WO2003081499A1

WO2003081499A1 - License management method and license management apparatus

Info

Publication number: WO2003081499A1
Application number: PCT/JP2003/003160
Authority: WO
Inventors: Harumi Morino; Masataka Okayama
Original assignee: Hitachi, Ltd.
Priority date: 2002-03-22
Filing date: 2003-03-17
Publication date: 2003-10-02
Also published as: JPWO2003081499A1

Abstract

A license management apparatus for allowing a plurality of terminals connected to a home network to utilize received broadcast contents, while securing the copyrights thereof. There are provided broadcast receiving means for receiving broadcasts; license producing means for encrypting the received broadcast contents and producing a license including utilization conditions and a decoding key for decoding the encrypted contents; and home license producing means for producing, from the license, a plurality of home licenses within the range of the utilization condition, whereby the home licenses can be transmitted to a plurality of terminal apparatuses connected via a home network.

Description

Description License management method and license management device

The present invention relates to a technology for protecting the copyright of content using a license. Background art

Services have been proposed for distributing content such as movies and music via communication means such as the Internet and satellite broadcasting. It is important to protect the copyright of content because the data handled in such systems is digitized and easy to duplicate. As one of the means for this, a method of encrypting and distributing content has been proposed. This encrypts the content by, for example, public key cryptography, and at the same time, creates a decryption key for decrypting the encrypted content. Encrypted content cannot be played without the corresponding decryption key, so managing licenses that match the decryption key and its usage conditions prevents unauthorized use of the content, and prevents unauthorized use of the content. The rights of the content authors can be protected.

For example, in the case of digital broadcasting, CAS (Conditional Access System) is widely used as a copyright protection system. The outline of the CAS system in BS (Broadcast Sate 11 ite) digital broadcasting, whose service has been started in Japan, is as follows. The content sending device distributes the work key and the contract information, which are encrypted with the master key shared by the sending device and the receiving terminal, to the receiving terminal, and the receiving terminal that receives it distributes the work key and the contract information. The distributed work key and contract information are retained. This contract information is contract information for each channel or program, and the work key can be said to be charged. Further, in the transmitting device, the content is decrypted with the scramble key, the scramble key is encrypted with the work key, and the content and the content are encrypted. The scramble key is multiplexed and distributed. The receiving terminal receives the scramble key multiplexed on the content and decrypts the content by decrypting the content with the work key held in advance. (“BS Digital Broadcasting Limited Reception System” ARIB STD-B25 1.1 edition, published by The Radio Industry Association of Japan, March 2012 (p. 13 II-ll), hereinafter referred to as Non-Patent Document 1.)

In addition, when distributing content using a communication network such as the Internet, it is as follows: The content is encrypted with the content key, and the content and its usage conditions are encapsulated and distributed. When the receiving terminal reproduces the content that has been encapsulated and distributed, the receiving terminal obtains a ticket including the above content key from the ticket server device using cryptographic communication. Then, the content is decrypted by using the content key (see Patent No. 3216667 (Page 911, FIG. 1), hereinafter referred to as Patent Document 1).

Further, as another method, when the content is decrypted with the content key and distributed, and the receiving terminal reproduces the encrypted content, the user owns the content. A license ticket that includes part of the authority to use the content and a license ticket that includes the content key is obtained from the server using cryptographic communication, and is included in the obtained license ticket. Decrypts the above content using the content key to be decrypted (see Japanese Patent Application Laid-Open No. 2002-3248518 (pages 7-8, FIG. 2)). Patent Document 2).

As another method, the license key is centrally managed in the key storage device, and the license key is stored in the key storage device in response to a content playback instruction from the user. Then, the content is transmitted to the content reproducing apparatus (see Japanese Patent Application Laid-Open No. 2002-51037 (page 8, FIG. 15), hereinafter referred to as Patent Document 3).

In the content distribution service based on the copyright protection technology as described above, it is important to securely manage the license of the distributed content on the terminal.

For this reason, licenses acquired at a certain terminal are generally made available only to that terminal. In other words, the content for the license is available only on the terminal where the license was purchased. Disclosure of the invention

In the above-mentioned conventional technology, the copyright is encrypted by using the encrypted content data, a decryption key (content key) for decrypting the data, and its use conditions (hereinafter referred to as license). In a content distribution service provided by a method that protects content, if a terminal obtains a license for a certain content, the license can be used only by the terminal. Absent. Therefore, the other end When playing back the content at the end, obtain another license for the content from the server or obtain the same license as the above license It will be. However, in the above-mentioned general content distribution service, the license is charged and the license must be re-licensed in order to obtain another license. It is necessary to purchase this, and the user's convenience is lost. In addition, if the other terminal acquires the same license, all terminals will acquire the same license, so that detailed usage condition management for content can be performed.レレ

In Patent Document 2 described above, licenses are managed collectively by a server, and a license ticket containing information indicating a part of content usage conditions is issued in response to a request from a terminal. In this way, efficient management of usage conditions is realized, but if the operator operating the server stops the service, the terminal acquires a license to play back the content. May not be able to do so.

Further, Patent Document 2 discloses a method in which a license can be stored in an external medium and attached to another terminal so that the content can be used in another terminal. However, since it is necessary to store the license in the external media or carry the external media, it is hard to say that user convenience has always been improved.

Further, when a terminal not only uses content distributed over a communication network such as the Internet but also uses digital broadcasting content, the terminal discloses the above Patent Documents 1 and 2. It is necessary to implement the CAS disclosed in Non-Patent Document 1 in addition to the method to be implemented, which increases the cost of the terminal.

It is an object of the present invention to provide a content distribution service in which a distributed content is used among a plurality of terminals connected to a home network. The purpose is to provide a license management method that enables licenses to be shared.

Further, another object of the present invention is to use a distributed content between a plurality of terminals connected to a home network in a content distribution service. A license management device that collectively manages licenses, a terminal device that obtains a license for reproducing content from the license management device, and a license management device that collects licenses from the license management device. A license server that sends licenses to the sense management device and the above terminal devices Equipment and equipment.

Further, another object of the present invention is to provide content distributed using other copyright protection methods such as digital broadcast CAS and DVD CSS (Content Scrambling System). On the other hand, by generating a license for using the content between a plurality of terminals connected to the home network, communication content and broadcast content are generated. An object of the present invention is to provide a license management device that can treat contents and package media contents equally.

In order to solve the above-mentioned problems, the present invention relates to a license management apparatus, comprising: A communication means for transmitting and receiving data via a dedicated communication network or a home network, and a license obtained from the above license server is physically and electrically attacked. The function that authenticates the communication partner and encrypts the communication with the other party so that the communication with other than the legitimate device that has been licensed to use the license is securely stored. And a license control means having a function to perform the operation.

Further, in the license management device, in response to a request from a terminal device connected to the home network, the license control means may execute any license held by the license management device. In response to this, a new license (home license) is generated with a decryption key (content key) and new usage conditions that do not exceed the usage conditions of the license. The in-home license is transmitted to the terminal device using communication means.

Further, in the above license management device, if the license required from the above terminal device does not exist, the license is obtained from the above license server, and the license is obtained. In-house licenses are generated from these and transmitted to the terminal device.

The license server includes communication means for transmitting and receiving data via a public network such as an optical line, a CATV network, and a telephone line, or a dedicated communication network, and a user purchasing the license server. License information holding means for holding the obtained license, and licenses stored in the license information holding means in accordance with a request from the license management device. License for sending to the above license management device Issuance means and are provided.

In addition, the license management device includes a broadcast receiving unit for receiving analog or digital TV broadcast or radio broadcast such as terrestrial broadcast or satellite broadcast, and License generating means for encrypting a broadcast program (content) received by the broadcast receiving means and generating a license from a decryption key for decrypting the content; The license generated by the license generation means is stored by the license control means.

In addition, the terminal device is transmitted from the license management unit to a communication unit for transmitting and receiving data via the home network to and from the license management unit. A home license processing means for receiving a home license and controlling use of a decryption key included in the home license according to a usage condition included in the home license; and A decryption key is obtained from the in-house license processing means, and a decryption means for decrypting and reproducing the content is provided. Further, in the terminal device, the in-home license processing means updates the usage conditions for the amount consumed by the playback means in accordance with the usage conditions included in the in-home license. It was decided.

Further, in the above terminal device, the above-mentioned in-home license processing means may also be used when the usage condition of the in-home license transmitted from the above license management device is not met. When the in-house license is no longer required, the in-house license is transmitted to the license management device, and the in-house license is physically transmitted from the terminal device. It is configured to be deleted at

Further, in the above terminal device, the above-mentioned in-house license processing means may be in a condition which matches the use condition of the in-house license transmitted from the above-mentioned license management device. Transmitting the in-home license to the license management device in response to a user instruction such as stopping content reproduction, and physically deleting the in-house license from the terminal device. And

Further, in the above license management device, a first communication means for connecting to a mobile communication network, and a second communication means for making peer-to-peer connection with the terminal device. Acquiring the license from the license server via the first communication means, generating a home license from the license, and transmitting the license via the second communication means. Then, the in-house license is transmitted to the terminal device. BRIEF DESCRIPTION OF THE FIGURES

FIG. 1 is a diagram showing an example of the configuration of the content distribution system according to the present embodiment.

FIG. 2 is a diagram showing an example of a content distribution system configuration of the present embodiment.

FIG. 3 is a hardware configuration diagram of the license management device of the present embodiment.

FIG. 4 is a hardware configuration diagram of the license control device of the present embodiment.

FIG. 5 is a hardware configuration diagram of the terminal device of the present embodiment. FIG. 6 is a flowchart showing the operation procedure of the present embodiment. FIG. 7 is a sequence diagram showing an example of transmitting the in-home license of the present embodiment from the license management device to the terminal device using encrypted communication.

FIG. 8 is a diagram showing an example of the structure of the license and the in-house license of the present embodiment.

FIG. 9 is a diagram showing an example of the structure of the license and the in-house license of the present embodiment.

FIG. 10 is a configuration diagram of the license generation device and the broadcast receiving device of the present embodiment.

FIG. 11 is a sequence diagram showing an example of transmitting the content key of the present embodiment from the license processing device to the playback device using symbol communication.

FIG. 12 is a diagram showing an example when the license and the in-house license of the present embodiment are restricted.

FIG. 13 is a hardware configuration diagram of the playback device of the present embodiment. FIG. 14 is a configuration diagram of the broadcast receiving device of the present embodiment.

FIG. 15 is a diagram illustrating an example of the structure of the license and the in-house license of the present embodiment.

FIG. 16 is a diagram showing an example of a home license search result display screen of the present embodiment.

FIG. 17 is a flowchart illustrating a procedure for searching for a home license according to the present embodiment.

FIG. 18 is a functional block diagram of the license server of the present embodiment. FIG. 19 is a flowchart showing a procedure for acquiring a home license according to the present embodiment.

FIG. 20 is a diagram illustrating an example of a content reproduction screen according to the present embodiment.

FIG. 21 is a flowchart showing a content reproduction procedure according to the present embodiment.

FIG. 22 is a sequence diagram showing an example when the license of the present embodiment is transmitted from the license server to the license management device using encrypted communication.

FIG. 23 is a flowchart showing a procedure for acquiring a home license according to the present embodiment.

FIG. 24 is a flowchart showing a procedure for acquiring a home license according to the present embodiment.

FIG. 25 is a diagram illustrating a configuration example of a content distribution system according to another embodiment.

FIG. 26 is a hardware configuration diagram of a license management device according to another embodiment.

FIG. 27 is a hardware configuration diagram of a terminal device according to another embodiment. BEST MODE FOR CARRYING OUT THE INVENTION

An embodiment of the present invention will be described with reference to the drawings.

FIG. 1 is a diagram showing an example of a system configuration of a content distribution system (copyright management system) to which the license management method of the embodiment is applied.

In Fig. 1, 10 is a license management device, 20a, 20b and 20c are terminal devices, 31 is a license server, 32 is a content distribution server, and 33 is a porter. Rsabar, 40 is a router, 50 is a wired or wireless home network, 60 is a wired or wireless public or private communication network It is. In the present embodiment, a home network is taken as an example. However, the present invention is not limited to the home network, but may be any network to which a terminal device is connected. Applicable to

The license server, '31, manages licenses for content that is encrypted and distributed to the license management device 10 and the terminal devices 20a to 20c. In response to a request from the license management device 10 It has a function to send a license.

The content distribution server 32 has a function of distributing the decrypted content to the license management device 10 or the terminal device 20. The content key of the content distributed from the distribution server 32 is managed by the license server 31.

The portal server 33 is configured as a so-called web server, in which a user purchases (a license for) content, and the terminal device 20 displays a list of user-purchased content. It has a function for

The router 40 includes a modem function and the like as necessary, and has a function of connecting to the communication network 60 from the license management device 10 or the terminal devices 20a to 20c. . In addition, the router 40 performs an overnight routing so that data can be exchanged between the license management device 10 and the terminal devices 20a to 20c. Function to transmit specific data exchanged by the home network 50 to the communication network 60, a filtering function to control whether or not to transmit the data, and a communication network to the contrary. It also has a filtering function for controlling whether or not to transmit specific data exchanged at 60 to the home network 50.

A home network 50, a network using Ethernet, wireless LAN, IEEE 1394, or the like, that is, between devices connected to the home network 50. Data can be exchanged according to a predetermined procedure.

The communication network 60 is a network composed of an optical line network, a CATV network, a telephone line network, etc., and is connected between devices (including the router 40) connected to the communication network 60. It is possible to exchange data according to a predetermined procedure.

A service center system 30 is composed of at least the license server 31, the content distribution server 32, and the portal server 33. The license server 31, the content distribution server, the server 32, and the portal server 33 are connected to the communication network 60 via a router (not shown). Normal service center system 30 is installed for each business operator that provides content distribution services, and when multiple service center systems 30 are connected to communication network 60 There is also (not shown).

In the content distribution system of the present embodiment, the content is encrypted and distributed from the content distribution server 32. The user Access the portal server 33 from the terminal device 20a, 20b, or 20c in advance and purchase a license for the content that you want to use (view). The purchased license is stored in the license server 31 for each purchased user. When the content for the license purchased by the user is used on the terminal device 20a, if the license management device 10 does not store the license, the license server 31 is used. Obtain and store the license. Then, the license management device 10 generates an in-house license that can be used by the terminal device 20a, and transmits the generated license to the terminal device 20a. The terminal device 20a decrypts and reproduces the content using a decryption key (content key) included in the transmitted in-home license. As a result, the user can use the contents. Details of the operation will be described later.

The license management device 10 can be realized as, for example, a home server, and can be connected to a home gateway (residence gateway) including the functions of the server 40. It can also be realized. Figure 2 shows a system configuration diagram when the system is implemented as a home gateway.

FIG. 3 is a hardware configuration diagram of a license management device 10 to which the present embodiment is applied.

As shown in FIG. 3, the license management device 10 includes a CPU 11, a main memory 12, a communication control device 13, a storage device 14, and a license control device. It comprises a device 15, a license generation device 16, a broadcast receiving device 17, and an input device 19. The components of the license management device 10 are connected by a bus 18 so that necessary information can be transmitted between the components.

The CPU 11 performs a predetermined operation according to a program stored in the main memory 12 or the storage device 14 in advance.

The main memory 12 functions as a work area and is a means for storing necessary programs. For example, RAM is used for the former, and ROM is used for the latter. Etc.

The communication control device 13 communicates information (data) with devices connected to the home network 50 or the communication network 60 via the home network 50 or the communication network 60. Means for transmitting and receiving, for example, a modem, a network adapter, a wireless transmitting / receiving device, and the like. The storage device 14 stores a program for controlling the operation of the license management device 10, and stores the program via the home network 50 and the communication network 60. This is a means for accumulating the content distributed and the content received by the broadcast receiver 17, for example, by using a hard disk (HDD), an optical disk, or the like. realizable.

The license control device 15 stores the license safely in response to a physical or electrical attack, and responds to the content reproduction request from the terminal device, and the license control device 15 executes the license control. Generates an in-house license that can be used, and transmits the in-house license only when communicating with a legitimate device that has been qualified to use the in-house license. This is a means for authenticating the communication partner and encrypting and transmitting data such as in-house licenses. To strengthen security, it is resistant to external attacks.

The license generating device 16 encrypts the broadcast program (content) received by the broadcast receiving device 17 and stores it in the storage device 14, and obtains the decryption key and the decryption key of the content. This is a means for generating a license from the usage conditions specified in advance. The generated license is sent to and stored in the license controller 15 according to the procedure described later. If the content received by the broadcast receiving device 17 is scrambled such as CAS, the license is generated after the scramble is canceled.

The broadcast receiving device 17 is a means for receiving an analog or digital satellite broadcast, an analog or digital terrestrial broadcast, or an analog or digital CATV broadcast. . Analog satellite broadcasting is analog BS broadcasting already implemented in Japan, and digital satellite broadcasting is digital CS broadcasting and digital broadcasting already implemented in Japan. For BS broadcasting and analog terrestrial broadcasting, analog terrestrial TV broadcasting such as NTSC, PAL and SECAM, which has already been implemented around the world, and CATV broadcasting using dedicated cables, As digital terrestrial broadcasting, there is ATSC digital terrestrial broadcasting that is already being implemented in the United States. In this embodiment described later, the broadcast receiving device 15 is a receiving device for analog terrestrial broadcasting. I will explain. Of course, the present invention is not limited to analog terrestrial broadcasting, and the broadcasting receiver 17 may be configured to receive a plurality of broadcasting formats. No.

The input device 19 is required by the user for the license management device 10. It is a means for inputting necessary commands and information.For example, it can be realized by a remote control used in a TV receiver, a keyboard, a mouse, etc. used in a PC. .

If any of the components that make up the license management device 10 is not directly related to the input and output of the data program, remove the device from the configuration in Fig. 3. Can be

Also, in the license management device 10, if it is not necessary to receive TV broadcasts, the broadcast receiving device 17 and the license generation device 16 may be removed from the configuration in FIG. I'm sorry.

The license control device 15 can be realized by software or an eighteenth door. When the license control device 15 is realized by software, the software program that performs the function realized by the license control device 15 is a main memory 12. Alternatively, it is stored in the storage device 14 and executed by the CPU 11. The license is encrypted using, for example, a unique ID (device ID) pre-installed on the license management device 10 and the storage device 14. Stored in

When the license control device 15 is realized by an eighty-one door, for example, it can be realized as one LSI or an aggregate of a plurality of LSIs. Fig. 4 shows a configuration example of the LSI.

In FIG. 4, the CPU 71 controls each part of the license control device 15 in an integrated manner. Further, the CPU 71 has an authentication function and a decryption function according to a program stored in the memory 72. Note U 72 is composed of R Ο R and R A. The ROM includes a program for the CPU 71 to control each part of the license control device 15 in an integrated manner, and a program for realizing the pi * ai, function and the decryption function. Is stored. The RAM functions as a unique query of CPU 71. A license is stored in the non-volatile memory 73. The I / I circuit 74 is an interface through which each part in the license control device 15 performs evening communication with an external device via the bus 18.

Further, the license control device 15 is realized by an IC card mounted with the LSI shown in FIG. 4 or a memory card which can be attached to and detached from the license management device 10. This is also possible.

FIG. 10 is a diagram showing a configuration example of the license generation device 16 and the broadcast reception device 17. 2. The broadcast receiving device 17 includes a 10 circuit 96, a resolution conversion / compression unit 97, an AZD conversion unit 98, and a tuner unit 99. The tuner section 99 demodulates analog TV broadcast (video and audio) data that has been modulated. The A / D conversion section 98 digitizes the analog data demodulated by the tuner section 99. The resolution conversion / compression unit 97 changes the resolution of the data digitized by the AZD conversion unit 98 to a predetermined size: Compress with a predetermined compression format. The IO circuit 96 communicates with the external device via the bus 18 via the data compressed by the resolution conversion compression section 97, the resolution conversion compression section 97, the AZD conversion section 98, and the tuner. It is an interface for communicating control data of section 99.

When the broadcast receiving device 17 receives a digital broadcast, the configuration shown in FIG. 14 is used. The tuner section 9 9 ′ demodulates the modulated digital TV broadcast (video and audio) data. The descrambling unit 90 cancels the scrambling when the data received by the tuner unit 99 'is scrambled such as CAS.

The I / O circuit 96 ′ is connected to an external device via the bus 18 to output data of the descrambling section 90, the descrambling section 90 and the tuner section 9 ′. Interface for communication of control data

The license generation device 16 includes an IZO circuit 91, a license generation unit 92, a content key generation unit 93, and an encryption circuit 94. The encryption circuit 94 encrypts data using the key generated by the content key generation unit 93. The content key generation unit 93 generates a content key used in the encryption circuit 94. The license generation unit 92 includes an IZ ら circuit 91 that generates a license from the content key generated by the content key generation unit 93 and usage conditions determined in advance. Is used to communicate the license generated by the license generation unit 92 and the data decrypted by the encryption circuit 94 to and from an external device via the bus 18. It is an interface. The I / O circuit 91, the license generation unit 92, the content key generation unit 93, and the encryption circuit 94 include, for example, one LSI or a set of multiple LSIs. It can also be realized as a body.

The data (content) received by the broadcast receiving device 17 is sent to the license generation device 16 via the node 18, but the node 1 receives the data. In order to prevent unencrypted content from flowing to the license generation device 16, the license generation device 16 and the broadcast reception device 17 are directly connected with the connection line 95, and the connection line 95 is connected. Content can also be sent to the license generator via In this case, there is no need to pass unencrypted content to the bus 18, thereby improving the security of the content. Further, the license generation device 16 and the broadcast receiving device 17 may be realized as one device.

FIG. 5 is a hardware configuration diagram of the terminal device 20 to which the embodiment is applied.

As shown in FIG. 5, the terminal device 20 includes a CPU 21, a main memory 22, a communication control device 23, a storage device 24, and a home license processing device 25. , A playback device 26, a display device 27, and an input device 28. The components of the terminal device 20 are connected by a bus 29 so that required information can be transmitted between the components.

The CPU 21 performs a predetermined operation in accordance with a program stored in the main memory 22 or the storage device 24 in advance.

The main memory 22 functions as a work area and is a means for storing necessary programs, such as RAM for the former and RAM for the latter. This can be realized by ROM or the like.

The communication control device 23 is means for transmitting / receiving information (data) to / from a device connected to the home network 50 via the home network 50 as well. This is realized by a modem, a network adapter, a wireless transmission / reception device, and the like.

The storage device 24 stores a program for controlling the operation of the terminal device 20, and stores content distributed via the home network 50 and the communication network 60. This is a means for accumulating contents, and can be realized by, for example, a hard disk (HDD), an optical disk, or the like.

The in-home license processing device 25 receives the in-house license transmitted from the license management device 10 and manages the in-home license according to the usage conditions included in the in-home license. In response to a request from the playback device 26, the content key included in the home license is transmitted to the playback device 26. For example, if the usage condition included in a certain home license is “can be played three times”, the playback device 26 responds using the content key included in the home license. If the content to be reproduced is reproduced three times, or if the in-home license processing device 25 transmits the content key to the reproducing device 26 three times, the in-home license is The in-home license processing device 25 sends the in-home license to the license management device 10 and recognizes the in-home license as an in-home license. Physically erased from license processor 25. Also, if necessary, keep in-house licenses secure against physical and electrical attacks.

The playback device 26 receives the content key for decrypting the encrypted content included in the home license from the home license processing device 25 and stores the content key in the storage device. The encrypted content stored in the device 24 is decrypted, and if the decrypted content is compressed, it is decoded (decompressed) and decoded. The transmitted content is transmitted to the display device 27. Also, the content that the playback device 26 decodes and decodes is not only the content stored in the storage device 24 but also the content of the license management device 10. The content stored in the storage device 14 may be received via the home network 50 or transmitted from another device connected to the communication network 60. The content to be provided may be received via the home network 50 and the communication network 60.

The display device 27 is a means for displaying the content decoded by the playback device 26 and information for responding to the user's operation. The display device 27 includes a brown tube, a CRT, and a liquid crystal display. It can be realized by play, PDP, projector, speaker, headphone, etc.

The input device 28 is a means for a user to input necessary commands and information to the terminal device 20. For example, the input device 28 is used for a remote control used in a TV receiver or used in a PC. This can be achieved by using a keyboard, mouse, or the like.

If any of the components that make up the terminal device 20 does not have a direct relationship with data or program input / output, the device can be removed from the configuration in Fig. 5. You.

The in-house license processing device 25 can be realized by software or hardware. When the in-home license processing device 25 is realized by software, the software program that performs the function realized by the in-home license processing device 25 is: It is stored in the main memory 22 or the storage device 24, and is executed by the CPU 21. The license is, for example, pre-installed on the terminal device 20. It is encrypted using the unique ID (device ID) and the like stored in the storage device 24.

When the in-home license processing device 25 is realized by hardware, for example, it can be realized as one LSI or an aggregate of a plurality of LSIs. The LSI can be realized by the configuration shown in FIG.

Also, the in-home license processing device 25 can be realized by an IC card mounted with the LSI shown in FIG. 4 or a memory card that can be attached to and detached from the terminal device 20. It is possible.

Further, the playback device 26 can also be realized by software or hardware. When the playback device 26 is implemented by software, the software program that performs the functions implemented by the playback device 26 is stored in the main memory 22 or the software. It is stored in the storage device 24 and executed by the CPU 21.

When the playback device 26 is realized by hardware, for example, it can be realized as one LSI or an aggregate of a plurality of LSIs. Fig. 13 shows a configuration example of the LSI.

In FIG. 13, the CPU 81 controls the components in the playback device 26 in a comprehensive manner. The CPU 81 has an authentication function and a decryption function according to a program stored in the memory 82. The memory 82 is composed of ROM and RAM. The ROM stores a program for the CPU 81 to control each part of the playback device 26 as a whole, and a program for realizing an authentication function and a decryption function. . The RAM functions as a work area of CPU81. The non-volatile memory 83 stores a content key.

The I / O circuit 84 is an interface through which each unit in the playback device 26 performs data communication with an external device via the bus 29. The decryption unit 85 uses the content key stored in the non-volatile memory 83 or the content key obtained from the home license processing device 25, This is a means for decrypting the encrypted content received via the I / O circuit 84. The decoding unit 86 is a means for decoding the content decrypted by the decoding unit 85 if the content is compressed.

Also, the content reproduced by the reproducing device 26 is sent to the display device 27 via the source 29, but is not encrypted by the source 29. To prevent the contents from flowing, the playback device 26 and display device 27 Can be directly connected, and the content can be sent to the display device 27 via this. In this case, there is no need to pass unencrypted content to the nos 29, thereby improving the security of the content. The license management device 10 shown in FIG. 3 may include a home license processing device 25, a playback device 26, and a display device 27 constituting the terminal device 20. No. In this case, the license management device 10 also has a function as a terminal device.

The license server 31 shown in FIG. 1 or FIG. 2 can be constructed by a general PC. Figure 18 shows a functional block diagram of the license server 31.

As shown in FIG. 18, the license server 31 includes a communication control unit 201 as a software module executed by a CPU included in the license server 31. It comprises an authentication unit 202, a license issuing unit 203, and an API unit 204. Further, the license server 31 stores the authentication information 205 and the license information 206 in a storage device such as a hard disk.

In the communication control unit 201, the authentication unit 202, the license issuing unit 203, and the API unit 204 communicate with other devices (such as the license management device 10 and the portal server 33). It has the function of generating and interpreting communication protocols and messages as much as possible.

The authentication unit 202 has a function of performing user authentication or device authentication using the authentication information 205 in communication with the license management apparatus 10. Further, as disclosed in FIG. 3 of Patent Document 2, by associating a user ID with a device ID, a user ID is derived from the device ID by device authentication. You can do that too.

In communication with the license management device 10, the license issuing unit 203 matches the request from the license management device 10 out of the license information 206 and is authenticated. It has a function of transmitting to the license management device 10 the license purchased by the user who has been authenticated in the section 202 or the usage conditions contained in the license.

The API section 204 provides an API for updating the contents of the authentication information 205 and the license information 206 from outside the license server 31. For example, processing such as adding, deleting, updating, and searching for user information for authentication information 205 and adding, deleting, updating, and searching for a user purchase license for license information 206 is performed. Implement the API to be realized. The authentication information 205 stores, for each user, a user ID, user information such as a name and an address, a device ID associated with the user ID, and the like.

The license information 206 stores the license purchased by each user for each user.

Next, the operation in the present embodiment will be described with reference to the drawings. First, licenses and home licenses are explained. Figure 15 shows an example of the structure of a license and a home license.

The license 100 shown in Fig. 15 (a) is a content ID that holds information (content ID of the content) indicating which content the license corresponds to. 101, a content key 102 for holding a decryption key of the encrypted content specified by the content ID held by the content ID 101, and a content ID 1 It consists of usage conditions 105 that hold the usage conditions of the encoded content specified by the content ID held by 01. Further, the usage condition 105 includes an area 106 for holding the viewing expiration date indicating the time limit for viewing the content, and an area for holding the number of viewing times indicating the number of times the content can be viewed. It consists of 107 and an area 108 that holds the maximum number of in-house licenses that can be generated simultaneously from the license (the maximum number of simultaneous licenses).

The in-home license 110 shown in FIG. 15 (b) is a content that holds information (content ID of the content) indicating to which content the in-home license corresponds. ID 1 1 1 1, content key 1 1 2 holding the decryption key of the encoded content specified by the content ID held by the content ID 1 1 1 1, and content It is composed of usage conditions 115 that hold the usage conditions of the encrypted content specified by the content ID held by ID 111. In addition, the usage condition 1 15 holds an area 1 16 for holding the viewing period indicating the period for viewing the content, and a viewing count indicating the number of times the viewer can view the content. And an area 118 that holds the maximum number of in-house licenses (maximum number of simultaneous issuances) that can be generated simultaneously from the license.

The terms of use of the license and the in-home license shown in Fig. 15 are, for example, the viewing expiration date, the number of times of viewing, and the maximum number of simultaneous issuances. For example, if you set the viewing expiration date, The time may be divided into time and viewing end date, or the total viewing time may be used. In addition, there may be no use conditions for the number of times of viewing, and no use conditions for the viewing expiration date and the maximum number of simultaneous publications.

In addition, the license 100 existing on the license management device 10 is stored in a nonvolatile memory 73 of the license control device 15 or is stored in a non-volatile memory. It is stored encrypted in the storage device 14 and managed so that it cannot be accessed from outside.

The home license 110 existing on the ifi terminal device 20 is stored in the non-volatile memory 73 of the home license processing device 25, or may be stored in the non-volatile memory 73. It is encrypted and stored in the storage device 24 and managed so that it cannot be accessed from outside.

Next, a description will be given of a process when the user views the purchased content.

FIG. 6 is a flowchart showing the procedure in the terminal device 20 when viewing the content purchased by the user.

First, the user selects the content (encrypted) desired by the user (step S100). At this time, in order to select the content to be watched by the user, the terminal device 20 is connected to the storage device 24 and the storage device 14 of the license management device 10. A list of stored 3 contents or a list of contents provided by the portal server 33 is displayed on the display device 27. Each content stored in the storage devices 14 and 24 and each content provided by the port server 33 include a content ID and a content for identifying the content. Information indicating the titles and contents of the contents (meta-settings) is attached, and the terminal device 20 is connected to each content.

By displaying the monitor on the display device 27, the user can use the input device 28 to select and indicate the content to be viewed. The content specified by the user can be specified by the content ID of the content. Also, when the data includes the URL of a license server (Uniform Resource Locator 0r) for managing the license for the content V, the display device 27 displays Figure 16 shows an example of the displayed screen.

In Figure 16, in each content, the content title 301, the content of the content (such as a bite digest) 302, and the content Terms and conditions included in the license Information 304 as to whether or not you purchased a license is displayed. For the title 301 and the content 302, information included in the metadata of the content is displayed. The usage conditions 303 and the purchase information 304 are displayed based on the result of the terminal device 20 communicating with the license management device 10. In response to the displayed result, the user selects the content to be viewed using the input device 28 (for example, the information of the selected content is displayed in reverse video). The reproduction of the content is started by instructing the button 305. When the cancel button 306 is instructed, the content is not played back and returns to the initial state.

Figure 17 shows the processing flowchart for acquiring the information (usage conditions and purchase information) for displaying the screen shown in Fig. 16.

First, the terminal device 20 acquires the content ID included in the meta data (step S101), and the home license for the content indicated by the content ID is changed to the terminal device 20. A search is made as to whether or not it exists (step S102). In other words, the value indicated by the content ID 111 of the in-house license managed by the in-house license processing device '25 5 is compared with the content ID, and the matched in-house license is matched. If there is a sense, it means that it exists.

If there is a matching in-house license, the usage conditions are extracted from the in-house license (step S103).

If there is no home license for the content indicated by the content ID in the terminal device 20, the license management device 10 is sent to the license management device 10 via the home network 50. Sends information to instruct license search. At this time, the information transmitted to the license management apparatus 10 includes, in addition to the content ID, a user ID (or a user ID and password) required for user authentication. This includes authentication data such as information (device ID) unique to the terminal device 20 required for device authentication and the URL of the license server included in the metadata of the content as necessary. And can be.

Here, the address of the license management device 10 required for the terminal device 20 to transmit information can be derived, for example, as follows. If the home network 50 is configured as an IP (Internet Protocol 1) network, the terminal device 20 is connected to a device connected to the home network 50. On the other hand, a broadcast message for finding the license management device 10 Send Upon receiving this, the license management device 10 returns a response to the terminal device 20 of the transmission source, so that the terminal device 20 knows the IP address of the license management device 10. Can be done. Further, the address of the license management device 10 may be held in the terminal device 20 in advance.

Subsequently, in the license management device 10, the license control device 15 performs an authentication process using the information transmitted from the terminal device 20 (step S104). If the authentication data transmitted from the terminal device 20 is the user ID, the user authentication is performed, and if the authentication data is the device ID, the device authentication is performed. Here, the authentication processing includes information previously stored in the nonvolatile memory 73 of the storage device 14 or the license control device 15 and the terminal device. This is done by comparing the authentication data transmitted from 20 with the authentication data.

That is, the user ID or device ID transmitted from the terminal device 20 is stored in the nonvolatile memory 73 of the storage device 14 or the license control device 15. If so, the user ID or device ID transmitted from the terminal device 20 or the storage device 14 or the license control device 15 is transmitted. If the exclusion user ID list or the exclusion device ID list stored in the non-volatile memory 73 in the above does not exist, the authentication has succeeded. Here, the excluded user ID list is a list of user IDs of users whose services have been suspended, and the excluded device list is a communication partner. This is a list of device IDs held by inappropriate devices.

If the authentication is successful in step S104, the license control device 15 transmits a license to the content indicated by the content ID included in the information transmitted from the terminal device 20. It is searched whether the license exists in the license controller 15 (step S105). That is, the value indicated by the content ID 101 of all licenses managed by the license controller 15 is compared with the content ID, and if there is a matched license. If they exist.

If there is a matched license, the usage conditions are extracted from the license (step S106).

If the license for the content indicated by the content ID does not exist in the license management device 10, the license server transmitted from the terminal device 20. The license server 31 having the address described in the URL is licensed via the communication network 60 to the license server 31. Sends information to instruct a search for a connection. At this time, the information transmitted to the license server 31 includes, in addition to the content ID described above, a user ID (or a user ID and a pass. Mode) required for user authentication. The authentication data such as information (device ID) unique to the license management device 10 required for device authentication and the device ID of the terminal device 20 can be included as necessary.

Subsequently, in the license server 31, the authentication unit 202 performs an authentication process using the information transmitted from the license management device 10 (step S 107). Authentication data sent from the license management device 10 — If the evening is a user ID, user authentication is performed; if it is a device ID, device authentication is performed. Here, the authentication processing is performed by comparing information previously held by the license server 31 with authentication data transmitted from the license management apparatus 10. Done. That is, if the user ID or device ID transmitted from the license management device 10 is held by the license server 31, or if the license is If the user ID or device ID transmitted from the management device 15 is not in the excluded user ID list or excluded device ID list held by the license server 31, authentication is successful. It is done. Also, in the case of only device authentication, the user ID can be derived from the device ID as described above.

If the authentication is successful in step S107, the license for the content indicated by the content ID included in the information transmitted from the license management device 10 is obtained. The license issuance unit 203 is stored in the license information 206 of the license server 31 and determines whether the license is present in the purchase license of the user indicated by the user ID. Search (step S108). In other words, of the licenses held in the license information 206, the value indicated by the content ID 101 of all licenses purchased by the user indicated by the user ID above Is compared with the content ID, and if there is a matched license, it is determined that the license exists.

If there is a matched license, the license issuing unit 203 extracts the use conditions from the license (step S109), and The use condition is transmitted to the license management device 10 that is the request source (step S110). At this time, if the authentication fails in step S107, the processing in steps S108 and S108 is not performed and the authentication fails. Send information to the effect. In addition, If a matching license does not exist in step S108, information to that effect is transmitted.

Subsequently, the license management device 10 checks the use conditions obtained in step S105 or the information transmitted from the license server 31 (use of the licenses). A condition or authentication failure information or information that a license does not exist) is transmitted to the requesting terminal device 20 (step S111). At this time, if the authentication fails in step S104, the processing in steps S105 and S106 is not performed and the authentication fails. Information to the effect. Then, the terminal device 20 generates data to be displayed on the display device 27 based on the information of the content indicated by the content ID (step S112). Here, when there is no license for the content indicated by the above content ID (the information transmitted from the license management device 10 indicates that the license does not exist). In this case, it is determined that the user has not purchased the content yet, and data indicating that the content has not been purchased is stored in the purchase information 304. If the information transmitted from the license management device 10 is information indicating that the authentication has failed, the information is displayed on the display screen 27 and the processing is stopped.

Further, the processing from step S 101 to step S 112 is stored in the storage device 24 of the storage device 24 and the license management device 10. (Step S113), and finally, a screen as shown in FIG. 16 is displayed on the display device 27 (Step S114). End the processing.

In step S110, the use condition extracted from the license is transmitted, but the license itself may be transmitted. In this case, the license management device 10 stores the received license in the non-volatile memory 73 of the license control device 15 or stores it in the storage device 14. Store it encrypted. Then, in step S111, the use condition is extracted from the license, and the use condition is transmitted to the terminal device 20.

Returning to FIG. 6, next, when the user selects the content desired to be viewed from the screen shown in FIG. 16, a home license for the content is acquired (step S200). Figure 19 shows a processing flowchart for acquiring a home license.

First, the terminal device 20 transmits the metadata of the content selected by the user. — Acquire the content ID included in the evening (step S201), and check whether the terminal device 20 has a home license for the content indicated by the content ID. Search for an option (step S202). In other words, the value designated by the content ID 111 of the in-house license managed by the in-house license processing device 25 is compared with the content ID, and the matched in-house license is compared. If there is a sense, it means that it exists.

If there is a matching home license, the process ends because the home license has already been acquired.

If there is no home license for the content indicated by the content ID in the terminal device 20, the license management device 10 is sent to the license management device 10 via the home network 50. Sends information to instruct the customer to obtain a home license. At this time, the information transmitted to the license management device 10 includes, in addition to the content ID described above, the required usage conditions, a user ID required for user authentication (or a user ID required for user authentication). Authentication data such as information unique to the terminal device (device ID) necessary for device authentication (device ID) and the URL of the license server included in the metadata of the content are required as necessary. Can be included. The required usage conditions are the values set in the usage conditions 15 5 (viewing period 1556, number of views 1557, etc.) included in the in-home license to be acquired. The required use condition can be specified by the user using the input device 28 each time, or can be determined in advance.

Subsequently, in the license management device 10, the license control device 15 performs an authentication process using the information transmitted from the terminal device 20 (step S203). If the authentication data transmitted from the terminal device 20 is a user ID, user authentication is performed, and if the authentication data is a device ID, device authentication is performed. Here, the authentication processing means the information previously stored in the non-volatile memory 73 of the storage device 14 or the license control device 15 and the terminal. This is performed by comparing the authentication data transmitted from the device 20 with the authentication data. That is, the user ID or device ID transmitted from the terminal device 20 is stored in the nonvolatile memory 73 of the storage device 14 or the license control device 15. If it is stored, the user ID or device ID transmitted from the terminal device 20 or the storage device 14 or the license is transmitted. If the exclusion user ID list stored in the non-volatile memory 73 of the controller 15 or the exclusion unit ID list does not exist, the authentication is performed. The testimony is successful.

If the authentication is successful in step S203, the license control device 15 checks the content indicated by the content ID included in the information transmitted from the terminal device 20. It is searched whether or not the license exists in the license control device 15 (step S204). In other words, the value indicated by the content ID 101 of all licenses managed by the license controller 15 is compared with the content ID, and the license that matches If there is, it means that it exists.

If the license for the content indicated by the above content ID does not exist in the license management device 10, it is described in the URL of the license server transmitted from the terminal device 20. It sends information to the license server 31 having an address to instruct the license acquisition via the communication network 60. At this time, the information sent to the license server 31 includes, in addition to the above-mentioned content ID, a user ID (or user ID and password) required for user authentication and device authentication. Authentication data such as necessary information (device ID) unique to the license management device 10 and the device ID of the terminal device 20 can be included as necessary.

Subsequently, in the license server 31, the authentication unit 202 performs an authentication process using information transmitted from the license management device 10 (step S 205). If the authentication data transmitted from the license management device 10 is the user ID, the user authentication is performed, and if the authentication ID is the device ID, the device authentication is performed. Here, the authentication processing is to compare the information held by the license server 31 in advance with the authentication data transmitted from the license management device 10. It is performed by. In other words, if the user ID or device ID transmitted from the license management device 10 is held by the license server 31, or if the license management If the user ID or device ID transmitted from the device 15 is not in the excluded user ID list or the excluded device ID list held by the license server 31, authentication is successful. That's it. Also, in the case of only device authentication, the user ID can be derived from the device ID as described above.

If the authentication is successful in step S205, the license for the content indicated by the content ID included in the information transmitted from the license management device 10 is displayed. The license is held in the license information 206 of the license server 31 and is indicated by the above user ID. The license issuing unit 203 searches whether or not the license exists in the user's purchase license (step S206). In other words, of the licenses stored in the license information 206, the value indicated by the content ID 101 of all licenses purchased by the user indicated by the user ID above Is compared with the content ID. If there is a matched license, it is determined that the license exists.

If there is a matched license, the license issuing unit 203 sends the license to the license management apparatus 10 that has issued the request (step Step S207). At this time, the transmitted license is deleted from the license information 206. Also, if the authentication fails in step S205, the processing in step S206 is not performed, and information indicating that the authentication has failed is transmitted. If there is no matching license in step S206, information to that effect is transmitted.

Subsequently, if the information transmitted from step S207 is a license, the license management device 10 uses the license control device 15 to execute the license. Is stored in the nonvolatile memory 73 (step S208). In addition, from the license matched in step S204 or the license stored in step S208, the in-house license that meets the above-mentioned required use conditions is obtained from the license stored in step S208. An in-house license is generated (step S209), and the in-home license is transmitted to the terminal device 20 that has issued the request (step S210). At this time, if the authentication fails in step S203, the processing in steps S2-4 and S208 is not performed and the authentication fails. Submit information. When information other than the license is transmitted in step S207, the information is transmitted.

If the information transmitted in step S210 is a home license, the terminal device 20 stores the non-volatile memory 73 in the home license processing device 25. (Step S211), and the processing ends.

As described above, when the user views the content for the first time after purchasing the license, the license is transmitted from the license server 31 to the license management device 10 and is transmitted to the home license. Issue an Sense. After that (for the second time or later), simply issue a home license from the license management device 10, and licenses are centralized by the license management device 10. It becomes possible to manage it. Also, usually The service center system 30 is set up for each service provider that provides content distribution services, and a plurality of service center systems 30 (license servers, '31) are installed on the communication network 60. May be connected. In this case, licenses purchased from a plurality of license servers can be collectively managed by the license management device 10, so that license management is facilitated.

Also, in this example, the license is transmitted to the license management device 10 when the content is first viewed, but the license management device 10 immediately transmits the license to the license management device 10 after purchasing the license. You may send a license.

In step S209, a home license is generated from the license. Next, generation of the home license will be described with reference to FIGS.

In FIG. 8, (a) is the license when the user purchases, (b) is the license after the in-home license shown in (c), and (c) is the license shown in (a). This shows an example of each of the in-house licenses generated from these.

The license 100 shown in Fig. 8 (a) is the usage condition 105, the viewing expiration date 106 is 'unlimited', the viewing count 107 is 'unlimited', and the maximum number of simultaneous issuances 1 0 8 is an example of '2'. In step S209 in FIG. 19, a method of generating a home license 110 from the license 100 shown in FIG. 8A will be described using an example. The in-house license is generated by the license control device 15 of the license management device 10. As a request use condition transmitted from the terminal device 20, if the viewing expiration date is set to 12:00 on January 4, 2001, and the number of viewing times is 3 times, the license is 10. 0 means that the viewing expiration date 106 is 'unlimited', the viewing count 1 107 is 'unlimited', and the maximum number of simultaneous issuances is '2'. The home license 1 110 shown in Fig. 8 (c) is generated. In Fig. 8 (c), the maximum number of simultaneous issuances 1 18 is '0', and it is not possible to generate another in-house license from this in-house license 110. No. By setting the maximum number of concurrently issued home licenses to '0' in this way, it is possible to prevent the in-home license from being generated indefinitely.

After the in-house license 110 is generated, the license 100 becomes as shown in Fig. 8 (b), and the viewing expiration date 106 of the usage conditions 105 and the viewing expiration date are displayed. 1107 does not change, but the maximum number of simultaneous issuances 1108 changes from "2" to "1". This is a license from the license This means that a license can be generated, which means that the in-home license can be generated for the value held by the maximum number of simultaneous issuances 108, and that multiple terminal devices can be generated. Can be used to view the same content.

In-house licenses cannot be generated for licenses with the maximum number of simultaneous issuances '0' of '0'. In this case, an error to that effect is given in step S210 of Fig. 19. Submit information.

Further, in this example, the viewing expiration date is requested as a request use condition from the terminal device 20.However, if the license control device 15 exceeds the reproduction time of the content, for example, If the time required to play the content from the beginning to the end is two hours, the license control unit 15 sets the time two hours after the current time to the home license 110 The viewing expiration date can be set to 1 16.

Another example will be described with reference to FIG. The license 100 shown in Fig. 9 (a) is a license that operates only the number of viewings 107 as the usage condition 105. In FIG. 9, (a) is the license at the time of purchase by the user, (b) is the license after the in-home license shown in (c), and (c) is the license shown in (a). This is an example of a home license generated from a license.

The license 100 0 shown in FIG. 9 (a) is an example in which the use condition 105 is set and the number of views 1 107 is set to “10”. In step S209 in FIG. 19, the method for generating the in-house license 110 from the license 100 shown in FIG. 9 (a) will be described using an example. explain. If the number of viewings is set to '8' as a request use condition transmitted from the terminal device 20, the number of viewings of the license 100 does not exceed '10' held by the number of viewings 107 of the license 100. Then, a home license 110 as shown in FIG. 9 (c) is generated. After the home license 110 is generated, the license 100 becomes as shown in Fig. 9 (b), and the number of views 1 07 of the usage condition 105 becomes '2'. Become. This means that the license can generate one in-house license with the number of views 1 17 of '2', or the number of views 1 17 is '1'. Means that two in-house licenses with a value of 'can be generated. In other words, depending on the value held by the number of viewing times 117 of the in-home license 110 generated from the license 100, multiple terminals can view the same content. Is possible.

On the other hand, if the required usage condition is the number of views '20', Since the number of views of the license 100 exceeds the value of '10' held by the number of views 107, it is not possible to generate a home license 110 of the number of views of '20'. In this case, in step S209 of FIG. 19, a home license 110 with a viewing count of '10' is generated or a home license cannot be generated. This is called an error.

Returning to FIG. 6, next, the content is reproduced using the acquired in-house license (step S300). At this point, the in-house license processing unit 25 holds the necessary in-house license. In order to play back the content, it is necessary to set the content key included in the home license in the decryption unit 85 of the playback device 26. In reproducing the content, the terminal device 20 displays a screen as shown in FIG. 20 on the display device 27. Reference numeral 410 denotes a content display screen on which the reproduced content is displayed. Reference numeral 402 denotes a content reproduction start button, and reference numeral 4003 denotes a content reproduction end button. Figure 21 shows a processing flowchart for playing back content.

First, the user gives an instruction for content reproduction (step S301). For example, the content reproduction start button 402 in FIG. 20 is designated by the input device 28. When there is a content playback instruction, the playback device 26 obtains the content ID of the content selected in step S200 (step S302), and the home. Information is transmitted to the license processing device 25 via the bus 29 to instruct the content indicated by the content ID to acquire the content included in the in-home license for the content indicated by the content ID. At this time, the information transmitted to the in-home license processing device 25 includes, in addition to the content ID, information unique to the playback device 26 (device ID) required for device authentication. Authentication data can be included as needed.

Subsequently, the in-home license processing device 25 performs a device authentication process using the information transmitted from the playback device 26 (step S303). Here, the device authentication processing is information stored in advance in the non-volatile memory 73 of the storage device 24 or the in-home license processing device 25. This is performed by comparing authentication data transmitted from the playback device 26 with the authentication data. That is, the device ID transmitted from the playback device 26 is stored in the non-volatile memory 73 of the storage device 24 or the home license processing device 25. If it is, the device ID transmitted from the playback device 26 or the non-volatile memory in the storage device 24 or the home license processing device 25 is used. If it is not in the excluded device ID list stored in 73, it means that the authentication was successful.

If the authentication is successful in step S303, the condition for the ij included in the in-home license for the content indicated by the content ID is checked, and the in-house license is checked. It is determined whether or not is available (step S304). For example, if the in-house license is the in-house license 110 shown in Fig. 8 (c), the current time is from 12:00 on February 4, 2001 Previously, the content could be viewed up to three times, so the in-house license is judged to be usable. Also, if the current time is past 12:00 on February 4, 2001, or if the number of views 1 17 is '0', Is determined that the in-house license is not available, transmits information to that effect to the playback device 26, and the terminal device 26 displays the information to that effect on the display device 27. (Step S305), the processing ends.

If it is determined in step S304 that the in-house license is available, the content held in the content key 112 from the in-house license is determined. The key is extracted and transmitted to the playback device 26 (step S305).

Then, the reproducing device 26 sets the content key transmitted from the in-home license processing device 25 in the decrypting portion 85 (step S307), and Start playback (step S308). Here, since the content to be reproduced is encrypted, the encrypted content is decrypted by the decryption unit 85 and reproduced by the decryption unit 86. It is displayed on the content playback screen indicated by 0. At this time, the encrypted content is transferred from the storage device 24 of the terminal device 20 to the playback device 26 via the node 29. The decoded content may be stored on a portable medium such as a DVD. In this case, the terminal device 20 is provided with a portable medium reading device. Then, the data is transferred from the reading device to the reproducing device 26 via the bus 29. In addition, the encrypted content is stored in the storage device 14 of the content distribution device, the license management device 10 or the license management device 10. However, in this case, the data is transferred to the playback device 26 via the communication network 60 and the home network 50, the communication control device 23, and the bus 29. At this time, since the transfer rate of the encrypted content is not constant depending on the communication state, the encrypted content is temporarily buffered in the main memory 22 or the storage device 24. In some cases, this is done. When the user designates the content playback end button shown in FIG. 20 with the input device 28, the content playback is terminated, and information indicating that the content playback has been completed is transmitted to the home. The license is sent to the license processing device 25 (step S309).

Subsequently, the in-home license processing device 25 updates the use condition of the in-home license having the content key transmitted to the playback device 26 (step S310). For example, if the in-house license is the in-house license 110 shown in Fig. 8 (c), since the reproduction has been completed once, the value held by the number of views 1 17 It is reduced to '2' (updated) and stored in the non-volatile memory 73 of the in-home license processing device 25. Then, information indicating that the use condition updating is completed is transmitted to the playback device 26 (step S311), and the playback device 26 deletes the screen shown in FIG. The process is performed, and the process ends.

Returning to FIG. 6, next, post-processing of the in-home license that has become unnecessary after the content reproduction is completed is performed (step S400). Here, as post-processing, the terminal device 20 (the in-home license processing device 25) transmits the in-house license to the license management device 10 that is the source of the in-house license. The license is sent (returned), and the license management device 10 (license control device 15) updates the usage conditions of the license that generated the home license. For example, by returning the in-house license 110 shown in FIG. 8C to the license management device 10, the license 100 0 shown in FIG. 8B can be returned. Can be returned to the state of license 100 shown in FIG. 8 (a).

Returning the in-home license here means that if the usage conditions 1 15 of the in-house license 110 become unavailable, the in-house license 110 is not required. In this case, the in-home license on the terminal device 20 is transmitted to the license management device 10 and the in-home license is physically erased from the terminal device 20. You. When the terminal device 20 returns the home license 110, the user may instruct the return using the input device 28, or the terminal device 20 may return the content. It is also possible to detect that the reproduction of the music has ended and return it automatically. It may be returned automatically when the viewing expiration date 1 16 has passed or when the viewing count 1 17 has reached '0'. The transmission or physical erasure of the in-house license is performed by the program stored in the memory 72 or the non-volatile memory 73 in the in-house license processing device 25 of the terminal device 20. This is realized by the CPU 71 executing the program. If the terminal device 20 is always connected to the home network 50, it is possible to automatically return the home license 110 as described above. For example, when the terminal device 20 is a portable device, communication with the license management device 10 may not be performed when the reproduction of the content ends. In such a case, the license management device 10 manages the contents of the use condition 1 15 of the issued in-house license 110 and issues the in-house license from another terminal device. When the request for acquisition is sent, check the expiration date of all issued in-home licenses 1 16 and if the expiration date has passed, the in-home license will not be returned. Also considers it returned and returns the license to its original state. This processing is executed by a program stored in the memory 72 or the nonvolatile memory 73 in the license control device 15 in the license management device 10 by the CPU 71. This is achieved by executing

In this way, the user does not have to give any special instructions on returning the in-home license. Since the state can be restored, the convenience of the user is significantly improved.

Also, in the home license 110 shown in FIG. 9 (c), for example, after the terminal device 20 reproduces the content twice using the home license, the home license is reproduced. The number of views 1 17 of sense 110 is '6'. When the in-home license is returned in step S400, the number of viewing times of the license after the in-home license generation shown in FIG. The number of views 1 of the license 100 in the license management device 10 is added to the number of views 8 of the license management device 10. In other words, it is possible to generate an in-house license that allows the content to be reproduced on another terminal device up to eight times. In this way, by returning the license, the license usage conditions can be used without wasting.

In step S400, it is not necessary to return the in-home license that is no longer needed. If not returned, the in-house license is retained on the terminal device 20. Therefore, if the same content is to be reproduced again thereafter, the in-home license is transmitted from the license management device 10 to the in-house license. There is no need to obtain a sense. However, if the conditions of use of the in-house license are not sufficient for use, the license will be acquired again from the license management device 10.

Next, referring to Figure 12 and using the license and the in-house license. Explain how to limit usage.

In FIG. 12, a license 100 is a license management device that can use the license in contrast to the license 100 in FIG. 8. A new license management device ID 109 shown below will be provided. The license management device ID held by the license management device ID 109 is a unique ID for each license management device, and is assigned to the device ID of the license management device 10 described above. Equivalent to. The in-home license 110 is different from the in-home license 110 in FIG. 8 in that a terminal device ID 119 indicating a terminal device that can use the in-home license is used. Newly provided. The terminal device ID held by the terminal device ID 119 is a unique ID for each terminal device, and corresponds to the device ID of the terminal device 20 described above. .

FIG. 12 (a) shows a license. When a license is transmitted from the license server 31 to the license management apparatus 10 (step S in FIG. 19). In step 2107), the license server 31 sets the ID of the license management apparatus that has requested transmission to the license management apparatus ID 109. When a terminal license request is received from the terminal device 20, the license management device 10 sends the ID held by the license management device ID 10 9 of the corresponding license. The license management device 10 determines whether or not the license management device 10 has its own ID, and if not, does not generate a home license (step S in FIG. 19). 209 processing).

This processing is performed by the CPU 71 executing a program stored in the memory 2 or the nonvolatile memory 73 in the license controller 15. Is realized. The above ID is stored in a nonvolatile memory 73 in the license control device 15 in advance so that the ID cannot be accessed from outside.

In this way, the license management device that manages the license can be specified, and the license can be more securely protected.

FIG. 12 (b) shows a home license. When a home license is generated for transmission from the license management device 10 to the terminal device 20 (see FIG. 12 (b)). In step S209 in 19), the license management device 10 sets the ID of the terminal device requesting the home license to the terminal device ID 119. In the terminal device 20, when the content is actually reproduced, that is, the reproduction device 26 is transmitted from the home license processing device 25 to the content included in the home license. When the key is obtained, it is determined whether the ID held by the terminal device ID 119 is the ID of the terminal device 20 itself, and if not, the content key is reproduced by the device 26. (Step S304 in Fig. 21).

This process is performed by the CPU 71 executing a program stored in the memory 72 or the nonvolatile memory 73 in the home license processing device 25. Is realized. The above-mentioned ID is stored in a nonvolatile memory 73 in the in-home license processing device 25 in advance so that it cannot be accessed from outside.

In this way, it is possible to specify a terminal device that can use the home license (content key included therein) for IJ, and thus to further protect the license.

At step S210 in FIG. 19, the in-home license is transmitted from the license management device 10 to the terminal device 20 via the home network 50. Is done. Since the in-home license includes a content key for decrypting the encrypted content, the handling must be strict. In general, since the home network 50 is composed of Ethernet, etc., it is necessary to transmit a home license using cryptographic communication or the like.

Next, cryptographic communication when transmitting a home license from the license management device 10 to the terminal device 20 via the home network 50 will be described.

FIG. 7 is a diagram showing an example of a procedure for transmitting a home license from the license management device 10 to the terminal device 20 using encrypted communication. K o is the key used to encrypt data with the public key public key, and ρ ρ is the data used to decrypt data encrypted with the public key private key. Is the key to be used. In FIG. 7, Ko and Κρ are held in the non-volatile memory 73 of the in-home license processing device 25 so that the in-home license processing device 25 cannot be accessed from outside. The in-home license is generated by the license control device 15 of the license management device 10 and transmitted to the in-home license processing device 25 of the terminal device 20.

First, the in-home license processing device 25 is a public key pair that has a private key して ρ and its own authentication data, which it holds in advance so that it cannot be accessed from outside. Key K o, content ID that specifies the license to generate the in-house license to be obtained, and required usage conditions A home license acquisition request including and is transmitted to the license control device 15 (step TO 01).

In response to this, the license control device 15 authenticates the in-home license processing device 25 using the above authentication process (step TO02). Step TOO2 corresponds to the processing of step S203 in FIG. Subsequently, the license control device 15 generates a first session key K s1 by using a random number or the like (step TO 03). The first session key Ks1 is encrypted using the public key Ko and transmitted to the in-home license processing device 25 (step # 004).

In response to this, the in-home license processing device 25 decrypts the above K s 1 using the above-mentioned secret key Κ ρ which is held in advance so that it cannot be accessed from outside. Then, a second session key Ks2 is generated by using a random number or the like (step T006). Then, the second session key Ks2 is encrypted using the first session key Ksl and transmitted to the license controller 15 ( Step T007).

In response to this, the license controller 15 uses the first session key Ks1 to decrypt the second session key Ks2 (step S1). T 0 08). Then, the license control device 15 transmits the use condition of the license having the above content ID transmitted in step T001 and the license control device 25 in the home. The above-mentioned required use conditions are compared, and if the license does not exceed the range of use conditions, a home license is generated (step T099). Step T099 corresponds to the processing of step S209 in FIG. Then, the in-home license is encrypted with the second session key K s2 and transmitted to the in-home license processing device 25 (step T 010). . Step TO10 corresponds to the processing of step S210 in FIG.

Thereafter, the in-home license processing device 25 decrypts the in-house license using the second session key Ks2 (step T 011), and the in-house license The in-house license is stored in the non-volatile memory 73 in the processing device 25 (step TO12). Step TO12 corresponds to the processing of step S211 in FIG. As a result, the in-home license is securely transmitted to the in-home license processing device 25. The above processing is executed by the program stored in the memory 72 or the non-volatile memory 73 for each of the license control device 15 and the terminal device 20 by the CPU 7. 1 is achieved by doing.

In this way, the in-home license is transmitted in an encrypted form, and the session key used for this encryption is different each time using a random number. The session key is generated, and only the license control device 15 and the in-home license processing device 25 are known, and it is difficult to eavesdrop on the in-home license from outside. is there . Therefore, it is also possible to transmit the home license from the license management device 10 to the terminal device 20 connected to the communication network 60. In this case, the user authentication described above is performed by the license management device 10.

If the license management device 10 includes the function of the router 40 as shown in FIG. 2, the license management device 10 sends a request for a home license to the The terminal device connected to the communication network 60 can be easily determined whether the terminal device is connected to the network 60 or the terminal device connected to the home network 50. By controlling not to respond to the request from the user or, conversely, controlling not to transmit the request from the terminal device to the communication network 60, the in-house license is controlled. It can easily be restricted to use at least one terminal device connected to the home network 50. By doing so, it is possible to prevent in-house licensing to an unspecified number of people and to limit the use of in-house licensing to only authorized purchasers.

In addition, when the license is transmitted from the license server 31 to the license management device 10 via the communication network 60, the communication network 60 is connected to the Internet. When a general-purpose network such as a remote network is included, encrypted communication is required. The procedure shown in Fig. 7 is also applicable to this encrypted communication. Figure 22 shows the processing procedure in this case.

FIG. 22 is a diagram showing an example of a procedure for transmitting a license from a license server, '31, to the license management apparatus 10 using cryptographic communication. K o is the key used to encrypt data with the public key public key, and Κ ρ is the key used to decrypt data encrypted with the public key private key. It is a key. Κο and ρρ in FIG. 22 are held in the non-volatile memory 73 of the license control device 15 so that the license control device 15 cannot be accessed from outside.

License information maintained by the license server 31 Stored in 206 Among the licenses issued, the license that meets the request is sent from the license issuing unit 203 to the license control unit 15 of the license management unit 1.0. .

First, the license control device 15 has its own authentication data, which it holds in advance so that it cannot be accessed from outside, and a public key Κ paired with the secret key Kp. ο and a content ID for specifying the license to be acquired are transmitted to the license server 31 (step T101). In response, the license server 31 authenticates the license control device 15 using the authentication data (step T102). Step T102 corresponds to the processing of step S205 in FIG. Subsequently, the license server 31 generates a first session key Ks1 by using a random number or the like (step T103). The first session key Ks1 is encrypted using the public key Ko and transmitted to the license control device 15 (step # 104). In response to this, the license control device 15 decrypts the s1 using the secret key ρρ which is held in advance so that it cannot be accessed from the outside ( A second session key Ks2 is generated using a random number or the like (step # 105) (step T106). Then, the second session key Ks2 is encrypted using the first session key Ks1 and transmitted to the license server 31 (step Step T107).

In response to this, the license server 31 decrypts the second session key Ks2 using the first session key Ks1 (step T108). Then, the license server 31 sends the license having the above-mentioned content ID transmitted in step T101 from the licenses held in the license information 206. The sense is extracted (step T109). Step T109 corresponds to the processing of step S206 in FIG. Then, the license is encrypted with the second session key Ks2 and transmitted to the license controller 15 (step T110). Step T110 corresponds to the processing of step S207 in FIG.

After that, the license controller 15 decrypts the license using the second session key Ks2 (step Tl 11), and the license controller 15 The in-house license is stored in nonvolatile memory 73 in 15 (step Tl 12). Step Tl12 corresponds to the processing of step S208 in FIG. As a result, The sense is safely transmitted to the license controller 15.

The above processing is executed by the CPU 71 executing the program stored in the memory 72 or the nonvolatile memory 73 for the license control device 15. This is achieved.

Further, when the content is reproduced by the terminal device 20, as shown in FIG. 7, between the in-home license processing device 25 and the reproduction device 26 in the terminal device 20. It is also possible to transmit the content key included in the home license to the playback device 26 by using a signal transmission, and in this way, a stronger protection device can be provided. Can be provided. Figure 11 shows the procedure in this case.

K o is a key used to encrypt data with a public key public key, and K p is used to decrypt data encrypted with a public key private key. Is the key to be used. Κ and Kp in FIG. 11 are held in the non-volatile memory 83 of the playback device 26 so that the playback device 26 cannot be accessed from outside.

First, the playback device 26 has its own authentication data, which has been held in advance so that it cannot be accessed from the outside, the public key K o, and the content including the content ID. A request for reproducing the contents is transmitted to the in-home license processing device 25 (step # 201).

In response, in-house license processing device 25 performs authentication for authenticating playback device 26 using the above authentication process (step # 202). Step # 202 corresponds to the processing of step S303 in FIG. Subsequently, the in-home license processing device 25 generates a first session key Ks1 using a random number or the like (step T203). The first session key Ks1 is encrypted using the public Ko and transmitted to the playback device 26 (step T204).

In response to this, the playback device 26 decrypts the above s1 using the above secret key Kp which is previously held so that it cannot be accessed from the outside (step A second session key Ks2 is generated using random numbers or the like (step T205) (step T205). Then, the second session key Ks2 is encrypted using the first session key Ks1 and transmitted to the in-home license processing device 25. (Step T207).

In response to this, the in-house license processing device 25 decrypts the second session key Ks2 using the first session key Ks1. (Step T208) and the home corresponding to the above content ID Check the license usage conditions (step T209). Step T209 corresponds to the processing of step 304 in FIG. If the in-house license is available, the content key is extracted from the in-house license (step T210). Step T210 corresponds to the processing of step 306 in FIG. Then, using the second session key Ks2, the content key is decoded and transmitted to the playback device 26 (step T211).

Thereafter, the playback device 26 decrypts the content key using the second session key Ks2 (step T212), and decrypts the content key. Set to section 85 (step T213).

Step T213 corresponds to the processing of step S307 in FIG.

The above processing is performed by the CPU 71 executing the program stored in the memory 72 or the non-volatile memory 73 in the home license processing device 25. In the playback device 26, the memory 8

2 or the program stored in non-volatile memory 83

1 is realized by executing.

The procedure in Fig. 7 and Fig. 11 and Fig. 22 are methods in which the in-home license, the content key, and the source of the license authenticate the respective destinations. By adding a step in which the destination authenticates the source at the beginning, even stronger security can be realized.

As described above, in the present embodiment, the license is managed collectively by the license management device, and the in-home license is generated and securely transmitted in response to a request from the terminal. By transmitting (returning) the in-home license, which is no longer required by the terminal device, to the license management device, the user can send the distributed encrypted content to the home network. It can be used between multiple terminals connected to networks (and external communication networks).

In the above-described embodiment, the license management device 10 connected to the home network 50 generates the in-house license. However, the function of the license management device 10 is The configuration provided in the SECEX server 31 may be used. In this case, the license issuing unit 203 shown in FIG. 18 has the function of the license control device 15. In other words, the license issuing unit 203 of the license server 31 generates a home license from the license held in the license information 206. That is. At this time, FIG. 23 shows a processing flowchart when the terminal device 20 obtains the in-house license.

First, the terminal device 20 acquires the content ID of the content selected by the user—the content ID included in the evening (step S501), and the content ID indicated by the content ID. A search is performed to determine whether a home license for the content exists in the terminal device 20 (step S502). In other words, the value designated by the content ID 111 of the in-house license managed by the in-house license processing device 25 is compared with the content ID, and the matched in-house license is determined. If there is a sense, it means that it exists.

If the home license for the content indicated by the content ID does not exist in the terminal device 20, the URL described in the URL of the license server included in the metadata of the content. Sends information to the license server 31 (license management device 10) having a license via the home network 50 and the communication network 60 to instruct a home license. I do. At this time, the information transmitted to the license server 31 includes, in addition to the content ID described above, a request use condition, a user ID required for user authentication (or a user ID and a password). ) And the authentication data L, which is information (device ID) unique to the terminal device 20 required for device authentication, can be included as necessary.

Subsequently, in license sano, '31, the license control device 15 uses information transmitted from the terminal device 20 in the same manner as in step S203 in FIG. Authentication processing is performed (step S503). If the authentication is successful in step S503, the license for the content indicated by the content ID included in the information transmitted from the terminal device 20 is changed to a license license. , '31 is searched for whether it is stored in the license information 206 and exists in the purchase license of the user indicated by the user ID (step S50). Four ). That is, of the licenses held in the license information 206, the value indicated by the content ID 101 of all licenses purchased by the user indicated by the user ID above Is compared with the content ID, and if there is a matched license, it is determined that the license exists.

If there is a matched license, the license Then, an in-house license that meets the above-mentioned required use condition is generated (step S505), and the in-house license is transmitted to the terminal device 20 that is the request source (step S505). S506). At this time, if the corresponding license is not found in step S505, information to that effect is transmitted.

Then, if the information transmitted in step S506 is a home license, the terminal device 20 stores the non-volatile memory in the home license processing device 25. Is stored in the memory 73 (step S507), and the processing ends.

In addition, the procedure shown in FIG. 7 can be applied to the cryptographic communication between the terminal device 20 (in-house license processing device 25) and the license server 31 (license control device 15). .

According to the two embodiments described above, the license server 31 transmits a license to the license management device 10 and transmits a home license to the terminal device 20. It is also possible. For example, the license issuing unit 203 of the license server 31 sends a license to the license management device 10 if the license usage conditions are the usage conditions shown in FIG. 8A. The license is transmitted, and if the license usage condition is the usage condition shown in FIG. 9 (a), a home license is generated and the home license is transmitted to the terminal device 20. The license may be sent to the license management device 10 or an attribute may be added to the license 100 (this attribute may be added to the license 100). An attribute that prohibits transmission to the sense management device 10 may be used.) Alternatively, a license may be transmitted for communication with the license management device 10 and a home license may be transmitted for communication with the terminal device 20.

In the license usage conditions 105 shown in FIG. 8A, the viewing expiration date 106 is “unlimited”, and the viewing frequency 107 is “unlimited”. Such a license, for example, is equivalent to what a user would buy an audio CD, so the license connected to the home network 50 It is convenient to be able to manage with the sense management device 10. Even if the operator who operates the service center system 30 stops the service, the rights purchased by the user will not be lost.

A terminal in the case where the license server 31 has the function of the license control device 15 and the license management device 10 connected to the home network 50 exists. Fig. 24 shows a processing flowchart of the procedure for acquiring the in-house license in the device 20. First, the terminal device 20 acquires the content ID of the content selected by the user—the content ID included in the evening (step S601), and the content ID is obtained. A search is performed to determine whether or not a home license for the content indicated by exists in the terminal device 20 (step S602). In other words, the value designated by the content ID 11 of the entire in-house license managed by the in-house license processing device 25 is compared with the content ID, and the matched in-house license is compared. If there is a sense, it means that it exists.

If there is no home license for the content indicated by the content ID in the terminal device 20, the license management device 10 is communicated to the license management device 10 via the home network 50. And send information to instruct to obtain a home license. At this time, the information transmitted to the license management device 10 includes, in addition to the content ID described above, the required usage conditions, a user ID required for user authentication (or a user ID and a password). Authentication data such as (1) the information unique to the terminal device 20 (device ID) required for device authentication and device authentication can be included as necessary. Subsequently, in the license management device 10, the license control device 15 uses the information transmitted from the terminal device 20 in the same manner as in step S203 in FIG. 19. The authentication process is performed (step S603). If the authentication is successful in step S603, the license control device 15 issues a license to the content indicated by the content ID included in the information transmitted from the terminal device 20. A search is performed to determine whether a license exists in the license control device 15 (step S604). In other words, the value indicated by the content ID 101 of all licenses managed by the license controller 15 is compared with the content ID, and if there is a matched license, That is, it exists.

If there is a matched license, the licensing power is used to generate a home license that meets the required use conditions (step S605), and the license is generated. The in-home license is transmitted to the requesting terminal device 20 (step S606). At this time, if the corresponding license is not found in step S605, information to that effect is transmitted.

Subsequently, the terminal device 20 checks the received information (step S607), and informs that the license corresponding to the information was not found. If it is the information, the home network is sent to the license server 31 having the address described in the URL of the license server included in the content data of the content. Information to instruct to obtain a home license is transmitted via 50 and the communication network 60 (step S680). At this time, the information sent to the license server 31 includes, in addition to the content ID described above, a request use condition, a user ID required for user authentication (or a user ID and a user ID). Authentication data such as a password (password) and information unique to the terminal device 20 (device ID) required for device authentication can be included as necessary.

Subsequently, in the license server 31, the license control device 15 uses the information transmitted from the terminal device 20 to perform the same authentication as in step S 205 in FIG. Processing is performed (step S609). If the authentication is successful in step S609, the license for the content indicated by the content ID included in the information transmitted from the terminal device 20 is changed to the license license. , '31 is searched for whether it is stored in the license information 206 and exists in the purchase license of the user indicated by the user ID (step S6). Ten ). In other words, of the licenses held by the license information 206, the value indicated by the content ID 101 of all licenses purchased by the user indicated by the user ID above Is compared with the content ID, and if there is a matched license, it is determined that the license exists.

If there is a matched license, the licensing force generates a home license that meets the required use conditions (step S611), and The in-home license is transmitted to the requesting terminal device 20 (step S612). At this time, if the relevant license is not found in step S610, information to that effect is transmitted.

Then, the terminal device 20 receives the in-home license transmitted from the license management device 10 or the in-house license transmitted from the license server 31 and uses the in-home license. The result is stored in the non-volatile memory 73 of the processing device 25 (step S613), and the processing is terminated.

The processing flow chart of FIG. 24 makes an inquiry to the license management device 10 first if the desired in-home license does not exist in the in-home license processing device 25. For example, you may ask the licenser, '31, first.

The terminal device 20 receives the home license acquired in the process of FIG. When performing post-processing, the in-house license obtained from the license management device 10 is transferred to the license management device 10 and the in-house license obtained from the license server 31 is used. They are returned (transmitted) to the license server 31 respectively.

As another configuration, when the license server 31 is configured to have the function of the license control device 15, the license connected to the home network 50 is provided. The management device 10 may have a home license processing device 25. In this case, the license management device 10 obtains an in-house license from the license server 31 and the license management device 10 sends the content key included in the in-house license to the terminal. This is transmitted to the playback device 26 of the device 20.

Next, referring to FIG. 3, FIG. 10 and FIG. 14, the license management apparatus 10 receives a TV broadcast program (content) and obtains a license conforming to the present embodiment. The operation to be generated will be described.

First, control information such as a program recording instruction instructed by the user using the input device 19, or control of a program recording instruction or the like obtained from the terminal device 20 or the like via the communication control device 13. According to the information, the CPU 11 of the license management apparatus 10 is instructed to record the content (program recording on the storage apparatus 14 or the like). In this case, it is possible to reserve the recording operation in advance and automatically start recording. The control information includes information such as the channel of the content (program) to be recorded, the recording time, and the recording mode (resolution and compression method). Then, the CPU 11 transmits the tuner section 99 of the broadcast receiving apparatus 17 via the node 18 and the IZO circuit 96 so as to be able to receive the channel included in the control information. Then, the resolution and the compression method such as MPEG2 are set according to the recording mode specified in advance by the resolution conversion / compression unit 97.

Further, the CPU 11 instructs the content key generation unit 93 of the license generation device 16 via the I / O circuit 18 and the IZO circuit 96 to generate random numbers and the like. The content key is further generated, the content key is set in the encryption circuit 94, and the use condition specified in advance is set in the license generation unit 92. The license generation unit 92 generates a license from the content key and the usage conditions, and the CPU 11 generates the license from the nonvolatile memory in the license control device 15. Stored in 7.3.

On the other hand, the content received by the tuner section 99 is converted by A / D conversion. The data is converted into digital data by the unit 98, and is scaled to the resolution specified by the resolution conversion / compression unit 97, and is further specified by the compression method And input to the encryption circuit 94 via the connection line 95. At this time, if the TV broadcast to be received is a digital broadcast, the descrambling unit 90 cancels the scrambling such as CAS. Since the digital broadcast content is already compressed and transmitted, the resolution conversion / compression unit 97 is not required. The encryption circuit 94 decrypts the content using the content key generated by the content key generation unit 93. The encrypted content is recorded (stored) in the storage device 14 via the IZO circuit 91 and the bus 18. In addition, the above usage conditions set in the license generation unit 92 can be specified as follows. That is, in the digital broadcasting, information on copy control is transmitted in addition to the video and audio data to be distributed, and the use conditions can be designated based on the copy-control information. For example, information on copy control includes "copy prohibited", "copy only once", "copy free", and the like. If the copy control information of the content to be recorded is "copy once only-permitted", the maximum number of simultaneous issuances 108 in license 100 is "1". If the copy control information is “copy free”, the viewing expiration date 106 of the license 100 can be set to “unlimited”.

In this way, by managing the content distributed on the network and the content distributed on the broadcast as licenses having the same structure, the user can It is possible to reproduce communication content and broadcast content on the same terminal device without being conscious of it. The license server 31 is configured to have the function of the license control device 15, and the license management device 10 connected to the home network 50 is used by the home license process. In the case of a configuration having the device 25, the license generation unit 92 generates at least one or more in-house licenses from the content key and the use conditions, The CPU 11 stores the in-home license in the nonvolatile memory 73 in the in-home license processing device 25.

Further, in the present embodiment, an example in which a license for TV broadcast content is generated has been described. However, the present invention is not limited to TV broadcast content. A sense can be created in the same way. DVDs use CSS to prevent unauthorized copying. It is encrypted using the encryption standard called. In this case, in FIG. 14, the tuner section 99 ′ may be replaced with a DVD reader, and the descrambling section 90 may perform CSS descrambling.

In the embodiment described above, the licenses are collectively managed by the license management device 10 connected to the home network 50. However, the license management device 10 Obtains a license (or a home license) through a communication network different from the communication network 60, and obtains a license through a communication network different from the home network 50. The license (or the content key) may be transmitted to the terminal device 20. Figure 25 shows an example of a system configuration of a content distribution system (copyright management system) using each device with this configuration.

In FIG. 25, reference numeral 61 denotes a mobile communication network, 10 ′ denotes a mobile phone (portable terminal) equipped with the license management device of the present embodiment, and 20 ′ denotes a mobile phone from the mobile phone 10 ′ to the home network. This is a terminal device that obtains the license (or content key). The license server 31 is connected to the mobile communication network 61 and has a configuration capable of transmitting a license (or a home license) to the mobile phone 10 '.

Figure 26 shows a hardware configuration diagram of the portable terminal 10 '.

As shown in FIG. 26, the portable terminal 10 ′ includes a CPU 1, a main memory 2, a first communication control device 3, a second communication control device 4, and a license control device 5. , An input device 6 and an output device 17. Each component of the portable terminal 10 ′ is connected by a bus 8 so that necessary information can be transmitted between the components.

The CPU 1, the main memory 2, and the license controller 5 are equivalent to the CPU 11, the main memory 12, and the license controller 15 in FIG. 3, respectively.

The first communication control device 3 is means for transmitting and receiving information (data) to and from a device connected to the mobile communication network 60 similarly via the mobile communication network 61. The second communication control device 4 is means for performing peer-to-peer communication with the terminal device 20 ', and can be realized by a low-power wireless transmission / reception device, an infrared transmission / reception device, or the like.

The input device 6 is a means for the user to input necessary commands and information to the mobile phone 10 'and a voice input means for making a voice call. For example, the former is a numeric keypad or the like. Buttons and styles The latter can be realized by microphones and the like. The output device 7 is a means for displaying information for responding to a user's operation and a sound output means for making a voice call. For example, the former is a liquid crystal display, and the latter is a display. It can be realized by a peaker or the like.

Figure 27 shows the hardware configuration of the terminal device 20 '.

As shown in FIG. 27, the terminal device 20 ′ includes a CPU 21, a main memory 22, a first communication control device 23, a second communication control device 23 ′, and a It has a storage device 24, a home license processing device 25, a playback device 26, a display device 27, and an input device 28. The components of the terminal device 20 ′ are connected by a bus 29, so that necessary information can be transmitted between the components. The components other than the second communication control device 23 'are the same as those in FIG. The second communication control device 23 ′ is a means for performing peer-to-peer communication with the portable terminal 10 ′, and can be realized by a low-power wireless transmission / reception device or an infrared transmission / reception device. You.

In FIG. 25, in the “mobile terminal 10”, the license transmitted from the license server 31 is transmitted via the mobile communication network 61 and the first communication control device 3. Received and held by the Sense Controller 5. The home license acquisition request from the terminal device 20 'is transmitted to the portable terminal 10' via the second communication control device 23 ', and the portable terminal 10' Received by the license control device 5 via the communication control device 4. Further, the mobile terminal 10 ′ transmits the generated home license to the terminal device 20 ′ via the second communication control device 4, and the terminal device 20 ′ transmits the second license to the terminal device 20 ′. The in-home license processing device 25 receives and stores it via the device 23 '.

The encrypted content is transmitted from the content distribution server 32 to the terminal device 20 ′ via the communication network 60 and the home network 50, or Alternatively, it is taken into the terminal device 20 'by portable media.

The communication between the license server 31 and the license controller 5 and the communication between the license controller 5 and the in-home license processor 25 are shown in FIG. 22 and FIG. The signal communication shown in Fig. 7 can be applied.

Alternatively, the license server 31 may have the function of the license control device 5 and the portable terminal 10 ′ may have the in-home license processing device 25. No. In this case, license server 3 1 The license transmitted from the home is received and held by the license control device 5 via the mobile communication network 61 and the first communication control device 3. Also, the portable terminal 10 ′ extracts the content key included in the content, transmits the extracted content key to the terminal device 20 ′ via the second communication control device 4, and outputs the content key to the terminal device 20 ′. In, the reproduction device 26 receives via the second communication control device 23 ′ and sets it in the decoding unit 85. At this time, the encryption communication shown in FIG. 11 is applicable to the communication between the home license processing device 25 of the portable terminal 10 ′ and the reproduction device 26 of the terminal device 20 ′. It is capable.

As described above, according to the present invention, a license is shared among a plurality of terminals in order to use distributed content among a plurality of terminals connected to a home network. A license management method that enables this can be provided.

In addition, in order to use the distributed content between a plurality of terminals connected to the home network, a license management device for collectively managing licenses, and the license management device described above. A terminal device for obtaining a license for reproducing content from the terminal device, a license server device for transmitting a license to the license management device, and a license server device for transmitting a license to the terminal device. it can. Thus, the user can use the same content on a plurality of terminal devices.

Furthermore, for content distributed using other copyright protection methods, such as digital broadcasting, the content can be used between multiple terminals connected to the home network. A license management device for generating a license for the license can be provided. As a result, the user can reproduce the communication content and the broadcast content or the package media content on the same terminal device without being aware of the content. And Industrial applicability

The present invention relates to a technology for protecting the copyright of content using a license, and relates to a technology for using the content between a plurality of terminals connected to a network. Applicable to equipment and systems that manage licenses.

Claims

The scope of the claims

A license consisting of a license management device and a terminal device connected to the network, and a license server connected to the license management device via a communication network. As a management system, the BUel license server is a license that pairs a content key for decrypting the decrypted content with a use condition of the content. With

The license management device includes a license control device that manages the license received from the iijed license server, and a home license that can be used in the device before the license. A home license generation device for generating a sense and transmitting the sensed license to the terminal device.

When the license management device receives a home license acquisition request for any encrypted content from the i¾¾ / k device, the license control device sends a request for the content to the content management device. A search is performed to determine whether a license is present in the license management device. If the license exists in the license management device / the entrance, the in-home license generation device is searched. A license management system that generates the in-home license usable in the terminal device from the license and transmits the in-home license to the terminal device. Stem.

2.

The license management system according to claim 1, wherein:

If there is no license for the content, the license control device obtains the license from the license server.

3.

The license management system according to claim 1, wherein:

A license management system characterized in that the license includes information for specifying a license management device capable of generating the in-house license from the license.

Four .

The license management system according to claim 1, wherein:

The terminal device has a home license processing device for processing a home license. If the usage condition included in the in-home license is not met, the in-home license processing device transmits the in-home license to the license management device, A license management system, wherein the in-house license is deleted from the terminal device.

Five .

The license management system according to claim 1, wherein:

The license management device includes: a broadcast receiving device capable of receiving a TV broadcast; and an encryption device that encrypts the broadcast content received by the broadcast receiving device using an arbitrary content key. And a license generation device for generating a license in which the content key and the use condition of the broadcast content are paired,

When the terminal device transmits a license acquisition request for the broadcast content to the license management device, the in-home license generation device uses the license from the license in the terminal device. A license management system for generating a possible in-house license and transmitting the in-house license to the terminal device.

6.

A communication device for connecting to a network, a broadcast receiving device capable of receiving a TV broadcast, and encrypting the broadcast content received by the broadcast receiving device using an arbitrary content key An encryption device, a license generation device for generating a license in which the content key and the use condition of the broadcast content are paired, and a license generation device connected to the network; On the basis of a request from a terminal device, a home license that generates a home license usable by the terminal device from the license generated by the license generation device and transmits the generated license to the terminal device. A license management device, comprising: a license generation device.

7.

The license management device according to claim 6, wherein

The in-home license transmitted to the terminal device is not encrypted using an encryption key temporarily shared between the license management device and the terminal device. Sense management device.

8.

The license management device according to claim 6, wherein:

The license usage condition generated by the license generation device is determined based on copy control information of broadcast content received by the broadcast reception device. License management device.

9.

The license management device according to claim 6, wherein:

The license management device is characterized in that the use condition is a view expiration date, a view count, or a number for which the in-home license can be generated.

Ten .

The license management device according to claim 6, wherein:

The license management device, wherein the in-house license includes information for specifying a terminal device that can use the in-house license. A license management system including a license management device and a terminal device connected to a network, and a license server connected to the license management device via a communication network. The license management method in

The license management device includes: a license control device that manages a license; and a home license that generates a home license that can be used by the terminal device from the license and transmits the license to the terminal device. And a sense generator.

The license server holds a license in which a content key for decrypting the decrypted content and a usage condition of the content are paired,

The terminal device sends a request for acquiring a home license for any encrypted content to the license management device, and the license control device sends a license request for the content to the content management device. A search is performed to determine whether a license exists in the license management device. If the license exists in the license management device, the in-home license generation device checks the license. A license management method comprising: generating, from a license, the in-house license usable by the terminal device; and transmitting the in-house license to the terminal device.

1 2.

The license management method according to claim 11, wherein:

13 .

A license management device and a terminal device connected to a network, and a license server connected via a communication network;

A license holding device that holds a license in which a content key for decrypting the encrypted content and a use condition of the content are paired, and a license holding device that stores the license in accordance with the license. A home license generation device that generates a home license that can be used by the terminal device, wherein the home license generation device includes:

If there are no restrictions on the usage conditions of the license held by the license holding device, the license is sent to the license management device,

If there are restrictions on the conditions for using the license held by the license holding device, a home license that can be used by the terminal device is generated from the license and the license is generated. A license server that transmits to a terminal device.

14 .

A terminal device connected via a network to a license management device connected to a license server via a communication network, and

When playing back encrypted content, an in-house license that obtains an in-house license that pairs a content key for decrypting the content with a usage condition of the content The in-home license processing apparatus searches for whether or not the in-home license exists in the terminal device, and if not, the in-home license processing apparatus transmits the license from the license management apparatus. A terminal device for acquiring the in-house license.

1 5.

15. The terminal device according to claim 14, wherein

The terminal device, wherein the in-home license processing device acquires the in-house license from the license server when the in-house license does not exist in the license management device. .

1 6.

15. The terminal device according to claim 14, wherein

When the in-home license processing device does not meet the usage conditions included in the in-home license, the in-home license processing device changes the in-home license to the license. Transmitting the license to the license management device and deleting the in-house license from the terminal device. License management system.

1 7.

A license management system comprising: a terminal device connected to a network; and a license server connected to the terminal device via the network.

The license server includes: a license in which a content key for decrypting the encrypted content and a use condition of the content are paired;

A license control device that manages the license; and a home license generation device that generates a home license that can be used by the terminal device from the license and transmits the license to the terminal device. ,

When the license management device receives a home license acquisition request for any encrypted content from the terminal device, the license control device sets a license for the content. Is searched for in the license management device, and if the license is found in the license management device, the in-home license generation device sends the license to the license management device. A license management system for generating, from the license, the in-home license usable by the terminal device, and transmitting the in-home license to the terminal device.

1 8.

The license management system according to claim 1, wherein:

The license management device includes a storage device having first authentication information stored in advance,

The first authentication information stored in advance is compared with the second authentication information transmitted from the terminal device, and if the first authentication information and the second authentication information match, the terminal A search is performed to determine whether a license for the content indicated by the content ID included in the information transmitted from the device exists in the license control device, and the matched license is searched. A license management system that extracts a use condition from the license and transmits the use condition to the terminal device.

1 9.

Claim 18. The license management system according to claim 18, wherein:

A license management system, wherein the authentication data transmitted from the terminal device is a user ID or a device ID of the terminal device. 9ε

οε

9Ζ

91

01

Υ

ε

TC0 / C0df / X3d 66 80 / £ 0 OAV