JPH07123086A - Literary work communication control system using ic card - Google Patents

Abstract

PURPOSE:To prevent the illicit acquisition or alteration of the literary work information by certifying that an operator is a due owner of an IC card with the use of this card, receiving a cipher key from an information center, and then decoding the ciphered literary work information. CONSTITUTION:An IC card input/output control part 21 of a terminal 2 collates an inserted IC card 1 with a password number to certify that an operator is a due owner of the card 1. Then the communication is carried out between the equipment 2 and an information center 4 via a network 3. Meanwhile an IC card control part 41 certifies a due opposite party of communication. Then the equipment 2 sends the retrieving conditions to a literary work storage control part 42 of the center 4. Thus, a desired literary work is retrieved. Then the equipment 2 writes the ciphered literary work information received from the part 42 into a literary work storage control part 22 and also writes a ciphered key into the card 1. Then the center 4 writes a specific owner of the received card 1 into the part 41.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a copyrighted work communication management system using an IC card, and more particularly to a network (for example, I
A work that uses an IC card to encrypt and deliver part or all of digital information that is a work (for example, music information, video information, computer program) between a terminal device and an information center connected by an SDN network) Related to the physical communication management system.

[0002]

2. Description of the Related Art Generally, music information is distributed via a compact disk (CD), video information is a videotape or laser disk, and software such as a program is distributed via various media such as a floppy disk (FD). It is being appreciated. In recent years, advances in digital technology have made it possible to digitize music information and video information and compress the digital information. With the spread of ISDN, an environment for distributing these copyrighted works via networks is being prepared. is there.

Further, since the data amount of the program is relatively small, there are cases in which the program is distributed by personal computer communication or the like.

Further, IC cards have begun to be put into practical use in the fields of companies, finance and medical care, and have an owner confirmation function and a memory protection function (access control, encryption function) as high security functions.

[0005]

However, as the above-mentioned conventional digital information, the information of the literary work can be easily copied by a personal computer such as a CD, a video, a laser disk, an FD, etc. Is different from
Since exactly the same information can be duplicated, there is a problem that a copy by an illegal person is distributed without paying a proper price for a copyrighted work. Further, even when the copyright information is delivered via the network, there is a problem that an unauthorized user illegally acquires or falsifies the copyright information.

The present invention has been made in view of the above points, and provides a copyrighted work communication management system which solves the above-mentioned conventional problems and uses an IC card which cannot illegally acquire or falsify copyrighted work information. The purpose is to do.

[0007]

FIG. 1 is a block diagram showing the principle of the present invention.

According to the present invention, in a communication system having an information center including a plurality of terminal devices 1 connected to a network 3 and a copyrighted material storage means 502 for storing and managing a copyrighted material, an IC card 1 having a security function is inserted. An input / output control unit 201 for controlling output, and an authentication unit 202 for authenticating whether the operator is the owner by using the IC card 1
And an inter-center authentication means 203 that authenticates with the information center 4 using the IC card 1, and after receiving a copyrighted material delivery request from the information center 4, receives the encrypted encryption key from the information center 4, Encryption key acquisition means 204 to be written in the card 1
And a terminal device 2 including a storage unit 205 that stores and manages the literary work information obtained from the information center 4, and the terminal device 2
Is connected to the terminal device 2 and performs authentication between the terminal device 2 and a part or all of the corresponding work from the work storage means 502 in response to a work information delivery request from the terminal device 2. Encrypted transmission means 503 for encrypting and transmitting
And an encryption key transmitting unit 504 that encrypts the encryption key of the copyrighted material information and sends it to the terminal device 2, and an IC card owner management unit 505 that stores and manages to which IC card owner the copyrighted material information is transmitted. It has an information center 4 including

Further, in the encryption transmitting means of the information center of the present invention, when a part of the copyrighted material information is encrypted, the non-encrypted part and the encrypted part are transmitted in a random order.

[0010]

According to the present invention, since the provider of the copyrighted work can be confirmed as the legitimate owner of the IC card by authenticating the owner of the IC card, the copyrighted work provider charges the user for compensation. be able to. Further, by encrypting the information, the received copyrighted material information can be decrypted and used while the copyrighted material information is encrypted in the IC card. Therefore, except for the legitimate owner of the IC card,
You cannot use encrypted works. Further, even if all the copyrighted material information is encrypted and partially encrypted without being transmitted to the user, even if the unauthorized person acquires the information of the non-encrypted portion by randomly arranging and transmitting it, it is not practical.

Further, by controlling access to the copyrighted material information, it is possible to prevent the encryption key of the stored copyrighted material from being read from the outside. Therefore, only the rightful owner of the IC card can use the encrypted work, and the work can be protected.

[0012]

Embodiments of the present invention will now be described in detail with reference to the drawings.

FIG. 2 shows the system configuration of an embodiment of the present invention. The system shown in the figure includes an IC card 1 having a security function, a terminal device 2 operating in conjunction with the IC card 1, an information center 4, and a terminal device 2 and an information center 4.
It is composed of a network 3 that connects the two. Terminal device 2
Is composed of an IC card input / output control section 21 and a copyrighted material accumulation management section 22 for accumulating copyrighted material information received from the information center 4. The information center 4 includes an IC card management unit 41 that manages an IC card and an IC card owner, and a copyrighted material storage management unit 42 that stores and manages copyrighted materials.

In the phase in which the communication system according to the embodiment of the present invention is used, the terminal device 2 receives a copyrighted work from the information center 4 and stores the copyrighted work, and the work received by the terminal device 2 There is a "copyright usage phase" in which the material is used, and each of them will be explained individually.

<< Copyright receiving phase >> FIG. 3 is a sequence chart of the copyright receiving phase according to an embodiment of the present invention. In the phase shown in the figure, the terminal device 2 receives the copyrighted work from the information center 4 and stores it.

Step 1) First, the operator uses the IC card 1
Using the terminal device 2, the operator authenticates whether the IC card is a valid owner (owner authentication).

Step 2) Next, communication is performed among the IC card 1, the terminal device 2 and the information center 3, and between the IC card 1 connected to the terminal device 2 and the IC card management section 41 of the information center 4, Mutually authenticate each other as to whether they are valid communication partners (mutual authentication).

Step 3) Only after these authentications are completed, the copyrighted material storage management section 4 of the information center 3 from the terminal device 2 is completed.
2 can be accessed. The search condition is sent from the terminal device 2 to the information center 4, and the copyrighted material storage management unit 42 of the information center 4 searches for the desired copyrighted material.

Step 4) The terminal device 2 is the information center 4
When receiving the encrypted copyrighted material information from the copyrighted material accumulation management unit 42, the encrypted copyrighted material information is written in the copyrighted material accumulation management unit 22, and the encrypted encryption key is transferred to the IC.
Write to card 1 (encrypted communication).

Step 5) When these series of processes are completed normally, the terminal device 2 transmits a work receipt confirmation indicating that the work has been received to the information center 4. By receiving the confirmation of receipt of the copyrighted work, the information center 4 determines which copyrighted work has been transmitted to which IC card owner.
To the IC card management unit 41.

The owner authentication, mutual authentication, and encrypted communication will be described in detail.

Owner Authentication It is called owner authentication to determine whether the person who intends to use the IC card is the owner, and an example thereof will be described according to the sequence shown in FIG.

When the IC card 1 is inserted into the IC card input / output control section 21 of the terminal device 2 (step 41), the IC card input / output section 21 supplies power to the IC card and sends a "reset" command (step). 42). The IC card returns a "reset response" response to the "reset" command (step 43). Subsequently, when the terminal device 2 transmits a "card ID read" command via the IC card input / output control unit 21 (step 44),
The IC card 1 returns a "read response" response in which the card ID is inserted (step 45). When the terminal device 2 receives the "read response" response, it requests the operator for the encryption number (step 46) and obtains the personal identification number by the encryption number response. Then, the terminal device 2
Insert the personal identification number obtained from the operator through the card input / output control unit 21 into the "personal identification number verification" command and send it (step 47). When the personal identification number is checked, the personal identification number will be checked in the IC card and the IC card will be used. Authentication is performed as to whether or not the owner is the owner (step 48), and the verification result is returned as a "verification response" response (step 49).

FIG. 5 is a diagram for explaining the information stored in the IC card of one embodiment of the present invention. As information stored in the IC card 1 used for owner authentication, there is a card ID 11 that is written when the card is issued and cannot be rewritten after that. The information center 4 also uses the card ID 11 as the IC card 1
Manage. Further, in the IC card 1, there is a personal identification number 12 that can be rewritten only by a legitimate owner. This personal identification number 12 is set in the IC card so that it cannot be read from the outside.

Mutual Authentication When the owner authentication (step 1 in FIG. 3,) is completed, the terminal device 2 can access the information center 4 for the first time, and the IC
Mutual authentication is performed between the card 1 and the information center 4. Mutual authentication is performed using the mutual authentication key in the IC card management unit 41 of the information center 4 and the mutual authentication key written in the IC card.

FIG. 6 is a diagram for explaining mutual authentication according to an embodiment of the present invention.

The IC card 1 and the information center 4 have a predetermined function f and encryption keys Kia and Kib.

First, the terminal device 2 transmits the card ID in the IC card 1 to the information center 4. Next, exchange random numbers with each other. After that, the function f103 displays "Card ID1
02 + random number 402 ”and mixes the data with mutual authentication keys Kia and Kib that are kept secret from each other. Thus
The calculation results are exchanged with each other, and the calculation result of the other party and the calculation result obtained by oneself are compared and collated (106, 405). If the verification results match, they can authenticate each other as valid communication partners.

Here, the function f is a cryptographic algorithm. Typical encryption algorithms include the DES encryption algorithm and the FEAL encryption algorithm in the conventional encryption method, and the RSA encryption algorithm in the public encryption method.

An authentication method using these IC cards is described in, for example, reference: “Junichi Mizusawa,“ IC Card ”, pp. 51-60, Ohmsha, published 1987 ".

An example of information stored in the IC card used for mutual authentication will be described. FIG. 7 shows the information stored in the IC card of one embodiment of the present invention.

In the IC card 1, an individual card ID 1
02 and the mutual authentication keys Kia and Kib10 as information that is written when the card is issued and cannot be rewritten thereafter.
1 and the mutual authentication key 101 is set so that it cannot be read from the outside.

Cryptographic Communication Cryptographic communication for transmitting copyrighted material information from the information center 4 to the terminal device 2 will be described.

FIG. 8 shows an example of the data format when the information center of one embodiment of the present invention sends copyrighted material information to the terminal device. In the figure, Kin81 is a secret encryption key preset in the IC card, and Kis82
Is an encryption key for communication (copyright usage information) that is variable each time communication is performed between the terminal device 1 and the information center 4.

In the terminal device 1, among the received data,
Encryption key Kin (Kis) 81 and Kis (Copyright usage information) 82
Is transmitted to the IC card 1. In the IC card 1, Kin (Kis) is decrypted with the encryption key Kin already stored, and the IC
The encryption key Kis is written and managed in the unreadable area in the card 1, and Kis (copyright usage information) 82 is decrypted by Kis and returned to the terminal device 2 as copyright usage information obtained. The terminal device 2 uses the copyrighted-material usage information obtained from the IC card 1 (details are shown in FIG. 9) and the Kis obtained from the information center 4.
(Part of copyright information) 83 and the rest of copyright information 8
4 is stored in the copyrighted material accumulation management unit 22. FIG. 9 shows the contents of the copyrighted-material usage information obtained by the terminal device 2 according to the embodiment of the present invention. In the example of the figure, a copyrighted work identifier 91 that uniquely represents a copyrighted work, search information 92 used in the copyrighted work utilization phase, IC
Encryption key I that identifies the encryption key stored and managed in the card
It defines D93.

FIG. 10 shows an example of data in the IC card 1 used at the time of encrypted communication according to an embodiment of the present invention. Encryption key Kin
Indicates an encryption key that is individually set as an individual key 110 for each IC card when the IC card 1 is issued and is not rewritten. The copyrighted work encryption key Kis111 is an encryption key for storing and managing a part of the terminal device. It is the example which has shown the encryption key of the information of the converted literary work. The work encryption key Kis is used as a pair with the work information.

Although a part (Kis) 83 of the copyrighted-material information is encrypted in the example of FIG. 8, all the information including the remaining copyrighted-material information 84 may be encrypted. In this case, more secure encrypted communication can be performed.

<< Copyright Use Phase >> The terminal device 2 receives the copyright information from the information center 4 by the above procedure, and illustrates the procedure for using the copyright information stored in the copyright accumulation management unit 22. 11 will be described. FIG. 11 is a sequence chart showing a procedure for using the copyrighted-material information of the copyrighted-material storage management unit according to the embodiment of the present invention.

Step 111) First, the operator uses the IC card 1 and the terminal device 2 to authenticate whether the operator is a valid owner of the IC card 1 (owner authentication). This owner authentication is performed in the same procedure as the copyright receiving phase.

Step 112) Next, the operator searches the copyrighted material accumulation management section 22 of the terminal device 2 for the copyrighted material to be used by using the copyrighted material encryption key.

Step 113) The operator uses the work by selecting the work information (use of work).

The procedure for using a copyrighted work will be described below. Figure 1
2 is a flowchart showing a procedure for using a copyrighted work according to an embodiment of the present invention.

Step 120) Since the copyright information is partially or wholly encrypted and cannot be used as it is, the terminal device 2 transfers a part of the encrypted copyright information to the IC card 1. , Request the IC card 1 for decryption.

Step 121) The IC card 1 decrypts the transferred copyrighted material information and returns it to the terminal device 2.

Step 122) The terminal device 2 arranges works in order from the beginning to the end based on a part of the work information decrypted from the IC card 1 and the remaining part of the work information which is not encrypted. It is reconstructed as physical information.

Step 123) If the reconstructed copyrighted work information is a program (for example, it can be determined by the copyrighted work identifier), the process proceeds to step 124. Otherwise, the process proceeds to step 125.

Step 124) When the copyrighted material information is a program, the program is executed as it is and used as it is as digital information to obtain the processing result.

On the other hand, when the reconstructed work is music information or video information, the digital information is converted into analog information and the analog information is output.

In this series of processing, what is important from the viewpoint of copyright protection is to configure the terminal so that unencrypted copyright information (digital information) is not easily copied. Therefore, the copyrighted information that has been decrypted and reconstructed is kept as a confidential part in the case of a program until the program is executed. On the other hand, in the case of music information or video information, analog information is kept. It is necessary to give consideration so that no information will be leaked to the outside by using the route until it is converted as a confidential part.

[0050]

As described above, according to the present invention, information obtained by encrypting a part or all of copyrighted material information is delivered by communication from an information center, and stored and managed by a terminal device, and its encryption. By encrypting and delivering the key and storing and managing it in the IC card, even if the information is illegally acquired on the network or illegally copied on the terminal device, when the copyrighted material is actually used, By using the encryption key stored in the IC card, it is possible to prevent the unauthorized acquisition or copying of the copyrighted work by anyone other than the authorized owner of the IC card.

When a part of the copyrighted material information is encrypted, the unauthorized user can combine the encrypted information with the unencrypted information in a random order so that the unauthorized user can copy the unencrypted information. Even if only a part is taken out, it cannot be considered as usable copyright information, and thus copyright information can be protected.

[Brief description of drawings]

FIG. 1 is a principle configuration diagram of the present invention.

FIG. 2 is a system configuration diagram of an embodiment of the present invention.

FIG. 3 is a sequence chart of a copyrighted work receiving phase according to an embodiment of the present invention.

FIG. 4 is a sequence of owner authentication according to an embodiment of the present invention.

FIG. 5 is a diagram for explaining information stored in the IC card according to the embodiment of the present invention.

FIG. 6 is a diagram for explaining mutual authentication according to an embodiment of the present invention.

FIG. 7 is a diagram showing an example of information stored in an IC card according to an embodiment of the present invention.

FIG. 8 is a diagram showing an example of a data format when an information center according to an embodiment of the present invention transmits copyrighted material information to a terminal device.

FIG. 9 is a diagram showing the contents of copyrighted-material usage information obtained by the terminal device according to the embodiment of the present invention.

FIG. 10 is a diagram showing an example of data in an IC card used at the time of encryption according to an embodiment of the present invention.

FIG. 11 is a sequence chart showing a procedure for using copyrighted material information of a copyrighted material storage management unit according to an embodiment of the present invention.

FIG. 12 is a flowchart showing a procedure for using a copyrighted material according to an embodiment of the present invention.

[Explanation of symbols]

 1 IC card 2 Terminal device 3 Network 4 Information center 11 Card ID 12 PIN number 22 Copyright accumulation management unit 41 IC card management unit 42 Copyright accumulation management unit 81 Encryption key Kin 82 Copyright usage information (Kis) 83 Copyright information 84 Part of copyright information 91 Remaining part of copyright information 91 Copyright identifier 92 Search information 93 Encryption key ID 101 Mutual authentication key 102 Card ID 104 Random number 105 Function 106 Comparison verification 110 Individual key 111 Copyright code number key 201 Input / output control means 202 Authentication Means 203 Inter-center authentication means 204 Cryptographic key acquisition means 205 Accumulation means 401 Mutual authentication key 402 Random numbers 403, 404 Function 405 Comparison verification 501 Terminal-to-terminal authentication means 502 Copyright accumulation means 503 Encryption transmission means 504 Encryption key transmission means 505 IC card possession Person management means

─────────────────────────────────────────────────── ─── Continuation of the front page (51) Int.Cl. ⁶ Identification code Internal reference number FI technical display location G06K 19/10

Claims (2)

[Claims] 1. In a communication system having an information center including a plurality of terminal devices connected to a network and a copyrighted work storage means for storing and managing a copyrighted work, an input / output for controlling input / output of an IC card having a security function. Control means, authentication means for authenticating whether the operator is the owner using the IC card, inter-center authentication means for performing authentication with the information center using the IC card, and the information center And a storage means for storing and managing the copyrighted material information obtained from the information center, which receives the encrypted encryption key from the information center, and writes the encrypted encryption key to the IC card after the copyrighted material is requested to be delivered. A terminal device including the terminal device, an inter-terminal authentication unit that is connected to the terminal device and performs authentication with the terminal device, and a copyright information storage unit that responds to the copyright information distribution request from the terminal device. Encryption means for encrypting part or all of the copyrighted material information to be transmitted, encryption key transmitting means for encrypting the encryption key of the copyrighted material information and transmitting it to the terminal device, and which IC A copyrighted work communication management system using an IC card, characterized by having an information center including an IC card owner management means for accumulating and managing whether or not it has been transmitted to the card holder. 2. The encrypted transmission means of the information center transmits the non-encrypted part and the encrypted part in a random order when a part of the copyrighted material information is encrypted. Copyright communication management system using IC card.