JP4594753B2 - Content usage license transmission device, content usage license transmission program, and content usage license reception program - Google Patents

Description

  The present invention relates to a technology for preventing unauthorized use of content, and in particular, it prevents unauthorized use of content by restricting the issuance of a content usage permit permitting content playback based on the location of a terminal that plays back the content. It relates to technology to prevent.

  In recent years, the distribution of digital contents (hereinafter referred to as contents) in which information is hardly deteriorated on a network such as the Internet is increasing. However, since digital information can create a copy having exactly the same information as the original, there is a drawback that unauthorized copying of content can be easily performed. Therefore, a technology that can prevent unauthorized use of content and protect copyrights has been proposed.

  For example, conventionally, a method represented by MagicGate (registered trademark) that uses a tamper-resistant hardware to identify a terminal that can use content and restricts the use of the content other than this terminal to prevent the copy outflow. (See Non-Patent Document 1).

  In addition, even when copying is permitted, a content browsing program that can be executed only by the notified terminal is notified in advance to the server on the content provider side that provides the content of the terminal that uses the copy of the content. Thus, there has been proposed one that prevents unauthorized copy outflow by enabling the use of content (see Non-Patent Document 2).

Furthermore, although it is possible to copy the content by the terminal of the purchaser (hereinafter referred to as a user) who purchased the content, it is possible to copy not only one terminal by preventing a secondary copy from being copied again. In addition, a system that can use content on other terminals owned by the user and prevents illegal distribution of content by secondary copying has been proposed (see Patent Document 1).
JP 2004-164534 A (paragraphs 0009 to 0034) "Memory Stick copyright protection technology MagicGate", [online], Internet <URL: http://www.sony.co.jp/Products/SC-HP/CXPAL/CXPAL-44/PDF/tw.pdf> Haruhiko Fujii and four others, “Copyright protection method to realize a high-freedom private copy”, Information processing computerized intellectual property / social infrastructure, Information Processing Society of Japan, February 2001, NO. 11-9, p. 39-46

  However, the techniques described in Patent Document 1, Non-Patent Document 1, and Non-Patent Document 2 can prevent unauthorized copying of content, but this content is a copyright manager who manages the copyright of the content. Could not be controlled to be used correctly at the intended location. For example, even if the content is encrypted and distributed to the user's terminal so that the content cannot be illegally copied, the user takes out the media or terminal on which the content is recorded, and unspecified number of people in other locations. Unauthorized use such as holding a screening was not prevented.

The present invention has been made to solve the above-described problems of the prior art. The copyright manager manages the position of a terminal that can use the content so that the content can be used only at a pre-registered position. it is, user content license transmitting apparatus capable of preventing to perform unauthorized use by taking out a terminal to another location, to provide a content license transmission program and the content license reception program With the goal.

  In order to solve the above-described problem, the content usage permit transmission device according to claim 1 is connected to a content playback device and a terminal that play back content via a wired and / or wireless local area network, and is connected to the content playback device. A content usage permit transmitting device that receives a content usage permit permitting the reproduction of the content and transmits the content usage permit via a network to a content usage permit receiving device that transmits the content usage permit to the content playback device And it was set as the structure provided with the receiving device management information memory | storage means, the receiving device information receiving means, the permission determination means, and the usage permit transmission means.

  According to such a configuration, the content usage certificate transmission device identifies the playback device ID and terminal for identifying the content playback device, the reception device ID for identifying the content usage license reception device, in the reception device management information storage means. Receiving device management information associated with registered terminal information indicating a terminal ID is stored. In addition, the content usage permit transmitting device receives the receiving device information including the receiving device ID of the content usage permit receiving device and the time when the content usage permit receiving device transmits the receiving device information by the receiving device information receiving unit. , The content usage permit is obtained from the playback device ID of the content playback device connected to the content usage license receiving device via a wired and / or wireless local area network and the terminal information indicating the terminal ID of the terminal. Receive from the receiving device. Here, a terminal is a device connected to a local area network, such as a television, a DVD recorder, an audio device, or a computer that can be connected to the network.

  Further, the content usage permit transmission device registers the registration stored in the reception device management information storage unit corresponding to the reception device ID included in the reception device information received by the reception device information reception unit by the permission determination unit. The predetermined number or more of the terminal IDs among the terminal IDs indicated by the terminal information and the predetermined number or more of the terminal IDs indicated by the terminal information received by the receiving device information receiving means match. Judge whether to do.

  Here, at the place where the user uses the content properly, the terminal ID of the terminal connected together with the content usage certificate receiving device and the content reproduction device via the local area network is stored in the receiving device information storage means. Thus, when the user uses the content at this location, the terminal ID received by the receiving device information receiving unit and the part or all of the terminal ID stored in the receiving device information storing unit match. On the other hand, when the user takes the content usage certificate receiving device and the content reproduction device to another place and uses them illegally, the terminal ID received by the receiving device information receiving means and the receiving device information storing means store them. Or the terminal IDs of only a few terminals taken out together with the content usage certificate receiving device and the content reproduction device match. Therefore, when a predetermined number of terminal IDs greater than this number match, it can be determined that the user is trying to use the content at an appropriate place.

  Then, when it is determined by the permission determining means that the content usage permit transmitting device matches, the content usage permit transmitting device transmits the content usage permit to the content usage permit receiving device. As a result, the content usage permit transmission device can transmit the content usage permit to the content usage permit reception device only when it is determined that the user intends to use the content at an appropriate location.

  Further, the content usage permit transmission device according to claim 2 is the content usage permit transmission device according to claim 1, wherein the receiving device management information storage means includes the receiving device ID of the content usage permit receiving device. In addition, registered position information indicating a position where the content reproduction apparatus is permitted to reproduce the content is stored in association with each other, and the reception apparatus information receiving unit receives the position information indicating the position of the content reproduction apparatus. The receiving device stored in the receiving device management information storage unit based on the receiving device ID included in the receiving device information received by the receiving device information receiving unit and the position information. It is determined whether or not the content reproduction device is within a predetermined range of the position indicated by the registered position information corresponding to the ID, and the use permission is determined The transmission means is configured to allow the permission determination means to perform a predetermined number or more of the terminal IDs of the terminal IDs indicated by the registered terminal information and a predetermined number or more of the terminals of the terminal IDs indicated by the terminal information. When the ID matches and it is determined that the content usage certificate receiving device is within the range, the content usage license is transmitted to the content usage license receiving device.

  According to such a configuration, the content usage permit transmission device includes a predetermined number of terminal IDs or more of the terminal IDs received by the receiving device information receiving unit and the terminal ID stored in the receiving device information storage unit. Content reproduction within a predetermined range of the position indicated by the registered position information stored in the receiving apparatus management information storage means based on the position information indicating the position of the content reproduction apparatus, while matching with a predetermined number of terminal IDs or more When there is a device, the content usage permit is transmitted to the content usage permit receiving device. As a result, the content usage permit transmission device can transmit the content usage permit to the content usage permit reception device only when it is determined that the user intends to use the content at an appropriate location.

Further, the content usage permit transmitting device according to claim 3 is the content usage permit transmitting device according to claim 2 , wherein the location information is received from the content usage permit receiving device to the receiving device in the network. A relay device ID for identifying a relay device provided on a transmission path through which information is transmitted is included.

  Here, when information is transmitted from the content usage certificate receiving device on the transmission path of the network, the relay device near the content usage license receiving device on the transmission path of this information is connected to the content usage license receiving device. Depends on position. Therefore, the content usage license is received by specifying a nearby relay device from the content usage license receiving device on the transmission path between the content usage license receiving device and the content usage license transmitting device as position information. The position of the device can be specified as being within the range relayed by the relay device. Then, the position of the content reproduction device connected to the content usage certificate receiving device can also be determined as the position in the vicinity.

According to a fourth aspect of the present invention, there is provided the content usage certificate transmitting device according to the third aspect , wherein the relay device transmits a radio wave transmitted from the content usage license receiving device. The reception device information is relayed via the location information, and the position information further includes information indicating a direction of arrival of the radio wave transmitted from the content usage certificate reception device to the relay device.

  Here, the information indicating the arrival direction of the radio wave to the relay device is, for example, when the relay device has a plurality of antennas that receive radio waves from different directions (directions) within a predetermined range. Identification information to be identified. Based on this position information, the content usage permit transmission device uses the information indicating the arrival direction to the relay device within a predetermined range in which the radio wave is relayed by the relay device indicated by the relay device ID. It can be determined that the content usage certificate receiving device and the content reproduction device exist at a position where radio waves can be transmitted in the direction indicated.

Furthermore, the content usage permit transmission device according to claim 5 is the content usage permit transmission device according to any one of claims 2 to 4 , wherein the location information is the content usage permit reception. The configuration includes latitude and longitude information transmitted from the device. Therefore, the position of the content playback device is specified by the latitude and longitude information. As a result, the content use permit transmission device can specify the position of the content reproduction device based on the position information. Then, it is determined whether or not the content usage permit receiving device is within a predetermined range, and the content usage permit is transmitted to the content usage permit receiving device only when it is determined to be within this range. Can do.

The content usage permit transmission program according to claim 6 is connected to a content playback device and a terminal for playing back content via a wired and / or wireless local area network, and the content playback device transmits the content to the content playback device. A terminal for identifying a content reproduction device and a terminal for identifying the content reproduction device and a reception device ID for identifying the content usage license receiving device for receiving the content usage permit for reproduction and transmitting to the content reproduction device The receiving device management information storage device that stores the receiving device management information corresponding to the registered terminal information indicating the ID refers to the receiving device management information, and the content usage permit receiving device receives the content using the network. Information receiving means for receiving information from a computer for transmitting a permit Permission determination means, and a function as an license transmitting unit.

  According to such a configuration, the content usage permit transmission program causes the receiving apparatus information receiving means to receive the receiving apparatus information including the receiving apparatus ID of the content usage permit receiving apparatus and the content usage permit receiving apparatus to receive the receiving apparatus information. At the time of transmitting the content usage permit reception of the playback device ID of the content playback device connected to the content usage license reception device and the terminal information indicating the terminal ID of the terminal via the local area network Receive from the device. Further, the content usage permit transmission program stores the registration terminal information stored in the reception device management information storage device corresponding to the reception device ID included in the reception device information received by the reception device information reception unit by the permission determination unit. It is determined whether or not a predetermined number or more of the terminal IDs indicated by the terminal ID match with a predetermined number or more of the terminal IDs indicated by the terminal information received by the receiving device information receiving means. .

  Further, the content usage permit transmission program transmits the content usage permit to the content usage permit receiving device when the usage permit transmitting means determines that the permission determining means agrees. Thereby, the content usage permit transmission program can transmit the content usage permit to the content usage permit receiving apparatus only when it is determined that the user intends to use the content in an appropriate place.

The content usage certificate receiving program according to claim 7 is provided in a content playback device that plays back content and a content usage license reception device connected to a terminal via a wired and / or wireless local area network. In order to receive a content usage permit for permitting reproduction of the content transmitted from the content usage permit transmitting device according to claim 1 or 2 via a network and transmit the content usage permit to the content playback device The computer is caused to function as a receiving device information acquisition / transmission unit and a usage permit acquisition unit.

  According to such a configuration, the content use license receiving program acquires the playback device ID for identifying the content playback device connected via the local area network and the terminal ID for identifying the terminal by the receiving device information acquisition / transmission means. Then, the receiving device information including the receiving device ID for identifying the content usage permit receiving device and the terminal information indicating the playback device ID and the terminal ID are transmitted to the content usage permit transmitting device. Further, the content usage certificate receiving program receives the content usage certificate transmitted from the content usage certificate transmitting device by the usage certificate acquisition means, and transmits it to the content reproduction device.

  As a result, the content usage permit transmission device can acquire the terminal ID necessary for the user to determine whether the content is properly used in an appropriate place, and transmit it to the content usage permit transmission device. it can. Then, the content usage permit can be received from the content usage permit transmitting apparatus and transmitted to the content reproduction apparatus.

Content license transmitting apparatus according to the present invention, the content license transmission program and the content license reception program, excellent effects as follows.

According to the invention described in claim 1 or claim 6 , it is determined whether or not the content reproduction device is at a pre-registered position by managing whether or not the pre-registered terminal is connected to the local area network. be able to. Since the content use permit is transmitted when the content reproduction apparatus is at a pre-registered position, the user can use the content only at the pre-registered position. As a result, it is possible to prevent the user from using the content illegally in a place where the content is not registered.

  According to the second aspect of the present invention, it is managed whether or not a pre-registered terminal is connected to the local area network, and the position information indicating the position of the content reproduction device is received, thereby being registered in advance. It is possible to more accurately determine whether or not the content reproduction apparatus is at the position.

According to the third aspect of the present invention, the content usage permit is received by specifying the relay device on the transmission path between the content usage permit receiving device and the content usage permit transmitting device as position information. It is possible to specify the position of the device and the content reproduction device and determine whether or not the content reproduction device is at a previously registered position. For this reason, it is possible to determine whether or not the content reproduction apparatus is at a previously registered position without providing the content reproduction apparatus with a means for detecting the position.

According to the fourth aspect of the present invention, a relay device that receives a radio wave from the content use license receiving device and a direction in which the radio wave reaches the relay device is identified and used as position information, thereby using the content The positions of the permit reception device and the content reproduction device can be further specified, and it can be determined more strictly whether the content reproduction device is at a previously registered position.

According to the fifth aspect of the present invention, it is possible to identify the position of the content reproduction apparatus based on the latitude and longitude information, and to determine whether the content reproduction apparatus is at a previously registered position.

According to the seventh aspect of the present invention, when the content reproduction device is at a pre-registered position by notifying the content usage permit transmitting device of the terminal connected to the local area network, the content usage permit is obtained. Can be received and transmitted to the content reproduction apparatus. Therefore, the user can use the content only at a position registered in advance, and the user can be prevented from using the content illegally in other places.

Hereinafter, embodiments of the present invention will be described with reference to the drawings.
[Configuration of Copyright Management System (First Embodiment)]
First, the configuration of a copyright management system S that is the first embodiment of the present invention will be described with reference to FIG. FIG. 1 is a block diagram showing a configuration of a copyright management system according to the first embodiment of the present invention. The copyright management system S includes a content server 1 connected to the content provider side via an intranet 3, a content usage certificate transmission device 2, and a gateway (GW) 4, via the Internet 5 and the relay device 6. In this system, the content and a content usage permit permitting the reproduction of the content are distributed to the main recorder R which is a device on the user (purchaser) side of the content. In addition, the copyright management system S includes a main recorder R and a content playback device 9 (9a, 9b, 9c,...) Connected via a local area network on the user side.

  The content server 1 holds a plurality of contents in a storage means (not shown), and distributes the contents to the main recorder R when there is a request for the contents from the main recorder R described later.

  The content usage permit transmission device 2 manages the content usage permit of the content held in the content server 1. That is, the content usage certificate transmitting device 2 performs user authentication and determination based on the position of the content playback device 9 to be described later based on a request for content usage license from the content usage certificate receiving device 7 to be described later. And issue a content usage certificate.

  The main recorder R includes a content storage device C and a content usage certificate receiving device 7, acquires the content desired by the user from the content server 1, stores it in the content storage device C, and further transmits the content usage license. A content usage permit is received from the device 2.

  The content storage device C stores content acquired from the content server 1 and includes a general storage device such as a semiconductor memory or a hard disk. The content stored in the content storage device C is used after being browsed or copied by the content reproduction device 9 described later.

  The content usage permit receiving device 7 receives the content usage permit from the content usage permit transmitting device 2 based on a request for acquiring the content usage permit from the content playback device 9 described later, and receives the content usage permit. It is transmitted to the requested content reproduction device 9.

  The content playback device 9 (9a, 9b, 9c,...) Browses or copies the content stored in the content storage device C, and uses the content usage certificate transmitted from the content usage license transmission device 2 as the content usage. The content is acquired from the permit receiving device 7 and the content is reproduced. This content reproduction apparatus is, for example, a personal computer, a television receiver, a mobile phone, or the like.

  The gateway (GW) 4 is a device for connecting each network of the intranet 3 and the Internet 5. The gateway 4 is, for example, an IP router (IP: Internet Protocol), and has a firewall function that prevents unauthorized access to the intranet 3.

  The relay device 6 is, for example, a router, and relays communication data flowing on the network to another network. In FIG. 1, only two relay devices 6 a and 6 b on the main recorder R side are illustrated on the transmission path between the content usage certificate receiver 7 and the content usage certificate transmitter 2.

  Hereinafter, in the copyright management system S, the content usage certificate transmitting device 2 that transmits the content usage certificate and the content usage license receiving device 7 that receives the content usage certificate will be described in detail.

(Configuration of content usage permit transmitter)
First, referring to FIG. 2 (refer to FIG. 1 as appropriate), the configuration of the content usage permit transmitting apparatus 2 will be described. FIG. 2 is a block diagram showing the configuration of the content usage permit transmission apparatus according to the first embodiment of the present invention. The content use certificate transmitting apparatus 2 includes a communication transmitting / receiving unit 21, an encryption / digital signature processing unit 22, an account issuing unit 23, an account verification unit 24, a receiving device management information registration unit 25, and a receiving device management information storage. Means 26, receiving device information receiving means 27, permission determining means 28, and usage permit transmitting means 29.

  The communication transmission / reception means 21 transmits / receives communication data via a network (intranet 3 or the like). For example, the communication transmission / reception means 21 transmits / receives communication data using a communication protocol of TCP / IP (Transmission Control Protocol / Internet Protocol).

  The encryption / electronic signature processing means 22 applies an electronic signature to the communication data and adds it, generates a public key and a private key of a public key cryptosystem, and transmits the communication data encrypted with this public key to a private key. Is to be decoded. Here, the encryption / electronic signature processing means 22 includes an electronic signature addition unit 22a, a key generation unit 22b, and a decryption unit 22c.

  The electronic signature adding unit 22a adds the electronic signature of the content usage certificate transmitting apparatus 2 to the communication data. Here, the communication data to which the electronic signature is applied is transmitted to the content usage certificate receiving device 7 via the communication transmitting / receiving means 21. Here, the electronic signature adding unit 22a applies an electronic signature to the account input from the account issuing unit 23 described later and the public key generated by the key generating unit 22b described later, and adds the communication transmitting / receiving unit 21. To the content usage certificate receiving device 7 via the network. It is assumed that the content usage certificate receiving device 7 stores the electronic signature verification key of the content usage certificate transmitting device 2 in a storage unit (not shown) in advance.

  The key generation unit 22b generates a public key and a secret key of a public key cryptosystem based on a command from the verification unit 24b of the account verification unit 24 described later. The public key generated here is output to the electronic signature adding unit 22a and transmitted to the content usage certificate receiving device 7 via the communication transmitting / receiving means 21.

  The decryption unit 22c receives communication data encrypted with the public key generated by the key generation unit 22b via the communication transmitting / receiving means 21, and decrypts the communication data with the secret key. Here, the decryption unit 22c performs communication transmission / reception of registration terminal information, registration route information, registration GPS information, terminal information, route information, and GPS information (details will be described later) encrypted in the content usage certificate receiving device 7. Receive via the means 21 and decode. The decrypted registered terminal information, registered route information and registered GPS information are output to the receiving device management information registering means 25, and the terminal information, route information and GPS information are output to the receiving device information receiving means 27, respectively.

  The account issuing means 23 issues an account (receiving apparatus ID) based on the account issuing request received from the content usage certificate receiving apparatus 7 of the main recorder R via the communication transmitting / receiving means 21. Here, the account issuing means 23 receives the electronic signature verification key of the content usage certificate receiving device 7 from the content usage certificate receiving device 7 and confirms the validity of the verification key. For example, the validity of the verification key can be confirmed by a verification key issuance certificate based on PKI (Public Key Infrastructure). If the validity is confirmed, the account issuing means 23 generates an account for the main recorder R. The account generated here is stored in the receiving device management information storage unit 26 as account information 26 a in association with the electronic signature verification key of the content usage certificate receiving device 7, and is also stored in the encryption / electronic signature processing unit 22. The digital signature is output to the digital signature adding unit 22a, and after being digitally signed by the content usage certificate transmission device 2, is output to the content usage license reception device 7 via the communication transceiver 21.

  The account verification unit 24 verifies the account received from the content usage certificate receiving device 7 via the communication transmitting / receiving unit 21. Here, the account verification unit 24 includes a reception unit 24a and a verification unit 24b.

  The receiving unit 24 a receives an account from the content usage certificate receiving device 7 via the communication transmitting / receiving means 21. Here, the account received from the content usage certificate receiving device 7 is applied by the electronic signature of the content usage certificate transmitting device 2 applied by the electronic signature adding unit 22 a and the content usage certificate receiving device 7. An electronic signature is added.

  The verification unit 24b verifies the account received by the reception unit 24a. Here, the verification unit 24b reads the verification key corresponding to this account based on the account information 26a stored in the reception device management information storage unit 26, and the content usage certificate reception device 7 attached to the account. Verify electronic signature. When the validity of the account is confirmed, the verification unit 24b outputs a public key generation command (key generation command) to the key generation unit 22b. In addition, the verification unit 24 b notifies the account to the receiving device management information reading unit 28 a of the permission determination unit 28.

  The receiving device management information registering unit 25 associates the registered terminal information, the registered route information, and the registered GPS information input from the decoding unit 22c with the account verified by the account verifying unit 24 in the receiving device management information storing unit 26. Write. Here, the registration terminal information, registration route information, and registration GPS information written in the receiving device management information storage unit 26 are used to determine whether or not to permit the content reproduction device 9 to reproduce the content by the permission determination unit 28 described later. This indicates a condition to be permitted when determining whether or not. Hereinafter, registration terminal information, registration route information, and registration GPS information will be described.

Registered terminal information refers to a device (in FIG. 1, content playback devices 9a, 9b, 9c,...) Connected to the main recorder R via a local area network at a position where the content playback device 9 is permitted to play back content. Information including identification information for identification. Here, the registered terminal information further includes identification information of the main recorder R. In this case, the identification information is obtained by converting each of the unique information of the main recorder R and the connected device by the internal conversion function f (x) of the content usage certificate receiving device 7 and connecting the identification information. Things were registered terminal information. For example, the content playback devices 9a, 9b, 9c,... Are connected to the main recorder R, and their unique information is ID _R , ID _a , ID _b , ID _c . Is f (x), the registered terminal information is “f (ID _R ), f (ID _a ), f (ID _b ), f (ID _c ),...”.

  Note that the registered terminal information is not limited to information obtained by converting the unique information using an internal conversion function. Further, the registered terminal information only needs to include identification information for identifying at least the content reproducing devices 9a, 9b, 9c,.

  The registered route information is a route of communication data transmitted between the content usage certificate receiving device 7 and the content usage certificate transmitting device 2 at a position where the content reproduction device 9 is permitted to reproduce the content. Information including identification information for identifying at least one relay device 6 (see FIG. 1) on this route. Here, the relay device 6 is determined depending on the position of the content usage certificate receiving device 7 as the relay device 6 is closer to the content usage certificate receiving device 7 on the path through which communication data is transmitted. For this reason, the registration route information includes the identification route information including the identification information of the relay device 6 close to the content usage certificate receiving device 7 on the route through which the communication data is transmitted. And information indicating the position of the content reproduction device 9 connected to the content usage certificate receiving device 7 through a local area network.

Here, the registration route information is received on the route among the relay devices 6 on the route of the communication data transmitted between the content use certificate receiving device 7 and the content use license transmitting device 2. The information consists of identification information between the relay device 6a closest to the device 7 and the relay device 6b closest to the next. In this case, the registration route information is relayed by the identification information f (ID _R ) of the main recorder R transmitted from the content usage certificate receiving device 7 at a position where the content reproducing device 9 permits the content reproduction. The verification key for the electronic signature of the relay device 6a, 6b added when passing through the device 6a, 6b is used. Note that the registered terminal information is not limited to the verification key of the relay device 6, and may be route information indicated by an IP address acquired by a trace route, for example. At this time, the content usage certificate transmitting device 2 can acquire the registered route information without receiving the identification information f (ID _R ) of the main recorder R from the content usage certificate receiving device 7.

  The registered GPS information is information indicating, by latitude and longitude, the position of the content reproduction device 9 that is permitted to reproduce the content by the content reproduction device 9, and content reproduction devices 9a, 9b, and 9c described later. ,... Are acquired using a global positioning system (GPS). A plurality of registered terminal information, registered route information, and registered GPS information may be registered for each account.

  The receiving device management information storage means 26 stores receiving device management information in which the registered terminal information 26b, the registered route information 26c, and the registered GPS information 26d are associated with the account information 26a. It is a storage means. The account information 26a is written by the account issuing means 23, and stores the account and the verification key of the content usage certificate receiving device 7 of the main recorder R corresponding to this account in association with each other. Registered terminal information 26b, registered route information 26c, and registered GPS information 26d are written by the receiving device management information registering means 25. This reception device management information is referred to and used by the permission determination means 28 described later when determining whether or not to permit the content reproduction device 9 to reproduce the content. Here, a code (26a, 26b, 26c, 26d) is added to the account information 26a, the registered terminal information 26b, the registered route information 26c, and the registered GPS information 26d stored in the receiving device management information storage unit 26. is doing.

  The receiving device information receiving unit 27 receives terminal information, route information, and GPS information input from the decryption unit 22c, corresponding to the account verified by the account verification unit 24. The terminal information, route information, and GPS information received here are output to the terminal determination unit 28b, the route determination unit 28c, and the GPS determination unit 28d of the permission determination unit 28, respectively. Hereinafter, terminal information, route information, and GPS information will be described.

  The terminal information is information including identification information of a device connected to the main recorder R via a local area network. Here, the terminal information further includes identification information of the main recorder R, and the unique information of the main recorder R and all connected devices is converted into the internal conversion function f (x) of the content usage permit receiving device 7. The information converted in step 2 was used as terminal information.

  Further, the route information is information including identification information for identifying at least one relay device 6 in a route of communication data transmitted between the content use license receiving device 7 and the content use license transmitting device 2. Here, the registered route information includes identification information of the relay device 6a on the route that is closest to the content use certificate receiving device 7 on the route and the next closest relay device 6b. The terminal information transmitted from the content usage certificate receiving device 7 is used as a verification key for the digital signature of the relay device 6a, 6b added when the terminal information passes through the relay device 6a, 6b.

  The GPS information is information indicating the position of the content reproduction device 9 by latitude and longitude. Here, the registered terminal information, the registered route information, and the registered GPS information are transmitted from the content usage permit receiving device 7 before the terminal information, the route information, and the GPS information are received, and are sent to the content reproducing device 9. The position of the content playback device 9 and the identification information of the devices connected via the local area network, which are conditions for permitting content playback, are shown. On the other hand, the terminal information, the route information, and the GPS information are stored in the position of the content reproduction device 9 at the time when the content usage permit is requested from any of the content reproduction devices 9 (9a, 9b, 9c,...) It shows identification information of devices connected by an area network.

  Based on the terminal information, the route information, and the GPS information received by the receiving device information receiving unit 27, the permission determining unit 28 gives a content usage permit to the position indicated by the registered terminal information, the registered route information, and the registered GPS information position. It is determined whether or not the requested content reproduction device 9 exists. Here, the permission determination means 28 includes a receiving device management information reading unit 28a, a terminal determination unit 28b, a route determination unit 28c, and a GPS determination unit 28d.

  The receiving device management information reading unit 28a reads the registered terminal information 26b, the registered route information 26c, and the registered GPS information 26d corresponding to the account input from the verification unit 24b of the account verifying unit 24 from the receiving device management information storage unit 26. Is. The registered terminal information 26b, registered route information 26c, and registered GPS information 26d read here are output to the terminal determination unit 28b, the route determination unit 28c, and the GPS determination unit 28d, respectively.

  The terminal determination unit 28b includes the device identification information indicated by the registered terminal information 26b read by the reception device management information reading unit 28a and the device identification information indicated by the terminal information input from the reception device information reception unit 27. Is a match. The terminal determination unit 28b may determine whether all of the identification information of the device indicated by the registered terminal information 26b matches all of the identification information of the device indicated by the terminal information. It may be determined whether the identification information of a predetermined number or more of the devices indicated by 26b matches the identification information of a predetermined number or more of the devices indicated by the terminal information. This predetermined number is assumed to be carried together with the content usage certificate receiving device 7 and the content reproduction device 9 when the content usage license reception device 7 and the content reproduction device 9 are taken out to other places and used illegally. It is desirable to set a number that is more than the number that is not possible, for example, 3 or more. In addition, if the determination is strictly performed, it is desirable to set the total number of devices indicated by the registered terminal information 26b.

  Further, when there are a plurality of registered terminal information 26b corresponding to the account, that is, there is registered terminal information 26b for a plurality of local area networks, the terminal determination unit 28b determines each registered terminal information 26b. The determination result determined here is output to the usage permit transmission means 29.

  In the case where terminal information is transmitted from the content usage certificate receiving device 7 at the same position where the content reproduction device 9 is permitted to reproduce the content, the local area at the time when the registered terminal information is transmitted. There is a high possibility that all or most of the devices connected to the content usage certificate receiving device 7 in the network are also connected. Further, at least one of the main recorder R and the content playback device 9 (9a, 9b, 9c,...) Is taken out by the user to a location different from the location where the content playback device 9 is permitted to play back the content. When the terminal information is transmitted from the permit receiving device 7, there is no other device connected to the content use permit receiving device 7 in the local area network at the time of transmitting the registered terminal information. There is a high possibility that only a few devices taken out together with the recorder R and the content reproduction device 9 for reproducing the content are connected. Therefore, the terminal determination unit 28b determines whether the device identification information indicated by the registered terminal information 26b matches the device identification information indicated by the terminal information, thereby requesting the content use permit. 9 can determine whether or not the content reproduction is permitted.

  The route determination unit 28 c is a relay device indicated by the identification information of the relay device 6 indicated by the registered route information 26 c read by the receiving device management information reading unit 28 a and the route information input from the receiving device information receiving unit 27. It is determined whether or not the identification information 6 matches. Note that the terminal determination unit 28b may determine whether the identification information of the two relay devices 6 indicated by the registered route information 26c matches the identification information of the two relay devices indicated by the terminal information. Then, it may be determined whether at least one matches. Further, when there are a plurality of registered route information 26c corresponding to the account, that is, there are a plurality of positions where the content reproduction apparatus 9 is permitted to reproduce the content, and there is registered route information 26c indicating each route, The route determination unit 28c determines each registered route information 26c. The determination result determined here is output to the usage permit transmission means 29.

  Here, when the communication data transmitted from the content usage certificate receiving device 7 is first relayed to the relay device 6a, the content usage is within a predetermined range in which a network relayed by the relay device 6a is constructed. It shows that the permit receiving device 7 is located. Therefore, the route determination unit 28c determines whether the identification information of the relay device 6 indicated by the registered route information 26c matches the identification information of the relay device 6 indicated by the terminal information, so that the content reproduction device 9 Thus, it is possible to determine whether or not there is a content reproduction device 9 that has requested the content use permit within a predetermined range including the position where the content reproduction is permitted.

  The GPS determination unit 28d has a position indicated by the GPS information input from the reception device information receiving means 27 within a predetermined range indicated by the registered GPS information 26d read by the reception device management information reading unit 28a. It is determined whether it is included. The determination result determined here is output to the usage permit transmission means 29. Note that there are a plurality of registered GPS information 26d corresponding to the account, that is, there are a plurality of positions where the content reproduction apparatus 9 is permitted to reproduce the content, and there is registered GPS information indicating the latitude and longitude information of each position. In some cases, the GPS determination unit 28d determines each registered GPS information 26d.

  The position indicated by the latitude and longitude acquired by GPS includes an error of several tens of meters, and the position where the content playback device 9 is permitted to play back the content is the location of the registered GPS information 26d. The content playback apparatus 9 that is included in the range added with the error indicated by the latitude and longitude information and requested the content usage permit added the error to the position indicated by the latitude and longitude information of the GPS information. Included in range. For this reason, the GPS determination unit 28d sets in advance an appropriate value as an allowable range of deviation from the position indicated by the latitude and longitude of the registered GPS information 26d, and whether the latitude and longitude values of the GPS information are included in this range. It is possible to determine whether or not there is a content reproduction device 9 that has requested a content usage permit within a predetermined range including a position where the content reproduction device 9 is permitted to reproduce the content.

  The usage permit transmission unit 29 generates a content usage permit based on the determination results determined by the terminal determination unit 28b, the route determination unit 28c, and the GPS determination unit 28d of the permission determination unit 28, and the content usage permit is generated. The data is transmitted to the receiving device 7. Here, the usage permit transmitting means 29 is the content playback device 9 that has requested the content usage permit at the position where the terminal determination section 28b, route determination section 28c, and GPS determination section 28d are all permitted to play back the content. When it is determined that there is a content use permit, a content use permit may be transmitted. For example, at least two or more of the terminal determination unit 28b, the route determination unit 28c, and the GPS determination unit 28d determine that there is a content reproduction device 9 that has requested a content usage permit at a position where reproduction of the content is permitted. In such a case, a content use permit may be transmitted. Further, the content use permit may be transmitted based on only one of the determination results of the terminal determination unit 28b, the route determination unit 28c, and the GPS determination unit 28d. The content usage permit generated here is transmitted to the content usage permit receiving device 7 via the communication transmitting / receiving means 21.

Here, the usage certificate transmission means 29 applies the electronic signature of the content usage certificate transmission device 2 to the identification information of the content reproduction device 9 that has requested the content usage license, and uses this electronic signature as the content usage permission. I decided to make it a proof. For example, a content usage permit is requested by the content playback device 9a, and f (ID _a ), which is identification information of the content playback device 9a, is notified from the content playback device 9a or the content usage license receiving device 7. In this case, the usage certificate transmitting means 29 generates SIGsp (f (ID _a )), which is obtained by applying the electronic signature of the content usage certificate transmitting device 2 to the identification information f (ID _a ) as the content usage license. To do. Here, SIGsp (x) indicates the electronic signature of the content usage certificate transmission device 2 applied to the communication data x.

  Then, the content playback device 9 that has received the content usage permit, the identification information obtained by decompressing the content usage permit with the verification key of the content usage permit transmitting device 2 notified in advance, and the content playback It is confirmed whether the identification information calculated based on the unique information of the device 9 matches. Then, only when they match, by allowing the content reproduction device 9 to reproduce the content or to continue the reproduction, the content usage permit transmission device 2 receives the valid content usage permit. It is possible to permit the reproduction of the content only when it is done.

  By configuring the content usage certificate transmission device 2 as described above, the content usage license transmission device 2 and the content usage license reception device 7 are located at a position where the content reproduction device 9 permits the content reproduction. The identification information of the devices connected by the local area network, the information indicating the communication data path between the content usage certificate receiving device 7 and the content usage license transmitting device 2, and the position of the content reproduction device 9 By storing the indicated information in the receiving device management information storage unit 26, it is possible to register a position where the reproduction of the content is permitted.

  In addition, the content usage permit transmission device 2 transmits the content usage permit to the content usage permit reception device 7 when the content playback device 9 is located at a position registered as a location where content playback is permitted. can do. Therefore, the user can reproduce the content by the content reproduction device 9 only at a position registered in advance, and the user can be prevented from using the content illegally elsewhere.

  In addition, the content usage permit transmission apparatus 2 can realize each means as each function program in a computer, and can also operate the content usage permit transmission program by combining the function programs. It is.

(Configuration of content usage certificate receiver)
Next, referring to FIG. 3 (refer to FIG. 1 as appropriate), the configuration of the content usage certificate receiving device 7 will be described. Here, a case where the content reproduction apparatus 9a requests a content usage permit will be described. FIG. 3 is a block diagram showing the configuration of the content use certificate receiving apparatus according to the first embodiment of the present invention. The content use certificate receiving device 7 includes a communication transmitting / receiving unit 71, a local area network transmitting / receiving unit 72, an encryption / digital signature processing unit 73, an account registration unit 74, an account storage unit 75, and a receiving device information transmission unit 76. A public key receiving unit 77, a terminal specific information acquiring unit 78, a geographic information receiving unit 79, a receiving device specific information reading unit 80, a receiving device specific information storage unit 81, and a usage permit acquiring unit 82. Prepare.

  The communication transmission / reception means 71 transmits / receives communication data via a network (Internet 5 or the like). For example, the communication transmission / reception means 71 transmits / receives communication data using a TCP / IP communication protocol.

  The local area network transmission / reception means 72 transmits / receives communication data via the local area network. For example, the local area network transmission / reception means 72 transmits / receives communication data using a TCP / IP communication protocol.

  The encryption / electronic signature processing means 73 applies an electronic signature to the communication data, and encrypts the communication data with a public key cryptosystem public key. Here, the encryption / electronic signature processing means 73 includes an electronic signature adding unit 73a and an encryption unit 73b.

  The electronic signature adding unit 73a applies an electronic signature of the content usage certificate receiving device 7 to the communication data. Here, the communication data to which the electronic signature is applied is transmitted to the content usage permit transmitting apparatus 2 via the communication transmitting / receiving means 71. Here, the electronic signature adding unit 73a applies an electronic signature to the account input from the account transmitting unit 76a of the receiving device information transmitting unit 76 described later, and adds the electronic signature, and the content usage permit transmitting device via the communication transmitting / receiving unit 71. 2 to send.

  The encryption unit 73b encrypts communication data with the public key received by the public key receiving means 77 described later. Here, the encryption unit 73b encrypts terminal information, route information, and GPS information (registered terminal information, registered route information, and registered GPS information) input from a receiving device information transmitting unit 76, which will be described later, and transmits and receives communication information. The content is transmitted to the content usage permit transmitting apparatus 2 via 71.

  The account registration unit 74 transmits an account issuance request to the content usage permit transmitting apparatus 2 based on an instruction for transmitting an account issuance request input by a user through an input unit (not shown), and transmits the content usage permit. An account issued by the device 2 is received. Here, the account registration unit 74 includes an account request transmission unit 74a and an account reception unit 74b.

  The account request transmission unit 74a transmits an account issuance request to the content usage permit transmission apparatus 2 based on an account issuance request transmission command input from a user by an input unit (not shown). Here, the account request transmission unit 74a transmits the electronic signature verification key of the content usage certificate receiving device 7 to the content usage license transmission device 2 via the communication transmitting / receiving means 71.

  The account receiving unit 74 b receives the account issued by the content usage certificate transmitting device 2 via the communication transmitting / receiving unit 71. Here, to the account received from the content usage certificate transmission device 2, the electronic signature of the content usage license transmission device 2 applied by the electronic signature adding unit 22a is added. This account is stored in the account storage means 75.

  The account storage means 75 stores an account issued by the content usage certificate transmission apparatus 2 and is a general storage means such as a semiconductor memory or a hard disk. The account stored in the account storage unit 75 is read by the account transmission unit 76a of the reception device information transmission unit 76.

  The receiving device information transmitting unit 76 transmits the account indicating the main recorder R, terminal information, route information, and GPS information (registered terminal information, registered route information, and registered GPS information) to the content usage permit transmitting device 2. To do. Here, the receiving device information transmitting unit 76 includes an account transmitting unit 76a, a terminal information transmitting unit 76b, a route information transmitting unit 76c, and a GPS information transmitting unit 76d.

  The account transmission unit 76a receives a request for a content usage permit received from the content reproduction device 9a via the local area network transmission / reception unit 72 or a content reproduction device 9 input by a user from an input unit (not shown). The account is read from the account storage means 75 and transmitted to the content usage permit transmitting apparatus 2 based on the registration instruction of the position where the reproduction of the content is permitted. Here, the account transmission unit 76a reads the account with the electronic signature of the content usage certificate transmission device 2 from the account storage unit 75 and outputs the account to the electronic signature adding unit 73a of the encryption / electronic signature processing unit 73. The electronic signature adding unit 73a further applies an electronic signature, and transmits the digital signature to the content usage permit transmitting apparatus 2 via the communication transmitting / receiving means 71.

  The terminal information transmission unit 76b is input from the terminal specific information acquisition means 78 and the receiving apparatus specific information reading means 80, which will be described later, and a device connected to the main recorder R via the local area network (see FIG. 3, based on the unique information of the content playback devices 9a, 9b, 9c,...), Information including identification information for identifying the main recorder R and devices connected to the main recorder R is generated. This is transmitted to the content usage permit transmission device 2.

  Here, when a request for a content use permit is input from the content reproduction device 9a to the reception device information transmission unit 76, this information becomes terminal information, and the reproduction of the content is permitted from the input unit (not shown). When a position registration command is input, this information is registered terminal information. The terminal information and the registered terminal information generated here are output to the encryption unit 73b, encrypted with the public key received by the public key receiving means described later, and then the content usage permit via the communication transmitting / receiving means 71. It is transmitted to the transmission device 2.

  Note that here, the terminal information transmission unit 76b converts the inherent information of the main recorder R and the device connected to the main recorder R with the internal conversion function f (x), the main recorder R and the connection It was decided to generate it as identification information for the device being used.

  The route information transmitting unit 76c generates information including identification information for identifying the main recorder R based on the unique information of the main recorder R input from the receiving device unique information reading unit 80 described later, and permits use of the content This is transmitted to the certificate transmitter 2. The information generated here is output to the encryption unit 73b, encrypted with the public key received by the public key receiving unit 77, which will be described later, and then transmitted to the content usage permit transmitting apparatus 2 via the communication transmitting / receiving unit 71. Sent. It is to be noted that the identification information is received by the content usage certificate transmitting apparatus 2 after the verification key of the electronic signature of the relay apparatus 6a, 6b,... On the route transmitting the Internet 5 is added. Therefore, these verification keys indicate the path of this identification information.

  The GPS information transmission unit 76d transmits the latitude and longitude information indicating the position of the content reproduction device 9 input from the geographic information receiving unit 79 described later to the content usage permit transmission device 2.

  Here, when a request for a content use permit is input from the content playback device 9a to the receiving device information transmitting means 76, the latitude and longitude information becomes GPS information. When a command for registering a position where reproduction is permitted is input, this information becomes registered GPS information. The GPS information and the registered GPS information are output to the encryption unit 73b, encrypted with the public key received by the public key receiving unit 77 described later, and then transmitted to the content usage permit transmitting apparatus 2 via the communication transmitting / receiving unit 71. Sent to.

  Note that the GPS information transmission unit 76d permits use of content as latitude and longitude information, which is input from the user by an input unit (not shown) and indicates the position where the content reproduction device 9 is permitted to reproduce the content as registered GPS information. It may be transmitted to the certificate transmitting device 2.

The public key receiving unit 77 receives the public key generated by the content usage certificate transmitting device 2 via the communication transmitting / receiving unit 71. Here, the public key receiving unit 77 outputs the received public key to the encryption unit 73b, and also instructs the terminal specific information acquisition unit 78 to acquire specific information of a device connected through the local area network. And a command for acquiring latitude and longitude information indicating the position of the content reproduction device 9 to the geographic information receiving means 79, and the unique information of the main recorder R to the receiving device unique information reading means 80. Command.

  Here, when a request for a content usage permit is input from the content reproduction device 9a to the receiving device information transmitting unit 76, the public key receiving unit 77 A command for acquiring latitude and longitude information indicating the position of the content reproduction device 9a is output, and the unique information of the main recorder R is read and output to the terminal information transmitting unit 76b to the receiving device unique information reading means 80. Command to output. Here, it is assumed that the content reproduction device 9 that has requested the content use permit includes means for acquiring latitude and longitude information using GPS.

  In addition, when a command for registering a position where reproduction of content is permitted is input from the input unit (not shown) to the reception device information transmission unit 76, the public key reception unit 77 instructs the geographic information reception unit 79. In addition, a command for acquiring latitude and longitude information indicating the position of the content reproduction device 9 provided with means for acquiring latitude and longitude information using GPS is output to the receiver specific information reading means 80. Then, a command for reading out the unique information of the main recorder R and outputting it to the terminal information transmitting unit 76b and the route information transmitting unit 76c is output.

  The terminal specific information acquisition unit 78 is based on a command input from the public key reception unit 77, and is connected to all devices connected via the local area network (in FIG. 3, the content reproduction devices 9a, 9b, 9c,...). The unique information is acquired. Here, the terminal specific information acquisition unit 78 transmits a request for specific information to all connected devices via the local area network transmission / reception unit 72, and based on this, the specific information transmitted from each device is transmitted. Received via the local area network transmission / reception means 72. The unique information acquired here is output to the terminal information transmitter 76b.

  The geographic information receiving unit 79 receives the latitude and longitude information of the position of the content reproduction device 9 connected via the local area network based on the command input from the public key receiving unit 77. The received latitude and longitude information is output to the GPS information transmitter 76d.

  When a request for a content use permit is input from the content reproduction device 9a to the reception device information transmission unit 76, the geographic information reception unit 79 adds a local area network transmission / reception unit 72 to the content reproduction device 9a. A request for information on latitude and longitude is transmitted via the terminal, and information on the latitude and longitude of the content reproduction apparatus 9a is acquired.

  In addition, when the registration instruction of the position where the reproduction of the content is permitted is input from the input unit (not shown) to the reception device information transmission unit 76, the geographic information reception unit 79 uses the GPS to calculate the latitude and longitude. A request for latitude and longitude information is transmitted to at least one content playback device 9 having means for acquiring the information, and the latitude and longitude information is received from the content playback device 9.

  The receiving device unique information reading means 80 reads the unique information of the main recorder R stored in advance in the receiving device unique information storage means 81 based on the command input from the public key receiving means 77. The unique information read here is output to the terminal information transmission unit 76b when a request for a content use permit is input from the content reproduction device 9a to the reception device information transmission unit 76, and the reception device information is received. When a command for registering a position at which content reproduction is permitted is input to the transmission unit 76 from an input unit (not shown), the command is output to the terminal information transmission unit 76b and the route information transmission unit 76c.

  The receiving device unique information storage unit 81 stores in advance the unique information of the main recorder R, and is a general storage unit such as a semiconductor memory or a hard disk. The unique information stored in the receiving device unique information storage unit 81 is read by the receiving device unique information reading unit 80.

  The usage permit obtaining unit 82 receives the content usage permit from the content usage permit transmitting device 2 via the communication transmitting / receiving unit 71, and sends the content usage permit to the content reproduction device 9a that has requested the content usage permit. This content use permit is transmitted via 72.

  By configuring the content usage certificate receiving device 7 as described above, the content usage certificate receiving device 7 can identify the identification information of the device connected in the local area network at the position where the content reproduction is permitted, and Information indicating the route between the content usage certificate receiving device 7 and the content usage license transmitting device 2 and latitude and longitude information indicating the position where the content reproduction device 9 is permitted to reproduce the content are used. It can be transmitted to the permit transmission device 2.

  Further, when the content usage permit receiving device 7 receives the request for the content usage permit from the content playback device 9a, the content playback device 9a requesting the terminal information, the path information, and the content usage permit is displayed. Can be notified to the content usage permit transmission apparatus 2. If the content playback device 9a is at a position already registered in the content usage permit transmission device 2 as a location where content playback is permitted, the content usage permit transmission device 2 obtains the content usage permit. It can be received and transmitted to the content reproduction device 9a. Therefore, the user can reproduce the content only at a position registered in advance, and the user can be prevented from using the content illegally in other places.

  Note that the receiving device information acquisition / transmission means described in the claims here is specific information (reproducing device ID and terminal ID) of the content reproducing devices 9a, 9b, 9c,... Connected via the local area network. ) Based on the unique information of the terminal specific information acquisition means 78, the account transmission unit 76a for transmitting the account (reception device ID) to the content usage permit transmission device 2, and the content reproduction devices 9a, 9b, 9c,. Information on the latitude and longitude of the position of the content reproduction device 9a is received from the terminal information transmission unit 76b that transmits the terminal information including the identification information calculated to the content usage permit transmission device 2 or the content reproduction device 9a. Transmitting the geographic information receiving means 79 and the account (receiving device ID) to the content usage certificate transmitting device 2 And account transmission unit 76a, which corresponds the GPS information transmitting unit 76d that transmits information of the latitude and longitude of the content reproducing apparatus 9a to the content license transmitting unit 2.

  In addition, the content usage certificate receiving device 7 can also realize each means as a function program in a computer, and can also operate the content usage license reception program by combining the function programs. It is.

  Here, it is assumed that the content reproduction devices 9a, 9b, 9c,... Are connected to the content usage certificate receiving device 7 through a local area network, but the content reproduction devices 9a, 9b, 9c,. Among them, the content playback device 9 that has requested the content usage permit corresponds to the content playback device described in the claims, and the content playback device 9 that has not requested the content usage permit here. This corresponds to the terminal described in the claims. Note that in the copyright management system S of the present invention that determines transmission of a content usage license using terminal information, the content usage license receiving device 7, at least one content playback device 9, and at least 1 The device (terminal) may not be able to reproduce the content as in the case of a hard disk recorder or a DVD recorder, for example, as long as the device (terminal) can transmit the unique information via the local area network. It may be a thing. The local area network may be wired or wireless, or may be both wired and wireless.

  In addition, the content playback device 9 periodically requests the content usage permit receiving device 7 not only when starting playback of the content but also after starting playback, and the content usage permit is received. If the content playback apparatus 9 is moved to a position where playback is not permitted by the user after the start of playback of the content, the playback of the content is stopped. Can be prevented from being illegally used.

[Operation of Copyright Management System (First Embodiment)]
Next, the operation of the copyright management system S according to the first embodiment of the present invention will be described with reference to FIGS. Here, first, the operation of the content use certificate transmitting apparatus will be described with reference to FIGS. Next, the operation of the content usage certificate receiving apparatus will be described with reference to FIGS.

[Account issue operation of content license sending device]
First, referring to FIG. 4 (refer to FIGS. 1 and 2 as appropriate), an operation (account issuing operation) in which the content usage certificate transmitting apparatus 2 issues an account to the content usage license receiving apparatus 7 will be described. FIG. 4 is a flowchart showing an operation in which the content usage certificate transmitting apparatus according to the first embodiment of the present invention issues an account to the content usage certificate receiving apparatus.

  The content usage certificate transmitter 2 receives the account issue request from the content usage certificate receiver 7 of the main recorder R via the communication transmitter / receiver 21 by the account issuing unit 23 (step S11). Here, the content usage certificate transmitting device 2 receives the electronic signature verification key of the content usage certificate receiving device 7 as an account issuance request.

  Then, the content usage certificate transmission apparatus 2 verifies the validity of the verification key received in step S11 by the account issuing unit 23 and verifies the user (step S12). If the verification key is not valid (No in step S12), the operation ends as it is. If the verification key is valid (Yes in step S12), the content usage certificate transmitter 2 issues an account for the main recorder R by the account issuing means 23 (step S13).

  Further, the content usage certificate transmission apparatus 2 writes the account issued in step S13 and the verification key received in step S11 in association with each other by the account issuing means 23 in the receiving apparatus management information storage means 26, and the encryption / electronic The electronic signature adding unit 22a of the signature processing unit 22 applies an electronic signature to the account issued in step S13, and transmits the digital signature to the content usage certificate receiving device 7 via the communication transmitting / receiving unit 21 (step S14). To do.

  Through the above operation, the content usage certificate transmitting device 2 issues an account based on the account issuance request from the content usage certificate receiving device 7 of the main recorder R, and the account is stored in the receiving device management information storage unit 26. The information is stored and transmitted to the content usage certificate receiving device 7.

[Terminal information / route information / GPS information registration operation of content usage permit transmitter]
Next, referring to FIG. 5 (refer to FIG. 1 and FIG. 2 as appropriate), the content usage permit transmission device 2 receives the registration terminal information, registration route information or registration GPS information received from the content usage permit reception device 7. The operation (terminal information / route information / GPS information registration operation) written in the device management information storage means 26 will be described. FIG. 5 is a flowchart showing an operation in which the content usage permit transmission apparatus according to the first embodiment of the present invention writes registered terminal information, registered route information, or registered GPS information in the receiving apparatus management information registering means.

  In the content usage certificate transmitting device 2, the digital signature of the content usage license receiving device 7 is given from the content usage license receiving device 7 by the receiving unit 24 a of the account verification unit 24 via the communication transmitting / receiving unit 21. An account is received (step S21). Then, the content usage permit transmission device 2 reads the verification key corresponding to the account received in step S21 from the reception device management information storage unit 26 by the verification unit 24b of the account verification unit 24 (step S22).

  Then, the content usage certificate transmission apparatus 2 verifies the electronic signature applied to the account received in step S21 by the verification unit 24b using the verification key read in step S22, and determines whether the account is valid. (Step S23). If the account is not valid (No in step S23), the operation is terminated. If the account is valid (Yes in step S23), the content use certificate transmitting apparatus 2 generates a public key by the key generation unit 22b of the encryption / electronic signature processing unit 22, and the electronic signature addition unit 22a. Thus, an electronic signature is applied to the public key and transmitted to the content usage certificate receiving device 7 via the communication transmitting / receiving means 21 (step S24).

  Then, the content usage permit transmission device 2 has received registration terminal information, registration route information or registration GPS information from the content usage permit reception device 7 within the predetermined time limit by the receiving device management information registration means 25. Is determined (step S25). The registered terminal information, registered route information, or registered GPS information is encrypted and is received by the receiving device management information registering unit 25 after being decrypted by the decrypting unit 22c of the encryption / electronic signature processing unit 22. . If it has not been received (No in step S25), the operation ends. When the content is received (Yes in step S25), the content usage permit transmitting apparatus 2 uses the receiving apparatus management information registering means 25 to store the registered terminal information, registered route information, or registered GPS in the receiving apparatus management information storing means 26. Information is written (step S26), and the operation is terminated.

  Through the above operation, the content usage certificate transmitting device 2 receives the registered terminal information, the registered route information, or the registered GPS information from the content usage certificate receiving device 7 and stores them in the receiving device management information storage unit 26.

[Content Usage License Sending Operation Based on Terminal Information and Route Information of Content Usage License Sending Device]
Next, referring to FIG. 6 (refer to FIG. 1 and FIG. 2 as appropriate), the content usage permit transmitting device 2 transmits the content usage permit to the content usage permit receiving device 7 based on the terminal information and the route information. The operation (content usage permit transmission operation based on terminal information and route information) will be described. FIG. 6 is a flowchart showing an operation in which the content usage permit transmission apparatus according to the first embodiment of the present invention transmits a content usage permit based on terminal information and route information.

  In the content usage certificate transmitting apparatus 2, the receiving unit 24a of the account verification unit 24 receives the account with the electronic signature from the content usage certificate receiving apparatus 7 via the communication transmitting / receiving unit 21 (step S31). Then, the content usage permit transmission device 2 reads the verification key corresponding to the account received in step S31 from the reception device management information storage unit 26 by the verification unit 24b of the account verification unit 24 (step S32).

  Then, the content usage permit transmission apparatus 2 determines whether the account received in step S31 is valid based on the verification key read in step S32 by the verification unit 24b (step S33). If the account is not valid (No in step S33), the operation is terminated as it is. If the account is valid (Yes in step S33), the content usage permit transmission device 2 generates a public key by the key generation unit 22b of the encryption / electronic signature processing unit 22, and the electronic signature addition unit 22a. Thus, an electronic signature is applied to the public key and transmitted to the content usage certificate receiving device 7 via the communication transmitting / receiving means 21 (step S34).

  Then, the content usage certificate transmitting device 2 determines whether the receiving device information receiving unit 27 has received the terminal information and the route information from the content usage certificate receiving device 7 within a predetermined time limit (step S35). . The terminal information and the path information are encrypted, and are decrypted by the decryption unit 22c of the encryption / digital signature processing unit 22 and then received by the reception device information reception unit 27. If it has not been received (No in step S35), the operation ends. If received (Yes in step S35), the content usage permit transmitter 2 receives the registration terminal stored in the receiver management information storage unit 26 by the receiver management information reading unit 28a of the permission determination unit 28. Information 26b and registered route information 26c are read (step S36).

  Then, the content usage certificate transmission apparatus 2 decrypts the encrypted terminal information and path information received in step S35 by the decryption unit 22c of the encryption / digital signature processing means 22, and the terminal information and path information. On the basis of the registered terminal information 26b and the registered route information 26c read in step S36, the terminal determining unit 28b and the route determining unit 28c of the permission determining unit 28 determine whether the terminal information and the route information are valid. Determination (step S37; permission determination step). In other words, the content usage permit transmission device 2 uses the terminal determination unit 28b of the permission determination unit 28 to identify the device identification information indicated by the registered terminal information 26b read in step S36 and the device indicated by the decrypted terminal information. The identification information of the relay device indicated by the registered route information 26c read in step S36 matches the identification information of the relay device indicated by the decoded route information. Determine whether.

  If it is determined not to be valid (No in step S37), the operation is terminated as it is. If it is determined to be valid (Yes in step S37), the content usage certificate transmission device 2 generates a content usage certificate by the usage certificate transmission means 29 (step S38). Then, the content usage certificate transmitter 2 transmits the content usage certificate to the content usage certificate receiver 7 via the communication transmitter / receiver 21 by the usage certificate transmitter 29 (step S39; Step), the operation ends.

  By the above operation, the content usage permit transmission device 2 receives the terminal information and the route information from the content usage permit reception device 7, and based on the terminal information and the route information, at the position where the reproduction of the content is permitted. It is possible to determine whether or not there is a content playback device 9 (9a) that plays back content, and to transmit a content usage permit only when the content playback device 9 (9a) is in an appropriate position.

[Content Usage License Transmission Operation Based on GPS Information of Content Usage License Transmission Device]
Next, referring to FIG. 7 (refer to FIG. 1 and FIG. 2 as appropriate), the content usage permit transmitting device 2 transmits the content usage permit to the content usage permit receiving device 7 based on the GPS information (GPS The content usage permit transmission operation based on information) will be described. FIG. 7 is a flowchart showing an operation in which the content usage permit transmission apparatus according to the first embodiment of the present invention transmits a content usage permit based on GPS information.

  The content usage permit transmission device 2 receives the electronic signature of the content usage permit reception device 7 from the content usage permit reception device 7 via the communication transmitting / receiving unit 21 by the receiving unit 24a of the account verification unit 24. The received account is received (step S41). Then, the content usage certificate transmission device 2 reads the verification key corresponding to the account received in step S41 from the reception device management information storage unit 26 by the verification unit 24b of the account verification unit 24 (step S42).

  Then, the content usage permit transmission apparatus 2 determines whether the account received in step S41 is valid based on the verification key read in step S42 by the verification unit 24b (step S43). If the account is not valid (No in step S43), the operation ends. If the account is valid (Yes in step S43), the content usage permit transmission device 2 generates a public key by the key generation unit 22b of the encryption / electronic signature processing unit 22, and the electronic signature addition unit 22a. Thus, an electronic signature is applied to the public key and transmitted to the content usage certificate receiving device 7 via the communication transmitting / receiving means 21 (step S44).

  Then, the content usage certificate transmitting device 2 determines whether the receiving device information receiving unit 27 has received GPS information from the content usage certificate receiving device 7 within a predetermined time limit (step S45). The GPS information is encrypted and is received by the receiving device information receiving means 27 after being decrypted by the decrypting unit 22c of the encryption / digital signature processing means 22. If it has not been received (No in step S45), the operation is terminated. When the content is received (Yes in step S45), the content usage permit transmitter 2 receives the registered GPS stored in the receiver management information storage unit 26 by the receiver management information reading unit 28a of the permission determination unit 28. Information 26d is read (step S46).

  Then, the content use certificate transmitting apparatus 2 decrypts the encrypted GPS information received in step S45 by the decryption unit 22c of the encryption / digital signature processing means 22, and reads the GPS information and the read information in step S46. Based on the issued registration GPS information 26d, the GPS determination unit 28d of the permission determination means 28 determines whether the GPS information is valid (step S47; permission determination step). That is, the content usage permit transmission device 2 is indicated by the decoded GPS information within the predetermined range of the position indicated by the registered GPS information 26d read in step S46 by the GPS determination unit 28d of the permission determination unit 28. It is determined whether the position to be included is included.

  If it is determined not to be valid (No in step S47), the operation is terminated as it is. If it is determined to be valid (Yes in step S47), the content usage certificate transmitting device 2 generates a content usage certificate by the usage certificate transmitting means 29 (step S48). Then, the content usage certificate transmitting device 2 transmits the content usage certificate to the content usage certificate receiving device 7 via the communication transmitting / receiving unit 21 by the usage certificate transmitting unit 29 (step S49; usage license transmission). Step), the operation ends.

  By the above operation, the content usage permit transmitting device 2 receives the GPS information from the content usage permit receiving device 7, and there is a content playback device 9 (9a) that plays back the content at a position where playback of the content is permitted. It is possible to transmit the content use permit only when it is in the proper position.

  In addition, here, the case where it is determined whether or not the content reproduction device 9 (9a) is in a position where the reproduction of the content is permitted based on the terminal information and the route information and the case where the determination based on the GPS information is performed are described. However, it may be determined based on any one of terminal information, route information, and GPS information, may be determined based on all, or may be determined based on other combinations. .

[Account registration operation for content license receiving device]
Next, referring to FIG. 8 (refer to FIG. 1 and FIG. 3 as appropriate), an operation (account registration operation) in which the content usage permit receiving device 7 requests and acquires an account from the content usage permit transmitting device 2 will be described. To do. FIG. 8 is a flowchart showing an operation for registering an account by the content use certificate receiving apparatus according to the first embodiment of the present invention.

  The content usage certificate receiving device 7 uses the account request transmitting unit 74a of the account registration unit 74 to transmit the verification key for the electronic signature of the content usage certificate receiving device 7 to be an account issuance request via the communication transmitting / receiving unit 71. It transmits to the content usage permit transmission apparatus 2 (step S51).

  Then, the content usage certificate receiving device 7 determines whether or not the account receiving unit 74b has received an account from the content usage certificate transmitting device 2 within a predetermined time limit (step S52). (No in step S52), the operation is terminated as it is. If received (Yes in step S52), the content usage certificate receiver 7 writes the account received in step S52 into the account storage unit 75 by the account receiving unit 74b of the account registration unit 74 (step S53). ), The operation ends. Through the above operation, the content usage certificate receiving device 7 can receive an account by transmitting an account issuance request to the content usage certificate transmitting device 2.

[Terminal Information / Route Information / GPS Information Notification Operation of Content Usage License Receiving Device]
Next, referring to FIG. 9 (refer to FIGS. 1 and 3 as appropriate), the content usage permit receiving device 7 notifies the content usage permit transmitting device 2 of registered terminal information, registered route information, or registered GPS information. (Terminal information / route information / GPS information notification operation) will be described. FIG. 9 is a flowchart showing an operation in which the content usage certificate receiving apparatus according to the first embodiment of the present invention notifies the content usage certificate transmitting apparatus of registered terminal information, registered route information, or registered GPS information. .

  The content use certificate receiving device 7 stores the account storage by the account transmitting unit 76a of the receiving device information transmitting unit 76 based on the registration command of the position where the reproduction of the content is permitted, which is input by the user from the input unit (not shown). The account is read from the means 75 (step S61). Then, the content usage certificate receiving device 7 applies an electronic signature to the account read in step S61 by the electronic signature adding unit 73a of the encryption / electronic signature processing unit 73, and the content usage certificate is transmitted via the communication transmitting / receiving unit 71. It transmits to the transmitter 2 (step S62).

  Then, the content usage certificate receiving device 7 determines whether the public key receiving unit 77 has received the public key from the content usage license transmitting device 2 via the communication transmitting / receiving unit 71 within a predetermined time limit ( In step S63), if not received (No in step S63), the operation is terminated as it is. When the registration terminal information is notified when it is received (Yes in step S63), the content usage certificate receiving device 7 uses the terminal-specific information acquisition unit 78 to connect all of the terminals connected via the local area network. The unique information of the content playback device 9 is acquired, and the unique information of the main recorder R is read from the receiving device specific information storage unit 81 by the terminal specific information acquisition unit 78. When notifying the registered route information, the content usage certificate receiving device 7 reads the unique information of the main recorder R from the receiving device unique information storage unit 81 by the receiving device unique information reading unit 80. Further, when notifying the registered GPS information, the content use license receiving device 7 receives the latitude and longitude information of the position of the content playback device 9 from the content playback device 9 by the geographic information receiving means 79. (Step S64).

  Then, when notifying the registered terminal information, the content use certificate receiving device 7 receives the content reproducing devices 9a, 9b, 9c,... Acquired in step S64 by the terminal information transmitting unit 76b of the receiving device information transmitting means 76. Registered terminal information is generated based on the unique information of the main recorder R. Then, the content usage certificate receiver 7 encrypts the registered terminal information with the public key received in step S 63 by the encryption unit 73 b of the encryption / digital signature processing unit 73, and transmits the content via the communication transmission / reception unit 71. The license is transmitted to the usage certificate transmitter 2.

  When notifying the registered route information, the route information transmitting unit 76c of the receiving device information transmitting unit 76 generates the identification information of the main recorder R based on the unique information of the main recorder R acquired in step S64. Then, the content usage certificate receiving device 7 encrypts this identification information with the public key received in step S63 by the encryption unit 73b, and transmits it to the content usage certificate transmitting device 2 via the communication transmitting / receiving means 71. . The identification information is added with the verification key of the electronic signature of the relay device 6a, 6b,... When transmitted to the content usage permit transmitting device 2, so that the content usage permit receiving device 7 The registered route information can be notified by transmitting the identification information to the content use certificate transmitting device 2.

  Furthermore, when notifying the registered GPS information, the GPS information transmitting unit 76d of the receiving device information transmitting means 76 generates the registered GPS information based on the latitude and longitude information of the position of the content reproduction device 9 acquired in step S64. To do. Then, the content usage certificate receiving device 7 encrypts this GPS information with the public key received in step S63 by the encryption unit 73b, and transmits it to the content usage license transmitting device 2 via the communication transmitting / receiving means 71. (Step S65).

  Through the above operation, the content usage certificate receiving device 7 can notify the content usage license transmitting device 2 of registered terminal information, registered route information, or registered GPS information.

[Content Usage License Acquisition Operation Based on Terminal Information and Route Information of Content Usage License Receiving Device]
Next, referring to FIG. 10 (refer to FIGS. 1 and 3 as appropriate), the content usage certificate receiving device 7 notifies the content usage license transmitting device 2 of the terminal information and the route information, and the content usage license is obtained. The operation to acquire (content usage permit acquisition operation based on terminal information and route information) will be described. FIG. 10 shows an operation in which the content usage certificate receiving device according to the first embodiment of the present invention notifies the content usage license transmitting device of the terminal information and the route information and acquires the content usage license. It is a flowchart.

  Based on the request for the content usage certificate received from the content reproduction device 9a via the local area network transmission / reception unit 72, the content usage certificate reception device 7 stores the account storage by the account transmission unit 76a of the reception device information transmission unit 76. The account is read from the means 75 (step S71). Then, the content usage certificate receiving device 7 applies the electronic signature to the account read in step S 71 by the electronic signature adding unit 73 a of the encryption / electronic signature processing unit 73, and the content usage certificate via the communication transmitting / receiving unit 71. The data is transmitted to the transmission device 2 (step S72).

  Then, the content usage certificate receiving device 7 determines whether the public key receiving unit 77 has received the public key from the content usage license transmitting device 2 via the communication transmitting / receiving unit 71 within a predetermined time limit ( If it is not received (step S73), the operation is terminated as it is (No in step S73). If received (Yes in step S73), the content usage certificate receiving device 7 uses the terminal specific information acquisition unit 78 to acquire the specific information of all the content playback devices 9 connected via the local area network. At the same time, the receiver specific information reading means 80 reads the specific information of the main recorder R from the receiver specific information storage means 81 (step S74).

  Then, the content usage certificate receiving device 7 is based on the content reproducing devices 9a, 9b, 9c,... And the unique information of the main recorder R acquired in step S74 by the terminal information transmitting unit 76b of the receiving device information transmitting means 76. Generate terminal information. Then, the content usage certificate receiving device 7 encrypts this terminal information with the public key received in step S 73 by the encryption unit 73 b of the encryption / digital signature processing unit 73, and uses the content via the communication transmitting / receiving unit 71. It transmits to the permit transmission apparatus 2 (step S75). It is to be noted that since the verification information of the electronic signatures of the relay devices 6a, 6b,... Is added to the terminal information when transmitted to the content usage permit transmitting device 2, the content usage permit receiving device 7 Terminal information and route information can be notified to the usage permit transmission device 2.

(License acquisition step)
Then, the content usage certificate receiving device 7 determines whether the content usage license is received from the content usage license transmitting device 2 by the usage certificate acquiring unit 82 via the communication transmitting / receiving unit 71 within a predetermined time limit. If it is judged (step S76) and not received (No in step S76), the operation is terminated as it is. If received (Yes in step S76), the content usage certificate receiving device 7 uses the usage certificate acquisition unit 82 to reproduce the content requested for the content usage certificate via the local area network transmission / reception unit 72. The content usage permit received in step S76 is transmitted to the apparatus 9a (step S77), and the operation is terminated.

  With the above operation, the content usage certificate receiving device 7 can notify the content usage certificate transmitting device 2 of the terminal information and the route information. The content usage certificate receiving device 7 can receive the content usage certificate from the content usage license transmitting device 2 and transmit it to the content reproduction device 9a that has requested the content usage license.

[Content Usage License Acquisition Operation Based on GPS Information of Content Usage License Receiving Device]
Next, referring to FIG. 11 (refer to FIGS. 1 and 3 as appropriate), the content usage certificate receiving device 7 notifies the content usage license transmitting device 2 of the GPS information and acquires the content usage license. (Content usage permit acquisition operation based on GPS information) will be described. FIG. 11 is a flowchart showing an operation in which the content usage certificate receiving device according to the first embodiment of the present invention notifies the content usage license transmitting device of GPS information and acquires the content usage license. .

  Based on the request for the content usage certificate received from the content reproduction device 9a via the local area network transmission / reception unit 72, the content usage certificate reception device 7 stores the account storage by the account transmission unit 76a of the reception device information transmission unit 76. The account is read from the means 75 (step S81). Then, the content usage certificate receiving device 7 applies an electronic signature to the account read in step S81 by the electronic signature adding unit 73a of the encryption / electronic signature processing unit 73, and the content usage certificate is transmitted via the communication transmitting / receiving unit 71. The data is transmitted to the transmission device 2 (step S82).

  Then, the content usage certificate receiving device 7 determines whether the public key receiving unit 77 has received the public key from the content usage license transmitting device 2 via the communication transmitting / receiving unit 71 within a predetermined time limit ( In step S83), if not received (No in step S83), the operation is terminated as it is. If the content is received (Yes in step S83), the content usage permit receiving device 7 uses the geographic information receiving means 79 to receive the latitude and longitude information indicating the position of the content playback device 9a from the content playback device 9a. Is acquired (step S84).

  Then, the content usage certificate receiving device 7 generates GPS information based on the latitude and longitude information of the position of the content reproduction device 9a acquired in step S84 by the terminal information transmitting unit 76b of the receiving device information transmitting means 76. . Then, the content usage certificate receiving device 7 encrypts the GPS information with the public key received in step S83 by the encryption unit 73b of the encryption / electronic signature processing unit 73, and uses the content via the communication transmitting / receiving unit 71. It transmits to the permit transmission apparatus 2 (step S85).

(License acquisition step)
Then, the content usage certificate receiving device 7 determines whether the content usage license is received from the content usage license transmitting device 2 by the usage certificate acquiring unit 82 via the communication transmitting / receiving unit 71 within a predetermined time limit. If it is determined (step S86) and it is not received (No in step S86), the operation is terminated as it is. If received (Yes in step S86), the content usage certificate receiving device 7 uses the usage certificate acquisition unit 82 to reproduce the content requested for the content usage certificate via the local area network transmission / reception unit 72. The content usage permit received in step S86 is transmitted to the apparatus 9a (step S87), and the operation is terminated.

  With the above operation, the content usage certificate receiving device 7 notifies the content usage license transmitting device 2 of the GPS information, receives the content usage license, and transmits it to the content reproduction device 9a that requested the content usage license. can do.

[Configuration of Copyright Management System (Second Embodiment)]
Next, the configuration of the copyright management system SA which is the second embodiment of the present invention will be described with reference to FIG. FIG. 12 is a block diagram showing a configuration of a copyright management system according to the second embodiment of the present invention. As shown in FIG. 12, the copyright management system SA is a device on the content user (purchaser) side via the Internet 5 from the content server 1 on the content provider side and the content usage permit transmission device 2A. A system for transmitting content to a main recorder RA, which is a mobile terminal M, which distributes a content usage permit permitting the reproduction of the content via the Internet 5 and the base station 6A, to a mobile terminal M that is a user side device. It is.

  The copyright management system SA includes a content usage certificate transmission device 2A instead of the content usage license transmission device 2 of the copyright management system S (see FIG. 1), a base station 6A instead of the relay device 6a, and a main recorder. A main recorder RA is provided in place of R, and a portable terminal M is provided in place of the content reproduction device 9. Since the configuration other than the content usage permit transmission device 2A, the base station 6A, the main recorder RA, and the portable terminal M in the copyright management system SA is the same as that shown in FIG. Description is omitted.

  The content usage permit transmission device 2A manages the content usage permit of the content held in the content server 1. That is, the content usage certificate transmitting device 2A reproduces the content registered by the content usage certificate receiving means 7A (see FIG. 15), which will be described later, in response to a request for the content usage certificate from the portable terminal M, which will be described later. Is determined based on the information on the position where the user is permitted and the information on the position of the portable terminal M, and a content usage permit is issued.

  The base station 6A transmits and receives communication data to and from the mobile terminal M in an area within a predetermined range via radio waves and relays the communication data to another network.

  The main recorder RA includes a content storage device C and a usage location registration device 10A, stores the content desired by the user in the content storage device C acquired from the content server 1, and further stores the content in the portable terminal M. The position where reproduction is permitted is registered in the content usage certificate transmitting apparatus 2A. The content storage device C is the same as that shown in FIG.

  The usage position registration device 10A registers the location where the portable terminal M is permitted to reproduce content in the content usage certificate transmission device 2A.

  The portable terminal M copies the content stored in the content storage device C, acquires the content usage permit from the content usage permit transmission device 2A, and reproduces the content. This content reproduction apparatus is, for example, a mobile phone. The portable terminal M is connected via a local area network when registering a position where the reproduction of the content is permitted by the use position registration device 10A and when copying the content stored in the content storage device C. Then, the connection with the use location registration device 10A is disconnected, and the content use permit is acquired from the content use permit transmitting device 2A to reproduce the content.

  Hereinafter, in the copyright management system SA, the content usage permit transmission device 2A, the usage location registration device 10A, and the portable terminal M will be described in detail.

(Configuration of content usage permit transmitter)
First, with reference to FIG. 13 (refer to FIG. 12 as appropriate), the configuration of the content usage permit transmitting apparatus 2A will be described. FIG. 13 is a block diagram showing the configuration of the content usage certificate transmission apparatus according to the second embodiment of the present invention. It should be noted that the content usage certificate transmitting device 2A replaces the encryption / electronic signature processing unit 22A of the content usage certificate transmission device 2 (see FIG. 2) with a receiving device management information registration unit 25. Instead of receiving device management information registration means 25A, receiving device management information storage means 26A instead of receiving device management information storage means 26, and receiving device information receiving means 27A instead of receiving device information receiving means 27. In place of the means 28, a permission determining means 28A is provided, and in place of the usage permit transmitting means 29, a usage permit transmitting means 29A is provided. Cryptographic / digital signature processing means 22A, receiving apparatus management information registering means 25A, receiving apparatus management information storing means 26A, receiving apparatus information receiving means 27A, permission determining means 28A, and usage permit transmitting means 29A of content usage certificate transmitting apparatus 2A Since the configuration other than that is the same as that shown in FIG.

  The encryption / electronic signature processing means 22A adds an electronic signature to communication data, generates a secret key, and decrypts the communication data encrypted with the secret key using the secret key. Here, the encryption / electronic signature processing means 22A includes an electronic signature addition unit 22Aa, a key generation unit 22Ab, and a decryption unit 22Ac.

  The electronic signature adding unit 22Aa adds the electronic signature of the content usage certificate transmitting apparatus 2 to the communication data. Here, the communication data to which the electronic signature is applied is transmitted to the use location registration apparatus 10A via the communication transmitting / receiving means 21. Here, the electronic signature adding unit 22a applies an electronic signature to the account input from the account issuing unit 23 and the numerical information for Diffie-Hellman key sharing generated by the key generation unit 22Ab described later. Then, the information is transmitted to the use location registration apparatus 10A via the communication transmitting / receiving means 21. The digital signature adding unit 22Aa is different from the digital signature adding unit 22a (see FIG. 2) of the content usage certificate transmission apparatus 2 in that the input communication data is replaced with a public key and is a value for Diffie-Hellman key sharing. The function is the same as the information.

  The key generation unit 22Ab generates a numerical value for Diffie-Hellman key sharing based on a command from the verification unit 24b of the account verification unit 24, and exchanges it with the use location registration apparatus 10A. The numerical value for Diffie-Hellman key sharing generated here is output to the electronic signature adding unit 22Aa and transmitted to the use location registration apparatus 10A via the communication transmitting / receiving means 21. Also, secret key information, which is information necessary for generating a secret key, is written in the receiving apparatus management information storage unit 26A in association with the account verified by the account verification unit 24.

  The decryption unit 22Ac receives the communication data encrypted with the secret key from the use location registration apparatus 10A via the communication transmitting / receiving means 21, and the secret key information 26Ae read out from the receiving apparatus management information storage means 26A. Is decrypted with the secret key generated based on the above. Here, the decryption unit 22Ac receives and decrypts the encrypted registration GPS information from the use position registration device 10A via the communication transmission / reception means 21, and decrypts the encrypted GPS information from the mobile terminal M. It receives and decodes via the communication transmission / reception means 21. The decrypted registered GPS information is output to the receiving apparatus management information registering means 25A, and the GPS information is output to the receiving apparatus information receiving means 27A.

  The receiving device management information registration unit 25A writes the registered GPS information input from the decrypting unit 22Ac in the receiving device management information storage unit 26A in association with the account verified by the account verification unit 24. Note that the receiving device management information registration unit 25A receives communication data input as compared with the receiving device management information registration unit 25 (see FIG. 2) of the content usage permit transmission device 2 as registered terminal information, registered route information, and registered GPS. The function is the same only by using the registered GPS information from the information.

  The receiving device management information storage means 26A stores receiving device management information in which the registered GPS information 26d and the secret key information 26Ae are associated with the account information 26a, and is a general storage means such as a semiconductor memory or a hard disk. is there. The account information 26a is written by the account issuing means 23, and associates the account with the verification key of the use location registration apparatus 10A of the main recorder RA corresponding to this account. The registered GPS information 26d is written by the receiving device management information registering means 25A. Furthermore, the secret key information 26Ae is written by the key generation unit 22Ab. The account information 26a and the registered GPS information 26d are substantially the same as the account information 26a and the registered GPS information 26d stored in the receiving device management information storage means 26 (see FIG. 2) of the content usage permit transmitting device 2. It is.

  The account information 26a and the registered GPS information 26d are referred to when permission determination means 28A described later determines whether or not the portable terminal M is permitted to reproduce content. The private key information 26Ae is referred to when the communication data is decrypted by the decryption unit 22Ac, and is read when the content usage permit is transmitted to the portable terminal M by the usage permit transmitting means 29A described later.

The secret key information 26Ae is information necessary for generating a secret key. The prime number p generated by the Diffie-Hellman key exchange generated by the key generation unit 22Ab, the generation source g, and the content use permit are generated. This is information including secret information t ′ of the transmitting apparatus 2A and secret key generation information g ^{f (IDx)} mod p generated by a key generation unit 103Ac (see FIG. 14) of the use location registration apparatus 10A described later. IDx is unique information of the mobile terminal M, and f (x) is an internal conversion function of the use location registration device 10A and the mobile terminal M.

  The receiving device information receiving unit 27A receives GPS information corresponding to the account verified by the account verifying unit 24 and input from the decoding unit 22Ac. The GPS information received here is output to the GPS determination unit 28Ad of the permission determination means 28A. Note that the receiving device information receiving means 27A converts the communication data input compared to the receiving device information receiving means 27 (see FIG. 2) of the content usage permit transmitting device 2 from the terminal information, the route information and the GPS information to the GPS information. Just the function is the same.

  The permission determination unit 28A determines whether there is a mobile terminal M that has requested the content use permit at the position indicated by the registered GPS information, based on the GPS information received by the reception device information reception unit 27A. Here, the permission determination unit 28A includes a reception device management information reading unit 28Aa and a GPS determination unit 28Ad.

  The reception device management information reading unit 28Aa reads the registered GPS information 26Ad corresponding to the account input from the verification unit 24b of the account verification unit 24 from the reception device management information storage unit 26A. The registered GPS information 26Ad read here is output to the GPS determination unit 28Ad. Note that the receiving device management information reading unit 28Aa receives the communication data input as compared with the receiving device management information reading unit 28a (see FIG. 2) of the content usage certificate transmitting device 2 as registered terminal information, registered route information, and registered GPS. The function is the same only by using the registered GPS information from the information.

  The GPS determination unit 28Ad has a position indicated by the GPS information input from the receiving device information receiving unit 27A within a predetermined range indicated by the registered GPS information 26Ad read by the receiving device management information reading unit 28Aa. It is determined whether it is included. The determination result determined here is output to the usage permit transmitting means 29A. Note that the GPS determination unit 28Ad simply sets the communication data input compared to the GPS determination unit 28d (see FIG. 2) of the content usage permit transmission device 2 as GPS information from the terminal information, route information, and GPS information. The function is the same.

  The usage permit transmission unit 29A generates a content usage permit based on the determination result determined by the GPS determination unit 28Ad of the permission determination unit 28A and transmits it to the mobile terminal M.

Here, the usage permit transmission means 29A reads the secret key generation information g ^{f (IDx)} mod p included in the secret key information 26Ae from the receiving device management information storage means 26A, and this secret key generation information g ^{f ( IDx)} mod p is ^digitally signed by the content usage certificate transmitting apparatus 2A, and this digital signature SIGsp ^{(gf (IDx)} mod p) is used as the content usage license.

  In addition, the content usage permit transmission apparatus 2A can also realize each unit as each functional program in a computer, and can also function as a content usage permit transmission program by combining the functional programs. It is.

(Configuration of usage location registration device)
Next, referring to FIG. 14 (see FIG. 12 as appropriate), the configuration of the use location registration apparatus 10A will be described. FIG. 14 is a block diagram showing a configuration of a use location registration apparatus according to the second embodiment of the present invention. The use location registration device 10A includes a communication transmission / reception unit 101A, a local area network transmission / reception unit 102A, an encryption / digital signature processing unit 103A, an account registration unit 104A, an account storage unit 105A, a reception device information transmission unit 106A, It includes geographic information receiving means 109A, account transmitting means 111A, unique information receiving means 112A, and secret key transmitting means 113A.

  The communication transmission / reception means 101A transmits / receives communication data via a network (Internet 5 or the like). The local area network transmission / reception means 102A transmits / receives communication data via the local area network. The communication transmission / reception means 101A and the local area network transmission / reception means 102A have the same functions as the communication transmission / reception means 71 and the local area network transmission / reception means 72 (see FIG. 3) of the content usage certificate reception device 7.

  The encryption / digital signature processing means 103A applies a digital signature to the communication data, and generates a secret key to encrypt the communication data. Here, the encryption / electronic signature processing means 103A includes an electronic signature adding unit 103Aa, an encryption unit 103Ab, and a key generation unit 103Ac. The electronic signature adding unit 103Aa is the same as the electronic signature adding unit 73a (see FIG. 3) of the content usage certificate receiving device 7, and thus the description thereof is omitted.

  The encryption unit 103Ab encrypts communication data with a secret key generated by a key generation unit 103Ac described later. Here, the encryption unit 103Ab encrypts registered GPS information input from the receiving device information transmitting unit 106A described later, and transmits it to the content usage permit transmitting device 2A via the communication transmitting / receiving unit 101A.

The key generation unit 103Ac generates a numerical value for Diffie-Hellman key sharing and exchanges it with the content usage permit transmission device 2A. Here, the key generation unit 103Ac is the prime number p used in the Diffie-Hellman key exchange, the generation source g, and the portable information input from the unique information receiving unit 112A. Based on the unique information IDx of the terminal M, secret key generation information ^{gf (IDx)} mod p is generated, and an electronic signature is added and transmitted to the content usage permit transmitting apparatus 2A. Also, the private key generation information g ^{t ′} mod p is received from the content usage certificate transmitting apparatus 2A, and a private key is generated. The secret key generated here is output to the encryption unit 103Ab and the secret key transmission unit 113A.

  The account registration means 104A is for registering an account in the content usage permit transmitting apparatus 2A. The account registration unit 104A includes an account request transmission unit 104Aa and an account reception unit 104Ab. The account registration unit 104A is the same as the account registration unit 74 (see FIG. 3) of the content usage certificate receiving device 7, and thus description thereof is omitted.

  The account storage unit 105A stores an account issued by the content usage certificate transmission apparatus 2A, and is a general storage unit such as a semiconductor memory or a hard disk. The account stored in the account storage unit 105A is read by the account transmission unit 106a of the reception device information transmission unit 106A and the account transmission unit 111A.

  The receiving device information transmitting means 106A transmits the account indicating the main recorder RA and the registered GPS information to the content usage permit transmitting device 2A. Here, the receiving device information transmitting unit 106A includes an account transmitting unit 106Aa and a GPS information transmitting unit 106Ad.

  The account transmission unit 106Aa reads the account from the account storage unit 105A based on a registration instruction of a position where the portable terminal M is permitted to reproduce the content, which is input by the user from an input unit (not shown), and permits use of the content This is transmitted to the certificate transmitter 2A.

  The GPS information transmitting unit 106Ad transmits the latitude and longitude information indicating the position of the mobile terminal M, which is input from the geographical information receiving unit 109A described later, to the content usage permit transmitting apparatus 2A as registered GPS information. .

  The geographic information receiving means 109A receives the latitude and longitude information of the position of the mobile terminal M connected via the local area network. The latitude and longitude information received here is output to the GPS information transmitter 106Ad.

  The account transmission unit 111 </ b> A reads an account from the account storage unit 105 </ b> A based on an account request from the mobile terminal M and transmits the account to the mobile terminal M. The unique information receiving unit 112 </ b> A transmits a request for unique information of the mobile terminal M to the mobile terminal M and receives the specific information from the mobile terminal M. The unique information received here is input to the key generation unit 103Ac of the encryption / digital signature processing means 103A.

  The secret key transmission unit 113A transmits the secret key generated by the key generation unit 103Ac of the encryption / digital signature processing unit 103A to the portable terminal M.

  By configuring the use location registration device 10A as described above, the use location registration device 10A registers an account in the content use permit transmission device 2A, transmits this account to the mobile terminal M, and also uses the mobile terminal M. Information on the latitude and longitude of the position of the mobile terminal M received from can be transmitted as registered GPS information to the content usage permit transmitting apparatus 2A. Furthermore, the usage location registration device 10A can generate a secret key shared with the content usage certificate transmission device 2A and transmit it to the portable terminal M.

(Configuration of mobile terminal M)
Next, the configuration of the mobile terminal M will be described with reference to FIG. 15 (refer to FIG. 12 as appropriate). FIG. 15 is a block diagram showing the configuration of the mobile terminal according to the second embodiment of the present invention. The portable terminal M includes communication transmission / reception means 11A, local area network transmission / reception means 12A, content usage permit reception means 7A, and content reproduction means 9A.

  The communication transmitting / receiving means 11A transmits / receives communication data via a network (Internet 5 or the like). For example, the communication transmitting / receiving unit 11A transmits / receives communication data using a TCP / IP communication protocol.

  The local area network transmission / reception means 12A performs transmission / reception of communication data via the local area network. For example, the local area network transmission / reception means 12A performs transmission / reception of communication data using a TCP / IP communication protocol.

  The content usage certificate receiving means (content usage license receiving device) 7A transmits the GPS information indicating the position of the mobile terminal M to the content usage license transmitting device 2A and receives the content usage license. The content usage permit received here is output to the content reproduction means 9A. The content usage certificate receiving unit 7A includes an encryption / digital signature processing unit 73A, an account storage unit 75A, a receiving device information transmission unit 76A, a unique information storage unit 81A, a usage certificate acquisition unit 82A, an account A receiving unit 83A, a unique information transmitting unit 84A, a secret key receiving unit 85A, and a secret key storage unit 86A are provided.

  The encryption / electronic signature processing means 73A applies an electronic signature to the communication data, and encrypts the communication data with a secret key. Here, the encryption / electronic signature processing means 73 includes an electronic signature adding unit 73Aa and an encryption unit 73b.

  The electronic signature adding unit 73Aa applies the electronic signature of the content usage certificate receiving device 7 to communication data and adds it. Here, the communication data to which the electronic signature has been applied is transmitted to the content usage permit transmitting apparatus 2A via the communication transmitting / receiving means 11A together with GPS information encrypted by the encryption unit 73Ab described later. Here, the electronic signature adding unit 73Aa applies an electronic signature to the account input from the account transmitting unit 76Aa of the receiving device information transmitting unit 76A described later.

  The encryption unit 73Ab encrypts communication data with a secret key stored in a secret key storage unit 86A described later. Here, the encryption unit 73Ab encrypts GPS information input from the receiving device information transmitting unit 76A described later, and uses the content via the communication transmitting / receiving unit 11A together with the account transmitted by the receiving device information transmitting unit 76A. It transmits to the permit transmission apparatus 2.

  The account storage unit 75A stores an account registered by the use location registration apparatus 10A, and is a general storage unit such as a semiconductor memory or a hard disk. The account stored in the account storage unit 75A is read by the account transmission unit 76Aa of the reception device information transmission unit 76A. This account is written by account receiving means 83A described later.

  The receiving device information transmitting means (receiving device information acquiring / transmitting means) 76A transmits the account registered by the use position registration device 10A and the GPS information to the content usage permit transmitting device 2A. Here, the receiving device information transmitting unit 76A includes an account transmitting unit 76Aa and a GPS information transmitting unit 76Ad.

  The account transmission unit 76Aa reads the account from the account storage unit 75A based on the request for the content usage certificate received from the content operation unit 92A of the content reproduction unit 9A described later, and transmits the account to the content usage certificate transmission device 2A. Is. Here, the account transmission unit 76Aa reads the account with the electronic signature of the content usage certificate transmission device 2A from the account storage unit 75A, outputs the account to the electronic signature adding unit 73Aa, adds the electronic signature, and encrypts it. The information is transmitted to the content usage permit transmitting apparatus 2A through the communication transmitting / receiving means 71 together with the GPS information encrypted by the converting unit 73Ab.

  The GPS information transmission unit 76Ad transmits the latitude and longitude information indicating the position of the mobile terminal M, which is input from the GPS processing unit 91A of the mobile terminal M described later, as GPS information to the content usage permit transmission device 2A. Is. This GPS information is output to the encryption unit 73Ab, encrypted, and transmitted to the content usage permit transmission device 2A together with the account transmitted from the account transmission unit 76Aa via the communication transmission / reception means 11A.

  The unique information storage unit 81A stores the unique information of the mobile terminal M in advance, and is a general storage unit such as a semiconductor memory or a hard disk. The unique information stored in the unique information storage unit 81A is read by the unique information transmission unit 84A described later and the content operation unit 92A of the content reproduction unit 9A.

  The usage permit obtaining unit 82A receives the content usage permit from the content usage permit transmitting device 2A via the communication transmitting / receiving unit 11A. The content usage permit received here is output to the content operation unit 92A of the content reproduction unit 9A that has requested the content usage permit.

  The account receiving unit 83A receives the account registered by the use location registration apparatus 10A via the local area network transmitting / receiving unit 12A. Here, the account receiving unit 83A transmits an account request signal to the use location registration apparatus 10A and receives an account from the use location registration apparatus 10A.

  The unique information transmission unit 84A transmits the unique information of the mobile terminal M stored in the unique information storage unit 81A to the use location registration apparatus 10A via the local area network transmission / reception unit 12A. Here, the unique information transmitting unit 84A receives the unique information request from the use location registration device 10A and transmits the unique information to the use location registration device 10A.

  The secret key receiving means 85A receives the secret key generated by the use location registration apparatus 10A via the local area network transmission / reception means 12A. The secret key received here is stored in the secret key storage means 86A.

  The secret key storage unit 86A stores a secret key generated by the use location registration apparatus 10A, and is a general storage unit such as a semiconductor memory or a hard disk. The secret key stored in the secret key storage unit 86A is read by the encryption unit 73Ab of the encryption / digital signature processing unit 73A.

  As a result, the content usage permit receiving unit 7A transmits the unique information to the usage location registration device 10A, receives the account and the secret key from the usage location registration device 10A, and receives the portable information input from the content reproduction unit 9A. The latitude and longitude information indicating the position of the terminal M can be encrypted with the secret key, and transmitted to the content usage certificate transmitting apparatus 2A together with the account. When the mobile terminal M is in a position that is already registered in the content usage permit transmission device 2A as a location where content reproduction is permitted, the content usage permit is received from the content usage permit transmission device 2A. Then, it can be output to the content reproduction means 9A. Therefore, the user can reproduce the content by the mobile terminal M only at a pre-registered position, and the user can be prevented from using the content illegally elsewhere.

  The content reproduction means (content reproduction apparatus) 9A reproduces content based on a content reproduction instruction from a user input from an input means (not shown), and outputs the content to an externally connected display device D. . In addition, when the content reproduction unit 9A receives a request for latitude and longitude information of the mobile terminal M from an input unit (not shown) or from the geographic information reception unit 109A (see FIG. 14) of the use location registration apparatus 10A. The communication data is received from a GPS satellite (not shown) via the communication transmitting / receiving means 11A, and the latitude and longitude are calculated. Here, the content reproduction unit 9A includes a GPS processing unit 91A, a content operation unit 92A, and a content storage unit 93A.

  The GPS processing unit 91A receives communication data from a GPS satellite (not shown) via the communication transmitting / receiving unit 11A based on a request for latitude and longitude information, and calculates the latitude and longitude indicating the position of the mobile terminal M. Is. The latitude and longitude information calculated here is output to the GPS information transmitting unit 76Ad of the receiving device information transmitting unit 76A of the content usage permit receiving unit 7A or the geographic information receiving unit 109A of the usage position registration device 10A. .

  The content operating unit 92A requests the content usage permit receiving unit 7A for the content usage permit based on a content reproduction instruction from the user input from an input unit (not shown), and the content usage permit receiving unit 7A The content usage permit entered is verified, and if the content usage permit is valid, the content stored in the content storage means 93A is reproduced.

Here, when SIGsp (g ^{f (IDx)} mod p) is input from the usage permit acquisition unit 82A as the content usage permit, the content operating unit 92A ^displays the electronic signature of the content usage permit transmitting apparatus 2A. and g ^{f (IDx)} mod p obtained by thawing the contents license verification key, and g ^{f (IDx)} mod p, which is calculated based on the unique information IDx read from the unique information storage unit 81A To see if they match. Here, it is assumed that the portable terminal M stores a verification key for an electronic signature of the content usage permit transmission apparatus 2A in a storage unit (not shown) in advance. Then, the portable terminal M is allowed to reproduce the content only when they match, so that the reproduction of the content is permitted only when a valid content usage permit is input.

  The content storage unit 93A stores a copy of the content stored in the content storage device C, and includes a general storage device such as a semiconductor memory or a hard disk. The content stored in the content storage means 93A is read and reproduced by the content operation means 92A.

  Note that the mobile terminal M can also implement each unit as a function program in a computer. For example, the content use certificate receiving unit 7A can be operated as a content use license receiving program.

  Further, here, the mobile terminal M transmits GPS information to the content usage permit transmission device 2A, and the content usage permit transmission device 2A permits the mobile terminal M to reproduce the content based on the GPS information. For example, the mobile terminal M transmits an account to the content usage permit transmission device 2A, and the content usage permit transmission device 2A receives this account. It is determined whether the content usage permit transmitting apparatus 2A has received the information via the base station (relay apparatus) 6A (see FIG. 12), and communication is performed by the base station 6A based on the identification information for identifying the base station 6A. Determining whether the portable terminal M located in the area where data is relayed is in a position where content reproduction is permitted Good.

  Furthermore, when the base station (relay device) 6A has a plurality of antennas that receive radio waves from different directions (directions) within a predetermined range centering on the base station 6A, the base station (relay device) 6A is transmitted from the mobile terminal M. If it is known by which antenna the radio wave is received, it is possible to specify in which direction the portable terminal M is within a predetermined range in the area where communication data is relayed by the base station 6A. Therefore, the content usage permit transmission device 2A further receives identification information for identifying an antenna that has received a radio wave from the mobile terminal M at the base station 6A (information indicating a direction of arrival at the relay device) together with the identification information of the base station 6A. Thus, in the area where communication data is relayed by the base station 6A, it is determined that the mobile terminal M is located in the direction of a predetermined range that can be received by the antenna centering on the base station 6A. It may be determined whether or not is in a position where reproduction of content is permitted.

It is the block diagram which showed the structure of the copyright management system of the 1st Embodiment of this invention. It is the block diagram which showed the structure of the content usage permit transmission apparatus in the 1st Embodiment of this invention. It is the block diagram which showed the structure of the content usage permit receiver in the 1st Embodiment of this invention. It is the flowchart which showed the operation | movement which issues the account to the content usage permit receiver in the content usage permit transmission apparatus in the 1st Embodiment of this invention. It is the flowchart which showed the operation | movement in which the content use permit transmission apparatus in the 1st Embodiment of this invention writes registration terminal information, registration route information, or registration GPS information in a receiving device management information registration means. It is the flowchart which showed the operation | movement which the content usage permit transmission apparatus in the 1st Embodiment of this invention transmits a content usage permit based on terminal information and route information. It is the flowchart which showed the operation | movement which the content usage permit transmission apparatus in the 1st Embodiment of this invention transmits a content usage permit based on GPS information. It is the flowchart which showed the operation | movement which registers the account by the content use certificate receiver in the 1st Embodiment of this invention. It is the flowchart which showed the operation | movement in which the content usage permit receiver in the 1st Embodiment of this invention notifies registration terminal information, registration path | route information, or registration GPS information to a content usage permit transmission apparatus. 6 is a flowchart showing an operation in which the content usage certificate receiving device according to the first exemplary embodiment of the present invention notifies the content usage license transmission device of terminal information and route information and acquires the content usage license. It is the flowchart which showed the operation | movement which the content usage permit receiving apparatus in the 1st Embodiment of this invention notifies GPS information to a content usage permit transmission apparatus, and acquires a content usage permit. It is the block diagram which showed the structure of the copyright management system of the 2nd Embodiment of this invention. It is the block diagram which showed the structure of the content usage permit transmission apparatus in the 2nd Embodiment of this invention. It is the block diagram which showed the structure of the utilization location registration apparatus in the 2nd Embodiment of this invention. It is the block diagram which showed the structure of the portable terminal in the 2nd Embodiment of this invention.

Explanation of symbols

2, 2A Content usage permit transmitter 27, 27A Receiving device information receiving means 28, 28A Permit determination means 26, 26A Receiving device management information storage means 29, 29A Usage permit transmitting means 6 Relay device 6A Base station (relay device)
7 Content Usage Certificate Receiving Device 7A Content Usage License Receiving Unit (Content Usage License Receiving Device)
76a Account transmitting unit 76b Terminal information transmitting unit 76d GPS information transmitting unit 76A Receiving device information transmitting means (receiving device information acquisition transmitting means)
78 Terminal-specific information acquisition means 79 Geographic information reception means 9 Content playback device 9A Content playback means (content playback device)

Claims (7)

Connected to a content playback apparatus and terminal for playing back content via a wired and / or wireless local area network, receiving a content usage permit permitting the content playback apparatus to play the content, and the content playback apparatus A content usage certificate transmitting device that transmits the content usage certificate to a content usage license receiving device that transmits the content usage certificate via a network,
Reception for storing reception device management information in which a reception device ID for identifying the content usage certificate reception device is associated with a reproduction device ID for identifying the content reproduction device and registered terminal information indicating a terminal ID for identifying the terminal Device management information storage means;
Receiving device information including the receiving device ID of the content usage certificate receiving device, and receiving the content usage certificate via the local area network when the content usage certificate receiving device transmits the receiving device information. Receiving device information receiving means for receiving, from the content usage permit receiving device, a playback device ID of the content playback device connected to the device and terminal information indicating the terminal ID of the terminal;
Corresponding to the receiving device ID included in the receiving device information received by the receiving device information receiving means, a predetermined number or more of the terminal IDs indicated by the registered terminal information stored in the receiving device management information storage means Permission determining means for determining whether the terminal ID matches a predetermined number or more of the terminal IDs among the terminal IDs indicated by the terminal information received by the receiving device information receiving means;
A content usage permit transmitting device comprising: a usage permit transmitting means for transmitting the content usage permit to the content usage permit receiving device when it is determined by the permission determining means that they match. The reception device management information storage means stores the reception device ID of the content usage certificate reception device in association with registered position information indicating a position where the content reproduction device is permitted to reproduce the content,
The receiving device information receiving means receives position information indicating a position of the content reproduction device;
The receiving device ID stored in the receiving device management information storage unit based on the receiving device ID included in the receiving device information received by the receiving device information receiving unit and the location information. To determine whether the content playback device is within a predetermined range of the position indicated by the registered position information corresponding to
The usage permit transmission unit is configured to determine, by the permission determination unit, a predetermined number or more of the terminal IDs among the terminal IDs indicated by the registered terminal information and a predetermined number of the terminal IDs indicated by the terminal information. Transmitting the content usage certificate to the content usage certificate receiving device when it is determined that the terminal ID matches and the content usage license receiving device is within the range. The content use permit transmission device according to claim 1, wherein 3. The relay apparatus ID according to claim 2, wherein the position information includes a relay apparatus ID for identifying a relay apparatus provided on a transmission path through which the receiving apparatus information is transmitted from the content usage permit receiving apparatus in the network. The content usage permit transmitting device described. The relay device relays the receiving device information via a radio wave transmitted from the content use license receiving device;
The content usage permit transmission according to claim 3 , wherein the position information further includes information indicating a direction in which the wireless radio wave transmitted from the content usage permit receiving apparatus reaches the relay apparatus. apparatus. The content usage permit transmission device according to any one of claims 2 to 4 , wherein the position information includes latitude and longitude information transmitted from the content usage permit reception device. Connected to a content playback apparatus and terminal for playing back content via a wired and / or wireless local area network, receiving a content usage permit permitting the content playback apparatus to play the content, and the content playback apparatus Receiving device management information in which a receiving device ID for identifying a content usage permit receiving device to be transmitted to a reproducing device ID for identifying the content reproducing device and registered terminal information indicating a terminal ID for identifying the terminal are stored A computer for transmitting the content usage certificate via the network to the content usage certificate receiving device with reference to the receiving device management information from the receiving device management information storage device;
Receiving device information including the receiving device ID of the content usage certificate receiving device, and receiving the content usage certificate via the local area network when the content usage certificate receiving device transmits the receiving device information. Receiving device information receiving means for receiving, from the content usage certificate receiving device, a playback device ID of the content playback device connected to the device and terminal information indicating the terminal ID of the terminal;
Corresponding to the receiving device ID included in the receiving device information received by the receiving device information receiving means, a predetermined number or more of the terminal IDs indicated by the registered terminal information stored in the receiving device management information storage device Permission determining means for determining whether the terminal ID matches a predetermined number or more of the terminal IDs among the terminal IDs indicated by the terminal information received by the receiving device information receiving means;
A content usage license transmission program that causes the content usage certificate receiving device to function as a usage certificate transmission unit that transmits the content usage certificate when the permission determination unit determines that they match. The content usage permit transmission device according to claim 1 or 2, wherein the content playback device and the content usage permit reception device connected to the terminal play a content via a wired and / or wireless local area network. In order to receive the transmitted content usage permit permitting the reproduction of the content via the network, and send the computer to the content reproduction device,
Receiving device information including a reproducing device ID for identifying the content reproducing device connected via the local area network and a terminal ID for identifying the terminal, and a receiving device ID for identifying the content usage permit receiving device Receiving device information acquisition and transmission means for transmitting the playback device ID and terminal information indicating the terminal ID to the content usage certificate transmitting device;
A content usage license receiving program that functions as a usage license acquisition unit that receives a content usage license transmitted from the content usage license transmission device and transmits the content usage license to the content reproduction device.

Images