JPH11203128A - Digital software distribution system, terminal and recording medium - Google Patents

Abstract

PROBLEM TO BE SOLVED: To effectively prevent illegal use where a user holding enciphered distribution digital softwares, repeatedly utilizes them by using a decoder. SOLUTION: A reproducing device 2000 which receives software is internally provided with a key information storing part 2202 which stores a decode key, an decoding part 2204 which decodes enciphered distribution software with the decode key and an authenticating part 2205 which discards a stored decode key in a decided timing and prevents decoding after the decode key is discarded by opening a key of cryptograph to the public between a code key and the key of cryptograph which are produced by a software receiving end, also storing the decode key at the receiving end and later discarding it in a decided timing so that the distribution software can be decoded and utilized only while the decode key is stored at the receiving end.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a digital software distribution system, a terminal device, and a recording medium, and more particularly to a system for distributing digital software digitized or originally created as digital data to a remote terminal via a network. However, the present invention is suitable for use in a digital software distribution system in which a user can reproduce and use digital data of distributed software in a physical form.

[0002]

2. Description of the Related Art In recent years, techniques for digitizing various software such as audio, still images, moving images, and text have been developed. On the other hand, there are many types of software that are initially created as digital data, such as programming languages, word processing documents, and computer graphics.

[0003] These digital software are duplicated
It has the feature that quality does not deteriorate even by operations such as transmission and storage. For this reason, distribution at a low distribution cost using a communication line is possible, and digital software distribution services are currently provided through personal computer communication or the Internet.

However, in the case of a work or the like in which the software itself has intangible property, it is necessary to prevent unauthorized duplication of the software in order to protect the interests of the copyright holder. Therefore, when constructing a system for distributing digital software via a communication line,
The feature of digital software, which is easy to copy, is a problem.

[0005] On the other hand, there is data encryption as a technique for protecting digital software from unauthorized duplication and the like. This technology prevents unauthorized distribution of distributed digital software by distributing encrypted data to users and making the distribution data available only to specific users or specific devices. Things.

[0006]

However, many of the conventional techniques using encryption make it impossible to use the copied digital software if the digital software is illegally copied by a third party during distribution. It was intended to do so. Therefore, it is difficult to prevent illegal use of the copied digital software when the user who has received the distributed software duplicating the distributed software.

As a technique for preventing such illegal use of the copied digital software by a user, Japanese Patent Laid-Open No.
Japanese Patent Application Laid-Open No. 131452/1996 or Japanese Patent Application Laid-Open No. Hei 8-111671 discloses inventions. In these technologies, a distributor sends a decryption device or a decryption key to a contracted user in advance. Need to be kept. For this reason, the distributor needs to register and manage the information on the key passed to the user, and cannot be used as a technology for distributing software to an unspecified number of customers.

Further, in the invention described in Japanese Patent Application Laid-Open No. Hei 7-131452, it is stated that key management and distribution are facilitated by using a public encryption key, but specific contents are not mentioned.

SUMMARY OF THE INVENTION The present invention has been made in view of such circumstances, and in particular, in preventing unauthorized use of distributed digital software, in particular, a user illegally holds a copy of encrypted distributed digital software. It is an object of the present invention to effectively prevent repeated use by using a device capable of decrypting this code.

[0010] Further, an unspecified large number of distributions corresponding to the present system are not required without a prior contract between the distributor and the user and as long as the user uses an apparatus corresponding to the present system. Another purpose is to allow distribution of digital software from the public.

[0011]

According to the present invention, for example, a system is constituted by one or more digital software distributing apparatuses and one or more digital software receiving apparatuses. A person who distributes digital software uses a distribution device, and a person who uses digital software uses a reception device.

In the first invention, a decryption key and an encryption key are generated inside the receiving device, the decrypting key is stored in the receiving device in a confidential state, and the encryption key is passed to the distribution device. The distributing device encrypts the digital software with the received encryption key and distributes the digital software. The receiving device decrypts the digital software distributed in an encrypted state with the decryption key stored above. The use of the distribution digital software that can be decrypted with the decryption key is terminated by discarding the decryption key at a predetermined timing.

Here, the encryption key and the decryption key can be decrypted using the decryption key when the data is encrypted based on the encryption key. However, the encryption key and the decryption key can be decrypted using the encryption key. This is an encryption key having a relationship that data cannot be decrypted and a decryption key cannot be obtained from the encryption key.

According to the first aspect of the present invention,
The user can decrypt and use the distributed digital software while the decryption key is stored in the receiving device, but can decrypt the distributed digital software when the decrypting key in the receiving device is destroyed. Disappears. That is, the distributed digital software data, including the data copied by the user, is guaranteed to have a value as the software only while the decryption key is stored in the receiving device. For this reason, the distributor can maintain the value of the distributed digital software by determining the timing at which the receiving device destroys the decryption key, and the user can make a contract with the distributor in advance. Without
It is possible to request the distributor to distribute the software.

In the second invention, the receiving device destroys the decryption key in response to decrypting the digital software.
According to the second aspect of the present invention, the distribution digital software is guaranteed to be decrypted only once.

In the third invention, the receiving-side device discards the decryption key in response to the normal completion of the physical distribution of the decrypted distribution digital software. Thus, even if the receiving device fails to reproduce the digital software, the user can reproduce the digital software again without requesting the distributor to distribute the digital software again.

[0017] In the fourth aspect, the receiving apparatus has means for storing a plurality of decryption keys and means for storing an identifier set for each of the decryption keys. In addition, the distribution-side device has means for attaching and distributing the published identifier to the encrypted digital software. The receiving device searches for the decryption key necessary for the distributed digital software for decrypting from the stored plurality of decryption keys based on the identifier attached to the distributed digital software, and uses the decryption key to distribute the distributed digital software. Is decrypted. As a result, the user can receive a plurality of digital software at a time, and can decode the digital software in a desired order from among them.

In the fifth invention, the distribution-side device attaches the use condition information determined by the distributor to the digital software to be distributed, and the reception-side device exchanges the decryption key when the use condition attached to the digital software is not satisfied. Discard and disable digital software decryption. As a result, the distributor can determine the use conditions of the digital software to be distributed at the time of distribution.

According to a sixth aspect of the present invention, in the fifth aspect, the number of uses is used as a use condition of the distribution digital software, and the receiving side device counts the number of times of use of the decryption key. The use condition is determined by comparing the number of uses attached to the digital software. As a result, the distributor can determine the number of uses of the digital software to be distributed at the time of distribution.

According to a seventh aspect of the present invention, in the sixth aspect, when the receiving-side apparatus fails to reproduce the distribution digital software, the number of times the decryption key is used is not increased. Thus, even if the receiving apparatus fails to reproduce the distribution digital software, the user can reproduce the digital software the number of times set by the distributor without requiring the distributor to distribute the digital software again. .

According to an eighth aspect, in addition to the fourth aspect, the receiving apparatus has means for storing the number of uses of a plurality of decryption keys. Based on the identifier attached to the distributed digital software, the receiving device searches for the decryption key necessary for the distributed digital software to be decrypted from the stored plurality of decryption keys and the number of times of use thereof, and The use condition is determined to discard the decryption key, and the distribution digital software is decrypted using the decryption key. This allows the distributor to set usage conditions at the time of distribution, and allows the user to receive multiple digital software at once and decrypt the digital software in any order from among them become.

In the ninth invention, the encryption key disclosed by the receiving device is used as the identifier in the fourth invention or the eighth invention. As a result, the information to be passed from the receiving device to the distributing device can be reduced from the encryption key and the identifier to only the encryption key.

In the tenth aspect, the receiving device and the distributing device are connected by a communication line, and the encryption key, the identifier, and the digital software are transmitted by the communication line. Thereby, for example, TCP / IP (transmission control pro
tocol / internet protocol) or HTTP (hyper text)
transfer protocol) or FTP (file transfer protocol)
Using an existing data communication protocol such as l) in the system of the present invention, an inexpensive system using an existing infrastructure such as the Internet, an intranet, or a public telephone line can be constructed.

In the eleventh invention, a public key cryptosystem is used as a cryptosystem, and a public key is used as an encryption key of a distribution device, and a secret key is used as a decryption key of a reception device. This makes it possible to use an existing encryption device or decryption device as a part of the present system by adopting a popular system such as the RSA system, for example, thereby facilitating system development.

In the twelfth invention, a public key cryptosystem and a common key cryptosystem are used in combination, and most of the data is encrypted by the common key cryptosystem when the distribution apparatus encrypts the digital software. Only a part of the data including the information of the common key is encrypted by the public key cryptosystem. The common key is attached to the digital software in a state of being encrypted by the encryption key, and is passed to the receiving device. As a result, most of the encryption and decryption can be performed with an inexpensive device using a common key encryption method without introducing an expensive device to increase the speed of encryption and decryption processes of the public key encryption method. The processing speed can be increased, and the processing speed of the entire system can be improved.

In the thirteenth aspect, the receiving device has information unique to the receiving device, and passes the information together with the encryption key and the identifier to the distributing device. Accordingly, the distributor and the distribution-side device can specify the recipient or the reception-side device that uses the distribution digital software from among the plurality of recipients.

In a fourteenth aspect, the information unique to the receiving side in the thirteenth aspect is used as a digital signature. Here, in the case of using a digital signature method that requires an authentication variable, the authentication variable is passed from the distribution apparatus or the digital signature authentication server to the receiving apparatus, and the receiving apparatus determines the digital signature based on the authentication variable. And hand it over to the distribution device. Thus, for example, the distribution-side device requests the authentication server to authenticate the digital signature, thereby proving that the reception-side device is registered in the authentication server. For this reason, an authentication server that registers only the receiving device corresponding to the system of the present invention is created, and the manufacturer of the receiving device registers all the digital signatures of the receiving device to be shipped, so that the distribution request can be sent to the distributing device. It can be assured that the receiving side device to be used is compatible with the system of the present invention.

In the fifteenth invention, the encryption method according to the eleventh invention or the twelfth invention is adopted, and the receiving device transmits the information unique to the receiving device in the thirteenth invention or the digital signature in the fourteenth invention to the distributing device. When sending the digital software to the device, the device is encrypted with a secret key corresponding to the public key to be sent as the encryption key of the digital software to the distribution device. The distributing side device decrypts the information unique to the receiving side or the digital signature with the received public key. Thereby, the distribution side device can confirm that the public key received as the encryption key and the information or digital signature unique to the reception side are transmitted from the same reception side device, and the user It is possible to detect fraud that combines a digital signature of a device corresponding to the present system with a public key other than the digital signature.

In the sixteenth invention, the information of the digital software which can be distributed by the distribution side device is disclosed, and the information of the digital software which can be distributed is presented to the user by the receiving side device, and the user is provided with the information. When the desired digital software is selected from the above, the receiving apparatus requests the distribution apparatus to distribute the selected software. This allows
The user can receive the distribution of his or her favorite software from a plurality of distribution-side devices simply by performing the work of distributing the distribution-side device by the distributor.

[0030] In the seventeenth aspect, the receiving device receives the billing information from the user, passes the billing information to the distributing device, and confirms the validity of the billing information received by the distributing device. To collect software for distribution. This allows the distributor to earn revenue from the distribution of digital software.

In the eighteenth aspect, the credit card number of the user is used as the accounting information according to the seventeenth aspect. As a result, the distributor can collect a fee using a system constructed by a credit card company without developing a new fee collection system, and the user can use the present system as long as the user has a credit card.

In the nineteenth aspect, electronic money is used as billing information according to the seventeenth aspect. This allows distributors to collect fees using a system built by a company that handles electronic money without developing a new fee collection system, and users can use this system if they have electronic money. it can.

In the twentieth aspect, the distribution device holds a plurality of digital data for one type of software with respect to the type and reproduction method of the reception device, and the reception device transmits information on reproduction of the digital software to the distribution device. The distribution apparatus selects the most appropriate digital data from this information and distributes it as digital software. As a result, even if there are a plurality of types of receiving-side devices, it becomes possible to distribute digital data according to the receiving-side devices owned by the user and the state of the devices.

[0034] In the twenty-first aspect, the receiving device passes information related to the reproduction of the distributed digital software to the distributing device, and the distributing device processes the digital data of the digital software based on the information and then distributes the digital data. I do. Thus, in the twentieth aspect, when there is not much change in the data of the digital software depending on the type of the receiving device, the distributing device does not need to hold a plurality of similar digital data.

[0035]

DESCRIPTION OF THE PREFERRED EMBODIMENTS Embodiments of the present invention will be described below.
This will be described in detail using a specific example.

(First Embodiment) In this embodiment, an example of an electronic publishing system will be described as one embodiment of a digital software distribution system according to the present invention. In the electronic publishing system according to the present embodiment, a publisher as a distributor uses a distribution processing device, and a reader as a user uses a playback device. The digital software to be distributed is data of images and documents, and publishing data composed of a page description language, a structured language, and the like. Users use the distributed digital software by printing it on paper.

FIG. 1 is a schematic diagram of an electronic publishing system according to the present embodiment. As shown in FIG. 1, in the electronic publishing system according to the present embodiment, one or more distribution processing devices 10
00 and one or more playback devices 2000 are connected to the network 3
000. Network 3000
Can freely transmit data bidirectionally. For example, by using the Internet, it is possible to provide an inexpensive electronic publishing system that can be used worldwide.

FIG. 2 is a block diagram showing a configuration example of the distribution processing apparatus 1000 of the system according to the present invention. As shown in FIG. 2, the distribution processing apparatus 1000 is connected to a terminal 1100 of a certification organization and a terminal 1200 of a credit card company. When the Internet is used as the network 3000, the connection with the certification organization 1100 and the credit card company 1200 can also be made via the Internet.

The distribution processing apparatus 1000 stores electronic publications to be distributed as publishing data 1004, and includes an order receiving unit 1001, a charging processing unit 1002, an authentication processing unit 1003, a publication data extracting unit 1005, An encryption processing unit 1006 and a distribution publication data transmission unit 1007 are provided. Operations of these units will be described later in detail.

FIG. 3 is a block diagram showing an example of the configuration of the playback apparatus 2000 of the system according to the present invention. The reproducing apparatus 2000 includes a PC (personal computer) 2100 and a printer 2200, and the printer 2200
Are a key generation unit 2201, a key information storage unit 2202, a digital signature unit 2203, a decryption unit 2204, a verification unit 2205,
A built-in clock 2206 and a printing unit 2207 are provided.
The internal operation of the printer 2000 is kept confidential to general users.

FIG. 4 is a flowchart showing an example of the operation procedure set in the PC 2100. This operation is performed on PC2
Application programs running on 100 OS,
It can be realized in the form of a script that operates on a WWW (world wide web) browser or an auxiliary program of the WWW browser.

In FIG. 4, first, the designation of the distribution processing apparatus 1000 (selection of the distribution source of the electronic publication) is received from the user (step S1), and the designated distribution processing apparatus 1 is received.
000 is received (step S2). Next, an order for an electronic publication to be purchased in the publication list is received from the user (step S3). Then, an input of a credit card number for paying for the ordered electronic publication is received from the user (step S4).

Here, when an instruction is issued to acquire information on the printer 2200 that performs printing of the electronic publication (step S5), the key generation unit 2201 of the printer 2200 generates a secret key and a public key of the public key cryptosystem. The secret key is a key information storage unit 2202 and a digital signature unit 2203 inside the printer.
And the public key is passed to the PC 2100. The key information storage unit 2202 stores the secret key passed from the key generation unit 2201, and further stores 0 as the number of times the secret key is used.

The digital signature section 2203 generates a digital signature and encrypts the digital signature with the received private key. The encrypted digital signature is transferred to the PC 2100 together with the public key from the key generation unit 2201. If the digital signature method is performed by a method that requires an authentication variable, the authentication authority 1100 or the distribution processing device 1
000, and obtains the authentication variable from the printer 220.
The digital signature is passed to the digital signature unit 2203 of 0 to create a digital signature.

Next, the PC 2100 receives the designation (order) information of the electronic publication selected by the user, the public key and digital signature received from the printer 2200, and the credit card number input by the user. Is transmitted to the designated distribution processing apparatus 1000 (step S
6). Upon receiving the information, the distribution processing apparatus 1000 performs transmission processing of the corresponding electronic publication data. This processing will be described later in detail.

Thereafter, when electronic publication data is sent from the designated distribution processing apparatus 1000, this data is
It is saved as a file in the storage unit in C2100 (step S7). Then, in order to print the received electronic publication, the electronic publication data stored as a file is sent to the printer 2200 (step S8). If the printer 2200 causes a jam or the like and the printing is not performed normally, the electronic publication data stored as a file is sent to the printer 2200 again, and the printing operation is repeated (step S9).

If the secret key is permitted to be used a plurality of times as described later, the printing operation is repeated until the normal printing is performed that number of times. Finally,
The permitted number of times of printing is normally executed, and unnecessary electronic publication data files are deleted from the storage unit in the PC 2100 (step S10).

Next, an example of the operation procedure of the order receiving process of the distribution processing apparatus 1000 is shown in the flowchart of FIG. In FIG. 5, the order receiving unit 1001 of the distribution processing apparatus 1000
The user inputs, as data necessary for ordering an electronic publication, the designation information of the electronic publication selected by the user on the reproduction apparatus 2000 side, the public key and the digital signature received by the PC 2100 from the printer 2200, and The credit card number is received from the playback device 2000 (step S101).

Upon receiving these pieces of information, the order receiving unit 1001 first checks whether or not the user has the specified electronic publication (step S102). If the order is valid, an inquiry is made to the charging processing unit 1002 as to whether the charging information is valid (step S103). The charging processing unit 1002 requests the credit company 1200 to check the credit card number of the user, and returns the result to the order receiving unit 1001.

If the billing information is valid,
The order receiving unit 1001 inquires of the authentication processing unit 1003 whether the digital signature is valid (step S10).
4). The authentication processing unit 1003 decrypts the digital signature with the public key, and the decrypted digital signature
Check if it is registered and receive the registered information. If the digital signature is registered, it means that an order has been created in the reproducing apparatus 2000 in which the digital signature and the encryption key (private key) are registered.

If there is no problem in checking the credit card number and the digital signature, the publication data retrieval unit 1005 retrieves the ordered electronic publication from the storage unit of the publication data 1004 (step S10).
5). Further, since information of the printer 2200 of the user who has placed the order is registered as information registered in the certification authority 1100, the type of page description language to be used, the number of printable colors and the resolution are determined from the printer information. And the like, so as to extract the optimum data for the printer 2200.

The playback device 2 of the electronic publication data
If there is not much change depending on the type of 000, only the basic electronic publication data is registered, and based on the printer information, the electronic publication data is set to be optimal for the printer 2200. You may comprise so that it may process.

When these data can be extracted, the encryption processing unit 1006 encrypts the distribution publication data using the public key, and then compares the public key used for the encryption with the use conditions encrypted with the public key. Attach (Step S10
6). The use conditions of the distribution publication data are set in advance by the distributor. Finally, the distribution / published data transmission unit 1007 transmits the encrypted data to the user's PC 2100 (step S107). If the transmission is normally completed to the end (step S108), the accounting unit 1002 sets the credit company 1200 To the customer (step S1
09).

Next, in the flowchart of FIG.
9 shows an example of an operation procedure of an electronic publication printing process of the printer 2200 in the 000. In FIG. 6, when the encrypted electronic publication data is passed from the storage unit in the PC 2100 (step S201), the decryption unit 2204 uses the public key attached to the encrypted electronic publication data and the used key. The condition and the public key and the use condition are verified by the verification unit 2
205 (step S202).

The verification unit 2205 stores the secret key corresponding to the passed public key and the number of times the secret key has been used, in the key information storage unit 2.
A search is made from 202 (step S203). If the secret key corresponding to the public key and the number of times the secret key has been used are stored (step S204), the usage conditions are compared with the number of times the secret key is used and the date and time of the internal clock 2206 (step S205).

Here, if the use condition is not satisfied (step S206), the secret key and the number of times of use of the secret key stored in the key information storage unit 2202 are deleted (step S207). If the use condition is satisfied (step S206), the verification unit 2205 returns the secret key to the decryption unit 2204, and the decryption unit 2204 decrypts the electronic publication data using the secret key (step S20).
8).

Then, the decrypted electronic publication data is sent to the printing unit 2207, and printing is executed (step S20).
9). If the printing can be normally completed without causing a jam or the like during printing (step S210), the number of times of use of the secret key stored in the key information storage unit 2202 is increased by one, and the process ends. (Step S211). On the other hand, if the printing cannot be performed normally due to the occurrence of a jam or the like during printing (step S210), the process ends without increasing the number of times the secret key is used. If the use is permitted a plurality of times, the encrypted electronic publication data is extracted again from the storage unit in the PC 2100 (step S2).
201), the process according to the flowchart of FIG. 6 is repeated the number of times.

As is clear from the above description, if the electronic publishing system of this embodiment is used, the distributor distributes the electronic publication to an unspecified number of users, and at that time, the distributed electronic publication Can be set, usage fees can be collected from the user, and illegal use by the user can be effectively prevented. For example, by setting usage conditions that limit the number of uses of electronic publications on the distributor side, users can illegally hold copies of distributed electronic publications and repeatedly use them beyond the usage conditions This can be effectively prevented.

Further, by preparing a reproducing apparatus corresponding to the present system, the user can purchase or receive an electronic publication from any distribution processing apparatus without making a contract or registration in advance. , You can use the distributed electronic publications.

In the above embodiment, the number of uses determined by the distributor is set as the use condition of the electronic publication, and when the number of uses of the decryption key reaches the number of uses set as the use condition, Although the decryption key stored in the playback device 2000 is destroyed, the condition of the number of times of use is fixed to one, and the decryption key is destroyed when the decryption of the distribution electronic publication is completed. Is also good. In this case, the distributed electronic publication data can be decrypted only once and made available.

Further, the timing of discarding the decryption key stored in the reproducing apparatus 2000 may be the timing when the distributed electronic publication data is decrypted and printed normally.
In this case, even if the reproduction of the electronic publication by the reproduction device 2000 fails, the user can print the electronic publication again without requesting the distributor to distribute the electronic publication again.

Further, in the above embodiment, it is assumed that one playback device 2000 stores one secret key, but it may be configured to store a plurality of secret keys. In this case, an identifier is set for each secret key, and the identifier is also stored. The distribution processing device 1000 includes the reproduction device 20
The identifier is received from 00, and the received identifier is attached to the electronic publication data and distributed. Upon receiving the distribution, the playback device 2000 obtains a corresponding secret key from the attached identifier, and decrypts the distribution digital software using the obtained secret key. With such a configuration, the user can receive a plurality of electronic publications at once, and can play the electronic publications in any order from among them.

Further, in addition to the above-mentioned secret key, the reproducing apparatus 2000 may be configured to store a plurality of pieces of usage information of the secret key. In this case, based on the identifier attached to the distributed electronic publication data, the corresponding private key and its usage count information are searched, and the usage condition is determined based on the usage count information corresponding to the identifier, and the secret key is used. Destroy the key. In such a configuration, when a user receives a plurality of electronic publications at one time and reproduces the electronic publications in a desired order from among them, the distributor is provided for each electronic publication to be reproduced. Can set use conditions. Note that the above-described identifier may be a public key corresponding to the secret key.

In the above embodiment, the public key cryptosystem is adopted as the cryptosystem, but the public key cryptosystem and the common key cryptosystem may be used together. In this case, when encrypting the electronic publication data, most of the data is encrypted with the common key generated in the distribution processing apparatus 1000, and only some of the data including the information of the common key is encrypted with the public key. I do. Then, the above-mentioned common key is attached to the electronic publication data in a state of being encrypted by the public key, and
Send to With such a configuration, the processing speed of most of the encryption and decryption can be increased with an inexpensive device using the common key cryptosystem, and the processing speed of the entire system can be improved.

In the above embodiment, a digital signature is used. However, if the information is unique to the reproducing apparatus 2000,
The distributor can specify the playback device that uses the electronic publication data from among the plurality of playback devices 1000, and can confirm whether the user is a legitimate user. It may be. In the above-described embodiment, a system in which a credit company is interposed has been described as a billing system, but a billing system using electronic money may be used.

Further, in the above embodiment, the case where the electronic publishing system is considered as an example of the digital software distribution system and the decrypted distribution digital software is printed has been described, but the present invention is not limited to this. That is, the digital software to be distributed may be other than electronic publication data, and the method of reproducing the distributed digital software may be a method other than printing. Of course, the present invention can also be applied to a case where the decrypted digital software is only used on a computer screen.

Further, of the internal configuration of the printer 2200 shown in FIG.
It may be provided within 0.

(Other Embodiments of the Present Invention) The present invention is directed to an apparatus connected to the various devices or a computer in a system so as to operate various devices so as to realize the functions of the above-described embodiments. On the other hand, those implemented by supplying program codes of software for realizing the functions of the above-described embodiments and operating the above-described various devices according to programs stored in a computer (CPU or MPU) of the system or the apparatus are also provided. It is included in the category of the present invention.

In this case, the software program code itself implements the functions of the above-described embodiment, and the program code itself and means for supplying the program code to a computer are provided.
For example, a recording medium storing such a program code constitutes the present invention. As a recording medium for storing such a program code, for example, a floppy disk, hard disk, optical disk, magneto-optical disk, CD-ROM,
A magnetic tape, a nonvolatile memory card, a ROM, or the like can be used.

When the computer executes the supplied program code, not only the functions of the above-described embodiment are realized, but also the OS (operating system) or other operating system running on the computer. Needless to say, even when the functions of the above-described embodiments are realized in cooperation with application software or the like, such program codes are included in the embodiments of the present invention.

Further, after the supplied program code is stored in the memory provided in the function expansion board of the computer or the function expansion unit connected to the computer, the function expansion board or the function expansion unit is operated based on the instruction of the program code. It is needless to say that the present invention also includes a case where the CPU or the like provided in the first embodiment performs part or all of the actual processing, and the processing realizes the functions of the above-described embodiments.

[0072]

As described above, according to the present invention, a decryption key and an encryption key are generated on the receiving side of digital software, and the digital software encrypted and distributed on the distribution side by the public encryption key is received on the receiving side. In the above configuration, the generated decryption key is stored in the receiving side and is discarded at a predetermined timing thereafter, so that the decrypting key is stored in the receiving side. Only the distributed digital software can be decrypted and used, and after the decryption key is destroyed, the distributed digital software cannot be decrypted. In this way, the distributor distributes the digital software to an unspecified number of users and, for example, determines the timing at which the decryption key is destroyed, thereby preventing unauthorized use by the users. In addition, by preparing devices compatible with this system, the user can purchase and distribute digital software from any distribution side device without having to make a contract or registration with the distributor in advance, Software can be used.

According to another feature of the present invention, there is provided means for attaching use condition information to digital software to be distributed on the digital software distribution side, and the digital software receiving side determines that the use conditions are not satisfied. In this case, the decryption key is discarded, so that the distributor can set the use conditions of the distributed digital software at the time of distribution. For example, when the number of uses of the distributed digital software is set as the use condition, the receiving side can be prevented from repeatedly using the distributed digital software beyond the set number of use conditions.

According to another feature of the present invention, the charge side of the digital software inputs the charge information of the usage fee from the user and notifies the distribution side of the charge. It is possible to collect the usage fee from the user.

[Brief description of the drawings]

FIG. 1 is a block diagram illustrating a schematic configuration of an electronic publishing system according to an embodiment of the present invention.

FIG. 2 is a block diagram illustrating a schematic configuration of a distribution processing device in the electronic publishing system according to the embodiment of the present invention.

FIG. 3 is a block diagram illustrating a schematic configuration of a playback device in the electronic publishing system according to the embodiment of the present invention.

FIG. 4 is a flowchart showing an operation procedure of a PC in the electronic publishing system according to the embodiment of the present invention.

FIG. 5 is a flowchart illustrating a distribution processing procedure of the distribution processing device in the electronic publishing system according to the embodiment of the present invention.

FIG. 6 is a flowchart illustrating a printing procedure of a printer in the electronic publishing system according to the embodiment of the present invention.

[Explanation of symbols]

 1000 Delivery processing device 1001 Order reception unit 1002 Billing processing unit 1003 Authentication processing unit 1004 Publication data 1005 Publication data extraction unit 1006 Encryption processing unit 1007 Delivery publication data transmission unit 2000 Playback device 2100 PC 2200 Printer 2201 Key generation unit 2202 Key information storage Unit 2203 digital signature unit 2204 decryption unit 2205 verification unit 2206 built-in clock 2207 printing unit

Claims (28)

[Claims] 1. A digital software distribution system for distributing digital software, wherein a receiving side of the digital software includes at least an encryption key and key generation means for generating a decryption key capable of decrypting data encrypted with the encryption key; Key information disclosing means for disclosing the encryption key to the outside; key information storage means for storing the decryption key; and distribution digital software encrypted by the encryption key disclosed to the outside, and storing and storing the digital software. Decryption means for decrypting the decryption key stored in the key information storage means, and key information destruction means for destroying the decryption key stored in the key information storage means at a predetermined timing. Key information receiving means for receiving the received encryption key, and digital software distributed with the received encryption key. Digital software distribution system characterized by comprising an encryption means for encrypting. 2. The method according to claim 1, wherein the timing of discarding the decryption key stored in the key information storage means is determined in accordance with the completion of the decryption of the distribution digital software. Digital software distribution system. 3. The receiving side of the digital software further comprises a reproducing unit for reproducing the distributed digital software decrypted by the decrypting unit in a physical form, wherein the decryption key stored in the key information storage unit is stored. The timing of discarding is determined according to the end of normal reproduction of the distribution digital software in a physical form. If reproduction fails, the decryption key is not discarded in accordance with the reproduction failure. 2. The digital software distribution system according to claim 1, wherein: 4. The receiving side of the digital software,
Means for storing a plurality of the decryption keys, means for setting an identifier for each of the plurality of decryption keys, means for storing the identifier of the set decryption key, means for making the identifier public to the outside, and the identifier And a means for obtaining a corresponding decryption key from the digital software. The distributing side of the digital software comprises: means for receiving the published identifier; and means for attaching the received identifier to the distributed digital software. The receiving side obtains a corresponding decryption key from an identifier attached to the distribution digital software, and decrypts the distribution digital software with the obtained decryption key.
A digital software distribution system according to any one of the preceding claims. 5. The distribution side of the digital software,
A means for attaching the use condition information of the digital software to the digital software; and a receiving side of the digital software includes means for checking the use condition information attached to the distribution digital software, and when the use condition is not satisfied. 2. The digital software distribution system according to claim 1, wherein the decryption key stored in the key information storage unit is destroyed. 6. The use condition includes the number of times of use of the distribution digital software, and the receiving side of the digital software includes means for storing the number of times of use of the decryption key, 6. The digital software distribution system according to claim 5, wherein when it is detected that the number of uses set as the use condition has been reached, the decryption key is discarded. 7. The receiving side of the digital software further comprises reproducing means for reproducing the distributed digital software decoded by the decoding means in a physical form, and the reproducing means fails to reproduce the distributed digital software. 7. The digital software distribution system according to claim 6, wherein in the case, the number of times of using the decryption key is not increased. 8. The receiving side of the digital software,
Means for storing a plurality of times of use of the decryption key and the decryption key; means for setting an identifier for each of the plurality of decryption keys; means for storing the identifier of the set decryption key; Means for publishing, and means for determining a corresponding decryption key and the number of times the decryption key is used from the identifier, wherein the digital software distributing side receives the disclosed identifier, and distributes the received identifier. Means for attaching to the digital software, the receiving side of the digital software obtains a corresponding decryption key and the number of times of use of the decryption key from the identifier attached to the distributed digital software, and uses the obtained number of times of use of the decryption key. Destroying the decryption key and decrypting the distribution digital software with the obtained decryption key The digital software distribution system according to any one of claims 5 to 7, wherein: 9. The method according to claim 4, wherein an encryption key corresponding to the decryption key is used as an identifier of the decryption key, and the means for releasing the encryption key is replaced with a means for releasing the identifier. Digital software distribution system as described. 10. The digital software distributing side and the receiving side are connected by a communication line, and the encryption key, the identifier, and the digital software are transmitted by the communication line. 1-9
A digital software distribution system according to any one of the preceding claims. 11. The method according to claim 1, wherein a public key cryptosystem is used, a public key is used as the encryption key, and a secret key is used as the decryption key. Digital software distribution system. 12. A public key cryptosystem and a common key cryptosystem are used in combination, and a public key is used as the encryption key.
Using a secret key as the decryption key, encrypting the digital software with the encryption key by the encryption means, encrypting the digital software with a common key, and encrypting the common key with the encryption key And a step of attaching the encrypted common key to the encrypted digital software. Decryption of the digital software with the decryption key by the decryption means is performed by the encrypted common key attached to the digital software. 11. The method according to claim 1, wherein a key is obtained, a step of decrypting the obtained common key with the decryption key, and a step of decrypting the digital software with the decrypted common key. The digital software distribution system according to claim 1. 13. The receiving side of the digital software has information unique to the receiving side, and includes means for publishing the information unique to the receiving side. The distributing side of the digital software receives the information unique to the receiving side. The digital software distribution according to any one of claims 1 to 12, further comprising means for storing the digital software, wherein the distributor is capable of specifying a side using the distributed digital software. system. 14. The digital software distribution system according to claim 13, wherein the information unique to the receiving side is a digital signature. 15. A system in which the public key cryptosystem according to claim 11 or the public key cryptosystem according to claim 12 is used in combination with a common key cryptosystem, wherein the receiving side of the digital software has a unique function of the receiving side. Means for encrypting information or the digital signature with the secret key, and the distributing side of the digital software comprises means for decrypting the information unique to the receiving side or the digital signature with the public key. The digital software distribution system according to claim 13, wherein 16. The distributing side of the digital software includes means for publishing information of the distributable digital software, and the receiving side of the digital software receives the information of the distributable digital software; Means for presenting possible digital software information to the user; means for the user to select digital software desired to be distributed from the presented information; and The digital software distribution system according to any one of claims 1 to 15, further comprising means for notifying a distribution side. 17. A receiving side of the digital software, comprising: means for receiving billing information of a usage fee from a user; and means for notifying the billing information received to a delivering side of the digital software. The side comprises means for receiving the billing information, means for confirming the validity of the billing information received, and means for collecting a usage fee based on the billing information. 17. The digital software distribution system according to claim 16, wherein when receiving the charge, usage fee is collected by receiving charging information from a user. 18. The digital software distribution system according to claim 17, wherein said billing information is a credit card number of a user. 19. The digital software distribution system according to claim 17, wherein said billing information is electronic money. 20. A receiving unit for the digital software, a reproducing unit for reproducing the distributed digital software decoded by the decoding unit in a physical form, and information on a function of the reproducing unit to a distribution side of the digital software. A means for notifying, wherein the distributing side of the digital software includes means for receiving the information on the reproduction function, and means for selecting an optimal digital software from the received information on the reproduction function. 20. The digital software distribution system according to any one of 1 to 19. 21. A receiving means for the digital software, a reproducing means for reproducing the distributed digital software decoded by the decoding means in a physical form, and information on the function of the reproducing means to a distribution side of the digital software. Means for notifying, the distributing side of the digital software, means for receiving the information on the reproduction function, and, based on the received information on the reproduction function, the digital software to be distributed so as to match the information on the reproduction function. And means for processing.
20. The digital software distribution system according to any one of claims 19 to 19. 22. Key information storage means for storing a decryption key corresponding to the encryption key for decrypting digital software encrypted with the encryption key, and a decryption key stored in the key information storage means. A terminal device comprising: key information discarding means for discarding at a predetermined timing. 23. The terminal according to claim 22, wherein the timing for discarding the decryption key stored in the key information storage means is determined according to the completion of the decryption of the digital software. apparatus. 24. The apparatus further comprising: reproducing means for reproducing the digital software decrypted by the decryption key in a physical form, wherein the key information storing means discards the decryption key stored in the key information storage means. 23. The terminal device according to claim 22, wherein the terminal device is determined in accordance with normal completion of reproducing digital software in a physical form. 25. The apparatus further comprising means for checking use condition information attached to the encrypted digital software, wherein when the use condition is not satisfied, the decryption key stored in the key information storage means is discarded. 23. The terminal device according to claim 22, wherein: 26. The use condition includes the number of uses of the digital software, and when the number of uses of the decryption key has reached the number of uses set as the use condition, the key information storage means. The terminal device according to claim 25, wherein the stored decryption key is discarded. 27. A function of storing a decryption key corresponding to the encryption key for decrypting digital software encrypted with the encryption key in a storage unit, and a decryption key stored in the storage unit. A computer-readable recording medium on which a program for causing a computer to realize a function of discarding at a predetermined timing is recorded. 28. In addition to the functions described in claim 27, the use condition information attached to the encrypted digital software is checked, and if the use conditions are not satisfied, the decryption stored in the storage means is performed. A computer-readable recording medium on which a program for causing a computer to perform a function of destroying a key is recorded.