JPH09251714A - Software use control system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To make it possible to select use limitation, release of the limitation and resetting according to a request of a user by a software provider when use regulations of application dealing with plural data are performed. SOLUTION: An application forming means 24A gives peculiar identifier to respective data or to respective combinations of the data, and a control table forming means 24B forms two kinds of control tables consisting of the identifier and information controlling the use of respective data, and a ciphering means 24C enciphers respective data and respective control tables. At this time, the information for controlling beforehand the use by the provider is described on the first control table, and use control information revised according to the request of the user is made describable on the second control table. On the other hand, an application use control means 31A deciphers respective ciphered data and the control tables by a deciphering means 31C when the application is used.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a method of controlling the use of an application and a method of producing software for controlling the use, and particularly in an application including a plurality of target data such as moving images and sounds, a software provider. Or according to the user's request, for each target data,
The present invention relates to a software usage control method and a usage control software production method for controlling the usage of each target data in an extremely fine manner.

[0002]

2. Description of the Related Art Conventionally, when selling an application that handles a plurality of moving images, sounds, and other general data, for example,
In the case of movie software (Western movies) ・ Software that adds subtitle super data to video data and original audio data ・ Software that adds Japanese dubbed audio data to video data ・ Original audio data to video data By creating and providing various variations of software for the same video data, such as software with Japanese dubbing audio data added, depending on the combination of the audio data and subtitle data to be added,
It has responded to various requests from users.

In the case of karaoke software, for example, a large number of karaoke discs are created and sold according to various categories such as singers, music genres, and eras to meet various demands of software users. I have responded.

[0004]

However, in the case of conventional movie software, in order to meet the demands of the software user for the same movie software, the software provider uses a combination of target data to be included in the software.
There is a problem that it is necessary to create various variations of software, which increases the overall cost of creation.

Further, for software users, if they purchase one variation and then want to use another variation, they need to purchase it separately, which increases the purchase cost and the storage space. . In the case of karaoke discs, software users may have to purchase all the discs if their favorite songs are distributed and recorded on multiple discs. Since the songs on the disc do not always match the user's taste,
There was a problem that the purchase cost was expensive.

[0006] These problems arise in that the conventional applications and the reproducing apparatus thereof are temporarily permitted for each target data included in these applications according to the request of the software provider or the software user. This is because there was no control mechanism to do or prohibit. Further, when realizing such a control mechanism, the software also includes data that is not permitted to be used unlike the conventional case, so that a problem of illegal use of such data newly arises. In particular, when the data included in the application is digitized, there is a problem that it can be easily copied as it is and reused without deterioration.

In view of the above conventional problems, the present invention provides a first
The purpose of is to enable the control of use of each data when providing an application including a plurality of video data, audio data, and general data, according to the request of the software provider or the software user, for each data, It is to provide a method that can reduce the creation cost of the provider and the purchase cost of the user.

[0008] The second purpose is to protect the copyright of the data contained in the application, that is,
It is to provide a method that can prevent the software from being used in a manner contrary to the intention of the provider. A third object is to provide a variety of methods for selling paid applications, for example, a method of charging according to a rental period, and a method of charging for each data or each use of data.

A fourth object is to provide a method in which the data capacity of the usage control data is reduced when controlling the usage of various combinations (groups) of the target data. A fifth object is to provide a method suitable for the MPEG specification, when the target data is particularly digitized MPEG specification data.

[0010]

In order to achieve the above object, the present invention provides an application providing step and an application using step in a software usage control method for controlling the usage of an application including a plurality of target data. The application providing step includes an identifier assigning step of assigning a unique identifier to each target data, and a first control table including the identifier and first control data common to users as a component. The identifier and the user-specific second
A control table creating step for creating a second control table including the control data as a constituent element, a multiplexing step for creating the application by multiplexing the target data and the first control table, A distribution step of distributing an application and the second control table, wherein the application using step comprises a separation step of separating the application into each of the target data and the first control table, and the first control table. Using the first control data and the second control data corresponding to the identifiers given to the respective target data in the control table and the second control table,
The use permission determination step of determining whether to permit the use of the target data, and the use permission determination step,
A use control step of controlling the use of the target data so as to enable the use of the target data when it is determined to be permitted and disable the use of the target data when it is determined to be not permitted. It is a thing.

Preferably, the multiplexing step encrypts at least a part of the data to be multiplexed by the first user-common encryption step, and the separating step the first user-common decryption. A decrypting step to decrypt the encrypted part, or
The control table creating step encrypts at least a part of the second control table in a user-specific second encryption step, and the use permission determining step includes a user-specific second decryption step. According to the present invention, at least one of decrypting the encrypted part of the second control table is performed.

Preferably, at least one of the first and second control tables describes an identifier assigned to each target data and control data indicating whether or not the target data can be used. In the permission judgment means, it is judged whether or not the use is possible based on the control data described in the first and second control tables, or in each of at least one of the first and second control tables. The identifier given to the data and the control data indicating the number of times of use, the available period, or the available time for permitting the use of the target data are described, and in the use permission determining means, the first and second Based on the control data described in the control table, it is determined whether the use is possible, and if the use is permitted, the control data should be updated according to the use situation, or Describes, in the first control table, control data indicating, for each target data, a charge charge per use unit, copy per unit, use period unit, or use time unit, or a discount charge, The second
Control data indicating a usage limit amount of money is written in the control table of No. 3, and the charge permission described in the first control table is used by the usage permission determining unit in the usage limit described in the second control table. If it is within the amount of money, it is determined that the usage is permitted, and the usage limit amount is updated according to the charging fee or the discount fee.

[0013] Preferably, when each of the target data is classified into some groups, the identifier assigning step assigns each target data with an identifier unique to the group into which the target data is classified. Alternatively, the identifier assigning step assigns a unique first identifier to each target data and a unique second identifier to each group, and here, assigns a first identifier unique to each target data. 1 identifier and a second identifier given to a group into which the target data is classified are made to have a predetermined relationship, and the first control table or the second control table is unique to each group. Second identifier and the first identifier of each target data grouped into each group, and the first control table further includes the second identifier and the first identifier. His data, the second control table, and the second identifier, said second control data,
Either include each, or apply either.

Preferably, when the application is created based on the MPEG system, the identifier assigning step assigns an identifier for identifying each MPEG stream to the corresponding MPEG.
Described in the header part of the PES format packet describing the stream, the control table creating step includes an identifier for identifying each MPEG stream, the first control table having first control data as a constituent element, and The identifier for identifying the MPEG stream and the second control table having the second control data as constituent elements are described in the PES format private packet.

[0015] Preferably, when the application is created based on the MPEG system, the first and second encryption steps are in a PES format describing the respective MPEG streams and the respective control tables. The packet data area of the packet is encrypted, and information indicating the encryption is described in the scrambling control bit storage area of the PES format packet.

[0016] Preferably, when the application is created based on the MPEG system, especially based on a TS stream, the first and second encryption steps are performed by each of the MPEG methods.
The payload area of each TS packet including the stream and each control table is encrypted, and information indicating the encryption is described in the scramble control bit storage area of the TS packet.

In order to achieve the above object, the present invention is a method for producing software including an application including a plurality of pieces of target data, the identifier being unique to each piece of the target data. A first control table creating step for creating a first control table containing control data common to all users, and a unique user for each user based on a request from an individual user. A second control table creating step of creating a second control table including the control data of 1., and a multiplexing step of creating an application by multiplexing each of the target data and the first control table,
The above-mentioned application is distributed to all users, while the second control table corresponding to each individual user is distributed.

In order to achieve the above object, the present invention is a software usage control method for controlling usage of an application including a plurality of target data, wherein each target data to which a unique identifier is assigned and all users. An application in which a first control table containing control data common to all users is multiplexed, a step of receiving a second control table containing control data to be applied to individual users from a distribution source, and the received application Separating each target data into a first control table,
And a second control table for determining whether or not the use of each target data is permitted, and when it is determined that the use of the target data is permitted, use of the target data is enabled and If it is determined that the target data has not been used, the use control step of controlling the use of the target data so that the use of the target data is disabled is provided.

According to the present invention having the above-described structure, the software provider sets information for restricting use in the initial state in the first control table common to users, and the second unique to the user is set. By setting the information for changing the usage restriction according to the user's request in the control table, when providing an application including a plurality of video data, audio data, and general data, In addition, it is possible to finely control the usage such that the software provider restricts the use, and the restriction is released or reset according to the request of the software user.

As a result, the software provider does not need to create various variations of the software depending on the combination of the target data to be included in the software, and the application provides the target data and the first common to the users. However, since the second control table for each user is not included, it is possible to mass-produce the application and reduce the creation cost of the software provider.

On the other hand, also for the software user, when he / she wants to use another variation after purchasing one variation, it is not necessary to separately purchase the software, so that the purchase cost of the user can be reduced. In addition, since the application and control table are encrypted, it is possible to prevent their contents from being intercepted, altered, or misappropriated. Furthermore, the copyright protection of the data included in the application, that is, the data is It can be prevented from being used in a manner contrary to the provider's intention.

Further, by changing the contents of the two types of control tables according to the sales form of the application, various sales methods, for example, a charging method according to the rental period, or charging for each data or each use of data. It becomes possible. In addition, by assigning an identifier to each of various combinations (groups) of target data, and using a control table having the identifier and control data as constituent elements, it is possible to control use in group units The capacity can be reduced.

In addition, when the target data is especially digitalized MPEG specification data, when the control table is created based on the PES format packet and is encrypted, the PES format or TS format packet is used. By encrypting the data area of, it can also comply with the MPEG specifications.

[0024]

BEST MODE FOR CARRYING OUT THE INVENTION Embodiments of the present invention will be described below with reference to the drawings. (Embodiment 1) FIG. 1 is a system configuration diagram showing a schematic configuration of an embodiment adopting an application use control system according to the present invention. 2 is a conceptual diagram for explaining the overall data flow of this embodiment.

In this embodiment, MPEG (Motion Picture Expe
rt Group) application software including video, audio, and other data encoded based on the
An example of usage control for each data will be described. [Overall Configuration] As shown in FIG. 1, the system adopting the application usage control method according to the present embodiment includes a device A19 for creating an application, a device B20 for using (reproducing) the application, and a distribution medium 2
6.

The device A is a device used by an application provider, and has a CPU 21 for controlling the operation of the entire device A.
This CPU 21 has a bus 22
The storage unit 23 for the target data (consisting of the video data 1A, the audio data 1B, and the other general data 1C, etc.), the authoring system 24, and the output system 25 are respectively connected. The authoring 24 includes an application creating unit 24A that creates an application using target data, a control table creating unit 24B that creates a control table for controlling the use of this application, and if necessary, this application and the control table. An encryption means 24C for encrypting

The output system 25 outputs the created application and control table to the distribution medium 26 in a form suitable for this distribution medium. Distribution media 26
Is a medium for distributing the application and the control table from the device A to the device B. Specifically, for example, a CD-ROM or the like can be used for distributing the application, and for distributing the control table, IC cards are used.

On the other hand, the device B is a device used by the application user, and is a CP for controlling the operation of the entire device B.
The CPU 27 has a U 27, and the CPU 27 has a storage unit 29 for the application received from the distribution medium 26 via the bus 28, a storage unit 30 for the control table, an application using system 31, and an application from the distribution medium. Input system 3 which receives the control table
2 are connected.

The application using system 31 includes a decrypting means 31C for decrypting the encrypted application and the control table, and a control table determining means 31 for determining whether or not to release the use limitation of the application.
B and application usage control means 31A for controlling the usage of the application according to the judgment of the control table judgment means 31B. [Outline of Overall Operation] Next, the overall data flow of this embodiment will be described with reference to FIG.

For the sake of simplicity, the case where the encryption and decryption processes are omitted will be described below. First, a case where a software provider controls the device A to create an application including video, audio, and various other general data will be described. The video data 1A, the audio data 1B, and the general data 1C according to the request of the software provider are read from the storage unit 23, and the authoring system 24
In the respective encoding means 241A, 241B,
After being encoded by 241C, the identifier assigning means 242 assigns a unique identifier 3 to each data. Identifier 3
The respective data assigned with are shown by 2A, 2B, and 2C in FIG.

On the other hand, at this time, at the same time, the control table creating means 24B creates the first control table 5 common to all users, and the second control table unique to the user in response to the request from the software user. 6 is created. In this case, it is necessary to create the first control table 5, but
The second control table 6 can be created each time a software user makes a request.

In the first control table 5, the identifier 3 of each data included in the application and the first control data 7 common to all users are described. Also, the second
The control table 6 describes the identifier 3 of each data included in the application and the second control data 8 that is different for each user. Then, in the application creating means 24A, the video data 2A, the audio data 2B, the general data 2C and the first data to which the identifier 3 is added
An application is created by multiplexing the control table 5 of FIG. The multiplexing means 243A in FIG. 2 shows one function in the application creating means 24A.

The application created as described above and the second control table 6 are distributed in the distribution medium 2 respectively.
It will be distributed to users at 6A and 26B. An example of the first control table 5 and the second control table 6 is shown in FIGS. 11 and 13. FIG. 11 shows that an application including three types (videos 1, 2, and 3) as video data 1A and three types (voices 1, 2, and 3) as audio data 1B is displayed by the software provider in the initial state. 1 and voice 1 are available.

Identifier 3 in this first control table 5
Is the same as the identifier given to each video data 1A, audio data 1B, and general data 1C by the identifier giving means 242. That is, the identifier “11100001” assigned to the video 1 in the first control table is the identifier assigning means 24.
2 is also added to the video data corresponding to the video 1.

The identifier is composed of a total of 8 bits, the upper bit indicates the type of data (video, audio, general data), and the lower 4 bits indicate different titles in the same type of data. There is. And video 1
When there is a relationship in which the audio 1 and the audio 1 should be reproduced at the same time such as the same scene or the same movie, the identifiers assigned to the two are the same except for a specific bit (6 bits in the illustrated example). This identifier is issued by a management unit (not shown) that manages the contents stored in the target data storage unit 23.

Next, FIG. 13 is a second control table. In the initial state, video 2 and audio 2 which are not permitted to be used.
Shows the case where the software provider makes it available at the request of the user. This means that the control data of video 2 and audio 2 is "1". This second control table is created based on the information 18 requested by the user prior to application creation.

As described above, by using the first control table and the second control table, the software provider restricts the use of the application to be provided in the initial state, and when the user requests, You will be able to remove the restrictions and reset them. Next, a case where the software user controls the device B to use the application will be described.

The application and the second control table input to the device B through the distribution medium 26 and the input system 32 are stored in the respective storage sections 29 and 30, and subsequently, the separating means 31 in the application using system 31.
1 (see FIG. 2), the reverse processing to the multiplexing of the device A is performed to set the applications in the application storage unit 29 to the data such as the video data 2A, the audio data 2B, and the general data 2C and the first control table. Separate into 5.

Then, in the use permission judging section 15 in the control table judging means 31B, first, the second control table 14
If it is confirmed that there is no second control table,
When the content of the first control table is interpreted and the second control table is present, the content of the first control table and the content of the second control table are respectively interpreted, and in each case, as a result of the content interpretation, The permission information 16A is used when the use of the corresponding data is permitted, and the non-permission information 1 is used when the use is not permitted.
6B is transmitted to the application use control means 31A.

The application use control means 31A is
When the permission information 16A is notified, the corresponding data is used, and when the disapproval information 16B is notified, the use of the corresponding data is stopped. When the use is permitted, each data is inversely encoded and output as 312A to C and each data 1A to 1C. As an example of permission / non-permission of use, the case where the first and second control tables have the contents shown in FIG. 11 and FIG. 13, respectively, will be described. First, in the initial state (that is, when the second control table does not exist). Then, regarding the use of each data of the video 1 and the audio 1, it is possible to use, but it is interpreted that the other data cannot be used. On the other hand, when there is the control table 2, the video 1 and 2 and the audio 1 and 2
It is possible to use the respective data of 1), but it is interpreted that the data of the video 3 and the audio 3 are not available.

FIG. 3 is a flow chart showing the flow of the entire processing of this embodiment. The flow of the entire process will be described according to this flowchart. First, in the device A, a process of creating an application and a control table for controlling its use is performed (step S101).
Then, the application and the control table are distributed from the device A to the device B (step S102).

Then, in the device B, application use control processing is performed according to the contents of the control table (step S103). Application and second control table creation processing in device A (S10 above)
1). FIG. 4 is a flowchart showing a process of creating an application and a control table in the device A.

In the process of creating the application and the control table, as shown in the figure, an instruction to create the application or the second control table is received from the software provider (step S201), and the application is created. Is instructed (step S20
2) Perform application creation processing (step S
203), if the second control table creation is instructed (step S204), the second control table creation process is performed (step S205).

Then, the application and the second control table are converted into a form suitable for the distribution medium and outputted (step S206). Here, in step S206, for example, when a CD-ROM is used as the application distribution medium, a CD-ROM issuing process (that is, a master rig process and a press process for an application created by the authoring system) is performed. On the other hand, when the IC card is used as the distribution medium of the second control table, the IC card writing process is performed.

Next, FIG. 5 and FIG. 6 respectively show an application creating process in the device A (step S20).
It is a flow chart which shows a flow of 3), and a flow of the 2nd control table creation processing (the above-mentioned step S205). The application creating process (step S203) is
As shown in FIG. 5, first, an MPEG stream in which video, audio, and other data are encoded based on the MPEG specifications is received (step S301). Then, a unique identifier is given to each MPEG stream (step S302). After the above processing is executed for all the MPEG data included in the application (step S303), when the software provider wants to permit some use of the application in the initial state (step S304)
Creates a first control table (step S30).
5). Then, the MPEG data to which the identifier has been added and the first control table are multiplexed to create one application (step S306).

Here, steps S301, S302, S
Reference numeral 303 is a basic process performed when creating an application according to the normal MPEG specifications. However, steps S303 to S306 are processes that are particularly necessary for creating an application in this embodiment. FIG. 14 shows an example of the MPEG stream created in step S302.
Shown in FIG. 14 shows a case where the MPEG stream follows the PES (packetized Elmentry Stream) format defined by the MPEG specifications. The identifier of each MPEG stream is described in the stream ID section in FIG. However, according to the MPEG standard, only 16 types of video and 32 types of audio can be identified in this stream ID part. Therefore, in order to support applications containing more types of data, the extended data part of the PES header must be specified. , The extension stream ID part is provided and is described here.

The structure of MPEG data and its detailed definition are described in detail in, for example, "Latest MPEG Textbook" by ASCII Publishing Office. FIG. 10 shows an example of the first control table created in step S305. FIG.
0 means that the first control table is a PES specified by the MPEG specifications.
This is the case when following a private packet format. FIG.
As shown in FIG. 5, at the beginning of the packet data area, an identification code for identifying the control table used in the present embodiment and a table type (first control table or second control table) are distinguished. Data) etc. FIG. 10 shows that if the table type is 0, it is the first control table. Then, in the subsequent area, for each data, its identifier and control data indicating whether or not the corresponding MPEG stream can be used are repeatedly described.

FIG. 11 shows an example of the contents of the first control table. Since FIG. 11 has already been described, description thereof will be omitted. Next, regarding the application created in step 306 above, in MPEG, when creating an application by multiplexing, two types of data structures, PS (program stream) format and TS (transport stream) format, are specified. Which of these is used depends on the application. For example, in digital satellite broadcasting, TS
The format is generally used, but the PS format is generally used for DVDs (digital video discs).
The data structure of the PES format packet is defined so that it can be shared by the PS format and the TS format. It is possible to multiplex the PS format or the TS format.

Next, the second control table creation process will be described with reference to FIG.
As shown in, the request information from the software user is received (step S401). Then, according to the request information, a second control table is created (step S40).
2). FIG. 12 shows an example of the second control table created in step S402. FIG. 12 shows a case where the second control table follows a PES format private packet. As shown in FIG. 12, at the beginning of the packet data area, an identification code for identifying the control table used in the present embodiment and a table type (first control table or second control table) are displayed. Enter the data to be distinguished). FIG. 12 shows that if the table type is 1, it is the second control table. Then, in the subsequent area, for each data, its identifier and the corresponding MPEG
The control data indicating whether the stream can be used or not can be repeatedly described. FIG. 13 shows an example of the contents of the second control table. Since FIG. 13 has already been described, the description thereof is omitted here.

FIG. 7 is a flow chart showing the flow of the application use control process in the device B. As shown in FIG. 7, the application usage control process receives the application to be used and the second control table if there is a second control table (step S50).
1). Then, when each MPEG data is used in the application using system 31, the presence or absence of the second control table is confirmed (step S502), and the second
If there is a second control table (step S503), the application utilization process is performed based on the first control table multiplexed with the application and the second control table (step S503). , The application use processing based on only the first control table multiplexed with the application is performed (step S5).
04).

Here, in step S501, for example, when a CD-ROM is used as the application distribution medium, a CD-ROM reading process is performed. When an IC card is used as the second control table distribution medium, the IC card reading process is performed. FIG. 8 and FIG. 9 are flow charts showing the flow of an application use process based only on the first control table and an application use process based on the first and second control tables, respectively.

As shown in FIG. 8, in the application use processing based only on the first control table, the multiplexed application is separated, and each MPEG stream and the first control table are separated (step S601). .
Then, when using each data, the contents of the first control table are interpreted (steps S602a, b). That is, the first control data corresponding to the identifier given to the data to be used in the first control table is referred to. Then, if the first control data indicates use permission, the corresponding MPEG stream is used (reproduced) (step S603). On the other hand, when the first control data indicates that the MPEG stream cannot be used, the use (playback) of the corresponding MPEG stream is stopped.

This process is repeated until the reproduction of each MPEG stream is completed (step S604). On the other hand, FIG.
As shown in, in the application use processing based on the first and second control tables, first, the multiplexed application is separated, and each MPEG stream and the first control table are separated (step S701). Then, when each data is used, the contents of the first control table and the second control table are interpreted (step S70).
2a, b).

Specifically, for example, even if the first control data corresponding to the identifier assigned to the data to be used in the first control table indicates that the data cannot be used, , If the second control data corresponding to the identifier given to the data to be used indicates the use permission,
Use (play) the corresponding MPEG stream (step S6)
03). On the other hand, when the second control data indicates that the MPEG stream cannot be used, the use (playback) of the corresponding MPEG stream is stopped.

This process is repeated until the use (reproduction) of each MPEG stream is completed (step S704). With the above configuration, when providing an application including a plurality of video data, audio data, and general data, the software provider restricts the use of each data, or in response to the request of the software user, The effect that fine-tuned usage control such as releasing the restriction and resetting the restriction becomes possible is obtained.

Further, the software provider does not need to create various variations of the software depending on the combination of the target data to be included in the software, and the application provides each target data and the first common to the users. Although the control table is included, the second control table for each user is not included, so that the application can be mass-produced and the creation cost of the software provider can be reduced. On the other hand, also for software users, if they want to use another variation after purchasing one variation, they do not need to purchase the software separately, so that the user's purchase cost can be reduced.

Further, when the target data is the data of the MPEG system specification, there is an effect that it can be adapted to the MPEG specification. The present invention is not limited to the embodiments described above, and various modifications can be made. Examples of this are as follows. (A) In the present embodiment, the description of encryption is omitted, but an implementation is possible in which the application is encrypted when the application is multiplexed and the control table is encrypted when the control table is created. desirable.

In this case, when the application is separated and when the contents of the control table are judged, the encrypted application and control table are decrypted respectively. The following is a detailed operation example when performing encryption and decryption. First, at the time of encryption, the first control table common to the users and the application including each target data are encrypted with the key common to the users, and the second control table for each user is for each user. Encrypt with the key of. Then, when decrypting, each control table is decrypted first. That is, the first control table is decrypted with a key common to users, and the second control table is decrypted with a key unique to each user. Then, the contents of the first and second control tables are interpreted, and if it is determined that the corresponding target data can be used, the target data is decrypted with the key common to the users. However, if it is determined that the target data is not available, the target data is not decrypted.

In this decoding, it is desirable that the control table is first decrypted, and then the data is decrypted after the control table is determined to be usable. With this configuration, the data determined to be unusable is not decrypted at all, so that the security is further improved. With the above configuration, the application and the control table are encrypted, so that the contents can be prevented from being intercepted, modified, or diverted, and the copyright protection of the data included in the application, that is, The data can be prevented from being used in a manner contrary to the intention of the software provider.

In the above example, both the second control table and the application are encrypted, but it is also possible to employ a configuration in which only one of them is encrypted. For example, the second
When an IC card is used as a distribution medium for the control table of, there is little risk that the distribution contents will be intercepted, altered, or diverted (physically safe).
The second control table can be configured so as not to be encrypted.

Further, particularly when the application is created based on the MPEG system, the packet data area of the PES format packet describing each MPEG stream and each control table is encrypted, and further encrypted. It is possible to write the information indicating that it has been done in the scrambling control bit storage area of the PES format packet. (See FIGS. 10, 12, and 14) Further, particularly when the application is created based on the MPEG TS stream, the payload area of each TS packet including each MPEG stream and each control table is encrypted, The information indicating that the data has been encrypted is TS
A configuration described in the scramble control bit storage area of the packet is possible. (Refer to FIG. 15) It is not always necessary to perform encryption on the entire target data, and the overhead of encryption / decryption processing
In consideration of the scramble effect, it is desirable to determine the optimum encryption range for each application. (B) In each control table, the identifier given to each data and the control data indicating whether or not the data can be used are described, but the invention is not limited to such a structure. It is possible to control the number of times each data is used by changing the control data indicating whether the data is available or not and describing the maximum number of times that the data is allowed to be used.

By changing the control data indicating whether or not the data can be used and describing the period during which the data is permitted to be used, the period during which each data is used can be controlled. In addition, a usage charge for each data is described for each data in the first control table common to the users, and in the second control table unique to the user, whether the amount already paid by the user, Alternatively, the usage limit amount indicating the amount of money permitted to the user is described in advance, and the usage fee described in the first control table is used by the usage permission determining means in the usage described in the second control table. If the amount is within the limit amount, it is possible to give the use permission and update the use limit amount.

With these configurations, it is possible to obtain the effect that various selling methods of pay applications, for example, a method of charging according to the rental period, and charging of each data or each use of data can be charged. In the embodiment (C), the case where the usage control is performed in each target data unit has been described, but a configuration in which the usage control is performed in various data combination units (group units) is also possible.

For example, it is possible to give each data a unique identifier (hereinafter referred to as a group identifier) for a group to be classified, instead of a unique identifier for the data.
At this time, in each control table, a group identifier and control data for controlling use in units of this group are described. FIG. 16 shows an example of the first and second control tables when this configuration is adopted. In this example, video 1 and audio 1, video 2 and audio 2, video 3 and audio 3 are group 1, respectively.
2, 3 and groups 1, 2 and 3 are given identifiers F1, F2 and F3 (hexadecimal notation) respectively.
Although not shown, the identifier (F1) is assigned to the video 1 and the audio 1, the identifier (F2) is assigned to the video 2 and the audio 2, and the identifier (F3) is assigned to the video 3 and the audio 3. Then, for example, in the first control table, the group 1 is
It is available, but groups 2 and 3 are unavailable.

A unique identifier (hereinafter referred to as a data identifier) is given to each data, and an identifier unique to each group (hereinafter referred to as a group identifier) and a data identifier are given to one of the control tables. It is possible to determine which data is included in which group, and further, in each control table, a configuration is described in which a group identifier and control data indicating whether or not use is permitted in this group unit are described. It is possible. At this time, the data identifiers to be given to the respective data are defined in association with the identifiers of the respective classified groups, and the associations are made possible. FIG. 17 shows the first and second cases where this configuration is adopted.
An example of the control table is shown.

In this example, video 1 and audio 1, video 2 and audio 2, video 3 and audio 3 form groups 1 and 23, respectively, and groups 1, 2 and 3 have group identifiers F1 and F1, respectively. F2 and F3 (hexadecimal notation) are given. Furthermore, the video 1 and the audio 1 have a data identifier E, respectively.
Data identifiers E2 and B2 are assigned to 1, B1, video 2 and audio 2, respectively, and data identifiers E3 and B3 are assigned to video 3 and audio 3, respectively. In this example, the identifier related rule adopts a rule that a group identifier Fn is given to the group n, and data identifiers En and Bn are given to the video n and the audio n included in the group n, respectively.
Then, for example, in the first control table, group 1
Is available, but groups 2 and 3
Indicates that it is unavailable.

Next, when the group identifier is adopted,
The comparison of the capacities of the control tables when not adopted is performed for the specific example used in the description. First,
The example of FIG. 16 that employs the group identifier is the same as the example of FIGS. 11 and 13 that does not employ the group identifier. As is clear from this, FIG. 16 shows the table capacity for both the first control table and the second control table.
It is half of 1.

Further, the example of FIG. 17 adopting the group identifier and FIGS. 11 and 1 not adopting the group identifier.
It is the same as the example of 3. As is apparent from this, the table capacity of the first control table is almost the same as that of the second control table, but the table capacity of FIG. 16 is half that of FIG. 11. With these configurations, it is possible to reduce the data capacity of the usage control data when controlling the usage of various combinations (groups) of the target data. (D) In the present embodiment, a CD-ROM is used as the application distribution medium and an IC card is used as the distribution medium for the restriction release table. However, other distribution media, for example, an application distribution medium, is a DVD (digital video). A recording medium such as a disk), a broadcast using various communication networks such as satellite and CATV, and a communication medium such as a control table distribution medium, a magnetic card or the like can be used.

Although the application and the control table are distributed on different media, the same media may be used. It should be noted that when using a recording medium that is relatively easy to read and write data or a communication medium that is easy for snooping and data exploitation as the distribution medium, it is desirable to encrypt the distributed data. (E) In this embodiment, the case where one application is multiplexed has been described, but a plurality of applications may be multiplexed. In that case, a control table is prepared for each application, and the control tables can be configured to be distinguished by a unique identifier given to each application. (F) In this embodiment, the case of an application based on the MPEG specifications has been described, but the present invention is also applicable to applications based on other specifications. (G) In the present embodiment, "to use" means to be used by a person, and therefore, its form includes a trial copy or the like.

[0070]

As is apparent from the above description, the following effects can be obtained in the present invention. (1) An identifier assigning step of assigning a unique identifier to each target data, a first control table including the identifier and first control data common to the user as a component, and the identifier and the individual user A control table creating step of creating a second control table including second control data as a constituent element; a multiplexing step of creating the application by multiplexing each target data and the first control table. A distribution step of distributing the application and the second control table; a separation step of separating the application into the respective target data and the first control table; Corresponds to the identifier given to each target data in the control table and the second control table When the use permission determination step of determining whether to permit the use of the target data using the first control data and the second control data Includes a use control step of controlling use of the target data such that the use of the target data is enabled, and if it is determined that the use of the target data is disabled, it is possible to use the application. By providing an application that includes multiple video data, audio data, and general data, the software provider restricts the use of each data, or the software user's request Such as canceling or resetting
It is possible to provide a method that enables fine-tuned usage control and reduces the creation cost of the provider and the purchase cost of the user. (2) The multiplexing step encrypts at least a part of the data to be multiplexed by the first encryption step common to users, and the separation step uses the first decryption step common to users. , The encrypted part is decrypted, or the control table creating step encrypts at least a part of the second control table in a user-specific second encryption step. , The use permission determination step is the second step for each user.
According to the decryption step, the encrypted part of the second control table is decrypted, or at least one of the two is provided to protect the copyright of the data included in the application, that is, It is possible to prevent that data from being used in a manner contrary to the intention of the software provider, and to provide a method with improved security when providing applications to users in various media. It will be possible. (3) At least one of the first and second control tables describes an identifier given to each target data, and control data indicating whether the target data can be used, tried, or copied. Then, in the use permission judging means, it is judged whether the use, the trial, or the copy is possible based on the control data described in the first and second control tables, or the first and second At least one of the control tables, an identifier given to each target data, the number of times the target data is permitted to be used,
The control data indicating the available period or the available time is described, and the use permission determining means determines the availability of the use based on the control data described in the first and second control tables, and permits the use. In this case, the control data should be updated according to the usage situation, or
Use 1 for each target data in the first control table
The control data indicating the charge fee or the discount charge for each time, for each copy, for each usage period, or for each usage time is described, and in the second control table, the control data indicating the usage limit amount is described. If the charge fee described in the first control table is within the use limit amount described in the second control table, it is determined in the use permission determination means that the charge is permitted, and the charge fee is determined. By providing a configuration that updates the usage limit amount according to the discount fee or discount fee, in particular, various sales methods of pay applications, for example, a method that allows charging according to the rental period, and charging for each data or each use of data It becomes possible to provide a possible method. (4) When each of the target data is classified into several groups, the identifier assigning step assigns a unique identifier to each target data to the group into which the target data is classified. Alternatively, the identifier assigning step assigns a first identifier unique to each target data and a second identifier unique to each group, and here, the first identifier assigned to each target data is assigned. A predetermined relationship is provided between the identifier and the second identifier assigned to the group into which the target data is classified, and the first identifier is added.
In the control table or the second control table, the second identifier unique to each group and the first identifier of each target data classified into each group are included, and the first control table further includes the above-mentioned first identifier. A second identifier and the first control data are included, and the second control table includes the second identifier and the control data, respectively, and the first identifier and the second identifier are included. It is possible to provide a method that reduces the data capacity of usage control data when controlling the use of various combinations (groups) of target data by providing either or Is. (5) If the application is created based on the MPEG system, and the application is created based on the MPEG system, the identifier assigning step includes
Describe the identifier for identifying the MPEG stream in the header part of the PES format packet that describes the MPEG stream,
In the control table creating step, an identifier for identifying each MPEG stream, the first control table having first control data as a constituent element, an identifier for identifying each MPEG stream, and second control data are configured. By providing a configuration in which the second control table as an element is described in a PES format private packet, and when the application is created based on the MPEG system, the first and second The encryption step is performed by each of the MPEG
PES describing stream and each control table
The packet data area of the packet of the format is encrypted, and the information indicating the encryption is described in the scramble control bit storage area of the packet of the PES format. Especially when created based on a TS stream, the first and second encryption steps may be performed on each TS including each MPEG stream and each control table.
By providing the configuration in which the payload area of the packet is encrypted and the information indicating the encryption is described in the scramble control bit storage area of the TS packet, it is possible to provide a method suitable for the MPEG specifications.

[Brief description of drawings]

FIG. 1 is a system configuration diagram of a software use control system according to an embodiment of the present invention.

FIG. 2 is a schematic diagram showing an overall data flow in an embodiment.

FIG. 3 is a flowchart showing the flow of processing of the entire system in the embodiment.

FIG. 4 is a flowchart showing the flow of processing of the entire apparatus A in the embodiment.

FIG. 5 is a flowchart showing a flow of application creation processing in the embodiment.

FIG. 6 is a flowchart showing the flow of a restriction release table creation process in the embodiment.

FIG. 7 is a flowchart showing the processing of the entire apparatus B in the embodiment.

FIG. 8 is a flowchart showing a reproduction process of an application whose use is limited in the embodiment.

FIG. 9 is a flowchart showing a reproduction process of the application whose limitation has been released in the embodiment.

FIG. 10 is a data structure example of a first control table.

FIG. 11 is a data example of a first control table.

FIG. 12 is a data structure example of a second control table.

FIG. 13 is a data example of a second control table.

[Fig. 14] PES format packet data structure example

FIG. 15: Example of data structure of TS format packet

FIG. 16 is a data example 1 of each control table in the case of usage control in group units.

FIG. 17 is a data example 2 of each control table in the case of usage control in group units.

[Explanation of symbols]

 19 Device A 20 Device B 21 CPU 22 Bus 23 Target Data 24 Authoring System 25 Output System 26 Distribution Media 27 CPU 28 Bus 29 Application 30 Control Table 31 Application Utilization System 32 Input System

Claims (9)

[Claims] 1. A software use control method for controlling the use of an application including a plurality of target data, which comprises an application providing step and an application using step, wherein the application providing step is unique to each of the target data. An identifier assigning step for assigning the identifier of the first identifier, a first control table including the first control data common to the identifier and the user as components, and the second control data unique to the identifier and the user as components A second control table including a control table creating step, a multiplexing step of multiplexing the target data and the first control table to create an application, the application and the second control It consists of a distribution step to distribute the table. The application using step is given to each target data in the first control table and the second control table, and a separation step of separating the application into each target data and the first control table. Using the first control data and the second control data that correspond to the identifier, the use permission determination step of determining whether to permit the use of the target data, and the use permission determination step A usage control step for controlling the use of the target data so that the target data can be used when the determination is made, and the target data cannot be used when the permission is not permitted. A software use control method characterized by. 2. The first multiplexing step common to all users,
At least a part of the data to be multiplexed is encrypted by the encryption step of, and the demultiplexing step decrypts the encrypted part by the first decryption step common to the users. Alternatively, the control table creating step encrypts at least a part of the second control table in a user-specific second encryption step, and the use permission determining step includes a user-specific second encryption step. 2. The software use control method according to claim 1, wherein the decryption step decrypts the encrypted part of the second control table, or at least one of the two is performed. 3. At least one of the first and second control tables describes an identifier assigned to each target data and control data indicating whether or not the target data can be used. In the permission judging means, it is judged whether or not the use is possible based on the control data described in the first and second control tables, or in each of at least one of the first and second control tables. The identifier given to the data and the control data indicating the number of times of use, the available period, or the available time for permitting the use of the target data are described, and in the use permission determining means, the first and second Based on the control data listed in the control table, the availability is determined,
In the case of permitting use, the control data is updated according to the use situation, or in the first control table, for each target data, a use is made once, a use period is used, or a use is made. Control data indicating an hourly charging fee or discount fee is described, control data indicating a usage limit amount is described in the second control table, and the first permission control is performed by the usage permission determining means. If the charging fee listed in the table is within the usage limit amount listed in the second control table, it is determined that the usage is permitted, and the usage limit amount is updated according to the charging fee or the discount fee. The software use control method according to claim 1 or 2, characterized in that. 4. When the respective target data are classified into several groups, the identifier assigning step assigns each target data with an identifier unique to the group into which the target data is classified. Or the identifier assigning step includes assigning a first identifier unique to each target data and a second identifier unique to each group.
And assigning a predetermined relationship between the first identifier given to each target data and the second identifier given to the group into which the target data is classified. The first control table or the second control table includes a second identifier unique to each group and the first identifier of each target data classified into each group, and further includes the first control table. In the second identifier and the first control data, the second control table, the second identifier and the second control data,
The software use control method according to claim 1 or 2, wherein each of them is included or one of them is applied. 5. When the application is created based on the MPEG system, the identifier assigning step describes an identifier for identifying each MPEG stream in a header part of a PES format packet describing the corresponding MPEG stream. The control table creating step includes an identifier for identifying each MPEG stream, the first control table having the first control data as a constituent element, an identifier for identifying each MPEG stream, and second control data. The second control table as a constituent element and the second control table are described in a PES format private packet.
The software use control method described in 2, 3, and 4. 6. When the application is created based on the MPEG system, the first and second encryption steps are performed by each of the MPs.
PE describing EG stream and each control table
6. The packet data area of an S format packet is encrypted, and information indicating the encryption is written in a scramble control bit storage area of the PES format packet. Software usage control method. 7. The application is an MPEG method, especially TS.
When created based on a stream, the first and second encryption steps are
The payload area of each TS packet including the EG stream and each control table is encrypted, and further information indicating that the encryption is performed is described in the scramble control bit storage area of the TS packet. The software use control method according to claim 5. 8. A method of manufacturing software including an application including a plurality of target data for controlling use of the application, comprising: an identifier assigning step of assigning a unique identifier to each target data; A first control table creating step of creating a first control table containing control data common to users, and a second control table containing control data unique to each user based on a request from an individual user. A second control table creating step, a multiplex step of creating an application by multiplexing the target data and the first control table, and distributing the application to all users, Distributing the second control table corresponding to an individual user, and Fabrication method of the control software. 9. A software use control method for controlling use of an application including a plurality of target data, comprising: a first data including each target data to which a unique identifier is added and control data common to all users. An application in which a control table is multiplexed, and a step of receiving a second control table including control data to be applied to individual users from a distribution source, the received application, each target data and the first control table And a determination step of determining whether or not the use of each target data is permitted by referring to the first control table and the second control table, and when it is determined that it is permitted, If the target data can be used and it is determined that the target data is not permitted, the target data must be disabled. A software usage control method comprising: a usage control step of controlling usage.