JP4620412B2 - Terminal and content management system - Google Patents

Description

  The present invention relates to a metadata generation device, content data storage device, terminal, and content management system for content data.

  Conventionally, when content data such as video data is distributed, the content data is encrypted such as scrambled so that only authorized persons can view the content (for example, Non-patent document 1 and Non-patent document 2 below).

In addition, a technique for controlling whether or not each part of a content, that is, each scene is viewable has been proposed mainly from the viewpoint of copyright management (see, for example, Patent Document 1 below).
JP 2004-133801 A Tomonari Nishimoto, published by Japan Broadcasting Corporation, "RMP system for server-type broadcasting", "New Technology Newsletter No. 43", February 2003 “RMP system for server-type broadcasting Content rights management protection and access control”, NHK STRL R & D / No. 79, May 2003

  However, with the technique of the above-mentioned Patent Document 1, viewing is performed only as the scenes are divided in advance by the content distributor or the like, and viewing with the scenes intended by the user cannot be performed. For example, it is not possible to view a part of content that suits each user's preference, or to perform digest viewing in a scene division intended by the user when content data is stored and viewed on a mobile terminal or the like It was.

Accordingly, the present invention aims at providing an end-terminal and the content management system that allows the use of content in part division where the user intends to use the content data. Note that the term “portion” here includes not only the video content portion but also the music content portion, and further the document content portion such as an electronic book.

The terminal of the present invention performs content specifying information for specifying content data, part specifying information for specifying one or more parts of content for the content data, and first encryption different from each other. A first encryption key for each part, and a first decryption key for each part for decrypting the part encrypted by the first encryption key corresponding to at least one of the parts Metadata acquisition means for acquiring metadata including the metadata from the metadata generation device that generated the metadata , and content identification information and partial identification information among the information included in the acquired metadata Encryption metadata sender for transmitting the encryption metadata including the first encryption key to the content data storage device for storing the content data And, equipped with a.

  In the terminal of the present invention, the metadata generated by the metadata generation apparatus of the present invention is acquired, and the encryption metadata based on the metadata is transmitted to the content data storage apparatus of the present invention. In the content data storage device, encryption is performed for each part specified by the encryption metadata. Therefore, if the metadata that is partly intended by the user who uses the content data is used in the above processing, the content can be used in the partly intended part by the user who uses the content data. Become.

  The terminal is transmitted from the content data storage device in response to the transmission by the encryption metadata transmission unit, and is encrypted using the first encryption key corresponding to the part for each part specified by the part specifying information The content data receiving means for receiving the content data specified by the content specifying information and the received content data are decrypted using the first decryption key included in the metadata acquired by the metadata acquisition means And a decoding means. According to this configuration, since the decryption is performed in the terminal, it is possible to use the content corresponding to that part.

  The terminal transmits the first decryption key included in the metadata acquired by the metadata acquisition unit to the content data storage device, and decrypts the content data specified by the content specifying information to the content data storage device. Decryption control means for controlling to decrypt using a key may be further provided. According to this configuration, since the decryption is performed in the content data storage device, the content corresponding to that portion can be used.

  The terminal further includes usage information transmission means for transmitting information related to decryption by the decryption means or the decryption control means to the billing server for generating billing information for billing the use of the content data. Also good. According to this configuration, it is possible to charge based on the use of content data in the above-described partial division.

Incidentally, the present invention can be described as the invention of the end edge as described above, it can also be described as the invention of a content management system as follows. This is substantially the same invention, and has the same operations and effects. The content management system of the present invention is a content management system including a metadata generation device, a content data storage device, and a terminal, and the metadata generation device includes one or more contents for content data. A part specifying information generating unit for generating part specifying information for specifying a part of the first part, a first encryption key for each part for performing different first encryption on each part, and at least one A first key generating means for generating a first decryption key for each part for decrypting a part encrypted with the first encryption key, corresponding to the part, and content specifying information for specifying content data The content data is further included in the generated partial specifying information in association with the generated first encryption key and first decryption key. And generate the corresponding metadata, the generated metadata and a metadata generating unit to be transmitted to the terminal, the content data storage device includes a storage means for storing one or more content data, the content identification information And metadata specifying means for receiving the encryption metadata including the part specifying information and the first encryption key for each part from the terminal, and the storage means storing the specified metadata. And encrypting means for encrypting the content data for each part specified by the part specifying information using the first encryption key corresponding to the part, and the terminal specifies the content specifying information and the part specifying the first encryption key for each information and portions of the metadata that includes a first decryption key for each part corresponding to at least one of the partial raw the metadata A metadata acquisition means for acquiring by receiving from the metadata generating device, among the information contained in the acquired metadata, content identification information and partial identification information and for encryption and a first encryption key meta And an encryption metadata transmission unit that transmits data to a content data storage device that stores content data.

  According to the present invention, if the metadata that is partly intended by the user who uses the content data is used, the content can be used in the parting intended by the user.

  The knowledge of the present invention can be easily understood by considering the following detailed description with reference to the accompanying drawings shown for illustration only. Subsequently, embodiments of the present invention will be described with reference to the accompanying drawings. Where possible, the same parts are denoted by the same reference numerals, and redundant description is omitted.

[First Embodiment]
FIG. 1 shows a configuration of a content management system 1 according to the first embodiment. The content management system 1 includes a metadata management server 10 (metadata generation device), a program storage device 20 (content data storage device), a mobile terminal 30 (terminal), and a viewing charging server 40 (charging server). It consists of

  The metadata management server 10 generates and manages metadata for content data. The metadata management server 10 is connected to the mobile terminal 30 via the network N. The metadata management server 10 is realized by an information processing apparatus including a CPU, a memory, and the like, for example. Here, content data refers to electronic data including content such as video, still images, audio, and documents. In the present embodiment, description will be made assuming that the content data is mainly video content. Metadata is data about content data, and includes information for specifying a content portion, a key for encryption, and the like. Details will be described later. The metadata management server 10 may be managed by a person who provides the content, but may be managed by a third party different from the person who provides the content data. That is, the metadata may be generated by a third party. A plurality of metadata management servers 10 may exist, and a plurality of metadata may be provided for one piece of content data by the plurality of metadata management servers 10.

  The program storage device 20 is a device for storing video content data distributed from the broadcasting station 50a, the broadband content providing server 50b, or the like. The program storage device 20 can communicate with the mobile terminal 30 by wireless communication or the like. The program storage device 20 is realized by an information processing device including, for example, a CPU and a memory.

  The mobile terminal 30 is a device for acquiring metadata generated by the metadata management server 10 and acquiring and using content data encrypted with an encryption key included in the metadata from the program storage device 20. . The mobile terminal 30 corresponds to, for example, a mobile phone that can use content data. Here, the program storage device 20 and the mobile terminal 30 may be held by the same user. For example, the program storage device 20 may be a device installed at the user's home, and the mobile terminal 30 may be a device that can be carried by the user.

  The viewing billing server 40 can communicate with the mobile terminal 30 via the network N, and generates billing information for the user of the mobile terminal 30 based on information related to use of content data transmitted from the mobile terminal 30 It is. The network N specifically corresponds to a mobile communication network or the Internet network. The broadcast station 50 a and the broadband content providing server 50 b are devices that distribute content data to the program storage device 20. As for the distribution method, for example, distribution from the broadcast station 50a is distribution by broadcast waves, and distribution from the broadband content providing server 50b is distribution to a terminal or the like that is broadband-connected to the Internet network.

  Subsequently, functions of the metadata management server 10, the program storage device 20, and the mobile terminal 30 will be described with reference to the drawings. As shown in FIG. 2, the metadata management server 10 includes a partial identification information generation unit 11 (partial identification information generation unit), a first key generation unit 12 (first key generation unit), and a second key. A generation unit 13 (second key generation unit), a metadata generation unit 14 (metadata generation unit), a metadata management unit 15, and a communication unit 16 are provided.

  The part specifying information generation unit 11 is a part that generates part specifying information for specifying one or more content parts for content data. In the case of video content as in the present embodiment, the portion is preferably a so-called scene that is specified by the time from the start time of the content. Details will be described later.

  The first key generation unit 12 is a part that generates a first encryption key for each content part for applying different first encryptions to the content part specified as described above. In addition, the first key generation unit 12 generates a first decryption key for each part of the content for decrypting a part encrypted with the first encryption key corresponding to at least one part of the content It is also a part to do. The first encryption key and decryption key generated in this way are for enabling viewing control for each part (scene) of the content. Here, it is preferable that the first encryption is specifically scrambled. Scrambling is to conceal content by superimposing data (scramble key) with a predetermined period (scramble key) on the content data, and stir the content data so that the content is not used. The first encryption key and the decryption key to be generated are generated after specifying the content and its portion (scene), but may be generated by specifying the user and the mobile terminal 30 further. That is, a different first encryption key and different decryption key may be generated for each user or mobile terminal 30.

  The second key generation unit 13 is a part that generates a second encryption key for performing second encryption on the entire content data. The second key generation unit 13 is also a part that generates a second decryption key for decrypting a part encrypted with the second encryption key. The second encryption key and decryption key generated in this way are for preventing falsification of the entire content data, not for each part (scene). The generated second encryption key and decryption key may also be generated by specifying the user and the mobile terminal 30.

  The metadata generation unit 14 is a part that reads the information and the key generated as described above and generates metadata corresponding to the content data. The metadata includes content specifying information for specifying the content data for which the key is generated and the like, a second encryption key and a decryption key, and further includes the generated first specifying information in the generated partial specifying information. The data includes the encryption key and the first decryption key in association with each other. Specific contents of the metadata will be described later.

  The metadata management unit 15 is a part that manages the generated metadata. The communication unit 16 is a part that communicates with the mobile terminal 30 and the like via the network N.

  As shown in FIG. 3, the program storage device 20 includes a storage unit 21 (storage unit), an encryption metadata reception unit 22 (encryption metadata reception unit), and an encryption unit 23 (encryption unit). And a content data transmission / reception unit 24.

  The storage unit 21 is a part that stores content data. A plurality of content data can be stored. The stored content data is normally distributed from the broadcasting station 50a, the broadband content providing server 50b, etc., and received by the content data transmitting / receiving unit 24.

  The encryption metadata receiving unit 22 is a part that receives the encryption metadata transmitted by the mobile terminal 30. The encryption metadata includes content specifying information for specifying content data, part specifying information for specifying one or more parts of content for the content data, and first encryption different from each other. And a first encryption key for each part.

  The encryption unit 23 stores the content data stored in the storage unit 21 and is specified by the content specifying information included in the encryption metadata, and the portion included in the encryption metadata with respect to the content data This is a part for performing encryption using the first encryption key corresponding to each part specified by the specific information. The encryption unit 23 is also a part that encrypts the entire content data using the second encryption key included in the encryption metadata for the content data.

  The content data transmission / reception unit 24 receives content data from the broadcasting station 50a, the broadband content providing server 50b, and the like and transmits the content data to the storage unit 21, and reads out the content data encrypted by the encryption unit 23 to the mobile terminal 30. The part to send.

  As shown in FIG. 4, the mobile terminal 30 includes a metadata acquisition unit 31 (metadata acquisition unit), an encryption metadata transmission unit 32 (encryption metadata transmission unit), and a content data reception unit 33 ( A content data receiving unit), a decrypting unit 34 (decoding unit), a usage information transmitting unit 35 (usage information transmitting unit), and a content data reproducing unit 36.

  The metadata acquisition unit 31 is a part that acquires the metadata generated by the metadata management server 10. This acquisition is performed, for example, by transmitting an acquisition request to the metadata management server 10 and transmitting metadata by the metadata management server 10 in response to the acquisition request.

  The encryption metadata transmission unit 32 generates encryption metadata using information included in the metadata acquired by the metadata acquisition unit 31, and sends the encryption metadata to the program storage device 20. The part to send. The encryption metadata includes content specifying information, partial specifying information, and first and second encryption keys. The transmission of the encryption metadata to the program storage device 20 is performed for transmission of the encrypted content data to the mobile terminal 30 performed by the program storage device 20 in response to the transmission.

  The content data receiving unit 33 is a part that receives encrypted content data transmitted from the program storage device 20 in response to transmission of encryption metadata.

  The decryption unit 34 reads the encrypted content data received by the content data reception unit 33 and decrypts the content data using the decryption key included in the metadata acquired by the metadata acquisition unit 31. Part.

  The usage information transmitting unit 35 is a part that transmits information related to decryption performed by the decrypting unit 34 to the viewing / billing server 40 (billing server) in order to generate billing information for billing the use of content data. is there.

  The content data reproducing unit 36 is a part that reproduces the content data. Specifically, processing such as displaying video content of content data on a display device (not shown) included in the mobile terminal 30 is performed. When the content data is decrypted, the decrypted content can be reproduced.

  Hereinafter, processing executed by the content management system 1 in the present embodiment will be described with reference to the sequence diagram of FIG. This process is performed when the user of the mobile terminal 30 uses the content data stored in the program storage device 20 in a partial division intended by the user. It is assumed that the program storage device 20 already stores content data used by the user and distributed from the broadcasting station 50a and the broadband content providing server 50b.

  First, in the mobile terminal 30, the metadata acquisition unit 31 transmits metadata acquisition request information to the metadata management server 10 (S01). At the time of this acquisition request, it is preferable to transmit information regarding the target content data, partial division conditions, and the like. In the metadata management server 10 to which the acquisition request information is transmitted, the communication unit 16 receives the acquisition request information.

  Subsequently, the metadata management server 10 generates metadata as follows (S02). An example of the generated metadata 80 is shown in FIG. First, content data for which metadata is to be generated is specified. This specification is performed, for example, by storing the same content data stored in the program storage device 20 and referring to information on content data transmitted together with the acquisition request. In the present embodiment, it is assumed that content data of a 25-minute quiz program is targeted.

  Then, the part specific information generation part 11 produces | generates the part specific information which specifies the part of one or more content with respect to the said content data. The part specifying information is, for example, data indicated by a scene name and a scene (time interval) in the content data shown in FIG. For example, in the metadata shown in FIG. 6, video content of 25 minutes is changed to “0 to 1 minute”, “1 to 10 minutes”, “10 to 15 minutes”, “15 to 20 minutes”, “20 to 25 minutes”. "It is divided into five parts every time." As described above, the part specifying information specifies, for example, a part of the content by dividing the content of the content data at time intervals. In addition, as a method for classifying a portion (scene), there is a method in which a content provider, a user, or an administrator of the metadata management server 10 designates with some intention. Further, it is also possible to detect features such as switching of video screens, performers' faces and voices, and automatically set the segmentation using the features.

  Subsequently, the first key generation unit 12 generates a first encryption key for each portion divided as described above. The content data shown in FIG. 6 is a scramble key indicated by a picture of a key for each scene in a scramble key sequence. It is assumed that the scramble key is an encryption key different from each other, and can be decrypted only by a descramble key (first decryption key) corresponding to each.

  Subsequently, the first key generation unit 12 generates a first decryption key for decrypting the portion of the content encrypted with the first encryption key. The first decryption key does not need to be generated corresponding to all parts. For example, as shown in the metadata shown in FIG. 6, the descrambling key column indicates that there is a descrambling key in the portion corresponding to “scene 3” and “scene 5” with a key picture. It may be generated only in one part. In this way, only the scenes of “hint video” and “quiz program answer” can be used. For example, if this program relates to insects, metadata generation as an insect picture book service linked with the program It is conceivable that the content data is serviced by an administrator (administrator of the metadata management server 10). A first decryption key corresponding to all scenes may be generated. In this case, for example, it is conceivable to use a service form of content data as a quiz program.

  Subsequently, the second encryption key includes a second encryption key for performing second encryption on the entire content data, and a second decryption for decrypting the second encryption. Generate a key. In the content data shown in FIG. 6, these correspond to a content encryption key and a content decryption key.

  When these information and key are generated, the metadata generation unit 14, as shown in FIG. 6, the content reference ID that is the content specifying information, the partial specifying information, the first encryption key and the decryption key, The metadata 80 corresponding to the content data is generated including the encryption key and the decryption key. As shown in FIG. 6, the metadata 80 may further include information on the provider, viewing period, and usage fee. The usage fee is set for each scene as shown in FIG. 6, but may be set for the entire content. In that case, you may make it discount from the sum of the charge set for each scene unit. The generated metadata is stored and managed in the metadata management unit 15.

  When the metadata is generated, in the metadata management server 10, the communication unit 16 reads the generated metadata and transmits it to the mobile terminal 30 (S03). In the mobile terminal 30 to which the metadata is transmitted, the metadata acquisition unit 31 receives the metadata. The metadata acquired here is assumed to be a partial division intended by the user with respect to the content data. In the present embodiment, the mode in which metadata is generated after an acquisition request is made from the mobile terminal 30 is shown. However, the metadata is generated in advance and the metadata designated by the mobile terminal 30 is transmitted. It is good. Alternatively, metadata that does not include the encryption key and the decryption key may be generated in advance, and a different encryption key and decryption key may be generated for each requested mobile terminal 30 and may be included in the metadata. If different encryption keys and decryption keys are generated for each mobile terminal 30, the possibility that the encrypted content data will be decrypted is reduced even if the content data is passed to another person. In addition, the generated metadata is preferably transmitted to the viewing charging server 40 for use in charging management.

  Subsequently, in the mobile terminal 30, the encryption metadata transmission unit 32 generates encryption metadata based on the received metadata, and transmits the encryption metadata (S04). The encryption metadata includes content specifying information, partial specifying information, and first and second encryption keys. The encryption metadata corresponding to the metadata in the example of FIG. 6 includes a content reference ID, information about a scene, a scramble key, and a content encryption key. In the program storage device 20 to which the encryption metadata is transmitted, the encryption metadata receiving unit 22 receives the encryption metadata.

  Subsequently, in the program storage device 20, the encryption metadata received by the encryption unit 23 is read, and the content data specified by the content specifying information included in the encryption metadata is encrypted (S05). ). In the encryption, first, encryption is performed using the first encryption key for each part specified by the part specifying information included in the encryption metadata. Subsequently, the entire content data is encrypted using the second encryption key. In the example in which the metadata 80 of FIG. 6 is used, the scramble is applied to the five scenes with the five scramble keys, and the entire content data is encrypted with the content encryption key.

  Subsequently, the encrypted content data is transmitted to the mobile terminal 30 by the content data transmitting / receiving unit 24 (S06). In the mobile terminal 30 that has received the encrypted content data, the content data receiving unit 33 receives the content data.

  Subsequently, in the mobile terminal 30, the decryption unit 34 reads the encrypted content data and performs decryption (S07). In the decryption, first, the entire content data is decrypted using the second decryption key included in the metadata 80, and then the first decryption key is present using the first decryption key. Decoding is performed on the existing part. In the example in which the metadata 80 in FIG. 6 is used, the entire content is decrypted by the content decryption key, and “scene 3” and “scene” are decrypted by the descramble key corresponding to “scene 3” and “scene 5”. The part corresponding to the scene 5 "is decoded. Note that the decryption for the first encryption may not be performed for all portions where the content decryption key exists. For example, it is good also as decoding only about the part with a user designation | designated.

  Subsequently, the content data playback unit 36 plays back the content (S08). The portion (scene) that has been decrypted with respect to the first encryption is played back in the decrypted state, and the user can view the played video. A portion (scene) that has not been decrypted is played back in a state of being (first) encrypted. In addition, a portion (scene) that has not been decoded may not be reproduced (skipped), and only the decoded portion may be reproduced. In the present embodiment, since the first encryption is scrambled, it is preferable that reproduction is performed each time while performing decryption.

  Subsequently, the usage information transmitting unit 35 transmits information related to decryption using the first decryption key to the viewing and accounting server 40 (S09). The viewing billing server 40 uses the information for generating billing information for billing the use of the content data.

  As described above, according to the present embodiment, the user of the mobile terminal 30 uses the metadata in which the user intends to use the content, thereby using the content in the partial division intended by the user who uses the content data. Is possible.

  Further, if the encryption for each part of content is performed with one content data, that is, one data file, continuous reproduction of adjacent parts (scenes) can be smoothly performed. Further, since it is not necessary for the playback device to read a file for each part, the processing load on the playback device is small. If the first encryption is scrambled as in this embodiment, the encryption with one data file can be easily performed.

  Note that multi-stage encryption may be performed in the first encryption (scramble). For example, if the audio content band is divided into two and encrypted in two stages, it is possible to provide a service with different sound quality.

  In the first encryption, use control may be performed in units of elements as encryption is performed for each element. For example, encryption may be performed such that sound can be heard but images cannot be viewed.

  In the present embodiment, the program storage device 20 has a configuration different from that of the broadcast station 50a or the broadband content providing server 50b, but may be integrated as shown in FIG. In that case, the program storage device 20 included in the broadcast station 50a or the broadband content providing server 50b receives the encryption metadata from the mobile terminal 30, and then receives the content data encrypted by the encryption metadata. Distribution to the mobile terminal 30 is performed.

  Further, the portion specified in the metadata does not have to cover all the contents as shown in FIG. 6, and may cover only a part of the contents like the metadata 81 shown in FIG. Good. In that case, the first encryption may be performed only for the portion, or content data obtained by cutting out only a part of the content may be newly generated. Further, even if the metadata covers the entire content, information and a key corresponding to a part of the part specifying information may be used.

  In the present embodiment, the content data is described as video content, but content data other than video may be used. For example, music or the like that can be played in the same manner as video may be used. Further, it may be content data used by displaying an image or a document. For example, in the case of content data such as an electronic book, metadata 82 as shown in FIG. 9 is used, and the content portion is specified by the number of pages, for example.

[Second Embodiment]
In the first embodiment, the content data is used on the mobile terminal 30. However, the content data is not necessarily used by the mobile terminal 30. The second embodiment shows a form in which content data is used in the program storage device 20. The overall configuration of the content management system 1 according to the second embodiment is the same as that of the first embodiment (FIG. 1). FIG. 10 shows a configuration of a program storage device 20a according to the second embodiment. The program storage device 20a includes a storage unit 21, an encryption metadata reception unit 22, an encryption unit 23, a content data transmission / reception unit 24, a decryption unit 25, and a content data reproduction unit 26.

  The decryption unit 25 receives the first decryption key and the second decryption key transmitted from the mobile terminal 30a, and decrypts the content data using these decryption keys under the control of the mobile terminal 30a. Part. The content data reproduction unit 26 is a part that reproduces content data under the control of the mobile terminal 30a. Specifically, processing such as displaying the video content of the content data on a display device (not shown) included in the program storage device 20a is performed.

  FIG. 11 shows the configuration of the mobile terminal 30a according to the second embodiment. The mobile terminal 30a includes a metadata acquisition unit 31, an encryption metadata transmission unit 32, a usage information transmission unit 35, and a decryption control unit 37 (decryption control means).

  The decryption control unit 37 transmits the first decryption key and the second decryption key included in the metadata acquired by the metadata acquisition unit 31 to the program storage device 20a, and sends the metadata to the program storage device 20a. This is a part that controls to decrypt the content data specified by the content specifying information included in the data using their decryption keys. It is also a part that controls the program storage device 20a to reproduce the content data.

  Hereinafter, processing executed by the content management system 1 in the present embodiment will be described with reference to the sequence diagram of FIG. Note that the processing of S01 to S05 is the same as the processing in the first embodiment.

  When the content data is encrypted in S05, in the mobile terminal 30a, the decryption control unit 37 instructs the program storage device 20a to reproduce the content data (S16). The instruction to reproduce the content data is performed by transmitting information for identifying the content to be reproduced, the first decryption key and the second decryption key, and transmitting control information for decrypting and reproducing the content data. This reproduction instruction may be performed by a user operation.

  In the program storage device 20a that has been instructed to reproduce content data, the decryption unit 25 receives information related to the instruction. Subsequently, the decryption unit 25 reads the encrypted content data based on the information for specifying the content to be reproduced, and decrypts it using the received decryption key (S17).

  Subsequently, the content data reproducing unit 26 reproduces the content (S18). On the other hand, in the mobile terminal 30a, the usage information transmitter 35 transmits information related to decryption using the first decryption key to the viewing billing server 40 (S19). The viewing billing server 40 uses the information for generating billing information for billing the use of the content data.

  As described above, according to the present embodiment, content data can be used in a device other than the mobile terminal 30a, for example, the program storage device 20a.

[Third Embodiment]
In the third embodiment, a mode in which the mobile terminal 20 acquires content data when there is no content data corresponding to metadata in the program storage device 20 will be described. FIG. 13 shows the configuration of the content management system 1 according to the third embodiment. As shown in FIG. 13, a program storage device 20a that transmits encrypted content data to the mobile terminal 30 communicates with other program storage devices 20b, 20c, and 20d via a network N1 (for example, the Internet network). It can be performed.

  Consider a case where the content data corresponding to the encryption metadata transmitted from the mobile terminal 30 does not exist in the program storage device 20a in the process of S04 in the first embodiment (see FIG. 5). The program storage device 20a searches the content data held by the other program storage devices 20b, 20c, and 20d for whether there is a match with the content data. This search may be performed by, for example, sending information specifying content data to another program storage device 20b, 20c, or 20d, or by preparing a server for centrally managing the content list. It may be referred to.

  If any of the program storage devices 20b, 20c, and 20d holds the content data by the search (for example, the program storage device 20c holds the content data), the program storage device 20a holds the content data. The encryption metadata transmitted from the mobile terminal 30 is further transmitted to the program storage device 20c.

  In the program storage device 20c to which the encryption metadata is transmitted, the encryption process is performed using the encryption metadata (the process of S05 in the first embodiment (see FIG. 5)). The encrypted content data is transmitted to the mobile terminal 30 via the program storage device 20a or directly, and the content data can be used in the mobile terminal.

  According to this embodiment, even if content data corresponding to the encryption metadata does not exist in the program storage device 20a that is the transmission target of the encryption metadata of the mobile terminal 30, the use of the content data is possible. It becomes possible. In the present embodiment, the encrypted content data is assumed that only the mobile terminal 30 that transmitted the encryption metadata holds the decryption key, and the encrypted content data is illegally copied. However, it is difficult to decrypt and there is no risk of unauthorized use.

[Fourth Embodiment]
In the fourth embodiment, a mode is described in which content data can be used by a mobile terminal 30 different from the mobile terminal 30 that holds the metadata. Since the metadata described above is required to use the encrypted content data, the metadata has an aspect of managing the right to use the content. Therefore, by transferring the metadata from one mobile terminal 30a to another mobile terminal 30b, the encrypted content data corresponding to the metadata can be used also by another mobile terminal 30b.

  As described above, since the metadata also manages the right to use the content, it is preferable to ensure secure delivery. Therefore, the delivery of metadata from the mobile terminal 30a to the mobile terminal 30b is preferably performed by a method described below with reference to FIG. 14 instead of a method of mediating a memory device or the like.

  First, in the mobile terminal 30a on the delivery side, the metadata is deleted (S21). Subsequently, the delivery-side mobile terminal 30a sends the mobile terminal 30a together with information for identifying metadata to the viewing and charging server 40 that manages the usage information of the content data via a communication network (for example, a mobile communication network). Information indicating that the metadata is to be transferred is transmitted to 30b (S22). Upon receiving the information, the viewing / billing server 40 updates the portion related to the mobile terminal that owns the metadata in the metadata management information (S23), and transmits the metadata to the mobile terminal 30b via the communication network. (S24).

  The mobile terminal 30b that has acquired the metadata can use the content by acquiring encrypted content data corresponding to the metadata by any of the following methods. The following example can be generally applied as a method of acquiring encrypted content data regardless of the present embodiment. Compared to the delivery of metadata, delivery of encrypted content data does not need to stick to a secure method.

  As described in the first embodiment, the mobile terminal 30b can be acquired from the program storage device 20 owned by the user of the mobile terminal 30b. Further, the encrypted content data may be transmitted from the mobile terminal 30a to the mobile terminal 30b. Moreover, it is good also as acquiring from the program storage apparatus 20 different from the program storage apparatus 20 which the user of the mobile terminal 30b owns like 3rd Embodiment. Moreover, it is good also as transferring to the mobile terminal 30b by methods, such as attaching to another mail.

  According to the present embodiment, it is possible to use the content on another mobile terminal 30 by the delivery of the metadata.

It is a figure which shows the structure of the content management system in 1st Embodiment of this invention. It is a figure which shows the structure of the metadata management server in 1st Embodiment. It is a figure which shows the structure of the program storage apparatus in 1st Embodiment. It is a figure which shows the structure of the mobile terminal in 1st Embodiment. It is a sequence diagram which shows the process performed with the content management system in 1st Embodiment. It is an example of the metadata in 1st Embodiment. It is a figure which shows another structure of the content management system in 1st Embodiment. It is another example of the metadata in 1st Embodiment. It is another example of the metadata in 1st Embodiment. It is a figure which shows the structure of the program storage apparatus in 2nd Embodiment of this invention. It is a figure which shows the structure of the mobile terminal in 2nd Embodiment. It is a sequence diagram which shows the process performed with the content management system in 2nd Embodiment. It is a figure which shows the structure of the content management system in 3rd Embodiment. It is a sequence diagram which shows the process in 4th Embodiment.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 1 ... Content management system, 10 ... Metadata management server, 11 ... Partial specification information generation part, 12 ... 1st key generation part, 13 ... 2nd key generation part, 14 ... Metadata generation part, 15 ... Metadata Management unit 16 ... Communication unit 20 ... Program storage device 21 ... Storage unit 22 ... Encryption metadata reception unit 23 ... Encryption unit 24 ... Content data transmission / reception unit 25 ... Decryption unit 26 ... Content data reproduction unit, 30 ... mobile terminal, 31 ... metadata acquisition unit, 32 ... encryption metadata transmission unit, 33 ... content data reception unit, 34 ... decryption unit, 35 ... usage information transmission unit, 36 ... content Data reproduction unit, 37... Decryption control unit, 40... Viewing charge server, 50 a .. broadcast station, 50 b .. broadband content providing server, 80 to 82 metadata, N.

Claims (5)

Content specifying information for specifying content data, part specifying information for specifying one or more parts of content for the content data, and each part for applying different first encryption to each part Metadata including the first encryption key and the first decryption key for each part for decrypting the part encrypted by the first encryption key, corresponding to at least one of the parts Metadata acquisition means for receiving the metadata from the metadata generation device that generated the metadata ,
Of the information included in the acquired metadata, the encryption metadata including the content specifying information, the partial specifying information, and the first encryption key is transmitted to the content data storage device that stores the content data. An encryption metadata transmission means;
A terminal equipped with. Sent from the content data storage device in response to the transmission by the encryption metadata sending means, and encrypted for each part specified by the part specifying information using the first encryption key corresponding to the part, Content data receiving means for receiving content data specified by the content specifying information;
Decryption means for decrypting the received content data using the first decryption key included in the metadata acquired by the metadata acquisition means;
The terminal according to claim 1 , further comprising: Transmitting the first decryption key included in the metadata acquired by the metadata acquisition means to the content data storage device, and sending the content data specified by the content specification information to the content data storage device; Decryption control means for controlling to decrypt using the decryption key;
The terminal according to claim 1 , further comprising: The information processing apparatus further comprises usage information transmission means for transmitting information related to decryption by the decryption means or the decryption control means to a billing server for generating billing information for billing the use of the content data. The terminal according to 2 or 3 . A content management system including a metadata generation device, a content data storage device, and a terminal,
The metadata generation device includes:
A part specifying information generating means for generating part specifying information for specifying one or more parts of content with respect to content data;
A first encryption key is generated for each part for applying a different first encryption to each part, and encrypted with the first encryption key corresponding to at least one of the parts. First key generation means for generating a first decryption key for each part for decrypting the part,
Content identification information for identifying the content data is included, and the generated partial identification information is included in association with the generated first encryption key and first decryption key, and the content data is included in the content data. Metadata generation means for generating corresponding metadata and transmitting the generated metadata to the terminal ,
The content data storage device includes:
Storage means for storing one or more content data;
Encryption metadata receiving means for receiving, from the terminal , encryption metadata including the content specifying information, the part specifying information, and the first encryption key for each part;
The content data stored by the storage unit and specified by the content specifying information is encrypted using the first encryption key corresponding to the portion for each portion specified by the portion specifying information. And encryption means,
The terminal
And the content identification information and the partial specific information and the first encryption key of the respective parts, the meta data including the first decryption key of the respective portion corresponding to at least one of the partial, the metadata Metadata acquisition means for acquiring by receiving from the generated metadata generation device ;
Of the information included in the acquired metadata, the encryption metadata including the content specifying information, the partial specifying information, and the first encryption key is transmitted to the content data storage device that stores the content data. An encryption metadata transmission means;
A content management system comprising:

Images