JP4754359B2 - Service distribution system - Google Patents

Description

  The present invention relates to a service distribution system, a license device, a prepaid ticket management device, and a portable terminal.

  In general, in BS / terrestrial digital broadcasting, content viewing control is performed using an IC card (CAS card: license card) mounted on a receiver using a conditional access system (CAS). The card decrypts the received control data and performs key extraction, contract data management, and content viewing control (see Non-Patent Document 1). In general commercial transactions, licenses are managed by cards as in credit cards (that is, credit cards are also a type of license card).

  By the way, in the above-mentioned CAS, it is necessary to take out the CAS card when trying to view the content at a place other than home (for example, a mobile phone), and if the CAS card is taken out, the family at home Will not be able to view the content. Further, taking out the CAS card also causes security problems such as loss.

In addition, there is a method in which charging is made in advance by an electronic prepaid method and the service is used by a mobile phone or the like on the go. For example, when content is distributed from a content distribution system to a mobile phone in a prepaid manner via a network, a billing server updates the prepaid amount by charging in packets at the time of content distribution, and a usage amount in a predetermined data capacity unit As long as there is a prepaid balance of minutes, there is one in which content distribution is permitted (see Patent Document 1).
Radio Industry Association: “Access Control Method for Digital Broadcasting” ARIB STD-B25, 2005 JP 2003-8787 A

  By the way, in recent years, the number of users who are conscious of privacy has increased, and there are users who do not want the third party such as content providers to grasp personal information such as the users themselves, viewing contents, and viewing locations. It has increased. In other words, the personal information of the user may be leaked in the billing by the electronic prepaid method.

  Furthermore, when viewing content or conducting business transactions using a license card such as a CAS card while away from home, a license card is always required. If the license card is taken out as described above, There is a problem that viewing cannot be performed.

  The present invention has been made in consideration of such circumstances, and an object of the present invention is to provide a service distribution system that can receive a service according to a license defined by a license card by a portable terminal such as a cellular phone. There is.

  Another object of the present invention is to provide a service distribution system capable of receiving services while protecting privacy (personal information).

  Another object of the present invention is to provide a license device, a prepaid ticket management device and a portable terminal for constituting the service distribution system of the present invention.

In order to solve the above problems, a service distribution system according to the present invention is used in a service distribution system in which a user receives a service via a network using a license device having a license that has been authenticated in advance. Between a prepaid ticket management device that issues and manages a prepaid ticket, a first license device that shares a master key between the prepaid ticket management device, and the first license device And a service distribution means for distributing the service in accordance with an instruction from the prepaid ticket management device when a user receives the service by the mobile terminal. The device must identify its own license device identification number and A means for transmitting a first message authentication code to the prepaid ticket management device using a key, a means for receiving ticket information from the prepaid ticket management device using the master key, and the work key. And means for transmitting a second message authentication code having the ticket information and the master key to the portable terminal, wherein the portable terminal uses the work key from the first license device. Using means for receiving the sent second message authentication code, means for storing a prepaid ticket having the second message authentication code, and a temporary work key shared between the second license devices, Means for transmitting a prepaid ticket to the second license device, wherein the second license device A means for receiving a prepaid ticket from the portable terminal using a temporary work key shared between portable terminals and a prepaid ticket sent from the portable terminal using the master key are transmitted to the prepaid ticket management apparatus. And when the prepaid ticket management device confirms the first message authentication code sent from the first license device, the prepaid ticket management device sends ticket information to the first license device using the master key. A means for transmitting, a means for receiving a prepaid ticket from the second license device using the master key, and a second message authentication code included in the prepaid ticket sent from the second license device are verified. Means and deliver the service upon verification of the second message authentication code And means for instructing the service distribution means .

In the service distribution system according to the present invention, the first license device blindly connects the connection information obtained by connecting the first serial information and the issued amount of the prepaid ticket, performs a blind signature , and obtains the first blind information. Generating means for transmitting the first blind information together with the first message authentication code to the prepaid ticket management device, wherein the prepaid ticket management device receives the first information sent from the first license device. Means is provided for signing blind information and generating ticket information including a part of the ticket information .

In the service distribution system according to the present invention, the second license device transmits a usage amount of the service to the portable terminal using the temporary work key, and a prepaid ticket balance transmitted from the portable terminal. Means for blindly generating information obtained by concatenating the second serial information with the second serial information, and means for transmitting the second blind information to the prepaid ticket management apparatus using the master key; Means for receiving the prepaid ticket balance information from the prepaid ticket management device using the master key, and having the prepaid ticket balance ticket information and the master key using the temporary work key. Means for transmitting the message authentication code to the portable terminal, and The repaid ticket management device uses the master key to sign the second blind information sent from the second license device and means for receiving the second blind information from the second license device. Means for generating ticket information included as part of the ticket information for the remaining amount of the prepaid ticket, and means for transmitting the ticket information for the remaining amount of the prepaid ticket to the second license device using the master key; The portable terminal uses the temporary work key to receive the usage amount of the service from the second license device; a prepaid ticket stored in the portable terminal; and the second license Means for calculating a prepaid ticket balance based on the service usage amount sent from the device; Means for transmitting the prepaid ticket balance and the second serial information to the second license device using a work key; and a second sent from the second license device using the temporary work key. Means for receiving a message authentication code; and means for storing a prepaid ticket having the second message authentication code sent from the second license device as a new prepaid ticket .

In the service distribution system according to the present invention, the portable terminal transmits a public key and a public key certificate possessed by the portable terminal to the first license device, and a first random number is transmitted to the first license. Means for encrypting with the work key sent from the device and sending it to the first license device, wherein the first license device sends the work key in accordance with the public key sent from the portable terminal. Means for encrypting and sending to the portable terminal; and means for authenticating the portable terminal in accordance with the result of confirming the first random number sent from the portable terminal encrypted with the work key. It is characterized by.

In the service distribution system according to the present invention, the first license device includes means for transmitting the first random number to the portable terminal .

In the service distribution system according to the present invention, the first license device has means for registering the terminal identification number and the work key described in the public key certificate of the portable terminal after the authentication of the portable terminal. And the portable terminal has means for storing the work key after authentication of the portable terminal by the first license device .

In the service distribution system according to the present invention, the first license device uses the means for transmitting a second random number to the portable terminal, the work key, the terminal identification number, and the second random number. Confirming the response sent from the terminal, authenticating the mobile terminal to which the prepaid ticket is issued, and the mobile terminal, the work key shared with the first license device, the terminal identification number, And a means for transmitting a response to the first license device using the second random number sent from the first license device .

In the service distribution system according to the present invention, the mobile terminal has means for transmitting a temporary encryption public key to the second license device, and the second license device is sent from the mobile terminal. And means for encrypting the temporary work key using the temporary encryption public key and transmitting the encrypted key to the portable terminal .

  According to the present invention, a portable terminal is managed by associating it with a license card such as a CAS card so that the portable terminal and the license card are linked together, and prepaid billing is performed in advance to prepaid the portable terminal. Since the ticket is issued and stored, the license and ticket information (prepaid ticket) stored on the mobile terminal can be presented and transmitted at another place such as on the go. As a result, on the go There is an effect that a service corresponding to the license specified by the license card can be received by the portable terminal.

  In addition, since the blind signature is used, the signing message is not recognized by the signer, and there is an effect that the prepaid ticket can be properly issued without cooperating with the user. Further, the prepaid ticket is used. In this case, privacy can be effectively protected without the user's personal information being recognized.

  In this way, according to the present invention, it is possible to receive a service without carrying the rassence card, improving the convenience for the user and preventing the loss of the license card. In the present invention, since a prepaid ticket is newly issued for the remaining amount every time a prepaid ticket is used, the prepaid ticket can be divided and used substantially.

  Hereinafter, an embodiment of the present invention will be described with reference to the drawings. Here, a CAS card will be described as an example of the license card, but the present invention can be similarly applied to a license card such as a credit card. The license card is an IC card including an IC chip having a CPU and a memory, and data in the IC chip can be read and written from the IC card read / write device. The IC chip realizes an information processing function by the CPU executing a program.

  FIG. 1 is a block diagram showing a configuration of a service distribution system according to an embodiment of the present invention. The service distribution system according to the present embodiment is configured by a network. In FIG. 1, the CAS management organization 11 includes a prepaid ticket issuance management unit 11a, a prepaid ticket fee collection management unit 11b, and a usage fee distribution unit 11c. The CAS management institution 11 confirms the validity of the CAS card 12 issued to the user in response to the user's request, creates a prepaid ticket, and sends it to the receiver 14 at the user's home (that is, the CAS card 12). Issue prepaid tickets.

  The user delegates the prepaid ticket to the mobile terminal 15 such as a mobile phone registered in advance in the home receiver 14 as described later. The prepaid ticket is stored in the mobile terminal 15. Note that a prepaid ticket may be issued from a prepaid store 16 that cooperates (partners) with the CAS management organization 11 (in this case, the prepaid store 16 includes a prepaid ticket issuing terminal device 16a connected to a network). ).

  The user does not carry the home CAS card 12 when going out. Instead, when viewing the content on the go, the user uses the receiver 17 (that is, the CAS card 18) provided on the go. When viewing content on the go, the user uses the prepaid function 13 in the mobile terminal 15 to pay the CAS management organization 11 for a content usage fee using a prepaid ticket. Payment of the content usage fee with this prepaid ticket is made via the receiver 17 (that is, the CAS card 18) on the go. The CAS management institution 11 receives the payment of the content usage fee by the prepaid ticket, distributes the usage fee to the service provider 19, and instructs the receiver 17 to go out to distribute the content. Then, the service provider 19 that has received the usage fee provides the content to the receiver 17 on the go, and the user views the content through the receiver 17. Further, the CAS management institution 11 newly issues a prepaid ticket for the prepaid ticket balance after the payment of the content usage fee, and this prepaid ticket is passed through the receiver 17 (that is, the CAS card 18) on the go-to terminal. 15 and stored in the portable terminal 15 as a new prepaid ticket (this step is not shown in FIG. 1).

  The receivers 14 and 17 have an IC card read / write device, and can read and write data in the IC chip provided in the CAS cards 12 and 18.

  In the service distribution system shown in FIG. 1, payment of a fee is performed by delivery of a prepaid ticket. Here, the following security conditions are required for the prepaid ticket.

  Billing legitimacy: To charge a user who is away from home under the management of a CAS card.

  Unforgeability: It is impossible for a user and a third party to generate a prepaid ticket and modify the remaining amount without communicating with a CAS management organization.

  Inability to eavesdrop: Even if an eavesdropper eavesdrops on or obtains information on communication, it cannot be used as a prepaid ticket.

  Overusability: A user who has a properly issued prepaid ticket cannot copy the prepaid ticket and use it more than once.

  Anonymity: The user's personal information is not specified from the payment history.

  Divided use possibility: As long as the user pays the prepaid ticket properly, the payment can be divided into arbitrary amounts.

  In the service distribution system described above, first, the payer sets serial information (Serial) in the prepaid ticket, blinds it (Blind (Serial)), and sends it to the claimant. The biller signs the blinded information (Sign (Blind (Serial))) and issues it to the payer in the form of a prepaid ticket. On the payer side, the message in the signature is restored (unblinded) (Sign (Serial)), and this message is presented to the biller side at the time of payment.

  As a result, if serial information is managed on the biller side, fraud in billing can be prevented, and when the first serial information is issued, the biller side links the serial information with the payer side. It is not possible to protect the payer's privacy. In order to perform installment payment, the amount is presented and the serial information and the amount are blindly signed. In other words, in the CAS card, Serial and Sum are set to Blind (Serial, Sum), in the CAS management organization, Sign (Blind (Serial, Sum) is performed, and in the CAS card, Sign (Serial, Sum) is obtained. At this time, if the message authentication code (MAC) of the information received from the CAS management organization is created together with the amount and serial information in the CAS card, the amount cannot be spoofed.

  Next, with reference to FIG. 2, an operation at the time of registering the mobile terminal in the CAS card will be described. Here, it is assumed that the portable terminal has a public key encryption (PKI) -based public key encryption and a signature key, and has a processing function thereof. The CAS management organization has a public key and a signature key for PKI-based public key cryptography and has a processing function thereof, and a CAS card has a processing function for encryption and signature verification by PKI-based public key cryptography. ing.

In FIG. 2, when a registration work start signal is given from the user interface (STB-UI) of the set top box (step P1), the CAS card generates a random number r ₀ (first random number) and transmits it to the mobile phone. (Step P2).

The mobile phone transmits the public key PUBa and its public key certificate to the CAS card (step P3). Then, the CAS card generates a work key Kw, and transmits PENC (Kw || r ₀ , PUBa) encrypted using the public key PUBa to the mobile phone (step P4). PENC (m, k) represents data obtained by performing public key encryption processing on the message m with the public key (k). || represents the concatenation of previous and subsequent data.

In the mobile phone, SENC (r ₀ , Kw) obtained by encrypting the random number r ₀ with the work key Kw is transmitted to the CAS card (step P5). SENC (m, k) represents data obtained by performing the common key encryption process on the message (m) with the common key (k).

Then, the CAS card verifies the random number r ₀ , and if there is no problem, transmits a permission signal Ack to the mobile phone (step P 6), and also stores the work key Kw and the public key certificate in the CAS database (CAS-DB). IDa (identification number described in the public key certificate of the mobile phone) is registered (step P7). On the other hand, the mobile phone stores the work key Kw in the work key storage area (step P8).

Next, with reference to FIG. 3, an operation when issuing a prepaid ticket will be described.
3, when there is a signal issued work start from STB-UI (step P9), the CAS card generates a random number (second random number) _{r 1,} to the mobile phone (step P10). The mobile phone, by using the work key Kw which are stored, and transmits a response (response) as _{IDa || MAC (IDa || r 1} , Kw) to the CAS card (step P11). Note that MAC (m, k) represents a message authentication code with a key using a message shared key (k). When m = ALL, all connected messages except for itself are targeted.

In the CAS card to check the response, if it is determined that there is no problem, and request the issuance amount of money to the STB-UI (step P12), the user enters the issue amount _{X 0} of prepaid ticket from the STB-UI (step P13 ). Then, the CAS card generates a serial information S ₀ for prepaid ticket, processes blind the those connected with the amount issued X _0. Further, in the CAS card, the SENC (X ₀ || CASID, Km) || BL (S ₀ || X ₀ ) || MAC (ALL, Km) is used by using the CASID that is the ID of the CAS card and the master key Km. Is generated and transmitted to the CAS management organization (step P14). Note that BL (m) represents blinding of the message (m) performed on the user side for the blind signature.

In the CAS management organization, when the MAC is verified, a payment process is executed according to the CASID. Further, the CAS management organization signs the blind information, generates SENC (SIGcas (BL (S ₀ || X ₀ )), Km) as a part of the prepaid ticket information, and transmits it to the CAS card (step P15). ). SIGcas (m) represents the electronic signature of the message (m) by the CAS management organization.

In the CAS card, the signed information is unblinded and verified, and if it is determined that there is no problem, a MAC is generated, and SENC (S ₀ || X ₀₎ encrypts this MAC with the work key Kw. || SIGcas (S ₀ || X ₀ ) || MAC (S ₀ || X ₀ || SIGcas (S ₀ || X ₀ ), Km), Kw) is transmitted to the mobile phone (step P16). Then, in the mobile phone, S ₀ || X ₀ || SIGcas (S ₀ || X ₀ ) || MAC (S ₀ || X ₀ || SIGcas (S ₀ || X ₀ ), Km) is prepaid ticket (Step P17).

In the process of step P14, when setting a time limit for deleting history data, BL (Time || S ₀ || X ₀ ) is set using the issue time information Time. Further, when presenting the amount, the blind signature PBL is used. In PBL (S ₀ , X ₀ ), the former (S ₀ ) is blind and the latter (X ₀ ) is open. When the time limit is set and / or the amount is presented in Step P14, the contents of the signature are changed in Step P17 accordingly.

Next, with reference to FIG. 4, the operation when using a prepaid ticket when going out or the like will be described.
In FIG. 4, for example, when using a prepaid ticket when going out, the mobile phone generates a public key PUBat for temporary encryption and transmits it to the CAS card at the place where it goes (step P18). The going-out CAS card generates a temporary encryption work key Kwt, performs an encryption process using PUBat, and transmits PENC (Kwt, PUBat) to the mobile phone (step P19). When the user selects a desired content from the STB-UI (step P20), the going-out CAS card presents a viewing fee Y related to the content (step P21), and when the user agrees to pay the amount, the STB-UI. An acknowledgment signal Ack is transmitted to the outside CAS card (step P22).

In the going-out CAS card, the viewing fee Y is encrypted and MAC-processed using the temporary encryption work key Kwt to generate SENC (Y, Kwt) || MAC (ALL, Kwt). Then, the going-out CAS card transmits SENC (Y, Kwt) || MAC (ALL, Kwt) to the mobile phone (step P23). To calculate the balance _{X 1} in the mobile telephone, generates the serial _{S 1} of the balance _{X 1,} performing MAC _{processing, SENC (S 1 || X 1} || Y || S 0 || X 0 | | SIGcas (S ₀ || X ₀ ) || MAC (S ₀ || X ₀ || SIGcas (S ₀ || X ₀ ), Km), Kwt) || MAC (ALL, Kwt) on the go CAS card (Step P24).

In the going-out CAS card, the remaining X ₁ and the serial S ₁ concatenated are subjected to blind processing, and SENC (Y || S ₀ || X ₀ || SIGcas (S ₀ || X ₀ ) || MAC (S ₀ || X ₀ || SIGcas (S ₀ || X ₀ ), Km), Km) || BL (S ₁ || X ₁ ) || MAC (ALL, Km) is transmitted to the CAS management organization. (Step P25). Then, in the CAS management agency, to verify the MAC and signature, to verify whether or not from the ticket serial history serial S ₀ is not used, if there is no problem, to sign the blind information. Then, the CAS management organization generates SENC (SIGcas (BL (S ₁ || X ₁ )), Km) as a part of the ticket information and transmits it to the going-out CAS card (step P26).

Thereafter, the going-out CAS card performs the same processing as in Step P16 described in FIG. 3 (Step P27), and the mobile phone has S ₁ || X ₁ || SIGcas (S ₁ || X ₁ ) || MAC (S ₁ || X ₁ || SIGcas (S ₁ || X ₁ ), Km) is stored as a new prepaid ticket (step P 28).

If a time limit is set and / or an amount is presented when a prepaid ticket is issued, the contents of the signature are changed in step P24. When setting the time limit for erasing history data in step P24, BL (Time || S ₀ || X ₀ ) is used using the issue time information Time.

Furthermore, the blind signature PBL is used when presenting the amount. In PBL (S ₀ , X ₀ ), the former (S ₀ ) is blind and the latter (X ₀ ) is open. When the time limit is set and / or the amount is presented in step P24, the content of the signature is changed in step P28 accordingly. In addition, when the time limit is set, the issue time information Time is also stored in the ticket serial history, and the information that has passed a predetermined time from the issue time is deleted.

  In this way, a legitimate charge can be made from the mobile phone registered in the CAS card in accordance with the ID of the mobile phone, and the prepaid ticket has MAC information based on the master key, so that the amount differs from the amount charged. It is possible to detect fraud such as generation of a prepaid ticket on which information is recorded and tampering with the remaining amount.

  Furthermore, when using a prepaid ticket, it is necessary to know the serial information. Since this serial information is encrypted with a shared key or blinded, it is difficult to know the serial information during communication. is there. In addition, since the serial information related to the used prepaid ticket is recorded in the serial history in the CAS management organization, it is difficult to duplicate and use the prepaid ticket of the same serial information.

  In addition, when issuing a prepaid ticket, the CAS management organization cannot know the serial information. For this reason, it is difficult to specify the user from the serial information when using the prepaid ticket. Since a new prepaid ticket with the remaining amount is issued for the use of a prepaid ticket of an arbitrary amount, the prepaid ticket can be divided and used substantially.

The embodiment of the present invention has been described in detail with reference to the drawings. However, the specific configuration is not limited to this embodiment, and includes design changes and the like within a scope not departing from the gist of the present invention.
For example, in the above-described embodiment, the present invention is applied to license management using a CAS card in BS / terrestrial digital broadcasting or the like, but the present invention is applicable to various license management using a credit card or the like.

  In the service distribution system according to the present invention, the prepaid ticket is used for payment of the usage fee of the service received by the user, but the content of the service is not particularly limited. Examples of the service contents include provision of contents as in the above-described embodiment, agency of ticket arrangements for transportation facilities and theater, provision of communication lines such as voice calls and data communication, online shopping, and the like.

  Further, the license device according to the present invention may be configured as an IC card (license card) including an IC chip as in the above-described embodiment, or may be configured as a single IC chip. When the IC chip is configured as a single unit, it may be provided in, for example, a communication device (such as the receiver of the above-described embodiment). The license device according to the present invention may be configured by an IC card (license card) including an IC chip and a device (such as the receiver of the above-described embodiment) on which the license card is mounted, or an IC You may comprise from a chip | tip and the apparatus with which this IC chip is mounted | worn.

It is a block diagram which shows the structure of the service delivery system which concerns on one Embodiment of this invention. It is a sequence diagram for demonstrating the procedure of the mobile telephone registration to the CAS card concerning the embodiment. It is a sequence diagram for demonstrating the issuing procedure of the prepaid ticket which concerns on the embodiment. It is a sequence diagram for demonstrating the procedure at the time of using the prepaid ticket which concerns on the same embodiment on the go.

Explanation of symbols

DESCRIPTION OF SYMBOLS 11 ... CAS management organization, 11a ... Prepaid ticket issue management part (prepaid ticket management apparatus), 11b ... Prepaid ticket fee collection management part (prepaid ticket management apparatus), 11c ... Usage charge distribution part, 12, 18 ... CAS card, 13 ... Prepaid function, 14, 17 ... Receiver, 15 ... Mobile terminal (mobile phone), 16 ... Prepaid store, 16a ... Prepaid ticket issuing terminal device, 19 ... Service provider

Claims (8)

In a service distribution system in which a user receives a service via a network using a license device having a license that has been authenticated in advance,
A prepaid ticket management device for issuing and managing prepaid tickets used in the service distribution system;
The first and second license devices that share a master key with the prepaid ticket management device;
A portable terminal sharing a work key with the first license device;
Service delivery means for delivering the service according to an instruction from the prepaid ticket management device when a user receives the service by the mobile terminal;
The first license device is:
Means for transmitting a first message authentication code to the prepaid ticket management device using the identification number of the own license device and the master key;
Means for receiving ticket information from the prepaid ticket management device using the master key;
Means for transmitting to the portable terminal a second message authentication code having the ticket information and the master key using the work key;
The portable terminal is
Means for receiving a second message authentication code sent from the first license device using the work key;
Means for storing a prepaid ticket having the second message authentication code;
Means for transmitting the prepaid ticket to the second license device using a temporary work key shared between the second license devices;
The second license device is:
Means for receiving a prepaid ticket from the portable terminal using a temporary work key shared between the portable terminals;
Means for transmitting a prepaid ticket sent from the portable terminal to the prepaid ticket management device using the master key;
The prepaid ticket management device includes:
Means for transmitting ticket information to the first license device using the master key upon confirming the first message authentication code sent from the first license device;
Means for receiving a prepaid ticket from the second license device using the master key;
Means for verifying a second message authentication code included in the prepaid ticket sent from the second license device;
Means for instructing the service delivery means to deliver the service upon verifying the second message authentication code ;
A service distribution system characterized by this. The first license device is:
Means for blindly generating concatenated information obtained by concatenating the first serial information and the issued amount of the prepaid ticket and performing a blind signature to generate the first blind information;
Sending the first blind information together with the first message authentication code to the prepaid ticket management device ;
The prepaid ticket management device includes:
Means for generating ticket information by signing the first blind information sent from the first license device and including it as a part of the ticket information;
The service distribution system according to claim 1 . The second license device is:
It means for transmitting a usage charge of the service to the mobile terminal by using the temporary working key,
Means for blindly generating information obtained by concatenating the prepaid ticket balance transmitted from the portable terminal and the second serial information to generate second blind information;
It means for transmitting by using the master key, the second blind information in the prepaid ticket management apparatus,
Means for receiving from the prepaid ticket management device ticket information of the remaining prepaid ticket using the master key;
Means for transmitting , using the temporary work key, a second message authentication code having the ticket information of the prepaid ticket balance and the master key to the portable terminal ;
The prepaid ticket management device includes:
Means for receiving the second blind information from the second license device using the master key;
Means for generating ticket information by signing the second blind information sent from the second license device and including it as a part of the ticket information of the remaining amount of the prepaid ticket ;
Means for using the master key to transmit ticket information of the remaining amount of the prepaid ticket to the second license device;
The portable terminal is
Means for receiving the usage amount of the service from the second license device using the temporary work key;
Means for calculating a prepaid ticket balance based on the prepaid ticket stored in the portable terminal and the usage amount of the service sent from the second license device;
It means for transmitting by using the temporary working key, the prepaid ticket balance and the second serial data to the second license device,
Means for receiving a second message authentication code sent from the second license device using the temporary work key;
Means for storing a prepaid ticket having a second message authentication code sent from the second license device as a new prepaid ticket;
The service distribution system according to claim 2, wherein: The portable terminal is
Means for transmitting the public key and public key certificate of the portable terminal to the first license device;
Means for encrypting a first random number with the work key sent from the first license device and sending the first random number to the first license device;
The first license device is:
It means for sending to said mobile terminal by encrypting the work key according to the public key sent from said mobile terminal,
Means for authenticating the mobile terminal according to a result of confirming a first random number transmitted from the mobile terminal encrypted with the work key,
The service distribution system according to any one of claims 1 to 3, wherein The first license device is:
5. The service distribution system according to claim 4, further comprising means for transmitting the first random number to the portable terminal. The first license device is:
A means for registering the terminal identification number described in the public key certificate of the portable terminal and the work key after the authentication of the portable terminal;
The portable terminal is
Means for storing the work key after authentication of the portable terminal by the first license device;
The service distribution system according to claim 4 or 5, wherein The first license device is:
Means for transmitting a second random number to the portable terminal;
When confirming the response sent from the portable terminal using the work key, the terminal identification number, and the second random number, the means for authenticating the portable terminal to which the prepaid ticket is issued,
The portable terminal is
Work key shared with the first license device, terminal identification number, and by using the second random number sent from the first license device, means for transmitting a response to said first license device Have
The service distribution system according to any one of claims 1 to 6, wherein The portable terminal is
Means for transmitting a temporary encryption public key to the second license device;
The second license device is:
Means for encrypting the temporary work key using a temporary encryption public key sent from the portable terminal and transmitting the encrypted key to the portable terminal;
The service distribution system according to any one of claims 1 to 7, wherein

Images