JP2011191995A - Download device and content sales system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a content sales system, capable of reducing loads on the side of a provider device related to user authentication, and capable of purchasing contents from a plurality of provider sites when registered as a member once. <P>SOLUTION: The download device 10 of the content sales system includes: a verifier for verifying whether it is a provider device 11 registered beforehand in the download device 10 when user authentication information is received from the provider device 11; a unit for authenticating the user authentication information received from the provider device 11 in the case of the provider device 11 registered beforehand in the download device 10; and a determiner for determining the permission of download on the basis of at least an authentication result for the user authentication information. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to a technology for causing a terminal device to download content purchased at a site on the Internet using the terminal device.

  A system for selling contents such as videos, music, electronic books, etc. on the Internet has become widespread, and a user uses a terminal device to connect to a provider device that is a server device operated by a provider site that sells content. You can now access and easily purchase the contents sold on the provider site.

  Many provider sites operated by provider devices allow content sales only to users who have registered as members of the provider site. However, a system for selling content on the Internet will become popular. As a result, the load related to membership registration has become a problem both on the provider site side and on the user side who uses the provider site.

  The load related to member registration on the provider device side includes a load related to content distribution when the number of member registrations increases and a load related to member management.

  If a provider device is provided with a function for distributing content as in Patent Document 1, the load related to content distribution increases when the number of registered members increases, so as currently disclosed in Patent Document 2 In general, a download device, which is a server device that transmits content sold at a provider site to a user terminal device, is installed separately from the provider device that operates the provider site.

  In addition, as a load on the provider site related to membership management, there is a load related to user authentication performed when selling contents, but a device for reducing the load related to user authentication performed when selling contents is examined. Was not.

  On the other hand, the load on the user side related to member registration includes a work load related to the trouble of registering a member in the provider site. With the spread of smartphones and e-book viewers, the popularity of content has increased, and the number of provider sites that sell content on the Internet has increased. When purchasing contents from an unregistered provider site, it is necessary to register as a member in this provider site again, and as a result, membership registration in many provider sites is required.

Japanese Patent No. 3296767 Japanese Patent No. 3428979

  In view of such problems, the present invention can reduce the load on the provider device side related to user authentication performed when selling content, and if the member is registered only once, the content can be obtained from a plurality of provider sites. It is an object of the present invention to provide a content sales system capable of purchasing a download device included in the content sales system.

A first invention that solves the above-described problem is a content sales system that includes at least a provider device in which a site for selling content is operated and a download device that transmits content to a terminal device that has accessed the provider device. When the provider device receives a purchase request from the terminal device, the provider device transmits the user ID and authentication information acquired from the terminal device to the download device, and only when the download device is notified of permission to download. , Comprising a selling means for transmitting to the terminal device a web page for downloading the content for which the provider device has received a purchase request,
The download device includes a provider verification unit that verifies whether the provider device that has transmitted the user ID and authentication information of a user who purchases content is the provider device registered in advance in the download device; Reference information is stored in association with the user ID registered as a member, and the reference authentication corresponding to the user ID received from the provider device when the provider verification means succeeds in verifying the validity of the provider device. And the user authentication means for authenticating the authentication information received from the provider device, and the provider device to the terminal device that has transmitted the user ID and the authentication information upon successful authentication of the authentication information. Allowed download of the content that the purchase request was received The download permission determination result is stored, the download determination means for notifying the provider device of the permission determination result, and when the content download request is received from the terminal device, the content download permission determination result is displayed. The content sales system is characterized by comprising download means for transmitting the content to the terminal device when the download permission is indicated.

  According to the first invention, when the user authentication information is received from the provider device, it is verified whether the provider device is pre-registered in the download device, and if the provider device is pre-registered in the download device, By providing the download device with a function for authenticating user authentication information received from the device, it is possible to reduce the load on the provider device side related to user authentication performed when selling content. Even if there is an unauthorized access from a provider device that is not registered in advance in the download device, it is possible to prevent unauthorized download of content by verifying that the provider device is registered in advance in the download device.

  In addition, by providing the download device with a function to authenticate the user who is operating the terminal device that is the content transmission destination, if the user who purchases the content is registered as a member in the download device, it is operated by the provider device. Even without registering as a member for each provider site, contents can be purchased from a provider site operated by a provider device registered in advance in the download device.

  Further, the second aspect of the present invention provides the sales history including the user ID and the authentication information when the selling means of the provider device transmits the user ID and the authentication information acquired from the terminal device to the download device. And sending the sales history with the digital signature generated with the private key of the provider device to the download device, wherein the provider verification means uses the digital signature assigned to the sales history to the provider The content sales system according to the first aspect of the invention is characterized in that it is means for verifying the authenticity of the provider device by verifying with the public key included in the public key certificate of the device.

  According to the second invention described above, even if there is an unauthorized access to a download device by misrepresenting a valid provider device, the provider that transmitted the user authentication information using the PKI (Public Key Infrastructure) scheme By verifying the legitimacy of the device, it is possible to prevent illegal content downloads.

  Further, according to a third aspect of the present invention, the sales history generated by the selling means of the provider device includes a sales price of the content for which the provider device has received a purchase request, and the download device includes the sales history. Charging means for performing a charging process for the selling price included in the download price, and the download determination means is provided only when the authentication information has been successfully authenticated and the charging process for the selling price has ended normally. The content distribution system according to the second invention, wherein the content distribution system is a means for permitting the download of the content in response to a purchase request.

  According to the third aspect of the invention described above, by providing the download device with a billing unit that performs billing processing for the sales price included in the sales history, in addition to user authentication, the load related to billing processing on the provider device side can be reduced. Can do.

  Furthermore, the fourth invention is a download device that transmits content to a terminal device that has accessed a provider device that operates a site that sells content, and transmits the user ID and authentication information of the user who purchases the content Provider verification means for verifying whether the provider device is the provider device registered in advance in the download device; storing reference information in association with the user ID registered as a member in the download device; User authentication means for authenticating the authentication information received from the provider apparatus using the reference authentication corresponding to the user ID received from the provider apparatus when the provider verification means has succeeded in verifying the validity of the provider apparatus. And when the authentication information is successfully authenticated, the user The terminal device that has transmitted the ID and the authentication information permits the provider device to download the content for which a purchase request has been received, stores the download permission determination result, and sends the permission determination result to the provider device. When the download determination means to notify and the download request for the content are received from the terminal device, the content download permission determination result is referred to, and when the download permission is indicated, the content is indicated as the terminal device. A download device characterized by comprising download means for transmitting to.

  Further, according to a fifth aspect of the present invention, the provider verification unit of the download device assigns a digital signature generated with a secret key of the provider device to the sales history including the user ID and the authentication information. The download device according to the fourth aspect of the present invention is means for verifying the validity of the provider device by verifying with the public key included in the public key certificate of

  Further, according to a sixth aspect of the present invention, the download device includes a charging unit that performs a charging process for the sales price included in the sales history, the download determination unit succeeds in authenticating the authentication information, and The download device according to the fifth aspect, wherein the provider device determines that the validity of the download of the content for which the purchase request has been received has been successfully verified only when the billing process for the sales price is completed normally It is.

  The fourth to sixth aspects of the invention relate to a download device that constitutes the content sales system according to the first to third aspects of the invention.

  As described above, according to the present invention, it is possible to reduce the load on the provider device side related to user authentication performed when selling contents, and purchase contents from a plurality of provider sites if membership registration is performed only once. It is possible to provide a content sales system that can be used and a download device included in the content sales system.

The figure explaining the structure of the content sales system in this embodiment. The figure explaining the hardware with which the server apparatus was equipped. The block diagram of a provider apparatus. The block diagram of a download apparatus. The 1st flowchart of the process performed when selling a content. The 2nd flowchart of the process performed when selling a content. The figure explaining the web page which displays the list of contents. The figure explaining the web page explaining the detail of a content. The figure explaining the web page for content purchase confirmation. The figure explaining the web page for inputting a password. The figure explaining the web page for download. The figure explaining URI of download origin.

  From this, the embodiments of the present invention will be described to the extent that those skilled in the art of the present invention can understand the contents of the present invention and implement the present invention.

  FIG. 1 is a diagram illustrating a configuration of a content sales system 1 according to the present embodiment. The content sales system 1 illustrated in FIG. 1 is a system developed for a system that sells electronic books as content, and the content sales system 1 illustrated in FIG. 1 includes at least the Internet 13 as a network. The terminal device 12 possessed, a plurality of provider devices 11 operating provider sites (herein, electronic book sites) for selling electronic books on the Internet 13, and all contents sold on the provider sites And a download device 10 for transmitting content sold on the provider site to the terminal device 12.

  In the conventional system, a function for authenticating a user who has registered as a member in the provider site is provided for each provider device 11. However, in the content sales system 1 illustrated in FIG. 1, when user authentication information is received from the provider device 11. A function of verifying whether the provider device 11 is registered in advance in the download device 10 and authenticating user authentication information received from the provider device 11 if the provider device 11 is registered in advance in the download device 10. It is provided in the download device 10 so as to reduce the load on the provider device 11 side related to user authentication performed when selling content.

  Further, by providing the download device 10 with a function for user authentication of a user who is operating the terminal device 12 that is the content transmission destination, if the user who purchases the content registers as a member in the download device 10, the provider device 11 The content can be purchased from the provider site operated by the provider device 11 that can use the download device 10 without registering as a member for each provider site operated by.

  In addition, since it is conceivable that the legitimate provider device 11 is spoofed and unauthorized access to the download device 10 is performed, in this embodiment, user authentication information is transmitted using a PKI (Public Key Infrastructure) scheme. The validity of the provider apparatus 11 is verified.

  From here, each apparatus which comprises the content sales system 1 illustrated in FIG. 1 is demonstrated. The content sales system 1 illustrated in FIG. 1 includes a plurality of provider devices 11, but each provider device 11 has the same function.

  The terminal device 12 used by the user of the content sales system 1 has a function as an Internet terminal, and a computer program (here, a browser) for browsing a web page published on the Internet 13 is implemented. A general-purpose device can be used. Specifically, a commercially available device such as a mobile phone, a smartphone, or a personal computer can be used as the terminal device 12.

  The download device 10 and the provider device 11 of the content sales system 1 are server devices that are realized using a commercially available server device, and the commercially available server device includes hardware as illustrated in FIG. It is common.

  FIG. 2 is a diagram for explaining hardware provided in the server device 2 used as the download device 10 and the provider device 11.

  A commercially available server device includes, as hardware, a CPU 2a (CPU: Central Processing Unit), a ROM 2b (ROM: Read-Only Memory) on which a BIOS is mounted, and a RAM 2c (RAM: Random Access Memory) which is a main memory of a computer. ), A large-capacity data storage device 2d (for example, a hard disk) as an external storage device, an input / output interface 2e for data communication with an external device, a network interface 2f for network communication, a display 2g, and characters An input device 2h and a pointing device 2i are provided.

  The data storage device 2d of the server device 2 used as the download device 10 is mounted with a computer program for functioning as the download device 10 according to the present invention, and is stored in the data storage device 2d of the server device 2 used as the provider device 11. Is implemented with a computer program for functioning as the provider apparatus 11 according to the present invention. In addition to the data storage device 2d, the server device 2 used as the download device 10 is connected to a storage system capable of storing a large number of contents and reducing the time from receiving a download request until the contents can be transmitted. In general.

  FIG. 3 is a block diagram of the provider apparatus 11 included in the content sales system 1. As shown in FIG. 3, in the provider apparatus 11 in which the content provider site is operated, the sales means 110 for selling the content and the sales history for storing the content sales history are provided as functions realized by the computer program. A DB 111 is provided.

  The sales device 110 provided in the provider device 11 is a device for selling content to the user by switching the web page displayed on the terminal device 12 in accordance with the operation received from the user, and is provided in the provider device 11. The detailed operation of the selling means 110 will be described following the procedure executed when selling the content.

  FIG. 4 is a block diagram of the download device 10 included in the content sales system 1. As illustrated in FIG. 4, the download device 10 includes a content DB 107 a that stores all content handled by all provider devices 11 as a database (DB: DataBase), and a user who has registered as a member in the download device 10. Member information DB 107b that stores member information of the provider, provider DB 107c that stores information used for verification of the provider device 11 that is permitted to use the download device 10 in advance, and sales that stores the sales history received from the provider device 11 A history DB 107d is provided.

  Further, as functions realized by the computer program, the download unit 100 that transmits the content that has received a download request from the terminal device 12 to the terminal device 12 and the download device 10 that receives a transmission confirmation request from the provider device 11, It is verified whether the transmission confirmation means 101 that confirms whether the content that has received the transmission confirmation request can be transmitted and the provider apparatus 11 that has transmitted the user authentication information are the provider apparatuses 11 registered in the download apparatus 10 in advance. The provider verification unit 102, the user authentication unit 103 that authenticates the user authentication information received from the provider device 11, the charging unit 104 that executes the charging process for the content purchase, the user authentication information has been successfully authenticated, and , Billing for content purchase If the processing is normally completed, the provider apparatus 11 permits the download of the content requested for purchase, and uses the download determination unit 105 that notifies the provider apparatus of the download permission determination result and the provider site operated by the provider apparatus 11. Member registration means 106 for registering the member information of the user is provided.

  The download means 100 provided in the download device 10 is means for transmitting the content received from the terminal device 12 to the terminal device 12, and the download means 100 before transmitting the content to the terminal device 12, If the permission determination result of the download determination unit 105 indicates that the content is permitted to be downloaded, the content is transmitted to the terminal device 12 and when the download completion notification is received from the terminal device 12, the download is completed. The process to memorize is performed.

  The transmission confirmation means 101 provided in the download apparatus 10 is a means for confirming whether the transmission of the content received from the provider apparatus 11 is valid. The transmission confirmation means 101 refers to the content DB 107a and transmits the content. Confirm that the transmission of the requested content is valid.

  The provider verification means 102 provided in the download apparatus 10 is means for verifying whether the provider apparatus 11 that has transmitted the user authentication information is the provider apparatus 11 registered in the download apparatus 10 in advance. The provider verification unit 102 verifies the legitimacy of the provider apparatus 11 that has transmitted the user authentication information by using PKI.

  Specifically, the download device 10 stores a public key certificate issued by a certificate authority trusted by the download device 10 for each provider device 11 registered in advance in the download device 10 and makes a content transmission request. By verifying the validity of the digital signature received from the provider apparatus 11 using this public key, the validity of the provider apparatus 11 that has requested the content transmission is verified.

  The user authentication means 103 provided in the download apparatus 10 is a means for authenticating the user by authenticating the user authentication information received from the provider apparatus 11, and a specific method of user authentication may be arbitrary. Uses a password as user authentication information.

  The charging unit 104 provided in the download device 10 is a unit that executes a charging process for the selling price of content, and a specific method for the charging process may be arbitrary. When credit settlement is used for billing processing related to the sale of content, the billing means 104 provided in the download device 10 transmits credit information such as a credit number input by the user to the credit company's server. Becomes a means to settle the purchased content. When the points on the sales site are used for the charging process related to the sale of the content, the charging means 104 provided in the download device 10 determines the amount of the content from the point balance possessed by the user input at this time. This is a means for subtracting points corresponding to.

  The download determination unit 105 provided in the download device 10 is configured such that when the user authentication unit 103 succeeds in authenticating the user authentication information (in this case, a password), and the charging unit 104 completes the charging process for content purchase normally. The provider device 11 permits the download of the content requested for purchase, stores the download permission determination result in the sales history DB 107d included in the sales history received from the provider device 11, and also downloads the download permission determination result to the provider. Means for notifying the apparatus 11.

  The member registration means 106 provided in the download device 10 is a means for executing processing related to user membership registration and storing member information obtained from the user in the member information DB 107b.

  Note that the content DB 107a provided in the download device 10 stores all the content handled by the provider sites operated by the plurality of provider devices 11, and the content main body stored in the content DB 107a stores the content. , Content creator, publisher, price including tax, content ID as content identifier, information indicating whether content transmission is valid, and the like are added as attribute information.

  The member information DB 107b that stores the member information of the user who has registered as a member in the download device 10 is associated with the user ID for each user who has registered as a member in the download device 10, and the password set by the user at the time of member registration and the accounting process are performed. Billing information (for example, card number of a credit card) used at the time is stored.

  The sales history DB 107d provided in the download device 10 stores the sales history transmitted from the provider device 11. The sales history includes the user ID of the user who purchased the content and the terminal device used for selling the content. 12 terminal device ID, provider site ID that is the identifier of the provider site that sold the content, content ID that is the identifier of the sold content, the date and time when the content was sold, the selling price of the content, and whether or not to permit downloading Is included.

  Further, the provider DB 107c provided in the download device 10 includes a provider corresponding to the network identification information in association with the network identification information (for example, IP address or URI) of the provider device 11 that is permitted to use the download device 10. At least the public key certificate of the device 11 is stored.

  The public key certificate stored in the provider DB 107c provided in the download device 10 is the disclosure of the provider device 11 in order to guarantee the validity of the public key of the provider device 11 by a certificate authority that is a third party organization. A digital certificate issued by a certificate authority for the key. In this public key certificate, in addition to the network identification information for identifying the provider device 11, the public key and the public key certificate of the provider device 11 are issued. The certificate authority identifier is included as a message, and the public key certificate is given a digital signature generated using the certificate authority's private key to the message included in the public key certificate. .

  From here, each means with which the download apparatus 10 and the provider apparatus 11 were equipped is demonstrated in detail, explaining the process performed when selling a content. Note that the description of the process executed when selling the content also serves as the description of the invention relating to the method.

  FIG. 5 is a first flowchart of processing executed when selling content, and FIG. 6 is a second flowchart of processing executed when selling content.

  First, the flow illustrated in FIG. 5 will be described. When a user starts a browser on the terminal device 12 and accesses a provider site operated by the provider device 11 (S1), the sales unit 110 of the provider device 11 displays content sold on the provider site. A web page for display is transmitted to the terminal device 12 (S2).

  FIG. 7 is a diagram for explaining a web page 3a that displays a list of contents that are included in the content display web page and sold on the provider site. In FIG. 7, the content is an electronic book, and as shown in FIG. 7, the web page 3 a that displays a list of content is included in the search result in addition to the search button 3 a 1 for searching by keyword or genre. The content list 3a2 is displayed, and a link to a web page explaining the details of the contents is pasted on the text 3a3 explaining the outline of the contents.

  When the text 3a3 of the content that the user wants to purchase (here, novel 1) is clicked on the browser, the web page displayed on the browser jumps to the link destination affixed to the text, and the user purchases. A web page describing details of the content desired to be displayed is displayed on the terminal device 12.

  FIG. 8 is a diagram for explaining a web page 3b for explaining details of contents. The web page 3b illustrated in FIG. 8 displays a button 3b2 to be clicked when purchasing content in addition to an image of the content (here, novel 1) selected by the user and a detailed description 3b1. .

  The HTML that displays the button 3b2 illustrated in FIG. 8 includes a URI in which the host name of the provider site operated by the provider apparatus 11 and the name of the program that executes processing related to the content purchase are described, and FIG. An element for delivering the content ID of the displayed content to the provider apparatus 11 is included.

  When the button 3b2 illustrated in FIG. 8 is clicked, a message related to the purchase request for the content specified by the delivered content ID is transmitted from the terminal device 12 to the provider device 11, so that the terminal device 12 sends the provider 3 A request for content purchase is made to the device 11 (S3), and the message includes at least the name of a program that executes processing related to content purchase and the content ID of the content purchased by the user.

  Upon receiving a content purchase request from the terminal device 12, the selling means 110 of the provider device 11 starts processing related to the content purchase, and first receives a purchase request from the terminal device 12 as processing related to the content purchase. A content transmission confirmation request is made to the download device 10 (S4). Here, the transmission confirmation request of the content received from the terminal device 12 is requested to sell the content for the convenience of the content producer (for example, publisher) regardless of the convenience of the provider site operator. This is because may be stopped.

  When the provider device 11 requests the download device 10 to confirm content transmission, the provider site ID of the provider site operated by the provider device 11, the content ID of the content, the selling price of the content, etc. are downloaded from the provider device 11. Transmitted to the device 10.

  When the content transmission confirmation request is received from the provider apparatus 11, the transmission confirmation means 101 of the download apparatus 10 operates, and the transmission confirmation means 101 of the download apparatus 10 is stored in the content DB 107a and received when a transmission confirmation request is made. By referring to the attribute information including the content ID, it is confirmed whether or not the transmission of the content requested for transmission confirmation is valid, and the transmission confirmation result is transmitted to the provider apparatus 11 which requested the content transmission confirmation (S5).

  If the transmission confirmation result received from the download device 10 indicates that the content transmission is valid, the selling means 110 of the provider device 11 dynamically displays the web page for purchase confirmation of the content requested for transmission confirmation. The web page for confirming the purchase of the content generated and requested for confirmation is transmitted to the terminal device 12 (S6), and the web page for confirming the purchase of the content is displayed on the browser of the terminal device 12 (S7).

  FIG. 9 is a diagram for explaining a web page 3c for content purchase confirmation. The content purchase confirmation web page 3c shown in FIG. 9 is used for canceling the purchase of content and a button 3c2 used for determining content purchase, in addition to the content title, sales price, etc. 3c1. Button 3c3 is displayed.

  When the button 3c2 used to determine content purchase is clicked, a web page for inputting information related to user authentication is displayed, and a user who purchases content inputs user authentication information using this web page. (S8). There are various types of authentication information that can be used for user authentication. In this embodiment, a password is used as authentication information.

  FIG. 10 is a diagram illustrating a web page 3d for inputting a user password. The web page 3d illustrated in FIG. 10 includes an input form 3d1 for inputting the user ID of the user who purchases the content, an input form 3d2 for inputting the password of the user who purchases the content, and when the password input is completed. The button 3d3 to be clicked, the button 3d4 to be clicked when canceling password input, and the URL for operating the member registration means 106 of the download device 10 to be clicked when newly registering a member are embedded. Button 3d5 is included.

  In the HTML that displays the button 3d3 that is clicked when the password input is completed, the host name of the provider site operated by the provider device 11, the name of the program that executes the billing process for the content purchase, and the like are described. Elements for passing the URI, the user ID input to the input form 3d1, the password input to the input form 3d2, and the terminal device ID of the terminal device 12 to the provider device 11 are included.

  As a method for acquiring the terminal device ID that is an identifier of the terminal device 12, there is a method in which a cookie that the provider device 11 stores in the browser of the terminal device 12 is stored in a personal computer. In the case of a smartphone, an element that transmits an individual identification number stored in a USIM mounted on a mobile phone or smartphone may be described in HTML that displays a button 3c2 that is used to determine content purchase. .

  When the button 3d3 illustrated in FIG. 10 is clicked, a message related to the charging process for content purchase is transmitted from the terminal device 12 to the provider device 11, so that the terminal device 12 charges the provider device 11 for the content purchase. A processing request is made (S9), and the message includes at least the name of a computer program that executes a charging process for content purchase, a user ID, a password, a content ID, and a terminal device ID.

  Upon receiving a charge processing request for content purchase from the terminal device 12, the sales unit 110 of the provider device 11 generates a sales history including authentication information, stores the sales history in the sales history DB of the provider device 11, and A digital signature of the sales history is generated using the private key of the provider device 11, the sales history with the digital signature is transmitted to the download device 10, and the sales history with the digital signature is stored in the sales history DB 111 (S10). ).

The sales history generated by the provider device 11 in S10 includes
-User ID received from the terminal device 12
-The password which is the authentication information received from the terminal device 12-the terminal device ID of the terminal device 12 which requested the accounting process
-Provider site ID that is the identifier of the provider site
-Content ID of the content requested to be charged
・ Sales date and time that is the date and time at this point ・ Includes the sales price of the content requested to be charged.

  When the sales history with the digital signature is received, the provider verification unit 102 of the download device 10 operates, and the provider verification unit 102 receives the network identification information (when the sales history with the digital signature is transmitted) ( For example, the public key certificate corresponding to the URI, IP address, etc.) is searched from the provider DB 107c, and the public key included in the searched public key certificate is acquired (S11).

  Then, the provider verification unit 102 of the download device 10 verifies the validity of the provider device 11 that has transmitted the sales record by verifying the digital signature attached to the sales history using the acquired public key (S12). ).

  When the provider verification unit 102 of the download device 10 verifies the digital signature assigned to the sales history, the user authentication unit 103 of the download device 10 operates, and the user authentication unit 103 sets the sales history that has been successfully verified with the digital signature. The password associated with the included user ID is acquired from the member information DB 107b, and the user authentication information received from the provider device 11 is authenticated by checking the password included in the sales history with the password acquired from the member information DB 107b. (S13).

  If the user authentication is successful, the charging processing unit 104 of the download device 10 operates, and the charging processing unit 104 acquires the charging information associated with the user ID included in the decrypted sales history from the member information DB 107b, and this charging information Is used to execute a billing process for the sales price of the content included in the sales history (S14).

  When the charging process is completed, the download determination unit 105 of the download device 10 operates, and the download determination unit 105 refers to the execution results of the user authentication unit 103 and the charging processing unit 104 and succeeds in the user authentication, and the charging process In the case of normal termination, the content specified by the content ID included in the sales history is permitted to be downloaded to the terminal device 12 specified by the terminal device ID included in the sales history, and this permission determination result is given. The sales history is stored in the sales history DB 107d, and the download permission judgment result is notified to the provider apparatus 11 (S15).

  The download permission determination result transmitted from the download device 10 to the provider device 11 includes information indicating the download permission determination result. Further, if the download is permitted, the download permission determination result is included in the sales history. A user ID, a terminal device ID, a provider site ID, a content ID, and the like are included.

  From here, the flow illustrated in FIG. 6 will be described. When the result of the charging process is notified from the download device 10, the selling means 110 of the provider device 11 downloads the content purchased by the user when the result of the verification of the download validity indicates success. The download web page including the URI of the download source is dynamically generated, the download web page is transmitted to the terminal device 12 (S16), and the download web page is stored in the terminal device 12. It is displayed on the browser (S17).

  FIG. 11 is a diagram for explaining a download web page. The download web page 3e shown in FIG. 11 includes a button 3e2 for downloading the content purchased by the user to the terminal device 12 in addition to the detailed content 3e1 of the content purchased by the user, and the content purchased by the user. A button 3e3 for canceling the download is included.

  In the HTML that displays the button 3e2 for causing the terminal device 12 to download the content purchased by the user, the URI for downloading the content purchased by the user and the terminal device ID of the terminal device 12 are delivered to the cache device 11. Contains elements.

  FIG. 12 is a diagram for explaining the URI of the download source of the content purchased by the user. As shown in FIG. 12, a scheme (http: //) indicating that HTTP is used for the URI of the download source of the content purchased by the user, and the host name (www.DownloadServer.xxx) of the download device 10 And the name of the computer program (download) that downloads the content, the user ID (userID = AAA) included in the result of the charging process, and the user ID included in the result of the charging process as variables to be passed to the program to be downloaded Terminal device ID (terminalID = BBB), provider site ID (SiteID = CCC) included in the result of the charging process, and content ID (ContentID = DDDDDDDD) included in the result of the charging process.

  When the button 3e2 illustrated in FIG. 11 is clicked, a message relating to a download request for the content purchased by the user is transmitted from the terminal device 12 to the download device 10, whereby the content is downloaded from the terminal device 12 to the download device 10. A request is made (S18), and the message includes the terminal device ID of the terminal device 12 that requested the download in addition to the URI path of the download source.

  When the content download request is received from the terminal device 12, the download unit 100 of the download device 10 operates, and the download unit 100 confirms the download permission determination result of the requested content (S19).

  The sales history of the content for which the download request has been received is used to confirm the result of the download permission determination for the requested content. The download unit 100 of the download device 10 searches the sales history DB 107d for a sales history corresponding to the message received from the terminal device 12 when a download request is received, and a flag indicating the download permission judgment result included in the sales history From the above, the download permission judgment result of the requested content is confirmed.

  When downloading of the content requested to be downloaded is permitted, the download unit 100 of the download device 10 searches the content DB 107a for the content requested to be downloaded, and transmits the searched content to the terminal device 12 (S20). Is downloaded to the terminal device 12 (S21).

  When the content download is completed, the content download completion notification is transmitted to the download device 10 by the browser function of the terminal device 12 (S22). The download completion notification includes the URI path of the download source of the content that has been downloaded.

  Upon receiving the download completion notification from the terminal device 12, the download unit 100 of the download device 10 searches the sales history DB 107d for a sales history corresponding to the download completion notification, and sets a flag indicating that the download has been completed in the searched sales history. For example, the sales history is updated (S23), and this procedure is terminated.

  Finally, the member registration means 106 provided in the download device 10 will be described. For example, when the button 3d5 illustrated in FIG. 10 is clicked, the member registration unit 106 of the download device 10 operates.

  When the member registration unit 106 of the download device 10 operates, the member registration unit 106 of the download device 10 transmits a form for allowing the user to input member information to the terminal device 12, and the member information transmitted from the terminal device 12. Is registered in the member information DB 107b.

  The items to be input by the user include a user ID (for example, a user's email address), a password set by the user, charging information (for example, a credit card number) used for charging, a user's address, Enter your date of birth.

  The present invention is not limited to the embodiments described so far, and various modifications and changes can be made.

  In this embodiment, the validity of the provider device 10 that has transmitted the user authentication information (password) is verified using the PKI scheme. However, the provider device 10 is not used without using the PKI scheme. It is also possible to verify the legitimacy of.

  For example, only the network identification information of the provider device 11 registered in advance in the download device 10 is stored in the provider DB 107c of the download device 10, and the network identification information of the provider device 10 that has transmitted the user authentication information (password). Is stored in the provider DB 107c, it is possible to verify the validity of the provider device 10 that has transmitted the user authentication information (password).

DESCRIPTION OF SYMBOLS 1 Content sales system 10 Download apparatus 100 Distribution means 101 Transmission confirmation means 102 Provider verification means 103 User authentication means 104 Charge means 105 Download determination means 106 Member registration means 107a Content DB
107b Member information DB
107c Provider DB
107d Sales history DB
11 Provider Device 110 Sales Means 12 Terminal Device 13 Internet

Claims (6)

A content sales system comprising at least a provider device that operates a site for selling content and a download device that transmits content to a terminal device that has accessed the provider device,
Upon receiving a purchase request from the terminal device, the provider device transmits the user ID and authentication information acquired from the terminal device to the download device, and only when the download device is notified of the download permission, the provider device A sales means for transmitting to the terminal device a web page for downloading the content for which the device has received a purchase request;
The download device includes a provider verification unit that verifies whether the provider device that has transmitted the user ID and authentication information of a user who purchases content is the provider device registered in advance in the download device; Reference information is stored in association with the user ID registered as a member, and the reference authentication corresponding to the user ID received from the provider device when the provider verification means succeeds in verifying the validity of the provider device. And the user authentication means for authenticating the authentication information received from the provider device, and the provider device to the terminal device that has transmitted the user ID and the authentication information upon successful authentication of the authentication information. Allowed download of the content that the purchase request was received The download permission determination result is stored, the download determination means for notifying the provider device of the permission determination result, and when the content download request is received from the terminal device, the content download permission determination result is displayed. Reference is made, and if download permission is indicated, the content includes download means for transmitting the content to the terminal device.
Content sales system characterized by that.   The sales unit of the provider device generates a sales history including the user ID and the authentication information when transmitting the user ID and the authentication information acquired from the terminal device to the download device. A means for transmitting the sales history to which the digital signature generated with a private key is attached to the download device, wherein the provider verification means includes the digital signature attached to the sales history in the public key certificate of the provider device The content sales system according to claim 1, wherein the content sales system is a means for verifying the validity of the provider device by verifying using a public key.   The sales history generated by the sales means of the provider device includes a sales price of the content for which the provider device has received a purchase request, and the download device charges the sales price included in the sales history. Charging means for performing processing, and the download determining means is adapted to authenticate the authentication information, and only when the charging processing for the selling price is normally completed, the provider device receives the purchase request of the content. The content distribution system according to claim 2, wherein the content distribution system is a means for permitting download. A download device that transmits content to a terminal device that has accessed a provider device operated by a site that sells content,
The provider device that has transmitted the user ID and authentication information of the user who purchases the content is a provider verification unit that verifies whether the provider device is registered in advance in the download device, and is registered as a member in the download device Reference information is stored in association with the user ID, and when the provider verification unit succeeds in verifying the validity of the provider device, the reference authentication corresponding to the user ID received from the provider device is used, and The user authentication means for authenticating the authentication information received from the provider device, and if the authentication information is successfully authenticated, the provider device receives a purchase request to the terminal device that has transmitted the user ID and the authentication information. The download of the content is permitted, and the download permission Download determination means for notifying the provider device of the permission determination result and receiving the content download request from the terminal device, referring to the content download permission determination result, A download device comprising download means for transmitting the content to the terminal device when permission is indicated.   The provider verification means of the download device is included in the sales history including the user ID and the authentication information, and a digital signature generated with the private key of the provider device is included in the public key certificate of the provider device. The download device according to claim 4, wherein the download device is means for verifying the validity of the provider device by verifying using a public key. The download device includes a charging unit that performs a charging process for the sales price included in the sales history, and the download determination unit has succeeded in authenticating the authentication information, and the charging process for the sales price ends normally. 6. The download device according to claim 5, wherein the provider device determines that the verification of the download validity of the content for which the purchase request has been received is successful only when the purchase request is received.

Images