JP5300755B2 - Content transmission / reception system and authentication method in content transmission / reception system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To prevent transmission/reception of content to/from an unauthorized counterpart device or person. <P>SOLUTION: A content transmission device 1 transmits a reception-side capability notification request to a content reception device 2 (S1). The content reception device 2 transmits a reception-side capability notification response to the content transmission device 1 (S3). The reception-side capability notification request is transmitted to inform that a capability of the reception device is to be notified; the reception device is to be authenticated (authentication of the reception device is required), and a recipient is to be authenticated (recipient authentication is required). The reception side capability notification response is transmitted to inform the capability of the reception device, necessity of transmission device authentication (authentication of the transmission device is required), and necessity of transmitter authentication (transmitter authentication is required). The content transmission device 1 checks whether the capability of the reception device is sufficient. Then, the transmission/reception device authentication (S5) and the transmitter/recipient authentication (S7) are performed. <P>COPYRIGHT: (C)2011,JPO&amp;INPIT

Description

  The present invention relates to a content transmission / reception system and an authentication method in the content transmission / reception system.

  Conventionally, in order to send and receive content (files that make up digital content) using a telephone number, content can be transmitted using TCP (HTTP, etc.) after call connection is completed using SIP call control. Send and receive.

  FIG. 29 is a diagram showing a schematic operation sequence example in a conventional content transmission / reception system.

  When content is selected in content transmission device 1A and dialing and transmission are instructed, content transmission device 1A makes a call by SIP to content reception device 2A. The content receiving device 2A makes a response by SIP. When the TCP session is established, the content transmission device 1A transmits a reception side capability notification request to the content reception device 2 (S1A). The content reception device 2A transmits a reception side capability notification response to the content transmission device 1 (S3A).

  In the reception side capability notification request, it is notified that notification of the capability of the receiving device is necessary. In the reception side capability notification response, the capability of the reception device is notified. The content transmission device 1A confirms whether the capability of the reception device is sufficient.

  If it is confirmed that the content transmission device 1A has sufficient capability (S11A), the content transmission device 1A and the content reception device 2A transmit and receive content (S15).

  Specifically, the content transmitting apparatus 1A notifies the file name and MIME-Type of the content, and when receiving the reception start, transmits the content in multiple times, for example. If the content reception device 2A transmits a transmission completion response, a series of processing ends.

JP 2009-253815 A JP 2004-326572 A JP 2006-025178 A

  However, the conventional content transmission / reception system has the following problems.

  First, the content transmission device 1 may transmit content to a content reception device that is not permitted to receive content.

  In addition, the content transmission device 1 may transmit content to the content reception device, so that a content receiver who is not permitted to receive content may receive content (hereinafter referred to as reception) via the content reception device. is there.

  Further, the content receiving device 2 may transmit content from a content transmitting device that is not permitted to transmit content.

  In addition, the content receiving device 2 may transmit content from a content sender that is not permitted to transmit content via the content transmitting device.

  SUMMARY OF THE INVENTION The present invention has been made in view of the above problems, and an object of the present invention is to provide a content transmission / reception system and a content transmission / reception system capable of preventing transmission / reception of content between unauthorized devices and persons. It is to provide an authentication method.

  In order to solve the above problems, a first aspect of the present invention is a content transmission / reception system including a content transmission device that transmits content and a content reception device that receives content, wherein the content transmission device A transmission-side storage unit that stores information for determining whether or not the other party is a permitted partner in transmission, and information is received from the content reception device in the transmission of the content, and the information and the transmission-side storage Content receiving apparatus authentication means for determining whether the content receiving apparatus is a content receiving apparatus permitted to receive the content based on the information stored in the means, and information from the content receiving apparatus when transmitting the content. The content received based on the information and the information stored in the transmission-side storage means A content receiver for receiving content via a communication device, and content receiver authentication means for determining whether or not the content receiver is permitted to receive the content. Receiving-side storage means for storing information for determining whether or not the other party is an authorized counterpart, and receiving information from the content transmitting apparatus upon reception of the content, the information and the receiving-side storage means Based on the stored information, the content transmission apparatus authenticates the content transmission apparatus for determining whether or not the content transmission apparatus is permitted to transmit the content, and receives information from the content transmission apparatus when receiving the content. , Based on the information and the information stored in the receiving storage means, via the content transmission device Content Sender for transmitting content, characterized in that it has a content sender authentication unit that determines whether authorized content sender the transmission of the content.

  For example, any one of the content receiving device authenticating unit, the content transmitting device authenticating unit, the content receiver authenticating unit, and the content sender authenticating unit matches the received information and the information to be compared with each other. If so, a determination result is obtained that the partner is a permitted partner.

  For example, the information to be compared is an ID and password indicating the other party.

  For example, if either the content receiver authenticating unit or the content sender authenticating unit matches the received information and the information to be compared with each other, the determination result that the other party is an authorized partner The information to be compared is biological information indicating the biological characteristics of the other party.

  For example, any one of the content receiving device authenticating unit, the content transmitting device authenticating unit, the content receiver authenticating unit, and the content sender authenticating unit encrypts a predetermined original message with the other party's public key and authenticates the message. Is generated and transmitted to the counterpart device, the decryption message generated by decrypting the authentication message with the secret key of the counterpart is received from the counterpart device, and the decryption message and the original message match each other, A determination result that the partner is a permitted partner is obtained.

  A second aspect of the present invention is an authentication method in a content transmission / reception system including a content transmission device for transmitting content and a content reception device for receiving content, wherein the content transmission device permits the other party to transmit the content. A transmission-side storage unit that stores information for determining whether or not the other party is an authorized partner, and the content receiving apparatus determines whether or not the other party is an authorized partner when receiving content. Receiving means for storing information for storing, and in the authentication method, the content receiving apparatus authentication means of the content transmitting apparatus receives information from the content receiving apparatus when transmitting the content, and the information and the transmission The content receiving device is permitted to receive the content based on the information stored in the side storage means. A step of determining whether or not it is a content receiving device, and the content receiver authenticating means of the content transmitting device receives information from the content receiving device and stores the information and the transmitting side storage means in transmitting the content A step of determining whether or not a content receiver who receives content via the content receiving device is a content receiver permitted to receive the content based on the information, and a content transmitting device authentication unit of the content receiving device However, when receiving the content, whether the content transmission device is permitted to transmit the content based on the information received from the content transmission device and the information stored in the reception-side storage unit. Determining whether or not the content of the content receiving device A content sender that receives information from the content transmitting device when receiving the content, and transmits the content via the content transmitting device based on the information and the information stored in the receiving storage unit And determining whether or not the content sender is permitted to transmit the content.

  For example, any one of the content receiving device authenticating unit, the content transmitting device authenticating unit, the content receiver authenticating unit, and the content sender authenticating unit matches the received information and the information to be compared with each other. If so, a determination result is obtained that the partner is a permitted partner.

  For example, any one of the content receiving device authenticating unit, the content transmitting device authenticating unit, the content receiver authenticating unit, and the content sender authenticating unit encrypts a predetermined original message with the other party's public key and authenticates the message. Is generated and transmitted to the counterpart device, the decryption message generated by decrypting the authentication message with the secret key of the counterpart is received from the counterpart device, and the decryption message and the original message match each other, A determination result that the partner is a permitted partner is obtained.

  According to the present invention, it is possible to prevent the transmission / reception of content between an unauthorized device and person.

It is a block diagram of the content transmission / reception system which concerns on this Embodiment. It is a block diagram which concerns on the specific example of the content transmitter 1 and the content receiver 2. FIG. It is the table | surface which put together the aspect of the authentication which concerns on this Embodiment. 6 is a diagram illustrating a configuration of a transmission device management unit 111. FIG. 3 is a diagram illustrating a configuration of a reception device management unit 112. FIG. 6 is a diagram illustrating a configuration of a sender management unit 113. FIG. It is the figure which illustrated the structure of the receiver management part 114. FIG. 6 is a diagram illustrating a configuration of a reception device management unit 211. FIG. 6 is a diagram illustrating a configuration of a transmission device management unit 212. FIG. It is the figure which illustrated the structure of the recipient management part 213. 6 is a diagram illustrating a configuration of a sender management unit 214. FIG. It is a figure which shows the example of a schematic operation | movement sequence which concerns on this Embodiment. It is a figure which shows another example of an operation | movement sequence which concerns on this Embodiment. It is a figure which shows the example of an operation | movement sequence which concerns on transmission / reception apparatus authentication. It is a figure which shows the example of an operation | movement sequence which concerns on sender / receiver authentication. It is a figure which shows the example of an operation | movement sequence which concerns on the transmission / reception apparatus authentication performed with ID / password. It is a figure which shows the example of an operation | movement sequence which concerns on the transmission / reception apparatus authentication performed with a public key. It is a figure which shows the example of an operation | movement sequence which concerns on sender / receiver authentication performed with ID / password. It is a figure which shows the example of an operation | movement sequence which concerns on the sender / receiver authentication performed with a public key. It is a figure which shows the example of an operation | movement sequence which concerns on the sender / receiver authentication performed using biometric information. It is a figure which shows the example of an operation | movement flowchart which concerns on the receiving apparatus authentication in the content transmission apparatus. It is a figure which shows the example of an operation | movement flowchart which concerns on the receiver authentication in the content receiver. FIG. 10 is a diagram illustrating an example of an operation flowchart related to transmission device authentication in the content reception device 2; It is a figure which shows the example of an operation | movement flowchart which concerns on the transmission apparatus authentication in the content transmission apparatus. It is a figure which shows the example of an operation | movement flowchart which concerns on the recipient authentication in the content transmission apparatus. It is a figure which shows the example of an operation | movement flowchart which concerns on the recipient authentication in the content receiver. It is a figure which shows the example of an operation | movement flowchart which concerns on the sender authentication in the content receiver. It is a figure which shows the example of an operation | movement flowchart which concerns on the sender authentication in the content transmission apparatus. It is a figure which shows the example of a rough operation | movement sequence in the conventional content transmission / reception system.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

  FIG. 1 is a configuration diagram of a content transmission / reception system according to the present embodiment.

  The content transmission / reception system includes a content transmission device (appropriately abbreviated as “transmission device”) 1 for transmitting content such as documents, photos, data, and the like, and a content reception device (appropriately, “reception device” as appropriate). 2 and a similar content transmitting device and content receiving device (both not shown), which are connected via a communication network. A telephone number is assigned to each content transmission device 1 and content reception device 2. The content transmission device 1 makes a call by designating the content reception device 2 by a telephone number, thereby establishing a TCP session, and transmits the content to the content reception device 2 using this TCP session.

  A person who gives a content transmission instruction to the content transmission apparatus 1 (referred to as “send content” for convenience) is called a content sender, and receives the content via the content reception apparatus 2 (for convenience, “receives content”). Are called content recipients. The content receiving device 2 or the content receiver for the content transmitting device 1 or the content sender, or the opposite target is called a partner.

  The content transmission device 1 receives information from the content receiving device when transmitting content, and the transmission-side storage unit 11 that stores information for determining whether or not the other party is an authorized partner when transmitting content. And a function as a content receiving device authentication unit for determining whether the content receiving device is a content receiving device permitted to receive the content based on the information and the information stored in the transmitting storage unit. A content transmitting / receiving apparatus authenticating unit 12 having a function of performing information transmission for determining whether or not the content transmitting apparatus 1 itself is a content transmitting apparatus that is permitted to transmit the content to the content receiving apparatus 2; Upon transmission, information is received from the content receiving device, and the information and the transmission side storage means Function and content as content receiver authentication means for determining whether a content receiver who receives content via the content receiving device is a content receiver permitted to receive the content based on the stored information Content sender / receiver authentication means 13 having a function of performing information transmission and the like for determining whether or not the sender is a content sender permitted to transmit content to the content receiver 2.

  The content receiving device 2 receives information from the content transmitting device when receiving content, and the receiving-side storage unit 21 that stores information for determining whether or not the other is an authorized partner when receiving content. And a function as a content transmission device authentication unit for determining whether or not the content transmission device is a content transmission device permitted to transmit content based on the information and the information stored in the reception-side storage unit. A content transmitting / receiving apparatus authenticating unit 22 having a function of performing information transmission and the like for determining whether the content receiving apparatus 2 itself is a content receiving apparatus permitted to receive the content for the content transmitting apparatus 1; Upon reception, information is received from the content transmission device, and the information and the receiving side storage means Function and content as content sender authentication means for determining whether a content sender that transmits content via the content transmission device is a content sender permitted to transmit content based on the stored information The content transmitter / receiver authentication unit 23 has a function of performing information transmission and the like for determining whether or not the receiver is a content receiver permitted to receive content for the content transmitting apparatus 1.

  The transmission-side storage unit 11 includes a transmission device management unit 111, a reception device management unit 112, a sender management unit 113, and a receiver management unit 114. Details of these will be described later. The reception-side storage unit 21 includes a reception device management unit 211, a transmission device management unit 212, a recipient management unit 213, and a sender management unit 214. Details of these will be described later.

  FIG. 2 is a block diagram according to a specific example of the content transmission device 1 and the content reception device 2.

  The device according to the specific example includes, for example, a hard disk device (HDD) A1, an operating system (OS) A2, a memory A3, and a digital content transmission / reception application A4 in which content files are stored.

  The digital content transmission / reception application A4 includes a graphic user interface (GUI) 41, a transmission service function 42, a reception service function 43, a file management function 44, an HTTP (SOAP) protocol 45, and a communication function (content transfer protocol) 46. The communication function 46 includes a transmission / reception device authentication function 461 including the content transmission / reception device authentication means 12 and 22 and a transmission / reception person authentication function 462 including the content transmission / reception person authentication means 13 and 23.

  FIG. 3 is a table summarizing the modes of authentication according to the present embodiment.

  In the present embodiment, there are a case where personal authentication is performed, a case where device authentication is performed, and a case where authentication is not performed.

  Personal authentication includes sender authentication for authenticating the transmission side from the reception side and receiver authentication for authentication of the reception side from the transmission side. Each sender authentication and receiver authentication includes those using a living body, those using a public key, and those using identification information (ID) and a password.

  Device authentication includes transmission device authentication for authenticating the transmission side from the reception side and reception device authentication for authentication of the reception side from the transmission side. There are authentication using each transmitting device, a public key, an identification information (ID) and password, and a calling ID. The receiving device authentication includes a method using a public key and a method using identification information (ID) and a password.

  FIG. 4 is a diagram illustrating the configuration of the transmission device management unit 111.

  The transmission device management unit 111 includes identification information (hereinafter referred to as “transmission device ID”) and a password (hereinafter referred to as “transmission device password”) indicating the content transmission device 1 including the transmission device management unit 111, the content transmission device 1. And a private key (hereinafter referred to as “transmission device private key”).

  FIG. 5 is a diagram illustrating a configuration of the reception device management unit 112.

  The receiving device management unit 112 stores receiving device information for each of the plurality of content receiving devices.

  Each receiving device information stores a telephone number of the corresponding content receiving device, and information indicating whether the content receiving device is a content receiving device permitted to receive the content (hereinafter referred to as “receiving device attribute information”). ing.

  Each receiving device information includes (1) identification information indicating the content receiving device (hereinafter referred to as “receiving device ID”) and password (hereinafter referred to as “receiving device password”), and (2) a public key of the content receiving device. (Hereinafter referred to as “receiving device public key”) at least one of the two pieces of information is stored.

  FIG. 6 is a diagram illustrating the configuration of the sender management unit 113.

  The sender manager 113 stores sender information for each of a plurality of content senders that give instructions to the content transmitter 1 including the sender manager 113.

  Each sender information stores the sender name of the corresponding content sender.

  Each sender information includes (1) identification information indicating the content sender (hereinafter referred to as “sender ID”) and password (hereinafter referred to as “sender password”), and (2) public key of the content sender. (Hereinafter referred to as “sender public key”) and private information (hereinafter referred to as “sender private key”) are stored.

  FIG. 7 is a diagram illustrating a configuration of the recipient management unit 114.

  The receiver management unit 114 stores receiver information for each of a plurality of content receivers that receive content via the content receiving device 2.

  Each recipient information stores the recipient name of the corresponding content recipient, and information indicating whether or not the content recipient is a content recipient permitted to receive the content (hereinafter referred to as “recipient attribute information”). doing.

  Each receiver information includes (1) identification information (hereinafter referred to as “recipient ID”) and password (hereinafter referred to as “recipient password”) indicating the content receiver, and (2) a public key of the content receiver. (Hereinafter referred to as “recipient public key”) and private key (hereinafter referred to as “recipient private key”), (3) biometric information indicating the biometric characteristics of the content recipient (hereinafter referred to as “recipient biometric information”). At least one of the three types of information. The recipient biometric information is a fingerprint or the like.

  FIG. 8 is a diagram illustrating the configuration of the reception device management unit 211.

  The receiving device management unit 211 includes identification information (“receiving device ID”) and a password (“receiving device password”) indicating the content receiving device 2 including the receiving device management unit 211, and the public key (“ "Receiver public key") and private key (referred to as "Receiver private key").

  FIG. 9 is a diagram illustrating a configuration of the transmission device management unit 212.

  The transmission device management unit 212 stores transmission device information for each of the plurality of content transmission devices.

  Each transmission device information stores a telephone number of the corresponding content transmission device and information indicating whether or not the content transmission device is a content transmission device permitted to transmit the content (hereinafter referred to as “transmission device attribute information”). ing.

  Each transmission device information includes (1) identification information (“transmission device ID”) and password (“transmission device password”) indicating the content transmission device, and (2) a public key of the content transmission device (“transmission device public key”). ")) Is stored.

  FIG. 10 is a diagram illustrating the configuration of the recipient management unit 213.

  The recipient manager 213 stores recipient information for each of a plurality of content recipients that receive content via the content receiver 2 including the recipient manager 213.

  Each recipient information stores the recipient name of the corresponding content recipient.

  Each receiver information includes (1) identification information (“receiver ID”) and password (“receiver password”) indicating the content receiver, and (2) a public key of the content receiver (“receiver public key”). ") And at least one of two pieces of information (" recipient private key ").

  FIG. 11 is a diagram illustrating a configuration of the sender management unit 214.

  The sender management unit 214 stores sender information for each of a plurality of content senders that give instructions to the content transmission apparatus 1.

  Each sender information stores the sender name of the corresponding content sender, and information indicating whether or not the content sender is a content sender permitted to transmit the content (hereinafter referred to as “sender attribute information”). doing.

  Each sender information includes (1) identification information (“sender ID”) and password (“sender password”) indicating the content sender, and (2) a public key of the content sender (“sender public key”). ”) And a secret key (“ sender secret key ”), and (3) biometric information indicating the biometric characteristics of the content sender (hereinafter referred to as“ sender biometric information ”). doing. The sender biometric information is a fingerprint or the like.

(Operation of this embodiment)
FIG. 12 is a diagram illustrating a schematic operation sequence example according to the present embodiment.

  When content is selected in the content transmission device 1 and a dialing and transmission instruction is given, the content transmission device 1 makes a call to the content reception device 2 by SIP. The content receiving device 2 makes a response by SIP. When the TCP session is established, the content transmission device 1 transmits a reception side capability notification request to the content reception device 2 (S1). The content reception device 2 transmits a reception side capability notification response to the content transmission device 1 (S3).

  The receiving side capability notification request requires notification of the capability of the receiving device, authentication of the receiving device is required (reception device authentication is required), and receiver authentication is required (recipient authentication is required) Will be notified.

  In the reception side capability notification response, it is notified that the capability of the reception device, the authentication of the transmission device is necessary (transmission device authentication is required), and the authentication of the sender is necessary (sender authentication is required).

  The content transmission device 1 confirms whether the capability of the reception device is sufficient.

  Next, transmission / reception apparatus authentication (S5) and transmission / reception person authentication (S7) are performed. The order of these is not required, and details will be described later.

  It is confirmed that the capability is sufficient in the content transmitting apparatus 1 and that the authentication is successful, that is, that the other party is a party permitted to receive (S11), and that the authentication is successful in the content receiving apparatus 2. If it is confirmed that the partner is a partner permitted to transmit (S13), the content transmitting device 1 and the content receiving device 2 transmit and receive content (S15).

  Specifically, when the content transmission device 1 notifies the file name of the content and MIME-Type and receives the reception start, the content transmission device 1 divides the content into, for example, a plurality of times and transmits the content to the content reception device 2. The content transmission device 1 transmits content using, for example, HTTP (hypertext transfer protocol). If the content reception device 2 transmits a transmission completion response, a series of processing ends.

  FIG. 13 is a diagram showing another schematic operation sequence example according to the present embodiment.

  When content is selected in the content transmission device 1 and a dialing and transmission instruction is given, the content transmission device 1 makes a call to the content reception device 2 by SIP. At this time, the content receiving device 2 is notified of the telephone number (so-called calling ID) of the content transmitting device 1.

  In the content transmitting / receiving apparatus authenticating unit 22, the transmitting apparatus information including the telephone number is stored in the transmitting apparatus managing unit 212, and the transmitting apparatus attribute information in the transmitting apparatus information is “permitted (content transmission is permitted. It is determined whether or not (S21).

  If that is the case, that is, if the authentication is successful (S23), the content receiving device 2 makes a response by SIP. When the TCP session is established, the content transmission device 1 transmits a reception side capability notification request to the content reception device 2. The content reception device 2 transmits a reception side capability notification response to the content transmission device 1.

  If it is confirmed that the capability is sufficient in the content transmission device 1 (S25), the content transmission device 1 and the content reception device 2 transmit and receive content (S15). The details of content transmission / reception are the same as those described with reference to FIG. 12, and a description thereof is omitted here.

  FIG. 14 is a diagram illustrating an example of an operation sequence related to transmission / reception device authentication.

  Similarly to the above description, the content transmission device 1 transmits a reception side capability notification request to the content reception device 2 (S1). The content reception device 2 transmits a reception side capability notification response to the content transmission device 1 (S3). The content transmission device 1 confirms whether the capability of the reception device is sufficient.

  In the subsequent transmission / reception device authentication (S5), first, the content transmission device 1 notifies the content reception device 2 whether to authenticate the reception device with an ID / password or a public key in the notification of the reception device authentication method. (S31).

  On the other hand, the content receiving device 2 transmits information corresponding to the method to the content transmitting device 1 in the receiving device authentication information response (S33).

  The content transmission device 1 performs authentication using the information (S35), and notifies the content reception device 2 of the result through notification of the reception device authentication result (S37).

  Further, the content receiving device 2 notifies the content transmitting device 1 whether to authenticate the transmitting device with an ID / password or a public key in the notification of the transmitting device authentication method (S41).

  On the other hand, the content transmission device 1 transmits information corresponding to the method to the content reception device 2 in the transmission device authentication information response (S43).

  The content receiving apparatus 2 performs authentication using the information (S45), and notifies the result to the content transmitting apparatus 1 through a transmission apparatus authentication result notification (S47).

  Along with such transmitter / receiver authentication (S5), sender / receiver authentication (S7) is also performed.

  FIG. 15 is a diagram illustrating an example of an operation sequence related to sender / receiver authentication.

  Similarly to the above description, the content transmission device 1 transmits a reception side capability notification request to the content reception device 2 (S1). The content reception device 2 transmits a reception side capability notification response to the content transmission device 1 (S3). The content transmission device 1 confirms whether the capability of the reception device is sufficient.

  For example, sender / receiver authentication (S7) is performed after transmitter / receiver authentication (S5).

  In response to the recipient authentication method notification, the content transmission device 1 notifies the content reception device 2 whether to authenticate the recipient using a living body, an ID / password, or a public key (S51).

  In response to this, the content receiving device 2 transmits information corresponding to the method to the content transmitting device 1 in the receiver authentication information response (S53).

  The content transmission device 1 performs authentication using the information (S55), and notifies the result to the content reception device 2 by notification of the recipient authentication result (S57).

  In addition, the content receiving device 2 notifies the content transmitting device 1 whether to authenticate the sender using a living body, an ID / password, or a public key in the sender authentication method notification (S61). ).

  On the other hand, the content transmitting apparatus 1 transmits information corresponding to the method to the content receiving apparatus 2 in the sender authentication information response (S63).

  The content receiving device 2 performs authentication using the information (S65), and notifies the result to the content transmitting device 1 through a sender authentication result notification (S67).

  FIG. 16 is a diagram illustrating an example of an operation sequence related to transmission / reception device authentication performed using an ID / password.

  In the content transmitting apparatus 1, the content transmitting / receiving apparatus authenticating unit 12 requests the content receiving apparatus 2 to input an ID / password by notifying the receiving apparatus authentication method (S81).

  On the other hand, in the content receiving device 2, the content transmitting / receiving device authentication unit 22 reads out the receiving device ID and the receiving device password stored in the receiving device management unit 211, and the content transmitting device responds with the receiving device authentication information response. 1 (S83).

  The content transmitting / receiving device authentication unit 12 of the content transmitting device 1 stores the receiving device information including the receiving device ID and the receiving device password in the receiving device management unit 112, and the receiving device attribute information in the receiving device information is “permitted”. It is determined whether or not (content reception is permitted) "(S85). If such a condition is satisfied, authentication is successful.

  The content transmission device 1 notifies the content reception device 2 of the authentication result through the notification of the reception device authentication result (S87).

  In addition, the content receiving device 2 requests the content transmitting device 1 to input the ID / password by the content transmitting / receiving device authenticating unit 22 by the notification of the transmitting device authentication method (S91).

  On the other hand, the content transmission device 1 reads the transmission device ID and the transmission device password stored in the transmission device management unit 111 by the content transmission / reception device authentication unit 12 and returns the content reception device 2 in the transmission device authentication information response. (S93).

  The content transmitting / receiving device authentication means 22 of the content receiving device 2 stores the transmitting device information including the transmitting device ID and the transmitting device password in the transmitting device management unit 212, and the transmitting device attribute information in the transmitting device information is “permitted”. It is determined whether or not (content transmission is permitted) "(S95). If such a condition is satisfied, authentication is successful.

  The content reception device 2 notifies the content transmission device 1 of the authentication result through the transmission device authentication result notification (S97).

  FIG. 17 is a diagram illustrating an example of an operation sequence related to transmission / reception device authentication performed using a public key.

  The content transmitting apparatus 1 notifies the content receiving apparatus 2 by the content transmitting / receiving apparatus authenticating means 12 that the receiving apparatus authentication method is notified by the public key in the receiving apparatus authentication method notification (S101).

  Next, the content transmitting / receiving device authentication unit 12 of the content transmitting device 1 searches the receiving device management unit 112 for receiving device information including the telephone number of the content receiving device 2, extracts the public key in the receiving device information, A predetermined original text message is encrypted with the public key to generate an authentication message, which is transmitted to the content receiving apparatus 2 (S103).

  On the other hand, the content receiving device 2 uses the content transmitting / receiving device authentication means 22 to extract the secret key from the receiving device management unit 211, decrypt the authentication message with the secret key, generate a decrypted message, It transmits to the content transmission apparatus 1 (S105).

  Whether the content transmission / reception device authentication unit 12 matches the decryption message and the original message, and whether the reception device attribute information in the received reception device information indicates “permission (content reception is permitted)” It is determined whether or not (S107). If such a condition is satisfied, authentication is successful.

  The content transmission apparatus 1 notifies the content reception apparatus 2 of the authentication result through the reception apparatus authentication result notification (S109).

  In addition, the content receiving apparatus 2 notifies the content transmitting apparatus 1 by the content transmitting / receiving apparatus authenticating means 22 that the transmitting apparatus authentication method is notified by the public key in the transmitting apparatus authentication method notification (S111).

  Next, the content transmission / reception device authentication means 22 of the content reception device 2 searches the transmission device management unit 212 for transmission device information including the telephone number of the content transmission device 1, extracts the public key in this transmission device information, A predetermined original text message is encrypted with the public key to generate an authentication message and transmit it to the content transmitting apparatus 1 (S113).

  On the other hand, the content transmitting apparatus 1 uses the content transmitting / receiving apparatus authenticating means 12 to extract the secret key from the transmitting apparatus managing unit 111, decrypts the authentication message with the secret key, generates a decrypted message, It transmits to the content receiver 2 (S115).

  Whether the decryption message and the original message match each other, and the content transmission / reception device authentication means 22 indicates that the transmission device attribute information in the retrieved transmission device information indicates “permission (content transmission is permitted)” It is determined whether or not (S117). If such a condition is satisfied, authentication is successful.

  The content reception device 2 notifies the content transmission device 1 of the authentication result through the transmission device authentication result notification (S119).

  FIG. 18 is a diagram illustrating an example of an operation sequence related to sender / receiver authentication performed using an ID / password.

  The content transmission apparatus 1 requests the content reception apparatus 2 to input an ID / password by the content sender / authentication means 13 through notification of the receiver authentication method (S121).

  On the other hand, the content receiver 2 searches the receiver information on the corresponding content receiver (person who wants to receive the content) in the receiver management unit 213 by the content sender / receiver authentication means 23, and this receiver The receiver ID and the receiver password in the information are transmitted to the content transmitting apparatus 1 as a receiver authentication information response (S123). Alternatively, the content receiver 2 transmits the receiver ID and the receiver password input by the content receiver using a keyboard or the like to the content transmitter 1 in response to the receiver authentication information by the content transmitter / receiver authentication unit 23. (S123).

  The content sender / authentication unit 13 of the content transmitting apparatus 1 stores the receiver information including the receiver ID and the receiver password in the receiver management unit 114, and the receiver attribute information in the receiver information is “permitted”. It is determined whether or not (content reception is permitted) "(S125). If such a condition is satisfied, authentication is successful. The content transmission device 1 notifies the content reception device 2 of the authentication result through the recipient authentication result notification (S127).

  Further, the content receiver 2 requests the content transmitter 1 to input the ID / password by the sender / receiver authentication means 13 by the sender / sender authentication method notification (S131).

  On the other hand, the content transmitting apparatus 1 searches the sender information about the corresponding content sender (person who intends to transmit the content) in the sender management unit 113 by the content sender / receiver authentication unit 13, and this sender The sender ID and sender password in the information are transmitted to the content receiving apparatus 2 as a sender authentication information response (S133). Alternatively, the content transmission apparatus 1 transmits the sender ID and the sender password input by the content sender / recipient authentication unit 13 using a keyboard or the like as a sender authentication information response (S133).

  Content sender / receiver authentication means 23 of content receiver 2 stores sender information including sender ID and sender password in sender manager 214, and sender attribute information in this sender information is “permitted”. It is determined whether or not (content transmission is permitted) "(S135). If such a condition is satisfied, authentication is successful.

  The content reception device 2 notifies the content transmission device 1 of the authentication result by the sender authentication result notification (S137).

  FIG. 19 is a diagram illustrating an example of an operation sequence related to sender / receiver authentication performed using a public key.

  The content transmitting device 1 notifies the content receiving device 2 that the recipient authentication method is performed by the content transmitter / receiver authenticating unit 13 by performing the recipient authentication method notification (S141).

  Next, the content sender / authenticator authentication means 13 of the content transmitting apparatus 1 searches the recipient management unit 114 for the recipient information of the person who is going to receive the content, extracts the public key in this recipient information, The original message is encrypted with the public key to generate an authentication message, which is transmitted to the content receiving apparatus 2 (S143).

  In response to this, the content receiver 2 searches the receiver management unit 213 for the receiver information of the person who wants to receive the content, and extracts the secret key in the receiver information by the content sender / receiver authentication means 23. Then, the authentication message is decrypted with the secret key to generate a decrypted message, and the decrypted message is transmitted to the content transmitting apparatus 1 (S145).

  Whether the decryption message and the original message match each other, and the content sender / authentication means 13 indicates that the recipient attribute information in the retrieved recipient information indicates “permitted (content reception is permitted)” Determine whether or not. If such a condition is satisfied, authentication is successful.

  The content transmission device 1 notifies the content reception device 2 of the authentication result through the recipient authentication result notification (S149).

  In addition, the content receiver 2 notifies the content transmitter 1 that the sender authentication method is performed using the public key by the sender / receiver authentication unit 23 (S151).

  Next, the content sender / authentication means 23 of the content receiver 2 searches the sender management unit 214 for the sender information of the person who intends to transmit the content, extracts the public key in the sender information, The original message is encrypted with the public key to generate an authentication message, which is transmitted to the content transmitting apparatus 1 (S153).

  In response to this, the content transmitting apparatus 1 searches the sender management unit 113 for the sender information of the person who wants to send the content, and extracts the secret key in the sender information from the sender / receiver authentication unit 13. The authentication message is decrypted with the secret key to generate a decrypted message, and the decrypted message is transmitted to the content receiving device 2 (S155).

  Whether the content sender / receiver authentication unit 23 matches the decrypted message and the original text message, and the sender attribute information in the searched sender information indicates “permitted (content transmission is permitted)”. It is determined whether or not (S157). If such a condition is satisfied, authentication is successful.

  The content reception device 2 notifies the content transmission device 1 of the authentication result through the sender authentication result notification (S159).

  FIG. 20 is a diagram illustrating an example of an operation sequence related to sender / receiver authentication performed using biometric information.

  The content transmission device 1 requests the content reception device 2 to input biometric information by the content sender / authentication authentication means 13 through notification of the recipient authentication method (S161).

  On the other hand, the content receiver 2 inputs the recipient biometric information (fingerprint etc.) of the person who intends to receive the content from the reading device etc. by the content sender / receiver authentication means 23, and in the receiver authentication information response, The recipient biometric information is transmitted to the content transmitting apparatus 1 (S163).

  The content transmitter / receiver authentication means 13 of the content transmitting apparatus 1 stores the receiver information including the recipient biometric information in the receiver management unit 114, and the receiver attribute information in the receiver information is “permission (content It is determined whether or not “reception is permitted” (S165). If such a condition is satisfied, authentication is successful.

  The content transmission device 1 notifies the content reception device 2 of the authentication result through the notification of the recipient authentication result (S167).

  Further, the content receiver 2 requests the content transmitter 1 to input biometric information by the sender / receiver authentication means 23 through the sender / receiver authentication means 23 (S171).

  On the other hand, the content transmitting apparatus 1 inputs the sender biometric information (fingerprint or the like) of the person who intends to transmit the content from the reading apparatus or the like by the content sender / receiver authentication means 13, and in the sender authentication information response, The sender biometric information is transmitted to the content receiving device 2.

  The content sender / authentication means 23 of the content receiver 2 stores the sender information including the sender biometric information in the sender management unit 214, and the sender attribute information in the sender information is “permitted (content content”). It is determined whether or not the transmission is permitted (S175). If such a condition is satisfied, authentication is successful.

  The content receiving device 2 notifies the content transmitting device 1 of the authentication result through the sender authentication result notification (S177).

  FIG. 21 is a diagram illustrating an example of an operation flowchart related to receiving device authentication in the content transmitting device 1.

  When the TCP session is established and the reception side capability notification is made, the process branches according to the receiving apparatus authentication method (S181).

  If the authentication of the receiving device is unnecessary, the content transmitting device 1 performs the following operation (for example, information transmission in transmitting device authentication or sender authentication, receiver authentication, content transmission, etc.) (S183).

  On the other hand, if the receiving device authentication is performed with the ID / password, first, the content transmitting device 1 requests the content receiving device 2 to input the ID / password by the content transmitting / receiving device authenticating unit 12 (S185).

  Next, the content transmission device 1 receives the reception device ID and the reception device password from the content reception device 2 (S187).

  The content transmitting / receiving device authentication unit 12 stores the receiving device information including the receiving device ID and the receiving device password in the receiving device management unit 112, and the receiving device attribute information in the receiving device information is “permitted (content reception is permitted). It is determined whether or not it is permitted (S189).

  If the condition is satisfied, the content transmitting apparatus 1 performs the next operation (S183). If the condition is not satisfied, the content transmitting apparatus 1 stops transmitting the content (S191).

  On the other hand, if the receiving device authentication is performed with the public key, the content transmitting device 1 first notifies the content receiving device 2 that the receiving device authentication is performed with the public key by the content transmitting / receiving device authenticating unit 12 (S193).

  Next, the content transmitting / receiving device authentication unit 12 of the content transmitting device 1 searches the receiving device management unit 112 for receiving device information including the telephone number of the content receiving device 2, extracts the public key in the receiving device information, A predetermined original text message is encrypted with the public key to generate an authentication message, which is transmitted to the content receiving apparatus 2 (S195).

  Next, the content transmission device 1 receives the decryption message from the content reception device 2 (S197).

  Next, the content transmitting / receiving device authenticating means 12 indicates that the decryption message and the original text message match each other, and the receiving device attribute information in the searched receiving device information is “permitted (content reception is permitted)”. It is determined whether or not it is shown (S199).

  If the condition is satisfied, the content transmitting apparatus 1 performs the next operation (S183). If the condition is not satisfied, the content transmitting apparatus 1 stops transmitting the content (S191).

  FIG. 22 is a diagram illustrating an example of an operation flowchart related to receiving device authentication in the content receiving device 2.

  When the TCP session is established and the reception side capability notification is made, the process branches according to the receiving apparatus authentication method (S201).

  If authentication of the receiving device is unnecessary, the content receiving device 2 performs the following operations (for example, transmitting device authentication, sender authentication, information transmission in receiver authentication, content reception, etc.) (S203).

  On the other hand, if the receiving device authentication is performed with the ID / password, the content receiving device 2 first reads out the receiving device ID and the receiving device password stored in the receiving device management unit 211 by the content transmitting / receiving device authenticating unit 22. It transmits to the content transmission apparatus 1 (S205).

  Next, the content receiving device 2 receives the receiving device authentication result notification from the content transmitting device 1 (S207), and determines whether or not the authentication is successful in the receiving device authentication result notification (S209).

  If the authentication is successful, the content receiving apparatus 2 performs the next operation (S203). If the authentication is unsuccessful, the content receiving apparatus 2 stops receiving the content (S211).

  On the other hand, if the receiving apparatus authentication is performed with the public key, first, the content receiving apparatus 2 receives an authentication message from the content transmitting apparatus 1 (S213).

  Next, the content receiver 2 retrieves the secret key from the receiver management unit 211 by the content sender / receiver authentication means 23, decrypts the authentication message with the secret key, generates a decrypted message, and converts the decrypted message into the content The data is transmitted to the transmission device 1 (S215). Next, the content receiving device 2 receives the receiving device authentication result notification from the content transmitting device 1 (S207), and determines whether or not the authentication is successful in the receiving device authentication result notification (S209).

  If the authentication is successful, the content receiving apparatus 2 performs the next operation (S203). If the authentication is unsuccessful, the content receiving apparatus 2 stops receiving the content (S211).

  FIG. 23 is a diagram illustrating an example of an operation flowchart relating to transmission device authentication in the content reception device 2.

  When the TCP session is established and the reception side capability notification is made, the process branches according to the transmission apparatus authentication method (S221).

  If authentication of the transmission device is unnecessary, the content reception device 2 performs the following operations (for example, sender authentication, information transmission in reception device authentication or receiver authentication, content reception, etc.) (S223).

  On the other hand, if the transmission device authentication is performed using the telephone number (calling ID), the content receiving device 2 first obtains the calling ID notified at the time of calling by the SIP by the content transmitting / receiving device authentication means 22 (S225). ).

  Next, the content transmission / reception device authentication means 22 stores the transmission device information including the calling ID in the transmission device management unit 212, and the transmission device attribute information in the transmission device information is “permitted (content transmission is permitted. It is determined whether or not (S227). If the condition is satisfied, the content receiving apparatus 2 performs the next operation (S223). If the condition is not satisfied, the content receiving apparatus 2 stops receiving the content (S229).

  On the other hand, if the transmission device authentication is performed using the ID / password, first, the content reception device 2 requests the content transmission device 1 to input the ID / password by the content transmission / reception device authentication means 22 (S231).

  Next, the content reception device 2 receives the transmission device ID and the transmission device password from the content transmission device 1 (S233).

Next, the content transmitting / receiving device authentication means 22 of the content receiving device 2 stores the transmitting device information including the transmitting device ID and the transmitting device password in the transmitting device management unit 212, and the transmitting device attribute information in the transmitting device information. Is “permitted (content transmission is permitted)” (S235).
If the condition is satisfied, the content receiving apparatus 2 performs the next operation (S223). If the condition is not satisfied, the content receiving apparatus 2 stops receiving the content (S229).

  On the other hand, if the transmission device authentication is performed with the public key, the content reception device 2 first notifies the content transmission device 1 that the transmission device authentication is performed with the public key by the content transmitting / receiving device authentication means 22 (S237).

  Next, the content transmission / reception device authentication means 22 of the content reception device 2 searches the transmission device management unit 212 for transmission device information including the telephone number of the content transmission device 1, extracts the public key in this transmission device information, A predetermined original text message is encrypted with the public key to generate an authentication message and transmit it to the content transmitting apparatus 1 (S239).

  Next, the content receiving device 2 receives the decryption message from the content transmitting device 1 (S241).

  Next, the content transmission / reception device authentication means 22 indicates that the decryption message and the original text message match each other, and the transmission device attribute information in the searched transmission device information is “permitted (content transmission is permitted)”. It is determined whether or not it is shown (S243).

  If the condition is satisfied, the content receiving apparatus 2 performs the next operation (S223). If the condition is not satisfied, the content receiving apparatus 2 stops receiving the content (S229).

  FIG. 24 is a diagram illustrating an example of an operation flowchart related to transmission device authentication in the content transmission device 1.

  When the TCP session is established and the reception side capability notification is made, the process branches according to the transmission apparatus authentication method (S251).

  If authentication of the transmission device is unnecessary, the content transmission device 1 performs the following operations (for example, information transmission in sender authentication, reception device authentication, receiver authentication, content transmission, etc.) (S253).

  On the other hand, if the transmission apparatus authentication is performed with the ID / password, the content transmission apparatus 1 first reads out the transmission apparatus ID and the transmission apparatus password stored in the transmission apparatus management unit 111 by the content transmitter / receiver authentication unit 13. It transmits to the content receiver 2 (S255).

  Next, the content transmission device 1 receives the transmission device authentication result notification from the content reception device 2 (S257), and determines whether or not the authentication is successful in the transmission device authentication result notification (S259).

  If the authentication has succeeded, the content transmitting apparatus 1 performs the following operation (S253). If the authentication has failed, the content transmitting apparatus 1 stops transmitting the content (S261).

  On the other hand, if the transmission apparatus authentication is performed using the public key, first, the content transmission apparatus 1 receives an authentication message from the content reception apparatus 2 (S263).

  Next, the content transmitting apparatus 1 extracts the secret key from the transmitting apparatus management unit 111 by the content transmitter / receiver authenticating means 13, decrypts the authentication message with the secret key, generates a decrypted message, and converts the decrypted message into the content It transmits to the receiver 2 (S265). Next, the content transmission device 1 receives the transmission device authentication result notification from the content reception device 2 (S257), and determines whether or not the authentication is successful in the transmission device authentication result notification (S259).

  If the authentication has succeeded, the content transmitting apparatus 1 performs the following operation (S253). If the authentication has failed, the content transmitting apparatus 1 stops transmitting the content (S261).

  FIG. 25 is a diagram illustrating an example of an operation flowchart related to recipient authentication in the content transmission device 1.

  When the TCP session is established and the reception side capability notification is made, the process branches according to the recipient authentication method (S271).

  If the recipient authentication is not required, the content transmission device 1 performs the following operations (for example, reception device authentication, information transmission in transmission device authentication or sender authentication, content transmission, etc.) (S223).

  On the other hand, if the recipient authentication is performed with the ID / password, first, the content transmitting device 1 requests the content receiving device 2 to input the ID / password by the content transmitter / receiver authenticating means 13 (S275).

  Next, the content transmitting device 1 receives the recipient ID and the recipient password from the content receiving device 2 (S277).

  The content sender / authentication unit 13 of the content transmitting apparatus 1 stores the receiver information including the receiver ID and the receiver password in the receiver management unit 114, and the receiver attribute information in the receiver information is “permitted”. It is determined whether or not (content reception is permitted) "(S279).

  If the condition is satisfied, the content transmitting apparatus 1 performs the next operation (S273). On the other hand, if the condition is not satisfied, the content transmitting apparatus 1 stops transmitting the content (S281).

  On the other hand, if the recipient authentication is performed using the public key, first, the content transmitting apparatus 1 notifies the content receiving apparatus 2 that the recipient authentication is performed using the public key by the content transmitter / receiver authenticating unit 13 (S283).

  Next, the content sender / authenticator authentication means 13 of the content transmitting apparatus 1 searches the recipient management unit 114 for the recipient information of the person who is going to receive the content, extracts the public key in this recipient information, The original message is encrypted with the public key to generate an authentication message, which is transmitted to the content receiving apparatus 2 (S285).

  Next, the content transmission device 1 receives the decryption message from the content reception device 2 (S287).

  Next, the content sender / receiver authenticating means 13 indicates that the decrypted message and the original text message match each other, and the recipient attribute information in the retrieved recipient information is “permitted (content reception is permitted)”. It is determined whether or not it is shown (S289).

  If the condition is satisfied, the content transmitting apparatus 1 performs the next operation (S273). On the other hand, if the condition is not satisfied, the content transmitting apparatus 1 stops transmitting the content (S281).

  On the other hand, if the recipient authentication is performed using the biometric information, the content transmitting device 1 first requests the content receiving device 2 to input the biometric information by the content transmitter / receiver authenticating means 13 (S291).

  Next, the content transmission device 1 receives recipient biometric information from the content reception device 2 (S293).

  The content sender / authentication unit 13 of the content transmitting apparatus 1 stores the receiver information including the recipient biometric information in the receiver management unit 114, and the receiver attribute information in the receiver information is “permitted (content It is determined whether or not the reception is permitted (S295).

  If the condition is satisfied, the content transmitting apparatus 1 performs the next operation (S273). On the other hand, if the condition is not satisfied, the content transmitting apparatus 1 stops transmitting the content (S281).

  FIG. 26 is a diagram illustrating an example of an operation flowchart relating to recipient authentication in the content receiving device 2.

  When the TCP session is established and the reception side capability notification is made, the process branches according to the recipient authentication method (S301).

  If the recipient authentication is not required, the content receiving device 2 performs the following operations (for example, information transmission in the receiving device authentication, transmitting device authentication, sender authentication, content reception, etc.) (S303).

  On the other hand, if the recipient authentication is performed using the ID / password, the content receiver 2 uses the content sender / authenticator authentication unit 23 for the corresponding content receiver (the person who intends to receive the content) in the receiver management unit 213. The receiver information is searched, and the receiver ID and the receiver password in the receiver information are transmitted to the content transmitting apparatus 1 (S305). Alternatively, the content receiver 2 transmits the receiver ID and the receiver password input by the content receiver using the keyboard or the like to the content transmitter 1 by the content sender / receiver authentication unit 23 (S305).

  Next, the content receiving device 2 receives the recipient authentication result notification from the content transmitting device 1 (S307), and determines whether the authentication is successful in the recipient authentication result notification (S309).

  If the authentication has succeeded, the content receiving device 2 performs the following operation (S303). If the authentication has failed, the content receiving device 2 stops receiving the content (S311).

  On the other hand, if the recipient authentication is performed with the public key, first, the content receiving device 2 receives an authentication message from the content transmitting device 1 (S313).

  Next, the content receiver 2 searches the receiver information of the person who intends to receive the content from the receiver management unit 213 by the content sender / receiver authentication means 13, extracts the secret key in this receiver information, The authentication message is decrypted with the secret key to generate a decrypted message, and the decrypted message is transmitted to the content transmitting apparatus 1 (S315).

  Next, the content receiving device 2 receives the recipient authentication result notification from the content transmitting device 1 (S307), and determines whether the authentication is successful in the recipient authentication result notification (S309).

  If the authentication has succeeded, the content receiving device 2 performs the following operation (S303). If the authentication has failed, the content receiving device 2 stops receiving the content (S311).

  On the other hand, if the recipient authentication is performed using the biometric information, the content receiving device 2 first reads the recipient biometric information (fingerprint or the like) of the person who intends to receive the content by the content sender / receiver authentication means 23. The recipient biometric information is transmitted to the content transmitting apparatus 1 (S317).

  Next, the content receiving device 2 receives the recipient authentication result notification from the content transmitting device 1 (S307), and determines whether the authentication is successful in the recipient authentication result notification (S309).

  If the authentication has succeeded, the content receiving device 2 performs the following operation (S303). If the authentication has failed, the content receiving device 2 stops receiving the content (S311).

FIG. 27 is a diagram illustrating an example of an operation flowchart relating to sender authentication in the content receiving device 2.
When the TCP session is established and the reception side capability notification is made, the process branches according to the sender authentication method (S321).

  If the sender's authentication is unnecessary, the content receiver 2 performs the following operations (for example, transmitter authentication, information transmission in receiver authentication or receiver authentication, content reception, etc.) (S323).

  On the other hand, if the sender authentication is performed using the ID / password, first, the content receiver 2 requests the content transmitter 1 to input the ID / password by the content sender / receiver authenticator 23 (S325).

  Next, the content receiving device 2 receives the sender ID and the sender password from the content transmitting device 1 (S327).

  The content sender / authentication means 23 of the content receiver 2 stores the sender information including the sender ID and the sender password in the sender management unit 214, and the sender attribute information in the sender information is “permitted”. It is determined whether or not (content transmission is permitted) (S329).

  If the condition is satisfied, the content receiving apparatus 2 performs the next operation (S323). If the condition is not satisfied, the content receiving apparatus 2 stops receiving the content (S331).

  On the other hand, if the sender authentication is performed with the public key, first, the content receiving apparatus 2 notifies the content transmitting apparatus 1 that the sender authentication is performed with the public key by the content sender / receiver authentication unit 23 (S333).

  Next, the content sender / authentication means 23 of the content receiver 2 searches the sender management unit 214 for the sender information of the person who intends to transmit the content, extracts the public key in the sender information, The original message is encrypted with the public key to generate an authentication message, which is transmitted to the content transmitting apparatus 1 (S335).

  Next, the content receiving device 2 receives the decryption message from the content transmitting device 1 (S337).

  Next, the content sender / receiver authentication means 23 indicates that the decrypted message and the original message match each other and the sender attribute information in the searched sender information is “permitted (content transmission is permitted)”. It is determined whether or not it is shown (S339).

  If the condition is satisfied, the content receiving apparatus 2 performs the next operation (S323). If the condition is not satisfied, the content receiving apparatus 2 stops receiving the content (S331).

  On the other hand, if the sender authentication is performed using the biometric information, the content receiving apparatus 2 first requests the content transmitting apparatus 1 to input biometric information by the content sender / receiver authenticating means 23 (S341).

  Next, the content receiver 2 receives the sender biometric information from the content transmitter 1 (S343).

  The content sender / authentication means 23 of the content receiver 2 stores the sender information including the sender biometric information in the sender management unit 214 and the sender attribute information in the sender information is “permitted (content It is determined whether or not the transmission is permitted (S345).

  If the condition is satisfied, the content receiving apparatus 2 performs the next operation (S323). If the condition is not satisfied, the content receiving apparatus 2 stops receiving the content (S331).

FIG. 28 is a diagram illustrating an example of an operation flowchart related to sender authentication in the content transmission device 1.
When the TCP session is established and the reception side capability notification is made, the process branches according to the sender authentication method (S351).

  If the sender authentication is unnecessary, the content transmission apparatus 1 performs the following operations (for example, information transmission in the transmission apparatus authentication, reception apparatus authentication, receiver authentication, and content transmission) (S353).

  On the other hand, if the sender authentication is performed using an ID / password, the content transmitting apparatus 1 uses the content sender / receiver authenticating unit 13 to determine the content sender (the person who intends to transmit the content) in the sender management unit 113. The sender information is searched, and the sender ID and sender password in the sender information are transmitted to the content receiving device 2 (S355). Alternatively, the content transmitting apparatus 1 transmits the sender ID and the sender password input by the content sender using the keyboard or the like to the content receiving apparatus 2 by the content sender / receiver authentication unit 13 (S355).

  Next, the content transmitting apparatus 1 receives the sender authentication result notification from the content receiving apparatus 2 (S357), and determines whether the authentication is successful in the sender authentication result notification (S359).

  If the authentication is successful, the content transmission apparatus 1 performs the next operation (S353). On the other hand, if the authentication is unsuccessful, the content transmission apparatus 1 stops transmitting the content (S361).

  On the other hand, if the sender authentication is performed with the public key, first, the content transmitting apparatus 1 receives an authentication message from the content receiving apparatus 2 (S363).

  Next, the content sender / authentication unit 13 of the content transmitting apparatus 1 searches the sender management unit 113 for the sender information of the person who intends to transmit the content, extracts the secret key in the sender information, The authentication message is decrypted with the secret key to generate a decrypted message, and the decrypted message is transmitted to the content receiving device 2 (S365).

  Next, the content transmitting apparatus 1 receives the sender authentication result notification from the content receiving apparatus 2 (S357), and determines whether the authentication is successful in the sender authentication result notification (S359).

  If the authentication is successful, the content transmission apparatus 1 performs the next operation (S353). On the other hand, if the authentication is unsuccessful, the content transmission apparatus 1 stops transmitting the content (S361).

  On the other hand, if the sender authentication is performed using the biometric information, first, the content transmitting apparatus 1 reads the sender biometric information (such as a fingerprint) of the person who intends to transmit the content by the content sender / receiver authenticating means 13. The sender biometric information is transmitted to the content receiver 2 (S367).

  Next, the content transmitting apparatus 1 receives the sender authentication result notification from the content receiving apparatus 2 (S357), and determines whether the authentication is successful in the sender authentication result notification (S359).

  If the authentication is successful, the content transmission apparatus 1 performs the next operation (S353). On the other hand, if the authentication is unsuccessful, the content transmission apparatus 1 stops transmitting the content (S361).

  As described above, according to the content transmission / reception system according to the present embodiment, content transmission device 1 stores information for determining whether or not the other party is an authorized partner when transmitting content. When the content is transmitted from the side storage unit 11 and the content receiving device, the content receiving device is permitted to receive the content based on the information and the information stored in the transmitting side storage unit. The content transmitting / receiving apparatus authenticating unit 12 having a function as a content receiving apparatus authenticating unit for determining whether or not the content receiving apparatus is used, and the content receiving apparatus receives information from the content receiving apparatus and transmits the information to the information and the transmitting side storage unit. Based on the stored information, the content is received via the content receiving device. Content receiver authenticating means 13 having a function as a content receiver authenticating means for determining whether or not the content receiver is permitted to receive the content. In receiving, the receiving-side storage unit 21 that stores information for determining whether or not the other party is an authorized partner, and in receiving the content, the information is received from the content transmitting device, and the information and the receiving side Based on the information stored in the storage means, the content transmitting / receiving apparatus authenticating means 22 having content transmitting apparatus authenticating means for determining whether or not the content transmitting apparatus is a content transmitting apparatus permitted to transmit the content, Upon reception, information is received from the content transmission device and stored in the information and the receiving storage means. Content transmission / reception having a function as content sender authentication means for determining whether or not a content sender who transmits content via the content transmission device is a content sender permitted to transmit the content based on the received information Since it has the person authentication means 23, it is possible to prevent the transmission / reception of contents between unauthorized devices and persons.

  In addition, if the received information and the information to be compared with each other match the content receiving device authentication unit, the content transmission device authentication unit, the content receiver authentication unit, and the content sender authentication unit, the other party is permitted. By obtaining the determination result that it is the other party, it is possible to prevent content from being transmitted / received to / from a partner apparatus and a person who are not permitted.

  Also, the information to be compared is an ID and password indicating the other party, and if the ID and password do not match the received information, that is, the content between the unauthorized device and person Transmission and reception can be prevented.

  In addition, the content receiver authentication unit and the content sender authentication unit obtain a determination result that the other party is an authorized party if the received information and the information to be compared with each other match each other. The information to be compared is biological information indicating the biological characteristics of the other party, and if the biological information does not match the received information, that is, between the other device and the person who is not permitted. Content transmission / reception can be prevented.

  In addition, the content receiving device authenticating unit, the content transmitting device authenticating unit, the content receiver authenticating unit, and the content sender authenticating unit generate an authentication message by encrypting a predetermined original message with the other party's public key, and send it to the other unit's apparatus. Send the decryption message generated by decrypting the authentication message with the other party's private key from the other party's device, and if the decryption message and the original message match each other, then the other party is an authorized party If the decrypted message and the original text message do not match each other, that is, it is possible to prevent content transmission / reception between the unauthorized device and person.

  The authentication method may be different for each authentication target. For example, the receiving device authentication is performed using an ID and a password, the transmitting device authentication is performed using a public key, and the receiver authentication and the sender authentication are performed using biometric information. As such, any combination can be employed.

  A computer program for causing a computer to function as a content transmission apparatus or content reception apparatus in the content transmission / reception system according to the present embodiment is readable by a computer such as a semiconductor memory, a magnetic disk, an optical disk, a magneto-optical disk, and a magnetic tape. It can be recorded on a recording medium and can be widely distributed by being transmitted through a communication network such as the Internet.

DESCRIPTION OF SYMBOLS 1 ... Content transmission apparatus 2 ... Content reception apparatus 11 ... Transmission side memory | storage means 12, 22 ... Content transmission / reception apparatus authentication means 13, 23 ... Content transmission / reception person authentication means 21 ... Reception side storage means 111, 212 ... Transmission apparatus management part 112, 211 ... Receiving device manager 113, 214 ... Sender manager 114, 213 ... Recipient manager

Claims (9)

A content transmission / reception system including a content transmission device for transmitting content and a content reception device for receiving content,
The content transmission device includes:
Transmission side storage means for storing information for determining whether or not the other party is an authorized party when transmitting content;
Whether or not the content receiving apparatus is a content receiving apparatus that is permitted to receive the content based on the information and the information stored in the transmitting-side storage unit upon receiving the information from the content receiving apparatus. Content receiving device authentication means for determining
When transmitting content, a content receiver who receives information from the content receiving device and receives the content via the content receiving device based on the information and the information stored in the transmitting storage means receives the content. Content receiver authentication means for determining whether or not the content receiver is permitted to
The content receiving device is:
Receiving side storage means for storing information for determining whether or not the other party is an authorized party when receiving content;
Whether or not the content transmission device is a content transmission device that is permitted to transmit the content based on the information and the information stored in the reception-side storage unit upon receiving the content. Content transmitting device authentication means for determining
When receiving content, a content sender who receives information from the content transmission device and transmits the content via the content transmission device based on the information and the information stored in the receiving-side storage means transmits the content. Content sender authentication means for judging whether or not the content sender is permitted. If any of the content receiver authentication unit, the content transmitter authentication unit, the content receiver authentication unit, and the content sender authentication unit matches the received information and the information to be compared with each other, The content transmission / reception system according to claim 1, wherein a determination result that the partner is a permitted partner is obtained. The content transmission / reception system according to claim 2, wherein the information to be compared is an ID and a password indicating a partner. Either the content receiver authenticating unit or the content sender authenticating unit obtains a determination result that the other party is an authorized party if the received information and the information to be compared with the information match each other. Is,
The content transmission / reception system according to claim 1, wherein the information to be compared is biological information indicating a biological characteristic of the other party. Any of the content receiver authentication unit, the content transmitter authentication unit, the content receiver authentication unit, and the content sender authentication unit generates an authentication message by encrypting a predetermined original message with the public key of the other party If the decryption message generated by decrypting the authentication message with the other party's private key is received from the other party's device, and the decryption message and the original message match each other, The content transmission / reception system according to claim 1, wherein a determination result indicating that the partner is permitted is obtained. An authentication method in a content transmission / reception system including a content transmission device for transmitting content and a content reception device for receiving content,
The content transmission device includes:
A transmission-side storage unit that stores information for determining whether or not the other party is an authorized party when transmitting content;
The content receiving device is:
Receiving storage means for storing information for determining whether or not the other party is an authorized party when receiving content;
The authentication method is:
The content receiving device authenticating unit of the content transmitting device receives information from the content receiving device when transmitting the content, and the content receiving device receives the content based on the information and the information stored in the transmitting side storage unit. Determining whether or not the content receiving device is permitted to receive:
The content receiver authenticating means of the content transmitting apparatus receives information from the content receiving apparatus in transmitting the content, and based on the information and the information stored in the transmitting side storage means, via the content receiving apparatus Determining whether a content recipient receiving the content is a content recipient authorized to receive the content;
The content transmitting device authentication unit of the content receiving device receives information from the content transmitting device when receiving the content, and the content transmitting device determines whether the content transmitting device is based on the information and the information stored in the receiving side storage unit. Determining whether the content transmission device is permitted to transmit
The content sender authenticating means of the content receiving apparatus receives information from the content transmitting apparatus when receiving the content, and based on the information and the information stored in the receiving side storage means, And a step of determining whether or not the content sender who transmits the content is a content sender permitted to transmit the content. If any of the content receiver authentication unit, the content transmitter authentication unit, the content receiver authentication unit, and the content sender authentication unit matches the received information and the information to be compared with each other, The authentication method in the content transmission / reception system according to claim 6, wherein a determination result that the partner is a permitted partner is obtained. Any of the content receiver authentication means, the content transmitter authentication means, the content receiver authentication means, and the content sender authentication means
A predetermined original message is encrypted with the other party's public key to generate an authentication message and transmitted to the other party's device, and the decryption message generated by decrypting the authentication message with the other party's private key is sent from the other party's device. 7. The authentication method in the content transmission / reception system according to claim 6, wherein if the decrypted message and the original text message match each other, a determination result that the other party is an authorized party is obtained.   A computer program for causing a computer to function as a content transmission device or a content reception device in the content transmission / reception system according to claim 1.

Images