JPH1051572A - System and method for charging - Google Patents

Abstract

PROBLEM TO BE SOLVED: To eliminate the need for a procedure for application to utilization or the management of data characteristic of many users by deciding whether or not the information to be provided can be utilized according to money information not depending on any user. SOLUTION: When the utilization request of information PP is generated, a utilization possibility deciding part CHECK checks whether or not the information PP can be utilized, based on information characteristic data PID and memory information PPC, and reports the decided result to a user terminal. When the decided result is acceptable, the information PP can be utilized at the user terminal. At such times, the information on the information characteristic data PID or the money information PPC, namely, the charges of the information PP or the remainder of the money information PPC is displayed on a display part. Further, the decided result can be displayed on the display part as well. Cash and prepaid card or the like can be utilized for the money information PPC, but electronic information equivalent to money stored in a storage medium, namely, the so-called digicash or electronic money is available as well.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a billing system and method, and more particularly to a billing system and method in a multimedia network for transmitting and providing information including moving images, still images, sounds, computer programs, and other data. Things.

[0002]

2. Description of the Related Art In recent years, the development of optical fiber networks in trunk communication networks, the spread of cable television systems, the practical use of satellite communications, the spread of local area networks, and the like have rapidly advanced. Furthermore, the interconnection of these communication networks has been actively made. By using these communication networks, so-called multimedia information including character data, still images, sounds, and moving images has been exchanged on a worldwide scale.

[0003] Accordingly, the so-called information service industry, which provides various kinds of information using such a communication network and collects a fee according to the content and amount of the information, is increasing. In such services, it is important to appropriately charge the provided information. In addition, multimedia information, which is digital data, can be easily modified, such as edited or transformed, and a technology is needed that can appropriately charge not only distribution such as distribution and sale of information, but also modification of provided information. become.

[0004] Further, the protection of information is incomplete, and illegal use of video information including programs and sounds has become a problem. In order to prevent unauthorized use of information, a copy protection function is added or a number corresponding to the hardware device number assigned to the computer etc. is also assigned to the software, and the two numbers are collated when executing the software,
And so on. However, the copy protection function is inconvenient when backing up software, and the method of collating numbers is inconvenient for managing and selling numbers.
Not very practical.

On the other hand, Ryoichi Mori proposed a concept of "super distribution" aimed at protecting the rights of software right holders (hereinafter referred to as "information providers").
7218, JP-A-60-191322, JP-A-64-68835, JP-A-2-444
47, and JP-A-4-64129.

FIG. 1 is a conceptual diagram of super distribution disclosed in Japanese Patent Application Laid-Open No. 4-64129. The information provider P provides the software PPi
The availability of (or PPj) is determined by CHECK based on the software-specific data PIDi (or PIDj) and the conditions for each user USER-ID, and if available, the software usage history is recorded in SH. And the information provider P,
Charge software usage fee based on history. The SSU shown in the figure is a software service unit including each of the above units.

[0007]

However, the above technique has the following problems.

[0008] (1) In super-distribution, whether or not a user is permitted to use information by an information provider is determined based on data unique to the user. Therefore, the means of realizing super distribution is
It has storage means for storing at least data unique to the user. Therefore, a person who intends to use the information needs to apply for the use of the information to the information provider in advance, obtain the USER-ID, and register it as user-specific data. The application procedure and management of a large number of user-specific data (USER-ID) are complicated.

(2) In order to prevent unauthorized use of information or to allow an information provider to grasp the use status of information to be provided, the super-distribution implementing means includes a storage means for storing an information use history. Have. The information provider charges the user based on the history. In super-distribution, information is handled like rental rather than purchase, so a usage history is required. However, the use history of what information the user used relates to the privacy of the user, and there is a problem of how to protect the privacy of the user.

(3) The super-distribution is a means and a method for correctly grasping the use state of the provided information, that is, for correctly imposing a fee, but does not include means and a method relating to payment of a fee. Therefore, the information provider needs to charge and collect fees by means other than super-distribution.

(4) The super-distribution is configured for the purpose of using the provided information on a rental basis, and does not correspond to the sale of information. In other words, to prevent unauthorized use,
Rewriting of data unique to the software by the user is prohibited, and even if the user desires to purchase the provided information, the data unique to the software cannot be rewritten.

The present invention is to solve the above-mentioned problems individually or collectively, and provides a billing system and a billing method which do not require a use application procedure and management of a large number of user-specific data. The purpose is to:

It is another object of the present invention to provide a charging system and a method thereof capable of protecting the privacy of a user.

It is another object of the present invention to provide a billing system and a billing method that facilitate billing and collection.

Another object of the present invention is to provide a billing system and a method thereof capable of responding to sales of information.

[0016]

The present invention has the following configuration as one means for achieving the above object.

A billing system according to the present invention is a billing system for billing for provision of information via a multimedia network, wherein the multimedia information and the multimedia information are provided via the multimedia network. Receiving means for receiving the first billing information, operating means for manipulating the money information on the medium on which the money information is recorded, and receiving means received by the receiving means based on the first billing information and the money information. A determining unit for determining whether the multimedia information is used or purchased, and an updating unit for updating the charging information based on a determination result obtained by the determining unit.

A billing method according to the present invention is a billing method for billing for provision of information via a multimedia network, wherein the multimedia information and the multimedia information are provided via the multimedia network. Receiving the first billing information unique to the computer, operating the money information of the medium on which the money information is recorded, operating the money information, based on the first billing information and the money information, the receiving step It is characterized by comprising a determining step of determining whether the received multimedia information can be used or purchased, and an updating step of updating the charging information based on the determination result obtained in the determining step.

[0019]

DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, a charging system according to an embodiment of the present invention will be described in detail with reference to the drawings.

[0020]

[First Embodiment] FIG. 2 is a diagram showing a charging system according to a first embodiment of the present invention. In FIG. 2, P is an information provider,
PPi (or PPj) is the paid information provided by P, P
IDi (or PIDj) is information specific to PPi, PPC
Is a monetary information, and CHECK is a determination unit of availability.

The information provider P provides the information PP including the PID. The information PP is configured to always pass through a charging unit when used in a user terminal such as a personal computer.
There is a socket for C.

When a request to use the information PP is issued, the availability determination unit CHECK checks the availability of the information PP based on at least a part of the information of the PID and the PPC, and notifies the user terminal of the determination result. I do. For example, CHECK checks whether the usage fee indicated in the PID is within the monetary information of the PPC. If the determination result of CHECK is OK, the user terminal can use the information PP. Information on PID and PPC at this time, that is,
The balance of the PPC is displayed on the display unit. In addition, the determination result by CHECK can also be displayed on the display unit.

As the PPC, cash, prepaid card, etc. can be used. However, electronic information equivalent to money stored in a storage medium (floppy disk, magnetic card, IC card, PCMCIA card, etc.), so-called digital cash or electronic cash, It may be what is called money.

That is, in the present embodiment, whether or not the information PP can be used is determined by monetary information PPC which does not depend on the user, instead of using the unique data USER-ID for each user. Therefore, the user does not need to perform an application procedure for obtaining a USER-ID or the like, but only needs to have actual money or money information PPC equivalent to money. That is, the user only pays the usage fee for the information PP to be used. Further, there is no need to manage a large number of user-specific data, and the above-mentioned problem (1) can be solved.

In the present embodiment, since the user-specific data is not required, the information provider P cannot know which user has used the information PP. However, the information provider P only needs to pay a fee according to the use of the information PP, and does not need to know information relating to the privacy of the user as to which user has used the information PP. Therefore, the above-mentioned problem (2) can be solved.

Therefore, in this embodiment, which USER
-There is no storage unit that stores the usage history of which information PP the user with the ID has used, but the storage unit that stores the usage frequency of which information PP has been used, or information It is possible to have a usage notification section that indicates that the PP is currently being used. In FIG. 2, a use notification is sent to the information provider P along a route indicated by a dotted line. A specific use frequency storage unit or use notification unit will be described in detail in an embodiment described later.

In this embodiment, since the PPC is information equivalent to money, the use of the PPC itself corresponds to payment of a fee. As a result, the above-mentioned problem (3) is also solved, but a specific method of obtaining and collecting the PPC and a method of distributing a fee will be described in an embodiment described later in connection with the problem (2).

Regarding the problem (4), the PID contains information
In addition to the PP usage fee, describe the information PP sales fee, the user wants to purchase the information PP (by operating an input unit (not shown)), and the PPC balance is equal to or higher than the sales fee. In this case, the CHECK of the charging unit permits the purchase and writes data indicating that the information is sold in the PID of the information PP, or rewrites the usage fee described in the PID of the information PP free of charge. Of course, to prevent unauthorized use of the information PP, the CHECK
Rewrite D, but if the purchase conditions are not met,
Never rewrite the PID. Specific embodiments will be described later.

[0029]

Second Embodiment Hereinafter, a charging system according to a second embodiment of the present invention will be described. In the second embodiment,
The same components as those in the first embodiment are denoted by the same reference numerals, and detailed description thereof will be omitted.

FIG. 3 is a diagram showing a billing method according to the second embodiment.
The case where PPC is cash is shown.

The billing unit displays the usage fee indicated by the PID of the information PP on the display unit. The user pays the specified money (for example, coins and bills) at the PPC slot according to the usage fee display.
Input. CHECK permits the use of the information PP when the input amount exceeds the fee indicated in the PID.

When the fee is updated in accordance with the time, the billing unit displays this fact on the display unit, and prompts the user to input an additional fee. When the usage conditions are set by an input unit (not shown) or the like, the charging unit displays a fee corresponding to the usage condition on the display unit, and allows the user to input the fee. In other words, the CHECK is configured to perform the re-determination based on the time, the set use condition, the added amount, and the fee described in the PID.

The entered money is stored in the COIN BOX,
Collected by the information provider P or the agency that collects the fee. At this time, the usage frequency information for each information PP recorded in the CNT is also collected, and the COIN BOX is used according to the usage frequency information.
Is collected and distributed to each information provider P. Of course, when the use frequency information is unnecessary, such as when only one information PP is provided, the CNT can be omitted.

As described above, according to the charging method using cash described in the present embodiment, if the information provider or the charge distributor installs the user terminal in a public telephone box, a game center, a coffee shop, a library, or the like, for example, In addition, it is possible to realize a charging system in which a large number of people can use the installed user terminal using cash.

[0035]

Third Embodiment Hereinafter, a charging system according to a third embodiment of the present invention will be described. In the third embodiment,
The same components as those in the first embodiment are denoted by the same reference numerals, and detailed description thereof will be omitted.

FIG. 4 is a diagram showing a billing system according to the third embodiment.
The case where the PPC is a prepaid card is shown.

The user inserts the prepaid card into the PPC socket. If the inserted prepaid card balance is higher than the charge indicated in the PID, the CHECK
Allow the use of. In this case, the billing unit is configured so that even when the usage fee of the information PP is updated with time, if the prepaid card has a sufficient balance, it can be continuously used.

The billing unit is configured so that, even when the use conditions are set or changed by an input unit (not shown) or the like, the corresponding amount is subtracted from the prepaid card. CHECK determines whether or not the card can be used in accordance with time and usage conditions, based on the balance of the prepaid card and PID.
May be configured to perform the re-determination based on the description.

Since the initial amount of the prepaid card is limited, the receiving port of the PPC is configured so that a prepaid card can be additionally inserted, and a configuration in which a plurality of prepaid cards can be used continuously. Is desirable.

As with telephone cards and the like, prepaid cards can be easily obtained by selling them at a variety of stores. In this case, the manufacturer or sales company of the prepaid card becomes the distributor of the fee, and the information provider P
By registering with the fee distributor,
You can receive the fee distribution according to the use of PP. Of course, the prepaid card retailer is included in the fee distributor.

The distribution of the fee according to the use is realized by the use notification in which the billing unit informs the fee distributor of the use information using the communication interface (I / F). However,
The usage notification is configured to be output only when the charging unit deducts the usage fee from the prepaid card.

The communication I / F can also be used when the information PP is obtained by communication. Therefore, as shown in FIG. 5, the charge distributor, the plurality of information providers and the users are connected to the network, and the charge distributor assigns the predetermined charge to the predetermined information in accordance with the use notification. Distribute to providers.

If there is no communication I / F, there is a method of changing the type of the prepaid card according to the information PP to be used. In this case, CHICK is the information PP to be used.
Is determined based on the description of the PID and the type of the prepaid card. If an appropriate prepaid card is inserted, the information PP can be used.

Further, the charging section may have means for recording the usage record of the information PP on the prepaid card, and the used prepaid card may be collected to distribute the fee according to the use. In this case, in order to promote the collection of the prepaid card, for example, a difference is made between a card price when the prepaid card is exchanged and a card price when the prepaid card is not exchanged. That is, in the case of exchange, the card price corresponding to the card balance may be used, and in the case of no exchange, the card price may include the price of the card itself.
However, the fees corresponding to the usage records that cannot be collected are distributed at a ratio according to the usage records that can be collected.

As described above, according to the charging method using the prepaid card shown in this embodiment, the information provider can use the CD-ROM,
Distribute information over a wide area using personal computer communications, the Internet, etc., while on the other hand, if a prescribed agency that is a fee distributor prepares and sells prepaid cards, users purchase and obtain prepaid cards through retailers etc. A billing system that uses the collected information at home or other user terminals can be realized.

[0046]

Fourth Embodiment Hereinafter, a charging system according to a fourth embodiment of the present invention will be described. In the fourth embodiment,
The same components as those in the first embodiment are denoted by the same reference numerals, and detailed description thereof will be omitted.

FIG. 6 is a diagram showing a billing method according to the fourth embodiment.
An electrical or / and magnetic device that is relatively easy to rewrite, such as a floppy disk, an IC card, or a magnetic card, is used for the PPC. The monetary information recorded in the PPC is data guaranteed by a financial institution such as a bank, or special data that can be added only by a fee distributor including a store.

The user of the information PP inserts the PPC into the PPC socket. The CHECK of the billing unit reads the monetary information from the PPC,
If the amount of money is larger than the usage fee indicated in the PID of the information PP, and the usage fee can be charged to the fee distributor that issued the PPC, the use of the information PP is permitted. Of course, even if the usage fee for the information PP is
As long as C has a balance, the information PP can be continuously used. Further, when setting or changing the use condition using an input unit (not shown) or the like, the charging unit deducts a predetermined fee from the PPC according to the setting or change. In other words, the CHECK is configured to perform the re-determination based on the time, the set use condition, the added amount, and the fee described in the PID.

Since the money information in this case is information that can be read and written electronically, the billing unit performs input and output of the money information with the charge distributor through a predetermined procedure via the communication I / F. Can be.

Unlike the first and second embodiments described above,
The user of the information PP in the present embodiment does not pay money directly to the fee distributor. A bank or a financial institution (hereinafter referred to as a “charger”) that has made a contract with the user guarantees the payment of the user's money to the charge distributor.
Therefore, as shown in FIG. 7, the charge distributor, the charge changer,
A plurality of information providers and users are connected to a network.

Further, similarly to the third embodiment, the use notification can be sent to the charge distributor via the communication I / F, and the charge can be distributed according to the use of the information PP.
In this case, the usage fee can be sent directly to a fee distributor or an information provider as electronic money.

More specifically, depositing and dispensing of electronic money can be realized by the following communication processing. However, the billing unit needs to include a cryptographic processing unit and an authentication processing unit, which will be described later, and a management unit that completely manages a time stamp indicated by a TA, which will be described later. This is based on the consideration of rewritable PPC,
This is a measure to prevent PC duplication. That is, the monetary information can be authenticated, and management of the time stamp can be used to counter fraud such as copying of the monetary information.

The user is A, the information provider is B, and the charge distributor is
C, the chargeer is D, each keeps a secret key that can be signed secretly, and the communication partner knows a public key that can check the signature (for example, sA is the secret key of A, and pA is the public key). ). Here, a case is considered where A uses information Pi provided by B. However, the processing result by the key Y of X is {X} ^
Represented by Y, each process of the user, key and time stamp T
It is assumed that the management of A is performed by means of ensuring the security in the billing unit, or by a memory or record of each person.

[Money Information Acquisition Processing] (1) The user A receives a request for inputting money information
Your registration information iA (eg account number or credit number)
Message MA signed with the private key sA
To the charge distributor C. MA = {A, {A, iA, a, TA} ^ sA}

(2) The charge distributor C checks the signature of the message MA with the public key pA of the user A, and confirms that the information is correct. After confirming that the information is correct, using the registration information iA extracted from the message MA, the charge changer D
Make a request for a yen. When the request is accepted, a message MC in which the monetary information is signed with the signature key sC of the charge distributor C is sent to the user A for each basic unit e (for example, 100 yen if the information PP is 100 yen unit). . However, a time stamp TCi different from the TA is added to the message MC. MC = Σ {TA, {C, e, TCi} ^ sC} ^ pA

(3) The charging unit of the user terminal transmits the message MC
Are decrypted with the key pA, the signature is checked with the public key pC of the charge distributor C, and if it is confirmed that the information is correct, {C, e, TCi} ^ sC is recorded in the PPC.

However, TA and TCi are time stamps, and messages with the same time stamp from the same sender can be regarded as invalid information. Also, TA and TCi are
Even if it is not a time stamp, a serial number, a random number that does not coincide by chance, or a small random number may be used.

[Usage Information Notification Processing] (1) When user A desires to use information Pi, if the balance of the PPC is greater than the usage fee indicated in PIDi, the charging unit permits the use of information Pi.

(2) When the user A finishes using the information Pi or while using the information Pi, the billing unit allocates the amount of the usage fee to the PP.
Withdraw from the balance of C.

(3) At this time, the user A sends a use notification MB to the charge distributor C. However, the amount deducted from the PPC is b. MB = {A, B, {B, b, TB} ^ sA}

(4) The fee distributor C inspects the message MB and confirms that the information is correct, and uses the usage fee b (or the amount excluding a part thereof) as a distribution to the information provider B. pay.

In the above, an example has been described in which the encryption system between the charge distributor and the user is a public key encryption. However, it is clear that a common key encryption may be used if the key is shared in advance. . Further, the validity period of each message can be determined by the time of the time stamp. In the above description, the order of arrangement in the message is random, and the user identifiers and time stamps indicated by A, B, etc. may not always be necessary. Furthermore, the above-described procedures of the money information obtaining process and the use information notifying process are merely examples, and the present invention includes all processes in which electronic information is used as money information and a billing process is performed without using user-specific data.

If the user terminal does not have a communication I / F, the user goes to a charge distributor such as a store and inputs money information stored in the PPC. Also,
The billing unit records a use record of information such as the use notification MB on the PPC, and distributes a fee according to the use of the information by collecting the use record when inputting monetary information into the PPC. be able to. As described above, such electronic money information is special data that can be processed only by the charge distributor. Therefore, users who do not have a communication I / F must use a distributor such as a retailer in order to use PPC, so usage records can always be collected and fees can be distributed according to usage. It is.

As described above, according to the accounting method using the floppy disk shown in the present embodiment, a user terminal such as a personal computer having a floppy disk drive does not require a special receptacle for the PPC. . Furthermore, a billing system that can be easily realized on an existing network can be configured by making it possible to omit the store of the prepaid card by exchanging money information through communication and performing encryption and authentication processing in software.

[0065]

[Fifth Embodiment] Hereinafter, a charging system according to a fifth embodiment of the present invention will be described. In the fifth embodiment,
The same components as those in the first embodiment are denoted by the same reference numerals, and detailed description thereof will be omitted.

FIG. 8 is a diagram showing a charging method according to the fifth embodiment.
An electronic card such as an IC card or PCMCIA is used for PPC. The monetary information recorded in the PPC is data guaranteed by a financial institution such as a bank, or special data that can be added only by a fee distributor including a store.

The user of the information PP inserts the PPC into the PPC socket and performs the PP according to a predetermined procedure (such as inputting a personal identification number).
Make C operational. The CHECK of the charging unit reads out the monetary information from the PPC, and the amount is greater than the usage fee indicated in the PID of the information PP, and it is possible to charge the usage fee to the fee distributor who issued the PPC. , The use of the information PP is permitted. Of course, even if the usage fee for the information PP is in hourly units,
As long as the PPC has a balance, the information PP can be used continuously. Further, when setting or changing the use condition using an input unit (not shown) or the like, the charging unit deducts a predetermined fee from the PPC according to the setting or change. In other words, CHECK is
Time, set use conditions, added amount, PID
Is re-determined based on the fee described in (1).

Since the monetary information in this case is electronically readable and writable information, the billing unit performs input / output of monetary information with the charge distributor through a predetermined procedure via the communication I / F. Can be.

Unlike the first and second embodiments described above,
The user of the information PP in the present embodiment does not pay money directly to the fee distributor. A bank or financial institution (fee changer) that has made a contract with the user guarantees the user's payment of money to the charge distributor. Therefore, as shown in FIG. 7, the charge distributor, the charge changer, the plurality of information providers and the users are connected to the network.

Further, the above-mentioned use notification can be sent to the charge distributor via the communication I / F as in the third embodiment, and the charge can be distributed according to the use of the information PP.
In this case, the usage fee can be sent directly to a fee distributor or an information provider as electronic money.

More specifically, depositing and dispensing of electronic money can be realized by the following communication processing. However, in consideration of the security of communication and processing, the electronic card used for the PPC is used as a security function to confirm the owner with a personal identification number, control access to data memory by access conditions, and encrypt Performs encryption and authentication using a method. At this time, the secret key used for the encryption processing and the authentication processing is written in the memory area where access is controlled, and only a person (such as a card issuer or a charge distributor) who satisfies the access condition can access. Also, the following charging operation cannot be changed by anyone other than the card issuer or the charge distributor.

User A, information provider B, fee distributor
C, D is the charge changer, and charge distributor C shares a secret key for cryptographic communication with each user (for example, the secret key between A and C is sA, and the secret key between B and C is The secret key is assumed to be sB), and the charge distributor C holds the secret key sC for the signature and publishes the inspection key pC of the signature corresponding to the secret key sC. Hereinafter, a case where the user A uses the information Pi provided by the information provider B will be considered. However, the ciphertext using the key Y of the plaintext X is {X} ^
It is represented by Y, and it is assumed that all processes of the user A are performed in the PPC having the security function as described above.

[Money Information Acquisition Processing] (1) The user A receives, for example, a request for inputting money information for a yen,
It adds its own registration information iA (for example, account number or credit number) corresponding to the charge changer D, and sends the information to the charge distributor C. MA = {A, {A, iA, a, TA} ^ sA}

(2) The charge distributor C decrypts the encrypted part of the message MA with the secret key sA shared with the user A, and registers the registration information iA
Is used to charge the fee changer D for a yen. When the request is accepted, a message MC in which the money information is signed with the signing key sC of the charge distributor C is sent to the user A. MC = {TA, {C, a, TC} ^ sC} ^ sA

(3) The user A decrypts the message MC with the signature key sA, checks the signature with the public key pC corresponding to the signature key sC, and confirms that the information is correct. Add money information for yen.

However, TA and TCi are time stamps, and messages having the same time stamp from the same sender can be regarded as invalid information. Also, TA and TCi are
Even if it is not a time stamp, a serial number, a random number that does not coincide by chance, or a small random number may be used.

[Usage Information Notification Processing] (1) When the user A desires to use the information Pi, if the balance of the PPC is larger than the usage fee indicated in PIDi, the charging unit permits the use of the information Pi.

(2) When the user A finishes using the information Pi or while using the information Pi, the charging unit allocates the amount of the usage fee to the PP.
Withdraw from the balance of C.

(3) At this time, the charging unit sends the usage notice MB to the charge distributor C. However, the amount deducted from the PPC is b. MB = {A, {A, B, b, TB} ^ sA}

(4) The fee distributor C inspects the message MB and confirms that the message MB is correct, and transfers the usage fee b (or the amount excluding a part thereof) to the information provider B. Pay as.

Next, when information between A and B is also exchanged by encrypted communication, the following processing may be performed between the above-described money information acquisition processing and the use information notification processing. However, it is assumed that the fee distributor C also shares the secret key with the information provider B.

[Usage Information Processing] (1) The user A sends the following message to the fee distributor C in order to request generation of a conversation key with the information provider B. MA '= {A, B, TA'}

(2) The charge distributor C generates a conversation key CK and sends the next message to the user A. MC '= {{TC', A, CK} ^ sB, TA ', B, CK} ^ sA

(3) The user A transmits the message MC ′ to the secret key sA.
And sends {TC ', A, CK} ^ sB to information provider B.

(4) The information provider B decrypts the received message with the signature key sB and sends the information encrypted with the conversation key CK to the user A.

(5) The user A decrypts the encrypted information with the conversation key CK.

In the above, an example has been described in which the encryption system between the charge distributor and the user is a common key encryption in order to simplify the processing. Obviously it is good. Further, the validity period of each message can be determined by the time of the time stamp. In the above description, the order of arrangement in the message is random, and the user identifiers and time stamps indicated by A, B, etc. may not always be necessary. Furthermore, the above-described procedures of the money information obtaining process and the use information notifying process are merely examples, and the present invention includes all processes in which electronic information is used as money information and a billing process is performed without using user-specific data.

When the user terminal does not have a communication I / F, the user goes to a charge distributor such as a store and inputs money information stored in the PPC. Also,
The billing unit records a use record of information such as the use notification MB on the PPC, and distributes a fee according to the use of the information by collecting the use record when inputting monetary information into the PPC. be able to. As described above, such electronic money information is special data that can be processed only by the charge distributor. Therefore, users who do not have a communication I / F must use a distributor such as a retailer in order to use PPC, so usage records can always be collected and fees can be distributed according to usage. It is.

As described above, the IC card shown in this embodiment
By billing method using an electronic card such as PCMCIA,
A charging system in which the charging system of the fourth embodiment is made more secure can be realized.

[0090]

Sixth Embodiment Hereinafter, a charging system according to a sixth embodiment of the present invention will be described. In the sixth embodiment,
The same components as those in the first embodiment are denoted by the same reference numerals, and detailed description thereof will be omitted.

FIG. 9 is a diagram showing a billing method according to the sixth embodiment.
As in the fifth embodiment, electronic money information is used, and the billing method is unnecessary for the charge distributor. As shown in FIG. 10, a plurality of users and information providers, and a fee changer are connected to a network. Further, the electronic card used as the PPC can perform, as security functions, owner confirmation using a personal identification number, access control to a data memory based on access conditions, and encryption and authentication using an encryption method described later. At this time, the secret key used for the encryption processing and the authentication processing has been written in the access-controlled memory area. Also, the following charging operation cannot be changed by anyone other than the card issuer or the charge distributor.

A is a user, B is an information provider, and a
D, each holding a signable private key, and the communicating party knowing a public key that can verify the signature. For example, the secret key of user A is sA and the public key is pA
And Here, the information provided by user A by information provider B
Consider the case of using Pi. However, the processing result by the key Y of X is represented by {X} ^ Y, and the processing of the user A is all performed in the PPC having the security function as described above.

[Money Information Acquisition Processing] (1) The user A receives a request for inputting money information for
Your registration information iA (eg account number or credit number)
And sends the information to the fee changer D. MA = {A, {A, iA, a, TA} ^ sA}

(2) The fee changer D checks the signature of the message MA with the public key pA of the user A, and if the registration information iA is correct and the user A can pay a yen a, the a User A sends a message MD in which the financial information corresponding to the yen is signed with secret key sD
To return. MD = {TA, {D, a, TD} ^ sD} ^ sA

(3) The user A checks the message MD with the public key pA, further checks the signature with the public key pD of the fee changer D, and confirms that the information is correct. The monetary information of the minute is added.

[0096] However, TA and TCi are time stamps, and a message from the same sender and having the same time stamp can be said to be incorrect information. Also, TA and TCi are
Even if it is not a time stamp, a serial number, a random number that does not coincide by chance, or a small random number may be used.

[Usage Information Notification Processing] (1) When user A desires to use information Pi, if the balance of the PPC is larger than the usage fee indicated in PIDi, the charging unit permits the use of information Pi.

(2) When the user A finishes using the information Pi or while using the information Pi, the billing unit allocates the amount of the usage fee to the PP.
Withdraw from the balance of C.

(3) At this time, the user A sends a use notification MB to the information provider B. However, the amount deducted from the PPC is b. MB = {A, B, {B, b, TB} ^ sA}

(4) When the information provider B inspects the message MB and confirms that the information is correct, the information provider B shows the signature {B, b, TB} ^ sA of the user A to the fee changer D, and Receive the yen fee.

When information between a user and an information provider is also exchanged by encrypted communication, encrypted communication can be directly performed using the public key of the other party. However, when the amount of information is large, the following is performed. Encrypted communication using common key encryption can also be performed. In this case, it is assumed that a common key encryption unit is shared between each user and the information provider. However, (1) (2)
In the above, A and B may be reversed.

[Information Usage Information Processing] (1) User A sends a message encrypted with public key pB of common key CK with information provider B. MA '= {A, B, CK, TA'} ^ pB

(2) The information provider B decrypts the received message with the secret key sB. (3) The information provider B sends the information encrypted by the common key CK to the user A. (4) User A
The information encrypted by the common key is decrypted by the common key CK.

In the above, for the sake of simplicity, an example has been described in which the encryption system of the fee changer, the user, and the information provider is a public key encryption, but a common key encryption may be used as described above. It is clear. Further, the validity period of each message can be determined by the time of the time stamp. In the above description, the order of arrangement in the message is random, and the user identifiers and time stamps indicated by A, B, etc. may not always be necessary. Furthermore, the above-described procedures of the money information obtaining process and the use information notifying process are merely examples, and the present invention includes all processes in which electronic information is used as money information and a billing process is performed without using user-specific data.

As described above, the charging system shown in the present embodiment makes it possible to realize a charging system in which a charge distributor is unnecessary, that is, a user and an information provider directly make a transaction through a charge changer. Further, it is apparent that this billing system and billing system can be applied to electronic money or digital cash that handles certain special data in the same way as money, which is expected to be put into practical use in the future.

[0106]

Seventh Embodiment Hereinafter, a charging system according to a seventh embodiment of the present invention will be described. In the seventh embodiment,
The same components as those in the first embodiment are denoted by the same reference numerals, and detailed description thereof will be omitted.

FIG. 11 is a diagram showing a charging system according to the seventh embodiment.

In the case where the information PP is not only used but also purchased, the information provider P describes the sales fee in addition to the usage fee in the PID of the information PP. When the user wishes to purchase the information PP, the information is input through an input unit (not shown).
Instructs the billing department to purchase the PP, and sets the PPC
Insert When the balance of the PPC is equal to or greater than the sales charge indicated in the PID, the CHECK of the charging unit permits the purchase of the information PP and writes data indicating that the information has been sold in the PID of the information PP. Thereafter, the CHECK permits the use of the information PP in which the data indicating the sold is written in the PID regardless of the PPC. Of course, the CHECK rewrites the PID of the information PP when the purchase condition is satisfied to prevent unauthorized use of the information PP, but does not rewrite the PID of the information PP when the purchase condition is not satisfied.

In FIG. 11, for simplicity, the description of the communication I / F is omitted. However, as in the other embodiments, when the information PP and the money information are exchanged by communication, the communication I / F is exchanged. F, By adding the encryption / authentication unit,
It can also communicate with rate distributors and rate changers.

[0110]

[Eighth Embodiment] Hereinafter, an accounting system according to an eighth embodiment of the present invention will be described. In the eighth embodiment,
The same components as those in the first embodiment are denoted by the same reference numerals, and detailed description thereof will be omitted.

The eighth embodiment is a billing system that is effective for a sales system including many stores.

A CD-ROM storing a large amount of information encrypted with different keys by an information provider is sold at a low price through a store, and the information is supplied at the request of the user who purchased the CD-ROM. When the provider notifies the encryption key of the specified information,
A billing method for charging for the use of the information is known. However, this method has a problem in that a store that sells a CD-ROM can obtain a sales profit of a medium, but cannot obtain a profit for selling information stored on a CD-ROM. The problem described above can be solved by using the billing method by the PPC shown in the present invention not only for rental information use but also for information purchase.

That is, the user purchases a CD-ROM at a store and also purchases a PPC such as a prepaid card. When the user knows the encryption key through communication with the information provider (including a telephone), the information provider specifies payment by a prepaid card, and the information provider can obtain information from the store that sold the prepaid card. Can be collected. According to this method, the usage fee for the information also passes through the store, so that the store can also obtain a profit for using the information.

The charging unit checks the balance of the PPC, and if there is a balance equal to or more than the charge of the information to be used, decrypts the encryption for the information and deducts the charge from the PPC. In addition, the PPC will allow the balance to be redeemed, and will be produced for each information provider and will be sold on CD-ROM
Will be sold as well. Therefore, in this embodiment, a charge distributor is unnecessary.

When coexisting with the rental use of the provided information, when the fee is deducted from the PPC, the data unique to the information may be rewritten as in the seventh embodiment.

As described above, the charging system according to the present embodiment can correspond to a sales system of a large number of dealers and agents, and can coexist with rental use of provided information. Can be built.

[0117]

[Common key encryption method] The common key encryption method is an encryption method in which a sender and a receiver secretly share the same encryption key (also called a secret key encryption method, a symmetric encryption method, or a conventional encryption method).

The common key cryptosystem can be divided into a block cipher in which a character string (block) having an appropriate length is encrypted with the same key and a stream cipher in which the key is changed for each character string or bit. . Block ciphers include transposed encryption in which the order of characters is rewritten and encrypted, and substitution encryption in which characters are replaced with other characters. In this case, the transposition or substitution table becomes the encryption key. As a stream cipher, a business cipher using a multitable, a Vernam cipher using a one-time disposable key, and the like are known. These are described in detail in Chapters 2 and 4 of Ikeno and Koyama, "Modern Cryptography" (IEICE, 1986).

Also, among the block ciphers, the DES (Data Encryption Standard) or F
Encryption such as EAL (Fast data Encipherment Algorithm) is widely used as commercial encryption. These are cited by Tsujii and Kasahara, "Cryptography and Information Security" (Shokodo, 199
0) is described in detail in Chapter 2.

However, since DES and FEAL have disclosed their algorithms, a cryptanalysis method has also been developed, and various modifications may be made to counter the cryptanalysis method. For example, the number of repetitions described later is increased (CH Mayer an
d SM Matyas: "CRYPTOGRAPHY-A New Dimension in C
omputer Data Security ", Wiley-Interscience, Append
ix D, pp.679-712, 1982), changing keys frequently (Yamamoto,
Iwamura, Matsumoto, Imai: "Practical cryptosystem using square-type pseudorandom number generator and block cipher", IEICE Technical Report, ISEC93-29, p
p.65-75, 1993).

[0121]

[Public key encryption method] The public key encryption method is an encryption method in which an encryption key and a decryption key are different, and the encryption key is made public and the decryption key is kept secret. Therefore, the encryption key may be called a public key, and the decryption key may be called a secret key.

Public key cryptography has the following features not found in common key cryptography.

(1) Since the encryption key and the decryption key are different and the encryption key can be made public, it is not necessary to distribute the encryption key secretly, and the key can be easily distributed.

(2) Since each user's encryption key is public, the user only needs to secretly store his / her own decryption key, which makes key management easy.

(3) An authentication function can be realized for the receiver to confirm that the sender of the transmitted message is not a fake and that the message has not been falsified.

The encryption communication and the authentication communication of the public key encryption and the encryption communication with the authentication function are realized by the following protocols. In the following, a protocol for performing encrypted communication, authentication communication, and encrypted communication with an authentication function from the sender A to the receiver B will be described. The secret key of A is ksA, the public key is kpA, the secret key of B is ksB, the public key is kpB, the encryption operation using the public key kp for the message M is E (kp, M), A decryption operation using the secret decryption key ks is represented as D (ks, M).

[Encrypted Communication] From A to B, communication message (plaintext) M
When the secret communication is performed, the following procedure is performed.

Step 1: A encrypts M with B's public key kpB and sends ciphertext C to B. C = E (kpB, M)

Step 2: B decrypts the ciphertext C with its own secret key ksB to obtain the original plaintext M. M = D (ksB, C)

Since the public key of the receiver B is disclosed to an unspecified number of persons, not only A but all persons can send a secret message to B.

[Authentication Communication] A to B, message (plaintext) M
The following procedure is used when authenticating communication.

Step 1: A generates a transmission message S using its own secret key ksA and sends it to B. S = D (ksA, M)

Step 2: B restores and transforms S with A's public key kpA to obtain the original plaintext M. M = E (kpA, S)

If it can be confirmed that the message M is a meaningful sentence, it is authenticated that the message M was certainly sent from A. Since the public key of A is disclosed to an unspecified number of people, not only B but anyone can authenticate the signature of A. Such authentication is also called a digital signature.

[Signed Encrypted Communication] From A to B, when performing a secret communication with a signed message (plaintext) M, the following procedure is performed.

Step 1: A signs M with its own private key ksA and creates a signature S. S = D (ksA, M)

Step 2: A uses the public key kpB of B for the signature S
And sends ciphertext C to B. C = E (kpB, S)

Step 3: B decrypts C with its own private key ksB to obtain a signature S. S = D (ksB, C)

Step 4: B restores and transforms S with A's public key kpA to obtain the original plaintext M. M = E (kpA, S)

If it can be confirmed that the message M is a meaningful sentence, it is authenticated that the message M was certainly sent from A. Steps 1 and 2 and step 3
And the order of 4 may be reversed.

An example of a typical public key cryptosystem will be described below.

A method capable of performing encrypted communication and authentication communication: RSA encryption (RL Rivest, A. Shamir and L. Adleman: "A metho
d of obtaining digital signatures and public key c
ryptosytems ", Comm. of ACM, 1978), R-cipher (M. Rabin:
"Digitalized signatures and public-key cryptosyst
ems ", MIT / LCS / TR-212, Technical Report MIT, 197
9), W cipher (HC Williams: "A modification of the R
SA public-key encryptionprocedure ", IEEE Trans. In
f. Theory, IT-26, 6, 1980), MI cryptography (Matsumoto, Imai: "New algorithms of public key cryptosystem", IEICE Tech.
4, 1982; T. Matsumoto and H. Imai: "A class of asym
metric cryptosystems based on polynomials over fin
ite rings ", IEEE International Symp. on Informatio
n Theory, 1983)

A method that allows only encrypted communication: MH encryption (RC
Merkle and ME Hellman: "Hiding information and
signatures in trapdoor knapsacks ", IEEE Trans. In
f. Theory, IT-24, 5, 1978), GS cryptography (A. Shamir and
RE Zippel: "On the security of the Merkle-Hellm
an cryptographic scheme ", IEEE Trans. Inf. Theory,
IT-26, 3, 1980), CR cryptography (B. Chor and RL Rivest:
"A knapsack type public key cryptosystem based on
arithmetric infinite field ", Proc.Crypto84), M crypto (RJ McEiece:" A public-key cryptosystem based
on algebraiccoding theory ", DSN Progress Rep., Je
t Propulsion Lab., 1978), E encryption (TE ElGamal: "A p
public key cryptosystem and a signature scheme base
d on discretre logarithm ", Proc. Crypto 84, 198
4), T cryptography (Shigeo Tsujii: "A method of public key cryptography using matrix decomposition", IEICE Technical Report, IT85-12, 1985)

A method capable of performing only authentication communication: S encryption (A. Sha
mir: "A fast signature scheme", Report MIT / LCS / TM-1
07, MIT laboratory for computer science, Cambridg
e, Mass., 1978), L-cipher (K. Lieberherr: "Uniform com
plexity and digital signature ", Lecture Notes in C
omputer Science 115 Automata, Language and Program
ming, Eighth Colloquium Acre, Israel, 1981), GYM encryption (S. Goldwasser, S. Micali and A. Yao: "Strong sign
ature schemes ", ACM Symp. on Theory of Computing,
1983), GMR cryptography (S. Goldwasser, S. Micali and RL)
Rivest: "A 'paradoxical' solution to the signature
problem ", ACM Symp. on Foundationof Computer Scie
nce, 1984), OSS ciphers (H. Ong, CP Schnorr and A. S.
hamir: "An efficient signature scheme based on quad
ratic equation ", ACM Symp.on Theory of Computing,
1984), OS cryptography (Okamoto, Shiraishi: "Digital signature scheme by polynomial operation", IEICE (D), J68-D, 5, 1985; T. Okamo
to and A. Shiraisi: "A fast signature scheme based
on quadratic in equalities ", IEEE Symp. on Theory
of Computing, 1984)

[0145]

Another embodiment of the present invention is to provide a storage medium storing a program code of software for realizing the functions of the above-described embodiments to a system or an apparatus, and to provide a computer (or CPU or MP
It goes without saying that U) is also achieved by reading and executing the program code stored in the storage medium. In this case, the program code itself read from the storage medium implements the functions of the above-described embodiment, and the storage medium storing the program code constitutes the present invention. Examples of the storage medium for supplying the program code include a floppy disk, a hard disk, an optical disk, a magneto-optical disk, a CD-ROM,
CD-R, magnetic tape, non-volatile memory card, ROM, etc. can be used.

When the computer executes the readout program code, not only the functions of the above-described embodiment are realized, but also the OS (Operating System) running on the computer based on the instruction of the program code. ) May perform some or all of the actual processing, and the processing may realize the functions of the above-described embodiments.

Further, after the program code read from the storage medium is written into the memory provided in the function expansion card inserted into the computer or the function expansion unit connected to the computer, the program code is written based on the instruction of the program code. It goes without saying that the CPU included in the function expansion card or the function expansion unit performs part or all of the actual processing, and the processing realizes the functions of the above-described embodiments.

As described above, according to the embodiments of the present invention, it is possible to realize a billing system and a billing system that solve the above-mentioned problems (1) to (4).

That is, the user uses various kinds of information at a low cost on a rental basis, the privacy of the user is protected, and the information provider can respond to the use of the information without managing the information use for each user. You can receive a usage fee distribution.

Further, by introducing a charge distributor including a store and a charge changer, a user-friendly charging system including payment of a charge can be configured.

Further, it is possible to construct a flexible charging system capable of distributing legitimate charges to various providers related to the network other than the information provider by using the auxiliary data which is not unique to the information.

Further, it is possible to construct a charging system that can achieve both rental use and sale of the provided information.

[0153]

As described above, according to the present invention,
It is possible to provide a billing system and a method thereof that do not require a use application procedure and management of a large number of user-specific data.

Further, it is possible to provide a charging system and a method for protecting the privacy of a user.

Further, it is possible to provide a billing system and a billing method which can easily charge and collect a fee.

Further, it is possible to provide a billing system and a method thereof capable of responding to information sales.

[Brief description of the drawings]

FIG. 1 is a conceptual diagram of super distribution,

FIG. 2 is a diagram showing a charging method according to the first embodiment;

FIG. 3 is a diagram showing a charging method according to a second embodiment;

FIG. 4 is a diagram showing a charging method according to a third embodiment;

FIG. 5 is a diagram showing a network according to a third embodiment;

FIG. 6 is a diagram showing a charging method according to a fourth embodiment;

FIG. 7 is a diagram showing a network according to a fourth embodiment;

FIG. 8 is a diagram showing a charging method according to a fifth embodiment;

FIG. 9 is a diagram showing a charging method according to a sixth embodiment;

FIG. 10 is a diagram showing a network according to a sixth embodiment;

FIG. 11 is a diagram illustrating a billing method according to a seventh embodiment.

Claims (10)

[Claims] 1. A billing system for billing for provision of information via a multimedia network, comprising: receiving multimedia information and billing information specific to the multimedia information via the multimedia network. Receiving means, operating means for operating money information on a medium on which money information is recorded, and determining whether to use or purchase the multimedia information received by the receiving means based on the billing information and the money information. And a updating unit that updates the charging information based on a determination result obtained by the determining unit. 2. The method according to claim 1, wherein the updating unit records information indicating that the product has been sold in the billing information when the determination unit determines that the purchase is possible. Billing system. 3. The charging system according to claim 1, wherein said determination means determines whether the multimedia information can be used in a stepwise manner. 4. The billing system according to claim 1, wherein said operation means operates money information of said medium based on the judgment by said judgment means. 5. The medium on which the money information is recorded is a prepaid card.
A billing system according to any one of the above. 6. The charging system according to claim 1, wherein the money information is information recorded on the medium magnetically or electronically. 7. The charging system according to claim 1, wherein the medium on which money information corresponding to the charging information is recorded is used. 8. The apparatus according to claim 1, wherein the operation unit inputs and outputs the money information and / or the usage information of the multimedia information via the network. Billing system. 9. The system according to claim 8, wherein the fee distributor receiving the use information of the multimedia information from the operation unit distributes a fee corresponding to the use information to the provider of the multimedia information. The billing system described. 10. A billing method for billing for provision of information via a multimedia network, comprising: receiving multimedia information and billing information specific to the multimedia information via the multimedia network. Receiving the information, operating the money information of the medium on which the money information is recorded, and determining whether to use or purchase the multimedia information received in the receiving step based on the billing information and the money information. And a updating step of updating the charging information based on the determination result obtained in the determining step.