JP2014090454A - Information processing apparatus, method, and recording medium - Google Patents

Abstract

PROBLEM TO BE SOLVED: To limit use of content.SOLUTION: When a source receives a request for transmitting content from a sink, the source performs an authentication process. When authentication is successful, the source transmits, to the sink, key information necessary for decrypting encryption applied to the content. The sink receives the key information and decrypts the encryption applied to the content by using the key information, thereby decrypting the encrypted content. This invention is applicable to, for example, a communication system comprising a transmitting apparatus for transmitting content and a receiving apparatus for receiving content from the transmitting apparatus.

Description

  The present invention relates to an information processing apparatus and method, and a recording medium, and more particularly, to an information processing apparatus and method, and a recording medium that can limit use of content.

  In recent years, network systems represented by the Internet have become widespread. Thereby, the user can transmit information via the Internet, or can receive information.

  By the way, a user who desires to watch a copyrighted work such as a movie or music can receive the copyrighted work by paying a fee for it.

  However, there is a risk that copyrighted works such as movies and music will be viewed illegally not only by the owner but also by many users who have not paid for the copyrighted work through networks such as the Internet. .

  In addition, if the act of illegally viewing through the network is performed indefinitely, the content creation and distribution business may be hindered.

  The present invention has been made in view of such a situation, and makes it possible to prevent content from being illegally used via a network.

  The first information processing apparatus according to the present invention is based on an encryption unit that encrypts content, an authentication unit that authenticates with another device when reception permission is requested from another device, and an authentication result of the authentication unit. A transmission unit that transmits a release key for decrypting the content to another device, a first acquisition unit that acquires identification information of the other device based on an authentication result of the authentication unit, and a first acquisition. Based on the identification information obtained by the means, a first counting means for counting the number of received contents, a storage means for storing the identification information counted by the first counting means, and a counting by the first counting means And control means for controlling the number of received contents by controlling the success or failure of authentication of the authentication means based on the value of the received number of received.

  The first information processing apparatus according to the present invention includes: a second acquisition unit that acquires a value of the number of receptions from another device based on the authentication result of the authentication unit; and the number of receptions acquired by the second acquisition unit. A second counting means for counting the number of receptions of other devices based on the value may be further provided.

  The first information processing apparatus according to the present invention further includes an information updating unit that resets the value of the number of receptions counted by the counting unit when the release key transmitted from the transmitting unit to another device is changed. can do.

  The first information processing method of the present invention includes an encryption step for encrypting content, an authentication step for authenticating with another device when reception permission is requested from another device, and an authentication in the processing of the authentication step. Based on the result, a transmission step for transmitting the release key for decrypting the content to the other device, an acquisition step for acquiring the identification information of the other device based on the authentication result by the processing of the authentication step, and an acquisition step Based on the identification information acquired by the above processing, the counting step for counting the number of received contents, the storage control step for controlling the storage of the identification information counted by the counting step processing, and the counting step processing. The number of received contents is controlled by controlling the success or failure of authentication in the authentication step processing based on the value of the received number. Characterized in that it comprises a step.

  The program recorded in the first recording medium of the present invention includes an encryption step for encrypting content, an authentication step for authenticating with another device when reception permission is requested from another device, and an authentication step. Based on the authentication result in the process, the transmission step of transmitting the release key for decrypting the content to the other apparatus, and the acquisition of acquiring the identification information of the other apparatus based on the authentication result by the process of the authentication step A counting step for counting the number of received contents based on the identification information acquired by the processing of the acquisition step, a storage control step for controlling storage of the identification information counted by the processing of the counting step, and a counting step By controlling the success or failure of the authentication in the processing of the authentication step based on the value of the number of receptions counted by the processing of Characterized in that it comprises a control step of controlling reception number.

  In the first information processing apparatus, the first information processing method, and the program recorded in the first recording medium of the present invention, when content is encrypted and reception permission is requested from another apparatus, Even if the reception is permitted, the device is authenticated as another device as long as the number of received devices does not exceed the allowable value, and a release key for releasing the content encryption is transmitted to the other device based on the authentication result.

  The second information processing apparatus according to the present invention includes a first transmission unit that transmits a request for reception permission to the first device, a first authentication unit that authenticates with the first device, and a reception permission unit. When the request is transmitted, the receiving unit that receives the release key for decrypting the content from the first device, and the content received from the first device are transmitted to the second device via the second network. When the second transmission unit and the second device request reception permission, the second authentication unit authenticates with the second device, and the reception unit performs authentication based on the authentication result of the second authentication unit. A third transmission unit that transmits the received release key to the second device; a first acquisition unit that acquires identification information of the second device based on an authentication result of the second authentication unit; Based on the identification information acquired by the acquisition means of 1, the content receiver Based on the value of the number of receptions counted by the first counting means, the second authenticating means based on the first counting means for counting the number, the storage means for storing the identification information counted by the first counting means, And controlling means for controlling the number of received contents by controlling the success or failure of the authentication.

  The second information processing apparatus of the present invention can further include a decrypting unit for decrypting the content and an encrypting unit for encrypting the content decrypted by the decrypting unit.

  According to a second information processing apparatus of the present invention, a fourth transmission means for transmitting the value of the number of receptions counted by the first counting means to the first apparatus based on the authentication result of the first authentication means. And based on the authentication result of the second authentication means, based on the second acquisition means for acquiring the value of the number of receptions from the second device, and on the value of the number of receptions acquired by the second acquisition means, Second counting means for counting the number of received devices of the second device may be further provided.

  In the second information processing apparatus of the present invention, when the release key transmitted to the second apparatus by the third transmission unit is changed, information for resetting the value of the number of receptions counted by the first counting unit Update means can be further provided.

  According to a second information processing method of the present invention, a first transmission step of transmitting a reception permission request to the first device, a first authentication step of authenticating with the first device, and a reception permission When the request is transmitted, a receiving step for receiving the release key for decrypting the content from the first device, and the content received from the first device are transmitted to the second device via the second network. The second transmission step, and when reception permission is requested from the second device, the second authentication step for authenticating with the second device and the reception based on the authentication result by the processing of the second authentication step A third transmission step of transmitting the release key received by the processing of the step to the second device, and an acquisition step of acquiring identification information of the second device based on the authentication result by the processing of the second authentication step And get Based on the identification information acquired by the processing of the group, a counting step for counting the number of received contents, a storage control step for controlling storage of the identification information counted by the processing of the counting step, and counting by the processing of the counting step And a control step for controlling the number of received contents by controlling the success or failure of the authentication in the processing of the second authentication step based on the value of the received number of received.

  The program recorded on the second recording medium of the present invention includes a first transmission step of transmitting a request for permission of reception to the first device, and a first authentication step of authenticating with the first device. And a reception step of receiving a release key for releasing the encryption of the content from the first device when the request for reception permission is transmitted, and the content received from the first device via the second network. A second transmission step for transmitting to the second device, a second authentication step for authenticating with the second device when the second device requests reception permission, and an authentication result by the processing of the second authentication step. Based on the third transmission step of transmitting the release key received by the processing of the reception step to the second device, and the identification information of the second device based on the authentication result by the processing of the second authentication step Take to get A counting step for counting the number of received contents based on the identification information acquired by the processing of the acquisition step, a storage control step for controlling storage of the identification information counted by the processing of the counting step, and a counting step And a control step of controlling the number of received contents by controlling the success or failure of the authentication in the process of the second authentication step based on the value of the number of received receptions counted in the process.

  In the second information processing apparatus, the second information processing method, and the program recorded on the second recording medium of the present invention, the content received from the first apparatus via the first network is the first information processing apparatus. It is transmitted to the second device via the second network with the upper limit of the permitted number obtained from the first device.

  According to the present invention, it is possible to limit the use of content. In addition, it is possible to limit the output content receiving apparatus based on the obtained permitted number (received number).

It is a block diagram which shows the structural example of the network system to which this invention is applied. It is a block diagram which shows the detailed structural example of the source | sauce of FIG. It is a block diagram which shows the detailed structural example of the sink of FIG. It is a block diagram which shows the detailed structural example of the bridge | bridging of FIG. It is a figure explaining the authentication process of a source or a bridge | bridging, and a sink. It is a flowchart explaining the authentication process with respect to the source | sauce or bridge | bridging of a sink. It is a flowchart explaining the authentication process with respect to the source of a source or a bridge | bridging. It is a figure explaining the authentication process of the Rx bridge of a source or a Tx bridge. It is a flowchart explaining the authentication process with respect to the source of a Rx bridge or a Tx bridge. It is a flowchart explaining the authentication process with respect to the Rx bridge of a source or a Tx bridge.

  FIG. 1 is a block diagram showing a configuration example of a network system to which the present invention is applied. In this network system, the source 1 is connected to the sink 2-1 and the bridge 3-1 via the bus 4-1, and the bridge 3-1 is connected to the sink 2- via the bus 4-2. 2 and the bridge 3-2, and the bridge 3-2 is connected to the sinks 2-3 and 2-4 via the bus 4-3.

  The source 1 is an output device that outputs content. When outputting the content, the source 1 encrypts the content and then outputs it to the sinks 2-1 to 2-4 via the buses 4-1 to 4-3. The key information necessary for decrypting the encrypted content is passed only to the sink that has succeeded in the authentication process. This limits the number of sinks that receive content. Note that bridges 3-1 and 3-2, which will be described later, are only excluded from being counted because they only re-output the received signals.

  The sinks 2-1 to 2-4 (hereinafter, when the sinks 2-1 to 2-4 do not need to be individually distinguished are simply described as the sink 2. The same applies to other devices). It is a receiving device that receives supplied content. If the authentication process is successful, the sink 2 decrypts the received content based on the key information passed from the source 1. However, when the bridge 3-1 or 3-2 once decrypts the cipher, encrypts it with a new key, and outputs it, the sinks 2-2 to 2-4 are based on the key information passed from the directly connected bridge. Decrypt the received content.

  The bridges 3-1 and 3-2 receive the encrypted content output from the source 1, decrypt it, encrypt it again, and output it to the sinks 2-2 to 2-4. Therefore, the bridge 3-1 performs authentication processing with the source 1, acquires key information necessary for decrypting the encrypted content, and determines how many sinks 2 to receive the re-output content. Tell 1 When the bridge 3-1 obtains permission from the source 1, the bridge 3-1 limits the number of sinks 2-2 to 2-4 that receive the content on behalf of the source 1. The bridge 3-2 authenticates with the bridge 3-1, and similarly restricts the number of sinks 2-3 and 2-4 received.

  FIG. 2 is a block diagram illustrating a detailed configuration example of the source 1.

  When the media 12 is loaded, the content player 11 plays the content recorded on the media 12 and outputs it to the encryption unit 13 under the control of the control unit 15. The encryption unit 13 encrypts the content input from the content player 11 and outputs the encrypted content to the outside via the communication I / F (interface) 14. Instead of the content player 11 and the medium 12, a source having a tuner that receives and outputs broadcast content is also conceivable.

  The control unit 15 controls the content player 11, the encryption unit 13, the communication I / F 14, and the storage unit 16. The control unit 15 also causes the storage unit 16 to store content reproduced by the content player 11 as necessary.

  FIG. 3 is a block diagram illustrating a detailed configuration example of the sink 2.

  The control unit 24 controls the image / sound output unit 21, the decoding unit 22, the communication I / F 23, and the storage unit 25. The control unit 24 also sends the encrypted content transmitted via the communication I / F 23 to the decryption unit 22.

  The decryption unit 22 acquires key information transmitted from the source 1 via the communication I / F 23. The decrypting unit 22 also decrypts the content based on the acquired key information. The image / sound output unit 21 outputs the content decoded by the decoding unit 22.

  FIG. 4 is a block diagram illustrating a detailed configuration example of the bridge 3.

  The control unit 35 controls the communication I / F 31, the decryption unit 32, the encryption unit 33, the communication I / F 34, and the storage unit 36. The control unit 35 also sends the encrypted content transmitted via the communication I / F 31 to the decryption unit 32.

  The decrypting unit 32 acquires key information transmitted from the source 1 via the communication I / F 31 and decrypts the received content based on the acquired key information.

  The encryption unit 33 encrypts the content decrypted by the decryption unit 32 and outputs it to the outside via the communication I / F 34.

  It is assumed that public key encryption technology is used for authentication, and the source 1, sink 2 and bridge 3 are digital certificates (hereinafter referred to as “Certificate”) issued by the key management organization and for each device. It shall have a private key and a public key of a key management organization. The certificate includes a public key for each device corresponding to the secret key for each device, a unique ID of the device, and an electronic signature by the key management organization for the two data.

  FIG. 5 is a diagram for explaining an authentication process when the source 1 and the sink 2-1 (FIG. 1) are directly connected.

  First, the sink 2-1 transmits its certificate to the source 1. Specifically, the control unit 24 of the sink 2-1 reads the certificate from the storage unit 25 and transmits it as a communication command to the source 1 via the communication I / F 23 (corresponding to 1 in FIG. 5).

  When the source 1 receives this communication command, the source 1 determines whether or not the data is valid. Specifically, the control unit 15 of the source 1 uses the public key of the key management organization stored in the storage unit 16 and the data in the certificate received via the communication I / F 14 and the accompanying data. Check whether the electronic signature of the key management organization is supported. That is, the control unit 15 determines the validity of the received data by executing a DSA (Digital Signature Algorithm) Verify calculation process of public key cryptography. If the determination result is valid, the authentication process is continued; otherwise, the authentication process is terminated.

  When the processing is continued, the control unit 15 of the source 1 checks whether or not the partner ID in the certificate is already registered in the authenticated ID list (hereinafter referred to as an ID list) held in the storage unit 16. If already registered, 0 is substituted into the variable CntUp.

  On the other hand, when the ID of the partner in the certificate is not registered in the ID list, the control unit 15 of the source 1 counts the number of sinks 2 permitted to receive (hereinafter referred to as variable SinkCnt) and the upper limit number that can permit reception ( Hereinafter, the variable MaxSink) is compared, and if the variable SinkCnt is smaller, 1 is substituted into the variable CntUp.

  If SinkCnt = MaxSink, the authentication process is terminated. Further, the variable MaxSink may not be a variable (that is, may be a constant).

  Then, the control unit 15 of the source 1 generates a pseudo random number Random_challenge by a pseudo random number generation algorithm, and transmits it as a communication command to the sink 2-1 (corresponding to 2 in FIG. 5).

  When the control unit 24 of the sink 2-1 receives this communication command, the control unit 24 executes DSASign calculation processing of public key cryptography on the value using its own private key held in the storage unit 25. To calculate an electronic signature. The control unit 24 of the sink 2-1 transmits the calculated electronic signature to the source 1 as a communication command (Response data) (corresponding to 3 in FIG. 5).

  When the control unit 15 of the source 1 receives this communication command, the control unit 15 of the source 1 determines whether the pseudo random number Random_challenge sent by itself corresponds to the electronic signature, that is, executes the above-described DSA Verify operation process to verify the validity of the data. Determine sex. However, here, the public key of the other party in the certificate received from the other party is used instead of the public key of the previous key management organization. If the determination result is valid, the authentication process is continued. If not, the authentication process is terminated.

  When the process is continued, the control unit 15 of the source 1 transmits key information necessary for decrypting the encryption applied to the content to the sink 2-1 as a communication command (corresponding to 4 in FIG. 5), and the value of the variable SinkCnt Is increased by the value of the variable CntUp. Then, the control unit 15 of the source 1 checks whether or not the partner ID in the certificate has already been registered in the authenticated ID list held in the storage unit 16, and if it has been registered, 0 is substituted into the variable CntUp. . On the other hand, if the partner ID in the certificate is not registered in the ID list, the variable SinkCnt is compared with the variable MaxSink. If the variable SinkCnt is smaller, 1 is assigned to the variable CntUp.

  The sink 2-1 can receive the content by receiving the key information and using it to decrypt the encryption applied to the content.

  Further, when the content output from the source 1 is received by the sink 2-2 after passing through the bridge 3-1, like the source 1 and the sink 2-2 shown in FIG. -2 and the bridge 3-1 perform the authentication process as shown in FIG. That is, even when content is transmitted via two or more bridges, such as source 1 and sink 2-3 or source 1 and sink 2-4, sinks 2-3 and 2-4 and the last bridge 3-2 (the bridge directly connected to the sinks 2-3 and 2-4) performs the same authentication process.

  The processing flow of the sink 2 in the above authentication processing is shown in FIG. 6, and the processing flow of the source 1 is shown in FIG.

  The authentication process of the sink 2 is exactly the same as that of the source 1 even if the partner is the bridge 3. The authentication process of the bridge 3 is different from that of the source 1 in the process shown in step S15 of FIG. Specifically, when SinkCnt = MaxSink, the bridge 3 increases the value of the variable MaxSink, so that the source 1 or bridge 3 (FIG. 1) that is the source of the content it receives (inputs). In the case of the example, authentication processing is performed to request reception permission from the source 1 for the bridge 3-1 and to the bridge 3-1) for the bridge 3-2. In this case, addition of one or more reception units is required. If this authentication process is successful, the processes after step S16 in FIG. 7 are continued.

  FIG. 8 is a diagram for explaining an authentication process when the source 1 and the bridge 3-1 (FIG. 1) are directly connected.

  First, the control unit 35 of the bridge 3-1 transmits its certificate, variable RelCnt, and variable AbsCnt to the source 1 (corresponding to 1 in FIG. 8). Here, the variable RelCnt represents the number of reception permission newly desired by the bridge 3-1, and the variable AbsCnt represents the total number of the permitted number and the number of permission to be obtained this time.

  When receiving this, the control unit 15 of the source 1 determines whether or not the certificate is valid by executing the above-described DSA Verify operation process. If the determination result is not valid, the authentication process is terminated.

  When continuing the processing, the control unit 15 of the source 1 checks whether or not the partner ID in the certificate has been registered in its own ID list, and if it has been registered, substitutes the variable RelCnt for the variable CntUp.

  On the other hand, when the partner ID in the certificate is not registered in the ID list, the control unit 15 of the source 1 substitutes the variable AbsCnt for the variable CntUp. Then, the control unit 15 of the source 1 determines whether or not the value obtained by adding the variable CntUp to the variable SinkCnt is smaller than the variable MaxSink.

  Then, the control unit 15 of the source 1 generates a pseudo random number Random_challenge and transmits it as a communication command to the bridge 3-1 (corresponding to 2 in FIG. 8).

  When receiving the communication command, the control unit 35 of the bridge 3-1 uses the private key held in the storage unit 36 for the value, the transmitted variable RelCnt and the variable AbsCnt, and The digital signature is calculated by executing the DSA Sign calculation process. The control unit 35 of the bridge 3-1 transmits the calculated electronic signature to the source 1 as a communication command (Response data) (corresponding to 3 in FIG. 8).

  When the control unit 15 of the source 1 receives this communication command, whether or not this electronic signature corresponds to the pseudo random number Random_challenge sent by itself, the received variable RelCnt and the variable AbsCnt, that is, the above-described DSA Verify An arithmetic process is executed to determine the validity of the data. However, here, the public key of the other party in the certificate received from the other party is used instead of the public key of the previous key management organization. If the determination result is not valid, the authentication process is terminated.

  When the processing is continued, the control unit 15 of the source 1 transmits key information necessary for decrypting the encryption applied to the content to the bridge 3-1 as a communication command (corresponding to 4 in FIG. 8), and the value of the variable SinkCnt Is increased by the value of the variable CntUp, and if the partner's ID is not registered in the ID list, it is added.

  The bridge 3-1 receives the key information, uses it to decrypt the encryption applied to the content, and then encrypts it again and outputs the content. Then, the control unit 35 of the bridge 3-1 increases the value of the variable MaxSink by the value of the variable RelCnt.

  The processing flow of the bridge 3 in the above authentication processing is shown in FIG. 9, and the processing flow of the source 1 is shown in FIG.

  In addition, content output from the source 1 passes through two or more bridges 3-1 and 3-2, such as the source 1 and the sink 2-3 or the source 1 and the sink 2-4 shown in FIG. After that, when received by the sinks 2-3 and 2-4, the bridge 3-1 (hereinafter referred to as Tx bridge) that outputs the content and the bridge 3-2 (hereinafter referred to as Rx bridge) that receives the content are again used. (To describe) performs an authentication process as shown in FIG.

  Note that the authentication process of the Rx bridge is exactly the same as when the partner is the source 1.

  The Tx bridge authentication process is different from that of the source 1 in the process shown in step S46 of FIG. Specifically, when SinkCnt + CntUp> MaxSink, the Tx bridge authenticates the source 1 or the bridge 3 that is the transmission source of the content input by itself to request reception permission in order to increase the value of the variable MaxSink. Processing is performed (in the case of the example in FIG. 1, the bridge 3-1 requests authentication from the source 1). In this case, the addition of the number of receptions equal to or more than ((SinkCnt + CntUp) −MaxSink) is required. When this authentication process is successful, the processes after step S50 in FIG. 10 are continued.

  As another example of processing, the variable RelCnt and the variable AbsCnt may be transmitted separately from the certificate. For example, there is a method of transmitting together with the Response shown in 3 of FIG. 8 or a method of transmitting with a completely different communication command.

  Further, when the bridges 3-1 and 3-2 authenticate with the newly connected source 1 or bridge 3 in step S15 of FIG. 7 or step S46 of FIG. There is also a method that does not continue this process. That is, the new authentication can be positioned as a thing for succeeding the authentication after the next time.

  Furthermore, if the sink 2 stops receiving its output and loses the information necessary for decryption, the source 1 or bridge 3 can reduce the variable SinkCnt by that sink 2. For example, if the encryption key information applied to the content by the source 1 or the bridge 3 is changed, the sink 2 can set its own variable SinkCnt to 0.

As described above, since the source 1 or the bridge 3 limits the number of sinks 2 that can receive the output, the following effects can be obtained.
(1) The right holder regarding the content can prevent unauthorized viewing and recording of the content.
(2) Even when a signal is re-output using a bridge, the number of sources including the sink at the end of the bridge can be limited.
(3) By limiting the number of devices using a device-specific ID, the number of devices will not be increased by mistake, no matter how many times the same sink authenticates.
(4) When a bridge requests a source or another bridge for permission to receive, the source or another bridge has been authenticated as that bridge by notifying the increase or decrease in the number of receptions and the total number of receptions. In this case, or in the case where the user has never been authenticated, the variable SinkCnt can be easily changed to a correct value.
(5) By using the public key encryption technology, the device unique ID and the required number can be safely passed to other devices, and the correct number management can be performed.

  The series of processes described above can be executed by hardware, but can also be executed by software. When a series of processing is executed by software, a program constituting the software executes various functions by installing a computer incorporated in dedicated hardware or various programs. For example, it is installed from a recording medium in a general-purpose personal computer or the like.

  This recording medium is distributed to provide a program to the user separately from the computer, and includes a magnetic disk (including a floppy disk) on which the program is recorded, an optical disk (CD-ROM (Compact Disk-Read Only Memory)) , DVD (Digital Versatile Disk)), magneto-optical disk (including MD (Mini-Disk)), or package media consisting of semiconductor memory, etc. It is composed of a ROM, hard disk, etc., where the program is recorded.

  In the present specification, the step of describing the program recorded on the recording medium is not limited to the processing performed in chronological order according to the described order, but is not necessarily performed in chronological order. It also includes processes that are executed individually.

  Further, in this specification, the system represents the entire apparatus constituted by a plurality of apparatuses.

  1 source, 2-1 to 2-4 sink, 3-1, 3-2 bridge, 11 content player, 12 media, 13 encryption unit, 14 communication I / F, 15 control unit, 16 storage unit, 21 image / sound Output unit, 22 decryption unit, 23 communication I / F, 24 control unit, 25 storage unit, 31 communication I / F, 32 decryption unit, 33 encryption unit, 34 communication I / F, 35 control unit, 36 storage unit

Claims (11)

In an information processing device that transmits content to another device via a network,
Encryption means for encrypting the content;
When reception permission is requested from the other device, an authentication means for authenticating with the other device;
Based on the authentication result of the authentication means, a transmission means for transmitting a release key for decrypting the content to the other device;
First acquisition means for acquiring identification information of the other device based on an authentication result of the authentication means;
First counting means for counting the number of received contents based on the identification information obtained by the first obtaining means;
Storage means for storing the identification information counted by the first counting means;
Control means for controlling the number of received contents by controlling the success or failure of the authentication of the authentication means based on the value of the number of received receptions counted by the first counting means. Information processing device. Based on the authentication result of the authentication means, a second acquisition means for acquiring the value of the number of receptions from the other device;
2. The information according to claim 1, further comprising: a second counting unit that counts the number of receptions of the other device based on the value of the number of receptions acquired by the second acquisition unit. Processing equipment. The information update means for resetting the value of the number of receptions counted by the counting means when the release key transmitted to the other device is changed by the transmitting means. The information processing apparatus described in 1. In an information processing method of an information processing device that transmits content to another device via a network,
An encryption step for encrypting the content;
An authentication step of authenticating with the other device when reception permission is requested from the other device;
A transmission step of transmitting, to the other device, a release key for releasing the encryption of the content, based on an authentication result in the processing of the authentication step;
An acquisition step of acquiring identification information of the other device based on an authentication result by the processing of the authentication step;
A counting step of counting the number of received contents based on the identification information acquired by the processing of the acquiring step;
A storage control step for controlling storage of the identification information counted by the processing of the counting step;
And a control step of controlling the number of received contents by controlling success or failure of authentication in the processing of the authentication step based on the value of the number of receptions counted by the processing of the counting step. Information processing method. In a program for an information processing device that transmits content to another device via a network,
An encryption step for encrypting the content;
An authentication step of authenticating with the other device when reception permission is requested from the other device;
A transmission step of transmitting a release key for decrypting the content to the other device based on an authentication result obtained by the authentication step;
An acquisition step of acquiring identification information of the other device based on an authentication result in the processing of the authentication step;
A counting step of counting the number of received contents based on the identification information acquired by the processing of the acquiring step;
A storage control step for controlling storage of the identification information counted by the processing of the counting step;
And a control step of controlling the number of received contents by controlling success or failure of authentication in the processing of the authentication step based on the value of the number of receptions counted by the processing of the counting step. A recording medium on which a computer-readable program is recorded. In an information processing device that receives content from a first device via a first network,
First transmission means for transmitting a reception permission request to the first device;
First authentication means for authenticating with the first device;
Receiving means for receiving, from the first device, a release key for releasing the encryption of the content when the reception permission request is transmitted;
Second transmission means for transmitting the content received from the first device to a second device via a second network;
A second authentication means for authenticating with the second device when reception permission is requested by the second device;
Based on the authentication result of the second authentication means, third transmission means for transmitting the release key received by the reception means to the second device;
First acquisition means for acquiring identification information of the second device based on an authentication result of the second authentication means;
First counting means for counting the number of received contents based on the identification information obtained by the first obtaining means;
Storage means for storing the identification information counted by the first counting means;
Control means for controlling the number of received contents by controlling the success or failure of the authentication of the second authentication means based on the value of the number of receptions counted by the first counting means. A characteristic information processing apparatus. Decryption means for decrypting the content;
The information processing apparatus according to claim 6, further comprising: an encryption unit that encrypts the content decrypted by the decryption unit. Based on the authentication result of the first authentication means, fourth transmission means for transmitting the value of the number of receptions counted by the first counting means to the first device;
Second acquisition means for acquiring the value of the number of receptions from the second device based on the authentication result of the second authentication means;
The second counting means for counting the number of receptions of the second device based on the value of the number of receptions acquired by the second acquisition means, further comprising: Information processing device. When the release key transmitted to the second device by the third transmission unit is changed, the information processing unit further includes an information update unit that resets the value of the number of receptions counted by the first counting unit. The information processing apparatus according to claim 6. In an information processing method of an information processing device that receives content from a first device via a first network,
A first transmission step of transmitting a reception permission request to the first device;
A first authentication step for authenticating with the first device;
A receiving step of receiving, from the first device, a release key for releasing the encryption of the content when the reception permission request is transmitted;
A second transmission step of transmitting the content received from the first device to a second device via a second network;
A second authentication step of authenticating with the second device when reception permission is requested from the second device;
A third transmission step of transmitting the release key received by the processing of the reception step to the second device based on an authentication result by the processing of the second authentication step;
An acquisition step of acquiring identification information of the second device based on an authentication result by the processing of the second authentication step;
A counting step of counting the number of received contents based on the identification information acquired by the processing of the acquiring step;
A storage control step for controlling storage of the identification information counted by the processing of the counting step;
A control step of controlling the number of received contents by controlling the success or failure of the authentication in the process of the second authentication step based on the value of the number of receptions counted by the process of the counting step. An information processing method characterized by the above. In a program for an information processing device that receives content from a first device via a first network,
A first transmission step of transmitting a reception permission request to the first device;
A first authentication step for authenticating with the first device;
A receiving step of receiving, from the first device, a release key for releasing the encryption of the content when the reception permission request is transmitted;
A second transmission step of transmitting the content received from the first device to a second device via a second network;
A second authentication step of authenticating with the second device when reception permission is requested from the second device;
A third transmission step of transmitting the release key received by the processing of the reception step to the second device based on an authentication result by the processing of the second authentication step;
An acquisition step of acquiring identification information of the second device based on an authentication result by the processing of the second authentication step;
A counting step of counting the number of received contents based on the identification information acquired by the processing of the acquiring step;
A storage control step for controlling storage of the identification information counted by the processing of the counting step;
A control step of controlling the number of received contents by controlling the success or failure of the authentication in the process of the second authentication step based on the value of the number of receptions counted by the process of the counting step. A recording medium on which a computer-readable program is recorded.

Images