JP2011138359A - Content use system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To solve the following problems: it takes time and effort to register and set a password in association with user information; and it is troublesome for a user to be careful about management of personal information such as user name or password. <P>SOLUTION: The content use system is provided with a function for using the bunch of reproduction keys owned by a user as information for user authentication, and for authenticating a user as a user α in case of the bunch of the reproduction keys of content A, B, C and D, and for authenticating the user as a user β in case of the bunch of the reproduction keys of content A, C and E. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to a technique for performing user authentication when using content.

  Currently, for example, a viewing service for moving images distributed via the Internet or the like is provided. However, a problem in such a moving image viewing service is the use of moving image data in a form that infringes copyright. Therefore, a configuration is adopted in which user authentication is performed by acquiring a user name and password or cookie data associated with the user name and password when logging into the moving image distribution service server.

  In addition, when purchasing a product including content through online shopping or the like, user authentication is performed using a user name and password or cookie data in the same manner as described above in order to prevent unauthorized use.

JP 2004-240344 A

  However, in the above conventional technique, there is a problem that it is necessary to perform password registration setting in association with user information, which takes time and effort for the user. In addition, since the user name and password itself are one piece of personal information, there is a problem that it is necessary for the user to be diligent in managing the information, and it still takes time for the user.

  In order to solve the above problems, the present invention provides the following content utilization system. In other words, copyrighted content and products (contents) to be purchased through online shopping are encrypted, for example, and reproduction information (reproduction key) such as a decryption key is required for reproduction. . That is, the user holds the content reproduction key in accordance with the content.

  Therefore, in the present invention, a bundle of reproduction keys possessed by a user is used as information for user authentication. For example, if a bundle of reproduction keys of contents A, B, C, D is authenticated as a user α, the contents A, C , E is a bundle of playback keys, and a content use system having a function of authenticating with a user β is provided.

  Specifically, the content use includes a content server device, a television that is used by a user to reproduce the content distributed from the content server device, and an authentication device for user authentication used on the television. The authentication device includes a reproduction key information acquisition unit that acquires a plurality of pieces of reproduction key information used for reproducing content, and performs a calculation according to a predetermined rule using the plurality of acquired reproduction key information. Authentication request information calculation unit for calculating authentication request information for performing the user authentication by performing, rule holding unit for holding the predetermined rule, whether the authentication request information can be correctly authenticated, or information that cannot be correctly authenticated The judgment information holding unit that holds the judgment information for judgment, the judgment information that is held, and the calculated authentication request information An authentication unit for calculating a The authentication result, to provide a content utilization system having a.

  In this manner, user authentication can be performed using a plurality of pieces of reproduction key information without creating and managing a user name, a password, and the like. Of course, by using a password or the like together, the accuracy of user authentication may be increased instead of taking time and effort for managing the password.

  Further, according to the present invention, in the above-described configuration, a content use system in which any one or a combination of an HDD recording / playback apparatus, a content playable personal computer, and a set top box is used instead of the television, or the content is played back. The reproduction key information used for this purpose also provides a content use system that is reproduction key information including a decryption key used for reproducing encrypted content.

  Further, in addition to the above configuration, the television includes a decryption unit that decrypts the encrypted content, and an AV output unit that outputs the decrypted content in AV, and the decryption unit A reproduction key processing means for executing a decryption process using reproduction key information corresponding to the encrypted content desired to be reproduced, and the AV output unit reproduces the reproduction decrypted by the decryption unit. Provided is a content use system having user authentication result processing means for executing a reproduction process using a user authentication result that is correctly authenticated when reproducing desired content.

  Further, in addition to the above configuration, the content server apparatus calculates judgment information for user authentication from the television according to the content distributed to the specific television, and records it in the judgment information holding unit. A content use system having a judgment information calculation unit that performs the above process is provided.

  In addition to the above-described configuration, the content server device includes a reproduction key information output unit that outputs reproduction key information used to reproduce the content to the television according to the content distributed to the specific television. The TV includes a reproduction key information holding unit that holds a plurality of pieces of reproduction key information received from the content server device, and a reproduction key information output unit that outputs the plurality of pieces of held reproduction key information to the authentication device. A content usage system is also provided.

  According to the present invention configured as described above, user authentication for content use can be performed by using a bundle of reproduction keys of content possessed by the user. Therefore, the user can use the content by authenticating himself / herself without creating and managing a user name and password.

  Further, user authentication can be performed without using personal information such as a user name and a password. In addition, it is possible to expect an effect of prompting the user to use the service for such users who are concerned about leakage of personal information. Of course, by using a password or the like together, it is possible to increase the accuracy of user authentication instead of taking time and labor for password management.

Conceptual diagram for explaining an example of user authentication in the content use system according to the first embodiment. The figure showing an example of the functional block in the content utilization system of Example 1. FIG. Conceptual diagram for explaining an example of a plurality of pieces of reproduction key information in the content use system according to the first embodiment. Conceptual diagram for explaining an example of determination information in the content use system according to the first embodiment. The figure showing an example of the hardware constitutions in the contents utilization system of Example 1. The flowchart showing an example of the flow of a process in the content utilization system of Example 1. The figure showing an example of the functional block in the content utilization system of Example 2. The figure showing an example of the hardware constitutions in the contents utilization system of Example 2. The flowchart showing an example of the flow of a process in the content utilization system of Example 2. The figure showing an example of the functional block in the content utilization system of Example 3. The figure showing an example of the hardware constitutions in the contents utilization system of Example 3. A flowchart showing an example of the flow of processing in the contents utilization system of Example 3.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings. Note that the present invention is not limited to these embodiments, and can be implemented in various modes without departing from the spirit of the present invention. In the first embodiment, claims 1, 2 and 3 will be mainly described. In the second embodiment, claims 4 and 6 will be mainly described. In the third embodiment, claims 5 and 6 will be mainly described.

Example 1
<Overview>
FIG. 1 is a conceptual diagram for explaining an example of user authentication in the content use system of the present embodiment. As shown in this figure, for example, the user α has information associated with the reproduction keys of the encrypted contents A, B, C, and D in the television used by the user α. Another user β has information associated with the reproduction keys of the encrypted contents A, C, and E in the television used by the user β.

  Then, when the user α tries to reproduce the encrypted content A using the reproduction key of the content A, the content A, B, C, D is reproduced with respect to, for example, an authentication server in order to authenticate itself. Send key bundle information. On the other hand, when the user β tries to reproduce the encrypted content A, information on a bundle of reproduction keys of the contents A, C, and E is transmitted to an authentication server or the like.

  The authentication server holds the combination information of the contents distributed to the reproduction terminal in advance, so that each user can be authenticated from the difference in the reproduction key bundle (combination). Then, the user α and the user β that have received the reply information to that effect from the authentication server device, for example, reproduce the content A using the reproduction key of the content A.

  On the other hand, for example, the user γ who has copied the contents A and B and the reproduction key thereof without permission from the user α is authenticated even if the reproduction key bundle of the encrypted contents A and B is transmitted to the authentication server. Since the server does not hold the combination information, an authentication result indicating that the user is not a regular user is returned. Therefore, even if the television of user γ holds the reproduction key of the encrypted content A, the content A cannot be reproduced and used.

  As described above, in the content use system according to the present embodiment, it is possible to perform user content authentication and appropriate content reproduction without using a user name or a password.

<Functional configuration>
FIG. 2 is a diagram illustrating an example of functional blocks in the content use system according to the present embodiment. As shown in this figure, the content use system of the present embodiment includes a “content server device” (0200), a “television” (0210), and an “authentication device” (0220). Note that “TV” refers to a device that allows a user to reproduce and use content distributed from a content server device. However, as a similar device, an HDD recording / reproducing device can be used instead of a television, and content can be reproduced. One or a combination of two or more of a personal computer and a set top box may be used.

  In addition, each of these devices may be physically incorporated in another device so that information is communicated with each other via a network or the like, and processing is performed. It may be configured so as to be incorporated in the apparatus and internally linked to perform processing.

  Or each component of the authentication apparatus mentioned later is good also as a structure incorporated in a content server apparatus or a television. Specifically, for example, a “playback key information acquisition unit”, an “authentication request information calculation unit”, and a “rule holding unit” are provided in the television, and a “judgment information holding unit” and an “authentication unit” are provided in the content server device. That is, it is.

  In addition, the functional blocks of each device constituting the system described below can be realized as a combination of hardware and software. Specifically, if a computer is used, a CPU, a main memory, a bus, or a secondary storage device (a hard disk, a non-volatile memory, a storage medium such as a CD or a DVD, a read drive for the medium, etc.), information Input devices used for input, printing equipment, display devices, other hardware components such as external peripheral devices, interfaces for external peripheral devices, communication interfaces, driver programs for controlling these hardware, Other examples include application programs and user interface applications. Then, by CPU processing according to the program developed on the main memory, the data input from the input device or other interface and held in the memory or hard disk is processed and stored, An instruction for controlling the software is generated.

  Alternatively, the functional blocks of this system may be realized by dedicated hardware.

  In addition, the present invention can be realized not only as a system and an apparatus but also as a method. A part of the invention can be configured as software. Further, a software product used to cause a computer to execute such software and a recording medium on which the product is fixed are naturally included in the technical scope of the present invention (the same applies throughout the present specification). .

  As shown in FIG. 2, in the content use system of the present embodiment, the “authentication device” (0220) includes a “playback key information acquisition unit” (0221) and an “authentication request information calculation unit” (0222). A “rule holding unit” (0223), a “judgment information holding unit” (0224), and an “authentication unit” (0225).

  The “reproduction key information acquisition unit” (0221) has a function of acquiring reproduction key information for a plurality of contents, and can be realized by, for example, a CPU, a main memory, a communication circuit, a reproduction key acquisition program, and the like. “Reproduction key information” refers to information used for reproducing content, such as a decryption key used for reproducing encrypted content, a URL for acquiring content, and the like. It is done. Alternatively, the obtained reproduction key information may be identification information of the reproduction key, not the reproduction key itself. The content usage system according to the present embodiment aims to prevent unauthorized use of content by performing user authentication as described below in addition to data protection by reproduction restriction using the reproduction key.

  Specifically, even if the content and its reproduction key are held in the television, there is a possibility that they are copied without permission from another user. Therefore, in the content use system of the present embodiment, in order to authenticate that the user is a legitimate user, the reproduction key acquisition unit acquires reproduction key information for a plurality of contents from one television. In other words, the television (or an HDD recording / reproducing device replacing it, a personal computer capable of reproducing content, and a set-top box) holds the content distributed from the content server device in the past and its reproduction key information. If the number of contents is a predetermined number or more, such as 1000 or more, and the number of contents is selected at random 2 or more (any number is 2 or more) without any bias, TV A, B,. -The probability that the combination of the reproduction key information held by each X matches is extremely low. Therefore, the reproduction key information acquisition unit acquires reproduction key information for a plurality of contents held on a certain television, and compares it with the distribution history (distribution history for each TV) of the content server device. In other words, it is possible to authenticate whether the user is holding the content distributed to the user.

  The reproduction key information may not be transmitted directly from the television. For example, reproduction key information for a plurality of contents may be held in a portable terminal such as a mobile phone, and the reproduction key information transmitted therefrom may be acquired.

  Specifically, for example, a two-dimensional code is printed on a certain magazine, and the URL of the content as the reproduction key information is held in the portable terminal by reading it through the camera of the portable terminal. Thereafter, when the desired content is reproduced, a combination of all (or a predetermined part) of the URLs read so far is transmitted to the authentication apparatus together with the content request for the URL. Then, it is acquired by the “reproduction key information acquisition unit”.

  FIG. 3 is a conceptual diagram for explaining an example of the plurality of reproduction key information. As shown in this figure, the reproduction key information is composed of, for example, numeric characters / symbols for use in content decryption processing or the like. By using this to decrypt the encrypted content, it is possible to obtain content data composed of plain text. Also, the reproduction key information of each content is different key information depending on each content as shown in this figure, and the plurality of reproduction key information is information having discriminability according to the permutation combination or the like. be able to.

  In addition, the reproduction key information shown in this figure may include, for example, a user ID (α in the figure). Even in such a case, in the content utilization system of the present embodiment, the user may be identified not by the user ID but by the permutation combination of the numerical character / symbol string, or the numerical character / symbol may be combined. A user may be identified by a permutation combination of columns. Further, as described above, even when the reproduction key information is the identification information of the reproduction key, the user can be similarly identified by the permutation combination of the numeric character / symbol string indicating the identification information.

  The “authentication request information calculation unit” (0222) has a function of calculating authentication request information for performing the user authentication by performing a calculation according to a predetermined rule using a plurality of acquired reproduction key information. For example, it can be realized by a CPU, a main memory, an authentication request information calculation program, or the like. The “predetermined rule” is, for example, a processing rule or a playback key that combines all of the numeric characters / symbols indicated by the play key in the order of acquisition of the play key and combines them. For example, a processing rule for arranging a part of a predetermined number character / symbol string at a predetermined position in the order of acquisition of the reproduction key is combined. Alternatively, there may be a processing rule for arranging numeric characters / symbol strings of the identification numbers of the reproduction keys in the order of acquisition of the reproduction keys. Further, when the reproduction key information is combined in the acquisition order, only the first, third and fifth reproduction key information may be combined.

  The “rule holding unit” (0223) has a function of holding the predetermined rule, and can be realized by various recording devices such as an HDD, a flash memory, or an optical recording medium and a reading device thereof. Since the “predetermined rule” has already been described above, its description is omitted. Further, the predetermined rule may be configured to improve confidentiality by being held in the tamper-resistant area of the recording apparatus.

  The “judgment information holding unit” (0224) has a function of holding judgment information, and can be realized by various recording devices such as an HDD, a flash memory, or an optical recording medium and its reader. The “determination information” is information for determining whether the authentication request information can be correctly authenticated or cannot be correctly authenticated.

  The determination information is specifically generated as follows. For example, when content and content reproduction key information are transmitted from the content server device to the television, the reproduction key information transmitted to one television is combined in the transmission order using identification information such as the MAC address of the television as a key, Is generated as determination information. Further, when the authentication request information is a combination of the reproduction key information acquired in the first, third, and fifth as described above, this determination information also uses only the reproduction key information distributed in the first, third, and fifth. It should be configured to do.

  The determination information generated in this way is held in the authentication device, so that it can be compared with the combination of the plurality of reproduction key information transmitted from the television. Further, when the reproduction key information is usable for a limited time, for example, as shown in FIG. 4, the judgment information is updated by deleting the combination that has reached the limited time from the above-mentioned combination. good.

  The “authentication unit” (0225) has a function of calculating a user authentication result based on the stored determination information and the calculated authentication request information, and can be realized by, for example, a CPU, a main memory, an authentication program, or the like. it can.

  Specifically, the judgment information that is held, for example, a numeric character / symbol string indicating a combination of reproduction key information distributed to a certain TV, and a TV that makes an authentication request that is calculated authentication request information are held. A comparison process of the numerical character / symbol string indicating the combination of the reproduction key information being executed is executed by a logical operation of the CPU. If the two match, the authentication result indicating that the request is a correct authentication request is output as an authentication request from the television that has acquired the content by regular distribution.

  Further, as a result of authentication, a reproduction key that is finally used for reproducing content may be returned. In this case, it is preferable that the reproduction keys for a plurality of contents to be acquired (that is, the reproduction keys initially held on the television) are dummy or only a part of the correct reproduction key. Then, on the television, it is possible to reproduce the content by using the reproduction key returned as the authentication result or by combining it with the reproduction key originally held. The reproduction key returned as the authentication result may be configured to be recycled for subsequent user authentication.

  As described above, the content use system according to the present embodiment can perform user authentication for content use by using a bundle of reproduction keys of content owned by the user. Therefore, the user can use the content by authenticating himself / herself without creating and managing a user name and password.

  Further, user authentication can be performed without using personal information such as a user name and a password. In addition, it is possible to expect an effect of prompting the user to use the service for such users who are concerned about leakage of personal information.

  In the above-described embodiment, the content use system for playing back encrypted content has been described. However, the use of content in this embodiment is not limited to the playback of content. For example, the purchase of a product (content) through online shopping is included in the use of the content in this embodiment. In this case, the content reproduction key is information for purchase, and user authentication at the time of content purchase is executed using the bundle of reproduction key information for purchase. Further, in the content use system of the present embodiment, it is not necessary that all of the content reproduced on the television is authenticated by the authentication device. The authentication device may be configured to perform user authentication in response to a request from the television.

<Hardware configuration>
FIG. 5 is a schematic diagram illustrating an example of a configuration of the authentication apparatus when the functional components are realized as hardware. The operation of each hardware component in the user authentication process will be described using this figure.

  As shown in this figure, the authentication device is an authentication request information calculation unit and an authentication unit, and “CPU” (0501), “main memory” (0502) for executing various other arithmetic processes, It has. In addition, “HDD” (0503) which is a rule holding unit and determination information holding unit, “communication circuit” (0504) which is a reproduction key acquisition unit, and the like are also provided. They are connected to each other via a data communication path such as a “system bus” to transmit / receive information and process information.

  A program is read out to the “main memory”, and the “CPU” refers to the read out program and executes various arithmetic processes according to the procedure indicated by the program. In addition, a plurality of addresses are assigned to each of the “main memory” and “HDD”, and in the arithmetic processing of the “CPU”, the address is specified and the stored data is accessed to access the data. It is possible to perform the arithmetic processing used.

  Here, the authentication apparatus according to the present embodiment acquires and holds determination information from the content server apparatus as follows. That is, when the content server device transmits the content and the reproduction key information of the content to the television, the content server device transmits the content information together with identification information such as the MAC address of the television to the authentication device via the Internet network. In the authentication device, when the reproduction key information is received by the “communication circuit”, the reproduction key information already held in the “HDD” is searched using the received identification information as a search query. If there is reproduction key information associated with the same identification information, the reproduction key information is combined, for example, in the order of reception by the calculation processing of the “CPU”, and is recorded in the “HDD” as determination information.

  Thereafter, when the content is used on the television, the authentication device receives a plurality of reproduction key information transmitted from the television via the “communication circuit” via the Internet. Then, the plurality of pieces of reproduction key information are stored at addresses 1, 2,. Subsequently, the “CPU” interprets the authentication request information calculation program, generates and calculates authentication request information from the reproduction key information according to a rule such as combining a plurality of reproduction key information according to the interpretation result, Stored in address 3 of “main memory”.

  Then, according to the authentication program, “CPU” matches the character string indicated by the determination information held in “HDD” with the character string indicated by the authentication request information stored in “main memory”. Logical operation processing is performed to determine whether or not. If the calculation results match, a user authentication result indicating that the user is a legitimate user is generated, and the authentication result is output from the “communication circuit” to the television via the Internet network.

  And, on the television, only when a user authentication result indicating that the user is a regular user is received, the content can be reproduced by performing, for example, decryption processing of the content using the reproduction key information. .

<Process flow>
FIG. 6 is a flowchart illustrating an example of a processing flow in the authentication apparatus of the content use system according to the present exemplary embodiment. The steps shown below may be steps executed by each hardware configuration of the computer as described above, or may be processing steps that constitute a program for controlling the computer recorded on a medium. I do not care.

  As shown in this figure, first, in the authentication device, for example, the reproduction key information of the content distributed by the content server device is acquired together with the identification information of the transmission destination from the content server device, and determination information based on the information is obtained. Is generated and recorded in the recording device (determination information holding unit) (step S0601).

  After that, when the reproduction key information used for reproducing the content is acquired for a plurality of contents from the television (step S0602), the calculation is performed according to a predetermined rule using the acquired plurality of reproduction key information, and the authentication request information is obtained. Calculate (step S0603). Then, the user authentication result is calculated from the determination information held in the determination information holding unit and the calculated authentication request information (step S0604). Then, if the user authentication result is returned to the television and the user authentication result indicates that the user is an authorized user, the content can be used on the television.

<Brief description of effect>
As described above, in the content use system according to the present embodiment, user authentication for content use can be performed using a bundle of content reproduction keys held by the user. Therefore, the user can use the content by authenticating himself / herself without creating and managing a user name and password.

  Further, user authentication can be performed without using personal information such as a user name and a password. In addition, it is possible to expect an effect of prompting the user to use the service for such users who are concerned about leakage of personal information. Of course, if user authentication is performed together with a password or the like, there is an effect that the accuracy of authentication can be improved instead of taking time and effort for management.

<< Example 2 >>
<Overview>
This embodiment is characterized by the television in the content use system. Specifically, the television uses a decryption key as reproduction key information, and executes a content reproduction process only when a user authentication result in the authentication device indicates “authorized user”. To do.

<Functional configuration>
FIG. 7 is a diagram illustrating an example of functional blocks in the content use system according to the present embodiment. As shown in this figure, the content utilization system of the present embodiment is based on the above-described embodiment, and includes a “content server device” (0700), “television” (0710), “authentication device” (0720), including. As for the authentication device, although illustration and explanation thereof are omitted, the “reproduction key information acquisition unit”, “authentication request information calculation unit”, “rule holding unit”, An “information holding unit” and an “authentication unit”.

  In the content usage system of the present embodiment, as shown in FIG. 7, the “television” (0710) includes a “decryption unit” (0711) and an “AV output unit” (0712). Further, the decryption unit has “reproduction key processing means” (0713), and the AV output unit has “user authentication result processing means” (0714).

  The “decryption unit” (0711) has a function of decrypting the encrypted content. For example, a dedicated decoder corresponding to a predetermined content encryption process such as CSS and MULT12, a CPU and a main memory, It can be realized by a decryption program or the like corresponding to the encryption process. This decryption unit has a “reproduction key processing means” (0713) as shown in the figure.

  The “reproduction key processing means” (0713) has a function of executing a decryption process using reproduction key information corresponding to encrypted content desired to be reproduced. However, the television of this embodiment is characterized in that the content cannot be used only with the content and the reproduction key information for decryption processing used in the reproduction key processing means. This is because there is a possibility that the user is an unauthorized user obtained by copying the content for each reproduction key information from a legitimate user.

  Therefore, the television of this embodiment can be used only when the user is authenticated as an authorized user by the following “AV output unit” and “user authentication result processing means”.

  The “AV output unit” (0712) has a function for AV output of the decrypted content, and can be realized by, for example, a video processor, a VRAM, a display, a speaker, an AV output program, or the like. The AV output unit has a “user authentication result processing means” (0714) as shown in the figure.

  The “user authentication result processing means” (0714) has a function of executing a reproduction process using a user authentication result that has been correctly authenticated when reproducing the content desired to be reproduced decrypted by the decryption unit. It can be realized by a CPU, a main memory, a user authentication result processing program, or the like.

  The acquisition of the user authentication result is as follows. That is, all the reproduction key information acquired together with the content from the content server device is collectively transmitted to the authentication device. Then, the user authentication result is returned by the process described in the first embodiment.

  For this purpose, the television may further have the following configuration (not shown). That is, a “reproduction key information holding unit” that holds a plurality of reproduction key information received from the content server device, and a “reproduction key information output unit” that outputs the plurality of held reproduction key information to the authentication device, You may have.

  Further, the processing order of the user authentication result processing unit and the reproduction key processing unit may be any first. That is, after the content is decrypted by the reproduction key processing means, the user authentication result inquiry and the process according to the returned user authentication result may be performed, or conversely, after the user authentication result inquiry, The decryption processing of the encrypted content by the reproduction key processing means may be performed (if the authentication result indicates that the user is an authorized user).

  In this manner, the television of the present embodiment can authenticate whether or not the user can obtain and use the content properly without transmitting personal information such as a user name and a password.

<Hardware configuration>
FIG. 8 is a schematic diagram illustrating an example of a configuration in a television when the above functional components are realized as hardware. The operation of each hardware component in the content reproduction process will be described with reference to FIG.

  As shown in this figure, the television is a decoding unit, and includes a “CPU” (0801) and a “main memory” (0802) for executing various other arithmetic processes. In addition, “AV output circuit” (0803) and “display (including speakers)” (0804), “HDD” (0805), “input device” (0806), “communication circuit” (0807) which are AV output units. Etc. They are connected to each other via a data communication path such as a “system bus” to transmit / receive information and process information.

  Here, upon receiving a plurality of encrypted contents and their reproduction key information from the content server apparatus, the television records and stores them in the “HDD”. Thereafter, when the user operates the “input device” and receives a playback command for one of the plurality of encrypted contents stored in the “HDD”, the “CPU” interprets the authentication result processing program. Then, according to the interpretation result, all the reproduction key information held in the “HDD” (or a part of the first, third, and fifth as described in the first embodiment) is transferred from the “communication circuit” to the Internet. It transmits to the authentication device via the network.

  When the user authentication result calculated and returned by the authentication apparatus by the process described in the first embodiment is received by the “communication circuit”, the television stores the user authentication result at address 1 of the “main memory”. To do. Then, the “CPU” determines whether the user authentication result is a result indicating that the user is an authorized user according to the interpretation result of the authentication result processing program. If the determination result indicates that the user is an authorized user, the “CPU” interprets the decryption program, and executes decryption processing of the encrypted content using the reproduction key information according to the interpretation result. Then, the decrypted content is transferred to the “AV output circuit”, and the content is output from the “display”.

<Process flow>
FIG. 9 is a flowchart illustrating an example of a process flow in the television of the content use system according to the present exemplary embodiment. The steps shown below may be steps executed by each hardware configuration of the computer as described above, or may be processing steps that constitute a program for controlling the computer recorded on a medium. I do not care.

  As shown in this figure, first, in a television, for example, content and its reproduction key information are acquired from a content server device, and recorded in a recording device (step S0901).

  Thereafter, when using the content, all or a part of a plurality of pieces of reproduction key information recorded in the recording device is transmitted to the authentication device (step S0902). If the user authentication result received as a response to the response indicates that the user is a regular user, for example (step S0903), the content is decrypted using the reproduction key information (step S0904). The content is output to a display or the like (step S0905).

<Brief description of effect>
As described above, the television of the content use system according to the present embodiment can authenticate whether or not the user can obtain and use the content properly without transmitting personal information such as a user name and a password.

Example 3
<Overview>
The present embodiment is characterized by the content server device in the content utilization system. Specifically, the content server device is characterized in that, for example, a television is distinguished by a MAC address or the like, and the determination information is generated by collecting reproduction keys distributed for each television.

<Functional configuration>
FIG. 10 is a diagram illustrating an example of functional blocks in the content use system according to the present embodiment. As shown in this figure, the content utilization system of the present embodiment is based on the above-described embodiment, and includes a “content server device” (1000), a “television” (1010), an “authentication device” (1020), including. As for the authentication device, although illustration and explanation thereof are omitted, the “reproduction key information acquisition unit”, “authentication request information calculation unit”, “rule holding unit”, An “information holding unit” and an “authentication unit”. The television also includes a “decryption unit”, “AV output unit”, “reproduction key processing unit”, and “user authentication result processing unit” as described in the above embodiment. Description is omitted.

  And the content utilization system of a present Example is characterized by the "content server apparatus" (1000) having a "judgment information calculating part" (1001), as shown in FIG.

  The “determination information calculation unit” (1001) calculates calculation information for user authentication from a television according to the content distributed to the specific television, and records it in the determination information holding unit. It has a function of processing, and can be realized by, for example, a CPU, a main memory, a judgment information calculation program, and the like.

  Specifically, for example, when a content distribution request is received from the television to the content server device of the present embodiment, the reproduction key information of the content to be distributed is acquired in association with identification information such as the MAC address of the television. . Then, the past distribution history is referred to using the identification information as a search query, and the reproduction key information transmitted to one television is combined in the order of transmission, for example, and generated as determination information. Further, in accordance with the rule for calculating the authentication request information, a combination of the reproduction key information acquired first, third, and fifth as described above may be generated as determination information. Further, as described above, the determination information may be updated by deleting the combination that has reached the limited period.

  For this purpose, the content server apparatus may further have the following configuration (not shown). That is, a “reproduction key information output unit” that outputs reproduction key information used for reproducing the content to the television according to the content distributed to the specific television may be provided.

  In this way, the content server apparatus according to the present embodiment can generate determination information for correctly authenticating with the authentication apparatus.

<Hardware configuration>
FIG. 11 is a schematic diagram illustrating an example of the configuration of the content server device when the above functional components are realized as hardware. The operation of each hardware component in the determination information generation process will be described with reference to FIG.

  As shown in this figure, the content server device is a determination information calculation unit, and includes a “CPU” (1101) and a “main memory” (1102) for executing various other calculation processes. Yes. Also, “HDD” (1103), “communication circuit” (1104) and the like are provided. They are connected to each other via a data communication path such as a “system bus” to transmit / receive information and process information.

  Here, when a content distribution request is received by the “communication circuit” from the television, the content server device distributes the content and its reproduction key information to the television in response to the request. Further, the “CPU” interprets the judgment information calculation program, and searches the past content distribution history held in “HDD” according to the interpretation result, for example, using the television identification information included in the request as a key. Then, the reproduction key information of a plurality of contents distributed to one TV is identified from the content distribution history that has been found in the search, and the judgment information generated by combining them is stored at address 1 of “main memory”. . Then, the determination information is transmitted to the authentication apparatus through the “communication circuit” at an appropriate timing (transmission in a predetermined cycle, reply in response to a request from the authentication apparatus, etc.).

<Process flow>
FIG. 12 is a flowchart illustrating an example of a processing flow in the content server apparatus of the content usage system according to the present exemplary embodiment. The steps shown below may be steps executed by each hardware configuration of the computer as described above, or may be processing steps that constitute a program for controlling the computer recorded on a medium. I do not care.

  As shown in this figure, first, the content server device distributes the content and its reproduction key information in response to a request from the television, for example (step S1201). In accordance therewith, according to the content distributed to a specific television, judgment information for user authentication from the television is calculated (step S1202), and recorded in the judgment information holding unit, for example, authentication. Processing such as transmission to the apparatus is performed (step S1203).

<Brief description of effect>
As described above, the content server apparatus according to the present embodiment can generate determination information for correctly authenticating with the authentication apparatus.

0200 Content server device 0210 Television 0220 Authentication device 0221 Playback key information acquisition unit 0222 Authentication request information calculation unit 0223 Rule holding unit 0224 Judgment information holding unit 0225 Authentication unit

Claims (6)

A content use system including a content server device, a television that a user plays and uses content distributed from the content server device, and an authentication device for user authentication used on the television,
The authentication device
A reproduction key information acquisition unit for acquiring a plurality of pieces of reproduction key information used for reproducing content;
An authentication request information calculation unit for calculating authentication request information for performing the user authentication by performing a calculation according to a predetermined rule using the obtained plurality of reproduction key information;
A rule holding unit for holding the predetermined rule;
A determination information holding unit that holds determination information for determining whether the authentication request information can be correctly authenticated or cannot be correctly authenticated;
An authentication unit that calculates a user authentication result based on the stored determination information and the calculated authentication request information;
A content use system comprising:   The content use system according to claim 1, wherein instead of the television, an HDD recording / reproducing apparatus, a personal computer capable of reproducing content, or a set top box is used.   The content use system according to claim 1 or 2, wherein the reproduction key information used for reproducing the content is reproduction key information including a decryption key used for reproducing the encrypted content. The TV
A decryption unit for decrypting the encrypted content;
An AV output unit for AV output of the decrypted content,
The decryption unit has a reproduction key processing means for performing a decryption process using the reproduction key information corresponding to the encrypted content desired to be reproduced,
4. The AV output unit includes user authentication result processing means for executing a reproduction process using a user authentication result that has been correctly authenticated when reproducing the content desired to be reproduced decrypted by the decryption unit. Content usage system described in 1. The content server device
In accordance with the content delivered to a specific TV, it calculates judgment information for user authentication from that TV,
The content use system according to any one of claims 1 to 4, further comprising a determination information calculation unit that performs processing for recording in the determination information holding unit. The content server device
A reproduction key information output unit that outputs reproduction key information used to reproduce the content to the television according to the content distributed to the specific television;
TV
A reproduction key information holding unit for holding a plurality of reproduction key information received from the content server device;
6. The content use system according to claim 1, further comprising: a reproduction key information output unit configured to output a plurality of held reproduction key information to the authentication device.

Images