition, the purchase history management function described above transmits the key information to the user terminal 50 and then the content ID of the encrypted content information purchased by the user, the key price information corresponding to the key price, the user ID, and the distribution window. It consists of a function for managing the ID as purchase history information 22. Further, the purchase history management function transmits purchase history information 22 to the management center device.

  Note that when the purchase history information 22 is transmitted to the management center apparatus 10, it is preferable to protect the transmission contents using an existing encryption technique, and this is the same in the following embodiments.

  The content / key DB 21 is readable / writable from the distribution window device 20, and holds encrypted content information and encryption key information for each content ID.

  The content storage medium 30 is a memory card that is carried by a user and that allows encrypted content information to be written from the distribution window device 20 and readable from the user terminal 50. The content storage medium 30 stores encrypted content information downloaded from the distribution window device 20. In some cases, the content automatic extraction information shown is stored in advance. However, the content storage medium 30 is not limited to a readable / writable medium, and may be a memory card that can only read encrypted content information.

  The key storage medium 40 is a memory card that is carried by the user, allows the user ID to be read from the distribution window device 20, and allows the encryption key information to be written from the user terminal 50. A medium ID and a user ID indicating a user are stored in advance. The key storage medium 40 is a secure one.

  The user terminal 50 has a function of detachably holding the content storage medium 30 and the key storage medium 40, and decrypts the encrypted content in the content storage medium 30 with the key information in the key storage medium 40 by a user operation. And has a function to display the obtained content. Specifically, the user terminal 50 can use a dedicated viewer, a PC, a general-purpose PDA, or the like.

FIG. 6 is a diagram showing an installation form of a distribution window device and a management center device according to an embodiment of the present invention.
As shown in FIG. 6, the distribution window device 20 includes a window device 20A installed at the storefront and a distribution device 20B installed in the backyard. The window device 20A has a slot into which the key storage medium 40 is inserted. The distribution device 20B is a computer for executing the distribution function and the purchase history management function described above. The distribution window device 20 connects the switching hub 200 to the Internet line. The switching hub 200 is connected to a POS register 201 installed at a location where the distribution window device 20 is installed. The data center 202 and the management center apparatus 10 are connected to the Internet line. The data center receives information from the POS register 201 and creates unified data.

  The switching hub 200 connects only the normal POS register 201 to the Internet line. The distribution window device 20 is connected to the Internet line at the closing time of the store.

  FIG. 7 shows the system configuration of the distribution apparatus. As shown in FIG. 7, the distribution apparatus includes a CPU 101, a north bridge 102, a main memory 103, a south bridge 104, a graphics processing unit (GPU) 105, a video memory (VRAM) 105A, a sound controller 106, and a BIOS-ROM 109. A hard disk drive (HDD) 111, a DVD drive 112, an embedded controller / keyboard controller IC (EC / KBC) 116, a non-volatile memory (NVM) 117, and the like.

  CPU 101, north bridge 102, main memory 103, south bridge 104, graphics processing unit (GPU) 105, video memory (VRAM) 105A, sound controller 106, BIOS-ROM 109, and embedded controller / keyboard controller IC (EC / KBC) 116 The non-volatile memory (NVM) 117 is mounted on a printed wiring board.

  The CPU 101 is a processor that controls the operation of the distribution apparatus 20, and executes various application programs such as an operating system (OS) 103A and a distribution application 103B that are loaded from the hard disk drive (HDD) 111 to the main memory 103. The CPU 101 also executes a BIOS (Basic Input Output System) stored in the BIOS-ROM 109. The BIOS is a program for hardware control. The distribution application 103B is a program for realizing a distribution function and a purchase history management function.

  The north bridge 102 is a bridge device that connects the local bus of the CPU 101 and the south bridge 104. The north bridge 102 also includes a memory controller that controls access to the main memory 103. The north bridge 102 also has a function of executing communication with the GPU 105 via a PCI EXPRESS standard serial bus or the like.

  The GPU 105 is a display controller that controls the display monitor of the distribution apparatus 10. A display signal generated by the GPU 105 is sent to a display monitor.

  The south bridge 104 controls each device on an LPC (Low Pin Count) bus and each device on a PCI (Peripheral Component Interconnect) bus. The south bridge 104 includes an IDE (Integrated Drive Electronics) controller for controlling the hard disk drive (HDD) 111 and the DVD drive 112. Further, the south bridge 104 has a function of executing communication with the sound controller 106. The sound controller 106 is a sound source device, and outputs audio data to be reproduced to a speaker or an HDMI control circuit.

  The hard disk drive 111 is a removable hard disk drive. The hard disk drive 111 stores encrypted content information, encryption key information, and purchase history information 22. Since the hard disk drive 111 is a removable hard disk drive, when adding new encrypted content information and encryption key information, the hard disk drive 111 must be replaced with a hard disk drive to which new encrypted content information and encryption key information are added. Can respond. Therefore, it becomes easy to add new encrypted content information and encryption key information.

The embedded controller / keyboard controller IC (EC / KBC) 116 is a one-chip microcomputer in which an embedded controller for power management and a keyboard controller for controlling the keyboard (KB) 13 and the touch pad 16 are integrated. . The embedded controller / keyboard controller IC (EC / KBC) 116 has a function of powering on / off the distribution apparatus 10 according to the operation of the power button 14 by the user.
The non-volatile memory 117 stores decryption key information for decrypting the encryption key information.

  Since the decryption key for decrypting the encrypted content information is encrypted, even if the third party obtains the encryption key information, the third party cannot obtain the decryption key. Since the decryption key information for decrypting the encryption key information is mounted on the printed wiring board, it is difficult for a third party to obtain the decryption key information. Therefore, it becomes difficult for a third party to obtain a decryption key for decrypting the encrypted content.

  Next, the operation of the content distribution system configured as described above will be described.

  Now, when the content storage medium 30 and the key storage medium 40 are inserted by the user's operation, the distribution window device 20 reads the content automatic withdrawal information in the content storage medium 30 or the content designation function. An ID is obtained, and the user ID in the key storage medium 40 is read.

  First, when a content to be purchased is selected by a user operation, information (content ID) indicating the content is transmitted to the distribution window device 20. At the same time, the user ID and the key recording medium ID are read from the key recording medium and transmitted to the distribution window device 20 (ST1).

  The distribution window device 20 searches the content / key DB 21 based on the content ID, and acquires the encrypted content and the content key. When the key price is received, the encrypted key of the content is decrypted using the decryption key information stored in the nonvolatile memory 117. Then, the distribution window device 20 encrypts the content key using the key recording medium ID (ST2).

  The distribution window device 20 writes the encrypted key information on the key recording medium and writes the encrypted content on the content recording medium. In addition, the user purchase history information (a set of user ID and content ID) is recorded in the purchase history information 22 (ST3).

  At a certain timing, the distribution window device 20 transmits the set of content ID and user ID recorded in the purchase history information 22 together with the distribution history (distribution window ID) to the management center device (ST4). This procedure may be performed at a timing at which the distribution window device 20 can be connected online to the management center device. If online connection is not possible, another means may be used, such as carrying the media in a recording medium.

  The management center apparatus transmits a distribution fee to the distribution window apparatus 20 based on the information acquired in ST4 (ST5). This transmission method is the same as ST4.

  As described above, according to the present embodiment, the distributor is specified using the distribution window ID indicating the distribution window device 20 without using complicated distribution path information, so that the content distribution system can be simplified, Content distribution can be made easier.

  Consider application to a double key system. The double key method is a method in which a content key is encrypted with a newly introduced user key and the user key is encrypted with a key of a key recording medium, as disclosed in Japanese Patent Application Laid-Open No. 2004-194271.

  In this case, in addition to the content key, the distribution window needs to issue a user key if there is no user key available in the key recording medium. However, when a plurality of distribution windows issue user keys separately, user key IDs may be duplicated.

  Therefore, as shown in FIG. 8, a distribution window ID is assigned to a part of the user key ID to be issued. This eliminates the possibility of duplicate user key IDs issued from different distribution windows.

  Note that the present invention is not limited to the above-described embodiment as it is, and can be embodied by modifying the constituent elements without departing from the scope of the invention in the implementation stage. Further, various inventions can be formed by appropriately combining a plurality of constituent elements disclosed in the embodiment. For example, some components may be deleted from all the components shown in the embodiment. Furthermore, you may combine suitably the component covering different embodiment.

Schematic diagram showing the configuration of the content distribution system according to the first embodiment of the present invention Schematic diagram showing the configuration of the content / key DB in the same embodiment Schematic diagram for explaining encrypted content information in the embodiment Schematic diagram for explaining key information in the embodiment Schematic diagram showing the configuration of the purchase history DB in the same embodiment The figure which shows the installation form of the distribution window apparatus which concerns on one Embodiment of this invention, and a management center apparatus. The block diagram which shows the system configuration | structure of a distribution apparatus. The figure which shows assignment of user key ID.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 10 ... Management center apparatus, 20 ... Distribution window apparatus, 20A ... Window apparatus, 20B ... Distribution apparatus, 21 ... Content key DB, 22 ... Purchase history information 22, 30 ... Content storage medium, 40 ... Key storage medium, 50 ... User terminal, 101 ... CPU, 103B ... distributed application, 111 ... hard disk drive, 117 ... nonvolatile memory.

Claims (4)

Content that distributes encrypted content information to the user and distributes the content by distributing key information that can decrypt the encrypted content information to the user when the key price or key price paid information is received from the user A distribution system distribution device,
A first storage device storing the encrypted content information and encryption key information obtained by encrypting the key information;
A second storage device storing encryption key decryption information for decrypting the encryption key information;
Upon receiving the process for distributing the encrypted content information to the user and the key price or the key price paid information from the user, the encryption key information corresponding to the encrypted content information is converted to the encryption key. A process for decrypting using the information; a process for distributing the decrypted key information to the user; a content ID indicating encrypted content information corresponding to the key information distributed to the user; and distributing the key information A process for managing a set of a user ID indicating an authorized user and a distributor ID indicating a trader or user who distributed the encrypted content information, and key price information corresponding to the key price or the key price paid information And a processor that executes processing for transferring information including each ID to the management apparatus.   The distribution device according to claim 1, wherein the processor and the second storage device are mounted on a motherboard.   The distribution device according to claim 1, wherein the first storage device is a removable hard disk drive. Content that distributes encrypted content information to the user and distributes the content by distributing key information that can decrypt the encrypted content information to the user when the key price or key price paid information is received from the user A management device for a distribution system,
A set of a content ID indicating encrypted content information corresponding to the key information distributed to the user, a user ID indicating the user who distributed the key information, and a distributor ID indicating a trader or user who distributed the encrypted content information And receiving the key price information corresponding to the key price or the key price paid information and the information including each ID, the encrypted content information is distributed based on the distributor ID. A management apparatus comprising profit distribution means for executing a process for distributing profits within a range of the key price to a contractor or user.

Images