JP4311068B2 - Content distribution system and content distribution method - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a copyright management technique for distributing digital data such as video, audio, and text in digital broadcasting and digital communication from a produced device to a browsing device.
[0002]
[Prior art]
As a conventional content distribution system, there has been a system that periodically distributes a signal that enables the content to be used, and prohibits reproduction from a reproduction apparatus that does not receive the signal for a certain period of time. (For example, refer to Patent Document 1).
[0003]
As a conventional content distribution system,
Some of the contents that violate the contract are regularly monitored for secondary distribution, and if a violation is detected, the decryption key required to decrypt the content is invalidated. (For example, refer to Patent Document 2).
[0004]
Here, in order to clarify the characteristics of the present invention, a content distribution system in the prior art in which the configuration and the terminology are reconfigured so as to correspond one-to-one with the present invention will be described in detail with reference to the drawings.
[0005]
FIG. 14 is a block diagram of a conventional content distribution system.
[0006]
Reference numeral 1410 denotes a production apparatus. The production apparatus 1410 includes content production means 0111 and copyright management information embedding means 1411. The production apparatus 1410 outputs content embedded with copyright management information to the delivery system 0120.
[0007]
Reference numeral 0111 denotes content production means. Content production means 0111 This is an apparatus for producing content that the user views on the browsing apparatus 1420. The content production means 0111 may be an editing device for MPEG-2 (Motion Picture Expert Group-2) digital video / audio or a homepage description language such as HTML (Hyper Text Markup Language).
[0008]
Reference numeral 1411 denotes copyright management information embedding means. The copyright management information embedding unit 1411 embeds copyright management information in the content output from the content production unit 0111. The copyright management information may be an information bit such as CCI (Copy Control Information), and this CCI is a copy of the content on the browsing device, a move of the content to an external medium (move), a certain country or region Information that permits / prohibits the presentation (reproduction) of content.
[0009]
Reference numeral 0120 denotes a delivery system. The delivery system 0120 sends the content output from the production device 1410 to a browsing device 1420 that is spatially and temporally separated. The delivery system 0120 is a file transfer protocol such as ftp (file transfer protocol) in a communication network such as the Internet, a transmission protocol in Internet broadcasting such as streaming, and a digital broadcasting media DSM-CC (Digital Storage Media Command on the ground / satellite / cable. & Control) may be an existing system for data carousel transmission, physical delivery by package media such as DVD (Digital Versatile Disc).
[0010]
Reference numeral 1420 denotes a browsing device. The browsing device 1420 presents the content from the production device 1410 delivered by the delivery system 0120 to the user. The browsing device 1420 includes content acquisition means 0131, copyright management information analysis means 1421, presentation restriction means 0137, and content presentation means 0138.
[0011]
Reference numeral 0131 denotes content acquisition means. The content acquisition unit 0131 receives the content sent from the delivery system 0120 in the transmission format of the delivery system 0120, converts it into the normal format of the content, and outputs it. The content acquisition unit 0131 may output at the timing input from the delivery system 0120, or has a built-in HDD (Hard Disk Drive) or the like, and temporarily stores all or part of the content in the content acquisition unit 0131. The content may be output at the requested timing.
[0012]
Reference numeral 1421 denotes copyright management information analysis means. The copyright management information analyzing unit 1421 extracts the copyright management information embedded by the copyright management information embedding unit 1411 from the content, and outputs presentation control information that is information indicating how the content can be reproduced. The presentation control information is information that restricts the reproduction of content such as whether only reproduction of video or audio, or only the beginning of a movie, is not just permission / prohibition of reproduction of the entire content. May contain.
[0013]
Reference numeral 0137 denotes presentation restriction means. The presentation restriction unit 0137 receives the presentation control information output from the copyright management information analysis unit 1421 and the content from the content acquisition unit 0131. And the presentation content which is the content restricted according to presentation control information is reproduced and output.
[0014]
Reference numeral 0138 denotes content presentation means. The content presentation unit 0138 presents the content to the user by converting the presentation content output from the presentation restriction unit 0137 into a physical phenomenon that can be perceived by the user. For example, when the content is MPEG-2 video / audio, the content presentation means may be an MPEG-2 decoder, a cathode ray tube, and a speaker.
[0015]
[Patent Document 1]
JP 2001-344369 A (page 6-13, FIG. 3)
[Patent Document 2]
JP 2002-41821 A (page 4-9, FIG. 1)
[0016]
[Problems to be solved by the invention]
Unlike digital media, digital content is not essentially degraded, so once distributed, content of exactly the same quality may spread widely and permanently. For this reason, it may spread over a wide range that is not initially assumed for distribution.
[0017]
Content distributed to everyone, such as movies, is limited in the countries and regions where it can be played, as seen on DVD playback devices. In addition, as seen in IEEE 1394, a means for prohibiting the transmission / reception of digital contents to a vendor of a specific playback device is mounted.
[0018]
On the other hand, there is a service that distributes video from a server in real time by using broadband communication such as ADSL and streaming technology. According to this technique, since the content is sent from the server in real time, it is possible to flexibly change the restriction on the portion to be browsed from any user at any timing even from the time when the content is being browsed.
[0019]
However, there are the following problems in an era where future users can easily create contents and exchange them at high speed.
[0020]
1. When providing content to a plurality of users, fine control such as permitting browsing only to a specific user or enabling all parts to be browsed only by a certain user is not possible even for the same content.
[0021]
2. In a loosely coupled system, such as viewing content distributed over a high-speed communication network on a mobile device disconnected from the network, the restrictions on the part to be browsed will be changed even if the right holder of the content later thinks Can not. For example, it is not possible to cope with a case where a friend is allowed to view content including family videos but suddenly does not want to permit viewing of the content on the day after the content is distributed.
[0022]
[Means for Solving the Problems]
In a content distribution system consisting of a production device, delivery system, and browsing device, Above The production apparatus comprises ticket setting means and ticket management means, Above The browsing device comprises secure timing means, ticket interpretation means, and presentation control means, Above The ticket setting means generates a ticket consisting of an unauthenticated timeout and presentation control information, Above Ticket management means Above Stores the ticket generated by the ticket setting means Above Accept the request from the ticket interpretation means Above Notify the ticket interpreter, Above The delivery system delivers the ticket from the production device to the viewing device, Above The timekeeping information that the secure timekeeping means cannot modify even by malicious intentions is output, Above Ticket interpretation means Above Tickets from ticket management means Above Input the timing information from the secure timing means and output the presentation control information. Above The presentation control means Above In the configuration for inputting the presentation control information and content output by the ticket interpreting means and converting and outputting the content whose presentation is restricted according to the presentation control information, Above The ticket interpreter obtains the elapsed time from the time of the last successful authentication from the timing information, and if the elapsed time does not exceed the unauthenticated timeout, interprets the ticket and outputs the presentation control information, and the elapsed time is unauthenticated timeout If you exceed Above Ticket interpretation means Above Send authentication information to the ticket management means, Above If the ticket management means determines that the authentication information sent is correct, the authentication is successful. Above Return it to the ticket interpreter, Above If the ticket management means has a new ticket Ticket Sent to the interpretation means, Above Ticket interpretation means Above When an authentication success is sent from the ticket management means, the elapsed time is reset to 0, the latest ticket is interpreted, and the presentation control information is output.
[0023]
DETAILED DESCRIPTION OF THE INVENTION
Embodiments of the present invention will be described below with reference to the drawings. However, in the following description, the same components are assigned the same reference numerals among a plurality of drawings, and the description thereof is omitted.
[0024]
(Embodiment 1)
First, the distribution content management method and content distribution system in Embodiment 1 will be described in detail.
[0025]
FIG. 01 is a block diagram of the content distribution system in the first embodiment.
[0026]
The content distribution system according to Embodiment 1 includes a production device 0110, a delivery system 0120, and a browsing device 0130.
[0027]
Reference numeral 0110 denotes a production apparatus. The production apparatus 0110 includes content production means 0111, ticket setting means 0112, and ticket management means 0113.
[0028]
The ticket setting unit 0112 sets the content, which is information for controlling the conditions for reproducing the content, for the content output from the content creation unit 0111 by receiving input from the person who created the content. Here, the ticket is information corresponding to the content and including an unauthenticated timeout and presentation control information. Here, a content id is introduced in order to correspond to the content. The content id is information for specifying the content, for example, information represented by concatenating the date and time when the content was created to the identity of the person who created the content. Here, it is assumed that the content output by the content production unit 0111 includes the content id.
[0029]
Here, the data structure of the ticket will be described in detail with reference to the drawings.
[0030]
(A) of FIG. 02 is a diagram schematically showing an example of a ticket in the first embodiment. Here, each item is expressed in a tabular format represented by characters. However, each item may be described in a binary format or a markup language expressed as a text file such as XML (extensible Markup Language).
[0031]
0200 is an example of a ticket. Here, the ticket 0200 has specific contents and corresponds to a specific user. The ticket 0200 includes a content id field 0201, a user id field 0202, a version field 0203, an unapproved timeout field 0204, a presentation deadline field 0205, a presentation control information field 0206, and a presentation key field 0207. Yes.
[0032]
The content id field 0201 stores a content id corresponding to the ticket. As a result, the content associated with the ticket 0200 can be specified.
[0033]
The user id field 0202 stores a user id corresponding to the ticket. Thereby, the user who browses the ticket 0200 can be specified.
[0034]
The version field 0203 stores the version of the ticket. The version is an index for comparing old and new tickets.
[0035]
The unapproved timeout field 0204 stores the value of the unapproved timeout. Approval is periodically requested through the delivery system 0120 to check whether the ticket 0200 is correct in the content reproduction of the browsing device 0130. The unapproved timeout represents how long the last received approval is valid. When the unapproved timeout is passed, the ticket 0200 is regarded as unapproved and the reproduction of the content according to the ticket 0200 becomes invalid.
[0036]
The presentation deadline field 0205 stores the presentation deadline. The presentation deadline represents the expiration date of the ticket 0200 itself. The value that the presentation deadline takes may be an absolute time such as Greenwich Mean Time, or a relative time starting from an event of receiving content or a ticket.
[0037]
The presentation control information field 0206 stores presentation control information. The presentation control information is information that controls restrictions when presenting content to the user. For example, in the case where the content is a video, the information is information that limits the video resolution and the number of still images per second in the playback of the content, or allows only a certain temporal portion of the content to be played back.
[0038]
The presentation key field 0207 stores a presentation key. This is used when the content is converted into presentation content by the presentation control means 0137. For example, if the content is composed of a paid part and a free part, and the presentation control information stores a value indicating that it is reproduced including the encrypted part, the paid part is encrypted. When you decrypt the cipher In Use a presentation key.
[0039]
The ticket management unit 0113 receives one or a plurality of tickets created by the ticket setting unit 0112 and manages them. The ticket management unit 0113, which is a component of the production device 0110, sends and receives authentication information to and from the ticket interpretation unit 0136 of the browsing device 0130 and the ticket to the ticket holding unit 0132 through the delivery system 0120.
[0040]
Here, the operations of the ticket management unit 0113 and other components of the production device 0110 will be described in detail based on a flowchart.
[0041]
FIG. 03 is an operation flowchart of processing for generating content and a ticket in the production apparatus 0110 according to the first embodiment.
[0042]
(Step 0301) Content is created by the content creation means 0111.
[0043]
(Step 0302) The content production means 0111 assigns a content id used for identifying the content to the content produced in step 0301. Content id should just be unique in the browsing apparatus which browses content.
[0044]
(Step 0303) Step 0301 The content id assigned in Step 0302 is embedded in the produced content.
[0045]
(Step 0304) The user of the production apparatus 0110 sets ticket information for the content produced in Step 0301. The setting operation may be performed interactively using a GUI (Graphic User Interface) or the like, and a template may be prepared in advance and processed batchwise. And get a ticket. By setting the ticket information, it is possible to specify to what user of the browsing device 0130 the content is to be presented by what kind of limitation until when.
[0046]
(Step 0305) The content id assigned in Step 0302 is embedded in the ticket obtained in Step 0304. The content is associated with the ticket by embedding the content id.
[0047]
(Step 0306) The ticket as a result of step 0305 is registered in the ticket management unit 0113. Specifically, the ticket held in the ticket management unit 0113 is added by the registration process.
[0048]
Here, an example of a ticket held in the ticket management unit 0113 will be shown with reference to the drawings.
[0049]
(B) of FIG. 02 is an example of the ticket stored in the ticket management unit 0113 in the first embodiment. Here, the row 0211, the row 0212, and the row 0213 each represent a ticket, and three tickets are registered in the ticket management unit 0113.
[0050]
Here, the ticket 0211 and the ticket 0212 are tickets for the same user id 100. Further, the ticket 0211 and the ticket 0222 hold different content IDs 0209 and 1204, respectively, indicating that they are tickets for different contents. Ticket 0213 is a ticket for another user id 200.
[0051]
As shown in the figure, the ticket management unit 0113 can collectively manage tickets for a plurality of users represented by a plurality of user ids.
[0052]
Next, processing for changing only the ticket in the production apparatus 0110 will be described. This operation is performed when a ticket for the distributed content is created again after the ticket expires. Further, this operation is also performed when the user of the production device 0110 once sets and sends a ticket, but changes the ticket again due to a change in mind.
[0053]
FIG. 04 is an operation flowchart of processing for resetting a ticket by the production apparatus according to the first embodiment.
[0054]
(Step 0401) The user of the production device 0110 selects the content whose ticket is to be changed, and obtains the content id for the selected content. Since the content id is included in the content, the value may be read from the content.
[0055]
(Step 0402) The ticket corresponding to the content id obtained at step 0401 is read from the ticket management means 0113.
[0056]
(Step 0403) The user of the production device 0110 changes the ticket information read in Step 0402. The change operation may be performed interactively using a GUI (Graphic User Interface) or the like, or a template may be prepared in advance and processed batchwise. Since the previously set ticket is read in step 0402, each set value of the previously set ticket may be displayed as a default value before the change work.
[0057]
(Step 0404) The ticket management unit 0113 increments the version of the ticket. By changing the version value, you can distinguish between old and new tickets. The version value may be a value with a scope of a set of tickets in which both the user id and the content id of the ticket match.
[0058]
(Step 0405) The ticket of the ticket management means 0113 is updated with the ticket resulting from step 0404. If a ticket stored in the ticket management unit 0113 has a ticket with the same user id and the same content id, the ticket is overwritten with the ticket as a result of step 0404.
[0059]
However, in the operation of changing the ticket information in step 0403, if a plurality of tickets having the same user id and the same content id are permitted, the permitted number of tickets are sent to the ticket management unit 0113. May be stored.
[0060]
By allowing a plurality of tickets, the same effect as storing a plurality of values in each field in one ticket can be obtained. For example, if two tickets have the same user id and the same content id, the two presentation control information fields are equivalent to the format as defined, and both the resolution and the number of still images per second are specified at the same time. it can. At this time, when a plurality of users of a production apparatus that can set the ticket for the same content set the ticket separately, it can also be used as a merge of rights.
[0061]
Next, the browsing device 0130 will be described.
[0062]
The browsing device 0130 includes a content acquisition unit 0131, a ticket holding unit 0132, a secure timing unit 0133, an IC card 0134, a user identification unit 0135, a ticket interpretation unit 0136, a presentation restriction unit 0137, and a content presentation unit 0138. It comprises.
[0063]
The ticket holding unit 0132 receives and holds a ticket output from the ticket management unit of the production device 0110. In accordance with the request from the ticket interpretation unit 0136, the ticket holding unit 0132 outputs a ticket having the content id specified by the request.
[0064]
The secure timing means 0133 outputs timing information that cannot be altered even by malicious intent. For example, even if the user of the browsing device 0130 tries to change the timing information maliciously, it cannot be changed. For example, a real-time clock function that cannot be set at any time by the user by automatically setting the time based on the current time transmitted by a data structure such as TOT (Time Offset Table) in digital broadcasting. Good. TOT is defined in ARIBSTD-B10 issued by the Radio Industries Association, which is a standard for digital broadcasting in Japan.
[0065]
The IC card 0134 is a tamper-resistant digital device, and stores a user id encrypted. Since it has tamper resistance, at least the user id cannot be read or the value of the written user id cannot be changed within the range of generally available devices and available facilities.
[0066]
The user specifying unit 0135 can take out the user id included in the IC card 0134 by inserting the IC card 0134. Then, the extracted user id is output.
[0067]
The ticket interpretation unit 0136 is a unit that plays a central role in the present invention. The ticket interpretation unit 0136 receives the content id output from the content acquisition unit, the ticket output from the ticket holding unit 0132, the timing information output from the secure timing unit 0133, and the user id output from the user specifying unit 0135. Then, the ticket interpretation unit 0136 sends the content id to the ticket holding unit 0132 and the authentication information to the production device 0110. ticket The presentation control information is output to the presentation control unit 0137, respectively.
[0068]
Here, the operation of the browsing device 0130 including the ticket interpretation unit 0136 will be described in detail using a flowchart.
[0069]
FIG. 05 is an operation flowchart of processing for reproducing content using ticket information in the browsing device 0130 according to the first embodiment.
[0070]
(Step 0501) The content acquisition unit 0131 requests the reproduction of the content. The timing when the reproduction request is generated may be when the user of the browsing device 0130 directly issues an instruction to the content acquisition unit 0131 or from the content production unit 0111 of the production unit 0110 to the content acquisition unit 0131. Even when content arrives via.
[0071]
(Step 0502) The ticket holding means 0132 is searched for a ticket corresponding to the content requested to be reproduced in Step 0501.
[0072]
(Step 0503) As a result of the search in Step 0502, if a ticket exists, the process proceeds to Step 0506; otherwise, the process proceeds to Step 0504. Here, the situation where only the content exists and there is no ticket is received for some reason, such as when the browsing device has received only the content and the ticket has not yet arrived, or the maximum number of tickets stored in the ticket holding means has been exceeded. It is possible that the ticket is not available.
[0073]
(Step 0504) The ticket holding unit 0130 requests the ticket management unit 0113 of the production apparatus 0110 to send the substance of the ticket searched in step 0502.
[0074]
(Step 0505) The ticket holding unit 0130 receives a ticket from the ticket management unit of the production device 0110.
[0075]
(Step 0506) The ticket interpretation unit 0136 obtains the ticket received in step 0505. For example, when the ticket holding means is stored in an HDD, a flash memory or the like, this represents an operation to be taken out to a temporary storage such as a RAM (Random Access Memory).
[0076]
(Step 0507) The ticket interpretation unit 0136 receives the user id and the timing information from the user specifying unit 0135 and the secure timing unit 0133 in order.
[0077]
(Step 0508) The ticket interpretation unit 0136 determines the authentication timeout of the ticket. The ticket holding unit 0136 holds the date and time when the ticket was last successfully authenticated for each ticket. The time elapsed since the last successful ticket authentication is obtained from the stored date and time information received in step 0507. Then, the elapsed time is compared with the value of the unauthenticated timeout field 0204. At this time, if the elapsed time is larger, it is determined that the timeout has occurred.
[0078]
(Step 0509) If it is determined in step 0508 that the timeout has occurred, the process proceeds to step 0510. Otherwise, the process proceeds to step 0513.
[0079]
(Step 0510) The ticket interpretation unit 0136 sends authentication information for requesting ticket authentication to the ticket management unit 0113 of the production apparatus 0110. Here, it is assumed that the authentication information includes a combination of the user id, the content id of the content to be presented, and the version included in the version field 0203 of the ticket obtained in step 0506.
[0080]
The authentication information is information for assuring the identity of the browsing device 0130, and may be information encrypted to prevent impersonation, eavesdropping, and rewriting that may occur through the delivery system 0120. desirable.
[0081]
The authentication information may be information obtained by signing a set of a user id, a content id, and a version by, for example, a public key cryptosystem. That is, encryption is performed using a public key corresponding to the production device 0110 and a secret key corresponding to the browsing device 0130.
[0082]
The process in which the ticket management unit 0113 of the production device 0110 determines whether the ticket authentication is successful will be described in detail as the operation of the production device 0110 in FIG.
[0083]
(Step 0511) If the ticket management unit 0113 of the production apparatus 0110 authenticates the ticket in response to the request of step 0510, the process goes to step 0512. Otherwise, the process ends.
[0084]
(Step 0512) The date and time for timing out the ticket obtained in Step 0506 is updated. As described in Step 0508, when the date and time when the ticket authentication was last successful is stored, the date and time when the last authentication was successful is updated to the current time.
[0085]
(Step 0513) If the ticket holding unit 0132 receives a new ticket from the ticket management unit 0113 of the production device 0110, the process proceeds to step 0514; otherwise, the process proceeds to step 0515.
[0086]
The process of sending a ticket from the ticket management unit 0113 of the production apparatus 0110 will also be described in detail as the operation of the production apparatus 0110 in FIG. 06 described later (similar to the process of determining whether the ticket authentication is successful). Explanation here is omitted.
[0087]
(Step 0514) The ticket holding unit 0132 updates the ticket stored in the ticket holding unit 0132 with the ticket received in step 0513. Also, the ticket obtained in step 0506 and taken out to the temporary storage is replaced with the received ticket.
[0088]
(Step 0515) The ticket interpretation unit 0136 interprets the ticket and obtains presentation control information.
[0089]
First, the value of the ticket presentation deadline field 0205 is compared with the timing information received in step 0507.
[0090]
Here, if the presentation deadline is past from the timing information, it is determined that the ticket is invalid, and invalid presentation control information meaning that nothing is presented is output. In other cases, the value of the ticket ticket presentation control information field 0206 and the value of the presentation key field 0200 are output to the presentation restriction unit 0137 as valid presentation control information.
[0091]
(Step 0516) If the presentation control information obtained in step 0515 is valid, the process proceeds to step 0517, and otherwise the process is terminated.
[0092]
(Step 0517) Based on the (valid) presentation control information obtained in step 0515, the presentation restriction unit 0137 obtains the presentation content from the content. When the part of the content presented by the presentation control information is encrypted, the presentation key obtained in step 0515 is used for decryption.
[0093]
(Step 0518) The presentation content obtained in Step 0517 is presented to the content presentation means 0138, and the process is terminated. The user can view the content by observing the physical phenomenon presented on the content presentation means 0138.
[0094]
Next, a process of evaluating the authentication information and sending it to the ticket browsing device 0130 at the production device 0110 will be described.
[0095]
FIG. 06 is an operation flowchart of processing for evaluating authentication information and sending a ticket in the ticket management unit of the production apparatus 0110 according to the first embodiment.
[0096]
(Step 0601) The ticket management unit 0113 receives the authentication information from the ticket interpretation unit 0136 of the browsing device 0130. Here, an example in which the authentication information is sent from the browsing device 0130 is step 0510 in FIG.
[0097]
(Step 0602) Step 0601 determines whether the authentication information is correct. For example, if the authentication information is signed by a public key cryptosystem, it is determined whether the signature is given by the user of the browsing device 0130 using the public key.
[0098]
(Step 0603) If it is determined in step 0602 that the authentication information is correct, the process proceeds to step 0604. Otherwise, the process proceeds to step 0609.
[0099]
(Step 0604) The user id, the content id, and the version are extracted from the authentication information, and a ticket that matches both the user id and the content id is searched from the ticket management means.
[0100]
(Step 0605) If there is a ticket as a result of the search in step 0604, the process proceeds to step 0606. Otherwise, the process proceeds to step 0609.
[0101]
(Step 0606) The version extracted from the authentication information in Step 0604 is compared with the value contained in the version field of the ticket searched in Step 0604. If the version of the ticket is newer, go to Step 0607. Otherwise, go to step 0608.
[0102]
Here, an example will be described.
[0103]
The authentication information received in step 0601 is created by the browsing device 0130 from the ticket 0200 of FIG. 2A, and the ticket held by the current ticket management unit 0113 is in the state of FIG. Consider the case as an example. At this time, since the values of the content id, the user id, and the version of the ticket 0200 are 0209, 100, and 0.90 in this order, the authentication information includes the same value. The ticket searched in step 0604 is a ticket 0211 in which the content id and the user id are 0209 and 100 in order. However, since the value of the version field of the ticket 0211 is 1.20, which is newer than the version 0.90 of the authentication information, in this step 0606, it is determined that the searched ticket version is new (and the process proceeds to step 0607). ).
[0104]
(Step 0607) The ticket management unit 0113 sends the ticket determined to be new in step 0606 to the ticket holding unit 0132 of the browsing device 0130.
[0105]
(Step 0608) The authentication success is returned to the ticket interpretation unit 0136 of the browsing device 0130, and the processing is ended.
[0106]
(Step 0609) An authentication failure is returned to the ticket interpretation unit 0136 of the browsing device 0130, and the process is terminated.
[0107]
(Embodiment 2)
Next, the distribution content management method and content distribution system in Embodiment 2 will be described in detail. A feature of the second embodiment is that the configuration of the content distribution system is a symmetric topology, and it is configured by connecting a plurality of production browsing devices having functions of both the production device and the browsing device to the delivery system. Is done. Symmetric topology with the functions of both production devices and browsing devices means that individuals can exchange content created by themselves using multiple production viewing devices connected to a broadband network. Assume service.
[0108]
FIG. 07 is a block diagram of the content distribution system according to the second embodiment. In the content distribution system according to the second embodiment, n production browsing devices are connected to each other by a delivery system 0120.
[0109]
Reference numeral 0710 denotes the production browsing apparatus-1. The production browsing apparatus-1 0710 includes a production sub apparatus 0711 and a browsing sub apparatus 0712.
[0110]
The production browsing apparatus-2 0720 includes a production sub apparatus 0721 and a browsing sub apparatus 0722.
[0111]
The production sub device 0711 and the production sub device 0721 may have the same configuration as the production device 0110 in the first embodiment. However, the difference is that the ticket information includes an operation identification that identifies the production browsing device.
[0112]
Here, an example of a ticket in the second embodiment will be described.
[0113]
FIG. 08 is an example of a ticket generated by the ticket setting unit in the second embodiment. The difference of the ticket 0200 in the first embodiment described with reference to FIG. 2A is that a production identification field 0801 is added. The production identification is information for specifying the production browsing device, and a production browsing device including a production sub-device corresponding to the content to be presented can be selected from a plurality of production browsing devices connected to the delivery system 0120.
[0114]
The specific data format for production identification is not limited, but may be a telephone number or a format URI (Uniform Resource Identifiers) used for identification of a homepage on the Internet, for example.
[0115]
Next, the browsing sub device 0712 and the browsing sub device 0722 are the same as the browsing device 0130 in the first embodiment. The configuration may be the same. However, The ticket information is different from the ticket information in that it includes an operation identification that identifies the production browsing device. Further, the operation of the ticket interpretation unit 0136 which is a component of the production apparatus 0110 is different. Here, the difference in operation will be described using a flowchart.
[0116]
FIG. 09 is an operational flowchart of the difference from the first embodiment of the process of reproducing content using ticket information by the browsing device in the second embodiment. That is, step 0510 is replaced in the operation flowchart of the process of reproducing the content using the ticket information by the browsing device 0130 in the first embodiment described with reference to FIG. However, in the flowchart, the production sub-device is replaced with the production device, and the browsing sub-device is replaced with the browsing device.
[0117]
(Step 0901) The corresponding production browsing device is specified from the production identification in the ticket. The operation identification field included in the ticket is read out, and communication connection processing to the production viewing apparatus through the delivery system 0120 is performed. For example, processing such as converting the production identification into a physical address and confirming whether or not a production browsing apparatus to be connected to the address actually exists is performed.
[0118]
(Step 0902) It is included in the production sub-device of the identified production browsing device. The ticket interpreter makes an authentication request to the ticket manager.
[0119]
(Embodiment 3)
Next, the distribution content management method and content distribution system in Embodiment 3 will be described in detail.
[0120]
The third embodiment has a configuration in which the ticket management means is made independent as a ticket server, and one ticket server is associated with a plurality of production apparatuses and a plurality of browsing apparatuses. Since the ticket server is always operating regardless of the status of the production device and browsing device such as online / offline to the delivery system, even if the content production device to be browsed is in the offline state, the ticket is authenticated and updated. You can browse the content.
[0121]
FIG. 10 is a block diagram of the content distribution system according to the third embodiment.
[0122]
Reference numeral 1010 denotes the production apparatus-1. The production apparatus-1 1010 includes content production means 0111 and ticket setting means 1011.
[0123]
The difference with the ticket setting means 0112 is The ticket management means is arranged not in the production apparatus but in the ticket server 1020 connected via the delivery system 0120.
[0124]
Differences in the operation of the production apparatus according to the third embodiment with reference to the first embodiment will be described later with reference to FIGS.
[0125]
Reference numeral 1010a denotes the production apparatus-2. The production device-2 1010a may have the same configuration as the production device-1.
[0126]
Here, the content id for identifying the content is assumed to have a scope for both the production device-1 1010 and the production device-2 1010a. This is because the common ticket management means 1021 is shared by a plurality of production apparatuses, so as to avoid the confusion of identifying different contents with the same content id in another production apparatus.
[0127]
Reference numeral 1020 denotes a ticket server. The ticket server 1020 includes ticket management means 1021.
[0128]
Reference numeral 1021 denotes ticket management means. The ticket management unit 1021 collectively manages tickets for one or a plurality of production apparatuses. In the figure, ticket management is performed for two production apparatuses, production apparatus-1 1010 and production apparatus-2 1020.
[0129]
1030 is a browsing device . 1031 is Ticket interpretation means . here The operation of the production apparatus-1 will be described in detail using a flowchart.
[0130]
FIG. 11 is an operation flowchart of processing for generating content and a ticket in the production apparatus according to the third embodiment. This operation flow is obtained by replacing step 0306 in the flowchart of the first embodiment described with reference to FIG.
[0131]
In the following description, however, the description of steps having the same name and only the sign changed in the description of the flowchart, such as the ticket setting unit 0112 and the ticket setting unit 1011, will be omitted.
[0132]
(Step 1101) The ticket as a result of Step 0305 is registered in the ticket management means 1021 of the ticket server 1020. That is, the ticket held in the ticket management unit 01021 is added by the registration process.
[0133]
FIG. 12 is an operation flowchart of processing for resetting a ticket in the production apparatus according to the third embodiment. This operation flow is obtained by replacing step 0405 in the flowchart of the first embodiment described with reference to FIG.
[0134]
(Step 1201) The ticket of the ticket management means 1021 of the ticket server 1020 is updated with the ticket as a result of Step 0404. If there is a ticket stored in the ticket management unit 1021 and having the same user id and the same content id, the ticket is overwritten with the ticket as a result of step 0404.
[0135]
FIG. 13 is an operation flowchart of processing for evaluating authentication information and sending a ticket in the ticket management unit 1021 of the ticket server 1020 according to the third embodiment. However, only the difference from the operation flowchart with the first embodiment described in FIG. That is, step 0607 in FIG. 06 is replaced with the following step 1301 and step 1302.
[0136]
(Step 1301) The ticket management means 1020 generates a ticket in which the production identification field is omitted from a new ticket.
[0137]
(Step 1302) The ticket management means 1020 sends a new ticket in a format in which the production identification field is omitted to the ticket holding means of the browsing device.
[0138]
Here, the production identification field is omitted from the ticket and then passed to the browsing device 1030. This allows the browsing device to hide the production identification value for the content. Accordingly, it is possible to distribute the content while hiding the location of the production device that produced the content.
[0139]
In the description of the third embodiment, only tickets from a plurality of production devices have been distributed to the browsing device via the ticket server. However, a content reception request from the browsing device to the production device via the ticket server is used. May be configured to send.
[0140]
Also, the ticket server 1020 selectively sends a ticket having the user ID of the browsing device to the browsing device, but the ticket server knows which user id is held for a specific content. May lead to privacy leaks.
[0141]
Therefore, a method of using a value obtained by converting the user id with a one-way function such as DES (Data Encryption Standard) instead of directly transmitting and receiving the user id is conceivable.
[0142]
Alternatively, a method may be considered in which tickets for specific content are all sent to the browsing device instead of being sorted by user id. As a result, the ticket server cannot know to which user id the specific content is prepared. At this time, the content id is included in the authentication information instead of the user id, and the ticket management unit selects a ticket that matches the content id included in the authentication information instead of the user id and sends it to the ticket management unit. By narrowing down by content id, it is possible to avoid the problem that the number of tickets to be sent becomes too large. In this case, since the ticket holding unit of the browsing apparatus receives a ticket related to another user id, the ticket holding unit manages such that a ticket with a mismatched user id is ignored. Similarly, if a value converted by a one-way function is used instead of the user id, it is possible to hide that there is a ticket including the user id of the user from other browsing devices.
[0143]
【The invention's effect】
When providing content to a plurality of users, it is possible to finely control that only a specific user is allowed to browse, or even for the same content, only a certain user can view all parts. .
[0144]
Even in a loosely coupled system, such as viewing content distributed over a high-speed communication network on a mobile device separated from the network, the right holder of the content can restrict It can be changed even from the timing.
[Brief description of the drawings]
FIG. 1 is a block diagram of a content distribution system according to a first embodiment.
FIG. 2 is a diagram showing an example of a ticket in the first embodiment
FIG. 3 is an operation flowchart of processing for generating content and a ticket in the production apparatus according to Embodiment 1;
FIG. 4 is an operation flowchart of processing for resetting a ticket in the production apparatus according to the first embodiment.
FIG. 5 is an operation flowchart of processing for reproducing content using ticket information in the browsing device according to the first embodiment;
6 is an operation flowchart of processing for evaluating authentication information and sending a ticket in the production apparatus according to Embodiment 1. FIG.
7 is a block diagram of a content distribution system in Embodiment 2. FIG.
FIG. 8 is a diagram showing an example of ticket information generated by ticket setting means in the second embodiment.
FIG. 9 is an operation flowchart of a difference from the first embodiment of a process for reproducing content using ticket information in the browsing device according to the second embodiment.
10 is a block diagram of a content distribution system in Embodiment 3. FIG.
11 is an operation flowchart of processing for generating content and a ticket in the production apparatus according to Embodiment 3. FIG.
12 is an operation flowchart of processing for resetting a ticket in the production apparatus according to Embodiment 3. FIG.
FIG. 13 is an operational flowchart of a difference from the first embodiment of a process for evaluating authentication information and sending a ticket in the production apparatus according to the third embodiment.
FIG. 14 is a block diagram of a conventional content distribution system.
[Explanation of symbols]
0110 Production equipment
0111 Contents production means
0112 Ticket setting means
0113 Ticket management means
0120 Delivery system
0130 browsing device
0131 Content acquisition means
0132 Ticket holding means
0133 Secure timing means
IC card
User identification means
0136 Ticket interpretation means
Presentation control means
Content presentation means

Claims (22)

  In a content distribution system including a production device, a delivery system, and a browsing device, the production device includes a ticket setting unit and a ticket management unit, and the browsing device includes a secure timing unit, a ticket interpretation unit, and a presentation control unit, The ticket setting unit generates a ticket including a content id, an unauthenticated timeout, and presentation control information, and the ticket management unit stores the ticket generated by the ticket setting unit, and stores the ticket generated from the ticket interpretation unit. Accepts the request and notifies the ticket interpretation means, the delivery system delivers the ticket from the production device to the browsing device, and outputs the timekeeping information that the secure timekeeping means cannot modify even maliciously, The ticket interpreting means receives the chit from the ticket managing means. And the timing information from the secure timing means are input and presentation control information is output, and the presentation control means inputs the presentation control information and content output by the ticket interpretation means, and according to the presentation control information In the configuration for converting and outputting the content restricted in presentation, the ticket interpreting means obtains the elapsed time from the time when authentication was last successful from the timekeeping information, and if the elapsed time does not exceed the unauthenticated timeout, the ticket is When the elapsed time exceeds the unauthenticated timeout, the ticket interpretation unit sends authentication information to the ticket management unit, and the authentication information sent by the ticket management unit is correct. If it is determined that the authentication is successful, the authentication success is returned to the ticket interpreting means in the other cases. If the ticket management means sends a successful authentication from the ticket management means, it resets the elapsed time to 0 and interprets the newest ticket. A content distribution system characterized by outputting presentation control information.   The content information is included in the authentication information, and if there is a new ticket, the ticket management means sends a ticket corresponding to the content id included in the authentication information when sending it to the interpretation means. The content distribution system according to 1.   The browsing device includes a user specifying unit, the ticket includes a user id, the authentication information includes a user id, and the ticket management unit includes the authentication information when the ticket information is sent to the ticket interpretation unit. 3. The content distribution system according to claim 1, wherein the tickets having the same user id value are selected and sent.   In a content distribution system including the delivery system and a plurality of production browsing devices, the production browsing device includes the production device and the browsing device, and specifies the production browsing device that produces the content in the ticket. The production device is provided with a production identification, and the ticket interpretation unit sends the authentication information to the ticket management unit of the production device identified and specified from the plurality of production browsing devices using the production identification. The content distribution system according to any one of claims 1 to 3.   In a content distribution system including a production device, a ticket server, a delivery system, and a browsing device, the production device includes a ticket setting unit, the ticket server includes a ticket management unit, and the browsing device includes a secure timing unit. And a user identification unit, a ticket interpretation unit, and a presentation control unit, wherein the ticket setting unit generates a ticket including a content id, an unauthenticated timeout, presentation control information, and a user id, and the ticket management unit includes the ticket The ticket generated by the setting unit is stored, a request from the ticket interpretation unit is received, the ticket is notified to the ticket interpretation unit, and the delivery system distributes the ticket from the production device to the ticket server and the ticket From the ticket server Distributing to the browsing device, outputting the timing information that the secure timing means cannot modify even maliciously, the user specifying means outputting a user id specifying the user who uses the browsing device, and the ticket interpreting means is the ticket The ticket from the management means and the timing information from the secure timing means are input and presentation control information is output, and the presentation control means inputs the presentation control information and content output by the ticket interpretation means, and In the configuration for converting and outputting the content whose presentation is restricted according to the presentation control information, the elapsed time from the time when the ticket interpretation unit last succeeded in authentication is obtained from the time measurement information, and the elapsed time does not exceed the unauthenticated timeout Interprets the ticket and outputs the presentation control information, and the elapsed time is the unauthenticated timeout. If the ticket interpretation unit determines that the authentication information sent is correct, the ticket interpretation unit sends authentication information including the user id to the ticket management unit. In this case, authentication failure is returned to the ticket interpreting means, and if there is a new ticket, the ticket managing means selects a ticket that matches the user id included in the authentication information and sends it to the interpreting means. A content distribution system characterized in that when the means is sent a successful authentication from the ticket management means, the elapsed time is reset to 0, the latest ticket is interpreted, and presentation control information is output.   In a content distribution system including a production device, a ticket server, a delivery system, and a browsing device, the production device includes a ticket setting unit, the ticket server includes a ticket management unit, and the browsing device includes a secure timing unit. And a user identification unit, a ticket interpretation unit, and a presentation control unit, wherein the ticket setting unit generates a ticket including a content id, an unauthenticated timeout, presentation control information, and a user id, and the ticket management unit includes the ticket The ticket generated by the setting unit is stored, a request from the ticket interpretation unit is received, the ticket is notified to the ticket interpretation unit, and the delivery system distributes the ticket from the production device to the ticket server and the ticket From the ticket server Distributing to the browsing device, outputting the timing information that the secure timing means cannot modify even maliciously, the user specifying means outputting a user id specifying the user who uses the browsing device, and the ticket interpreting means is the ticket The ticket from the management means and the timing information from the secure timing means are input and presentation control information is output, and the presentation control means inputs the presentation control information and content output by the ticket interpretation means, and In the configuration for converting and outputting the content whose presentation is restricted according to the presentation control information, the elapsed time from the time when the ticket interpretation unit last succeeded in authentication is obtained from the time measurement information, and the elapsed time does not exceed the unauthenticated timeout Interprets the ticket and outputs the presentation control information, and the elapsed time is the unauthenticated timeout. The ticket interpreting means sends authentication information including the content id to the ticket management means, and if the ticket management means determines that the sent authentication information is correct, it indicates that the authentication is successful. In this case, authentication failure is returned to the ticket interpreting means, and if there is a new ticket, the ticket managing means selects a ticket that matches the content id included in the authentication information and sends it to the interpreting means. The content is characterized in that when the means sends a successful authentication from the ticket management means, the elapsed time is reset to 0 and the matching part of the user id of the newest ticket is interpreted and the presentation control information is output. Distribution system.   7. The content distribution system according to claim 3, wherein a value converted by using a one-way function is used instead of directly handling the user id.   7. The content distribution system according to claim 1, wherein the content distribution is performed by storage type broadcasting in digital broadcasting, and the delivery system is a communication network.   7. The content distribution system according to claim 1, wherein the delivery system is a communication network, and distribution of content is performed by streaming video distribution on the communication network.   7. The contents distribution system according to claim 1, wherein contents are distributed by physical distribution of package media. Claim 1 production apparatus for realizing content distribution system according to claim 10, wherein. It claims 1 to viewing apparatus for realizing content distribution system according to claim 10, wherein.   In the content distribution system including a production device that generates a ticket including a content id, an unauthenticated timeout, and presentation control information, a browsing device that browses the content, and a delivery system that distributes the ticket from the production device to the browsing device, A step of obtaining the elapsed time from the time when the browsing device was last authenticated successfully from timekeeping information that cannot be altered by malicious means, and interpreting the ticket if the elapsed time does not exceed the unauthenticated timeout Outputting the presentation control information and converting and outputting the content whose presentation is restricted according to the outputted presentation control information; and if the elapsed time exceeds the unauthenticated timeout, the authentication information is sent to the production device And the production device has the authentication information correct Returning a successful authentication to the viewing device if determined, otherwise sending an authentication failure to the viewing device, sending the creation device to the viewing device if there is a new ticket; A step of returning the elapsed time to 0 when it is sent, interpreting the newest ticket and outputting the presentation control information, and converting and outputting the content whose presentation is restricted according to the outputted presentation control information. Content distribution method characterized by The content information is included in the authentication information, and if there is a new ticket, the ticket management means sends a ticket corresponding to the content id included in the authentication information when sending it to the interpretation means. 14. The content distribution method according to 13 . The browsing device holds a user id for identifying a user who browses content, the ticket includes a user id, the authentication information includes a user id, and the production device sends a new ticket to the browsing device. claims 13 to claim 14 content distribution method according the value of the user id is characterized by sending by selecting equal the ticket included in the authentication information in step. In a content distribution system including the delivery system and a plurality of production browsing devices, the production browsing device includes the production device and the browsing device, and the production specifying the production browsing device that produced the content in the ticket comprising an identification, the authentication information the producing apparatus from a plurality of said production viewing device sending the production identification of claims 13 to claim 15, wherein the said sending the identified identified the producing apparatus using Content distribution method.   A production device that generates a ticket composed of an unauthenticated timeout, a content id, presentation control information, and a user id, a ticket server that manages the ticket, a browsing device that browses the content and holds a user id that identifies a user who views the content And a delivery system that distributes the ticket from the production device to the ticket server and distributes the ticket from the ticket server to the browsing device, the time elapsed since the last successful authentication of the browsing device is malicious The timing information that cannot be modified even if the browsing device interprets the ticket when the elapsed time does not exceed the unauthenticated timeout and outputs the presentation control information and according to the output presentation control information Restricted content Converting and outputting, when the browsing device exceeds the unauthenticated timeout, sending authentication information including the user id to the ticket server, and the ticket server authenticating the authentication A step of returning authentication success to the browsing device if the information is determined to be correct; otherwise, the ticket server matches the user id included in the authentication information if there is a new ticket Selecting a ticket to be sent to the browsing device, and if the browsing device is sent authentication success, returns the elapsed time to 0, interprets the newest ticket, outputs the presentation control information, and outputs it And converting and outputting the content whose presentation is restricted according to the presented presentation control information. Content delivery method.   A production device that generates a ticket composed of an unauthenticated timeout, a content id, presentation control information, and a user id, a ticket server that manages the ticket, a browsing device that browses the content and holds a user id that identifies a user who views the content And a delivery system that distributes the ticket from the production device to the ticket server and distributes the ticket from the ticket server to the browsing device, the time elapsed since the last successful authentication of the browsing device is malicious The timing information that cannot be modified even if the browsing device interprets the ticket when the elapsed time does not exceed the unauthenticated timeout and outputs the presentation control information and according to the output presentation control information Restricted content Converting and outputting; when the browsing device exceeds the unauthenticated timeout, sending authentication information including the content id to the ticket server when the elapsed time exceeds the unauthenticated timeout; and A step of returning authentication success to the browsing device if the information is determined to be correct; otherwise, the ticket server matches the content id included in the authentication information if there is a new ticket Selecting a ticket to be sent and sending it to the browsing device; if the browsing device is sent authentication success, it returns the elapsed time to 0 and interprets and presents the matching portion of the user id of the newest ticket Outputs the control information and converts the content whose presentation is restricted according to the output presentation control information. Content distribution method, comprising the steps of:. Features and claims 15 through claim 18 content distribution method according to the use of a converted value using a one-way function, instead of dealing with user id directly. Distribution of content is performed by the storage-type broadcasting in digital broadcasting, according to claim 13 or claim 18 content distribution method according to, characterized in that said delivery system is a communication network. The delivery system is a communication network, according to claim 13 or claim 18 content distribution method according to, characterized in that the distribution of the content is performed by the streaming video delivery over the communication network. Claims 13 to content distribution method according to claim 18, wherein the comprises carrying out the physical distribution of delivery of package media content.

Images