JP2010282529A - Installation system, server device, installation method, and server program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an installation system or the like for properly providing application information that is installable only to a specific terminal. <P>SOLUTION: When a terminal executes an investigation program transmitted (202) from a server device, inherent information of the terminal is read, transmitted to the server device (203), the server device encrypts the application information using the received inherent information as an encryption key, summarizes encrypted results with an installation program to obtain installation information, transmits the installation information to the terminal (204), when the terminal executes the installation program included in the installation information, the installation program reads the inherent information of the terminal, tries decryption of the application information included in the installation information using the read inherent information as an encryption key, when the installation program succeeds in the decryption, the program installs the application information to the terminal. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to an installation system, a server device, an installation method, and a program for realizing these on a computer, which appropriately provide application information that can be installed only on a specific terminal device.

  Conventionally, an installation system in which a server device provides various application programs, game programs, and various additional data for the program to a terminal device such as a computer or a game device having a network communication function via a computer communication network. Has been proposed.

  Here, in Patent Document 1 listed below, a technique is proposed in which application information can be installed only by a user having a legitimate use right with reference to unique information of a terminal device.

Japanese Patent No. 40111285

  On the other hand, in the installation system, there is a strong demand for further technology for easily preventing unauthorized installation.

  The present invention solves the above-described problems, and provides an installation system, a server device, an installation method, and a program for realizing these on a computer, which appropriately provide application information that can be installed only on a specific terminal device The purpose is to provide.

  In order to achieve the above object, the following invention is disclosed in accordance with the principle of the present invention.

  An installation system according to a first aspect of the present invention includes a terminal device and a server device, and the terminal device includes a unique information transmission unit, an installation information reception unit, an application information generation unit, and an installation unit, The server device includes a unique information reception unit, an encrypted information generation unit, and an installation information transmission unit, and is configured as follows.

  First, in the terminal device, the unique information transmission unit reads the unique information of the terminal device and transmits the unique information to the server device.

  Specific information of the terminal device includes the serial number of the CPU (Central Processing Unit) of the terminal device, the MAC (Media Access Control) address of the NIC (Network Interface Card) of the terminal device, and the currently assigned IP (Internet Protocol) address. Various information such as information on other applications installed in the terminal device may be used as they are, but typically, a hash value of a byte string in which these pieces of information are arranged is used.

  On the other hand, in the server device, the unique information receiving unit receives the unique information transmitted from the terminal device, and the encrypted information generating unit encrypts the received unique information and the application information to be installed in the terminal device. The encrypted information encrypted as a key is generated, and the installation information transmission unit transmits the installation information including the generated encrypted information to the terminal device.

  The installation information is a program that is executed only at the time of installation in the terminal device, and the encrypted information is embedded therein.

  For example, in a mode in which a game program is installed in a terminal device, application information includes an executable file that functions as a game program main body in addition to multimedia information files such as sound, images, and moving images.

  Further, in the terminal device, the installation information reception unit receives the installation information transmitted from the server device, and the application information generation unit reads the unique information of the terminal device and receives the unique information as an encryption key. The encrypted information included in the installation information is decrypted to generate application information to be installed in the terminal device, and the installation unit installs the generated application information in the terminal device.

  As described above, in the present invention, the terminal device is identified based on the unique information, and when the application information is installed based on the installation information, the unique information of the terminal device is read out. . If this unique information is not an unauthorized installation, it should match the value read by the unique information transmission unit. In this case, it is possible to decrypt the encrypted application information.

  On the other hand, even if the encrypted information leaks to a third party for some reason, it is unlikely that the unique information of the terminal device coincides. Therefore, damage can be minimized.

  Thus, according to the present invention, it is possible to appropriately provide application information that can be installed only on a specific terminal device.

  In the installation system of the present invention, the server device can transmit the investigation program and the installation program to the terminal computer, and can be configured as follows.

  Here, the investigation program causes the terminal computer to function as the unique information transmission unit, and the terminal computer functions as the unique information transmission unit by receiving and executing the investigation program.

  For example, in a situation where an application for purchasing an application from a terminal device is submitted to the server device, the survey program will execute the purchase application, present a contract clause for using the application, or make a payment using a credit card or the like. In addition to processing such as performing a process, the server apparatus is notified of unique information of the terminal device.

  The installation program includes encrypted information, causes the terminal computer to function as an application information generation unit and an installation unit, and the terminal computer receives and executes the installation program, whereby the application information generation unit And function as an installation part.

  In the above example, the installation program is an executable file provided after the contract is completed, and typically corresponds to a file provided with a file name such as setup.exe.

  The installation program is typically configured as a self-extracting compressed file, but is encrypted as described above at the time of compression, and the unique information at the time of installation of the terminal device is used as an encryption key. Is used.

  The present invention relates to a preferred embodiment of the above-described invention. By providing two types of programs from the server device to the terminal device, the application can be easily installed.

  In the installation system of the present invention, the unique information is configured to be information including a result obtained by dividing the date and time when the unique information of the terminal device is read by a predetermined constant, or a hash value of the information. be able to.

  In order to prevent damage such as when installation information has leaked, it is desirable to set an expiration date that allows installation from the installation information. However, if the expiration date information itself is embedded directly in the installation information, There is a high possibility that fraudulent measures such as direct rewriting of parts will be taken.

  In the present invention, the date and time (typically, the number of seconds elapsed since 0:00, January 1, 1970) measured by the real-time clock of the terminal device is associated with the effective period. (For example, if it is valid for 30 days, the number of seconds corresponding to 60 days is adopted.) A value obtained by dividing by integer is reflected in the unique information of the terminal device.

  In the present invention, when the installation information has an expiration date, it is not necessary to compare the date and time information, so that fraud can be further prevented.

  In the installation system of the present invention, the terminal device further includes a registry unit that stores identification information for identifying application information installed in the terminal device, and the unique information is information including identification information stored in the registry unit. Alternatively, it can be configured to be a hash value of the information.

  Here, the installed application information is information such as a program name, an installed directory, and a serial number.

  Since what kind of application is installed and how it largely changes depending on the use situation of the user who uses the terminal device, the possibility that these pieces of information coincide by chance is extremely low.

  On the other hand, in a situation where a certain application is newly installed, it can be assumed that the above-described application information does not change.

  According to the present invention, it is possible to appropriately identify the terminal device by configuring the unique information to reflect the installed application information.

  A server device according to another aspect of the present invention is a server device of the installation system.

  The installation method according to another aspect of the present invention is executed by the terminal device and the server device, and in the terminal device, a unique information transmission step, an installation information reception step, an application information generation step, and an installation step are executed, In the server device, the unique information receiving process, the encrypted information generating process, and the installation information transmitting process are executed and configured as follows.

  That is, in the unique information transmission step, the terminal device reads the unique information of the terminal device and transmits the unique information to the server device.

  On the other hand, in the unique information receiving step, the server device receives the unique information transmitted from the terminal device, and in the encrypted information generating step, the server device has received the application information to be installed in the terminal device. Encrypted information is generated by encrypting the unique information as an encryption key, and in the installation information transmission step, the server device transmits installation information including the generated encrypted information to the terminal device.

  Further, in the installation information receiving step, the terminal device receives the installation information transmitted from the server device, and in the application information generation step, the terminal device reads the unique information of the terminal device and uses the unique information as an encryption key. And decrypting the encrypted information included in the received installation information to generate application information to be installed in the terminal device. In the installation process, the terminal device converts the generated application information into the terminal device. To install.

  A server program according to another aspect of the present invention is configured to cause a computer to function as the server device.

  An investigation program and an installation program according to another aspect of the present invention are configured to cause a computer to function as the terminal device described above.

  The program of the present invention can be recorded on a computer-readable information storage medium such as a compact disk, flexible disk, hard disk, magneto-optical disk, digital video disk, magnetic tape, and semiconductor memory.

  The above program can be distributed and sold via a computer communication network independently of the computer on which the program is executed. The information storage medium can be distributed and sold independently from the computer.

  According to the present invention, it is possible to provide an installation system, a server device, an installation method, and a program for realizing these on a computer, which appropriately provide application information that can be installed only on a specific terminal device.

It is a schematic diagram which shows schematic structure of a typical information processing apparatus. It is a schematic diagram which shows schematic structure of the terminal device and server apparatus which concern on this embodiment. It is a session figure which shows the mode of communication between a terminal device and a server apparatus. It is a flowchart which shows the flow of control of the service process in a server apparatus. It is a flowchart which shows the flow of control of the investigation process in a terminal device. It is a flowchart which shows the flow of control of the installation process in a terminal device.

  Embodiments of the present invention will be described below. In the following, for ease of understanding, an embodiment in which the present invention is realized using a game information processing device will be described. However, the embodiment described below is for explanation, and the present invention is described. It does not limit the range.

  Therefore, those skilled in the art can employ embodiments in which each or all of these elements are replaced with equivalent ones, and these embodiments are also included in the scope of the present invention.

  FIG. 1 is a schematic diagram illustrating a schematic configuration of a typical information processing apparatus that can function as a terminal device or a server device of the present embodiment by executing a program. Hereinafter, a description will be given with reference to FIG.

  An information processing apparatus 100 shown in the figure corresponds to a so-called consumer game machine, and includes a central processing unit (CPU) 101, a read only memory (ROM) 102, a random access memory (RAM) 103, an interface 104, a controller 105, An external memory 106, an image processing unit 107, a DVD-ROM (Digital Versatile Disc ROM) drive 108, a NIC (Network Interface Card) 109, an audio processing unit 110, a microphone 111, and a hard disk (HD) 121 are included. Various input / output devices can be omitted as appropriate.

  When the information processing apparatus 100 is caused to function as a typical consumer game machine, a DVD-ROM storing a game program and data is mounted on the DVD-ROM drive 108 and the power is turned on. Then, the game program is executed and the game can be played.

  However, in the present embodiment, typically, an application is installed in the HD 121 from a DVD-ROM attached to the DVD-ROM drive 108. Then, by executing the program stored in the HD 121, various applications including a game are executed.

  Further, as will be described later, the terminal device and the server device differ only in the scale and type of information processing to be executed. Essentially, both have the same configuration as the information processing device 100 shown in FIG. Realized.

  In order to make the portable game device portable, the DVD-ROM drive 108 is not used, but an EEPROM (Electrically Erasable Programmable ROM) cassette is mounted in the ROM cassette slot and the HD 121 is mounted. It can also be omitted. In this case, the application program is written in the EEPROM cassette and then the program is executed. In addition, an application program can be installed in the external memory 106.

  The CPU 101 controls the overall operation of the information processing apparatus 100 and is connected to each component to exchange control signals and data. Further, the CPU 101 uses arithmetic operations such as addition / subtraction / multiplication / division, logical sum, logical product, etc. using an ALU (Arithmetic Logic Unit) (not shown) for a storage area called a register (not shown) that can be accessed at high speed. , Logic operations such as logical negation, bit operations such as bit sum, bit product, bit inversion, bit shift, and bit rotation can be performed. In addition, the CPU 101 itself is configured so that saturation operations such as addition / subtraction / multiplication / division for multimedia processing, vector operations such as trigonometric functions, etc. can be performed at a high speed, and those provided with a coprocessor. There is.

  The ROM 102 records an IPL (Initial Program Loader) that is executed immediately after the power is turned on, and when this is executed, the program recorded on the DVD-ROM is read out to the RAM 103 and execution by the CPU 101 is started. The The ROM 102 stores an operating system program and various data necessary for operation control of the entire information processing apparatus 100.

  The RAM 103 is for temporarily storing data and programs, and retains programs and data read from the HD 121 and DVD-ROM, and other data necessary for the progress of the communication battle game and chat communication. Further, the CPU 101 provides a variable area in the RAM 103 and performs an operation by directly operating the ALU on the value stored in the variable, or temporarily stores the value stored in the RAM 103 in the register. Perform operations such as performing operations on registers and writing back the operation results to memory.

  The controller 105 connected via the interface 104 receives an operation input performed when the user executes the game.

  The controller 105 does not necessarily have to be externally attached to the information processing apparatus 100, and may be formed integrally. The controller 105 of the portable terminal device includes various buttons and switches, and handles these pressing operations as operation inputs. In addition, in the information processing apparatus 100 using the touch screen, the user traces the trace of the touch screen using a pen or a finger as an operation input.

  The external memory 106 detachably connected via the interface 104 stores data indicating game play status (past results, etc.), data indicating the progress of the game, and log of chat communication in a network battle ( Data) is stored in a rewritable manner. The user can record these data in the external memory 106 as appropriate by inputting an instruction via the controller 105.

  As described above, it is possible to adopt a form in which the application program is installed in the external memory 106 and executed. This is suitable when the external memory 106 has a large capacity.

  A DVD-ROM mounted on the DVD-ROM drive 108 stores a program for realizing the game and image data and audio data associated with the game. Under the control of the CPU 101, the DVD-ROM drive 108 performs a reading process on the DVD-ROM loaded therein, reads out necessary programs and data, and these are temporarily stored in the RAM 103 or the like.

  The image processing unit 107 processes the data read from the DVD-ROM by an image arithmetic processor (not shown) included in the CPU 101 or the image processing unit 107, and then processes the processed data on a frame memory ( (Not shown). The image information recorded in the frame memory is converted into a video signal at a predetermined synchronization timing and output to a monitor (not shown) connected to the image processing unit 107. Thereby, various image displays are possible.

  As a monitor of a portable terminal device, a small liquid crystal display is typically used. When a touch screen is used as the controller 105, the display panel of the touch screen functions as a monitor. A display device such as a CRT (Cathode Ray Tube) or a plasma display can be used as a monitor for a terminal device or a server device for playing at home.

  The image calculation processor can execute a two-dimensional image overlay calculation, a transmission calculation such as α blending, and various saturation calculations at high speed.

  Also, polygon information arranged in the virtual three-dimensional space and added with various texture information is rendered by the Z buffer method, and the polygon arranged in the virtual three-dimensional space from the predetermined viewpoint position is determined in the direction of the predetermined line of sight It is also possible to perform high-speed execution of operations for obtaining rendered images.

  Further, the CPU 101 and the image arithmetic processor operate in a coordinated manner, so that a character string can be drawn as a two-dimensional image in a frame memory or drawn on the surface of each polygon according to font information that defines the character shape. is there.

  The NIC 109 is used to connect the information processing apparatus 100 to a computer communication network (not shown) such as the Internet, and conforms to the 10BASE-T / 100BASE-T standard used when configuring a LAN. An analog modem for connecting to the Internet using a telephone line, an ISDN (Integrated Services Digital Network) modem, an ADSL (Asymmetric Digital Subscriber Line) modem, a cable modem for connecting to the Internet using a cable television line, etc. These are configured by an interface (not shown) that mediates between these and the CPU 101.

  An application program can be installed in the HD 121 or the like based on information obtained from the computer communication network via the NIC 109.

  The audio processing unit 110 converts audio data read from the HD 121 or DVD-ROM into an analog audio signal, and outputs the analog audio signal from a speaker (not shown) connected thereto. Further, under the control of the CPU 101, sound effects and music data to be generated during the progress of the game are generated, and the corresponding sound is output from a speaker, headphones (not shown), and earphones (not shown). Output.

  When the audio data recorded on the HD 121 or the DVD-ROM is MIDI data, the audio processing unit 110 refers to the sound source data included in the audio data and converts the MIDI data into PCM data. If the compressed audio data is in ADPCM format or Ogg Vorbis format, it is expanded and converted to PCM data. The PCM data can be output by performing D / A (Digital / Analog) conversion at a timing corresponding to the sampling frequency and outputting it to a speaker.

  Furthermore, a microphone 111 can be connected to the information processing apparatus 100 via the interface 104. In this case, the analog signal from the microphone 111 is subjected to A / D conversion at an appropriate sampling frequency so that processing such as mixing in the sound processing unit 110 can be performed as a PCM format digital signal.

  As described above, the information processing apparatus 100 used in the present embodiment typically uses a large-capacity external storage device such as the HD 121. The HD 121 can also perform the same functions as a DVD-ROM or the like mounted on the ROM 102, RAM 103, external memory 106, DVD-ROM drive 108, and the like.

  In addition, it is possible to adopt a form in which a keyboard for accepting a character string editing input from a user, a mouse for accepting various position designations and selection inputs, and the like are connected. In addition, a general-purpose personal computer, a server computer, or the like can be used instead of the information processing apparatus 100 of the present embodiment.

  Further, in the present embodiment, a function for inquiring the time to an NTP (Network Time Protocol) server via a real-time clock (not shown) or the NIC 109 is adopted, and the date and time when the information processing apparatus 100 is used. We are going to use information.

  The information processing apparatus 100 described above corresponds to a consumer game apparatus, but the terminal apparatus and server apparatus of the present invention can be realized as long as the electronic apparatus can perform various input / output processes. . Therefore, the terminal device and server device of the present invention can be realized on various computers such as a mobile phone, a mobile game device, a karaoke device, and a general business computer.

  For example, similarly to the information processing apparatus 100, the business computer has a CPU, RAM, ROM, DVD-ROM drive, NIC, and HD as constituent elements, and has simpler functions than the information processing apparatus 100. In addition, a flexible disk, a magneto-optical disk, a magnetic tape, etc. can be used as an external storage device, and it is typical to use a keyboard or mouse as an input device instead of the controller 105. is there.

  In this embodiment, when an application program is provided from a server computer realized by the information processing apparatus 100 for a server apparatus to a terminal computer realized by the information processing apparatus 100 for a terminal apparatus, the application program Even if various information for installing the program leaks for some reason, the following configuration is adopted so as to suppress unauthorized use as much as possible.

  FIG. 2 is a schematic diagram illustrating a schematic configuration of the terminal device and the server device according to the present embodiment. Below, with reference to this figure, the function of each part in this embodiment is outlined.

  When the user of the terminal device 601 operates the access transmission unit 602 to access the server device 651 asking for an investigation program, the access receiving unit 652 of the server device 651 receives this. Then, the survey program transmission unit 653 is caused to transmit the survey program to the terminal device 601.

  When the investigation program receiving unit 603 of the terminal device 601 receives the investigation program, the CPU 101 executes the investigation program, and the unique information transmitting unit 604 reads the unique information and transmits it to the server device 651.

  The unique information reception unit 654 of the server device 651 receives the transmitted unique information, the encrypted information generation unit 655 encrypts the application information with the received unique information, and the installation information transmission unit 656 encrypts the application information. The completed application information and the installation program are collectively transmitted to the terminal device 601 as installation information.

  When the installation information reception unit 605 of the terminal device 601 receives the installation information and executes the installation program included in the installation information, the application information generation unit 606 reads the unique information and uses this as an encryption key to encrypt the information. Decrypted application information. The installation unit 607 installs the decrypted application information in the HD 121 or the like.

  As described above, each unit of the terminal device 601 is realized by the CPU 101 working together with the NIC 109, the RAM 103, the HD 121, and the like.

  Each unit of the server device 651 is also realized by the CPU 101 cooperating with the NIC 109, the RAM 103, the HD 121, and the like.

  Below, the structure of the server apparatus 651 and the terminal device 601 which concern on this embodiment is demonstrated in detail. FIG. 3 is a session diagram illustrating a state of communication between the server device 651 and the terminal device 601 according to the present embodiment. Hereinafter, a description will be given with reference to FIG.

  First, the terminal device 601 accesses the server device 651 that distributes a desired application program (201).

  Then, the investigation program is transmitted from the server device 651 to the terminal device 601 (202).

  When the terminal device 601 executes the investigation program, the investigation program reads the unique information of the terminal device 601 and transmits the unique information to the server device 651 (203).

  The server device 651 encrypts the application information using the received unique information as an encryption key, and combines the encrypted result with the installation program as installation information, and transmits this to the terminal device 601 (204).

  When the terminal device 601 that has received the installation information executes the installation program included in the installation information, the installation program reads the unique information of the terminal device 601.

  Then, using the read unique information as an encryption key, the application information included in the installation information is decrypted. If the decryption is successful, the installation program installs application information in the terminal device 601.

  FIG. 4 is a flowchart showing a flow of control of service processing realized by executing a server program. Hereinafter, a description will be given with reference to FIG.

  When the server program is executed by a server computer that implements the server device 651, the CPU 101 performs various initializations (step S301) and then waits for a packet transmitted from the terminal device 601 (step S302). ). During this standby, various processes can be executed in a coroutine manner. Further, standby may be realized by parallel processing using a reception interrupt or the like.

  When the packet arrives, the packet is received (step S303), and the type of the packet is examined (step S304). When the packet is an access packet (step S304; access), the investigation program is transmitted to the terminal device 601 that is the transmission source of the packet (step S305), and the process returns to step S302.

  Below, the detail of the investigation program provided to the terminal device 601 is demonstrated once. FIG. 5 is a flowchart showing the flow of control of investigation processing realized by executing the investigation program. Hereinafter, a description will be given with reference to FIG.

When the investigation program is executed by a terminal computer that implements the terminal device 601, the CPU 101 reads specific information of the terminal computer (step S401). Here, as the unique information, the following can be considered.
(1) Information obtained by dividing information on the current date and time managed by a real-time clock of a terminal computer by a predetermined constant into an integer. Here, the predetermined constant is an integer corresponding to the validity period of the installation information, and is typically twice the validity period.
(2) Identification information for identifying application information installed in the HD 121 of the terminal computer. This information is typically stored in a database called a registry in the HD 121, and includes information such as the name of the application program, the installed path name, the serial number, and the date of installation.
(3) The login name of the user who uses the terminal computer.
(4) A unique identification number of the hardware of the terminal computer. For example, CPU 101 ID, NIC 109 MAC address, IP address, and the like.
(5) A hash value obtained as a result of arranging the above information as a byte string. For the calculation of the hash value, for example, an MD5 (Message Digest 5) value can be used.

  The above (1) will be described in more detail. The date and time measured by the real-time clock or the like of the terminal computer is typically an elapsed time from midnight, January 1, 1970, and is obtained as an integer value in seconds. For example, when the effective period is 30 days, the number of seconds corresponding to 60 days is adopted as the predetermined constant.

  With such a configuration, the value obtained by dividing the elapsed time seconds by a predetermined constant does not change until “at least the expiration date has passed from now”. The value obtained by dividing the elapsed time seconds by a predetermined constant does not change in “a period that is twice as long as the expiration date and includes the current time”.

  Therefore, by adopting the information (1) as the unique information, it is possible to naturally introduce an effective period during which installation is possible.

  Next, the CPU 101 displays an application usage contract clause on the screen (step S402), asks the user to input information for making a payment using a credit card or the like (step S403), and sets the payment information and unique information. The specific information packet to be designated is transmitted to the server device 651 (step S404), and this process is terminated.

  Returning to FIG. 4, in the server device 651, when the received packet is a unique information packet (step S304; unique information), payment processing is performed based on the payment information included in the packet (step S306).

  Further, the application information to be provided is encrypted using the unique information included in the packet as an encryption key (step S307).

  For example, in a mode in which a game program is installed in the terminal device 601, application information includes an executable file that functions as a game program main body in addition to multimedia information files such as sound, images, and moving images.

  Further, as an encryption method, a common key encryption such as DES (Data Encryption Standard) and AES (Advanced Encryption Standard) is typically used, and various techniques such as stream encryption and block encryption are applied. It is also possible.

  Then, installation information for specifying the encrypted application information and the installation program is generated (step S308), this is transmitted to the terminal device 601 (step S309), and the process returns to step S302.

  The installation information is typically realized as a self-extracting automatic execution type executable file. Hereinafter, description will be made assuming this form.

  If the received packet is of another type (step S304; other), the associated process is executed (step S310), and the process returns to step S302.

  FIG. 6 is an explanatory diagram showing a flow of control of installation processing executed by the terminal device 601 that has received the installation information. Hereinafter, a description will be given with reference to FIG.

  The CPU 101 of the terminal device 601 starts executing a self-extracting automatic execution type executable file that is installation information (step S501). As a result, the installation program and the encrypted application information are expanded (step S502).

  Next, the CPU 101 starts executing the expanded installation program (step S503). By executing the installation program, the CPU 101 reads unique information of the terminal device 601 (step S504). The information read here is the same type as the information read in step S401.

  Further, if the period from the execution of the investigation program to the execution of the installation program is equal to or less than the effective period, “the information on the current date and time managed by the real-time clock of the terminal computer etc. The same information should be obtained in step S401 and step S504 for “information divided into integers by constants”.

  For this reason, the same specific information can be obtained by executing this installation program on the same terminal device 601 without installing other applications within the effective period.

  Next, the CPU 101 attempts to decrypt the expanded encrypted application information using the obtained unique information as an encryption key (step S505), and determines whether the decryption is successful (step S506).

  If the decryption is successful (step S506; Yes), the CPU 101 installs the decrypted application information in the HD 121 or the like (step S507), and ends this process.

  As described above, in the present embodiment, the terminal device 601 is identified based on the unique information, and this unique information is a value read by the unique information transmitting unit unless it is an unauthorized installation. Should match. In this case, it is possible to decrypt the encrypted application information.

  On the other hand, when the decryption fails (step S506; No), the fact that the installation information is invalid is presented to the user (step S508), and this process ends.

  For example, even if the encrypted information is leaked to a third party for some reason, the unique information of the terminal device 601 is unlikely to coincide. Therefore, even if it leaks, damage can be minimized.

  Even when the valid period is exceeded, the unique information does not match, so the encrypted application information also changes. This can be seen as the validity period information itself being encrypted and embedded in the encrypted application information. For this reason, the fraudulent act which rewrites expiration date information can be suppressed.

  In the present invention, the date and time (typically, the number of seconds elapsed since midnight, January 1, 1970) measured by the real-time clock of the terminal device 601 can be associated with the effective period. A value obtained by dividing an integer by a constant (for example, if it is valid for 30 days, adopts the number of seconds corresponding to 60 days) is reflected in the unique information of the terminal device 601.

  In the present invention, when the installation information has an expiration date, it is not necessary to compare the date and time information, so that fraud can be further prevented.

  In the installation system of the present invention, the terminal device 601 further includes a registry unit that stores identification information for identifying application information installed in the terminal device 601, and the unique information includes identification information stored in the registry unit. It can be configured to be information to be included or a hash value of the information.

  Here, the installed application information is information such as a program name, an installed directory, and a serial number.

  Since what kind of application is installed and how it changes greatly depending on the usage status of the user who uses the terminal device 601, the possibility that these pieces of information coincide by chance is extremely low.

  Therefore, according to the present embodiment, application information that can be installed only on a specific terminal device 601 can be appropriately provided.

  As described above, according to the present invention, there are provided an installation system, a server device, an installation method, and a program for realizing these on a computer, which appropriately provide application information that can be installed only on a specific terminal device. be able to.

100 Information processing apparatus 101 CPU
102 ROM
103 RAM
104 Interface 105 Controller 106 External Memory 107 Image Processing Unit 108 DVD-ROM Drive 109 NIC
110 Audio processing unit 111 Microphone 121 HD
601 Terminal device 602 Access transmission unit 603 Investigation program reception unit 604 Specific information transmission unit 605 Installation information reception unit 606 Application information generation unit 607 Installation unit 651 Server device 652 Access reception unit 653 Investigation program transmission unit 654 Specific information reception unit 655 Encryption Completed information generation unit 656 installation information transmission unit

Claims (7)

An installation system having a terminal device and a server device,
(A) The terminal device
A unique information transmitting unit that reads the unique information of the terminal device and transmits the unique information to the server device;
(B) The server device
A unique information receiving unit for receiving the unique information transmitted from the terminal device;
An encrypted information generation unit that generates encrypted information obtained by encrypting application information to be installed in the terminal device using the received unique information as an encryption key;
An installation information transmission unit for transmitting installation information including the generated encrypted information to the terminal device;
(C) The terminal device
An installation information receiving unit for receiving installation information transmitted from the server device;
Application information that reads unique information of the terminal device, decrypts encrypted information included in the received installation information using the unique information as an encryption key, and generates application information to be installed in the terminal device Generator,
An installation system comprising: an installation unit that installs the generated application information in the terminal device. The installation system according to claim 1,
The server device transmits a survey program that causes a terminal computer to function as the unique information transmission unit to the terminal computer, and the terminal computer receives and executes the survey program as a unique information transmission unit. Function,
The server device causes the terminal computer to function as the application information generation unit and the installation unit, and transmits an installation program including the encrypted information to the terminal computer as the installation information.
The terminal computer functions as an application information generation unit and an installation unit by receiving and executing the installation program. The installation system according to claim 1 or 2,
The installation system characterized in that the unique information is information including a result of dividing the date and time when the unique information of the terminal device is read by a predetermined constant, or a hash value of the information. The installation system according to any one of claims 1 to 3,
The terminal device
A registry unit that stores identification information for identifying application information installed in the terminal device, and the unique information is information including identification information stored in the registry unit or a hash value of the information An installation system characterized by that. A server device that communicates with a terminal device,
A survey program transmitter for transmitting the survey program to the terminal computer;
A unique information receiving unit for receiving the unique information transmitted from the terminal computer;
An encrypted information generation unit that generates encrypted information obtained by encrypting application information to be installed in the terminal computer using the received unique information as an encryption key;
An installation information transmission unit for transmitting installation information including the generated encrypted information and an installation program to the terminal computer;
The survey program includes the terminal computer,
Read the unique information of the terminal computer, function as a unique information transmission unit that transmits the unique information to the server device,
The installation program loads the terminal computer,
Application information that reads the unique information of the terminal computer, decrypts the encrypted information included in the received installation information using the unique information as an encryption key, and generates application information to be installed in the terminal device Generator,
A server device that causes the generated application information to function as an installation unit that installs the application information in the terminal computer. An installation method executed by a terminal device and a server device,
(A) the terminal device
A unique information transmitting step of reading the unique information of the terminal device and transmitting the unique information to the server device;
(B) The server device is
A unique information receiving step for receiving unique information transmitted from the terminal device. Encryption that generates encrypted information obtained by encrypting application information to be installed in the terminal device using the received unique information as an encryption key. Completed information generation process,
An installation information transmission step of transmitting installation information including the generated encrypted information to the terminal device,
(C) the terminal device
An installation information receiving step for receiving the installation information transmitted from the server device;
Application information that reads unique information of the terminal device, decrypts encrypted information included in the received installation information using the unique information as an encryption key, and generates application information to be installed in the terminal device Generation process,
An installation method comprising: an installation step of installing the generated application information in the terminal device. A server program that causes a server computer that communicates with a terminal computer to function as a server device, the server program comprising:
A survey program transmitter for transmitting a survey program to the terminal computer;
A unique information receiving unit for receiving the unique information transmitted from the terminal computer;
An encrypted information generation unit that generates encrypted information obtained by encrypting application information to be installed in the terminal computer using the received unique information as an encryption key;
Functioning as an installation information transmitting unit for transmitting installation information including the generated encrypted information and an installation program to the terminal computer;
The survey program includes the terminal computer,
Read the unique information of the terminal device, function as a unique information transmission unit that transmits the unique information to the server device,
The installation program loads the terminal computer,
Application information that reads the unique information of the terminal computer, decrypts the encrypted information included in the received installation information using the unique information as an encryption key, and generates application information to be installed in the terminal device Generator,
A server program that causes the generated application information to function as an installation unit for installing in the terminal computer.

Images