JP4099461B2 - Data copyright management device - Google Patents

Description

  The present invention relates to an apparatus that uses data in the display, storage, copying, processing, and transfer of digital data, and an object thereof is to protect the copyright of the digital data.

  Today, called the information age, database systems that mutually use various data that have been stored independently by each computer by connecting each computer via a communication line are becoming widespread. The information handled so far in this database system is coded information with a small amount of information that can be processed by a classic computer and monochrome binary data such as facsimile information at most. It was not possible to handle data with much more information.

  By the way, with the development of digital processing techniques for various electric signals, development of digital processing techniques for image signals other than binary data, which has been conventionally handled only as an analog signal, is in progress. This digitalization of image signals makes it possible for computers to handle image signals such as television signals. A "multimedia system" that simultaneously handles various data handled by computers and image data obtained by digitizing image signals. Is attracting attention as a future technology.

Since image data has an overwhelmingly large amount of information compared to character data and audio data, it is difficult to store, transfer, or perform various processes in a computer as it is. Therefore, it is conceivable to compress / decompress these image data, and several standards for image data compression / decompression have been created. Among them, JPEG (Joint Photographic image coding Experts Group) standard for still images and H.
261 standard, MPEG1 for image storage (Moving Picture image coding Experts Group 1
) MPEG corresponding to high definition television broadcast from standard and current television broadcast
Two standards were created. With these technologies, digital video data can be processed in real time.

  Since analog data that has been widely used in the past deteriorates in quality every time it is stored, copied, processed, or transferred, copyright processing caused by these operations has not been a major problem. However, since digital data does not deteriorate in quality even if it is repeatedly stored, copied, processed, and transferred, copyright processing caused by these operations is a big problem. Up to now, there has been no accurate method for copyright processing of digital data, and it has been processed by copyright law or contract, and compensation law for digital recording / recording equipment has also been institutionalized under copyright law. Only.

  Database usage is not limited to simply referring to the contents of the database. Usually, the obtained data is effectively used by storing, copying, and processing, and the processed data is online via a communication line or an appropriate storage medium. It is possible to transfer it to others online using the, and even transfer it to the database and register it as new data. In conventional database systems, only character data is the object. In multimedia systems, in addition to data such as characters that have been databased so far, audio data and image data that are originally analog data are digital. It is made into a database.

Under such circumstances, how to handle the copyright of the data in the database is a big problem, but so far the copyright management means for that purpose, especially secondary use such as copying, processing, transfer, etc. There is no completed copyright management means. In principle, software with advertisement or data called freeware does not require a fee for use, but copyright exists and may be subject to copyright restrictions depending on how it is used. Japanese Patent Laid-Open No. 6-132916 and Japanese Patent Laid-Open No. 6-141004 disclose a system for performing copyright management by obtaining an authorization key from a key management center through a public telephone line. A device for that was proposed.

  In Japanese Patent Application No. 6-64889 (Patent Document 1) and Japanese Patent Application No. 6-237673, a system for managing the copyright of digital data has been proposed. In these systems and devices, a person who wishes to view an encrypted program uses a communication device to apply for viewing to the management center via a communication line, and the management center provides a permission key for this viewing application. The fee is collected by sending the bill and sending it. A viewer who has received the permission key sends the permission key to the receiving device by online or offline means, and the receiving device to which the permission key is sent releases the encryption of the program encrypted by the permission key.

  The system described in Japanese Patent Application No. 6-64889 is for managing copyright in the display (including audio), storage, copying, processing, and transfer of digital data in a database system including real-time transmission of digital video. In addition to a key that permits use, a program for managing copyright and copyright information are used. This copyright management program is monitored and managed so that usage contrary to the application or permission is not performed. In Japanese Patent Application No. 6-64889, data is supplied from a database in an encrypted state, decrypted when displayed and processed by a copyright management program, and stored, copied, and transferred are encrypted again. It is described that it is performed in the state where it is performed. In addition, the copyright management program itself is encrypted, the copyright management program is decrypted with the permission key, the decrypted copyright management program decrypts and encrypts the copyright data, and other than data storage and display It is also described that copyright information including information about the operator is saved as a history in addition to the original copyright information when the user is used.

  First, a general description of cryptography will be given. There are two types of cryptographic technologies: secret-key cryptosystem and public-key cryptosystem. Secret key cryptography is an encryption method that uses the same encryption key for encryption and decryption, and while the time required for encryption and decryption is short, the secret key is discovered and the cipher is decrypted (Cryptanalize). There is. On the other hand, the public key encryption method is an encryption key method in which the encryption key is disclosed as a public key (public-key) and the decryption key is not disclosed, and the encryption key is the public key. The decryption key is called a private-key. In order to use this encryption method, the side that sends information encrypts with the public key of the side that receives the encryption, and the side that receives information decrypts with the private key that is not publicly available. Although it is an encryption method and requires a long time for encryption and decryption, it is almost impossible to find a dedicated key and it is very difficult to decrypt the encryption.

In cryptography, plaintext M is encrypted using encryption key K to obtain ciphertext C, where C = E (K, M)
And the case where the plaintext M is obtained by decrypting the ciphertext C by using the encryption key K, M = D (K, C)
It expresses. The encryption method used in the present invention includes a secret-key system in which the same secret key Ks is used for encryption and decryption, and a public key Kb for plaintext encryption.
And a public-key system in which a private key Kv is used to decrypt the ciphertext is adopted.

FIG. 1 shows the configuration of a data copyright management system shown in Japanese Patent Application No. 6-237673, which is a prior application in which the data copyright management apparatus according to the present invention is used. In this system, encrypted data is supplied bidirectionally in response to a request from the primary user 4. Also, a secret key method and a public key method are adopted as the encryption key method. Of course, this system can be applied to the case where satellite broadcasting, terrestrial broadcasting, CATV broadcasting, or a recording medium that does not require free encryption other than the database is used as a data supply means. is there.

  In this system, 1 is a database, 4 is a primary user terminal device, 5 is a secondary user terminal device, 6 is a tertiary user terminal device, and 7 is an n-order user terminal device. 3 is a copyright management center, 8, 9 and 10 are secondary copyright data stored in the copyright management center 3, tertiary copyright data... N-order copyright data, and 2 is a telecommunications carrier. Is a communication network such as a public line provided by or a CATV line provided by a cable television company.

  Among these, the database 1, the primary user terminal device 4, the secondary user terminal device 5, the tertiary user terminal device 6, the n-order user terminal device 7, and the copyright management center 3 are connected to the communication network 2 and are mutually connected. Can be connected to. In this figure, the route indicated by a broken line is a route for encrypted data, the route indicated by a solid line is a request route from each user terminal device, and the route indicated by a one-dot chain line is each route. This is a path through which the encryption key is transferred together with the permission information corresponding to the usage form from the data, and the path indicated by a two-dot chain line indicates that the copyright information is transferred from the database to the next data in the copyright management center. The route to be transferred. Each user who uses this system registers in advance in the database organization. In addition, database organization utilization software is provided to the user at the time of registration. This database organization utilization software includes a program for decrypting an encrypted copyright management program in addition to normal communication software such as a data communication protocol.

  In using the database 1, the primary user uses the primary user authentication data Au1, the first public key Kb1 and the first public key Kb1 corresponding to the first public key Kb1, the second public key Kb2 and the second public key Kb2. A corresponding second dedicated key Kv2 is prepared, and the primary user terminal device 4 is used to access the database 1 via the communication network 2.

  The database 1 that has received the primary user authentication data Au1, the first public key Kb1, and the second public key Kb2 from the primary user confirms the primary user authentication data Au1 and confirms the primary user authentication data Au1. Is transferred to the secondary copyright management center 3 as primary user information Iu1.

  On the other hand, the database 1 prepares two secret keys, that is, a first secret key Ks1 and a second secret key Ks2. Of the prepared first secret key Ks1 and second secret key Ks2, the second secret key Ks2 is also transferred to the copyright management center 3 in advance.

  As a result of the transfer, the copyright management center 3 stores an authorization key Kp corresponding to the primary usage mode, primary user information Iu1, original copyright information Ic0, and a second secret key Ks2. Of these, the original copyright information Ic0 is used to distribute the copyright usage fee.

  When the primary user who wants to use data accesses the database 1 using the primary user terminal device 4, the data menu is transferred. At this time, fee information may be displayed together with the data menu.

  When the data menu is transferred, the primary user performs a data menu search and selects data M. At this time, the original copyright information Ic0 of the selected data M is transferred to the copyright management center 3. Further, the primary user selects the permission key Kp1 corresponding to the desired usage mode from the permission keys corresponding to the usage modes of viewing, storage, copying, processing, and transfer. This permission key Kp1 is also transferred to the copyright management center 3.

  In addition, since viewing / saving is the minimum required as a usage form performed by the primary user, these usage forms are excluded from selection as minimum usage forms, and only copying / processing / transfer are selected. You can also

The original data M0 is read from the database 1 in response to a request from the primary user. The read original data M0 is encrypted with the first secret key Ks1.
Cm0ks1 = E (Ks1, M0)
The encrypted data Cm0ks1 is accompanied by unencrypted original copyright holder information Ic0. Further, the first secret key Ks1 is encrypted with the first public key Kb1, and the second secret key Ks2 is encrypted with the second public key Kb2.
Cks1kb1 = E (Kb1, Ks1)
Cks2kb2 = E (Kb2, Ks2)
At the same time, the copyright management program P is also encrypted with the second secret key Ks2, but Cpks2 = E (Ks2, P)
The encryption of the copyright management program P does not have to be encrypted with the second secret key Ks2, but can be encrypted using another appropriate encryption key. The encrypted original data Cm0ks1, the encrypted copyright management program Cpks2, and the two encrypted secret keys Cks1kb1 and Cks2kb2 are transferred to the primary user terminal device 4 via the communication network 2. If necessary, billing is performed. Note that the encrypted copyright management program CPks2 is not supplied from the database 1, but may be built in, for example, a ROM in the user terminal device 4.

Encryption original data Cm0ks1 from database 1, two encryption secret keys Cks1kb1, Cks2kb2
The primary user who received the encrypted copyright management program CPks2 decrypts the encrypted first secret key Cks1kb1 using the first dedicated key Kv1 corresponding to the first public key Kb1 using the database organization use software. , Ks1 = D (Kv1, Cks1kb1)
The encrypted second secret key Cks2kb2 is decrypted using the second dedicated key Kv2 corresponding to the second public key Kb2.
Ks2 = D (Kv2, Cks2kb2)
Further, the encrypted copyright management program CPks2 is decrypted using the decrypted second secret key Ks2.
P = D (Ks2, Cpks2)
Finally, the encrypted data Cm0ks1 is decrypted using the first secret key Ks1 decrypted using the decrypted copyright management program P, and M0 = D (Ks1, Cm0ks1).
The decrypted original data M0 is used as it is or as processed data M1. As explained before, the first dedicated key Kv1 and the second dedicated key Kv2 are encryption keys that are prepared by the primary user and are not disclosed to others, so that even if the third party obtains the data M, it is encrypted. It is impossible to decrypt the encrypted data M and use it.

Thereafter, when the data M, which is the original data M0 or the processed data M1, is stored, copied or transferred, encryption and decryption are performed using the second secret key Ks2.
Cmks2 = E (Ks2, M)
M = D (Ks2, Cmks2)
The decrypted second secret key Ks2 is used as an encryption key for data encryption / decryption when data is stored, copied or transferred thereafter. The primary user terminal device 4 includes the original copyright information Ic0 together with the first dedicated key Kv1 and the second dedicated key Kv2, the first secret key Ks1 and the second secret key Ks2, the data M, and the copyright management program P. When the primary user processes the data, the primary user information and the copyright information Ic1 such as the processing date and time are also stored. The copyright information Ic1 is safe if it is attached to the data as a copyright information label, and further provided with a digital signature. The encrypted data Cmks2 is encrypted and distributed, and in order to obtain the second secret key Ks2 that is the decryption key, the copyright information label is a clue, so the copyright information label is removed from the encrypted data Cmks2. If this is the case, the second secret key Ks2 cannot be obtained.

  When the encrypted data Cmks2 is stored in the primary user terminal device 4, the second secret key Ks2 is stored in the device, but the encrypted data Cmks2 is stored in the primary user terminal device 4. If the data is copied to the storage medium 11 or transferred to the secondary user terminal device 5 via the communication network 2, the subsequent use in the primary user terminal device 4 becomes impossible. The second secret key Ks2 is discarded. In this case, a limit may be imposed on the number of times of copying / transferring so that the second secret key Ks2 is not discarded in copying / transfer within the number of times of limitation.

The primary user who wants to copy or transfer the data M to the external storage medium 11 via the communication network 2 prepares the second secret key Ks2 for copying or transferring, and the data M is transferred to the second secret key Ks2. Encrypt using.
Cmks2 = E (Ks2, M)
Unencrypted original copyright information Ic0 and primary user copyright information Ic1 are added to the encrypted data Cmks2.

  The secondary user, like the primary user, uses the authentication data Au2, the third public key Kb3, and the third dedicated key Kv3 corresponding to the third public key Kb3 before the database is used. A fourth dedicated key Kv4 corresponding to the fourth public key Kb4 and the fourth public key Kb4 is prepared.

  A secondary user who wishes to use the copied or transferred encrypted data Cmks2 for the second time uses the secondary user terminal device 5 to communicate the data name or data to the copyright management center 3 via the communication network 2. A secondary use application is made by designating a number. At that time, in addition to the secondary user authentication data Au2, the original copyright information Ic0 and the primary user copyright information Ic1, a third public key Kb3 and a fourth The public key Kb4 is also transferred.

  The copyright management center 3 that has received the secondary use application from the secondary user confirms the secondary user authentication data Au2, and the confirmed secondary user authentication data Au2 is the tertiary copyright data as secondary user information. 9 is transferred. Further, when the secondary copyright information Ic1 of the primary user is transferred, the secondary copyright information Ic1 is referred to and confirmed with the secondary copyright data 8, and the confirmed secondary copyright information Ic1 is 3 Transferred to the next copyright data 9.

  The secondary user selects the permission key Kp2 corresponding to the usage mode of viewing / accumulating / copying / processing / transfer. The permission key Kp2 corresponding to the selected usage form is transferred to the tertiary copyright database 9. In addition, since viewing / accumulating is the minimum required as the usage form of the secondary user, these usage forms may be excluded from the selection target as the minimum use form, and only copying / processing / transfer may be selected as the selection target. .

  The secondary copyright database 8 prepares a third secret key Ks3. The prepared third secret key Ks3 is transferred to and stored in the tertiary copyright data 9.

  As a result of these transfers, the tertiary copyright data 9 includes an authorization key Kp2, primary user copyright information Ic1, primary user information Iu1, original copyright information Ic0, secondary user information Iu2, and third information. A secret key Ks3 is stored. Among these, the permission key Kp2, the primary user copyright information Ic1, and the primary user information Iu1 are used for copyright usage fee distribution.

In the same manner, the n-order copyright data 10 includes an authorization key Kpn, (n
-1) Secondary copyright information Icn-1, primary user information Iu1, original copyright information Ic0, n-th user information Iun, and n-th secret key Ksn of the next user are stored.

The permission key Kp2, the primary user information Iu1, the original copyright information Ic0, and the second secret key Ks2 are read from the secondary copyright data 8. Among these, the original copyright information Ic0 is used for distribution of the copyright usage fee. The read second secret key Ks2 is encrypted using the secondary user's third public key Kb3, and the third secret key Ks3 is also encrypted using the fourth public key Kb4.
Cks2kb3 = E (Kb3, Ks2)
Cks3kb4 = E (Kb4, Ks3)
The copyright management program P is encrypted using the third secret key Ks3.
Cpks3 = E (Ks3, P)
The encrypted copyright management program Cpks3, the encrypted second secret key Cks2kb3, and the encrypted third secret key Cks3kb4 are transferred to the secondary user terminal device 5 via the communication network 2. If necessary, billing is performed.

The secondary user who has received the two secret keys Cks2kb3 and Cks3kb4 encrypted from the secondary copyright data 8 and the encrypted copyright management program Cpks3 uses the database utilization software to obtain the third dedicated key Kv3. The encrypted second secret key Cks2kb3 is decrypted using the fourth private key Kv4 corresponding to the fourth public key Kb4, and the encrypted third secret key Cks3 Kb4 is decrypted.
Ks2 = D (Kv3, Cks2kb3)
Ks3 = D (Kv4, Cks3kb4)
Also, the encrypted copyright management program CPks3 is decrypted using the decrypted third secret key Ks3.
P = D (Ks3, Cpks3)
Next, the encrypted data Cmks2 is decrypted and used using the second secret key Ks2 decrypted using the decrypted copyright management program P.
M = D (Ks2, Cmks2)
As described above, the third dedicated key Kv3 and the fourth dedicated key Kv4 are encryption keys that are prepared by the secondary user and are not disclosed to others, so the third party obtains the encrypted data Cmks2. Even so, it is impossible to decrypt and use it.

  Each user who uses this system needs to register in advance in the database organization, and database software is provided to the user at the time of registration. Since this software includes a program for decrypting the copyright management program using the first encryption key in addition to normal communication software such as a data communication protocol, it is necessary to protect the software. In order to use the data M, the first encryption key K1, the second encryption key K2, and the copyright management program P are transferred to each user, and each user needs to keep them. Furthermore, a copyright information label, user information, a public key-type public key, a dedicated key, a program including a secret key generation algorithm, and the like are stored as necessary.

  The most convenient means for storing these is to use a flexible disk, but the flexible disk is extremely vulnerable to data loss or tampering. Also, when using a hard disk drive, there is anxiety about data loss or tampering, although not as much as a flexible disk. By the way, recently, an IC card in which an IC element is enclosed in a card-shaped container has become widespread, and in particular, a PC card in which a microprocessor is enclosed is being standardized as a PCMCIA card or a JEIDA card.

A data copyright management apparatus proposed by the present inventors in Japanese Patent Application No. 6-237673, which is a prior application, will be described with reference to FIG. The data copyright management device 15 is a computer system having a microprocessor (CPU) 16, a local bus 17 of the CPU 16, a read-only memory (ROM) 18 and a write / read memory (RAM) 19 connected to the local bus 17. The local bus 17 is connected to the system bus 22 of the microprocessor 21 of the user terminal device 20.

  Further, the system bus 22 of the user terminal device 20 receives data from a database outside the device and transfers the data to the outside, a communication device (COMM) 23, and a CD-ROM drive (CDRD) that reads data supplied by a CD-ROM. 24) A flexible disk drive (FDD) 25 for copying to a flexible disk drive and a hard disk drive (HDD) 26 for storing data are connected to supply received data or processed data to the outside. Of course, ROM, RAM, etc. are connected to the system bus 22 of the user terminal device, but the description is omitted in this figure.

The ROM 18 of the data copyright management apparatus 15 stores fixed information such as software for using the database and user data. The RAM 19 stores an encryption key and a copyright management program supplied from the key management center or the copyright management center. Decryption or re-encryption is performed by the data copyright management device 15 and only the processing result is transferred to the user terminal device 20 via the local bus 17 and the system bus 21 of the user terminal device. The data copyright management device 15 is realized as a monolithic IC, a hybrid IC, an expansion board, an IC card, or a PC card.
Japanese Patent Laid-Open No. 7-271865

  In the present application, a data copyright management device is proposed which is a more specific version of the data copyright management device used attached to the user terminal device proposed in Japanese Patent Application No. 6-237673, which is a prior application. The data copyright management apparatus according to the present invention is used by being attached to a user terminal device, and includes a central processing unit, a central processing unit bus, a read-only semiconductor memory, an electrically erasable programmable memory, and a read / write memory. A central processing unit bus is connected to a central processing unit, a read-only semiconductor memory, an electrically erasable programmable memory, and a read / write memory, and a system bus of a device using data can be connected to the read-only semiconductor memory. Stores the data copyright management system program, encryption algorithm and user information, and the electrically erasable programmable memory stores the second dedicated key, usage permission key, second secret key and copyright information, and the device operation Sometimes the first public key, the first dedicated key, the second public key, and the first secret key are transferred to the read / write memory. The copyright management program is stored in the EEPROM when supplied from the outside, but is stored in the ROM otherwise. As a form of the data copyright management apparatus, a monolithic IC, a hybrid IC, a thin IC card having a dedicated terminal, a PC card, and an insertion board are possible.

  In the data copyright management system described so far as the invention of the prior application, when the obtained encrypted data is displayed / processed, it is decrypted and used, but the acquired / processed data is stored / copied / transferred. By re-encrypting data, unauthorized use of data is prevented. Therefore, in the device used in the data copyright management system targeted by the present invention, it is necessary not only to decrypt the data but also to re-encrypt the data at the same time. The data copyright management apparatus can execute only one of the data decryption and re-encryption operations.

Therefore, the present application proposes an invention of a data copyright management apparatus capable of simultaneously decrypting and re-encrypting data supplied encrypted in order to manage copyright. For this purpose, at least one microprocessor, ideally, two microprocessors in addition to the microprocessor that controls the entire user terminal device in the user terminal device, the encrypted data supplied is supplied. Decrypt and re-encrypt. When one microprocessor is added, one of the microprocessor of the user terminal device and the added microprocessor performs data decryption, and the other performs re-encryption. When two microprocessors are added, one of the added microprocessors performs data decryption, the other microprocessor performs re-encryption, and the microprocessor of the user terminal device 20 Control the behavior.

  Although the added microprocessor may be connected to the system bus of the microprocessor of the user terminal device, this configuration cannot realize a multiprocessor configuration in which the microprocessors operate in parallel. Therefore, the present application proposes a data copyright management device having a multiprocessor configuration using a SCSI bus or a PCI bus.

  In addition to character data, digital data includes graphic data, computer programs, digital audio data, still image data based on a method such as JPEG, and moving image data based on MPEG. Data works composed of these data are used by using various devices, but these devices must also have a data copyright management function. Therefore, in this application, it is proposed that these data copyright management devices and the data copyright management device described in the prior application are incorporated in various devices.

A first aspect of the present invention is a data copyright management apparatus used by connecting to a terminal device, a receiving device, a recording device, or a computer device that uses data, the terminal device, the receiving device, and the recording device A first secret key, a second secret key, and encrypted data are provided to the terminal device, the receiving device, the recording device, or the computer device from a copyright management system that manages the copyright of data provided to the device or the computer device. And
Means for storing the first secret key and the second secret key; means for receiving supply of the encrypted data from the terminal device, receiving device, recording device, or computer device; and Means for decrypting encrypted data into decrypted data using the first secret key, and processing the processed data using the second secret key when processed by a receiving device, a recording device, or a computer device; Re-encrypting means for encrypting into re-encrypted data; means for storing primary user information of the terminal device, receiving device, recording device or computer device when data processing is executed; Means for discarding the first secret key and the second secret key when the encrypted data is copied or transferred, and the terminal device, the receiving device, so that the second secret key is retransmitted, Recording device, or a means to apply for re-transmission of the second secret key for use of the re-encrypted data to said copyright management system presents the primary user information of the computer device,
When the second secret key is retransferred, a copy or transfer of the re-encrypted data is registered in the copyright management system.

The second aspect is a data copyright management device used by connecting to a terminal device, a receiving device, a recording device, or a computer device that uses data,
A microprocessor and a local bus connected to the microprocessor;
A read-only semiconductor memory and a read / write memory connected to the local bus,
One of the terminal device, the receiving device, the recording device, or the microprocessor of the computer device and the microprocessor of the data copyright management device may perform decryption processing and the other may perform re-encryption processing.

Further, the third aspect is used by connecting to a terminal device, a receiving device, a recording device, or a computer device that uses data,
First and second microprocessors; a first local bus connected to the first microprocessor; a first read-only semiconductor memory connected to the first local bus; A write memory; a second local bus connected to the second microprocessor; a second read-only semiconductor memory connected to the second local bus; and a second read / write memory;
The first microprocessor may perform decryption processing of the encrypted data, and the second microprocessor may perform re-encryption processing of the decrypted data.

  In the present application, it is possible to simultaneously decrypt and re-encrypt data supplied in an encrypted manner in order to manage copyright.

  Embodiments of the present invention will be described below with reference to the drawings. FIG. 3 is a block diagram showing the configuration of the data copyright management apparatus according to the present invention which is Embodiment 1. As shown in FIG. This data copyright management device 30 includes an electrically erasable programmable memory (EEPROM) 31 in addition to the components of the data copyright management device 15 described in Japanese Patent Application No. 6-237673, which is a prior application. . The data copyright management device 30 is a computer system having a CPU 16, a local bus 17 of the CPU 16, a ROM 18 connected to the local bus 17, a RAM 19, and an EEPROM 31, and the local bus 17 is a system of the microprocessor 21 of the user terminal device 20. Connected to the bus 22. Further, the system bus 22 of the user terminal device 20 receives data from a database outside the device and transfers the data to the outside, a communication device (COMM) 23, and a CD-ROM drive (CDRD) that reads data supplied by a CD-ROM. 24) A flexible disk drive (FDD) 25 for copying to a flexible disk drive and a hard disk drive (HDD) 26 for storing data are connected to supply received data or processed data to the outside. Of course, ROM, RAM, etc. are connected to the system bus 22 of the user terminal device, but the description is omitted in this figure.

  The ROM 18 stores fixed information such as a data copyright management program, an encryption program based on an encryption algorithm, and user data. The EEPROM 31 stores an encryption key and copyright information. When the data copyright management program and the encryption program are supplied from outside such as a database, these are stored in the EEPROM 31 instead of the ROM 18. Decryption or re-encryption is performed by the data copyright management device 30, and only the processing result is transferred to the user terminal device 20 via the local bus 17 and the system bus 22.

  The data copyright management device 30 is realized as a monolithic IC, a hybrid IC, an expansion board, an IC card, or a PC card.

The ROM 18 of the data copyright management apparatus 30 of the first embodiment stores fixed information such as a data copyright management program, an encryption program based on an encryption algorithm, and user data. The ROM 18 can store a secret key generation program based on a secret key algorithm that is not secret, a decryption program, and a re-encryption program. The EEPROM 31 stores an encryption key and copyright information. When the copyright management program and the encryption program are supplied from the outside such as a database, these are stored in the EEPROM 31 instead of the ROM 18. This EEPROM is not necessarily required and can be omitted. The RAM 19 stores one of the first encryption key and the second encryption key supplied from the key management center or the copyright management center and a data copyright management system program.

  On the other hand, information such as software and user data required by the MPU 46 of the user terminal device 20 is supplied to the user terminal device 20 by software and stored in the RAM of the user terminal device 20. The RAM of the user terminal device 20 stores one of the first encryption key and the second encryption key supplied from the key management center or the copyright management center and the copyright management system program. The decryption and re-encryption operations are performed by the MPU 46 of the user terminal device 20 main body and the CPU 16 of the data copyright management device 30, one of which performs decryption and the other performs re-encryption. Only the result is transferred to the user terminal.

  FIG. 4 shows a specific internal configuration of the data copyright management apparatus 30 shown in FIG. The data copyright management device 30 includes a microcomputer (CPU) 16, a read-only memory (ROM) 18, a write / read memory (RAM) 19, and an electrically erasable programmable memory (EEPROM) 31, which are enclosed in a micro-computer. The microcomputer 16 is connected to a microcomputer bus 17 of the computer 16, and the microcomputer bus 17 is further connected to a system bus 22 of the user terminal device 20 body.

  The read-only semiconductor memory 18 stores a data copyright management system program, an encryption algorithm, and user information. The interior of the electrically erasable programmable memory 31 is divided into three areas. The first area 35 stores a first public key Kb1, a first dedicated key Kv1, a second public key Kb2, and a second dedicated key Kv2. In the second area 36, the copyright management program P, the first secret key Ks1 as a permission key in primary use such as viewing permission / accumulation permission / copying permission / processing permission / transfer permission, etc. and viewing permission / accumulation permission / copy permission Stores a second secret key Ks2 that is a permission key for secondary use such as processing permission and transfer permission. Note that the copyright management program is not supplied from the outside but may be placed in advance on the user side. In this case, the copyright management program is not the second area 36 of the electrically erasable programmable memory 31, It is stored in the read only memory 18. The third area 37 stores original copyright information, copyright information such as secondary copyright information, and an access control key.

  Similar to the electrically erasable programmable memory 31, the inside of the write / read memory 19 is also divided into three areas. The first area 32 stores a first public key Kb1, a first dedicated key Kv1, and a second public key Kb2 during operation. The second area 33 stores a first secret key Ks1 that is a permission key for primary use such as viewing permission / accumulation permission / copying permission / processing permission / transfer permission during operation. The third area 34 stores an access control key during operation.

  The user terminal device to which the data copyright management device is attached performs all operations for using the data in the data copyright management device according to the present invention, and transfers only the result to the user terminal device for various uses. As it is done, it is highly safe.

  When sending and receiving image data with a large amount of information, in order to reduce the amount of communication data, the original data is compressed before being sent, and the compressed data is decompressed and used after reception. Copyright management can be performed by encrypting data. FIG. 5 shows an example of a data copyright management flow in the case where the data to be encrypted is a digital image compressed by the JPEG standard or the MPEG standard. This flow is the transmission side across the transmission line. The flow is divided into a flow and a receiving flow, and the receiving flow is further divided into a display flow and a storage flow.

The signal processing on the transmission side includes a process of preparing a digital image and a process of processing the prepared digital image. In this process, when the original image is the digital image 41, the next process is performed as it is, but when the original image is the analog image 40, the digitization process 42 is performed. The digital image is first subjected to compression processing 43 according to a predetermined standard such as JPEG standard or MPEG standard, and the compressed digital data is encrypted 44 using the first secret key.

  The image data subjected to such transmission-side signal processing is transmitted via a transmission line 45 such as a satellite broadcast radio wave, a terrestrial broadcast radio wave, a CATV radio wave, or a public line / ISDN line. Note that a recording medium such as a digital video tape, a digital video disk, or a CD-ROM may be used as the transmission line.

  The image data transmitted to the receiving side in this way is first decrypted 46 using the first secret key, then decompressed 47 of the compressed image data is performed and displayed 49. If the display device is a digital data display device, it is displayed as it is, but if it is an analog data display device, analogization 48 is performed.

  When data is stored on a hard disk, flexible disk, magneto-optical disk, write-once video disk, etc., it is stored after being re-encrypted 50 using the second secret key. When re-encrypted and stored image data is displayed again, it is re-decrypted 52 using the second secret key and displayed 49. If the display device is a digital data display device, it is displayed as it is, but if it is an analog data display device, analogization 48 is performed. In the case where the data is data other than an image, an appropriate data compression / decompression means and transmission path suitable for the data are used.

FIG. 6 shows an example of a database copyright management system disclosed in Japanese Patent Application No. 6-237673, which is a prior application. In this system, a secret key system is adopted as an encryption key system. In the system shown in this figure, 1 is a database in which text data, computer graphics screen or binary data as computer programs, digital audio data, and digital video data are stored in an encrypted state, and 14 is a communication / broadcasting. Artificial satellites such as satellites, 15 'is a data recording medium such as a CD-ROM or flexible disk, 2 is a communication network such as a public line provided by a communication carrier or a CATV line provided by a cable television operator, 4 is 1 Next user terminal device. Reference numeral 16 denotes a key management center that manages secret keys, and reference numeral 17 denotes a copyright management center that manages database copyrights.

  5, 6 and 7 are secondary user terminal devices, tertiary user terminal devices and n-order user terminal devices, respectively, 11, 12 and 13 are secondary disks which are storage media such as flexible disks or CD-ROMs, A tertiary disk and an n-th disk. Note that n is an arbitrary integer, and when n is larger than 4, there is a correspondence between the tertiary user terminal device 6 and the n-order user terminal device 7 and between the tertiary disk 12 and the n-order disk 13. A user terminal device and a disk are arranged.

  Among these, the database 1, the key management center 16, the copyright management center 17, the primary user terminal device 4, the secondary user terminal device 5, the tertiary user terminal device 6, and the nth user terminal device 7 are connected to the communication network 2. Has been. In this figure, the route indicated by a broken line is a route for encrypted data, the route indicated by a solid line is a request route from each user terminal device, and the route indicated by a one-dot chain line is each route. This is a path through which the secret key is transferred together with permission information corresponding to the usage form from the database. Each user who uses this system registers in advance in the database organization. In addition, database organization utilization software is provided to the user at the time of registration. The database organization use software includes a program for operating a copyright management program in addition to normal communication software such as a data communication protocol.

Text data stored in the database 1 or the data recording medium 15 ', computer graphics screen or binary data, which is a computer program, digital audio data, or original data M0, which is digital video data, is the communication network 2, artificial satellite 14 or stored. It is unidirectionally supplied to the primary user terminal device 4 via the medium 15 ', but at this time, it is encrypted using the first secret key Ks1.
Cm0ks1 = E (Ks1, M0)
Even in the case of data provided free of charge such as with advertisements, encryption is required for copyright protection.

  In the prior application, Japanese Patent Application No. 6-64889, there are storage, processing, copying, and transfer in addition to the most basic display modes of data use. One corresponding to one or more is prepared, and management thereof is shown to be executed by a copyright management program. In addition, it is stated that the data is re-encrypted by the copyright management program when the data is stored, copied, or transferred other than the data display and processing display. In other words, the data claimed for copyright is distributed in an encrypted state and is only plainly displayed when it is displayed or displayed for processing on a user terminal device having a copyright processing function. is there.

In this system, items described in these prior applications are used. The primary user who desires the primary use of the supplied encrypted data Cm0ks1 uses the primary user terminal device 4 to the key management center 16 to enter the original data name or the original data number via the communication network 2. By designating, the primary use application for the encrypted original data Cm0ks1 is made. At this time, information Iu1 related to the primary user is presented to the key management center 16. The key management center 16 that has received the primary use application using the primary user terminal device 4 decrypts the encrypted original data Cm0ks1 obtained from the database 1 by the primary user together with the copyright management program P. The first secret key Ks1 and the decrypted original data M0 or the second secret key Ks2 for re-encrypting the processed data M1 obtained by processing the original data are transmitted via the communication network 2 to the primary user terminal 4 Forward to.

In the primary user terminal device 4 that has received the first secret key Ks1 that is the decryption key and the second secret key Ks2 that is the encryption / decryption key, the first secret key Ks1 is first used using the copyright management program P. Is used to decrypt the encrypted original data Cm0ks1 and M0 = D (Ks1, Cm0ks1)
The decrypted original data M0 is used as it is or as processed data M1.

  When the data M, which is the original data M0 or the processed data M1, is stored in the primary user terminal device 4, that is, in the memory or the built-in hard disk drive, only the primary user can use the data. However, when the data M is copied to the external storage medium 11 such as a flexible disk or transferred to the secondary user terminal device 5 via the communication network 2, a copyright problem due to secondary use occurs. .

  In addition, when the original data M0 obtained by the primary user is copied as it is and supplied to the secondary user, no modification has been made to the original data M0. Does not occur. However, when processing is performed based on the data M0 obtained by the primary user or when new data M1 is created by using means such as combining with other data, the copyright of the primary user is included in the data M1. (Secondary copyright secondary exploitation right) occurs. Similarly, when the secondary user performs processing based on the original data M0 or the processing data M1 obtained from the primary user or creates new data M2 by using means such as combining with other data. Similarly, the copyright of the secondary user is generated.

In order to cope with this copyright problem, in this system, when the data M is stored, copied, and transferred, the data M is encrypted by the copyright management program P using the second secret key Ks2, and thereafter the primary data is encrypted. In the user terminal device 4, the data M is decrypted and encrypted using the second secret key Ks2.
Cmks2 = E (Ks2, M)
M = D (Ks2, Cmks2)
In principle, the primary user can freely display and process data to obtain processed data, but in that case, the number of times can be limited by a copyright management program.

  When the data M is copied to the external storage medium 11 and when the data is transferred via the communication network 8, the first secret key Ks1 and the second secret key Ks2 in the primary user terminal device 4 are stored by the copyright management program P. Discarded. Therefore, when the primary user uses the data M again, it is necessary to apply to the key management center 16 and receive the second secret key Ks2. The fact that the second secret key Ks2 has been reissued is that the data M is copied to the external storage medium 11 or transferred to the secondary user terminal device 5 via the communication network 2 for secondary use. This means that this is registered in the copyright management center 17 from the key management center 16, and the subsequent secondary use becomes possible.

  Movement of data M from the primary user terminal device 4 to the secondary user terminal device 5 is performed by the external storage medium 11 or the communication network 2 and is copied to the external storage medium 11 or moved via the communication network 2. Is performed, the data M is encrypted using the second secret key Ks2.

  When the data M is copied to the external storage medium 11 and when the data M is transferred via the communication network 2, the first secret key Ks1 and the second secret key Ks2 in the primary user terminal device 4 are discarded. At this time, the unencrypted primary user information Iu1 is added to the encrypted data Cmks2 stored in the primary user terminal device 4, and 1 when the encrypted data Cmks2 is transferred to the secondary user. Next user information Iu1 is also transferred.

A secondary user who desires secondary use of the encrypted data Cmks2 copied or transferred from the primary user uses the secondary user terminal device 5 to the copyright management center 17 via the communication network 2. A data name or data number is designated and secondary user information Iu2 is presented to make a secondary use application. At that time, it is added to the encrypted data Cmks2 to clarify the relationship with the primary user. The primary user information Iu1 that is not encrypted is also presented. Based on the presented primary user information Iu1, the copyright management center 17 confirms that the primary user has received the second secret key Ks2 for secondary use of the data, and decrypts it. The second secret key Ks2 as a key and the third secret key Ks3 as an encryption / decryption key are transferred to the secondary user terminal device 5 via the communication network 2. In the secondary user terminal device 5 that has received the second secret key Ks2 and the third secret key Ks3, the copyright management program P decrypts the encrypted data Cmks2 using the second secret key Ks2, and M = D (Ks2, Cmks2)
Secondary use of display or processing is performed.

In this system, the primary use application is processed by the key management center 16, and the secondary use application is processed by the copyright management center 17. The data M supplied by the primary user is encrypted using the first secret key Ks1, but the data M supplied by the secondary user is encrypted using the second secret key Ks2. . On the other hand, the first secret key Ks1 and the second secret key Ks2 are transferred as encryption keys from the key management center 16 to the primary user. Therefore, when the secondary user makes a primary use application to the key management center 16 while pretending that the secondary user is the primary user, the first secret key Ks1 is used as the decryption key, and the first secret key Ks1 is used as the encryption / decryption key. Two secret keys Ks2 are transferred. However, the encrypted data Cmks2 cannot be decrypted using the first secret key Ks1 transferred as the decryption key. Therefore, it is impossible to make a false application for the use of data, and as a result, not only the original copyright of the data but also the copyright of the primary user of the data is protected.

When the secondary user terminal device 5 performs storage, copying, or transfer, which is a form of use other than display and processing for the data M, the copyright management program P uses the third secret key Ks3 to encrypt the data M. After that, data is decrypted and encrypted using the third secret key Ks3.
Cmks3 = E (Ks3, M)
M = D (Ks3, Cmks3)
In principle, the secondary user can freely display and process the processed data M2, but in that case, the copyright management program P can limit the number of times.

  When the data M is copied to the external storage medium 12 and when the data is transferred via the communication network 2, the second secret key Ks2 and the third secret key Ks3 in the secondary user terminal device 5 are stored by the copyright management program P. Discarded. Therefore, when the secondary user uses the data M again, it is necessary to apply to the copyright management center 3 and receive the third secret key Ks3. The fact that the third secret key Ks3 has been reissued is that the data M is copied to the external storage medium 12 or transferred to the tertiary user terminal device 6 via the communication network 2 for secondary use. This means that it has been registered in the copyright management center 17 and can be used thereafter.

  The data M is moved from the secondary user terminal device 5 to the tertiary user terminal device 6 by the external storage medium 12 or by the communication network 2 and copied to the external storage medium 12 or moved via the communication network 2. Is performed, the data M is encrypted using the third secret key Ks3.

  The second secret key Ks2 and the third secret in the secondary user terminal device 5 when the data M is copied to the external storage medium 12 and when the data M is transferred to the tertiary user terminal device 6 via the communication network 2 The key Ks3 is discarded. At this time, the encrypted data Cmks3 to which the unencrypted secondary user information Iu2 is added is added to the encrypted data Cmks3 stored in the secondary user terminal device 5. When transferring to the next user, the secondary user information Iu2 is also transferred. The user information is added to the data when all user information is added to the data every time it is copied or transferred, and the history that is rewritten to the latest one each time is stored in the copyright management center. There is a case.

A tertiary user who desires tertiary use of the encrypted data Cmks3 copied or transferred from the secondary user uses the tertiary user terminal device 6 to the copyright management center 17 via the communication network 2. A data name or a data number is designated and tertiary user information Iu3 is presented to make a tertiary use application. At that time, in order to clarify the relationship with the secondary user, it is added to the encrypted data Cmks3. Non-encrypted secondary user information Iu2 is also presented. Based on the presented secondary user information Iu2, the copyright management center 17 confirms that the secondary user has undergone a preparation procedure for tertiary use of the data, that is, the third secret key Ks3 has been reissued. Then, the third secret key Ks3 as the decryption key and the fourth secret key Ks4 as the encryption / decryption key are transferred to the tertiary user terminal device 6 via the communication network 2. In the tertiary user terminal device 6 that has received the third secret key Ks3 and the fourth secret key Ks4, the copyright management program P decrypts the encrypted data Cmks3 using the third secret key Ks3, and M = D (Ks3, Cmks3)
Tertiary use of display or processing is performed.

  In this system, the data M supplied by the primary user is encrypted using the first secret key Ks1, and the data M supplied by the secondary user is encrypted using the second secret key Ks2. However, the data M supplied by the tertiary user is encrypted using the third secret key Ks3. For this reason, when the primary user makes a primary use application to the key management center 16 assuming that the tertiary user is the primary user, the first secret key Ks1 is used as the decryption key, and the first secret key Ks1 is used as the encryption / decryption key. Two secret keys Ks2 are transferred. However, the encrypted data Cmks3 cannot be decrypted using the first secret key Ks1 transferred as the decryption key. When the secondary user makes a secondary use application to the copyright management center 17 assuming that the tertiary user is a secondary user, the second secret key Ks2 is used as the decryption key, and the encryption / decryption key is used. The third secret key Ks3 is transferred. However, the encrypted data Cmks3 cannot be decrypted using the second secret key Ks2 transferred as the decryption key. Therefore, it is impossible to make a false application for the use of data, and as a result, not only the original copyright of the data but also the copyright of the primary user and the copyright of the secondary user of the data are protected. Hereinafter, the same procedure is applied to the fourth and subsequent uses.

  Although the database 1, the key management center 16, and the copyright management center 17 in the system described above are separately installed, they are not necessarily separate, and all or appropriate two of them are integrated. It is also possible to install. Further, the second secret key reissuance application from the primary user may be made not to the key management center 16 but to the copyright management center 17. FIG. 7 shows a signal processing flow in a data processing method for digital video or digital audio. FIG. 7A shows a general processing flow, (b) ) Shows a processing flow that can avoid signal degradation. In the processing flow shown in (a), the signal supplied as the digital signal (61) is first converted to analog (62), and then processed (63) while displaying 64 on the analogized signal. The analog signal that has been processed and processed is re-digitized (65) and stored, copied, and transferred (66). Although this process is simple, signal processing is performed in an analog state and is digitized again after the processing is completed, so signal deterioration cannot be avoided.

  In the processing flow shown in (b), the digital signal (61) is displayed as an analog (62) for processing. The analogized (62) signal is used in processing (63), but this analogized signal is only used for display (64) and not for storage, copying, or transfer. The signal for storage, copying, and transfer is processed (67) in the state of a digital signal (61) corresponding to the signal displayed in analog form, and storage, copying, and transfer (66) are performed. In the case of this processing flow, since the digital signal to be stored, copied and transferred is not converted into an analog signal, no deterioration occurs.

FIG. 8 shows an example of a flow in which the signal processing in the data processing method in the digital video or digital audio shown in FIG. 6 is applied to processing encrypted data. ) Shows a simplified signal processing flow, and (b) shows an example of a signal processing flow that allows sufficient copyright management. The original data Cm0ks1 71 encrypted and supplied using the first secret key Ks1 in the signal processing flow shown in (a) is first decrypted 72 using the first secret key Ks1 and M0 = D ( Ks1, Cm0ks1)
Next, processing (73) is performed while displaying (74) the decrypted data M0. The processed data M1 is re-encrypted (75) using the second secret key Ks2, and Cm1ks2 = E (Ks2, M1)
Storage, copying, and transfer (76) are performed. Although this process is simple, since the data processing is performed in a decrypted state, the decrypted data may be stored, copied, or transferred, and copyright management is sufficiently performed. I can't say that.

On the other hand, in the signal processing flow shown in (b), the original data Cm0ks1 (71) encrypted using the first secret key Ks1 is decrypted (72) using the first secret key Ks1. , M0 = D (Ks1, Cm0ks1)
The decrypted data M0 is displayed (74). On the other hand, the processing (73) is performed on the encrypted data Cm0ks1 using the decrypted data M0 as a clue, and the original data M0 for storage or the processed processed data M1 is re-encrypted using the second secret key. Cm0ks2 = E (Ks2, M0)
Cm1ks2 = E (Ks2, M1)
The encrypted data Cm0ks2 or Cm1ks2 is stored, copied, and transferred (76). Corresponding to the decrypted and displayed data, it is processed in an encrypted state without being decrypted (77), and the processed program data and the encrypted data are stored, copied, and transferred ( 76). In the case of this signal processing flow, the data for storage, copying, and transfer remains encrypted, so that the decrypted data is not stored, copied, or transferred.

  In the data copyright management system in which the data copyright management apparatus of the present invention is used, when the obtained encrypted data is displayed / processed, it is decrypted and used, but the acquired / processed data is stored / copied / When transferring, the data copyright is managed by re-encryption. However, the data copyright management device 15 of the invention of the prior application shown in FIG. 2 and the data copyright management device 30 of the present invention shown in FIG. 3 either decrypt the encrypted data or encrypt the decrypted data. Only one can be done. Therefore, when storing / copying / transferring decrypted or processed data, it is necessary to temporarily store the data in the RAM of the user terminal device or data copyright management device, and then re-encrypt the stored data. . Therefore, not only the data that can be processed is quantitatively limited, but also data that has been decrypted or processed due to an accident or an operation error may be lost.

  Except for some high-end MPUs, general MPUs used in personal computers or the like do not consider a multiprocessor configuration that allows a plurality of microcomputers to operate simultaneously. Therefore, even if an accessory device is connected to the system bus of a personal computer, a plurality of operations cannot be performed simultaneously. Therefore, even if the data copyright management device 15 shown in FIG. 2 or the data copyright management device 30 shown in FIG. 3 is connected to the system bus 22 of the user terminal device 20, the MPU 21 or 46 and the CPU 16 are in parallel. There is no multiprocessor configuration that can be operated, and the operations of decrypting the encrypted data and re-encrypting the decrypted data are not performed simultaneously but alternately. For this reason, the size of data that can be decrypted and encrypted is limited by the capacity of the RAM, and large data cannot be processed. Even if the data is not large, the processing speed cannot be increased.

  On the other hand, in the data copyright management system described as the invention of the prior application, when the obtained encrypted data is displayed / processed, it is decrypted and used, but when the acquired / processed data is stored / copied / transferred. Re-encryption prevents unauthorized use of data. Therefore, in the apparatus used in the data copyright management system targeted by the present invention, it is desirable that not only data decryption but also data re-encryption is performed at the same time.

A PCI (Peripheral Component Interconnect) bus is recently attracting attention as means for realizing a multiprocessor configuration in a general personal computer. The PCI bus is an external connection bus connected to a computer system bus via a PCI bridge, and a multiprocessor configuration can be realized by using the PCI bus.

  FIG. 9 shows the configuration of the data copyright management apparatus using the PCI bus according to the second embodiment of the present invention. The configuration is the same as the data copyright management apparatus 15 shown in FIG. The computer system has a local bus 17 of the CPU 16, a ROM 18, a RAM 19 and an EEPROM 31 connected to the local bus 17. On the other hand, a PCI bus 81 connected by a PCI bridge 82 is connected to the system bus 22 of the microprocessor 21 of the user terminal device 20, and the local bus 17 of the CPU 16 of the data copyright management device 80 is connected to the PCI bus 81. It is connected. The system bus 22 of the user terminal device 20 further receives a data from a database outside the device, and transfers a data to the outside, a communication device (COMM) 23, and a CD-ROM drive (CDRD) that reads data supplied by a CD-ROM. 24) A flexible disk drive (FDD) 25 for copying to a flexible disk drive and a hard disk drive (HDD) 26 for storing data are connected to supply received data or processed data to the outside. Note that the COMM 23, the CDRD 24, the FDD 25, and the HDD 26 can be connected to the PCI bus 81. Further, as a matter of course, ROM, RAM and the like are connected to the system bus 22 of the user terminal device, but the description is omitted in this figure.

  Since the configuration and operation of the other parts are the same as in the case of the first embodiment shown in FIG. The MPU 21 of the user terminal device 20 and the CPU 16 of the data copyright management device 80 share the work of decryption and re-encryption, and one performs decryption and the other simultaneously performs re-encryption. Since the MPU 21 and the CPU 16 in this embodiment have a multiprocessor configuration that performs parallel operation using a PCI bus, a high processing speed can be obtained.

  Incidentally, as a typical means for attaching an external device to the personal computer main body, there is a SCSI (Small Computer System Interface) interface to which an external storage device such as a hard disk device or a CD-ROM drive is connected. . Up to eight devices including the personal computer main body to which the SCSI interface is connected can be connected to the SCSI interface, and a plurality of computers can be used as the eight devices. Any of these multiple computers can play an equivalent role. In other words, the SCSI interface functions not only as an interface but also as a multiprocessor bus. The third embodiment pays attention to the function of the SCSI interface as a multiprocessor bus. Instead of the PCI bus 81 of the second embodiment, the SCSI interface 86 (hereinafter, “SCSI interface” is referred to as “SCSI bus” for convenience of understanding). ) To connect the data copyright management device 85 to the system bus 22 of the user terminal device 20.

  FIG. 10 is a block diagram showing the configuration of the data copyright management apparatus according to the third embodiment of the present invention using a SCSI bus. The data copyright management device 85 of the third embodiment has the same configuration as the data copyright management device shown in FIG. 3, that is, the CPU 16, the local bus 17 of the CPU 16, the ROM 18, the RAM 19 and the EEPROM 31 connected to the local bus 17. The computer system has a configuration.

On the other hand, a SCSI bus 86 controlled by a SCSI controller (SCSICONT) 87 is connected to the system bus 22 of the microprocessor 21 of the user terminal device 20, and the local bus 17 of the CPU 16 of the data copyright management device 85 is connected to the SCSI bus 86. It is connected to the bus 86. Further, the system bus 22 of the user terminal device 20 further receives a data from a database outside the device, and a communication device (COMM) 23 for transferring the data to the outside, a CD-ROM drive for reading data supplied by a CD-ROM. (CDRD)
24, a flexible disk drive (FDD) 25 for copying to a flexible disk drive and a hard disk drive (HDD) 26 for storing data are connected to supply received data or processed data to the outside. Note that the COMM 23, the CDRD 24, the FDD 25, and the HDD 26 can be connected to the SCSI bus 86. Further, as a matter of course, ROM, RAM and the like are connected to the system bus 22 of the user terminal device, but the description is omitted in this figure.

  Since the configuration and operation of the other parts are the same as in the case of the first embodiment shown in FIG. The MPU 21 of the user terminal device 20 main body and the CPU 16 of the data copyright management device 85 share the work of decryption and re-encryption, one of which performs decryption and the other simultaneously performs re-encryption, and the MPU 21 and CPU 16 perform the SCSI bus. Since it is a multiprocessor configuration that performs parallel operation by 86, a high processing speed can be obtained.

  In addition, SCI (Scalable Coherent Interface) or the like can be used as a means for realizing a multiprocessor configuration, and if possible, the microprocessors may be connected without using a bus.

  Data to be managed by the data copyright management apparatus of the present invention includes graphic data, computer program, digital audio data, still image data by a method such as JPEG, and moving image data by MPEG, in addition to character data. . The data copyright management device 80 of the second embodiment or the data copyright management device 85 of the third embodiment described so far is connected to the system bus 22 of the microprocessor 21 of the user terminal device 20 by a PCI bus or a SCSI bus. Thus, a multiprocessor is configured. In the case of such a multiprocessor configuration, the MPU 21 of the user terminal device 20 needs to play a role of controlling the entire system. When the data is relatively low-speed and small-capacity data such as character data and graphics data, the data copyright management by decryption and re-encryption is possible even with a multiprocessor configuration by the MPU 21 and the CPU 16, but the data is JPEG In the case of a moving image based on a still image and a moving image based on MPEG1 or MPEG2, data copyright management with such a configuration is extremely difficult because the data is high speed and large capacity.

  In the fourth embodiment shown in FIG. 11, the first data copyright management device 80 and the second data copyright management device 90 are connected to the PCI bus 81 in order to cope with such a situation. Constitutes a multiprocessor system. The second data copyright management device 90 has the same configuration as the first data copyright management device 80, that is, the CPU 91, the local bus 94 of the CPU 91, the ROM 92, the RAM 93 and the EEPROM 95 connected to the local bus 94. In this embodiment, the first data copyright management device 80 decrypts the encrypted data, and the second data copyright management device 90 re-encrypts the decrypted data.

  The ROM 18 of the first data copyright management device 80 that decrypts the encrypted data stores software for using the database and fixed information such as user data. The RAM 19 stores a first encryption key for decryption and a data copyright management system program supplied from the key management center or the copyright management center. Similarly, software for using the database and fixed information such as user data are stored in the ROM 92 of the second data copyright management apparatus 90 that re-encrypts the decrypted data, and the key is stored in the RAM 93. A second encryption key for re-encryption and a data copyright management system program supplied from the management center or copyright management center are stored. Note that SCSI or SCI can be used for this multiprocessor configuration, and if possible, the microprocessors may be connected without using a bus.

  In the prior application shown in FIG. 2 and the first embodiment of the present invention described with reference to FIG. 3, the communication device (COMM) 23 and the CD-ROM drive (CDRD) 24 to which the encrypted data is supplied are It is connected to the system bus of the user terminal device 20. Therefore, in order to decrypt the encrypted data, the encrypted data must be routed through the system bus of the user terminal device 20 and the local bus of the data copyright management device, which reduces the processing speed. There is a risk of inviting. This is the same even when these accessory devices are connected to the PCI bus or SCSI bus. In the fifth embodiment shown in FIG. 12, the communication device 23 and the CD-ROM drive 24 to which encrypted data is supplied in order to prevent a decrease in processing speed are included in the data copyright management device 97 for decryption. Connected to the local bus 17.

  A data copyright management device 97 of the fifth embodiment shown in FIG. 12 is a data copyright management device for decryption, and is basically the same as the data copyright management device 30 of the first embodiment shown in FIG. The CPU 16 is configured as a computer system having the CPU 16, the local bus 17 of the CPU 16, the ROM 18 connected to the local bus 17, the RAM 19, and the EEPROM 31, and the communication device COMM 23 and the CD-ROM drive CDRD 24 are connected to the local bus 17. The ROM 18 stores fixed information such as a copyright management program, an encryption program based on an encryption algorithm, and user data. The EEPROM 31 stores copyright information. When the copyright management program and the encryption program are supplied from the outside such as a database, these are stored in the EEPROM 31 instead of the ROM 18. The RAM 19 stores a decryption encryption key and a data copyright management system program supplied from the key management center or the copyright management center. The encrypted data supplied from the COMM 23 or the CDRD 24 is decrypted by the data copyright management device 97 and transferred to the user terminal device 95.

  Although the data copyright management devices 80 and 90 of the fourth embodiment described above are described as being configured separately, it goes without saying that these can be configured integrally.

  FIG. 13 shows a data copyright management apparatus according to a sixth embodiment, which is a further development of the data copyright management apparatus 100 according to the fifth embodiment. In the invention of the prior application shown in FIG. 2 and the first embodiment of the present invention described with reference to FIG. 3, a storage device such as the HDD 26 for storing re-encrypted data is connected to the system bus 22 of the user terminal device 20. Has been. Therefore, in order to store the re-encrypted data, the user terminal device 20 must pass through the system bus 22 and the data copyright management device 15 or the local bus 17 of the data copyright management device 30. There is a risk of speed reduction. This is the same even when these accessory devices are connected to the PCI bus or SCSI bus. In the data copyright management apparatus 100 of the sixth embodiment shown in FIG. 13, the data for decryption in which the communication device COMM23 and the CD-ROM drive CDRD 24 of the fifth embodiment shown in FIG. In addition to the copyright management device 97, a storage device such as the HDD 26 that stores the re-encrypted data is connected to the local bus 94 of the re-encryption data copyright management device 101.

  The data right management device 101 for re-encryption shown in the sixth embodiment is basically the same as the data copyright management device 30 shown in FIG. 3, that is, the CPU 91, the local bus 94 of the CPU 91, The computer system includes a ROM 92, a RAM 93 and an EEPROM 95 connected to the local bus 94, and the HDD 26 is connected to the local bus 94.

The ROM 92 stores fixed information such as a copyright management program, an encryption program based on an encryption algorithm, and user data. The EEPROM 95 stores copyright information. When the copyright management program and the encryption program are supplied from the outside such as a database, these are stored not in the ROM 92 but in the EEPROM 95. The RAM 93 stores a re-encryption encryption key and a data copyright management system program supplied from the key management center or the copyright management center. Data re-encrypted by the copyright management apparatus 101 for re-encryption is stored in the HDD 26.

  Although the data copyright management devices 100 and 101 of the sixth embodiment described above are described as being configured separately, it goes without saying that these can be configured integrally.

  In addition to character data, digital data includes graphic data, computer programs, digital audio data, still image data based on a method such as JPEG, and moving image data based on MPEG. A typical example of a user terminal device using a data work is a computer device such as a personal computer. In addition, a receiver device such as a television receiver, and a set-top box used as an accessory to these receiver devices. There are digital recording devices such as a digital video tape recorder, a digital video disk recorder, and a digital audio tape (DAT) for storing digital signals, or portable terminal devices (Personal Digital Assistants = PDA).

  The data copyright management device of FIG. 2 or the data copyright management device of FIG. 6 described in Japanese Patent Application No. 6-237673, which is a prior application configured as an expansion board, IC card or PC card, is a computer device and a reception device. It can also be used by being added to a user terminal device which is a set-top box, a digital recording device or a portable terminal device. It is desirable that it is built in the device.

  For this purpose, each embodiment of the present invention adopts a monolithic IC, a hybrid IC, or a built-in sub board as a data copyright management device, and receives a computer device such as a personal computer or a television receiver. Devices, set-top boxes used in connection with these receiving devices, digital video tape recorders for storing digital signals, digital video disk recorders, digital audio tapes (DAT) and other digital recording devices or portable terminal devices (PDAs) ) Or the like.

  Furthermore, the above-described data copyright management apparatus can be applied not only to the use of data but also to the distribution of digital cash and the video conference system. Various digital cash systems that have been proposed so far transfer encrypted digital cash data from a bank deposit account or a credit company's caching service using a secret key method and store it on an IC card. Use and make payment. The digital cash system using the IC card as an electronic wallet can be used anywhere as long as an input / output terminal device is installed, such as a store, while a place where there is no input / output terminal device, such as a home. In, it is impossible to use.

By the way, since the digital cash is encrypted data, any device that can store the encrypted data other than the IC card and can transfer the data to the payee can receive the digital cash data. It can be used as an electronic wallet to save. Specific examples of user terminal devices that can be used as electronic wallets include personal computers, intelligent television devices, portable information terminal devices, PHS (Personal Hadyphone System) and other portable telephones, intelligent telephones, and PC cards with input / output functions. Etc.

  Transactions by using such a terminal device as an electronic wallet for digital cash are performed by using the database in the configuration of the data copyright management system described so far for the customer side bank, the primary user terminal device for the customer, 2 This is realized by replacing the secondary user terminal device with a retail store, the copyright management center with a retail bank, and the tertiary user terminal device with a wholesaler or manufacturer.

  A usage example of a transaction system performed by transferring digital cash via a communication network will be described with reference to FIG. This usage example uses the configuration of the data copyright management system shown in FIG. 1. In this figure, 111 is a customer, 112 is a customer's 111 bank, 113 is a retail store, and 114 is a retail store 113. , 115 is the manufacturer, 116 is the bank of the manufacturer 115, 2 is a communication network such as a public line provided by the telecommunications carrier or a CATV line provided by the cable television operator. The bank 112, the retail store 113, the retail store transaction bank 114, the manufacturer 115, and the manufacturer transaction bank 116 can be connected to each other via the communication network 2. In this system, the customer 111 can use a credit company that provides a cashing service in addition to the bank, and an appropriate number of wholesale stores can be interposed between the retail store and the manufacturer. Reference numerals 117 and 118 denote IC cards or PC cards in which digital cash data is stored, and are used when a communication network is not used. In this figure, the broken line indicates the encrypted digital cash data path, and the solid line indicates the request path from the customer, retailer or manufacturer to the bank. The chain line indicates the private key path from each bank.

  In this usage example, a first secret key prepared by the customer bank 112, a second secret key generated by the customer, a third secret key generated by the retail store, and a fourth secret key generated by the manufacturer are used as encryption keys. In this usage example, the customer side bank 112, the retail store side bank 114, and the manufacturer side bank 116 are described as separate units, but these may be considered as a financial system collectively.

  A digital cash management program P for encrypting / decrypting digital cash data is distributed in advance to the customer 111 and stored in the user terminal device. The digital cash management program P can be transferred together with data every time a transaction with a bank is performed. Further, it is desirable that the digital cash management program P is common to all banks. The customer 111 specifies an amount via the communication network 2 using the user terminal device, and applies to the customer bank 112 for withdrawal of the deposit from the deposit account. At this time, the customer information Ic of the customer 111 is applied. Present.

The customer-side bank 112 that has applied for deposit withdrawal from the customer 111 selects or creates the first secret key Ks1, encrypts the withdrawal amount digital cash data M0 with the first secret key Ks1, and Cm0ks1 = E (Ks1 , M0)
The encrypted digital cash data Cm0ks1 and the first secret key Ks1 as the decryption key are transferred to the customer 111, and the customer information Ic and the first secret key Ks1 are stored. In this case, the first secret key Ks1 may be selected from those prepared in advance by the customer side bank 112, but the customer presents the customer information Ic at the time of withdrawal, and the presented customer information Ic by the digital cash management program P. It can also be created based on.
Ks1 = P (Ic)
In this way, not only the first secret key Ks1 can be made unique to the customer 111, but also there is no need to transfer the first secret key Ks1 to the customer 111, so the security of the system is improved. Get higher. The first secret key Ks1 can also be created based on the bank information Ibs or bank information Ibs of the customer bank 112 and the creation date and time.

Customer 11 to which encrypted digital cash data Cm0ks1 and first secret key Ks1 have been transferred
1, the digital cash management program P generates a second secret key Ks2 based on one or both of the customer information Ic and the first secret key Ks1, and Ks2 = P (Ic)
The generated second secret key Ks2 is stored in the user terminal device. Further, the customer 111 decrypts the encrypted digital cash data Cm0ks1 using the first secret key Ks1 by the digital cash management program P, and M0 = D (Ks1, Cm0ks1).
When the content is confirmed, but the decrypted digital cash data M0 whose content is confirmed is stored in the user terminal device which is the electronic wallet, the digital cash management program P is generated using the generated second secret key Ks2. Encrypted by
Cm0ks2 = E (Ks2, M0)
At this time, the first secret key Ks1 is discarded.

The customer 111 who wishes to purchase goods from the retail store 113 decrypts the encrypted digital cash data Cm0ks2 stored in the user terminal device which is an electronic wallet by the digital cash management program P using the second secret key Ks2. M0 = D (Ks2, Cm0ks2)
The digital cash data M1 corresponding to the required amount is encrypted by the digital cash management program P using the second secret key Ks2, and Cm1ks2 = E (Ks2, M1)
Payment is performed by transferring the encrypted digital cash data Cm1ks2 to the user terminal device which is an electronic wallet of the retail store 113 via the communication network 2. At this time, the customer information Ic is also transferred to the user terminal device of the retail store 113. The remaining amount of digital cash data M2 is encrypted by the digital cash management program P using the second secret key Ks2, and Cm2ks2 = E (Ks2, M2).
It is stored in the user terminal device of the customer 111.

  The retail store 113 to which the encrypted digital cash data Cm1ks2 and the customer information Ic are transferred stores the transferred encrypted digital cash data Cm1ks2 and the customer information Ic in the user terminal device and confirms the contents by using the communication network 2. The customer information Ic is presented to the retail store side bank 114 via, and the transfer of the second secret key Ks2 which is a decryption key is requested. Receiving the transfer request for the second secret key Ks2 from the retail store 113, the retail store bank 114 transfers the customer information Ic to the customer bank 112 together with the transfer request for the second secret key Ks2. When the second private key Ks2 is based only on the customer information Ic, the customer side bank 112 to which the transfer request for the second private key Ks2 has been transferred from the retailer bank 114 is sent to the customer information Ic by the digital cash management program P. The second secret key Ks2 is generated on the basis of the customer information Ic and the first secret key Ks1 by the digital cash management program P when the second secret key Ks2 is based on the customer information Ic and the first secret key Ks1. Based on this, a second secret key Ks2 is generated, and the generated second secret key Ks2 is transferred to the retail store bank 114. The retail store bank 114 to which the second secret key Ks2 has been transferred from the customer bank 112 transfers the second secret key Ks2 to the retail store 113 via the communication network 2.

The retail store 113 to which the second secret key Ks2 has been transferred decrypts the encrypted digital cash data Cm1ks2 using the second secret key Ks2 by the digital cash management program P, and M1 = D (Ks2, Cm1ks2).
After confirming the amount, the product is shipped to the customer 111. In this case, the retail store 111 may directly request the transfer of the second secret key Ks2 not to the retail store bank 114 but to the customer bank 112.

When depositing the digital cash received by the retail store 113 into the account of the retail store bank 114, the customer information Ic is transferred to the retail store bank 114 together with the encrypted digital cash data Cm1ks2 via the communication network 2. The retailer bank 114 to which the encrypted digital cash data Cm1ks2 and the customer information Ic are transferred requests the customer bank 112 to transfer the second secret key Ks2 by transferring the customer information Ic. Retailer side bank 1
When the second private key Ks2 is requested to transfer the second secret key Ks2 from the client 14, the second cash key Ks2 is based on the customer information Ic by the digital cash management program P in the second case. A secret key Ks2 is generated, and when the second secret key Ks2 is based on the customer information Ic and the first secret key Ks1, the second secret is generated by the digital cash management program P based on the customer information Ic and the first secret key Ks1. A key Ks2 is generated, and the generated second secret key Ks2 is transferred to the retail store bank 114. The retail store bank 114 to which the second secret key Ks2 has been transferred from the customer bank 112 decrypts the encrypted digital cash data Cm1ks2 using the second secret key Ks2 by the digital cash management program P, and M1 = D (Ks2 , Cm1ks2)
The decrypted digital cash data M1 is deposited into the bank account of the retail store 114.

  In a general transaction system, the retail store 113 purchases goods from the manufacturer 115 or a wholesale store interposed between the manufacturer 115 and the retail store 113 and sells the product to the customer 111. Therefore, the same transaction form exists between the retail store 113 and the manufacturer 115 as exists between the customer 111 and the retail store 113. The handling of the digital cash performed between the retail store 113 and the manufacturer 115 is not fundamentally different from the handling of the digital cash performed between the customer 111 and the retail store 113. Is omitted.

In this digital cash system, since all the handling of digital cash is done through the bank, by storing information such as the amount, date, secret key requester information, etc. regarding the handling of digital cash in the customer side bank, The balance and usage history of the digital cash can be grasped. In addition, even if the user terminal device, which is an electronic wallet that stores digital cash data, becomes unusable due to loss or damage, the digital cash can be reissued based on the usage balance and usage history stored in the customer bank. Is possible. In order to increase the security of the digital cash, it is desirable to attach a digital signature to the digital cash data. In this usage example, customer information is added to the digital cash, and this customer information may be digitally signed. That is, in this embodiment, the digital cash also has a function as a bill settlement system in which the customer is the originator. In addition, this system is used for various payment systems in international trade, such as letters of credit (L / C), (Bill of Lading: B / L), Payment of Settlement of Import / It can be applied to Export as an extension.

  The video conferencing system, which has only been added to the conventional audio telephones with television video, has recently been incorporated into a computer system, and the quality of audio or video has been improved. Data has also evolved so that it can be handled simultaneously with audio and video. Under such circumstances, security against privacy infringement and data leakage by users other than TV conference participants is protected by an encryption system using a secret key. However, since the conference content obtained by the video conference participants themselves is decrypted, the video conference participants themselves store the conference content, process it in some cases, and further process the video conference participants. In the case of secondary use distributed to other persons, the privacy and data security of other video conference participants are completely defenseless. In particular, the transmission data compression technology has been developed, but the capacity of the data storage medium has increased, and as a result, the contents of the video conference can be copied to the data storage medium or even transferred over the network. It is becoming.

In view of such a situation, this use example is applied to the video conference system by applying the configuration of the data copyright management system described so far to the video conference system. It will ensure the privacy and data security of participants in the TV conference.

  In this television conference data management system, for example, the database in the configuration of the data copyright management system shown in FIG. 1 is used for the first television conference participant, and the primary user terminal device is used for the second television conference participant. This can be realized by replacing the secondary user terminal device with a non-video conference participant. This usage example will be described with reference to FIG. In this figure, 121 is a television conference first participant, 122 is a television conference second participant, 123 is a television conference third non-participant, 124 is a television conference fourth non-participant, and 2 is a communication business. Communication network such as a public line provided by a person or a CA television line provided by a cable television company. The first video conference participant 121 and the second video conference participant 122 are mutually connected by the communication network 2. It is possible to connect. In addition, the video conference second participant 122 and the video conference third non-participant 123, and the video conference third non-participant 123 and the video conference fourth non-participant 124 can be connected via the communication network 2. Yes. Reference numerals 125 and 126 denote data recording media. In this figure, the broken line indicates the path of the encrypted video conference content, and the solid lines indicate the video conference third non-participant 123 and the video conference fourth non-participant 124. Is a path for requesting an encryption key from the video conference first participant 121. The one-dot chain line indicates the video conference first participant 121 to the video conference second participant 122, the video conference first. 3 is a path through which the encryption key is transferred to the non-participant 123 and the fourth non-participant 124 in the video conference. In the video conference data management system described in this use example, a case where only the privacy and data security of the video conference first participant 121 is ensured will be described in order to simplify the description. It goes without saying that the privacy and data security of the second conference participant 122 can be secured.

  The video conference management program P for encrypting / decrypting the video conference data of the video conference first participant 121 including video and audio is the video conference second participant 122 and the video conference third non-participant 123. And distributed in advance to the TV conference fourth non-participant 124 and incorporated in each terminal device. The video conference data management program P can be transferred every time the encryption key is transferred. Furthermore, in this usage example, the first secret key prepared by the TV conference first participant 121 as the encryption key, the second secret key generated by the TV conference second participant 122, and the TV conference third non-participant 123. The third secret key generated by is used.

The first TV conference participant 121 and the second TV conference participant 122 use each terminal device to transmit audio, video, and data (collectively “TV conference data”) via the communication network 2. The first video conference participants 121 select or generate the first secret key Ks1 before starting the video conference, and the first secret key Ks1. Is supplied to the second video conference participant 122 before starting the video conference. In addition, the second TV conference participant 122 to whom the first secret key Ks1 has been transferred generates a second secret key Ks2 based on the first secret key Ks1 by the TV conference data management program P, and Ks2 = P ( Ks1)
The generated second secret key Ks2 is stored in the terminal device.

The first TV conference participant 121 encrypts the TV conference data M0 with the first secret key Ks1 in the TV conference held via the communication network 2, and Cm0ks1 = E (Ks1, M0).
The encrypted video conference data Cm0ks1 is transferred to the video conference second participant 122.

The video conference second participant 122 that has received the video conference data Cm0ks1 encrypted using the first secret key Ks1 decrypts the encrypted video conference data Cm0ks1 using the first secret key Ks1, and M0. = D (Ks1, Cm0ks1)
The decoded video conference data M0 is used. Further, the video conference data management program P generates the second secret key Ks2 based on the first secret key Ks1.
Ks2 = P (Ks1)
When the decoded video conference data M0 is stored in the terminal device of the video conference second participant 122 or copied to the data recording medium 125, the video conference third non-transmission is made via the communication network 2. When transferred to the participant, the data M is encrypted by the video conference data management program P using the second secret key Ks2.
Cmks2 = E (Ks2, M)
The encrypted data Cmks2 is copied to the recording medium 125 together with the video conference data name or the video conference data number or supplied to the third TV conference non-participant via the communication network 2.

  The TV conference third non-participant 123 who has obtained the encrypted data Cmks2 uses the terminal device to designate the TV conference data name or the TV conference data number to perform secondary use of the TV conference data M. Apply to the TV conference first participant 121.

  The first TV conference participant 121 who received the application for the secondary use of the data M searches for the first secret key Ks1 using the TV conference data name or the TV conference data number as a clue, and based on the first secret key Ks1. The second secret key Ks2 is generated, and the second secret key Ks2 generated by Ks2 = P (Ks1) is supplied to the video conference third non-participant 123.

The TV conference third non-participant 123 who has received the second secret key Ks2 decrypts the encrypted data Cmks2 using the second secret key Ks2 by using the TV conference data management program P, and M = D ( Ks2, Cmks2)
The decoded video conference data M is used. When the video conference data M is stored in the terminal device of the video conference third non-participant 123 or copied to the recording medium 126, the video conference fourth non-participant 124 via the communication network 2. The video conference data M is encrypted by the video conference data management program P using the second secret key Ks2.
Cmks2 = E (Ks2, M)
Furthermore, a third secret key Ks3 is generated based on the second secret key Ks2 by the video conference data management program P, and Ks3 = P (Ks2)
The data M can be encrypted by using the generated third secret key Ks3 by the video conference data management program P.
Cmks3 = E (Ks3, M)
(Other)
The present embodiment discloses the following invention (hereinafter referred to as an appendix).
(Supplementary note 1) A data copyright management device used attached to a user terminal device using digital data, wherein the data copyright management device is a central processing unit, a central processing unit bus, a read-only semiconductor memory, an electrical An erasable programmable memory and a read / write memory are provided, and the central processing unit bus is connected to the central processing unit, the read-only semiconductor memory, the electrically and electrically erasable programmable memory, and the read / write memory. A system bus of a user terminal device is connectable, a data copyright management system program, an encryption algorithm, and user information are stored in the read-only semiconductor memory, and a second dedicated key is stored in the electrically erasable programmable memory, Use permission key, second secret key, work A right management program and copyright information are stored, and in the read / write memory, a first copyright key, a first dedicated key, a second public key, and a first encryption key are transferred during operation. Management device.
(Supplementary note 2) A data copyright management device used attached to a user terminal device using digital data, wherein the data copyright management device is a central processing unit, a central processing unit bus, a read-only semiconductor memory, an electrical An erasable programmable memory and a read / write memory are provided, and the central processing unit bus is connected to the central processing unit, the read-only semiconductor memory, the electrically and electrically erasable programmable memory, and the read / write memory. A system bus of a user terminal device can be connected, a data copyright management system program, a copyright management program, an encryption algorithm, and user information are stored in the read-only semiconductor memory, and the electrically erasable programmable memory has a second memory. 2 dedicated keys, permission to use A key, a second secret key, and copyright information are stored, and a first public key, a first dedicated key, a second public key, and a first encryption key are transferred to the read / write memory during operation. Data copyright management device.
(Additional remark 3) The data copyright management apparatus of Additional remark 1 or Additional remark 2 comprised by IC.
(Additional remark 4) The data copyright management apparatus of Additional remark 1 or Additional remark 2 comprised by the IC card.
(Additional remark 5) The data copyright management apparatus of Additional remark 1 or Additional remark 2 comprised by the PC card.
(Additional remark 6) The data copyright management apparatus of Additional remark 1 or Additional remark 2 comprised by the insertion board.
(Supplementary note 7) Data copyright management device used in a user terminal device that decrypts encrypted digital data for display / processing, and re-encrypts the decrypted data for storage / copy / transfer The data copyright management apparatus comprises a microprocessor, a local bus connected to the microprocessor, a read-only semiconductor memory connected to the local bus, and a read / write memory. The user terminal A data copyright management apparatus in which one of the microprocessor of the apparatus and the microprocessor of the data copyright management apparatus performs decryption processing and the other performs re-encryption processing.
(Supplementary note 8) Data copyright management device used in a user terminal device that decrypts encrypted digital data for display / processing, and re-encrypts the decrypted data for storage / copy / transfer The data copyright management apparatus includes first and second microprocessors, and a first local bus connected to the first microprocessor and a first local bus connected to the first local bus. A first computer having a read-only semiconductor memory and a first read / write memory, a second local bus connected to the second microprocessor, and a second read connected to the second local bus A second computer having a dedicated semiconductor memory and a second read / write memory is configured, and the first microprocessor is encrypted A data copyright management apparatus that performs a data decryption process and the second microprocessor performs a re-encryption process on the decrypted data.

The block diagram of the data copyright management system of prior invention. The block diagram of the data copyright management apparatus of prior invention. The block diagram of the data copyright management apparatus of Example 1 of this invention. The specific block diagram of the data copyright management apparatus of Example 1 of this invention. The processing flow figure of the data copyright management system which concerns on this invention. The block diagram of the data copyright management system of prior invention. A general processing flow diagram of digital data. The processing flow figure of the encryption data by this invention. The block diagram of the data copyright management apparatus of Example 2 of this invention. The block diagram of the data copyright management apparatus of Example 3 of this invention. The block diagram of the data copyright management apparatus of Example 4 of this invention. The block diagram of the data copyright management apparatus of Example 5 of this invention. The block diagram of the data copyright management apparatus of Example 6 of this invention. The block diagram of the digital cash system which is an example of use of this invention. 1 is a configuration diagram of a video conference system that is a usage example of the present invention. FIG.

Explanation of symbols

1 Database 2 Communication network 3, 10, 17 Copyright management center 4, 5, 6, 7 User terminal device 11, 12, 13 Recording medium 14 Broadcast / communication satellite 15 'CD-ROM
16 Key management center 17, 22 Microcomputer bus 18 Read only memory 19 Write / read memory 20 User terminal device 21, 16 Microcomputer 22 System bus of user terminal device 23 Communication device 24 CD-ROM drive 25 Flexible disk drive 26 Hard disk drive 30, 80, 85, 90, 97, 100, 101 Data copyright management device 31 Electrically and electrically erasable programmable memory 111 Customer 113 Retail store 115 Manufacturer 112 Customer side bank 114 Retail store side 116 Manufacturer side bank 117, 118 IC Card 121, 122 Video conference participant 123, 124 Video conference non-participant

Claims (2)

A data copyright management device connected to a terminal device, a receiving device, a recording device, or a computer device that uses data,
Copyright management system for managing the copyright of the data provided the terminal device, receiving device, recording device, or the computer device, the first secret key, the second private key and the encrypted data, the terminal device, receiving A data rights management device used to provide to a device, recording device, or computer device,
The data copyright management device is:
Means for storing the first secret key and the second secret key;
Means for receiving supply of the encrypted data from the terminal device, receiving device, recording device, or computer device;
Means for decrypting encrypted data into decrypted data using the first secret key when the encrypted data is processed by the terminal device, receiving device, recording device, or computer device;
Re-encrypting means for encrypting the processed data into re-encrypted data using the second secret key;
Means for storing primary user information of the terminal device, receiving device, recording device, or computer device when data processing is performed;
Means for discarding the first secret key and the second secret key when the re-encrypted data is copied or transferred;
Means included in the terminal device, receiving device, recording device, or computer device for applying for re-transfer of the second secret key presents primary user information of the terminal device, receiving device, recording device, or computer device And applying to the copyright management system for re-transfer of the second secret key for using re-encrypted data, and the second secret key is transferred from the copyright management system via the data copyright management device. the terminal apparatus, receiving apparatus, a recording apparatus, or is re-transferred to the computer device Te, the data copyright management apparatus, wherein as a copy of the re-encrypted data or transfer is registered in the copyright management system A data copyright management device. 2. The data copyright management apparatus according to claim 1, comprising an IC, an IC card, an expansion board, or a PC card.

Images