JP4826577B2 - Information processing system and information use control system - Google Patents

Description

  The present invention relates to an information processing system and an information use control system.

  There is known a digital rights management (DRM) system that controls the use of content by using a security policy.

  Japanese Patent Application Laid-Open No. 2004-228561 describes a technique for maintaining consistent maintenance related to document security when documents are exchanged between domains with different security policies.

  Specifically, the system described in Patent Document 1 includes a first security server provided in a first domain, a second security server provided in a second domain, and each security server. And a position management server for managing the position information. When a user tries to copy a document created in the first domain with a copying machine in the second domain, the copying machine extracts the domain ID of the first domain from the document, and the domain ID The second security server is inquired about the position of the first security server based on the above. The second security server queries the location management server for the location of the inquired first security server, and the location management server provides the location information of the first security server to the second security server. To do. The second security server returns the position information of the first security server to the copying machine, and the copying machine requests the first security server to permit copying based on the position information. The first security server determines whether or not copying is permitted by referring to the rule table, and returns the determination result to the copying machine.

JP 2005-196338 A

  By the way, when the usage information corresponding to the control target information is received from the user, the usage information for using the control target information based on the usage control information stored in association with the control target information. If there are multiple information usage control systems that provide the above information to the above users, request the usage information of control target information managed by a specific information usage control system from other information usage control systems. There is a request to do.

  When realizing the request, in the specific information usage control system, the usage information corresponding to the control target information from the other information usage control system is requested together with the usage information request corresponding to the control target information from the user. Since requests are also received, measures to increase the access frequency are required.

  The present invention avoids an increase in the access frequency to the specific information usage control system by requesting and acquiring the usage information of the control target information managed by the specific information usage control system from other information usage control systems. Another object of the present invention is to provide an information processing system and an information use control system that can be realized while being reduced.

Each of the information processing systems according to the present invention has storage means for storing usage control information for controlling the use of control target information in association with the control target information, and corresponds to the control target information from the user. When receiving a request for usage information, the first and second usage information for using the control target information is provided to the user based on the usage control information stored in the storage unit in association with the control target information. Information including a second information usage control system, wherein the first information usage control system sends information stored in the storage means of the first information usage control system to the second information usage control system It has a delivery means, the second information usage control system, stores the hand of the first information corresponding the usage control system receives the information the second information usage control system A registration information registering means, is connected to the second information usage control system, issuance of the usage information from the user device that the user uses, for the control object information managed in the first information usage control system When receiving the request, if it is determined that the use of the control target information of the user is permitted based on the use control information registered in the storage means of the second information use control system, the use information and wherein the Turkey of having a, and providing means for providing to the user.

  In one aspect of the present invention, the information sending means changes the usage control information included in the information stored in the storage means based on the change information set for the second information usage control system. In addition, information for sending is generated, and the information for sending is sent to the second information usage control system.

The change information is set according to the reliability of the second information usage control system .

In addition, the information usage control system according to the present invention includes a second storage unit that stores usage control information for controlling usage of control target information in association with the control target information, and control target information from a user. Upon receiving the request for the corresponding usage information, the usage information for using the control target information is given to the user based on the usage control information stored in the second storage means in association with the control target information. Use information corresponding to control target information from a user, having first storage means for storing provision means to be provided and use control information for controlling use of the control target information in association with the control target information When the request is received, the usage information for using the control target information is given to the user based on the usage control information stored in the first storage means in association with the control target information. From another information usage control system to provide, receive the information stored in the first storage means have a, a registration information registering means to the second storing means, said providing means, connected When a usage information issuance request for control target information managed in the other information usage control system is received from a user device used by the user, the usage control information registered in the second storage means Based on the above, when it is determined that the user is permitted to use the control target information, the user information is provided to the user .

  According to the invention described in claim 1, the specific information usage control system is configured to request and acquire the usage information of the control target information managed by the specific information usage control system from the other information usage control system. It is possible to avoid or reduce the increase in the access frequency to the.

  According to the second aspect of the present invention, a request that is changed from the use control information that is applied to a request to a specific information use control system is applied to a request to another information use control system. It becomes possible.

  According to the invention described in claim 3, the specific information usage control system is configured to request and acquire the usage information of the control target information managed by the specific information usage control system from the other information usage control system. It is possible to avoid or reduce the increase in the access frequency to the.

  According to the invention described in claim 4, the specific information usage control system is configured to request and acquire the usage information of the control target information managed by the specific information usage control system from the other information usage control system. It is possible to avoid or reduce the increase in the access frequency to the.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

  FIG. 1 is a block diagram showing an example of the configuration of the information processing system 1 according to the present embodiment. In FIG. 1, the information processing system 1 includes two information usage control systems 10 and 20. The information usage control systems 10 and 20 are connected to be communicable with each other. When the information usage control system 10 or 20 receives a request for usage information corresponding to the control target information from the user, each of the control target information is based on the usage control information stored in association with the control target information. It provides the user with usage information for using the.

  Each of the information use control systems 10 and 20 is realized by cooperation of hardware resources and software in one aspect, and is, for example, a computer. Specifically, each function of the information use control systems 10 and 20 is realized by reading an information processing program recorded on a recording medium into a main memory and executing it by a CPU (Central Processing Unit). . The information processing program can be provided by being recorded on a computer-readable recording medium such as a CD-ROM, or can be provided by communication as a data signal. However, each of the information usage control systems 10 and 20 may be realized only by hardware. In addition, each of the information usage control systems 10 and 20 may be physically realized by a single device, or may be physically realized by a plurality of devices.

  In one aspect, the information usage control systems 10 and 20 are provided in different domains D1 and D2. For example, the information use control systems 10 and 20 are provided in different regions, companies, bases, or networks such as a LAN (Local Area Network). In one aspect, an information processing apparatus such as a personal computer (PC) in one domain cannot access the information usage control system in the other domain due to a firewall or the like. However, the information processing apparatus in one domain may be able to access the information usage control system in the other domain. Further, the information usage control systems 10 and 20 are not necessarily provided in different domains.

  The information usage control system 10 includes a storage unit 11, a registration unit 12, and a providing unit 13.

  The storage unit 11 stores usage control information for controlling use of the control target information in association with the control target information. For example, the storage unit 11 stores usage control information for controlling use of the control target information and identification information for identifying the control target information in association with each other.

  The control target information is information that is a target of usage control, and is, for example, content such as a document, a moving image, a still image, and audio. The control target information is electronic data in one aspect, but may be information in a form other than electronic data, such as information described on paper. In the following description, the control target information is referred to as “content”.

  In one aspect, the content is protected by encryption or the like. In this aspect, the storage unit 11 may store protection release information for releasing protection of content, such as information for decrypting the content, in association with the content.

  The usage control information is information for controlling the use of the content, and is, for example, information indicating a condition or a range in which the use of the content is permitted, information indicating a restriction on the use of the content, or the like. Specifically, the usage control information includes information indicating a user, a period, a number of times, an operation, or a combination thereof, in which usage of content is permitted. The usage control information is called, for example, a security policy. In the following description, the usage control information is called “policy”.

  The storage unit 11 includes, for example, a policy table for managing policies and an association table for managing associations between contents and policies.

  FIG. 2 is a diagram illustrating an example of a policy table. In the example of FIG. 2, for each policy, a policy ID that is identification information for identifying the policy, a policy name that is the name of the policy, and a content of the policy are recorded in association with each other in the policy table. Has been. Each policy includes information indicating one or more users or groups of users who are allowed to use the content, and usage conditions (or usage rights) given to the users or groups specified for each user or group. ). Information indicating usage conditions includes information indicating an effective period that is a period during which usage is permitted, information indicating the number of times that usage is permitted, and information that indicates permitted operations (specifically, Information indicating whether or not each of browsing, transcription, editing, and printing is permitted) and information indicating a restriction during printing.

In FIG. 2, for example, the policy with the policy ID “PS1-001” has the policy name “for development 1G” and indicates the following contents (a1) to (a3).
(A1) Content use is permitted to users belonging to the “development 1G” group and users belonging to the “business alliance user 1” group.
(A2) For users belonging to the “Development 1G” group, operations such as browsing, posting, editing, and printing are permitted, the validity period and the number of times of use are unlimited, and a predetermined header and footer are added during printing. .
(A3) For users belonging to the “business alliance user 1” group, browsing and printing are permitted, the valid period is from April 1, 2007 to March 31, 2008, and the number of uses is up to 20 times. A tint block is added to the entire surface of the printing paper during printing. That is, the usage authority of the user belonging to “business alliance user 1” is more limited than the usage authority of the user belonging to “development 1G”.

  FIG. 3 is a diagram illustrating an example of the association table. In the example of FIG. 3, for each content, a content ID that is identification information for identifying the content and a policy ID of a policy for controlling the use of the content are recorded in association with each other. ing.

  The registration unit 12 receives information to be registered in the storage unit 11 from the user, and registers the information in the storage unit 11. For example, the registration unit 12 receives information to be registered in the storage unit 11 from a device 110 (hereinafter referred to as “user device”) used by a user such as a PC connected to the information usage control system 10, The information is registered in the storage unit 11.

  In one aspect, the registration unit 12 receives a policy from a user and registers the policy in the policy table in association with the policy ID of the policy. In addition, the registration unit 12 receives designation of the content ID and the policy ID from the user, and registers the content ID and the policy ID in the association table in association with each other. The content ID is included in the content identified by the content ID. In an aspect in which the content is protected by encryption or the like, for example, the registration unit 12 provides protection information (for example, an encryption key) for protecting the content to the user at the time of association, and cancels the protection of the content. Information for protection (for example, a decryption key) is registered in the association table in association with the content ID, and the user protects (for example, encrypts) the content using the protection information.

  The registration of the policy in the policy table and the registration of the association in the association table may be performed by different users or user devices, or may be performed by the same user or user device. .

  The registration unit 12 receives authentication information (user ID and password, etc.) for authenticating the user from the user, authenticates the user based on the authentication information, and when the authentication is successful, The function of the registration unit 12 may be provided to the user.

  Upon receiving a request for usage information corresponding to the content from the user, the providing unit 13 uses the usage information for using the content based on a policy stored in the storage unit 11 in association with the content. To provide For example, upon receiving a request for usage information corresponding to the content from the user device 120, the providing unit 13 refers to the storage unit 11 and uses the usage information for using the content based on the policy corresponding to the content. Provided to the user device 120.

  The usage information is, for example, information for enabling the use of content, information necessary for using the content, information indicating usage conditions or usage authority for the content, and the like. The usage information is called, for example, a license. In the following description, the usage information is called “license”.

Specific examples of the license include the following (b1) to (b3).
(B1) The license includes information indicating whether to permit the use of the content. In this case, when the user device 120 receives a license indicating permission for use, the user device 120 permits the user to use the content, and otherwise does not allow the user to use the content. Here, the “use of content” may be a specific partial operation among a plurality of types of operations on the content. For example, the user device 120 may permit browsing of the content regardless of the license, and permit printing of the content only when a license indicating usage permission is received.
(B2) The license includes information indicating usage conditions such as a period during which usage is permitted, the number of times, and operations. In this case, the user device 120 permits the user to use the content within a range in accordance with the usage conditions. For example, the user device 120 enables the operation of content only for the operations that are permitted to be used among a plurality of types of operations.
(B3) The license includes protection release information (for example, a decryption key) for releasing protection of the protected content. In this case, the user device 120 cancels the content protection using the protection cancellation information. For example, the encrypted content is decrypted.

  In one aspect, the providing unit 13 accepts a user ID, which is identification information for identifying the user, from the user, and the content identified by the user identified by the user ID is based on the policy. It is determined whether or not the license is permitted. If it is determined that the license is permitted, a license including a usage condition for the user is provided to the user. The providing unit 13 determines whether or not the usage conditions are satisfied for some or all of the usage conditions for the user, and provides the license to the user when it is determined that the usage conditions are satisfied. Also good. For example, the providing unit 13 determines whether or not the usage is within the effective period and the number of uses, and provides the license to the user when it is determined that the use is within the effective period and the number of uses. Good.

  The providing unit 13 receives authentication information for authenticating the user from the user, authenticates the user based on the authentication information, and uses the function of the providing unit 13 when the authentication is successful. May be provided to a person.

  The information usage control system 20 includes a storage unit 21, a registration unit 22, and a providing unit 23. Hereinafter, although the memory | storage part 21, the registration part 22, and the provision part 23 are demonstrated, since these are the same as that of the said information utilization control system 10, detailed description is abbreviate | omitted.

  The storage unit 21 stores a policy for controlling the use of content in association with the content.

  The registration unit 22 receives information to be registered in the storage unit 21 from the user, and registers the information in the storage unit 21. For example, the registration unit 22 receives information to be registered in the storage unit 21 from the user device 210 connected to the information usage control system 20 and registers the information in the storage unit 21.

  Upon receiving a request for a license corresponding to the content from the user, the providing unit 23 provides the user with a license for using the content based on a policy stored in the storage unit 21 in association with the content. provide. For example, when the providing unit 23 receives a request for a license corresponding to the content from the user device 220, the providing unit 23 refers to the storage unit 21 and obtains a license for using the content based on a policy corresponding to the content. Provided to device 220.

  Further, in the present embodiment, the information usage control system 10 has an information sending unit 14, and the information usage control system 20 has an information registration unit 24.

  The information sending unit 14 sends the information stored in the storage unit 11 of the information usage control system 10 to the information usage control system 20.

  The information registration unit 24 receives the information from the information usage control system 10 and registers it in the storage unit 21 of the information usage control system 20.

  For example, the information registration unit 24 requests information in the storage unit 11 from the information sending unit 14, and the information sending unit 14 passes the information in the storage unit 11 to the information registration unit 24 in response to the request to register information. The unit 24 registers information in the storage unit 11 in the storage unit 21. For example, the information registration unit 24 receives the policy table and the association table in the storage unit 11 from the information sending unit 14 and registers them in the storage unit 21.

  When the past information in the storage unit 11 is registered in the storage unit 21, the information sending unit 14 passes the difference between the current information in the storage unit 11 and the past information to the information registration unit 24. Good. That is, when updating the information in the storage unit 11 in the storage unit 21, the information sending unit 14 may pass only the updated portion of the information in the storage unit 11 to the information registration unit 24.

  Each of the information usage control systems 10 and 20 may include an information sending unit and an information registration unit. In this case, information in the storage unit is exchanged between the information use control systems 10 and 20.

  In addition, although two information usage control systems are shown in FIG. 1, it is sufficient if there are a plurality of information usage control systems, and three or more information usage control systems may be provided. In this case, a certain information usage control system may send information in the storage unit to a plurality of other information usage control systems. Also, a certain information usage control system may receive information in the storage unit from a plurality of other information usage control systems and register it in its own storage unit.

  In one aspect, the information sending unit 14 changes the policy included in the information stored in the storage unit 11 based on the change information set for the information usage control system 20 and sends the information for sending. The information for sending is sent to the information usage control system 20.

  For example, the information sending unit 14 rewrites the policy included in the information in the storage unit 11 based on the change information to generate sending information, and sends the sending information including the rewritten policy to the information usage control system 20. send. Specifically, the information sending unit 14 rewrites the policy table based on the change information, and sends the rewritten policy table and association table to the information usage control system 20.

  However, the information sending unit 14 may add the change information to the information in the storage unit 11 to generate sending information, and send the sending information to the information usage control system 20. For example, the information sending unit 14 may send the policy table, the association table, and the change information to the information usage control system 20. In this case, the information usage control system 20 interprets the policy based on the change information.

  The change information is, for example, information for restricting the use conditions defined in the policy or information for restricting the use authority of the user who accesses the information use control system 20. However, the change information may relax use conditions defined in the policy.

  In the aspect in which the information sending unit 14 sends information to a plurality of information use control systems, for example, change information is set for each information use control system. The change information is set, for example, according to the reliability of the information usage control system of the destination. For example, when the information usage control system 20 is accessible from the Internet, the change information is set so that information with limited usage conditions is sent to the information usage control system 20.

  In a specific aspect, the information usage control system 10 includes a change information storage unit 15 and a change information registration unit 16.

  The change information storage unit 15 stores change information for changing the policy stored in the storage unit 11.

  The change information registration unit 16 receives change information from the user and registers the change information in the change information storage unit 15. For example, the change information registration unit 16 receives change information for the information usage control system 20 from the user device 130 and registers the change information in the change information storage unit 15 in association with the information usage control system 20.

  Then, the information sending unit 14 changes the information in the storage unit 11 based on the change information stored in the change information storage unit 15.

  The change information storage unit 15 includes, for example, a change information table that manages change information.

  4-6 is a figure which shows an example of a change information table, respectively. 4 to 6, as shown in FIG. 7, the information processing system 1 includes four information usage control systems 10 to 40, and the information sending unit 14 sends information to the three information usage control systems 20, 30, and 40. The change information table in the case of sending is shown.

  4 to 6, in the change information table, for each information use control system, a system ID that is identification information for identifying the information use control system and change information corresponding to the information use control system are mutually connected. It is recorded in association.

  In the change information table of FIG. 4, information for changing an operation permitted to be used and information for changing a restriction during printing are described as change information. In this case, the policy tables shown in FIGS. 8 to 10 are created based on the policy table of FIG. 2 and the change information table of FIG. 4, and the policy tables of FIGS. , 40 to be registered.

  In the change information table of FIG. 5, information for changing the valid period is described as the change information. In this case, the policy tables shown in FIGS. 11 and 12 are created based on the policy table of FIG. 2 and the change information table of FIG. 5, and the policy tables of FIGS. 11 and 12 are sent to the information usage control systems 20 and 40, respectively. Registered.

  In the change information table of FIG. 6, information for changing the number of uses is described as change information. In this case, the policy tables shown in FIGS. 13 and 14 are created based on the policy table of FIG. 2 and the change information table of FIG. 6, and the policy tables of FIGS. 13 and 14 are sent to the information usage control systems 20 and 40, respectively. Registered.

  Hereinafter, the operation of the information processing system 1 according to the present embodiment will be specifically described by dividing into policy registration, content registration, change information registration, storage unit information registration, and license issuance. In the following description, the information use control system is simply referred to as “system”.

(Register policy)
FIG. 15 is a flowchart illustrating an example of a policy registration process. Hereinafter, an example of a policy registration process will be described with reference to FIG.

  The system 10 receives a policy from the user device 110 (S11). Specifically, the system 10 accepts designation of a policy name, a permitted user, a valid period, the number of times of use, and the like from the policy creator's user device 110.

  Next, the system 10 registers the policy in the storage unit 11 (S12). Specifically, the system 10 generates a policy ID of the policy, and registers a new record in which the policy ID and the policy are associated with each other in the policy table.

(Content registration)
FIG. 16 is a flowchart illustrating an example of content registration processing. Hereinafter, an example of content registration processing will be described with reference to FIG.

  When the system 10 receives a policy table provision request from the user apparatus 110 of the encrypted content creator (S21), the system 10 provides the user apparatus 110 with the policy table stored in the storage unit 11 (S22).

  When the encrypted content creator selects a policy ID of a policy desired to be applied to the content from the policy table, and the user apparatus 110 receives the designation of the policy ID from the encrypted content creator, the encrypted content creator The content ID for generating the policy ID and the content ID are sent to the system 10.

  When the system 10 receives the policy ID and the content ID from the user device 110 (S23), the system 10 sends an encryption key for encrypting the content to the user device 110 (S24), and decrypts the policy ID, the content ID, and the content. A new record associated with the decryption key to be registered is registered in the association table of the storage unit 11 (S25).

  The user device 110 receives the encryption key from the system 10, encrypts the content to be protected using the encryption key, and generates the encrypted content.

(Registration of change information)
FIG. 17 is a flowchart illustrating an example of change information registration processing. Hereinafter, an example of change information registration processing will be described with reference to FIG.

  For example, when the system 10 is operated in the domain D1, when the system 20 is newly constructed in the domain D2, the change information creator creates change information corresponding to the system 20 and identifies the system 20 The system ID and the created change information are sent to the system 10 via the user device 130.

  Upon receiving the system ID and the change information from the user device 130 (S31), the system 10 registers a new record in which the system ID and the change information are associated with each other in the change information table of the change information storage unit 15 (S32). ).

(Registration of storage unit information)
FIG. 18 is a flowchart illustrating an example of registration processing of the system 20 in registration of storage unit information, and FIG. 19 is a flowchart illustrating an example of sending processing of the system 10 in registration of storage unit information. Hereinafter, an example of processing when information in the storage unit 11 of the system 10 is registered in the storage unit 21 of the system 20 will be described with reference to FIGS.

  The system 20 sends a request for storage unit information including the system ID of the system 20 to the system 10 (S41).

  Upon receiving the request from the system 20 (S51), the system 10 determines whether or not the system ID included in the request is in the change information storage unit 15 (S52).

  When it is determined that there is a system ID (S52: YES), the system 10 acquires change information corresponding to the system ID from the change information storage unit 15 (S53).

  Next, the system 10 changes the policy table stored in the storage unit 11 based on the change information, and creates a new policy table for the system 20 (S54).

  Next, the system 10 sends the created policy table and the association table stored in the storage unit 11 to the system 20 (S55).

  Upon receiving the policy table and the association table from the system 10 (S42), the system 20 registers the policy table and the association table in the storage unit 21 (S43).

  When it is determined in step S52 that there is no system ID (S52: NO), the system 10 sends error information to the system 20 (S56).

(Provision of license)
FIG. 20 is a flowchart illustrating an example of a license providing process. Hereinafter, an example of a license provision process will be described with reference to FIG.

  The user of the domain D2 who intends to use the encrypted content causes the user device 220 (specifically, application software for using the encrypted content) to activate the encrypted content. Here, the encrypted content may be managed by the system 10 or may be managed by the system 20. In other words, it may be content associated with the policy in the system 10 or content associated with the policy in the system 20.

  When the user device 220 receives an instruction to start encrypted content from the user, the user device 220 extracts the content ID of the content from the encrypted content, and sends a license issuance request including the content ID and the user ID to the system 20. In this case, the user device 220 may receive an input of a user ID from the user, or may read a user ID stored in the user device 220 in advance.

  When receiving a license issuance request from the user device 220 (S61), the system 20 acquires a policy and a decryption key corresponding to the content ID included in the request from the storage unit 21 (S62).

  Based on the acquired policy, the system 20 determines whether the user identified by the user ID included in the license issuance request is a user permitted to use the content (S63). ).

  If it is determined that the user is an authorized user (S63: YES), the system 20 extracts the usage conditions defined for the user from the policy, and acquires the usage conditions and the acquisition. A license including the decrypted key is generated (S64), and the license is issued to the user device 220 (S65).

  On the other hand, when it is determined that the user is not authorized (S63: NO), the system 20 sends error information to the user device 220 (S66).

  When the user device 220 receives the license from the system 20, the user device 220 decrypts the encrypted content using the decryption key included in the license to restore the original content, and based on the usage conditions included in the license, the user apparatus 220 Allow use. For example, when the usage condition is only browsing, the user device 220 displays content on the screen when receiving a browsing instruction from the user, and executes printing when receiving a printing instruction from the user. For example, a message that there is no print authority is displayed on the screen.

  In addition, this invention is not limited to the said embodiment, It can change variously within the range which does not deviate from the summary of this invention.

It is a block diagram which shows an example of a structure of the information processing system which concerns on embodiment. It is a figure which shows an example of a policy table. It is a figure which shows an example of an association table. It is a figure which shows an example of a change information table. It is a figure which shows an example of a change information table. It is a figure which shows an example of a change information table. It is a block diagram which shows the information processing system containing four information utilization control systems. FIG. 5 is a diagram showing a sending policy table created based on the policy table of FIG. 2 and the change information table of FIG. FIG. 5 is a diagram showing a sending policy table created based on the policy table of FIG. 2 and the change information table of FIG. FIG. 5 is a diagram showing a sending policy table created based on the policy table of FIG. 2 and the change information table of FIG. FIG. 6 is a diagram showing a sending policy table created based on the policy table of FIG. 2 and the change information table of FIG. 5. FIG. 6 is a diagram showing a sending policy table created based on the policy table of FIG. 2 and the change information table of FIG. 5. It is a figure which shows the policy table for a transmission produced based on the policy table of FIG. 2, and the change information table of FIG. It is a figure which shows the policy table for a transmission produced based on the policy table of FIG. 2, and the change information table of FIG. It is a flowchart which shows an example of the registration process of a policy. It is a flowchart which shows an example of a content registration process. It is a flowchart which shows an example of the registration process of change information. It is a flowchart which shows an example of the registration process in registration of memory | storage part information. It is a flowchart which shows an example of the sending process in registration of memory | storage part information. It is a flowchart which shows an example of the provision process of a license.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 1 Information processing system 10,20 Information usage control system 11,21 Storage part, 12,22 Registration part, 13,23 Provision part, 14 Information transmission part, 15 Change information storage part, 16 Change information registration part, 24 Information Registration department.

Claims (4)

Each has storage means for storing the usage control information for controlling the usage of the control target information in association with the control target information, and upon receiving a usage information request corresponding to the control target information from the user, Including first and second information usage control systems that provide usage information for using the control target information to the user based on the usage control information stored in the storage unit in association with the control target information. ,
The first information usage control system has information sending means for sending the information stored in the storage means of the first information usage control system to the second information usage control system,
The second information usage control system includes :
Information registration means for receiving the information from the first information usage control system and registering it in the storage means of the second information usage control system ;
When a usage information issuance request for control target information managed in the first information usage control system is received from a user device connected to the second information usage control system and used by the user, the second information usage control system Based on the usage control information registered in the storage means of the information usage control system, the usage information is provided to the user when it is determined that the user is permitted to use the control target information. Providing means;
The information processing system comprising a Turkey which have a. The information processing system according to claim 1,
The information sending means changes the usage control information included in the information stored in the storage means based on the change information set for the second information usage control system, and sends the information for sending. An information processing system that generates and sends the information for transmission to the second information usage control system. The information processing system according to claim 2,
The change information, the information processing system characterized in that it is set in accordance with the reliability of the second information usage control system. Second storage means for storing usage control information for controlling use of the control target information in association with the control target information;
When a request for usage information corresponding to the control target information is received from the user, the control target information is used based on the usage control information stored in the second storage means in association with the control target information. Providing means for providing the user with usage information;
The first storage means for storing the usage control information for controlling the usage of the control target information in association with the control target information, and upon receiving a request for usage information corresponding to the control target information from the user, Based on the usage control information stored in the first storage means in association with the control target information, from another information usage control system that provides the user with usage information for using the control target information, Information registration means for receiving information stored in the first storage means and registering it in the second storage means;
I have a,
When the providing means receives a request for issuing usage information for control target information managed in the other information usage control system from a connected user device used by the user, the second storage means Information usage control characterized in that, based on the usage control information registered in the information, the usage information is provided to the user when it is determined that the user is permitted to use the control target information. system.

Images