JP4880443B2 - File distribution system, file distribution method, encryption device, decryption key distribution device, and program - Google Patents

Description

  The present invention relates to a file distribution technique for safely distributing a file including data used for installation / setting work of a communication device via a communication network.

  When a communication carrier constructs a line connecting bases by installing a communication device at each customer base, the installation and setting for the communication device is often outsourced to a communication contractor.

  When consigning work to a telecom contractor, the telecom operator converts the customer information and communication device installation / setting information collected in advance from the customer into an electronic file (hereinafter referred to as a construction file), and then encrypts it electronically. It is sent to the telecommunications contractor by e-mail. The communication contractor stores the received construction file in a mobile PC or the like, and decrypts it appropriately for use in the construction work.

As a prior art document related to the present application, there is Patent Document 1 that discloses a technique for deleting file data based on time and the number of times of use for the purpose of improving the security of the file data.
JP 2005-316903 A

  In the above prior art, although the construction file is encrypted and transmitted, the operator of the communication construction company uses the construction data during construction work, for example, by entering a password to encrypt it. If you decrypt the construction file, you can get the original construction file that you can use freely. Therefore, there is a problem that unauthorized use may occur after that.

  In addition, telecommunications contractors often distribute construction files to their branches, sales offices, or subcontractors, and since the construction files are distributed to outside areas that the telecommunications carrier cannot know, There is also a problem that distribution cannot be managed and controlled.

  Further, when the mobile PC storing the construction file is stolen or lost, there is a problem that illegal leakage or distribution may be permanently performed due to the characteristics of the electronic file.

  From the standpoint of managing and controlling file distribution, a digital certificate that is encrypted and linked with user information is attached to each file, and the file management side must It is conceivable to use a conventional technology such as connecting to an operating authentication system and permitting / unauthorizing the use of a file. However, in the construction of communication equipment, the communication environment often does not accompany the construction site, so this technique cannot be used in many cases. In addition, even if there is a communication environment at every construction site, a mechanism that issues a digital certificate for each file and continuously authenticates and controls each electronic file by the authentication system is a large number of constructions ( Processing the number of construction data) is too costly and unrealistic for the telecommunications carrier.

  The present invention has been made in view of the above points, and an object of the present invention is to provide a technique for safely distributing files.

  The above-described problem is that an encrypted device that encrypts a file to generate an encrypted file and sends the encrypted file over a communication network to distribute the encrypted file to the terminal, and the encryption that has been encrypted by the encrypting device. And a decryption key distribution device that distributes a decryption key for decrypting the encrypted file to the terminal, wherein the encryption device uses the decryption key using destination information corresponding to the terminal. Means for generating the decryption key together with the destination information to the decryption key distribution device, encrypting the file to generate the encrypted file, and storing the encrypted file in the terminal Means for adding restriction information referred to for performing predetermined restriction processing on the encrypted file; and the encrypted file to which the restriction information is added. Means for transmitting the data to a communication network, and the decryption key distribution device stores the decryption key received from the encryption device and the destination information in association with each other in a data storage unit, A means for receiving a decryption key request including the digital certificate of the terminal and the destination information from the terminal; a means for verifying the digital certificate; and when the digital certificate is successfully verified, the terminal And a means for obtaining a decryption key corresponding to the destination information included in the decryption key request received from the data storage means and transmitting the decryption key to the terminal. .

  As the predetermined restriction process, a process of deleting the encrypted file based on time or the number of times the file is used can be used. The digital certificate includes identification information of the terminal, and the identification information included in the digital certificate and the terminal added to the decryption key request when the decryption key request is transmitted from the terminal. It may be further provided with means for comparing the identification information and not transmitting the decryption key to the terminal if they do not match.

  The present invention can also be configured as a file distribution method, an encryption device, and a decryption key distribution device in a file distribution system. Furthermore, the present invention can also be configured as a program that causes a computer to function as each unit that constitutes an encryption device, and a program that causes a computer to function as each unit that constitutes a decryption key device.

  According to the present invention, the encryption device adds restriction information that is referred to the terminal for performing predetermined restriction processing on the encrypted file in the terminal, and distributes the restriction information to the terminal. The decryption key distribution device receives a decryption key request including the digital certificate and destination information of the terminal from the terminal, verifies the digital certificate, and corresponds to the destination information included in the decryption key request Is sent to the terminal, so that only a specific terminal can obtain the decryption key and decrypt the encrypted file. Can be prevented. In other words, by using a technology that issues digital certificates to devices and independently regulates file usage within devices based on regulatory information, unauthorized disclosure and distribution without issuing digital certificates for each file. Etc. can be efficiently prevented, and the file can be delivered safely.

  Embodiments of the present invention will be described below with reference to the drawings. FIG. 1 shows a schematic configuration diagram of a construction file distribution system according to the present embodiment.

  As shown in FIG. 1, the construction file distribution system of the present embodiment includes a construction information server 1, a construction file distribution server 3, an encryption terminal 5, a decryption key distribution server 7, a certification authority server 9, and a reception terminal. 11, and these are connected to the communication network 13. In this embodiment, it is assumed that these devices are on the telecommunications carrier side. In addition, the work terminal 15 used for the construction by the communication construction contractor is appropriately connected to the communication network. The main functions of each device are as follows.

  The construction information server 1 has a function of storing information for construction / setting of the communication device as a construction file and transmitting the construction file to the encryption terminal 5. The construction file distribution server 3 receives the encrypted construction file (referred to as encrypted construction file) from the encryption terminal 5, stores the encrypted construction file, and responds to a request from the work terminal 15. And a function of transmitting the encryption work file to the work terminal 15.

  The encryption terminal 5 encrypts the construction file and transmits it to the construction file distribution server 3, and creates a decryption key corresponding to the destination information of the construction file and distributes the decryption key together with the destination information. It has a function of transmitting to the server 7. The encryption terminal 5 also has a function of adding restriction information such as time information to a construction file or the like.

  The decryption key distribution server 7 stores the decryption key and the destination information in association with each other, verifies the digital certificate sent from the work terminal 15, and transmits the decryption key to the work terminal 15 when the verification is successful. It has a function to do.

  The certification authority server 9 has a function of issuing a digital certificate based on a request from the work terminal 15 and transmitting the digital certificate to the work terminal 15. The reception terminal 11 has a function of storing and managing identification information and the like included in the terminal registration request sent from the work terminal 15.

  The work terminal 15 receives and holds the digital certificate from the certification authority server 9, acquires the decryption key from the decryption key distribution server 7 using the digital certificate, and the encryption acquired from the construction file distribution server 3. It has a function to decrypt and display the construction file. Further, the work terminal 15 has a function of deleting the encryption work file at a predetermined time based on the restriction information attached to the encryption work file.

  The communication network 13 includes, for example, the Internet and a network for connecting each device to the Internet.

(System operation)
The operation of the construction file distribution system having the configuration shown in FIG. 1 will be described below with reference to the sequence diagram of FIG. Note that communication between apparatuses in the following sequence is performed via an encrypted communication path.

  First, when the operator of the work terminal 15 performs an operation for requesting terminal registration on the work terminal 15, the work terminal 15 transmits a terminal registration request to the receiving terminal 11 (step 1). In the terminal registration request, as identification information for identifying the work terminal 15 (identification information here is described as identification information a), for example, a company name, organization name (business office name, department name, etc.), terminal number (Mac address of the terminal, etc.), user name, mail address, part or all of it is included. Further, the terminal registration request includes destination information indicating the destination of the encryption work file. The destination information includes, for example, part or all of a company name, organization name, destination person in charge, user name, and e-mail address. Note that the receiving terminal 11 may extract the destination information from the identification information a instead of separating the identification information a and the destination information. Further, as the destination information, a code (a character string of a predetermined number of digits and a string of numbers) corresponding to a construction file providing destination (company, organization, etc.) may be used.

  The reception terminal 11 stores the identification information a and the destination information included in the received terminal registration request in association with each other in the storage device. The identification information a and the destination information are used for managing the work terminal and the construction file providing destination. Further, by the operation of the operator of the reception terminal 11, the reception terminal 11 transmits the identification information a to the certification authority server 9 (step 2), and the certification authority server 9 stores the identification information a in the storage device. Note that the identification information a and the delivery destination information may be sent offline from the work terminal 15 to the reception terminal 11 by FAX, mail, or the like.

  The work terminal 15 generates a public key and a private key based on the operation of the operator, and transmits a certificate issuance request to the certification authority server 9 (step 3). The certificate issuance request includes identification information b as identification information of the work terminal 15 included in the digital certificate. The identification information b is information including the identification information a, for example. Hereinafter, description will be made assuming that the identification information b and the identification information a are the same.

  The certification authority server 9 checks whether or not the identification information a corresponding to the identification information b included in the certificate issuance request has already been stored (step 4). If not stored, error processing such as sending an error to the work terminal 15 is executed. If the identification information a corresponding to the identification information b is already stored, the certification authority server 9 creates a digital certificate including the identification information b and transmits it to the work terminal 15 (step 5).

  In addition, the certification authority server 9 periodically transmits information including a list of revoked digital certificates to the decryption key authentication server 7 based on a request from the decryption key authentication server 7 (steps 6 and 7).

  Note that the certificate issuance request processing from the work terminal 15, the processing for issuing a digital certificate in the certification authority server 9, the revocation list notification processing itself, and the like are realized by existing techniques. The processing related to the digital certificate is not limited to the above processing method as long as a digital certificate that can be verified by the decryption key distribution server 7 can be issued to the work terminal 15.

  The reception terminal 11 transmits the destination information corresponding to the work terminal 15 to the encryption terminal 5 based on the operation by the operator (step 8). The destination information is information corresponding to the destination of the encryption work file and is associated with a decryption key for decrypting the encryption work file.

  The encryption terminal 5 acquires a construction file to be sent to the work terminal 15 corresponding to the destination information from the construction information server 1 based on the operation by the operator (step 9). The construction information server 1 stores a construction file in association with the destination information. Then, the encryption terminal 5 generates a decryption key that uniquely corresponds to the destination information by using the destination information corresponding to the construction file (step 10), and obtains the decryption key and the destination information. This is transmitted to the decryption key distribution server 7 (step 11). The decryption key distribution server 7 stores the decryption key and destination information in association with each other.

  Subsequently, the encryption terminal 5 generates an encrypted construction file by encrypting the construction file using an encryption key corresponding to the decryption key (for example, the same key as the decryption key) based on an operation by the operator. Then, restriction information such as time information and destination information are added to the encrypted construction file (step 12). The restriction information is information used to automatically delete the encrypted construction file at the work terminal 15 based on a predetermined date and time, the time elapsed after decryption or reception, the number of times of use, and the like. . In addition, information for specifying copy prohibition, copy & paste prohibition, print screen prohibition, print prohibition, alias saving prohibition, edit prohibition, etc. of decrypted construction file data in the work terminal 15 is included in the regulation information. You can also. In addition, by adding the destination information, if the encryption work file leaks and the leaked encryption work file is acquired, the destination of the encryption work file is identified and the leak source Can know.

  A technique for adding restriction information to a file or restricting the use of a construction file on the work terminal 15 based on the restriction information is an existing technique. For example, there is a technique described in Patent Document 1 as a technique for automatically deleting a construction file based on time or the number of times of use.

  In addition, when generating the above decryption key, restriction information may be added to the decryption key. In this way, for example, the work terminal 15 can delete the decryption key within a fixed time after using the decryption key, or delete the decryption key after using the decryption key a predetermined number of times.

  The encryption terminal 5 transmits the encrypted construction file to which the restriction information and the destination information are added to the construction file distribution server 3 (step 13). Further, the construction file distribution server 3 transmits the encrypted construction file to the work terminal 15 based on the request from the work terminal 15 (step 14). Of course, the encrypted construction file may be transmitted from the encryption terminal 5 to the work terminal 15 without going through the construction file distribution server 3.

  The work terminal 15 receives the encryption work file. Then, in response to an operation by the operator, the work terminal 15 transmits a decryption key request including the digital certificate and the destination information received and held in Step 5 to the decryption key distribution server 7 (Step 15). ). The decryption key distribution server 7 verifies the digital certificate using the public key of the certificate authority server 9 and the revocation list acquired in step 17 (step 16). If it is determined by verification that the digital certificate is not valid, the decryption key distribution server 7 performs error processing such as sending an error message to the work terminal 15. If it is determined that the decryption key is valid, the decryption key distribution server 7 refers to a storage unit that stores the decryption key and the destination information in association with each other, and decrypts corresponding to the destination information included in the decryption key request. It is checked whether the key exists (step 17). If it does not exist, error processing is performed, and if it exists, the decryption key is extracted from the storage means and transmitted to the work terminal 15 (step 18). If it is determined to be valid, an encrypted communication path is set up with the work terminal 15 by sharing the key with the work terminal 15 based on the SSL procedure.

  It is to be noted that the Mac address is acquired from the digital certificate determined to be valid, and the process of checking whether the Mac address matches the Mac address of the transmission source device included in the transmission packet of the decryption key request is decrypted. It may be done before sending the key. As a result, fraud such as stealing a digital certificate and transmitting a decryption key request from another terminal can be prevented. Also, it is possible to obtain a mail address from the digital certificate and check whether the domain name indicated in the mail address matches the domain name of the transmission source device of the decryption key request before sending the decryption key. Good. In addition, the process includes the process of including the IP address of the work terminal 15 in the digital certificate, obtaining the IP address from the digital certificate, and checking whether the IP address matches the IP address of the transmission source device of the decryption key request It may be done before sending the key. Thereby, it is possible to prevent the decryption key request from being transmitted from another unspecified place by stealing the work terminal.

  The work terminal 15 receives the decryption key. Thereafter, the work terminal 15 may be disconnected from the communication network 13, and the work terminal 15 can be taken to an actual construction site that is not in a communication environment.

  Based on the operation of the work terminal 15 by the worker, the work terminal 15 decrypts the construction file using the decryption key (step 19), and displays the contents of the construction file on the display of the work terminal 15 (step 20). The work terminal 15 performs a restriction process such as copy prohibition, copy & paste prohibition, print screen prohibition, print prohibition, alias saving prohibition, edit prohibition, etc. based on the above-described restriction information, and a predetermined date and time, Based on the elapsed time, the number of times of use, etc., a process for deleting the encryption work file is performed (step 21). When the restriction information is applied to the decryption key, the decryption key is automatically deleted.

(Device configuration)
Next, main functional configurations of the encryption terminal 5, the work terminal 15, and the decryption key distribution server 7 will be described. FIG. 3 shows a functional configuration diagram of the encryption terminal 5.

  As illustrated in FIG. 3, the encryption terminal 5 includes a data transmission / reception 21, a key generation unit 22, an encryption unit 23, an information addition unit 24, and a data storage unit 25. The data transmission / reception 21 has a function of transmitting / receiving data via a communication network. The key generation unit 22 has a function of generating a decryption key and an encryption key using the destination information of the construction file. The encryption unit 23 has a function of encrypting the construction file using the encryption key generated by the key generation unit 22. The information adding unit 24 has a function of adding restriction information and destination information to the encryption work file and the decryption key. The data storage unit 25 stores the received destination information and construction file, and the generated key and encrypted construction file.

  The encryption terminal 5 is realized by causing a computer such as a PC having a CPU and a storage device to execute a program.

  FIG. 4 shows a functional configuration diagram of the work terminal 15. As shown in FIG. 4, the work terminal 15 includes a data transmission / reception unit 31, a certificate acquisition unit 32, an encryption construction file acquisition unit 33, a decryption key acquisition unit 34, a decryption unit 35, a display unit 36, and an operation control unit. 37, a data storage unit 38, and a cache storage unit 39.

  The data transmission / reception unit 31 is for performing data transmission / reception via a communication network. The certificate acquisition unit 32 displays a screen for an operation by the operator, accepts an input from the operator, creates and transmits a terminal registration request, generates and stores a key pair, creates a certificate issuance request, It has a function of performing processing for acquiring a digital certificate such as transmission and reception / storage of the digital certificate. The encrypted construction file acquisition unit 33 displays a screen for an operation by the operator, accepts an input from the operator, and acquires the construction file designated by the input from the construction information server 1. It has a function to perform the process.

  The decryption key acquisition unit 34 has a function of transmitting a decryption key request to the decryption key distribution server 7 and storing the decryption key received from the decryption key distribution server 7 in the cache storage unit 39. The decryption unit 35 decrypts the encrypted construction file using the decryption key stored in the cache storage unit 39, and the display unit 36 displays the decrypted construction file data on the display. Further, the operation control unit 37 deletes the encryption work file, prohibits copying, prohibits copying and pasting, prohibits printing screens, prohibits printing, prohibits other names, and prohibits editing based on the restriction information added to the file for encrypting work. It is a functional unit that performs the restriction process. The data storage unit 38 is a functional unit for storing data such as a digital certificate and an encryption work file, and can be realized by using, for example, a hard disk. The cache storage unit 39 stores the decryption key in a cache, and can be realized using a memory, for example. The decryption key is configured to be stored only in a cache such as a memory. Also, the encryption work file may be cached.

  As with the encryption terminal 5, the work terminal 15 is realized by causing a computer such as a PC to execute a program. Note that the operation control unit 37 is preferably realized by a driver layer program in a lower layer than the OS (operating system). The operation control unit 37 forcibly shuts down all processes for the data (encryption work file and decryption key) under the control, and in accordance with the regulation information, for example, the encryption work file is used after a predetermined period after use. And the decryption key are automatically forcibly deleted. Accordingly, it is very difficult to take out the encryption work file and the decryption key to the outside of the work terminal 15. As described above, this technology itself is an existing technology.

  FIG. 5 shows a functional configuration diagram of the decryption key distribution server 7. As shown in FIG. 5, the decryption key distribution server 7 includes a data transmission / reception unit 41, a decryption key registration unit 42, a certificate verification unit 43, a decryption key transmission unit 44, and a data storage unit 45.

  The data transmission / reception unit 41 is a functional unit for performing data transmission / reception via a communication network. The decryption key registration unit 42 stores the decryption key received from the encryption terminal 5 and the destination information in the data storage unit 45 in association with each other. The certificate verification unit 44 has a function of verifying the validity of the digital certificate included in the decryption key request using the public key of the certification authority server 9 acquired in advance. Further, the decryption key transmission unit 44 checks whether or not the decryption key corresponding to the destination information included in the decryption key request is stored in the data storage unit 45, and if it is stored, the decryption key is stored in the work terminal. 15 to send. The decryption key transmission unit 44 also has a function of checking the work terminal 15 using the Mac address or domain name described above. The data storage unit 15 stores the decryption key and the destination information in association with each other.

  The decryption key distribution server 7 can also be realized by causing a computer to execute a program.

  Next, the operation of the decryption key distribution server 7 will be described with reference to the flowchart shown in FIG. This flowchart shows a case where a work terminal check is performed using a Mac address. When receiving the decryption key and the corresponding destination information from the encryption terminal 5 (Step 31), the decryption key distribution server 7 stores them in the data storage unit 45 in association with each other (Step 32). When receiving the decryption key request from the work terminal 15 (step 33), the decryption key distribution server 7 verifies the digital certificate included in the decryption key request (step 34). If the verification is successful, it is checked whether the Mac address included in the verified digital certificate matches the Mac address of the decryption key request source device (step 35). In the case of Yes in step 35, the decryption key distribution server 7 checks whether or not the decryption key corresponding to the destination information included in the decryption key request is stored in the data storage unit 45 (step 36). If so, it is transmitted to the work terminal 15 (step 37).

  If No in any of Step 34, Step 35, and Step 36, error processing such as sending an error message to the work terminal 15 is executed (Step 38).

  As described above, in this embodiment, since the restriction information is added when the construction file is encrypted, copying of the construction file or the like can be prohibited at the work terminal 15, and the encryption is performed based on the time and the number of times of use. It is possible to delete files for decryption work and decryption keys. Therefore, the construction file can be prevented from leaking. Further, since the control based on the restriction information is performed independently in the work terminal 15, the file protection state can be continued regardless of whether the work terminal 15 is connected to the network.

  In addition, since the digital certificate is issued to the work terminal 15 and the work terminal 15 is verified using the digital certificate when obtaining the decryption key of the encryption work file, even if a third party encrypts it Even if a construction file is stolen, a decryption key cannot be obtained from other than a specific work terminal. In addition, since it is not necessary to issue a digital certificate for each construction file, it achieves functions that are significantly superior to conventional techniques in terms of flexibility and cost.

  The present invention is not limited to the above-described embodiment, and various modifications and applications can be made within the scope of the claims.

It is a schematic block diagram of the construction file delivery system in embodiment of this invention. It is a sequence diagram which shows operation | movement of the construction file delivery system shown in FIG. 3 is a functional configuration diagram of an encryption terminal 5. FIG. 3 is a functional configuration diagram of a work terminal 15. FIG. 3 is a functional configuration diagram of a decryption key distribution server 7. FIG. 6 is a flowchart showing the operation of the decryption key distribution server 7.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Construction information server 3 Construction file delivery server 5 Encryption terminal 7 Decryption key delivery server 9 Certification authority server 11 Reception terminal 13 Communication network 15 Work terminal 21 Data transmission / reception 22 Key generation part 23 Encryption part 24 Information addition part 25 Data storage Unit 31 Data transmission / reception unit 32 Certificate acquisition unit 33 Encryption construction file acquisition unit 34 Decryption key acquisition unit 35 Decryption unit 36 Display unit 37 Operation control unit 38 Data storage unit 39 Cache storage unit 41 Data transmission / reception unit 42 Decryption key registration Unit 43 certificate verification unit 44 decryption key transmission unit 45 data storage unit

Claims (10)

Encrypts a file to generate an encrypted file, sends the encrypted file to a terminal for delivery to a communication network, and decrypts the encrypted file encrypted by the encryption device A file distribution system comprising a decryption key distribution device that distributes a decryption key for the terminal to the terminal,
The encryption device is:
Means for generating the decryption key using destination information corresponding to the terminal;
Means for transmitting the decryption key together with the destination information to the decryption key distribution device;
Means for encrypting the file to generate the encrypted file, and adding to the encrypted file restriction information referred to for performing a predetermined restriction process on the encrypted file in the terminal;
Means for transmitting the encrypted file to which the restriction information is added on a communication network,
The decryption key distribution device comprises:
Means for storing the decryption key received from the encryption device and the destination information in association with each other in a data storage means;
Means for receiving, from the terminal, a decryption key request including the digital certificate of the terminal and the destination information;
Means for verifying the digital certificate;
Means for obtaining a decryption key corresponding to the destination information included in the decryption key request received from the terminal and transmitting the decryption key to the terminal when the digital certificate is successfully verified; A file delivery system characterized by comprising.   The file distribution system according to claim 1, wherein the predetermined restriction process is a process of deleting the encrypted file based on time or the number of times the file is used.   The digital certificate includes identification information of the terminal, identification information included in the digital certificate, and identification information of the terminal added to the decryption key request when the decryption key request is transmitted from the terminal The file distribution system according to claim 1, further comprising means for not transmitting the decryption key to the terminal if they do not match. Encrypts a file to generate an encrypted file, sends the encrypted file to a terminal for delivery to a communication network, and decrypts the encrypted file encrypted by the encryption device A file delivery method in a file delivery system comprising a decryption key delivery device for delivering a decryption key for the terminal to the terminal,
The encryption device generating the decryption key using destination information corresponding to the terminal;
The encryption device transmitting the decryption key together with the destination information to the decryption key distribution device;
The decryption key distribution device stores the decryption key received from the encryption device and the destination information in association with each other in a data storage unit;
The encryption information is generated by encrypting the file to generate the encrypted file, and restriction information that is referred to the encrypted file for performing predetermined restriction processing on the encrypted file in the terminal A step of adding
Sending the encrypted file with the restriction information added thereto on a communication network;
The decryption key distribution apparatus receives a decryption key request including the digital certificate of the terminal and the destination information from the terminal;
The decryption key distribution device verifies the digital certificate;
When the decryption key distribution device succeeds in verifying the digital certificate, the decryption key distribution device acquires a decryption key corresponding to the destination information included in the decryption key request received from the terminal from the data storage unit, and Sending to
A file delivery method characterized by comprising:   5. The file delivery method according to claim 4, wherein the predetermined restriction process is a process of deleting the encrypted file based on time or the number of times the file is used.   The digital certificate includes identification information of the terminal, identification information included in the digital certificate, and identification information of the terminal added to the decryption key request when the decryption key request is transmitted from the terminal The file distribution method according to claim 4, further comprising a step of not transmitting the decryption key to the terminal if they do not match. Encrypts a file to generate an encrypted file, sends the encrypted file to a terminal for delivery to a communication network, and decrypts the encrypted file encrypted by the encryption device An encryption device in a file delivery system comprising a decryption key delivery device for delivering a decryption key for the terminal to the terminal,
Means for generating the decryption key using destination information corresponding to the terminal;
Means for transmitting the decryption key together with the destination information to the decryption key distribution device;
Means for encrypting the file to generate the encrypted file, and adding to the encrypted file restriction information referred to for performing a predetermined restriction process on the encrypted file in the terminal;
Means for sending out the encrypted file to which the restriction information is added to a communication network. Encrypts a file to generate an encrypted file, sends the encrypted file to a terminal for delivery to a communication network, and decrypts the encrypted file encrypted by the encryption device A decryption key distribution device in a file distribution system comprising: a decryption key distribution device that distributes a decryption key to the terminal;
Means for receiving the decryption key and the destination information from the encryption device, and storing them in a data storage means in association with each other;
Means for receiving, from the terminal, a decryption key request including the digital certificate of the terminal and the destination information;
Means for verifying the digital certificate;
Means for acquiring, from the data storage means, a decryption key corresponding to the destination information included in the decryption key request received from the terminal when the verification of the digital certificate is successful, and transmitting to the terminal;
A decryption key distribution device comprising: Encrypts a file to generate an encrypted file, sends the encrypted file to a terminal for delivery to a communication network, and decrypts the encrypted file encrypted by the encryption device A program for causing the computer to function as the encryption device in a file delivery system comprising a decryption key delivery device for delivering a decryption key to the terminal,
Means for generating the decryption key using destination information corresponding to the terminal;
Means for transmitting the decryption key together with the destination information to the decryption key distribution device;
Means for encrypting the file to generate the encrypted file and adding to the encrypted file restriction information referred to in order to perform a predetermined restriction process on the encrypted file in the terminal;
Means for sending the encrypted file to which the restriction information is added to a communication network;
Program to function as. A computer encrypts a file, generates an encrypted file, and sends the encrypted file to a communication network for distribution to a terminal, and the encryption encrypted by the encryption device A program for causing a computer to function as the decryption key distribution device in a file distribution system including a decryption key distribution device for distributing a decryption key for decrypting a file to the terminal,
Means for receiving the decryption key and the destination information from the encryption device, and associating them with each other and storing them in the data storage means of the computer;
Means for receiving from the terminal a decryption key request including the digital certificate of the terminal and the destination information;
Means for verifying the digital certificate;
Means for acquiring, from the data storage means, a decryption key corresponding to the destination information included in the decryption key request received from the terminal when the verification of the digital certificate is successful, and transmitting to the terminal;
Program to function as.

Images