JP2013243732A - Content management server, terminal, content management system, and content management method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide technology which safely manages delivery and reception of contents.SOLUTION: A receiving unit 38 receives a first terminal identifier to identify a first portable terminal which loads a content from a recording medium and executes it and a recording medium identifier to identify the recording medium loaded by the first portable terminal along with a digital signature generated by using a cryptographic key hidden in the first portable terminal. A signature verification unit 40 verifies the validity of the digital signature. A voucher issuance unit 52 issues a voucher to a second portable terminal correlated to the first portable terminal, which acquires a content by downloading and executes it, thereby placing the second portable terminal in a state ready to download the content. When the recording medium is confirmed to have been loaded by the first type of portable terminal, a recording medium identifier confirmation unit adds information indicating that confirmation was done to the recording medium identifier of the recording medium in a storage unit.

Description

  The present invention relates to a technology for managing download of content.

  Conventionally, playback devices that enable playback of content such as games, music, photos, and videos have previously acquired content from recording media. However, with the recent increase in network bandwidth, content is downloaded via the network. And the method of obtaining it has come to be used. This trend is the same for portable terminals using wireless technology, and some portable terminals that do not wait for a mechanism for acquiring content from a recording medium have appeared and have been used.

  A first type portable terminal that reads and executes content from a recording medium (hereinafter referred to as “recording medium type terminal”), and a second type that is acquired and downloaded by downloading the content via a network Type mobile terminals (hereinafter referred to as “download-type terminals”) are mixed, but it is difficult to exchange contents between the two because the distribution media of the contents are different. Yes.

  The present invention has been made in view of such problems, and an object thereof is to provide a technology for safely managing the exchange of contents.

  In order to solve the above problems, a content management server according to an aspect of the present invention reads a first terminal identifier for identifying a first terminal that reads and executes content from a recording medium, and reads the first terminal from the first terminal. The recording medium identifier for identifying the recorded recording medium, the first terminal identifier and the digital signature of the recording medium identifier from the first terminal, the digital signature is verified, and the recording medium is Associating a signature verification unit that confirms that the data has been read in one terminal, a first terminal identifier, and a second terminal identifier that identifies a second terminal that acquires and executes content by downloading A storage unit for storing the table, (i) that the recording medium is read by the first terminal, and (ii) the second terminal corresponds to the first terminal with reference to the table. If it was confirmed that the obtained, and a voucher issuance unit configured to issue a voucher associated with the content to a user of the account that owns the first and second terminal.

  Another aspect of the present invention is a terminal. This terminal is a first terminal that can be connected to a content management system including a content management server connected to a second terminal that acquires and executes the content by downloading, and that reads the content from the recording medium and executes it. A recording medium identifier acquisition unit for acquiring a recording medium identifier for identifying a recording medium from a recording medium read by the first terminal, and a first terminal identifier for identifying the first terminal are stored. A storage unit, a digital signature adding unit for applying a digital signature to the recording medium identifier and the first terminal identifier, and verifying the digital signature; (i) the recording medium is read by the first terminal; And (ii) the second terminal corresponds to the first terminal with reference to a table in which the first terminal identifier is associated with the second terminal identifier for identifying the second terminal If it is confirmed that the content has been deleted, a recording medium identifier and a terminal with a digital signature attached thereto are issued to a server that issues vouchers related to the contents to the account of the user who owns the first and second terminals. And a transmitter for transmitting the identifier.

  Yet another embodiment of the present invention is also a terminal. This terminal is a second terminal that can be connected to a content management system including a content management server connected to the first terminal that reads and executes the content from the recording medium, and that acquires and executes the content by downloading. And adding a digital signature to the recording medium identifier for identifying the recording medium inserted into the first terminal obtained from the recording medium and the first terminal identifier for identifying the first terminal. The digital signature of the recording medium identifier with the digital signature and the first terminal identifier transmitted from the one terminal to the content management server is verified, and (i) the recording medium is read by the first terminal And (ii) referring to a table in which the first terminal identifier and the second terminal identifier for identifying the second terminal are associated with each other, the second terminal When the content management server that issues the voucher related to the content to the account of the user who owns the first and second terminals is issued when the voucher is associated with the device And a content acquisition unit that acquires the content by downloading it.

  Yet another aspect of the present invention is a content management system. This content management system includes a first terminal that reads and executes content from a recording medium, a second terminal that acquires and executes content by downloading, and a first terminal and a second terminal. Includes a connectable content management server. The first terminal includes a recording medium identifier acquisition unit for acquiring a recording medium identifier for identifying a recording medium inserted in the first terminal from the recording medium, and a first terminal for identifying the first terminal. A storage unit for storing an identifier; a digital signature adding unit for adding a digital signature to the recording medium identifier acquired from the recording medium identifier acquiring unit and the first terminal identifier acquired from the storage unit; A transmission unit configured to transmit the medium identifier and the first terminal identifier to the server. The content management server includes a receiving unit that receives the recording medium identifier with the digital signature transmitted from the transmitting unit of the first terminal and the first terminal identifier, and verifies the digital signature. A signature verification unit for confirming that the first terminal is read; a storage unit for storing a table in which a first terminal identifier and a second terminal identifier for identifying a second terminal are associated with each other; , (I) when it is confirmed that the recording medium has been read by the first terminal and (ii) the second terminal is associated with the first terminal by referring to the table A voucher issuing unit that issues vouchers related to the content to the account of the user who owns the first and second terminals. The second terminal includes a content acquisition unit that acquires the content by downloading the content when the content management server issues a voucher.

  Yet another aspect of the present invention is a content management method. In this method, a first terminal identifier for identifying a first terminal that reads and executes content from a recording medium, a recording medium identifier for identifying a recording medium read from the first terminal, a digital signature, From the first terminal, verifying the digital signature, confirming that the recording medium has been read in the first terminal, downloading the first terminal identifier, and the content A step of reading out from the storage unit and storing in the memory a table associating with the second terminal identifier for identifying the second terminal to be acquired and executed; and (i) the recording medium is read by the first terminal And (ii) when it is confirmed that the second terminal is associated with the first terminal by referring to the table, the voucher related to the content is Processor and a step of issuing to a user of the account that owns 1 and second terminal is performed.

  In order to solve the above problems, an aspect of the present invention relates to a server for managing content. The server includes a first terminal identifier for identifying a first type portable terminal that reads and executes content from a recording medium, and a record for identifying the recording medium read from the first type portable terminal. The first type portable terminal together with a digital signature generated by the first type portable terminal using an encryption key concealed in the first type portable terminal. A reception unit that receives from the device, a signature verification unit that verifies that the recording medium has been read in the first type portable terminal by verifying validity of the digital signature, and the first A storage unit for storing a table in which a terminal identifier is associated with a second terminal identifier for identifying a second type mobile terminal that acquires and executes content by download; When it can be confirmed that the recording medium has been read in the first type portable terminal, the second type portable terminal corresponding to the first type portable terminal is referred to by referring to the table. A voucher issuing unit for issuing a voucher for making the content downloadable to the machine.

  In order to solve the above problems, another aspect of the present invention relates to a portable terminal of a type that reads and executes content from a recording medium. The portable terminal includes a recording medium identifier acquisition unit that acquires a recording medium identifier for identifying the recording medium from a recording medium that is read by a portable terminal of a type that reads and executes content from the recording medium, and the portable terminal A storage unit for storing a terminal identifier for identifying the signature and an encryption key for signature, and generating a digital signature of the recording medium identifier and the terminal identifier based on the encryption key for signature, and the recording medium identifier and the A digital signature providing unit that assigns the digital signature to a terminal identifier; and a transmission unit that transmits the recording medium identifier and the terminal identifier to which the digital signature is attached to a server.

  In order to solve the above-described problem, still another aspect of the present invention relates to a portable terminal of a type that acquires and executes content by downloading. This portable terminal is provided with a voucher for downloading contents issued when it is proved that a recording medium for storing contents is inserted in a portable terminal of a type that reads and executes the contents from the recording medium. A receiving unit for receiving, a presenting unit for presenting the voucher to a server for downloading content, and a content acquiring unit for acquiring the content by downloading from the server.

  In order to solve the above-described problem, still another aspect of the present invention relates to a system for managing content. This system includes a first type portable terminal that reads and executes content from a recording medium, a second type portable terminal that acquires and executes content by downloading, and the first type portable terminal. And a server to which the second type portable terminal can be connected. The first type portable terminal includes a recording medium identifier obtaining unit for obtaining a recording medium identifier for identifying a recording medium inserted in the first type portable terminal, and the first type portable terminal. A storage unit storing a first terminal identifier for identifying a device, a recording medium identifier acquired from the recording medium identifier acquisition unit, and a first terminal identifier acquired from the storage unit, in a secret area of the storage unit A digital signature adding unit that generates a digital signature using the stored signature encryption key and assigns the digital signature to the recording medium identifier and the first terminal identifier; and the recording medium to which the digital signature is attached A transmitter that transmits the identifier and the first terminal identifier to a server. The server includes a receiving unit that receives the digital medium-signed recording medium identifier and the first terminal identifier transmitted from the transmitting unit of the first type portable terminal, and a valid digital signature. A signature verification unit for verifying the authenticity, and a voucher issuing unit for issuing a voucher that enables download of content for the second type of portable terminal if the digital signature verified by the signature verification unit is valid. The second type mobile terminal receives a voucher from the voucher issuing unit, a presentation unit that presents the voucher to a server for downloading content, and downloads and acquires the content. Content acquisition unit.

  In order to solve the above problems, still another aspect of the present invention is a method for managing content. This method includes a first terminal identifier for identifying a first type portable terminal that reads and executes content from a recording medium, and a recording for identifying a recording medium read from the first type portable terminal. The first type portable terminal together with a digital signature generated by the first type portable terminal using an encryption key concealed in the first type portable terminal. Receiving from the device, verifying the validity of the digital signature, confirming that the recording medium has been read in the first type portable terminal, and the first terminal identifier; Then, a table in which the second terminal identifier for identifying the second type portable terminal that acquires and executes the content is downloaded is read from the storage unit and stored. And when it is confirmed that the recording medium has been read in the first type portable terminal, the first type is stored by referring to the table stored in the memory. Causing the processor to execute a step of making the content downloadable to a second type portable terminal corresponding to the portable terminal.

  It should be noted that any combination of the above-described constituent elements and the expression of the present invention converted between a method, an apparatus, a system, a computer program, a data structure, a recording medium, and the like are also effective as an aspect of the present invention.

  ADVANTAGE OF THE INVENTION According to this invention, the technique which manages the exchange of content safely can be provided.

1 is a schematic configuration diagram of a content management system according to an embodiment. 3 is a flowchart showing a flow from when a recording medium is inserted into the recording medium type terminal of FIG. 1 until content can be downloaded. 1 is a block diagram schematically showing a function of adding a digital signature to a recording medium identifier for identifying a recording medium and a first terminal identifier for identifying a recording medium type terminal included in the recording medium type terminal of FIG. It is. 4 is a flowchart showing a flow from when a recording medium identifier acquisition unit in FIG. 3 acquires a recording medium identifier to when a transmission unit transmits a ciphertext with a digital signature. FIG. 2 is a block diagram schematically illustrating a function of verifying the validity of a digital signature using a ciphertext with a digital signature received from a recording medium type terminal included in the server of FIG. 1. FIG. 2 is a flowchart showing a flow from when a receiving unit included in the server of FIG. 1 receives a ciphertext with a digital signature from a recording medium type terminal via a network until the validity of the digital signature is verified. It is a figure showing an example of the data structure of the database with which the 1st terminal identifier which identifies the recording medium type terminal which the same user possesses, and the 2nd terminal identifier which identifies a download type | mold terminal device are matched. .

  In describing a content management system according to an embodiment of the present invention (hereinafter referred to as “embodiment”), an outline thereof will be described first.

  Even if a user who owns both a recording medium type terminal and a download type terminal has purchased content in the form of a recording medium in the past, the user cannot execute the content on the download type terminal. Therefore, in the system according to the embodiment, when it is confirmed that a certain user owns a recording medium type terminal and a recording medium that can be read by the recording medium type terminal, the system The download type terminal owned by will make specific content available for download via the network. The specific content is not limited to content stored in a recording medium owned by the user.

  FIG. 1 is a schematic configuration diagram of a content management system 100 according to the embodiment. The content management system 100 includes a recording medium type terminal 10, a recording medium 12, a download type terminal 14, a network 16, a server 18, and a database 20. The content management system 100 is a so-called client server type system in which a large number of recording medium type terminals 10 and download type terminal machines 14 are connected to a server 18, but the following is a recording medium type terminal owned by a single user. Focusing on the machine 10 and the download-type terminal 14, the case where these are connected to the server 18 will be described.

  When the recording medium 12 is inserted into a slot (not shown) of the recording medium type terminal 10, the recording medium type terminal 10 uses a method described later to identify the recording medium identifier and the recording medium type terminal. A digital signature is given to the first terminal identifier for identifying 10. The server 18 receives the digitally signed identifier via the network 16 such as the Internet. The server 18 verifies the validity of the received digital signature. When it is confirmed that the digital signature is valid, the server 18 refers to the database 20 and checks whether the user who owns the recording medium type terminal 10 also owns the download type terminal. As will be described in detail later, the database 20 associates a first terminal identifier for identifying the recording medium type terminal 10 owned by the same user with a second terminal identifier for identifying the download type terminal 14. Table is stored.

  When the user who owns the recording medium type terminal 10 can confirm that the download type terminal 14 is also owned, the server 18 can download the content stored in the database 20 by the download type terminal 14. State. Specifically, when the download terminal 14 accesses the server 18 via the network 16, the second terminal identifier for identifying the download terminal 14 is confirmed, and the download terminal 14 is stored in the database 20. Provide access to stored content. The download type terminal 14 obtains the content by downloading the content by accessing a server for downloading the content.

  FIG. 2 is a flowchart showing a flow from when the recording medium 12 is inserted into the recording medium type terminal 10 of FIG. 1 until content can be downloaded. The processing in this flowchart starts when the recording medium 12 is inserted into the recording medium type terminal 10.

  The recording medium type terminal 10 gives a digital signature to the recording medium identifier for identifying the recording medium 12 and the first terminal identifier for identifying the recording medium type terminal 10 (S10). The server 18 receives the digitally signed identifier via the network 16 such as the Internet (S12). The server 18 verifies the validity of the received digital signature (S14). If it is confirmed that the digital signature is valid (S16Y), the server 18 refers to the database 20 and checks whether the user who owns the recording medium type terminal 10 also owns the download type terminal 14 ( S18).

  When it is confirmed that the user who owns the recording medium type terminal 10 also owns the download type terminal 14 (S20Y), the server 18 stores the content in which the download type terminal 14 is stored in the database 20 (S22), and the process ends. When it is not possible to confirm that the digital signature is valid (S16N), or when it is not confirmed that the user who owns the recording medium type terminal 10 also owns the download type terminal 14 (S20N), the server 18 The process ends without doing anything.

  FIG. 3 schematically shows a function of adding a digital signature to a recording medium identifier for identifying the recording medium 12 and a first terminal identifier for identifying the recording medium type terminal 10 included in the recording medium type terminal 10. FIG. The recording medium type terminal 10 includes a recording medium identifier acquisition unit 22, a storage unit 24, an encryption unit 26, a digital signature assignment unit 28, and a transmission unit 30.

  The recording medium identifier acquisition unit 22 acquires a recording medium identifier for uniquely identifying the recording medium stored in the recording medium 12 inserted in the recording medium type terminal 10. Here, the recording medium identifier is, for example, a serial number uniquely assigned to the recording medium 12 readable by the recording medium type terminal 10 existing in the world. Another example is a set of a content identifier for identifying content stored in the recording medium 12 (for example, game A) and serial numbers assigned to all the recording media 12 storing the game A. The former is advantageous in that it is easy to manage because there is only one recording medium identifier. In the latter case, the serial number of the identifier does not continue to increase even if the content type increases, and management is performed with a small number of digits. This is advantageous.

  The storage unit 24 includes a terminal identifier 32 and a signature encryption key 36, and the signature encryption key 36 is stored in a secret area 34 included in the storage unit 24. Information stored in the secret area 34 cannot be accessed from outside the recording medium type terminal 10.

  The encryption unit 26 combines the recording medium identifier acquired from the recording medium identifier acquisition unit 22 with the first terminal identifier 32 that identifies the recording medium type terminal 10 acquired from the storage unit 24, and Encrypt with a shared key. First, the digital signature giving unit 28 acquires the ciphertext of the recording medium identifier and the first terminal identifier 32 from the encryption unit 26, and uses the signature encryption key 36 stored in the secret area 34, Generate a cryptographic digital signature. Next, a digital signature is given to the cipher and a ciphertext with a digital signature is generated. The transmission unit 30 acquires the ciphertext with a digital signature from the digital signature giving unit 28 and transmits the ciphertext with the digital signature to the server 18 via the network 16. The digital signature is verified at the server 18 to prove that the recording medium 12 has been inserted into the recording medium type terminal 10.

  Here, the digital signature is a hash value using a known hash function such as SHA-2 (Secure Hash Algorithm-2) from the ciphertext of the recording medium identifier acquired from the encryption unit 26 and the first terminal identifier 32. Can be realized by generating the message digest and encrypting the message digest using the signature encryption key 36.

  The signature encryption key 36 is generated from the first terminal identifier 32 that can uniquely identify the recording medium type terminal 10 using a predetermined algorithm. The signature encryption key 36 is generated and stored in the secret area 34 when there is little risk of leaking outside, such as when the recording medium type terminal 10 is manufactured. Although an algorithm for generating the signature encryption key 36 is stored in the server 18, information stored in the server 18 is usually less likely to be leaked to the outside. Therefore, it is not necessary to store the algorithm for generating the signature encryption key 36 in the recording medium type terminal 10, and the risk of the signature encryption key 36 leaking to the outside can be reduced.

  FIG. 4 is a flowchart showing a flow from when the recording medium identifier acquisition unit 22 of FIG. 3 acquires the recording medium identifier to when the transmission unit 30 transmits the ciphertext with a digital signature, and in step S10 in FIG. This processing will be described in detail.

  The recording medium identifier acquisition unit 22 acquires a recording medium identifier for identifying the recording medium 12 inserted into the recording medium type terminal 10 (S24). The encryption unit 26 acquires the first terminal identifier 32 for identifying the recording medium type terminal 10 from the storage unit 24 (S26), combines it with the recording medium identifier acquired from the recording medium identifier acquisition unit 22, and the server Encryption is performed using a shared key with 18 (S28). The digital signature adding unit 28 acquires the signature encryption key 36 stored in the secret area 34 (S30), and digitally encrypts the ciphertext of the recording medium identifier acquired from the encryption unit 26 and the first terminal identifier 32. A signature is generated (S32). Next, the digital signature giving unit 28 gives a digital signature to the ciphertext of the recording medium identifier and the first terminal identifier 32 (S34). The transmitting unit 30 acquires the ciphertext with a digital signature from the digital signature giving unit 28, and transmits the ciphertext with the digital signature to the server 18 via the network 16 (S36).

  FIG. 5 is a block diagram schematically illustrating a function of verifying the validity of a digital signature using a ciphertext with a digital signature received from the recording medium type terminal 10 included in the server 18. The server 18 includes a signature verification unit 40 and a voucher issuing unit 52. The signature verification unit 40 further includes a decryption unit 46, a hash value generation unit 42, and a comparison unit 44.

  The receiving unit 38 receives the ciphertext with a digital signature from the recording medium type terminal 10 via the network 16. The decrypting unit 46 further includes a hash value decrypting unit 48 and an identifier decrypting unit 50. The identifier decryption unit 50 decrypts the recording medium identifier and the first terminal identifier 32 from the ciphertext with a digital signature acquired from the reception unit 38. The hash value decryption unit 48 acquires the first terminal identifier from the identifier decryption unit 50 and generates the signature encryption key 36 using an algorithm that generates the signature encryption key 36. Next, the hash value decryption unit 48 decrypts the digital signature using the generated signature encryption key 36 and restores the hash value generated by the recording medium type terminal 10.

  The hash value generation unit 42 generates a hash value using the same hash function as that of the recording medium type terminal 10 based on the recording medium identifier acquired from the identifier decoding unit 50 and the first terminal identifier. The comparison unit 44 compares the digital signature generated by the hash value generation unit 42 with the hash value generated by the recording medium type terminal 10 decrypted by the hash value decryption unit 48 and checks whether or not they match. Verify the digital signature. The voucher issuing unit 52 will be described later.

  FIG. 6 is a flowchart showing a flow from when the receiving unit 38 receives the ciphertext with a digital signature from the recording medium type terminal 10 via the network 16 until the validity of the digital signature is verified. The process of step S14 in FIG. 2 will be mainly described in detail.

  The receiving unit 38 receives the ciphertext with a digital signature from the recording medium type terminal 10 via the network 16 (S38). The identifier decryption unit 50 decrypts the recording medium identifier and the first terminal identifier 32 from the ciphertext with a digital signature acquired from the reception unit 38 (S40). The hash value decryption unit 48 acquires the first terminal identifier from the identifier decryption unit 50, and generates the signature encryption key 36 using an algorithm for generating the signature encryption key 36 (S42). The hash value decryption unit 48 decrypts the digital signature using the generated signature encryption key 36 and restores the hash value generated by the recording medium type terminal 10 (S44). The hash value generation unit 42 generates a hash value using the same hash function as that of the recording medium type terminal 10 based on the recording medium identifier and the first terminal identifier acquired from the identifier decoding unit 50 (S46). .

  The comparison unit 44 compares the digital signature generated by the hash value generation unit 42 with the hash value generated by the recording medium type terminal 10 decrypted by the hash value decryption unit 48 (S48). When the two match (S50Y), the comparison unit 44 determines that the digital signature received from the recording medium type terminal 10 via the network 16 is valid (S52). If the two do not match (S50N), the comparison unit 44 determines that the received digital signature is not valid (S54). If the comparison unit 44 verifies the validity of the received digital signature, the processing in this flowchart ends.

  FIG. 7 shows that the first terminal identifier for identifying the recording medium type terminal 10 owned by the same user in the database 20 of FIG. 1 is associated with the second terminal identifier for identifying the download type terminal. It is a figure showing an example of the data structure of the obtained database.

  A database including a table in which a first terminal identifier and a second terminal identifier are associated with each other includes a field 54 for storing a user ID, a field 56 for storing the number of portable terminals, a field 60 for storing a terminal identifier, including. A field 58 for storing the number of portable terminals and a field 60 for storing terminal identifiers are partitioned by a field 56 for identifying the type of the portable terminal.

  In FIG. 7, for example, a user whose user ID is “A” has three recording medium-type terminals and one download-type terminal. Here, the user ID is an identifier for uniquely identifying a specific user, for example, a user name of an account created in advance for the user to connect to the server 18. When a user who owns the recording medium type terminal 10 purchases a new download type terminal 14, the user connects to the server 18 and registers the number of terminals owned by the user. This can be realized, for example, by connecting to the server 18 with the same account using each mobile terminal owned by itself. The server 18 acquires the user name and the identifier of the portable terminal, and updates the information in the database every time a specific user connects using a new portable terminal.

  The operation of this system with the above configuration is as follows. First, the user creates an account of the server 18, and creates a database of identifiers of all the recording medium type terminals 10 and download type terminals 14 owned by the user in the database 20 via the server 18. Next, the recording medium 12 owned by itself is inserted into one of the recording medium type terminals 10 and connected to the server 18. Accordingly, since the server 18 can verify that the recording medium 12 has been read by the recording medium type terminal 10, the server 18 permits the download type terminal 14 to access the content stored in the database 20. .

  For example, when the download type terminal 14 owned by the user is confirmed to be connected to the server 18, the voucher issuing unit 52 in the server 18 allows the access type to the download type terminal 14. This can be realized by issuing and sending a voucher (voucher) for enabling download of specific content stored in the database 20 in the form of digital data. The download type terminal 14 receives the voucher and inputs the voucher to an online store site or the like constructed on the network via the voucher presenting unit in the download type terminal 14. The machine 14 can acquire the content by downloading the content. Here, the online store constructed on the network may be realized on the server 18, or a dedicated server may be prepared.

  Here, the voucher issuing unit 52 displays a window (not shown) for presenting a plurality of contents to the user prior to issuing the voucher to the download terminal 14. Thereby, the user can freely select desired content. The user may select the same content as the content stored in the recording medium 12, or may select new content that the user does not have.

  The database 20 also stores in advance a recording medium identifier of a recording medium that can be read by the currently sold recording medium type terminal 10, and the server 18 verifies the digital signature in the comparison unit 44. If it can be confirmed, a recording medium identifier confirmation unit (not shown) gives information indicating confirmation to the recording medium identifier to which the digital signature is attached. Accordingly, when a certain recording medium 12 is inserted and connected to a different recording medium type terminal 10, or when connected with a different account, the voucher issuing unit 52 does not issue the voucher. It is possible to prevent one recording medium 12 from being reused by another user.

  As described above, according to the content management system 100 according to the embodiment, the user executes the content on the download type terminal 14 that cannot read the recording medium in return for purchasing the content in the form of the recording medium in the past. Is possible. In addition, since the voucher is issued when the recording medium 12 is inserted into any of the recording medium type terminals 10 and connected to the server 18, the digital signature is forged using a PC (Personal Computer) or the like. Can be prevented. Furthermore, it is possible to prevent one recording medium 12 from being reused by another user in order to obtain a voucher.

  The present invention has been described based on the embodiments. The embodiments are exemplifications, and it will be understood by those skilled in the art that various modifications can be made to combinations of the respective constituent elements and processing processes, and such modifications are within the scope of the present invention. .

  In the above description, the encryption unit 26 encrypts the recording medium identifier and the terminal identifier 32 using the shared key with the server 18, but the encryption is not essential. This is because if the digital signature can be generated from the recording medium identifier and the terminal identifier 32, it can be verified that the recording medium 12 has been read by the recording medium type terminal 10. When encryption is not performed, it is advantageous in that the time required for encryption and development and maintenance of an encryption program can be omitted.

  Even if the encryption unit 26 encrypts the recording medium identifier and the terminal identifier 32 using a shared key with the server 18, the digital signature giving unit 28 does not use the plain-text recording medium identifier and the terminal before encryption. A digital signature may be generated from the identifier 32. In this case, the processing of encrypting the recording medium identifier and the terminal identifier 32 and generating the digital signature can be performed in parallel, which is advantageous in that the calculation time can be shortened.

  In the above description, it is assumed that the recording medium identifier of the recording medium that can be read by the recording medium type terminal 10 currently sold in the database 20 is stored in advance in the database 20. Each time the validity of the digital signature is confirmed, the recording medium identifier to which the digital signature is attached may be registered. In this case, since it is not necessary to store the recording medium identifier of the recording medium in advance, it is possible to save time and save the storage capacity of the database 20.

  In the above description, the server 18 stores the algorithm for generating the signature encryption key 36. However, the server 18 holds a table of combinations of the signature encryption key 36 and the terminal identifier, and from the table. It is good also as the form acquired statically. In this case, the server 18 does not need to dynamically create the signature encryption key 36 using the generation algorithm, and the server 18 does not need to hold the generation algorithm. This is advantageous in that the generation algorithm can reduce the risk of leakage from the server 18 to the outside.

  DESCRIPTION OF SYMBOLS 10 Recording medium type terminal, 12 Recording medium, 14 Download type terminal, 18 Server, 20 Database, 22 Recording medium identifier acquisition part, 24 Storage part, 28 Digital signature provision part, 30 Transmission part, 32 Terminal identifier, 34 Confidentiality Area, 36 signature encryption key, 38 receiving unit, 40 signature verification unit, 52 voucher issuing unit, 100 content management system.

Claims (8)

A first terminal identifier for identifying a first terminal that reads and executes content from a recording medium, a recording medium identifier for identifying a recording medium read from the first terminal, and the first terminal identifier And a receiving unit for receiving the digital signature of the recording medium identifier from the first terminal,
A signature verification unit that verifies the digital signature and confirms that the recording medium has been read by the first terminal;
A storage unit for storing a table in which the first terminal identifier is associated with a second terminal identifier for identifying a second terminal that acquires and executes content by downloading;
(I) the recording medium is read by the first terminal, and (ii) the second terminal is associated with the first terminal with reference to the table. A content management server, comprising: a voucher issuing unit that issues a voucher related to the content to an account of a user who owns the first and second terminals when it can be confirmed.   The content management server of claim 1, wherein the voucher enables the second terminal to download content. A first terminal that reads a content from a recording medium and executes it, connectable to a content management system including a content management server connected to a second terminal that acquires and executes the content by downloading,
A recording medium identifier obtaining unit for obtaining a recording medium identifier for identifying the recording medium from a recording medium read by the first terminal;
A storage unit for storing a first terminal identifier for identifying the first terminal;
A digital signature giving unit for giving a digital signature to the recording medium identifier and the first terminal identifier;
A second terminal that verifies the digital signature and identifies (i) that the recording medium has been read by the first terminal; and (ii) identifies the first terminal identifier and the second terminal. When it is confirmed that the second terminal is associated with the first terminal with reference to a table in which identifiers are associated with each other, vouchers related to the content are stored in the first and second And a transmitting unit that transmits the recording medium identifier to which the digital signature is attached and the terminal identifier to a server that issues to an account of a user who owns the terminal. A second terminal for acquiring and executing content by downloading, connectable to a content management system including a content management server connected to the first terminal for reading and executing the content from the recording medium,
A digital signature is given to a recording medium identifier for identifying a recording medium inserted into the first terminal obtained from the recording medium and a first terminal identifier for identifying the first terminal, and Verifying the digital signature of the recording medium identifier to which the digital signature is attached and the first terminal identifier transmitted from the first terminal to the content management server; and (i) the recording medium is the first And (ii) the second terminal by referring to a table in which the first terminal identifier and the second terminal identifier for identifying the second terminal are associated with each other. If it can be confirmed that is associated with the first terminal, the first and second terminals have a voucher that enables downloading of content related to the content. The content management server that issued to over The account, when issued the voucher, terminal characterized in that it comprises a content acquisition unit which acquires by downloading the content.   5. The terminal of claim 4, wherein the content that can be downloaded by the second terminal is content stored in a recording medium read by the first terminal or content different from the content. Machine. A first terminal that reads and executes content from a recording medium, a second terminal that acquires and executes content by downloading, and content management that allows connection between the first terminal and the second terminal Including servers,
The first terminal is
A recording medium identifier obtaining unit for obtaining a recording medium identifier for identifying a recording medium inserted into the first terminal from the recording medium;
A storage unit for storing a first terminal identifier for identifying the first terminal;
A digital signature providing unit that provides a digital signature to the recording medium identifier acquired from the recording medium identifier acquisition unit and the first terminal identifier acquired from the storage unit;
A transmission unit that transmits the recording medium identifier to which the digital signature is attached and the first terminal identifier to a server;
The content management server
A receiving unit for receiving the recording medium identifier to which the digital signature transmitted from the transmitting unit of the first terminal and the first terminal identifier are received;
A signature verification unit that verifies the digital signature and confirms that the recording medium has been read by the first terminal;
A storage unit for storing a table in which the first terminal identifier is associated with a second terminal identifier for identifying the second terminal;
(I) the recording medium is read by the first terminal, and (ii) the second terminal is associated with the first terminal with reference to the table. A voucher issuing unit that issues a voucher that enables downloading of content related to the content to an account of a user who owns the first and second terminals if it can be confirmed;
The second terminal is
A content management system comprising: a content acquisition unit that acquires the content by downloading the content when the content management server issues the voucher. A first terminal identifier for identifying a first terminal that reads and executes content from a recording medium, a recording medium identifier for identifying a recording medium read from the first terminal, and a digital signature, Receiving from the first terminal;
Verifying the digital signature and confirming that the recording medium has been read by the first terminal;
Reading a table associating the first terminal identifier with a second terminal identifier for identifying a second terminal for acquiring and executing content by downloading from a storage unit and storing the table in a memory;
(I) the recording medium is read by the first terminal, and (ii) the second terminal is associated with the first terminal with reference to the table. A content management method, wherein, if confirmed, a processor executes a step of issuing a voucher related to the content to an account of a user who owns the first and second terminals. A first terminal identifier for identifying a first terminal that reads and executes content from a recording medium, a recording medium identifier for identifying a recording medium read from the first terminal, and a digital signature, A function of receiving from the first terminal;
A function of verifying the digital signature and confirming that the recording medium has been read by the first terminal;
A function of reading a table in which the first terminal identifier is associated with a second terminal identifier for identifying a second terminal that acquires and executes the content by downloading from the storage unit and stores the table in the memory;
(I) the recording medium is read by the first terminal, and (ii) the second terminal is associated with the first terminal with reference to the table. A program for causing a computer to realize a function of issuing a voucher related to the content to an account of a user who owns the first and second terminals when it can be confirmed.

Images