JPH1083297A - Processor and method for software copy processing, and computer-readable recording medium where program for copying softwrae is recorded - Google Patents

Abstract

PROBLEM TO BE SOLVED: To formally copy copyright protected software, stored on a master medium, to a user's storage medium as to the software copy processor. SOLUTION: A content identifier read means 2 reads the identifier of software on the master medium 1 and a storage medium identifier read means 4 reads the identifier of the copy destination storage medium 3; and they are sent to a center 5 which administers copyright vending. The center 5 generates a signature from the information of the sent identifier by a signature generating means 6 and sends it to the user. The sent signature is written on the copy destination storage medium 3 by a signature write means 7. A signature generating and comparing means 8 generates a signature on the user side from the information of the identifier sent to the center and compares this generated signature with the signature written on the copy destination storage medium 3 and only when the signatures match each other, a data copy means 9 reads the copy object software out of the master medium 1 and copies it to the copy destination storage medium 3.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a software copy processing apparatus, a software copy processing method, and a computer-readable recording medium on which a program for copying software is recorded. The present invention relates to a software copy processing apparatus, a software copy processing method, and a computer-readable recording medium on which a program for copying software is recorded.

In recent years, there are various distribution forms of software, such as floppy disks and CD-ROMs (co-
mpact disk read only memo
ry), software that is recorded on a storage medium such as a semiconductor memory or the like may be purchased, or may be purchased by downloading the software via a network. Because it can be easily copied to storage media,
There is always the problem of illegal copying, and seriously with copyrighted software.

[0003]

2. Description of the Related Art Conventionally, in a sales form of software such as an application program for a computer, dictionary data, video and music data, such software is recorded in a CD-ROM in an electronically locked state. There is a way to distribute. In this case, the user contacts the center that manages the sale of the software and purchases the software that he / she wants to use. The user can then open the keyed software with the key given at the time of purchase and install it on, for example, a hard disk.

[0004] As another example, there is a case where identifier information relating to copy right sales managed by a center is previously written in a writable storage medium. CD-
When copying software recorded in ROM,
The store or the user of the storage medium notifies the center. CD-ROM only when the identifier information issued from the center by performing the software sales procedure is compared with the identifier information written on the storage medium and matches.
Can copy software to a storage medium.

[0005]

However, software installed on a hard disk or the like can usually be executed or used as it is, that is, since the key is not locked, the problem of illegal copying has not been solved. There was a point.

When the identifier information is written in the storage medium, the center needs to manage the identifier information in cooperation with a factory that manufactures the storage medium. There is a problem that it is necessary to treat the storage medium separately from the storage medium.

[0007] The present invention has been made in view of the above points, and it is possible to copy the copyrighted software stored in the master medium onto a storage medium with a medium identifier of a readable / writable user. It is an object of the present invention to provide a computer-readable recording medium that records a software copy processing apparatus, a software copy processing method, and a program for copying software.

[0008]

FIG. 1 is a diagram illustrating the principle of the present invention for achieving the above object. The software copy processing apparatus according to the present invention comprises: a content identifier reading unit 2 for reading an identifier of software to be copied recorded on a master medium 1; a storage medium identifier reading unit 4 for reading an identifier of a copy destination storage medium 3; A signature generation unit 6 for generating a signature for authenticating the copy right to the user who has requested the copy right from the information of the identifier read by the content identifier reading unit 2 and the storage medium identifier reading unit 4 in the center 5 for managing sales; A signature writing unit 7 for writing the signature to the copy destination storage medium 3;
Signature generating and comparing means 8 for comparing the signature written in the user with the signature generated by the user, and data copying means 9 for copying the copy target software of the master medium 1 to the copy destination storage medium 3 when the comparison results match. It is composed of

According to the above arrangement, first, the content identifier reading means 2 reads the software content identifier from the master medium 1, and the storage medium identifier reading means 4 reads the storage medium identifier from the copy destination storage medium 3. Information on these identifiers is sent to the center. In the center 5, the signature generation means 6 generates a signature from the transmitted information of the identifier and sends it back to the user. The signature is written to the copy destination storage medium 3 by the signature writing unit 7. The signature generation / comparison means 8 internally generates a signature from the identifier information read by the content identifier reading means 2 and the storage medium identifier reading means 4 and compares the signature with the signature written on the copy destination storage medium 3. If the signatures match, the data copy means 9 copies the encrypted copy target software from the master medium 1 to the copy destination storage medium 3 as it is.

According to the present invention, in a software copy processing method for copying software recorded on a master medium to a copy destination storage medium, the content identifier of data to be copied recorded on the master medium and the copy destination storage medium The end user transmits the unique storage medium identifier together with the copy right request information to the center that sells the copy right, and the center performs signature processing on the received content identifier and storage medium identifier with the authentication key of the center. Generating a first authenticator and encrypting the authentication key with a user individual key to generate an encrypted authentication key, and sending the generated first authenticator and encrypted authentication key to an end user; The end user writes the received first authenticator and encrypted authentication key in the copy destination storage medium, Decrypting the encrypted authentication key written in the user with the user individual key to obtain an encrypted authentication key at the center, and signing the content identifier and the storage medium identifier using the decrypted authentication key. Second for verification
Generating a second authenticator for verification, comparing the generated second authenticator for verification with the first authenticator written in the copy destination storage medium, and comparing the second authenticator written in the copy destination storage medium with the second authenticator. When a first authenticator and the second authenticator for verification match, a software copy processing method is provided, comprising reading data to be copied from the master medium and writing the data to the copy destination storage medium. .

Further, according to the present invention, a computer is provided with a content identifier reading means for reading information of a first identifier for each software recorded on a master medium corresponding to each software, and a computer for each copy destination storage medium. Storage medium identifier reading means for reading the information of the second identifier recorded in the storage medium, managing the sale of the right to copy the information of the first and second identifiers read by the content identifier reading means and the storage medium identifier reading means, respectively. Sending means for sending to the center, receiving means for receiving from the center a first signature authenticating the copy right of the copy target software generated from the information of the first and second identifiers, and receiving the first signature from the center. Signature writing means for writing the signature of the content to the copy destination storage medium, the content identifier reading means, The storage medium identifier reading means generates a second signature for verification from the information of the first and second identifiers respectively read, and reads the first signature written on the copy destination storage medium to read the first signature. Signature generation / comparison means for comparing with the second signature to determine whether or not they match each other, and as a result of the comparison by the signature generation / comparison means, reads the copy target software on the master medium when the first and second signatures match. And a computer-readable recording medium on which a program for functioning as data copying means for writing data to a copy destination storage medium is provided.

This recording medium can preferably be the same medium as the master medium on which the software is recorded. The computer reads out the content identifier reading means from the recording medium and executes the same, whereby information of the first identifier of each software is read from the master medium, and the storage medium identifier reading means 4 reads from the copy destination storage medium for each copy destination storage medium. The individually recorded information of the second identifier is read. The information of these identifiers is sent by the sending means to a center that manages the sale of the copy right. Subsequently, when the receiving means receives the first signature certifying the copy right of the software from the center, the signature writing means writes the first signature on the copy destination storage medium. Next, the signature generation / comparison means internally generates a second signature from the information of the first and second identifiers and compares it with the first signature written on the copy destination storage medium. If they match, the software copies the software from the master medium to the copy destination storage medium.

[0013]

DESCRIPTION OF THE PREFERRED EMBODIMENTS First, the outline of the present invention will be described with reference to the drawings. FIG. 1 is a diagram showing the principle configuration of a software copy processing device according to the present invention.

In FIG. 1, a software copy processing apparatus according to the present invention includes a content identifier reading means 2 for reading software-specific identification information of software to be copied recorded on a master medium 1 and an individual identification for a copy destination storage medium 3. Storage medium identifier reading means 4 for reading information
And the content identifier reading means 2 and the storage medium identifier reading means 4 in the center 5 for managing the sale of the copy right.
A signature generating means 6 for receiving the identification information respectively read and generating a signature for authenticating the copy right of the copy target software, and a signature writing means for writing the signature generated by the signature generating means 6 to the copy destination storage medium 3 7, a signature is generated from the identification information read by the content identifier reading means 2 and the identification information read by the storage medium identifier reading means 4, and this is compared with the signature written on the copy destination storage medium 3 to determine whether they match. The signature generation / comparison unit 8 reads data to be copied from the master medium 1 and writes the software to the copy destination storage medium 3 when the signatures match.

The master medium 1 stores software to be sold in an encrypted form, and each software is provided with a content identifier. In addition, it is assumed that the copy destination storage medium 3 is provided with an individual storage medium identifier before shipment from the factory. Here, when the user designates the software to be copied from among the software recorded on the master medium 1, the content identifier reading means 2 reads the content identifier corresponding to the software from the master medium 1, and reads the storage medium identifier reading means 4. Reads the storage medium identifier from the copy destination storage medium 3. The information of these identifiers is sent to the center 5 together with the copy right purchase request. The center 5 generates a signature authenticating the copy right from the information of the content identifier and the storage medium identifier received by the signature generation means 6 and sends it back to the user. The center 5 also performs a user registration process and a billing process on a user profile when generating a signature.

On the user side, the signature writing means 7 receives the signature sent from the signature generation means 6 and writes it in the copy destination storage medium 3. Next, the signature generation / comparison means 8 first internally generates a signature from the content identifier read by the content identifier reading means 2 and the storage medium identifier read by the storage medium identifier reading means 4, and The generated signature is compared with the signature written on the copy destination storage medium 3 to determine whether they match. If the signature comparisons by the signature generation / comparison means 8 match, the data copy means 9 reads the encrypted copy target software from the master medium 1 and writes it on the copy destination storage medium 3. When the user uses the software written in the copy destination storage medium 3, the software is developed and executed in the main memory of the processing device that executes the software while decoding the software.

Next, an embodiment of the present invention will be described with reference to a CD-RO.
Copyright protection software distributed by M.
A description will be given by taking as an example the case of copying to a magneto-optical disc (magneto-optical disc) medium.

FIG. 2 is a flowchart showing the flow of processing of the software copy processing device. In the software copy processing apparatus of the present invention, when copying software recorded on a CD-ROM to an MO medium, the end user first copies the storage medium individual identifier IDk of the MO medium and the CD-ROM. The software individual identifier SIDi of the desired software is transmitted to the center managing the sale of the copy right (step S
1). Next, the center side performs a copy right sale procedure process, and receives the received storage medium individual identifier ID.
k and the software identifier SIDi to the authenticator C
S is generated and sent back to the end user (step S
2). On the end user side, the received authenticator CS is
The data is written in a predetermined storage area of the medium (step S3). Here, the end user also generates an authenticator CS 'for verification using the storage medium individual identifier IDk and the software individual identifier SIDi transmitted to the center (step S4). Then, the authenticator CS 'generated on the end user side is compared with the authenticator CS written on the MO medium (step S5). These authenticators CS 'and CS
As a result of the comparison, it is determined whether the two authenticators match (step S6). If they match, the software individual identifier SIDi is read from the CD-ROM.
Is written on the MO medium (step S7). If it is determined in step S6 that the two authenticators do not match, the CD-RO
The process ends without writing the software from M to the MO medium.

FIG. 3 is a diagram showing a configuration of a CD-ROM and an MO medium. In this figure, (A) is a CD-RO
This shows the configuration of M11, and this CD-ROM 11 has a software individual identifier SIDi (i =
1, 2,..., N), and manager application software MA for performing an operation of copying the copyright protection software from the CD-ROM to the MO medium. Each copyright protection software is recorded in an encrypted state. Manager application software MA
When copying software from a CD-ROM to an MO medium, the software is read and executed by a terminal body such as a personal computer on the end user side, and is executed as shown in FIG.
Of the end user is performed.

FIG. 2B shows the structure of the MO medium 12, on which the storage medium individual identifier IDk (k = 1, 2,..., M) is recorded. .
The MO medium 12 allows the user to freely write data,
An area having a storage area that can be erased but in which the storage medium individual identifier IDk of the MO medium 12 is written is an area that can be read but cannot be rewritten. The storage medium individual identifier IDk can be, for example, a serial number assigned to each MO medium at the time of factory shipment.

Next, a specific procedure for copying the copyright protection software on a CD-ROM to an MO medium will be described. FIG. 4 is a diagram showing a procedure of a copy process of the copyright protection software.

In this figure, the procedure of the copying process is divided into a process on the main unit composed of, for example, a personal computer and a process on the center managing the sale of the copy right. To [end user],
The center side is indicated by [center], and between them is [communication path /
Transportation route].

Here, the terminal of the end user is a CD-RO
Equipped with M drive device and MO drive device,
The CD-ROM 11, which is a master medium on which copyright protection software is recorded, is loaded in the ROM drive device, and the copy destination medium, M, is stored in the MO drive device.
It is assumed that the O medium 12 is loaded. And CD
The software to be copied in the ROM 11 is software having the software individual identifier SIDi,
It is assumed that the identifier unique to the medium 12 is the storage medium individual identifier IDk.

First, in the processing of the main body side of the end user, C
When the manager application software MA of the D-ROM 11 is started and the copy target software is designated, the software individual identifier SIDi of the software is read from the CD-ROM 11 and the MO medium 1
2, the storage medium individual identifier IDk is read. The software individual identifier SIDi and the storage medium individual identifier IDk are transmitted to the center together with a request sentence including copy right request information.

On the center side, the contents of the received information request from the end user are first written in the user profile 13. Further, the received software individual identifier SI
Di and the storage medium individual identifier IDk are stored in the signature processing device 1
4 is input. The signature processing device 14 performs a data compression process using a center authentication key KEYc, which is a secret key, and outputs an authenticator CS. This authenticator CS plays the role of signature. Next, the authentication key KEYc used in the signature processing device 14 is input to the encryption device 15, and the user individual key K
It is encrypted by U and output as an encrypted message EKU (KEYc). The authenticator CS output from the signature processing device 14 and the encrypted message E output from the encryption device 15
The KU (KEYc) is sent back to the end user together with the center identifier IDc.

On the end user side, of the information sent from the center, the authenticator CS and the encrypted message EKU (KE
Yc) is written once on the copy destination MO medium 12, and
Then, the authenticator CS and the encrypted electronic message EKU (KEYc) on the written medium are transferred to the manager application.

In the processing on the main unit side, first, the received encrypted electronic message EKU (KEYc) is input to the decryption device 16 and decrypted using the user individual key KU for signature verification. Encrypted authentication key KE
Yc is taken out. Next, in the signature processing device 17, the end user uses the authentication key KEYc decrypted in the decryption device 16 from the software individual identifier SIDi read from the CD-ROM 11 and the storage medium individual identifier IDk read from the MO medium 12. Generate an authenticator CS ′ for verification. Then, the comparator 18 compares the authenticator CS written on the MO medium 12 with the authenticator CS ′ generated by the signature processing device 17. If the result of the comparison by the comparator 18 shows that the authenticator CS matches the authenticator CS ′, the switch 19 is operated, and the copy target software having the software individual identifier SIDi is in the state of the encrypted data, Written on the MO medium 12.

Here, an example of processing in the signature processing device 14 on the center side and the signature processing device 17 on the end user side will be described below. FIG. 5 is a diagram illustrating a configuration example of the signature processing device.

The signature processing device includes a software individual identifier SIDi, a storage medium individual identifier IDk, and an authenticator CS
And an exclusive OR processing unit 21 for performing an exclusive OR processing, and an encryption processing for inputting the output of the exclusive OR processing unit 21 and the authentication key KEYc of the center and outputting the authenticator CS. And a hash function.

First, the inputted software individual identifier SIDi and storage medium individual identifier IDk data are converted into an authentication key KEYc by the encryption processing unit 22 in block units.
Is encrypted by The output data encrypted by the encryption processing unit 22 is fed back to the input side, subjected to exclusive OR processing with the next block data in the exclusive OR processing unit 21, and is encrypted again by the encryption processing unit 22. Is done. Such processing is repeated until the last block is input. During this time, the processing result is not output, and when the last block is encrypted, it is output as the authenticator CS from the encryption processing unit 22 for the first time.

Next, a description will be given of a processing procedure for executing a software program included in data copied in the MO medium 12 while being encrypted in the above procedure.

FIG. 6 is an explanatory diagram showing an execution procedure of a software program included in the copied data. The MO medium 12 includes an authenticator CS and an encrypted message EKU.
(KEYc), the storage medium individual identifier IDk data, and the software individual identifier SIDi are recorded, and the copied software is encrypted data EKd (DATA)
It is recorded as. This encrypted data EKd (DA
TA) is encrypted with the key Kd when the software is recorded on the CD-ROM 11, and the key Kd used for the encryption is held by the manager application software.

In the processing on the main unit side, first, the authenticator CS, the encrypted message EKU (KEYc), the storage medium individual identifier IDk data, and the software individual identifier SIDi are read from the MO medium 12, and the encrypted electronic message EKU in them is read out.
(KEYc) is input to the decryption device 16, and is decrypted using the user individual key KU, thereby extracting the authentication key KEYc. Next, the authentication individual CS ′ for verification is generated using the software individual identifier SIDi read from the MO medium 12 and the storage medium individual identifier IDk read from the MO medium 12 using the authentication key KEYc decrypted in the decryption device 16. . After that, the authenticator CS written on the MO medium 12 and the authenticator CS ′ generated by the signature processing device 17 are compared by the comparator 18. Comparator 1
8, if the authenticator CS matches the authenticator CS ′, the switch 19 is operated, and the encrypted data EKd, which is the encrypted software read from the MO medium 12, is read.
(DATA) via the switch 19
5 is input. In the decrypting device 25, the input encrypted data EKd (DATA) is decrypted using the key Kd held by the manager application software, and is returned to plain data DATA. This data DA
TA is a central processing unit (CPU) / memory 26 on the main body side.
The software program is executed by the CPU.

Next, another embodiment of the software copy processing apparatus of the present invention will be described. In this example, C
The software recorded in the D-ROM has a software individual identifier DID, and the data Data of the software is for a master medium created from the software individual identifier DID and the master key KM managed by the copy right sales center. It is assumed that the data has been encrypted by the conversion key Ka to become encrypted data EKa (Data), and that the MO medium has the serial number of the storage medium individual identifier Mid.

FIG. 7 is a flowchart showing another copy processing flow of the software copy processing apparatus. First,
The end user sends the storage medium individual identifier Mid of the copy destination MO medium and the software individual identifier DID of the software for which copying of the CD-ROM is desired to the copy right sales center that manages the sale of the copy right ( Step S11). Next, the center verifies whether the received software individual identifier DID is registered in the center (step S12). Thereafter, the received storage medium individual identifier Mid and software individual identifier DID are stored in the master key KM for center management.
To generate the storage medium conversion key Ku and the master medium conversion key Ka (step S13). Next, the storage medium conversion key Ku and the master medium conversion key K
a is encrypted with the storage medium individual identifier Mid to generate an encrypted message EMid (Ku, Ka), and the generated encrypted message EMid (Ku, Ka) is sent back to the requesting end user (step S14). On the end user side, of the received encrypted message EMid (Ku, Ka), the encrypted message EMid (Ku) having information related to the MO medium is written into the MO medium and the received encrypted message EMid (Ku, Ka) is written.
d (Ku, Ka) is decrypted with the storage medium individual identifier Mid to convert the storage medium conversion key Ku and the master medium conversion key Ka.
Is obtained (step S15). Next, using the master medium conversion key Ka obtained in step S15, the CD-RO
M decrypts the encrypted data EKa (Data) corresponding to the software individual identifier DID of M
a is obtained (step S16). And this data Da
ta is converted to the storage medium conversion key Ku obtained in step S15.
To re-encrypt and write the data on the MO medium, and terminate the copying (step S17).

Next, the software of the CD-ROM is
A specific procedure for copying to a medium will be described. The process performed first when the end user issues a request to the copy right sales center is a process of reading the storage medium individual identifier Mid of the copy destination MO medium and the software individual identifier DID of the software to be copied on the CD-ROM. In addition, since only the process of transmitting the storage medium individual identifier Mid and the software individual identifier DID to the center is omitted, the description of the first process is omitted, and the process on the center side will be described.

FIG. 8 is an explanatory diagram showing the procedure of processing on the center side. In this figure, the center first receives the storage medium individual identifier Mid and the software individual identifier DID transmitted from the end user through the line, and among these, the storage medium individual identifier Mid is encrypted using the center management master key KM. It is input to the device 31 and the software individual identifier DID is input to the comparator 32. The encryption device 31 stores the storage medium individual identifier Mid in the master key K
The encryption key M is used to generate a storage medium conversion key Ku. On the other hand, the comparator 32 searches the issued content identifier file 33 to verify the validity of the software individual identifier DID and compares it with the requested software individual identifier DID. If the software individual identifier DID of the issued content identifier file 33 matches the requested software individual identifier DID, the switch 3
4 is controlled to a closed state. Then, the requested software individual identifier DID is input to the encryption device 35 having the master key KM. The encryption device 35 encrypts the software individual identifier DID with the master key KM to generate a master medium conversion key Ka. The storage medium conversion key Ku generated by the encryption device 31 and the master medium conversion key Ka generated by the encryption device 35 are input to the encryption device 36, and are respectively encrypted by the storage medium individual identifier Mid. The encrypted electronic message EMid (Ku, Ka) encrypted by the encryption device 36 is transmitted to the requesting end user via the line. When this processing is achieved, an instruction for charging processing is transmitted to the user profile 37, and charging is performed to the requesting end user.

FIG. 9 is an explanatory diagram showing a procedure of processing on the end user side. In this figure, when an encrypted message EMid (Ku, Ka) transmitted from the center is received, first, the encrypted message EM related to the MO medium is received.
The id (Ku) is written in a predetermined area 41 of the MO medium 40. Then, the received encrypted message EMid (Ku, K
a) is input to the decoding device 51. The decoding device 51 uses the MO
The encrypted electronic message EMid (Ku, Ka) is decrypted using the storage medium individual identifier Mid of the medium 40, and the storage medium conversion key Ku and the master medium conversion key Ka are output. The decrypted master medium conversion key Ka is input to the decryption device 52 as a decryption key, and the storage medium conversion key Ku is transmitted to the encryption device 53.
Is input as an encryption key. First, the decoding device 52
The encrypted data EKa (Data) corresponding to the software individual identifier DID of the D-ROM 60 is read, decrypted with the master medium conversion key Ka, and the plaintext data Dat is read.
Return to a and output. The data Data is input to the encryption device 53 and is re-encrypted with the storage medium conversion key Ku. Encrypted data EKu encrypted by the encryption device 53
(Data) is written to the MO medium 40.

Next, the encrypted data EKu written on the MO medium 40 by the above-described procedure using the unique identifier of the MO medium 40 and the conversion key based on the master key of the center.
A processing procedure when (Data) is used will be described.

FIG. 10 is an explanatory diagram showing a procedure for using the copied data. In the MO medium 40, the encrypted electronic message EMid (Ku) is stored in an area 41 of the rewritable area, the storage medium individual identifier Mid is stored in an unrewritable area 42, and a part of the other area is stored. The copied encrypted data EKU (Data) is stored. Here, when using the encrypted data EKu (Data), first, the storage medium individual identifier Mid and the encrypted message EMid (Ku) on the MO medium 40 are read and input to the decryption device 54. The decryption device 54 uses the storage medium individual identifier Mid to encrypt the electronic message EMid (Ku).
And outputs the storage medium conversion key Ku. The decryption device 55 uses the storage medium conversion key Ku as a decryption key,
O The encrypted data EKU (Da
ta), and outputs plain data Data.
The data Data is developed on the main memory of the personal computer which is the terminal of the end user, and is used if it is a program and executed if it is dictionary data, or is searched if it is dictionary data.

[0041]

As described above, according to the present invention, the center has signature generation means for generating a signature from the information of the identifier of the data to be copied on the master medium and the identifier of the copy destination storage medium. Signature writing means for writing the signature generated by the generation means on the copy destination storage medium; signature generation comparison means for comparing the verification signature generated on the end user side with the signature written on the copy destination storage medium; Data copy means for writing the data to be copied on the master medium to the copy destination storage medium according to the comparison result is provided. For this reason, the center only needs to issue a signature corresponding to the identifier information of the copy destination storage medium, and manages the identifier information in cooperation with the manufacturing factory of the copy destination storage medium. It is not necessary, and inventory management of the copy destination storage medium can be made unnecessary in a factory that manufactures the copy destination storage medium or a store that sells the copy destination storage medium.

[Brief description of the drawings]

FIG. 1 is a diagram showing a principle configuration of a software copy processing device of the present invention.

FIG. 2 is a flowchart showing a flow of processing of the software copy processing device.

FIG. 3 is a diagram showing a configuration of a CD-ROM and an MO medium.

FIG. 4 is a diagram showing a procedure of a copy process of the copyright protection software.

FIG. 5 is a diagram illustrating a configuration example of a signature processing device.

FIG. 6 is an explanatory diagram showing an execution procedure of a software program included in copied data.

FIG. 7 is a flowchart showing the flow of another copy process of the software copy processing device.

FIG. 8 is an explanatory diagram showing a processing procedure on the center side.

FIG. 9 is an explanatory diagram showing a procedure of a process on the end user side.

FIG. 10 is an explanatory diagram showing a use processing procedure of copied data.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 Master medium 2 Content identifier reading means 3 Copy destination storage medium 4 Storage medium identifier reading means 5 Center 6 Signature generation means 7 Signature writing means 8 Signature generation comparison means 9 Data copy means

Claims (9)

[Claims] 1. A software copy processing apparatus for copying software recorded on a master medium to a copy destination storage medium, wherein information of a first identifier of each software recorded on the master medium is read corresponding to each software. Content identifier reading means, storage medium identifier reading means for reading information of the second identifier individually recorded for each copy destination storage medium, and the content identifier reading means and the storage medium in a center managing the sale of copy right A first unit that receives the information of the first and second identifiers read by the identifier reading unit and authenticates the copy right of the copy target software;
Signature generating means for generating a signature of the following; signature writing means for writing the first signature generated by the signature generating means on the copy destination storage medium; content identifier reading means and the storage medium identifier reading means. A second signature for verification is generated from the read information of the first and second identifiers, and the first signature written on the copy destination storage medium is read and compared with the second signature. Signature generation / comparison means for determining whether or not they match each other; and if the first and second signatures match as a result of the comparison by the signature generation / comparison means, read the software to be copied on the master medium and write it to the copy destination storage medium. A software copy processing device comprising: data copy means. 2. The signature generating means encrypts information of the first and second identifiers read by the content identifier reading means and the storage medium identifier reading means, respectively, with an authentication key managed by a center. Signature processing means for outputting an authentication code as the first signature, and encryption means for encrypting an authentication key used by the signature processing means with a user individual key registered in the center and outputting the encrypted authentication key together with the authentication code 2. The software copy processing device according to claim 1, comprising: 3. The signature generation / comparison means decrypts the authentication key encrypted by the signature generation means with a user individual key registered in the center and outputs the authentication key, and reads the content identifier. Means for encrypting the information of the first and second identifiers read by the means and the storage medium identifier reading means, respectively, with the authentication key decrypted by the decryption means and outputting a verification authenticator as the second signature. 3. The software copy processing apparatus according to claim 2, further comprising: generating means; and comparing means for comparing the authenticator for verification with an authenticator written as a first signature on the copy destination storage medium. . 4. A software copy processing method for copying software recorded on a master medium to a copy destination storage medium, comprising: a content identifier of data to be copied recorded on the master medium; a storage medium identifier unique to the copy destination storage medium; Together with the copy right request information from the end user to a center that sells the copy right. The center performs signature processing on the received content identifier and storage medium identifier with the authentication key of the center, and sets the first authenticator to Generating and encrypting the authentication key with a user individual key to generate an encrypted authentication key; sending the generated first authenticator and encrypted authentication key to an end user; The first authentication code and the encrypted authentication key are written in the copy destination storage medium, and the encryption key written in the copy destination storage medium is written. Decrypting the encrypted authentication key with the user's individual key to obtain an encrypted authentication key at the center, signing the content identifier and the storage medium identifier using the decrypted authentication key, And comparing the generated second authenticator for verification with the first authenticator written in the copy destination storage medium, and writing the authenticator in the copy destination storage medium. When the first authenticator and the second authenticator for verification match, the data to be copied in the master medium is read and written in the copy destination storage medium. 5. A software copy processing apparatus for copying software recorded on a master medium to a copy destination storage medium, wherein information of a first identifier of each software recorded on the master medium is read corresponding to each software. Content identifier reading means, storage medium identifier reading means for reading information of the second identifier individually recorded for each copy destination storage medium, and a content identifier reading means read by the content identifier reading means at a center for managing the sale of copy right. A conversion key for the storage medium from the information of the first identifier, and a conversion key for the master medium from the information of the second identifier read by the storage medium identifier reading means. A conversion key generating means for encrypting a medium conversion key with the information of the second identifier; A conversion key writing unit that writes the conversion key for the encrypted storage medium output from the generation unit into the copy destination storage medium; and a conversion key for the encryption storage medium and an encryption master medium that are output from the conversion key generation unit. A conversion key decrypting means for decrypting the conversion key with the information of the second identifier read by the storage medium identifier reading means; and a copy target software recorded on the master medium, which is decrypted by the conversion key decrypting means. Data decryption means for decrypting with the conversion key for master medium and outputting plaintext data, and encrypting the data for plaintext with the conversion key for storage medium decrypted by the conversion key decryption means and storing the copy destination. A software copy processing device comprising: a data writing unit that writes data on a medium. 6. The first conversion key generating means for generating a storage medium conversion key by encrypting information of the first identifier read by the content identifier reading means with a master key managed by a center. Encrypting means, second encrypting means for encrypting information of the second identifier read by the storage medium identifier reading means with the master key to generate a master medium conversion key, and the storage medium conversion key 6. The software copy processing apparatus according to claim 5, further comprising third encryption means for encrypting a conversion key for a master medium with the information of the second identifier. 7. The software which is encrypted with a master medium conversion key created from a content identifier for identifying software and a master key managed by a center which sells copy right and recorded on the master medium is copied. In a software copy processing method for copying to a destination storage medium, a content identifier of data to be copied recorded on a master medium and a storage medium identifier unique to the destination storage medium are sent from the end user to the center, and the center receives the content identifier. The content identifier and the storage medium identifier are encrypted with a center master key to generate a master medium conversion key and a storage medium conversion key, and the master medium conversion key and the storage medium conversion key are respectively stored in the storage medium identifier. The encrypted conversion key for the master medium and the encrypted conversion key for the storage medium The exchange key is sent to the end user, and the end user writes the received encryption storage medium conversion key in the copy destination storage medium, and stores the received encryption master medium conversion key and encryption storage medium conversion key in the storage medium. Decrypting with the identifier, decrypting the copy target data of the master medium with the master medium conversion key into plaintext data, encrypting the plaintext data with the storage medium conversion key, and encrypting the encrypted data with the storage medium conversion key. A software copy processing method comprising writing to a copy destination storage medium. 8. A content identifier reading means for reading information of a software-specific first identifier recorded on a master medium corresponding to individual software, a second identifier individually recorded for each copy destination storage medium. Storage medium identifier reading means for reading identifier information, and sending means for transmitting the information of the first and second identifiers read by the content identifier reading means and the storage medium identifier reading means to a center managing the sale of copy right. Receiving means for receiving, from the center, a first signature authenticating the copy right of the copy target software generated from the information of the first and second identifiers, and receiving the first signature received from the center as the copy destination Signature writing means for writing to a storage medium, the content identifier reading means, and the storage medium identifier A second signature for verification is generated from the information of the first and second identifiers read by the reading means, and the first signature written on the copy destination storage medium is read to read the second signature. Signature generation / comparison means for comparing and determining whether or not they match each other, and when the first and second signatures match as a result of the comparison by the signature generation / comparison means, read the copy target software on the master medium and store the copy destination A computer-readable recording medium on which a program for functioning as data copying means for writing on a medium is recorded. 9. A content identifier reading means for reading information of a first identifier of each software recorded on a master medium corresponding to each software, a second identifier individually recorded for each copy destination storage medium. Storage medium identifier reading means for reading identifier information, and sending means for transmitting the information of the first and second identifiers read by the content identifier reading means and the storage medium identifier reading means to a center managing the sale of copy right. An encryption storage medium conversion in which a storage medium conversion key generated from the first identifier information and a master medium conversion key generated from the second identifier information are encrypted with the second identifier information. Receiving means for receiving a key and a conversion key for an encrypted master medium from the center; Conversion key writing means for writing to a medium; conversion key decryption means for decrypting the encrypted storage medium conversion key and the encrypted master medium conversion key with the information of the second identifier read by the storage medium identifier reading means. Data decrypting means for reading out the copy target software recorded on the master medium, decrypting with the conversion key for the master medium decrypted by the conversion key decrypting means and outputting plaintext data, and A computer-readable recording medium on which a program for functioning as data writing means for encrypting with the storage medium conversion key decrypted by the conversion key decrypting means and writing the encrypted data into the copy destination storage medium is recorded.