JP3723379B2 - Content directory system - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a system for managing registration and updating of digital content or attribute information such as copyrights.
[0002]
[Prior art]
In recent years, the era of digital content distribution has begun. However, since digital content does not deteriorate even if it is repeatedly stored, copied, processed, and transferred, the copyright processing caused by these operations is a big problem. Until now, there has been no accurate method for copyright handling of digital content, which has been handled by the Copyright Act or contracts. Even under the Copyright Act, compensation for digital recording and recording equipment has been institutionalized. Only.
[0003]
In such a situation, how to handle the copyright of digital contents stored in a database becomes a big problem, but so far no copyright management means has been completed for that purpose.
[0004]
Related arts related to this include, for example, Japanese Patent Laid-Open No. 11-7241 “Digital Content Management System Using Digital Watermark”, Japanese Patent Laid-Open No. 10-302008, “Data Content Distribution System”, Japanese Patent Laid-Open No. 10-254909. There is a technique disclosed in “Data Management System” and the like.
[0005]
For example, in a digital content management system using a digital watermark disclosed in Japanese Patent Application Laid-Open No. 11-7241, a digital content management program is incorporated into an operating system of a user device as a microkernel, and a network or data broadcasting is used. A monitoring program or monitoring command to be linked is transmitted to the user device to monitor unauthorized use of digital content. Visible watermarks are embedded in illegally used digital content to prevent future use. By embedding an invisible watermark even for regular use, it is possible to confirm the route for copying and forwarding. In addition, the public key is entered on the public key distribution screen and distributed by network or broadcast. The public key distribution screen is attached with image information in which information of the public key owner or user is embedded as an invisible digital watermark, and the validity of the public key or the user is confirmed by this digital watermark.
[0006]
In the data content distribution system disclosed in Japanese Patent Laid-Open No. 10-302008, an object is handled as data content, and the data content is processed by processing the data content as an object with a processing program. The processed data content is expressed by the original data content and a processing scenario describing the processing content by the processing program. Only encrypted processing scenarios are distributed, and the user who has obtained the encryption processing scenario decrypts the encryption processing scenario using the encryption key obtained from the key management center, and the original from the database according to the processing scenario. Obtain data content and reconstruct the processed data content. If there is a person who wants to sell the processing scenario, an auction is performed and the right to use the processing scenario is sold.
[0007]
In the data management system disclosed in Japanese Patent Laid-Open No. 10-254909, in order to prevent theft and leakage of data content, the data management center embeds user data as a digital watermark in the data content supplied to the user and encrypts the data content. Encrypted with a key. The encrypted data content is decrypted and used by using an encryption key from the data management center, and is encrypted using another encryption key for storage. To copy / transfer data content to other users, register the scenario for embedding user data of other users as a digital watermark in the data management center, and encrypt the data content with the digital watermark embedded with another encryption key. To supply. When the validity of another user is confirmed in the scenario, another encryption key is delivered to the other user, the encrypted data content is decrypted with the other encryption key, and the other encryption key is used for storage. Encrypt. If data content is illegally copied or transferred, the user can be identified by checking the digital watermark.
[0008]
[Problems to be solved by the invention]
However, in the conventional technology as described above, content management identification information is issued while ensuring registration validity, and at the same time, content such as video or music is based on content management identification information or content attribute information. There was nothing that allowed users to search for content. At the same time, it is also a problem to ensure the validity of information related to content ID information. Accordingly, it is an object of the present invention to solve these problems simultaneously.
[0009]
[Means for Solving the Problems]
The present invention includes a terminal, a content directory server, and a content ID issuing server. The terminal requests the content ID issuing server to issue a content ID that is ID information for the content, and the content ID. and means for transmitting and receiving, a content ID assigning means for assigning a content ID to the content, to the content directory server, and means for requesting the renewal of the attribute information for each content ID, content ID issuance server from the terminal Authentication means for authenticating the user of the terminal in response to the content ID issuance request, and means for issuing the content ID, which is ID information for the content after user authentication , and transmitting it to the terminal that issued the request and, content that has been issued and the user ID of the user who uses the terminal And an ID information managing means for transmitting information about the relation of D to the content directory server, the content directory server is configured to receive information on the relationship between the user ID and the content ID from the content ID issuing server, the relationship ID information management means for managing information related to the user, user authentication means for authenticating the user of the terminal in response to a registration update request for attribute information for each content ID from the terminal, and ID information after user authentication The information on the relationship between the user ID and the content ID managed by the management means is collated with the information on the combination of the user ID and the content ID related to the registration update request for the attribute information for each content ID received from the terminal. , the registration update check the validity of the request, the requested content ID for each of the attribute information registered updating means , And means for searching the content attribute information of the content ID or a content as a key.
[0010]
Further, user authentication means may be added on the terminal side. The user authentication means may be configured to be processed by a public key cryptosystem using a public key and a secret key.
[0011]
DETAILED DESCRIPTION OF THE INVENTION
FIG. 1 is a block diagram of the content directory system. As shown in FIG. 1, the content directory server 1, the user terminal 2, and the content ID issuing server 3 are connected by a network 4.
[0012]
The ID issue server control means 31 of the content ID issue server 3 controls the synchronization of the user authentication means 32, the ID information management means 33, and the content ID issue means 34. The user authentication means 32 is a means for receiving the content ID issue request from the terminal 2 and authenticating the requester. Any authentication method may be used. For example, a public key cryptosystem using a public key and a secret key may be used. Using the procedure described in Japanese Patent Laid-Open No. 10-39552, “Communication and Authentication Method Using Public Key Cryptography, and Their Devices”, high-strength encryption can be realized.
[0013]
In the public key cryptosystem described in Japanese Patent Laid-Open No. 10-39552, compared with the conventional public key cryptosystem on a rational integer ring, it has the same or higher strength for complete decryption. In order to realize encryption with higher strength than in the past against communication attacks, the key generation device generates prime ideals (p) and (q) in the integer ring O on the algebraic field and uses them as the first secret key. , The remainder of the product (n) = (p) (q) is the first public key. A second secret key d and a second public key e are generated from (p) and (q). The encryption device divides the input plaintext M into blocks, performs encryption by e-power operation modulo ideal (n), and transmits the ciphertext (C0, C1,..., _Cr-1 ) to the communication path. Output to. The decryption device decrypts the input ciphertext block by a d-th power operation modulo ideal (n), integrates the decrypted plaintext blocks, and outputs plaintext M. There are various other public key cryptosystems, and since these specific procedures are well-known techniques, detailed description thereof is omitted here.
[0014]
The content ID issuing means 34 is means for receiving a content ID issue request from the terminal 2 and issuing a content ID and transmitting it to the terminal 2. The ID information management means 33 is means for associating the content ID information issued to the authenticated user with the user ID in the database and notifying the content directory server 1 of the relationship between the two information. .
[0015]
The server control unit 11 of the content directory server 1 controls the synchronization of the user authentication unit 12, the ID information management unit 13, the content ID transmission / reception unit 14, the content attribute information registration / updating unit 15, and the content search unit 16. To do.
[0016]
The user authentication means 12 is a means for authenticating the requester when receiving a request for updating the content attribute information from the terminal 2. The ID information management means 13 receives the information consisting of the pair of the content ID and the user ID transmitted from the ID information management means 33 of the content ID issuing server 3 and manages it in a database. The registration update request is validated by comparing the information of the requester's user ID and content ID pair with the content ID and user ID information received from the content ID issuing server 3 when the registration update request is made. It is a means to confirm sex.
[0017]
The content ID transmitting / receiving unit 14 is a unit that receives the content ID from the content ID issuing server 3 and transmits / receives the content ID information to / from the terminal 2. The content attribute information registration update unit 15 is a unit that registers and updates content attribute information for each content ID in the database based on the content attribute information for each content ID received from the terminal 2. The content search means 16 is means for notifying attribute information for each content ID or notifying a set of contents that match the search condition when the search condition for the content attribute information is narrowed down.
[0018]
In the terminal 2 shown in FIG. 1, the terminal control means 21 controls the synchronization of the content ID issue request means 22, the content attribute registration request means 23, the content ID transmission / reception means 24, and the content ID provision means 25. .
[0019]
The content ID issue request means 22 is a means for requesting the content ID issue server 3 to issue a content ID. The content ID transmitting / receiving unit 24 is a unit that receives the content ID issued by the content ID issuing server 3 and transmits the content ID to the content directory server 1. The content ID assigning means 25 is a means for assigning the content ID issued and transmitted by the content ID issuing server 3 to the content. As a method of giving, it is possible to use a method of embedding in the content main body with a digital watermark or setting a content ID in the header information of the file. Specific procedures for digital watermarking are described in, for example, Japanese Patent Application Laid-Open No. 10-191025 “Information Embedding Device in Digital Image”, Japanese Patent Application Laid-Open No. 10-145757 “Digital Watermark Inserting Method and Extracting Method”, etc. May be used.
[0020]
In the apparatus described in Japanese Patent Laid-Open No. 10-191025, information can be added and embedded in image data safely and reliably in order to promote smooth distribution of the image data. For this purpose, the processing of the inverse encoding device that restores the encoded image data to the original image and the processing of the digital watermark insertion device that embeds information in the image data are made inseparable from the image data. When the original image is restored, the inverse encoding device performs restoration processing, and the digital watermark insertion device embeds information, thereby embedding information when the original image is obtained by the inverse encoding device.
[0021]
In the method described in Japanese Patent Laid-Open No. 10-145757, the following procedure is performed for the purpose of improving reliability by accumulating watermark information in a partial image and extracting the watermark information from the partial image. Process with. First, the data to be watermarked is divided into a plurality of small areas. The frequency coefficient of the data to be watermarked is calculated for each small area. By mapping the watermark signal to a pseudo-random noise sequence, the inserted watermark signal is modulated into a spread spectrum. Spectralize PN as a function of average power to each frequency coefficient of the data. Then, each spectrum-formed PN sequence is inserted into a predetermined coefficient of data of each small area. In this way, digital watermark processing of data including image, video, and audio data is performed by repeatedly inserting the watermark into a small area or partial image of the data. Similarly, a watermark is repeatedly extracted from a small area of data.
[0022]
The content attribute registration request unit 23 is a unit that requests the content directory server 1 to register or update the content attribute information related to the issued content ID. Note that user authentication means may also be added to the terminal 2.
[0023]
FIG. 2 shows an example of each data structure of user ID information, content ID information, and content attribute information. The user ID information is identification information (user number) given by a user from a certification authority or the like for cryptographic communication. The content ID information is identification information given to the user by the content directory server for content identification. In the example shown in FIG. 2 (B), it is composed of information of a pair of a user ID and a work number (work ID). The content attribute information stores the attribute information of the content for each content ID. For example, the registration date, media type (still image, moving image, music, etc.), search classification code 1, 2, 3, Consists of content storage addresses. Here, the content storage address includes the address of a home page where the content is posted so that the content can be browsed, or the communication address of a contact for purchasing the content.
[0024]
Next, an operation example in the present embodiment will be described in terms of a content ID registration procedure, a content attribute registration procedure, and a content search procedure.
[0025]
FIG. 3 shows an example of a content ID registration procedure. A content ID issuance request is generated from the content ID issuance request means 22 of the terminal 2 (step S10), and the authentication of the user who issued the request is received and the content ID issuance server 3 is used based on the user ID information. When the user authentication unit 32 performs (S11) and the user is correctly authenticated, the content ID issuing unit 34 of the content ID issuing server 3 issues a content ID (S12) and transmits it to the terminal 2 (S13). Further, the ID information management means 33 of the content ID issuing server 3 stores the information of the set of the issued content ID and user ID in the database (S14).
[0026]
In the terminal 2, the content ID transmission / reception means 24 receives the content ID (S15), and the content ID giving means 25 gives the content ID to the content (S16). When the content ID assignment is completed, the terminal 2 sends a completion notification to the content directory server 1. As for embedding of the content ID with the digital watermark, the digital watermark is embedded using a fixed key, and before the content ID is assigned, whether the content ID has already been assigned is read with the fixed key, If already embedded, it may be configured not to give.
[0027]
Further, the content ID issuing server 3 transmits information on a set of content ID and user ID to the content directory server 1. In the content directory server 1, the ID information management means 13 stores and manages the received information in a database (S17).
[0028]
FIG. 4 shows an example of a content attribute registration procedure. When the content attribute registration request means 23 of the terminal 2 requests registration / update of content attribute information (S20), the user authentication means 12 of the content directory server 1 authenticates the user (S21). If it is correctly authenticated, the content ID and attribute information related to the content ID are sent from the terminal 2 to the content directory server 1 (S22), and the content directory server 1 receives this (S23).
[0029]
The ID information management means 13 of the content directory server 1 sets the combination of the content ID and the user ID already managed in the database for the information of the combination of the user ID and the content ID that has been raised by the attribute registration update request. It is checked whether or not the attribute registration requester has the right to register and change the attribute information of the content ID (S24). At this time, in order to check whether or not the requester of attribute registration from the content directory server 1 has the right to register and change the attribute information of the content ID with respect to the content ID issuing server 3, The user ID for the content ID may be inquired.
[0030]
When the registration validity is confirmed (S25), the content attribute information registration / updating means 15 registers or updates the content attribute information related to the content ID (S26).
[0031]
FIG. 5 shows an example of a content search procedure. When the content ID transmission / reception means 14 of the content directory server 1 receives the content ID from the terminal 2 (S30), the content attribute information is transmitted to the terminal 2 (S31). Further, if there is a search request specifying the attribute parameter of the content attribute information from the terminal 2 (S32), the content search means 16 of the content directory server 1 searches for content that matches the specified condition (S33), and the search result is displayed on the terminal. 2 (S34).
[0032]
【The invention's effect】
According to the present invention, identification information for content management is issued while ensuring the validity of registration, and at the same time, it is possible to search for content related to content based on identification information for content management or content attribute information. In addition, it is possible to guarantee the validity of the registration update request when registering and updating the attribute information for each content.
[Brief description of the drawings]
FIG. 1 is a block diagram of a content directory system.
FIG. 2 is a diagram showing examples of data structures of user ID information, content ID information, and content attribute information.
FIG. 3 is a diagram showing an example of a content ID registration procedure.
FIG. 4 is a diagram illustrating an example of a content attribute registration procedure.
FIG. 5 is a diagram showing an example of a content search procedure.
[Explanation of symbols]
DESCRIPTION OF SYMBOLS 1 Content directory server 11 Server control means 12 User authentication means 13 ID information management means 14 Content ID transmission / reception means 15 Content attribute information registration update means 16 Content search means 2 Terminal 21 Terminal control means 22 Content ID issue request means 23 Content attribute registration Request means 24 Content ID transmission / reception means 25 Content ID giving means 3 Content ID issuing server 31 ID issuing server control means 32 User authentication means 33 ID information management means 34 Content ID issuing means 4 Network

Claims (7)

A system comprising a content directory server for managing content that is computerized information or its attribute information, a content ID issuing server, and a terminal, which are connected via a network,
The terminal is
Means for requesting the content ID issuing server to issue a content ID that is ID information for the content;
Means for transmitting and receiving the content ID;
Content ID giving means for giving the content ID to the content;
Means for requesting the content directory server to update the registration of attribute information for each content ID,
The content ID issuing server
User authentication means for authenticating a user of the terminal in response to a content ID issuance request from the terminal ;
Means for issuing a content ID, which is ID information for the content after the user authentication , and transmitting the content ID to a terminal that issued the request ;
And an ID information managing means for transmitting information about the relationship between the content ID issued and the user ID of the user who uses the terminal to the content directory server,
The content directory server
ID information management means for receiving information related to the relationship between the user ID and the content ID from the content ID issuing server and managing information related to the relationship;
User authentication means for authenticating a user of the terminal in response to a registration update request for attribute information for each content ID from the terminal ;
After authentication of the user, information related to the relationship between the user ID and content ID managed by the ID information management means, and a user ID related to a registration update request for attribute information for each content ID received from the terminal Means for verifying the registration update request, registering and updating the attribute information for each requested content ID,
A content directory system comprising: means for searching for content using the content ID or content attribute information as a key. A system comprising a content directory server for managing content that is computerized information or its attribute information, a content ID issuing server, and a terminal, which are connected via a network,
The terminal is
Means for requesting the content ID issuing server to issue a content ID that is ID information for the content;
Means for transmitting and receiving the content ID;
Content ID giving means for giving the content ID to the content;
Means for requesting the content directory server to update the registration of attribute information for each content ID,
The content ID issuing server
User authentication means for authenticating a user of the terminal in response to a content ID issuance request from the terminal;
Means for issuing a content ID, which is ID information for the content after the user authentication, and transmitting the content ID to a terminal that issued the request;
ID information management means for managing information relating to the relationship between the user ID of the user who uses the terminal and the issued content ID,
The content directory server
User authentication means for authenticating a user of the terminal in response to a registration update request for attribute information for each content ID from the terminal ;
ID information management means for inquiring of the content ID issuing server about information related to the user ID and content ID of the user related to the registration update request for the attribute information;
Information on the relationship between the user ID and content ID inquired by the ID information management means, information on a set of user ID and content ID related to a registration update request for attribute information for each content ID received from the terminal, Means for confirming the validity of the registration update request and registering and updating the attribute information for each requested content ID;
Features and to Turkey content directory system that comprises a means for retrieving the content attribute information of the content ID or a content as a key. The content directory system according to claim 1, wherein the terminal includes user authentication means for authenticating a user. The content directory system according to any one of claims 1 to 3, wherein the user authentication means authenticates a user by a public key cryptosystem using a public key and a secret key. The content directory system according to any one of claims 1 to 4, wherein the content ID assigning unit is configured to add the content ID according to a setting in file header information. The content directory system according to any one of claims 1 to 4, wherein the content ID assigning unit is configured to add the content ID using a digital watermark. The content ID assigning means embeds with a fixed key when adding a content ID with a digital watermark, reads the digital watermark with a fixed key before giving the content ID, and reads the content ID with the digital watermark. The content directory system according to claim 6, wherein the content directory system is configured not to be granted.

Images