JPH07226733A - Method and device for copying digital information - Google Patents

Abstract

PURPOSE:To provide a digital information copying method and a device where utilized results are reported accurately to an information server as to correct use of charged digital information while the utilized results are accurately recorded and managed and illegal copying or illegal use is prevented. CONSTITUTION:Digital information including ciphered digital information main body, title information and authenticators are received through a communication line and an information protect section 3 detects the forgery of the digital information based on the authenticator, the operation of the information protect section 3 is verified, and only when the operation verification and the detection of forgery indicate an acceptable result, the information main body and the title information are decoded, and the title information and data and dime for copying outputs are stored in a utility result management means 37 as a copy recording, the information main body is copied and outputted to a package medium, and when a utilized result transmission request is received with inquiry information from an information delivery center, the inquiry information and the management information stored in the utility result management means 37 are sent to the information delivery center.

Description

Detailed Description of the Invention

[0001]

The present invention relates to an integrated digital communication network (ISDN) for information on copyrighted works such as music, images, paintings and books.
After receiving it as digital information through a communication line such as
The present invention relates to a digital information duplication method and apparatus for duplicating and outputting a literary work in the form of a package medium such as a CD-ROM, a video tape, and a printed matter.

[0002]

2. Description of the Related Art Recently, digital information compression technology and I
With the development of high-speed digital communication technology represented by SDN, it has become feasible to convert copyrighted works such as music, images, paintings, books, etc. into digital information, compression-encode it, and transmit it using a communication line. It was Therefore, the copyright holder provides the copyrighted work as pay digital information to the general public through communication lines, and the user can receive / store the pay digital information on condition that the pay for the information is paid. Become.

[0003]

In the conventional transmission and duplication techniques for digital information, it is possible to accurately receive / store and duplicate digital information. However, since there is no particular reference to a method of copying and using the digital information after it has been received / stored after paying a reasonable price, measures against illegal copying and illegal use are taken. Absent.

For this reason, since the digital information is not deteriorated even if it is copied and the copying can be performed easily, there is a risk that illegal copying or illegal use is performed after reception / accumulation or after completion of copying. If the illegal copy or illegal use is made when handling the copyrighted work as pay digital information, the copyrighted work will be illegally used without paying the price, and the copyright will be infringed. Become.

In view of the above-mentioned problems, the object of the present invention is to provide a pay digital information to a general public as a pay digital information by a communication line. An object of the present invention is to provide a digital information duplication method and an apparatus thereof that accurately records and manages the usage record and then accurately notifies or reports the usage record to an information provider and prevents illegal copying and unauthorized use. .

[0006]

In order to achieve the above object, the present invention provides, in claim 1, a communication session key different for each communication encrypted with a common key stored in a common key storage means. And the digital information including the digital information main body and title information and the authenticator encrypted by the communication session key are received by the communication line, and the digital information is stored in the information storing means, and then the digital information is stored. Falsification of the digital information is detected by the encrypted common key stored in the common key storage means and the authenticator in the information protection means, and the operation of the information protection means is verified. Decrypting the communication session key from the digital information only when tampering is not detected and when the operation is verified,
Using the decrypted session key for communication, the digital information body and the title information are decrypted from the digital information, and the title information and the date and time of duplicate output are stored as a duplicate record in the usage record managing means, and Copy the digital information body to the package medium and output it.
Later, when a usage record transmission request together with inquiry information is received from the information distribution center, a digital information duplication method is proposed in which the inquiry information and the management information stored in the usage record management means are transmitted to the information distribution center. To do.

According to a second aspect of the present invention, in the digital information duplicating method according to the first aspect, digital information to be stored in the usage record managing means after a tampering prevention measure is provided by adding an authenticator to the duplicate record. Suggest a replication method.

According to a third aspect of the present invention, in the digital information duplicating method according to the first aspect, an authenticator for preventing falsification is added to the management information, and the information is delivered after being encrypted if necessary. We propose a method of copying digital information transmitted to the center.

According to a fourth aspect of the present invention, in the digital information copying method according to the first aspect, when the received digital information is compressed, the digital information is expanded and then output to the package medium. Suggest a method.

According to a fifth aspect of the present invention, in the digital information duplicating method according to the first aspect, the digital information main body is converted into analog information such as audio / video for confirmation before output to the package medium for trial output. We propose a digital information duplication method.

According to a sixth aspect of the present invention, in the digital information duplicating method according to the fifth aspect, when the trial output is performed, the title information and the date and time of the trial output are stored as trial records in the usage record managing means. We propose a digital information duplication method.

Further, according to claim 7, in the digital information copying method according to claim 6, the digital information stored in the usage record managing means after the trial record is given an authenticator and tampering prevention measures are taken. Suggest a replication method.

Further, in claim 8, the communication control means for transmitting and receiving the encrypted digital information through the communication line, the communication session key encrypted with the encryption common key and the communication session key are encrypted. The received information storage means for storing digital information including the encrypted information body and the authenticator, and the information protection means having physical security, wherein the information protection means physically stores the encryption common key. An authentication means having a common key storage means for security protection, a function for detecting alteration of received digital information, an operation confirmation function for the information protection means, and a function for decrypting an encrypted communication session key, and the communication session. Decryption means for decrypting the encrypted digital information using a key, duplicate output means for duplicating and outputting the decrypted digital information on a package medium, and duplicating and outputting Usage record management means having a function of recording and managing duplicated records for certifying that the means has been used, and instruction control of permission of decryption or output to the authentication means and writing of the duplicated records to the usage record management means The communication control means proposes a digital information duplicating apparatus for transmitting the management contents of the usage history management means in response to a usage history transmission request from a host device.

According to a ninth aspect of the present invention, in the digital information copying apparatus according to the eighth aspect, the authenticating means creates an authenticator from the information body of the received digital information, the authenticator creating means, and the authenticator and the authenticating means. Proposed is a digital information duplicating apparatus having an authenticator comparing means for comparing with an authenticator included in received digital information, and a judging means for detecting falsification of the digital information based on a comparison result of the authenticator comparing means. .

According to a tenth aspect of the present invention, in the digital information copying apparatus according to the eighth aspect, the authenticating means operates the information protecting means based on a result of transfer of specific information between the control means and the usage record managing means. We propose a digital information duplication device for confirmation.

[0016] According to claim 11, in the digital information copying apparatus according to claim 8, the usage record managing means records an authenticator creating means for creating an authenticator from the record management information, and the created authenticator and records. There is proposed a digital information copying apparatus having an authenticator collation checking means for collating with a managed authenticator and a judging means for detecting tampering based on the result of the authenticator collation inspection.

According to a twelfth aspect of the present invention, in the digital information copying apparatus according to the eighth aspect, when the received digital information is compressed, the digital information is provided with a decompression means for decompressing the digital information according to the information content. Propose a duplication device.

According to a thirteenth aspect, in the digital information duplicating apparatus according to the eighth aspect, the information body is converted into analog information such as audio and video for confirmation before output to a package medium for trial use. We propose a digital information duplicator equipped with output means.

Further, according to a fourteenth aspect, in the digital information copying apparatus according to the thirteenth aspect, the usage record managing means has a function of recording and managing a trial record certifying that the trial output means is used. The control means proposes a digital information duplicating apparatus for controlling the writing of the trial record to the use record managing means.

[0020]

According to the digital information copying method of the first aspect of the present invention, if the digital information transferred to the information protection means has been tampered with, tampering is detected,
Further, when some trouble occurs in the information protection means itself, a malfunction is detected and the subsequent use is stopped. If these verifications are met, it is judged that the legitimate digital information is used and that the information protection means is also normal, and the duplication record is recorded and managed in the usage record management means at the time of duplication, and then duplication is permitted. .

On the other hand, when a usage record transmission request is issued from the information distribution center, a different inquiry is made, for example, every time, and the inquiry information and the management information of the usage record management means are transmitted to the information distribution center. The center can judge whether or not the inquiry information of this time is correctly included in the transmitted data. As a result, the data transmitted in the past to the information delivery center is retransmitted, or the inquiry information received this time and a part of the data transmitted to the information delivery center in the past are combined to deliver the information as if it were new data. Unauthorized acts such as sending to the center cannot be performed. Therefore, it is possible to prevent unauthorized use such as falsification of the number of uses.

Further, according to claim 2, since an authenticator is given to the duplicate record and the alteration record is taken and then stored in the utilization record managing means, the duplicate record is altered and used. Fraud is detected by the authenticator inspection even if the actual results are fooled.

According to a third aspect of the invention, since the falsification preventing authenticator is added to the management information transmitted to the information center, the information is transmitted to the information distribution center. Then, it is possible to determine whether or not the inquiry information of this time is correctly included in the transmitted data by the authenticator inspection. Further, if the transmission data is encrypted at the time of transmission to the information delivery center, it can be safely transmitted without the third party knowing the usage record.

According to the fourth aspect, when the received digital information is compressed, the digital information is expanded and then copied and output to the package medium.

According to a fifth aspect of the present invention, the digital information body is converted into analog information such as audio / video for trial output before the output to the package medium for confirmation.

According to the sixth aspect, when the trial output is performed, the title information and the date and time when the trial output is performed are stored in the utilization record managing means as a trial record.

Further, according to a seventh aspect, after the trial record is provided with an authenticator and tampering prevention measures are taken, the trial record is stored in the utilization record managing means.

According to the digital information duplicating apparatus of the present invention, the communication control means transmits / receives the encrypted digital information through the communication line, and the communication is encrypted with the common key for encryption. Digital information including a session key, an information body encrypted with the communication session key, and an authenticator is stored in the received information storage means. Further, the encryption common key is stored in the common key storage means and is physically protected. Further, the authenticating unit detects the alteration of the received digital information and confirms the operation of the information protecting unit, and also decrypts the encrypted communication session key. Further, the digital information encrypted by the decryption means is decrypted using the communication session key, and the decrypted digital information is duplicated and output to the package medium by the duplicate output means. At this time, the copy record certifying that the copy output means has been used is recorded and managed by the usage record management means, and the control means permits the decryption or copy output to the authentication means and the copy to the usage record management means. Instructions such as record writing are controlled. Further, when a usage record transmission request is received from a host device, such as an information delivery center, the communication control means transmits the management content of the usage record management means to the host device. Therefore, since the digital information stored in the received information storage means is encrypted, even if it is copied as it is and decrypted without using the information protection means, the information of the digital information body and the authenticator etc. Can't take out. on the other hand,
The encrypted common key, which is set in each digital information duplicating apparatus and is necessary for decrypting the encrypted digital information by the information protection means, is the common key in the information protection means having physical security. The encrypted common key is not known to the user because it is directly stored in the key storage means and is used only in the information protection means at the time of authentication and record management. As a result, it is possible to prevent use due to illegal copying or illegal use due to device forgery.

According to a ninth aspect of the present invention, when the authenticating means detects digital information tampering, the authenticator creating means creates an authenticator from the information body of the received digital information, and the authenticator and the received digital information are received. After the authenticator included in the information is compared by the authenticator comparing means, the deciding means detects the falsification of the digital information based on the comparison result of the authenticator comparing means.

According to a tenth aspect of the present invention, when the operation of the information protection means by the authentication means is confirmed, the operation of the information protection means is confirmed on the basis of the result of the transfer of the specific information between the control means and the usage record management means. Is done.

According to the eleventh aspect, when the usage record managing means records and manages the duplicate record certifying that the duplicate output means has been used, the authenticator creating means extracts the authenticator from the record management information. The created authenticator and the record-managed authenticator are collated by the authenticator collating and checking means, and based on the result of the authenticator collating and checking, the judging means detects falsification of the record management information.

According to the twelfth aspect, when the received digital information is compressed, the digital information is expanded by the expansion means according to the information content.

According to a thirteenth aspect, for confirmation before the duplicate output to the package medium, the trial output means converts the information body to be the duplicate output target into analog information such as audio / video and the trial output. It

Further, according to claim 14, the control means controls the writing of the trial record to the usage record managing means, and based on the instruction, the usage record managing means uses the trial output means. A trial record certifying that the action has been taken is maintained.

[0035]

DESCRIPTION OF THE PREFERRED EMBODIMENTS An embodiment of the present invention will be described below with reference to the drawings. FIG. 1 is a block diagram showing a digital information copying apparatus according to an embodiment of the present invention. In the figure, 1 is a communication control unit for transmitting and receiving digital information through a communication line, 2
Is a received information storage unit for storing received digital information and the like, 3 is an information protection unit having physical safety in the digital information duplication device, 4 is connected to an input interface unit 5 such as a keyboard, and the operation of each unit It is a central control unit that performs control.

The information protection section 3 is composed mainly of a well-known CPU, and the common key storage means 31 for physically protecting the common key unique to each digital information duplicating apparatus and the digital information input from the received information storage section 2 are provided. Falsification detection function, operation confirmation function of the information protection unit 3, and a function of decrypting the encrypted communication session key with the common key Ka, and the encrypted digital information input from the received information storage unit 2. Decoding means 33 for decoding the
When the digital information decoded by is compressed, the expanding means 34 expands the digital information by an expansion method corresponding to the compression encoding method, and the decoded and expanded digital information is used as an analog of audio / video for trial use. Trial output means 35 for converting and outputting the information, and copy output means 3 for copying and outputting the decoded and expanded digital information to a package medium such as an optical disk, a magnetic disk, or paper.
6. A trial record consisting of the title and trial date and time of the digital information output by the trial output means 35 and the authenticator information added to prevent falsification, and a duplicate record consisting of the authenticator information added to prevent duplication. It is composed of a usage record management means 37 for record management, and a control means 38 for instructing control of decryption permission or output permission to the authentication means 32 and writing of the trial record and the duplicate record into the usage record management means 37. There is.

Here, the trial output means 35 is provided with an output interface such as a display device and a speaker, and the duplicate output means 36 is an optical disk, a magnetic disk,
It goes without saying that an interface such as a disk drive device and a printer for duplicating and outputting to a package medium such as a video tape or paper is provided.

Further, the utilization record managing means 37 and the control means 38 are respectively constituted by a plurality of functional parts as shown in FIG. That is, the usage record managing means 37 includes a receiving unit 371, a transmitting unit 372, an encrypting unit 373, an operation verifying unit 374, an operation determining unit 375, an authenticator creating unit 376, an authenticator inspecting unit 377, a duplicate recording / storing unit 378, and It is composed of a trial record storage unit 379.

When the receiving unit 371 receives the operation verification command and the inspection random number from the control unit 38, the inspection random number, the operation verification command, and the authenticator inspection command are respectively encrypted by the encryption unit 373, the operation verification unit 374, and the authenticator creating unit. Send to 376. The transmission unit 372 sends the encrypted random number created by the encryption unit 373 and the operation determination result by the operation determination unit 375 to the control unit 38. The encryption unit 373 encrypts the input check random number with the common key Ka and outputs it to the transmission unit 372.

The operation verification unit 374 is the utilization record management means 37.
The quality of the operation state is verified, and the verification result is sent to the operation determination unit 375. The motion determination unit 375 is the motion verification unit 3
The operation verification result is input from 74, the authenticator inspection result is input from the authenticator inspection unit 377, and based on these, it is determined whether or not the entire usage record managing unit 37 is normally operating, and the operation is performed. The determination result is sent to the transmission unit 372.

When the authenticator creating unit 376 receives the authenticator inspection command from the control means 38 via the receiving unit 371, the authenticator creating unit 376 reads out the identification information and the usage information from the duplicate record storage unit 378 and the trial record storage unit 379, An inspection authenticator is created from these and the common key Ka and sent to the authenticator inspection unit 377. The authenticator inspection unit 377 reads out the authenticator information from the duplicate record storage unit 378 and the trial record storage unit 379, and collates and inspects the authenticator and the authenticator created by the authenticator creation unit 376. The result is sent to the operation determination unit 375.

On the other hand, the control means 38 is composed of a receiving section 381, a transmitting section 382, an operation judging section 383, a decoding section 384, a collating section 385, a random number generating section 386, and an operation verifying section 387.

The reception unit 381 sends the encrypted random number and the operation determination result input from the usage record management unit 37 to the decryption unit 384 and the operation determination unit 383, respectively, and the operation verification command input from the authentication unit 32 is generated by the random number generation unit. 386 and the operation verification unit 387.

The transmitting unit 382 sends the operation verification command input via the receiving unit 381 and the check random number generated by the random number generating unit 386 to the utilization record managing means 37, and
The operation verification result is sent to the authentication means 32. Motion determination unit 3
Reference numeral 83 denotes a final operation confirmation based on the operation determination result input from the usage history management unit 37 via the receiving unit 381, the collation result input from the collation unit 385, and the operation verification result input from the operation verification unit 387, and uses the result. The operation verification result indicating the quality of the operation state of the result management unit 37 and the control unit 38 is sent to the authentication unit 32 via the transmission unit 382.

When the decryption unit 384 inputs the encrypted random number from the usage record management unit 37 via the receiving unit 381, the decryption unit 384 decrypts the encrypted random number using the common key Ka, and the random number of the decryption result is verified by the collating unit 385. Send to. The collating unit 385 is the decoding unit 3
The random number input from 84 and the random number input from the random number generation unit 386 are compared and collated, and the collation result is determined by the operation determination unit 3
To 83. The random number generation unit 386 generates a random number when an operation confirmation command is input, sends the random number to the verification unit 385 as an inspection random number, and sends the random number to the usage record management unit 37 via the transmission unit 382. The operation verification unit 387 verifies whether or not the operation state of the control unit 38 is good, and sends the verification result to the operation determination unit 383.

FIG. 3 is a diagram showing the configuration of the received information stored in the received information storage unit 2. In the figure, Ka is a common key according to the common key cryptosystem that is shared by the information distribution center which is the information provider and the common key storage means 31 in the digital information copying apparatus. Ks is a communication session key used to encrypt digital information and title information during digital information communication, and is set differently for each digital information.

As shown in FIG. 3, the reception information actually received is the information [Ka (Ks)] obtained by encrypting the communication session key Ks with the common key Ka, the digital information body and the title information for the communication. It is composed of encrypted information encrypted with the session key Ks and authenticator information for preventing falsification of the encrypted information. In this case, the authenticator is calculated and created in the information distribution center by using the common key Ka for the encrypted information by a method for creating a data falsification detecting authenticator such as MAC.

FIG. 4 and FIG. 5 are diagrams showing the configuration of trial recording and duplication recording, which are recorded and managed by the utilization record managing means 37, respectively, and are identification information for discriminating trial or duplication, trial output or duplication. It is composed of usage information including the output title information and the output date and time, and further, identification information and authenticator information for preventing falsification of the usage information. The authenticator in this case is also the above-mentioned M
A data falsification detection authenticator creation method such as AC is used to calculate and create the identification information and the usage information using the common key Ka.

The operation procedure for trial output and duplicate output in the digital information duplicating apparatus according to the present invention will be described below with reference to the flowchart shown in FIG.

First, the digital information to be subjected to trial output or duplicate output is transmitted from the information delivery center through the communication control unit 1 according to the form of received information created by a higher-level device such as the information delivery center shown in FIG. Then, the received information is temporarily stored in the received information storage unit 2 (S1). As the reception information storage unit 2, a general-purpose external storage device such as a magnetic disk or an optical disk may be used. Further, a plurality of pieces of reception information may be stored in the reception information storage unit 2 at the same time. This is because the received information stored in the received information storage unit 2 is encrypted, so that even if an illegal act such as wiretapping or illegal copying is performed, the digital information will not be decrypted.

Next, when the user selects the digital information for which trial output or duplicate output is desired via the input interface unit 5 (S2), the received information corresponding to the selected digital information is stored in the central control unit 4. It is transferred from the received information storage unit 2 to the information protection unit 3 according to the command (S3).

The information protection unit 3 creates authenticator information from the encrypted information in the received information for the transferred received information by the same procedure as the method created in the information delivery center in the authenticating means 32, and receives it. Collation with the authenticator information included in the information is performed (S4). If the result of this collation is incompatible, it is determined that the received information has been tampered with or illegally copied, and the subsequent use is prohibited (S5, S6). If the verification in S4 is met, the authentication means 32 verifies the operation of the control means 38 and the usage record management means 37 and the communication status (S7).

In the operation inspection in the usage record managing means 37, a new authenticator is created from the identification information and the usage information for the trial record and the duplicate record which are already managed, and the record is actually managed. Includes an authenticator check for comparison and verification with an authenticator.

In the communication status inspection, the control means 38 is used.
Transmits the check random number to the use record managing means 37, and the use record managing means 37 sends the response data obtained by encrypting the received check random number with the common key Ka stored in the common key storing means 31 to the control means 38. The control means 38 may decrypt the encrypted random number with the common key Ka and compare and verify the decrypted random number with the transmitted check random number.

By these inspections, the authenticating means 32 judges the normality of the operation and the communication status of the control means 38 and the usage record managing means 37, and when it is judged to be abnormal (for example, no response, response information error, etc.). Then, when it is determined that the control unit 38 or the performance management unit 37 is not operating normally), it is determined that the information protection unit 3 is malfunctioning, and the subsequent use is prohibited (S8, S6).

If the two inspections are satisfied, the communication session key Ks encrypted using the common key Ka from the received information is decrypted (S9), and then the decrypted communication session key Ks is decrypted. Using Ks, the decoding means 33 decodes the digital information and the title information from the received information (S10), and when the decoded digital information is compressed, the expansion means 3 is applied to the digital information.
In step 4, decompression is performed by a decompression method corresponding to the digital information compression method in the information distribution center (S11). The digital information compression / expansion method here includes encoding (compression), decoding (expansion), etc. in the storage coding method MPEG for storing moving image / audio of the government bond standard.

Next, before the decompressed digital information is output, the usage information is written in the usage record management means 37, and thereafter, the subsequent processing differs depending on whether it is a trial output request or a duplicate output request.

First, in the case of a trial output request, the trial record managed by the usage record managing means 37 is
Separate the authenticator information from the trial record, newly add the usage information consisting of the title information and the trial date and time corresponding to the digital information used this time to the end, create new authenticator information again, and add it to the end. Thus, this is recorded in the usage record management means 37 as a new trial record (S12). As soon as this recording is completed, the trial output means 35 outputs audio (such as music information) or displays (such as video and character information) according to the digital information medium.
Information is output in a transient information form other than the package medium output (S13).

Next, in the case of a duplicate output request, for the duplicate record managed by the usage record managing means 37,
Similar to the trial output request above, the authenticator information is separated from the duplicate record, the title information corresponding to the digital information duplicated this time and the usage information consisting of the date of duplication are newly added, and new authenticator information is added again. By creating it and adding it to the end, this is recorded in the usage record management means 37 as a new copy record (S14). Upon completion of this recording, the duplicate output means 36 duplicates and outputs the package medium according to the medium of the digital information (S15). For example, CD-ROM for music information
In the case of video information, duplicate output is performed on a video tape.

On the other hand, the information distribution center accesses the digital information duplicating apparatus at regular intervals to collect the trial record and the duplication record recorded in the utilization record managing means 37 by the above-mentioned procedure, and at the same time, in the digital information duplicating apparatus Detect cheating. The procedure for collecting the trial record and the duplicate record will be described below with reference to the flowchart shown in FIG.

First, the information delivery center determines different inquiry information such as a random number each time (SP1), and then an instruction code indicating that the recorded contents of the usage record managing means 37 is transmitted to the information delivery center and the above-mentioned instruction code. Command information composed of inquiry information is transmitted to the digital information copying apparatus (SP2).

The communication control section 1 of the digital information copying apparatus decodes the instruction code based on the received instruction information, transfers the inquiry information to the utilization record managing means 37, and
The usage record management means 37 is instructed to transmit the recorded contents to the information delivery center (SP3).

In the usage record management means 37, the usage record information consisting of the inquiry information and the record-managed trial record and copy record as shown in FIG. 8 and the authenticator information for preventing the tampering of these items of information. Is created and transmitted to the information delivery center (SP4). In FIG. 8, the common key Ka stored in the common key storage means 31 is used for encryption and then transmitted to the information distribution center. However, if there is no particular need for encryption, the encrypted portion can be omitted. You can omit it. After this, after the transmission, the trial record and the duplicate record are erased (SP5).

At the information delivery center, whether or not the inquiry information included in the usage record information transmitted from the digital information copying device matches the inquiry information transmitted by the information delivery center, including the authenticator inspection, is checked ( SP
6) If the result of the collation is incompatible, it is determined that the transmitted data is invalid (SP).
7).

If the verification of SP6 is satisfied, an authenticator is created for each of the trial record and the duplicate record included in the usage record information by the same procedure as that created by the usage record management means 37. (SP8), the authenticator is verified for each (SP9). If the result of this verification is non-conforming, it is determined that the usage record recorded and managed by the usage record management means 37 has been tampered with (SP10).

If either one of these two inspections is incompatible, it is determined that some illegal act has been performed on the digital copying apparatus side, and the digital information receiving restriction / restriction / restriction to the corresponding digital copying apparatus is made. Take measures such as prohibition (SP11). If the verification of SP9 is met, the trial record and the duplicate record are judged to be accurate, and the duplicate record is duplicated and output by the digital information duplicating apparatus of this embodiment, and the duplicated digital information is obtained. Information fee according to
12). It should be noted that the trial output may be used as marketing research information or as a target of charge collection, and is left to the discretion of the digital information provider.

[0067]

As described above, according to the digital information copying method of the first aspect of the present invention, the unauthorized use of digital information is eliminated by authenticating the authenticity of the digital information transferred to the information protection means. In addition, the record of use is accurately recorded and managed for the duplication and use of legitimate digital information, and when the information delivery center (information provider) instructs the collection of the record of use, the record is managed. Since the usage history is accurately notified or reported, if the digital information transferred to the information protection means has been tampered with, the tampering is detected by the authentication means, and the information protection means itself has some trouble. If the error occurs, the malfunction is detected and the subsequent use is stopped. If these verifications are met, use legitimate digital information,
Further, the information protection means is also judged to be normal, and at the time of duplication, duplication is permitted after the duplication record is recorded and managed by the usage record administration means. As a result, it is possible to prevent illegal duplicate output. On the other hand, when a usage record transmission request is sent from the information distribution center, different inquiry information and management information of the usage record management means are transmitted to the information distribution center every time, so that the information transmitted in the information distribution center includes It is possible to determine whether or not the inquiry information of is correctly included. As a result, the data transmitted in the past to the information delivery center is retransmitted, or the inquiry information received this time and a part of the data transmitted to the information delivery center in the past are combined to deliver the information as if it were new data. Unauthorized acts such as sending to the center cannot be performed. Therefore, it is possible to prevent unauthorized use such as falsification of the number of times of use, and to protect the rights and profits of the copyright holder and the information provider.

According to claim 2, in addition to the above effect, since the duplicate record is recorded and managed with an authenticator added, the duplicate record is tampered with to falsify the usage record. In this case, since the fraud is detected by the authenticator inspection, it is difficult to falsify the duplicated record and it is possible to prevent this.

Further, according to claim 3, in addition to the above effect, when the usage record transmission request is issued from the information delivery center,
Since the inquiry information and the duplicate record are transmitted to the information distribution center after adding an authenticator to prevent falsification, the information distribution center correctly includes the inquiry information of this time in the data transmitted. Whether or not it can be determined by the authenticator inspection. Further, by encrypting the transmission data at the time of transmission to the information delivery center, it is possible to safely transmit the data without the usage history being known to a third party.

Further, according to claim 4, in addition to the above effect, when the received digital information is compressed, the compressed digital information is expanded and then copied and output to the package medium. The digital information can be transmitted, the time required for the information transmission can be shortened, and the copyrighted work information required by the user can be supplied more quickly.

According to claim 5, in addition to the above effect, the information body can be converted into analog information such as audio / video for confirmation before the duplicate output to the package medium, so that the trial output can be performed. The user can actually confirm whether or not the information is necessary.

According to the sixth aspect, in addition to the above effects, when the trial output is performed, the title information corresponding to the trial output information and the date and time of the trial output are stored as a trial record. Unnecessarily many trials can be prevented.

Further, according to claim 7, in addition to the above effect, since an authenticator is added to the trial record and tampering prevention measures are taken, the trial record is tampered with and the usage record is cheated. Even if the user tries to do so, since fraud is found by the authenticator inspection, it is difficult to falsify the trial record and it is possible to prevent it.

Further, according to the digital information duplicating apparatus of the present invention, the digital information with the authenticator received by the cryptographic communication in the common key cryptosystem can be used for some verification such as authenticator verification in the information protection means. Only when it conforms to the inspection, after decrypting and recording and managing the usage record, the decrypted digital information body is copied and output to the package medium.
Since the digital information stored in the received information storage means is encrypted, the contents of the digital information cannot be retrieved even if the digital information is copied and decrypted without using the information protection means. On the other hand, the encrypted common key, which is set in each digital information duplicating device and is necessary for decrypting the encrypted digital information by the information protection means, is a common key in the information protection means having physical security. The encrypted common key is not known to the user because it is directly stored in the key storage means and used only in the information protection means at the time of authentication and record management. Therefore, it is possible to prevent the illegal use such as the illegal copy and the device forgery, and it is possible to protect the rights and profits of the copyright holder and the information provider. Furthermore, since the management content of the usage record management means is transmitted by the communication control means in response to the usage record transmission request from the host device, for example, different inquiry information is transmitted every time the usage record transmission request is sent from the information distribution center. On the other hand, if the inquiry information and the management information of the usage record managing means are transmitted to the information distribution center, the data transmitted at the information distribution center will correctly include the inquiry information of this time. Since it is possible to determine whether or not there is any, it is possible to detect an illegal act such as modification of the copying apparatus main body or falsification of management information.

According to the ninth aspect, in addition to the above effect, since the alteration of the received digital information is detected by the verification of the authenticator, the alteration of the digital information can be surely detected.

Further, according to claim 10, in addition to the above effect, at the time of confirming the operation of the information protection means by the authentication means, it is based on the result of the exchange of the specific information between the control means and the usage record management means. Since the operation of the information protection means is confirmed by the operation, it is possible to reliably detect an operation failure such as a failure that has occurred in the information protection means.

According to the eleventh aspect, in addition to the effects described above, when the duplicate record is recorded and managed, a collation check between the authenticator created by the authenticator creating means and the recorded and managed authenticator is performed. Since tampering of the record management information is detected based on the result, even if the duplication record is tampered with and the usage record is fooled, a fraud is detected by the authenticator inspection, and thus fraudulent acts such as tampering with the duplication record are prevented. It is difficult and can be prevented.

According to the twelfth aspect, in addition to the above effect, when the received digital information is compressed, the compressed digital information is expanded by the expansion means and then copied and output to the package medium. As a result, compressed digital information can be transmitted, the time required for transmitting the information can be shortened, and the copyrighted material information required by the user can be supplied more quickly.

According to the thirteenth aspect, in addition to the above effects, for confirmation before the copy output to the package medium,
The trial output means can convert the information body to be copied and output to analog information such as audio / video and perform trial output, so that the user can actually confirm whether or not the information is necessary.

Further, according to claim 14, in addition to the above effect, the control means controls the writing of the trial record to the usage record management means, and based on the instruction, the usage record management means. Manages the trial record certifying that the trial output means has been used,
Unnecessarily many trials can be prevented.

[Brief description of drawings]

FIG. 1 is a configuration diagram showing a digital information copying apparatus according to an embodiment of the present invention.

FIG. 2 is a configuration diagram for verifying the configuration and operation of the control means and the usage record management means and the communication status in one embodiment

FIG. 3 is a diagram showing a form at the time of receiving digital information in one embodiment.

FIG. 4 is a diagram showing a configuration form of a trial record that is record-managed by a usage record managing means in an embodiment.

FIG. 5 is a diagram showing a configuration form of a duplicate record recorded and managed by a usage record managing means in an embodiment.

FIG. 6 is a flowchart illustrating an operation procedure of trial output and duplicate output in the digital information duplicating apparatus according to the embodiment.

FIG. 7 is a flowchart showing an operation procedure when the information delivery center collects the usage record in the digital information copying apparatus of the embodiment.

FIG. 8 is a diagram showing a configuration form of usage record information when the digital information copying apparatus of one embodiment transmits the usage record to an information distribution center.

[Explanation of symbols]

DESCRIPTION OF SYMBOLS 1 ... Communication control part, 2 ... Received information storage part, 3 ... Information protection part, 31 ... Common key storage means, 32 ... Authentication means, 33 ... Decryption means, 34 ... Information protection means, 35 ... Trial output means, 3
6 ... Duplicate output means, 37 ... Utilization record managing means, 38 ... Control means, 371 ... Receiving section, 372 ... Sending section, 373 ... Encoding section, 374 ... Behavior verification section, 375 ... Behavior judging section, 3
76 ... Authenticator creation unit, 377 ... Authenticator inspection unit, 378 ...
Duplicate record storage unit, 379 ... Trial record storage unit, 381 ... Reception unit, 382 ... Transmission unit, 383 ... Operation determination unit, 384 ...
Decoding unit, 385 ... Collating unit, 386 ... Random number generating unit, 387
… Operation inspection section.

Claims (14)

[Claims] 1. A communication session key different for each communication encrypted with a common key stored in a common key storage means,
The digital information main body encrypted with the communication session key and the digital information including the title information and the authenticator are received by the communication line, the digital information is stored in the information storage means, and the digital information is protected. Means for detecting the falsification of the digital information by the encrypted common key stored in the common key storage means and the authenticator in the information protection means, and verifying the operation of the information protection means. Decoding the communication session key from the digital information only when tampering is not detected and conforming to the verification of the operation, and using the decrypted communication session key, the digital information is converted into the digital information main body. Decoding the title information and using the title information and the date and time of duplicate output as a duplicate record In the same way, the digital information main body is copied and output to a package medium, and when a request record transmission request together with inquiry information is received from the information distribution center, it is stored in the inquiry information and the usage record management means. A method for copying digital information, characterized in that the management information is transmitted to the information distribution center. 2. The digital information duplicating method according to claim 1, wherein the duplication record is stored in the usage record managing means after an authenticator is added to the duplication record and tampering prevention measures are taken. 3. A tamperproof authenticator is added to the management information, further encrypted as necessary, and then transmitted to the information distribution center.
Digital information duplication method described. 4. The method according to claim 1, wherein when the received digital information is compressed, the digital information is decompressed and then output to the package medium. 5. The digital information main body is converted into analog information such as audio / video for confirmation before output to the package medium for confirmation before output.
Digital information duplication method described. 6. The digital information copying method according to claim 5, wherein when the trial output is performed, the title information and the date and time when the trial output is performed are stored in the usage record managing means as a trial record. 7. The digital information copying method according to claim 6, wherein the trial record is stored in the usage record managing means after an authenticator is added to the trial record and tampering prevention measures are taken. 8. A communication control means for transmitting / receiving encrypted digital information via a communication line, a communication session key encrypted with an encryption common key, and an information body encrypted with the communication session key. A reception information storage unit that stores digital information including an authentication code and an authenticator, and an information protection unit that has physical security. The information protection unit is a common unit that physically protects the encryption common key. Key storage means, tampering detection function of received digital information, operation confirmation function of information protection means, authentication means having function of decrypting encrypted communication session key, and encryption using the communication session key Decoding means for decoding the digitized digital information, duplication output means for duplicating and outputting the decrypted digital information on a package medium, and duplication output means A usage record managing unit having a function of recording and managing a duplicate record for certifying that it is possible; The digital information duplicating apparatus is characterized in that the communication control means transmits the management content of the usage history management means in response to a usage history transmission request from a higher-level device. 9. The authenticator comparing means for comparing the authenticator with the authenticator included in the received digital information and the authenticator creating means for creating an authenticator from the information body of the received digital information. 9. The digital information duplicating apparatus according to claim 8, further comprising: means and a determining means for detecting tampering of the digital information based on a comparison result of the authenticator comparing means. 10. The digital information duplication according to claim 8, wherein the authenticating means confirms the operation of the information protecting means based on the result of the transfer of the specific information between the control means and the usage record managing means. apparatus. 11. The usage record managing means comprises an authenticator creating means for creating an authenticator from record management information, and an authenticator collation checking means for verifying the created authenticator against the record-managed authenticator. 9. The digital information duplicating apparatus according to claim 8, further comprising: a determining unit that detects tampering based on the result of the authenticator collation inspection. 12. The digital information duplicating apparatus according to claim 8, further comprising a decompression means for decompressing the received digital information according to the information content when the received digital information is compressed. 13. The digital device according to claim 8, further comprising trial output means for converting and outputting the information body into analog information such as audio and video for confirmation before outputting to a package medium. Information duplication device. 14. The usage record management means has a function of recording and managing a trial record certifying that the trial output means is used, and the control means writes the trial record to the usage record management means. 14. The digital information copying apparatus according to claim 13, wherein instruction control is performed.