JP4062757B2 - Licensing system and licensing method - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a license grant system and a license grant method for providing services to users in a network connection service. In particular, in an environment where an unspecified user may use, for example, in an environment where a network connection service in a public place is used, each user does not use a designated PC (personal computer), and each user can use an individual PC. The present invention relates to a system and method for appropriately granting licenses to an unspecified number of users in a form in which a user is brought in and a service is provided by connecting a bring-in PC.
[0002]
[Prior art]
Conventionally, a license for using a network connection service for a user, for example, a license for using digital contents such as specific software managed by a service provider, identifies a person who is a user who wants to receive the information service. Alternatively, it is common to specify a machine such as a PC used by the user and grant a license to the identified user or terminal to be used.
[0003]
A user ID such as an identification number for identifying a user to a user who has been granted a service use license from a network connection service provider, or an identification number for the terminal if the license is granted to the terminal used A user who wants to receive a service is provided with a user ID such as an identification number by entering a predetermined password predetermined between the user and the service provider, for example. In general, it is possible to receive the service.
[0004]
However, when a network connection service is provided for the use of unspecified number of people in public places where many people come and go, such as network cafes, public libraries, shared computer rooms attached to educational institutions, etc. Then there is a problem.
[0005]
For example, a user ID such as a serial number ID that can identify each individual user is assigned to a service user, and a license is granted to each user using an electronic ticket key corresponding to the assigned individual user ID. Technology (for example, disclosed in Japanese Patent Application Laid-Open No. 8-335170) can deal with membership services in which users are registered in advance, but cannot grant licenses to unspecified majority. .
[0006]
In addition, there is a technology (for example, disclosed in JP-A-8-186667) that stores secret information in an IC card held by a user and gives a license to the IC card. Unless you are an environment where you can expect the users who want to provide IC cards with secret information held to members, or an environment where an unspecified number of people can all expect to have an IC card, The license cannot be granted to the target.
[0007]
By using a technology (Japanese Patent Laid-Open No. 7-325712) for granting a license to a device such as a computer or PC terminal using information unique to the device such as a computer or PC terminal, It is possible to prepare and give a license to the device itself. If such a form is arranged, it is considered that a license can be given to an unspecified majority party using a terminal specified in advance, such as a computer or a PC.
[0008]
However, such a form also has a problem. In other words, it is very dangerous from the viewpoint of security to make it possible to freely operate a computer or a terminal such as a PC that can be operated by an unspecified number of people installed in a public place. This is because there is no denying the possibility of performing various operations such as taking the type of keyboard of the installed terminal and the contents of communication and stealing them, or incorporating malicious programs.
[0009]
Therefore, in the future, each user who wants to receive services in a public institution such as a library other than home or office will bring his own portable PC, net PC or PDA, and connect to the network prepared by the public institution. It is expected that the form used by connecting to the points will become mainstream. Since this form uses a computer, a PC terminal, etc. brought by the user, there is no concern that a malicious program is mixed, and there is an advantage that the user can work in an environment familiar to him / her. However, in the technology for granting licenses to computers and PC terminals themselves, it is necessary to register the computers and PCs to be used in advance, so it is difficult to grant licenses to unspecified majority parties.
[0010]
As described above, with the conventional licensing technology, each user brings a PC, etc., without using a built-in PC in providing a network connection service in a public place such as a library where an unspecified number of users exist. There is a problem that it is difficult to give an appropriate license in a form in which a bring-in PC or the like is used as a connection terminal, and it is particularly difficult to give a license to an unspecified number of users in consideration of security.
[0011]
[Problems to be solved by the invention]
The present invention allows each unspecified user to use a communication network connection service in a public place such as a library where an information service using a communication terminal can be used without using a PC provided for security. An object of the present invention is to provide a license granting apparatus and a license granting method that appropriately grant a license to an unspecified number of service users in a form using personal terminals such as PCs.
[0012]
[Means for Solving the Problems]
The present invention is a license grant system that achieves the above-described object, and has an information connection service that has a network adapter connection point to which a communication terminal can be connected and provides information to the communication terminal connected to the network adapter connection point A license grant system that grants a use license to
A packet relay device that relays data transferred through the network adapter connection point;
Connected to the network adapter connection point Downloads encrypted information from the information providing service via the network. Communication terminal The use of the encrypted information is permitted by transmitting response data for decrypting the encrypted information A license management device that executes license granting,
The license management device includes identification information unique to the network adapter connection point. Private key information identifier A storage unit storing
(A) For connection communication terminals connected via the network adapter connection point, identification information unique to the network adapter connection point Private key information identifier Process to send,
(B) In the connected communication terminal that has received the identification information unique to the network adapter connection point, the identification information By computation with the private key information identifier as an element Generated based on Challenge Processing to receive data,
(C) At least by calculation using the secret key information corresponding to the secret key information identifier that is identification information unique to the network adapter connection point and the challenge data as elements. Processing for generating response data and further transmitting the response data to the connected communication terminal;
It has the structure which performs the process of said (a)-(c), It is characterized by the above-mentioned.
[0015]
Furthermore, the license grant system of the present invention further includes a license history management device that records a history of license grant to the connected communication terminal, and the license history management device records the license grant record for each of the network adapter connection points. It has the structure which produces | generates the historical data recorded separately.
[0016]
Furthermore, the license grant system of the present invention has a configuration in which history data is encrypted and sent in response to a history data acquisition request executed via a network connection point. The authentication processing is executed for the history data acquisition request requested via the server, the encryption processing is performed on the history data on condition that the authentication processing is successful, and the encrypted history data is sent. Features.
[0017]
Furthermore, the licensing system of the present invention further includes a multiple device connection detection device that detects that a plurality of hosts are connected to a single network adapter connection point, and the multiple device connection detection device allows multiple device connection. When it is detected, it has a configuration that stops granting a license to the network adapter connection point.
[0018]
Furthermore, in the license grant system according to the present invention, detection of a plurality of device connections by the plurality of device connection detection devices is performed by transmission and reception of echo packets.
[0019]
Furthermore, in the license grant system of the present invention, the license management device and the packet relay device have an integrated configuration, and the function of the packet relay device is stopped when the license management device is disconnected from the license grant system. Features.
[0021]
In addition, the license of the present invention The management device Connected to the network adapter connection point Downloads encrypted information from the information providing service via the network. For communication terminals And transmitting the response data for decrypting the encrypted information, thereby allowing the use of the encrypted information. A license management device that performs licensing,
(A) Identification information unique to the network adapter connection point for the communication terminal connected to the network adapter connection point Private key information identifier The process of acquiring and transmitting from the storage unit,
(B) The identification information in the communication terminal By computation with the private key information identifier as an element Generation Challenge Processing to receive data,
(C) Response data is generated by an operation using at least the secret key information corresponding to the secret key information identifier that is identification information unique to the network adapter connection point and the challenge data, and the response data Processing to transmit to the communication terminal;
It has the structure which performs the process of said (a)-(c), It is characterized by the above-mentioned.
[0022]
DETAILED DESCRIPTION OF THE INVENTION
Embodiments of a license grant system according to the present invention will be described below with reference to the drawings. FIG. 1 is a block diagram showing the basic configuration of a license grant system according to the present invention.
[0023]
The configuration of the license grant system in FIG. 1 will be described. The left end of the license grant system shown in FIG. 1 has a configuration in which a connection terminal such as a PC can be connected, while the right end of the license grant system can be connected to a service provider or a history data collection center via a network. It has a configuration for connecting to a communication network. The license grant system shown in FIG. 1 includes a connection point 101, I / Fs (interfaces) 102 and 105, a packet relay device 103, a license grant device 104, and a connection point 106. Hereafter, each component which comprises a license grant system is demonstrated.
[0024]
A connection point 101 is a network adapter connection point that connects to a connected device such as a PC, and an I / F (interface) 102 is an electrical match between the inside of the licensing system and a connected device such as a PC connected to the connection point 101. The packet relay apparatus 103 relays data flowing between a PC that is a connected device and an external LAN. Further, the license grant apparatus 104 has a mechanism for managing licenses and recording grants. An I / F (interface) 105 is an electrical interface that establishes electrical matching between the inside of the licensing system and an external network, and a connection point 106 connects the licensing system to the external network.
[0025]
Furthermore, since the licensing system of the present invention is compatible with a plurality of connected devices, the configuration shown in FIG. 2 can be adopted. In the configuration example shown in FIG. 2, connection points a and 201, connection points b and 202, connection points c and 203, and connection points d and 204 are connected as a plurality of network adapter connection points so that a plurality of connected devices can be connected. Further, electrical I / Fs (interfaces) 205, 206, 207, 208 are provided corresponding to the respective connection points. Also, a packet relay device 209 that relays data flowing between each connected device and the external LAN, a license management device 210 that grants a license, a license history management device 211 that takes a license grant history, and an external network An electrical I / F (interface) 212, a connection point 213 connected to an external network, and a multi-device connection detection device 214 that detects that a plurality of devices are connected to one network adapter connection point by a hub device or the like. Consists of
[0026]
The example of the licensing system shown in FIG. 2 has four network adapter connection points for connecting the connected devices. These network adapter connection points can be further increased or decreased. The system can be constructed by setting the number of connection points according to the use system of the grant system and the connection device.
[0027]
Hereinafter, the operation of the license grant system of the present invention will be described focusing on the function of each component in the license grant system configuration example shown in FIG. Note that the system shown in FIG. 1 operates in the same manner.
[0028]
A packet transmitted from a network adapter connection point (any one of connection point a, 201 to connection point d, 204) is determined according to the destination of the packet specified by the packet relay apparatus 209 in the licensing system of the present invention. Relay to an external network or other network adapter connection point.
[0029]
Further, when a packet addressed to a connected device such as a PC terminal connected to the license grant system via the connection point 213 arrives from an external network, the target connected device designated as the destination by the packet relay device 209 Packets are relayed to the connected network adapter connection point (any one of the connection points a and 201 to the connection point d and 204). That is, the packet relay apparatus 209 also has the function of a conventional switching hub (for example, disclosed in Japanese Patent Laid-Open No. 5-300165).
[0030]
In the example of the license granting system shown in FIG. 2, the license management device 210 and the license history management device 211 are shown as separate blocks, but these both devices can also be configured as an integrated system. . FIG. 3 is a configuration block diagram showing an example in which the license management apparatus 210 and the license history management apparatus 211 are configured together.
[0031]
The license management apparatus 210 and the license history management apparatus 211 are connected via a response to a license grant request from a connected device connected to the connection points a and 201 to the connection points d and 204 shown in FIG. Responds to license history collection requests from service providers. In order to perform these functions, the license management apparatus 210 and the license history management apparatus 211 are provided with a device control device 301 that controls devices in the license granting system, as shown in FIG. It has a storage device 302 that holds history records, and an integer arithmetic circuit 303 that can set an arbitrary number as a modulus.
[0032]
Also, it is desirable that the license management device 210 and the packet relay device 209 shown in FIG. 2 are physically integrated, and the license management device 210 is separated from the license granting system by integrating these two devices. In such a case, the function of the packet relay device 209 is stopped, so that illegal data extraction can be easily found.
[0033]
As shown in FIG. 2, the network adapter connection point 201, the license management device 210, and the license history management device 211 are connected via the packet relay device 209, and data transfer between the connection points and between the devices is performed by the packet relay device 209. It is possible to configure via
[0034]
The packet relay apparatus 209 relays the packet by a switching technique, thereby monitoring the packets between the connection points a and 201 to the connection points d and 204 and the license management apparatus 210 from other connection points and an external network. And can be relayed safely. In addition, unauthorized access to the license management apparatus 210 from another connection point or an external network can be prevented.
[0035]
The operation of the packet relay apparatus 209 will be described in detail. The packet relay apparatus 209 holds a route table as shown in FIG. 4 as data in a storage device inside the packet relay apparatus. As shown in FIG. 4, the route table records the MAC address of the network device, the port number of the route destination, and the registration time limit. The path of the license management apparatus is registered at the time of initial setting, and the registration time limit is set to forever (indefinite). In the example of the routing table shown in FIG. 4, in addition to the management device, the connection device 1 is registered as the port number “connection point a” and the router is registered as the port number “external network port” as the MAC address. A deadline has been set. The packet relay apparatus 209 executes appropriate distribution of the packet based on the data registered in this routing table.
[0036]
FIG. 5 is a flowchart for explaining the operation of the packet relay apparatus 209. Hereinafter, the operation of the packet relay apparatus 209 will be described in detail with reference to the flowchart shown in FIG.
[0037]
A plurality of interfaces for transmitting and receiving packets are connected to the packet relay apparatus 209. For example, each network adapter connection point, external network connection point, and interface to the license management apparatus. Each interface is called a port, and a unique port number is assigned to each interface so that the interface can be identified.
[0038]
As in step 501 of the flowchart, the packet relay device 209 constantly monitors packets coming from all ports. When a packet from any port is received, the process proceeds to step 502.
[0039]
In step 502, the correspondence between the port number that received the packet and the source MAC address is registered in the routing table (see FIG. 4). A time obtained by adding a predetermined time when registering the routing table is registered in the routing table as a registration deadline. As described above, the registration time limit is indefinite for, for example, a license management apparatus, but is set in advance such as 1 hour for a general connection terminal use port, or for example, a library closing time for a library or the like. Registered deadline.
[0040]
In step 503, it is determined whether the packet is a multi-addressed broadcast or multicast or a single host destination unicast. If it is a broadcast addressed to a plurality of addresses (when the determination in step 503 is Yes), the process branches to step 507 (simultaneous packet relay). If it is addressed to a single host, go to step 504.
[0041]
First, the case where the unicast is a single host destination (when the determination in step 503 is No) will be described. In step 504, it is determined whether the MAC address designated as the destination is registered in the routing table. If the MAC address is not registered in the route table, the process branches to step 507 as in the case of broadcasting. If the MAC address is registered in the routing table, the process proceeds to step 505.
[0042]
If the MAC address is registered in the routing table instead of broadcasting, it is determined in step 505 whether the port number from which the packet is transmitted is the same as the port number corresponding to the destination MAC address searched from the routing table. . If they are the same, the process ends with no need to relay. If they are different, the process proceeds to step 506.
[0043]
In step 506, the packet is relayed to the destination port obtained from the routing table.
[0044]
Step 507 is processing when the packet is broadcast or there is no destination in the route table. The packet is relayed simultaneously to all ports other than the port from which the packet is transmitted.
[0045]
As described above, by not relaying packets to ports that are not necessary, it is possible to prevent congestion of the communication path, to efficiently use the communication path, and not to relay packets to unrelated communication paths. Prevent the risk of data interception at a port different from the destination.
[0046]
In particular, since the route information of the license management system is permanently registered in the route table, the packet is always relayed only to the necessary route, and communication contents cannot be intercepted from other ports. Yes.
[0047]
FIG. 6 shows the structure of a packet transmitted and received by the license management apparatus. The first byte represents the type of packet, for example, query, reply, challenge, response, etc. The subsequent 2 bytes represent the length of the data string portion. It is an unsigned binary number and is stored in the order of heavy bits (MSB) to light bits (LSB), that is, the so-called big endian system. When the length is 0, the data string part is omitted.
[0048]
After that, the data string part continues for the designated length designated as the data length. In particular, no error detection or correction code is added. It depends on the error correction function of TCP / IP.
[0049]
FIG. 7 shows a schematic flowchart of processing of the license management device 210 and the license history management device 211. As described above, the license management device 210 and the license history management device 211 send a response to a license grant request from a connected device connected to the connection points a and 201 to the connection points d and 204 shown in FIG. It responds to a license history collection request from a service provider connected via the network.
[0050]
The operation of the license management apparatus 210 will be described below with reference to the flowchart shown in FIG. In step 701, the license management apparatus 210 waits for a packet addressed to itself. When the packet is received, the process proceeds to step 702. As described above, the license management apparatus waits for a packet for all ports.
[0051]
In step 702, it is determined whether the port that received the packet is from an external network. If it is from an external network, the license grant protocol is not responded, and only the history data collection of the license history management apparatus 211 is supported. In the flowchart, the process proceeds to step 708 (connection destination authentication). If it is the port of the network adapter connection point (201 to 204), the process proceeds to step 703 to grant a license to the reception port.
[0052]
Next, the license grant process will be described. In this example, the license is granted based on the public key cryptosystem, for example, the method disclosed in Japanese Patent Laid-Open No. 9-205424, and the execution of the encrypted content is permitted. However, you may use the license grant system by the encryption technique which requires other secret key information. The license management apparatus 210 holds secret key information corresponding to each port, and a license can be assigned to each port.
[0053]
In step 703, the secret key information corresponding to the port that received the packet is loaded from the storage device, and the ID code corresponding to the secret key is returned to the device that transmitted the first packet. Next, in step 704, a challenge packet is received from the connected device. The challenge is a data string that is safe even if a line is intercepted by processing meaningful data with a certain random number.
[0054]
In step 705, a calculation is performed using the received challenge and the secret key, and a response is generated.
[0055]
Next, in step 706, the MAC address, port number, time, challenge, etc. of the target machine are recorded in the license history management apparatus 211 as a license history.
[0056]
In step 707, a response is returned to the connected device, and the license grant process is terminated. The response alone is a data string that may be intercepted for the random number processing applied to the challenge. Can be restored to a given key.
[0057]
FIG. 8 shows packet exchange during the license grant operation described above. FIG. 8 will be briefly described. First, a query packet is sent to the license management apparatus from the connected device side that is to receive the service. When receiving the packet, the license management apparatus waiting for the packet from all the ports extracts the secret key information ID for the port that transmitted the packet from the storage device and transmits it to the port.
[0058]
The port that has received the secret key information ID generates challenge data based on the digital content ID, ticket information, random number, and the like to receive the service, and transmits this to the license management apparatus.
[0059]
The license management apparatus that has received the challenge data performs an operation based on the challenge data and the secret key information, and generates a response. The generated response is sent to the connected device, and the connected device obtains a decryption key, that is, a license grant key based on the received response and the random number.
[0060]
Next, a process for collecting license grant history data will be described. FIG. 9 shows the structure of the license history held in the license history management apparatus 211. Each time a license grant operation is performed, one record line is added. The record row includes a serial number, a license grant time, a MAC address of a connection target device to be granted, a port number to which the device is connected, and a challenge data string received at the time of grant.
[0061]
If it is determined in step 702 in FIG. 7 that the license management apparatus 210 has received a packet from the external network side via the connection point 213, a license history collection process is performed.
[0062]
Step 708 is a step of performing authentication with the connection destination. Various network devices are connected to the external network, and there are many things that cannot be trusted. For this reason, an authentication process is performed to determine whether or not to trust. In this apparatus, the other party is authenticated by using an electronic signature technology of a public key cryptosystem. Of course, other methods may be used for authentication.
[0063]
If it is determined in step 709 that the authentication has failed, error processing is performed in step 711 and the processing is terminated. If the authentication is successful, the process proceeds to step 710 and the history data is transmitted from the license history management apparatus 211.
[0064]
The history data transmitted from the license history management device 211 in the license granting system of the present invention is subjected to encryption processing and electronic signature processing, and has a safe configuration even if intercepted. The encrypted history data that has been encrypted and sent to a valid destination is decrypted with the decryption key.
[0065]
FIG. 10 shows the exchange of packets between the license history management apparatus 211 and the history collection center such as a service provider connected to the network during the license grant operation described above.
[0066]
FIG. 10 will be briefly described. First, a query packet is sent via the network from the history collection center which is trying to acquire history data to the license management apparatus. When receiving the packet, the license management apparatus waiting for packets from all the ports extracts the management apparatus ID from the storage device and transmits it to the history collection center.
[0067]
Upon receiving the management device ID, the history collection center generates an encryption key for log collection from a random number, adds an electronic signature to generate an authentication packet, and transmits this to the license management device.
[0068]
Upon receiving the authentication packet, the license management apparatus takes out the history data from the storage device, encrypts it with the encryption key, and transmits it as a packet to the history collection center. The history collection center decrypts the encrypted history data received with the decryption key, and obtains history data.
[0069]
Next, the multi-device connection detection device 214 shown in FIG. 2 will be described. The multi-device connection apparatus 214 transmits an echo packet in broadcast mode to each network adapter connection point at regular time intervals. The echo packet is a type of ICMP (Internet Control Message Protocol) packet of the TCP / IP protocol, and is a packet for confirming the connection state.
[0070]
A device such as a connection terminal in which IP is implemented has a rule that a reply packet is always transmitted when an echo packet is received. The ping command of the UNIX or Windows system is implemented using this echo packet.
[0071]
The echo packet issued by the multi-device relay device 214 is not relayed by the packet relay device 209. Therefore, the packet is transmitted only to the target connection point.
[0072]
As shown in FIG. 11, it is assumed that a plurality of devices are connected to one connection point by a bus connection or a distributor. When an echo packet is transmitted from the connection point in the broadcast mode, the echo packet reaches all connected devices.
[0073]
Then, as shown in FIG. 12, a reply echo (echo) packet is transmitted from each device, and as many reply echoes (echo) packets as the number of connected devices are observed at the connection point. That is, by counting the number of return echo (echo) packets, it can be detected that a plurality of devices are connected to one connection point.
[0074]
In order to prevent unauthorized license acquisition and interception of communication contents between devices, when connection of multiple devices is detected at one connection point, it is considered that an abnormal connection has occurred and the license grant function for that connection point is stopped. .
[0075]
By adding such a restriction, it is possible to prevent simultaneously granting a license corresponding to the same secret key to a plurality of connected devices, and also to prevent the interception of communication between the connected device and this device. You can also. As described above, according to the license granting apparatus of the present invention, a configuration for safely granting a license is realized.
[0076]
Next, a description will be given of a situation in which a license is granted to an unspecified number of people in a public place using the apparatus. The explanation is made using a model. Below are the model prerequisites for illustration.
[0077]
A digital work such as a digitized book, movie, interactive media, or game software, which is composed of digital data and can be copied easily without deterioration, is called digital content. It is assumed that there are paid digital contents, and they employ a usage fee billing system that pays a usage fee to the copyright holder or service provider each time it is used.
[0078]
A public library is assumed as a public place. This public library, as a resident service, bears the fee for using digital contents only when it is used in the hall, regardless of who uses it. However, the library will not pay for the usage outside the library, so the user must pay for it.
[0079]
It is assumed that the digital content is encrypted by the method described in JP-A-9-205424. The content is encrypted with a different encryption key for each title. Also, secret key information necessary for use is distributed to each user.
[0080]
In order to use the content, it is necessary to prepare the encrypted content, the secret key information held by the user, and the ticket information corresponding to the encryption key and the secret key information.
[0081]
The encrypted content does not necessarily have to be stored in the library file server, and may be located anywhere that is accessible on the network. The private key information is held in the apparatus in this case. The ticket information is issued by a distributor who distributes the ticket according to the method described in JP-A-9-205424.
[0082]
This supplier performs content encryption, distribution of secret key information, and issuance of ticket information. In order to generate the ticket information, the encryption key of the target content and the secret key of the target user are required, and the ticket information cannot be generated without these information.
[0083]
In this example, since there are an unspecified number of service targets, the generated ticket information is released to a place where anyone can obtain it by a license agreement between the library and the author of the content.
[0084]
This is the premise. In the public library, a booth as shown in FIG. 13 is prepared to use and browse digital contents. Each booth has a network adapter connection point for a device that grants a license safely in this case. By connecting a network device such as a PC or PDA to this booth, you can access the network inside and outside the library. .
[0085]
The user connects the PC he / she brought to the connection point. Download the digital content you want to use over the network.
[0086]
However, since the content is encrypted, it cannot be used as it is.
[0087]
First, a license is requested from the PC to the license management apparatus via the network adapter connection point. The license management apparatus returns the ID number of the secret key information and the location where the ticket information is disclosed.
[0088]
The ticket information is downloaded via the network, a challenge is generated from the ticket information, and it is transmitted to the license management apparatus. The license management device generates a response from the secret key information and the challenge, and returns it to the user's PC. The user's PC can decrypt and use the encrypted content using the received response. However, storing the decrypted data is prohibited, and the decrypted data is immediately discarded immediately after being used.
[0089]
The above exchange is stored in the history data. A distributor of encrypted contents collects and totals license grant history from each license management apparatus via the network and charges the library for a usage fee.
[0090]
Even if the user saves the encrypted content and the ticket information on the PC and goes out of the library, the secret key information cannot be accessed outside the library, so the content cannot be used.
[0091]
In order to use the content outside the building, the user must make a contract with a distributor of the encrypted content, and the user must receive a personal private key information and a corresponding ticket. Of course, the usage fee is borne by the user.
[0092]
In addition, the characteristic that the private key information can be accessed only from a predetermined place, on the contrary, is suitable for serving an unspecified number of people because anyone can access the private key information from the booth.
[0093]
As described above, the license management apparatus operates. Therefore, different secret key information is assigned to each port, and a license can be granted to each network adapter connection point.
[0094]
In addition, the grant system related to the license grant and the communication between the terminals cannot be intercepted from other connection points, and thus are safe. In addition, since the license management apparatus is always connected to the external network, it is possible to easily access the license management apparatus from the outside and collect license management history information via the network.
[0095]
Physically, since the license management device is integrally formed with the packet relay device, if theft or destruction is performed by malicious intent, the packet will not be relayed. The fact is easily discovered by stopping the relay.
[0096]
【The invention's effect】
As described above, according to the licensing system and the licensing method of the present invention, it is possible to grant a license corresponding to a location attribute called a network connection point to any connected machine or user. Become. For this reason, for example, a license can be appropriately granted to an unspecified number of people in a public place.
[0097]
Also, since the secret information is fixed in the license grant system device, it is difficult to analyze, and if the internal storage device is removed, the packet relay function is also destroyed, so that intrusion into the internal information is immediately detected. Therefore, it is possible to more effectively prevent leakage of confidential information.
[0098]
Further, according to the license grant system and the license grant method of the present invention, the license grant system has a configuration that can always be connected to the network, and access to the license grant system from any external organization is possible at any time. Since the grant history is stored and held in the system, there is an effect that the license grant history can be easily collected by accessing at an arbitrary timing from the outside.
[Brief description of the drawings]
FIG. 1 is a block diagram showing an embodiment of a license grant system according to the present invention.
FIG. 2 is a block diagram showing an example of a configuration of a license grant system according to the present invention, in which a plurality of connected devices can be connected.
FIG. 3 is a diagram showing a configuration of a license management apparatus of a license grant system having a plurality of network adapter connection points.
FIG. 4 is a diagram showing an example of the structure of a routing table possessed by a packet relay device in the licensing system of the present invention.
FIG. 5 is a diagram showing a flow of operation of the packet relay apparatus in the license grant system of the present invention.
FIG. 6 is a diagram showing a structure of a packet transmitted and received by a license management apparatus in the license grant system of the present invention.
FIG. 7 is a diagram showing a flow of operation of the license management apparatus in the license grant system of the present invention.
FIG. 8 is a diagram showing exchange of packets in a license grant operation in the license grant system of the present invention.
FIG. 9 is a diagram showing a data structure of a license grant history in the license grant system according to the present invention.
FIG. 10 is a diagram showing packet exchange in a license grant history collection operation in the license grant system of the present invention.
FIG. 11 is a diagram showing the operation (broadcast echo packet transmission) of the multi-device connection detection apparatus in the license grant system of the present invention.
FIG. 12 is a diagram showing an operation (return echo packet reception) of the multi-device connection detection device in the license grant system of the present invention.
FIG. 13 is a conceptual diagram of a use booth when the license grant system of the present invention is used in a public library.
[Explanation of symbols]
101,106 connection point
102,105 interface
103 Packet relay device
104 License granting device
201, 202, 203, 204, 213 Connection point
205, 206, 207, 208, 212 interface
209 Packet relay device
210 License management device
211 License history management device
214 Multiple Device Connection Detection Device
301 Device control device
302 storage device
303 arithmetic unit

Claims (7)

A license grant system that has a network adapter connection point to which a communication terminal can be connected, and that grants a use license to an information providing service that provides information to the communication terminal connected to the network adapter connection point;
A packet relay device that relays data transferred through the network adapter connection point;
Which is connected to a network adapter connection point, to the information providing communication terminal via a network that is downloading the encrypted information from the service, the encryption by the transmission of the response data to be decrypted encrypted information A license management device that executes grant of a license that allows the use of the structured information ,
The license management device includes:
A storage unit storing a secret key information identifier that is identification information unique to the network adapter connection point;
(A) a process of transmitting a secret key information identifier , which is identification information unique to the network adapter connection point, to a connection communication terminal connected via the network adapter connection point;
(B) a process of receiving challenge data generated based on an operation having a secret key information identifier that is the identification information as an element in the connected communication terminal that has received identification information unique to the network adapter connection point;
(C) At least response data is generated by calculation using the secret key information corresponding to the secret key information identifier that is identification information unique to the network adapter connection point and the challenge data, and the connection communication terminal of the response data Process to send to
A license granting system having a configuration for executing the processes (a) to (c). The license grant system further includes a license history management device that records a license grant history for the connected communication terminal, and the license history management device individually records the license grant record for each of the network adapter connection points. The license granting system according to claim 1, further comprising a configuration for generating recorded history data. The license grant system is configured to encrypt and send the history data in response to the history data acquisition request executed via the network connection point, and the license grant system includes the network connection point. The authentication process is executed in response to the history data acquisition request requested via the server, the encryption process is performed on the history data on the condition that the authentication process is successful, and the encrypted history data is sent. The licensing system according to claim 2 , wherein: The licensing system further includes a multi-device connection detection device that detects that a plurality of hosts are connected to a single network adapter connection point, and the multi-device connection detection by the multi-device connection detection device is detected. when doing so, licensing system according to any of claims 1 to 3, characterized in that it has a structure to stop licensing for the network adapter connection point. 5. The license grant system according to claim 4 , wherein detection of connection of a plurality of devices by the plurality of device connection detection apparatus is executed by transmission / reception of an echo packet. The license management apparatus and the packet relay apparatus have an integrated configuration, and the function of the packet relay apparatus stops when the license management apparatus is disconnected from the license grant system. The licensing system according to any one of 1 to 5 . Is connected to a network adapter connecting point, by transmitting the response data to perform decryption of the information providing information services from the pair to the communication terminal that is downloading the encrypted information via the network is encrypted, A license management device that executes a license grant that allows the use of the encrypted information ;
(A) Processing for acquiring and transmitting a secret key information identifier , which is identification information unique to a network adapter connection point, from a storage unit to a communication terminal connected to the network adapter connection point;
(B) a process of receiving challenge data generated by an operation having a secret key information identifier that is the identification information as an element in the communication terminal;
(C) At least response data is generated by calculation using the secret key information corresponding to the secret key information identifier, which is identification information unique to the network adapter connection point, and the challenge data, and the response data is further transmitted to the communication terminal. Processing to send,
A license management apparatus having a configuration for executing the processes (a) to (c).

Images