WO2006064565A1

WO2006064565A1 - Content managing system and identifying medium

Info

Publication number: WO2006064565A1
Application number: PCT/JP2004/018840
Authority: WO
Inventors: Yushi Fukuchi; Masashi Hidai
Original assignee: Mitsubishi Denki Kabushiki Kaisha
Priority date: 2004-12-16
Filing date: 2004-12-16
Publication date: 2006-06-22
Also published as: JPWO2006064565A1

Abstract

An identifying medium (200) having a domain ID for identifying a plurality of apparatuses as one group, and an internal operation unit (202) for reading or writing a domain ID. The apparatus (100) comprises a card interface unit (104) for communication-connecting the identifying medium (200), and authorizes the use of content when the domain ID of the communication-connected identifying medium (200) is a predetermined domain ID that authorizes the content.

Description

Specification

Content management system and identification medium

Technical field

[0001] The present invention provides a content management system for sharing the right to use copyright-protected digital content among a plurality of users (for example, users in a group (domain) in a specific network). And an identification medium used therefor.

Background art

[0002] Normally, in the copyright management of digital content, the right to use a certain content is given to the individual who purchased the 'right to use the content' or to an individual device, and the right to use only for that individual or device. Content purchased with can be used. However, for example, when there are multiple devices in the home, the usage rights purchased for use with one device in the home can be used with other devices connected to the home network. Therefore, flexible copyright management is desired. On the other hand, even in such a case, it is necessary to have a usage right management method that controls the content so that it can be used only by devices in your home. Become.

[0003] Conventionally, for example, there has been a method described in Patent Document 1 for such a problem. This allows the server managing the usage rights to manage the users and the groups in which the users are included, and to give the usage rights for the content in groups.

[0004] Patent Document 1: Japanese Patent Application Laid-Open No. 2003-132232

[0005] However, in the conventional method described above, since the server (which manages the right to use) manages the group (domain) in which the user is included, for example, a device in the home is newly added to the home group. When adding, there is a problem that general users cannot easily add home appliances to Gnorape, such as requiring registration on the server side.

[0006] The present invention has been made to solve the above-described problems, and allows a user to easily set a domain and prevent unauthorized use of content. It is an object to obtain a content management system and an identification medium used therefor. Disclosure of the invention

[0007] A content management system according to the present invention includes an identification medium having a domain ID for identifying a plurality of devices as one group, and an internal arithmetic unit that reads and writes the domain ID, When an arbitrary identification medium is communicatively connected, and the domain ID of the identification medium is a domain ID that permits content, the apparatus includes a device that permits use of the content.

[0008] This makes it possible to easily set a domain for the user of the device and prevent unauthorized use of the content.

Brief Description of Drawings

FIG. 1 is a configuration diagram showing a content management system according to Embodiment 1 of the present invention.

FIG. 2 is an explanatory diagram showing an overall configuration of a content management system according to Embodiment 1 of the present invention.

FIG. 3 is an explanatory diagram showing in-license information of the content management system according to the first embodiment of the present invention.

BEST MODE FOR CARRYING OUT THE INVENTION

Hereinafter, in order to describe the present invention in more detail, the best mode for carrying out the present invention will be described with reference to the accompanying drawings.

Embodiment 1.

FIG. 1 is a configuration diagram illustrating a content management system according to Embodiment 1 of the present invention. FIG. 2 is an explanatory diagram illustrating an overall configuration of the content management system according to Embodiment 1 of the present invention.

[0011] As shown in FIGS. 1 and 2, the content management system according to the present embodiment also has a plurality of (four in the illustrated example) devices 100 (100a 100d) and identification medium 200 (200a 200d). . Since the basic functions of the devices 100a and 100d and the identification media 200a to 200d are the same, the common functions will be described below as the device 100 and the identification medium 200.

[0012] The device 100 is a device that plays back and stores digital content. Equipment for receiving and storing digital broadcasts installed in Also, the power of these devices 100a-100d is connected to the network. This network connection is not essential.

The device 100 includes a content processing unit 101, a license holding unit 102, a license processing unit 103, and a card interface unit 104. Further, the identification medium 200 is composed of, for example, an IC card having a calculation function, and is configured to be capable of being cut out from the device 100. The identification medium 200 includes a storage unit 201, an internal calculation unit 202, and an external interface unit 203.

[0013] The content processing unit 101 in the device 100 is a functional unit that processes content when license permission by the license processing unit 103 is authorized. The license holding unit 102 is a storage unit that holds license data for permitting use of content. The license data is configured as follows, for example.

FIG. 3 is an explanatory diagram of license data.

Normally, in order to use copyright-managed content, it is obtained by purchasing license data (content usage rights, data necessary for use). Then, such license data is held in the device 100 or the identification medium 200, and the content is used by referring to the license data when the content is used. That is, in general, copyright-managed content is signed, and the information in the license data is used after being decrypted. No decryption key can be obtained. For example, the encryption key for the content in the license data is the same as the encryption / decryption key that only that device has individually.

[0015] Alternatively, the license data (license information) is managed by the server, and each time the content is used, information necessary for using the content by inquiring the server whether or not the content can be used or performing a purchase process (content content) Obtain and use an encryption key for decryption. The present invention can be applied to any of these cases, but in the present embodiment, a description will be given of a system in which license data is held in the license holding unit 102 in the device 100 and used. As shown in FIG. 3, the license data includes, for example, content information, condition information on users who can use the content, content use conditions, and other information. The license processing unit 103 has a function of determining whether or not the content can be used based on this information when using copyright-managed content.

As described above, in this embodiment, it is assumed that the device 100 purchases / acquires a license and holds it in the license holding unit 102 (the license acquisition method is obtained from a license server on the network, etc. There are a variety of methods, but that doesn't matter here).

In FIG. 1, a card interface unit 104 is a communication means for communicating with the identification medium 200, and issues a card access interface command to the identification medium 200, thereby identifying the identification medium. It has functions such as obtaining a domain ID from 200 and generating a domain ID on the identification medium 200. The card interface unit 104 has a function of decrypting the encrypted domain ID acquired from the identification medium 200.

Furthermore, as shown in FIG. 2, the device 100 includes a card slot (identification medium connecting means) 105 for connecting the identification medium 200. Here, two cards slots 105a and 105b are provided in one device (in this embodiment, device 100a), and two identification media 200 can be connected simultaneously.

[0020] The storage unit 201 in the identification medium 200 is made of rewritable memory such as EEPROM, and stores a card ID and a domain ID. The card ID is a unique ID for uniquely identifying each identification medium 200 and is fixed (non-rewritable) data. The domain ID is identification information for identifying a plurality of devices as one group, and is provided as rewritable data. Also, the domain ID storage area is configured so that the domain ID cannot be set at the same time.

[0021] The internal calculation unit 202 is an internal calculation function including, for example, a CPU, a RAM, and the like, and receives a command from the device 100, reads a domain ID from the storage unit 201, and rewrites the domain ID. It has a function. This internal calculation function is a function that is concealed within the identification medium 200 (which is generally not disclosed, but is commonly held as the identification medium 200). The external interface unit 203 is an interface for communicating with the device 100. It is.

Next, an operation in the content management system configured as described above will be described.

First, it is assumed that the same domain ID is already set in each identification medium 200a-200d. When such an identification medium 200a 200d is connected to each device 100a 100d as shown in FIG. 2, in each device 100, the card interface unit 104 adds a domain ID to the connected identification medium 200. Issue a read request (card access interface command).

In the identification medium 200, when such an command is received by the external interface unit 203, the internal calculation unit 202 reads the domain ID from the storage unit 201, and sends this to the device 100 as response data for the read request. To do. Here, if the domain ID returned as a response from the identification medium 200 is the data as it is, there is a risk that the data will be illegally read and used. For this reason, the internal computing unit 202 is not disclosed to the general public, but each identification medium 200 has a common data encryption / decryption function, and this encryption function is used when returning a domain ID. It is encrypted and returned as an encrypted domain ID.

On the device 100 side, the encrypted domain ID received by the card interface unit 104 is decrypted and sent to the license processing unit 103. The license processing unit 103 compares the domain ID of the identification medium 200 with the domain ID that can use the content in the license holding unit 102, and determines that the device is permitted if they match. As a result, the content processing unit 101 uses predetermined content. By such an operation, all the devices 100 connected to the identification medium 200 having the same domain ID can use the content.

Next, the initial setting operation of the domain ID will be described.

First, a domain ID generation method will be described. The domain ID is generated inside the identification medium 200. For example, the identification medium 200a is inserted into the card slot 105a of the device 100a, and a card access interface command indicating a domain ID generation setting is sent from the device 100a. Thereby, in the identification medium 200a, the internal calculation unit 202 automatically generates a domain ID. As this generation method, for example, the card ID byte sequence is reversed. This is done by using a domain ID as a result. Such an operation is performed for each identification medium 200, and a domain ID corresponding to each card ID is set. Here, since each card ID is different for each identification medium 200, a different domain ID is set. The initial domain ID may not be automatically generated in the identification medium 200 but may be acquired from a server (not shown).

Next, a process for setting a common domain ID for the identification medium 200 in which such different domain IDs are set will be described.

For example, a case where a new identification medium 200b used in the device 100b is registered as the same domain (participates in the domain) will be described as an example.

First, among the two card slots 105a and 105b of the device 100a, an identification medium 200a in which a domain ID is already set is inserted into one card slot 105a. In the other card slot 105b, an identification medium 200b for rewriting the domain ID is inserted.

Next, the card interface unit 104 reads the domain ID from the identification medium 200 described above for the identification medium 200a inserted in one card slot 105a, An ID is obtained and temporarily stored in a storage unit (not shown). For the identification medium 200b inserted in the other card slot 105b, a card access interface command for setting a domain ID is issued, and the key ID is sent together with this card access interface command. To do.

As a result, in the identification medium 200b, the internal calculation unit 202 decrypts the encrypted domain ID, and sets this in the storage unit 201 as the domain ID.

[0028] Further, such a domain ID copy process is performed only when two identification media 200 are inserted into the device 100a at the same time. In this way, a safer domain ID setting can be realized.

[0029] By performing the domain ID copy process as described above, the domain ID can be easily set even with the new identification medium 200.

[0030] In the above example, there is a device that has only one power card slot 105, which illustrates the case where the device 100a that copies the domain ID has two card slots 105a and 105b. Therefore, next, a method that can perform copy processing corresponding to such a device will be described. First, an identification medium 200 with a domain ID already set is inserted into the card slot 105, and the card interface unit 104 reads the domain ID from the identification medium 200 by a card access interface command for reading the domain ID. The domain ID is temporarily stored in the device 100.

Next, the identification medium 200 in which the domain ID is already set is removed from the card slot 105, and the identification medium 200 in which the domain ID is newly set is inserted into the card slot 105. The card interface unit 104 sends the card access interface command for setting the identification medium 200 and the domain ID temporarily stored in the device 100 to the identification medium 200 that has been inserted. Send it out. The subsequent internal operation of the identification medium 200 is the same as the domain ID setting operation described above.

[0032] In such a case, the device 100 is temporarily read until the domain ID is read from the identification medium 200 for which the domain ID has already been set and the domain ID is set for another identification medium 200. Remember the domain ID that you read in. Therefore, if you do not insert another card after reading the domain ID from the identification medium 200 for which the domain ID has already been set, the domain ID that was temporarily read will remain in the device 100. In other words, the possibility that the domain ID is used illegally increases.

[0033] Therefore, the card interface unit 104 of the device 100 sets a new domain ID even after a certain period of time after reading the domain ID from the identification medium 200 for which the domain ID has already been set. If the desired identification medium 200 is not inserted or the card access interface command for setting the domain ID is not issued, the read domain ID is erased and the domain ID setting process is controlled to be interrupted. In other words, if more than a predetermined time elapses after the domain ID is acquired from the identification medium 200 for which the domain ID is set and before the identification medium 200 for which a new domain ID is set is connected, the domain Disable ID setting processing. By performing such processing, it is possible to prevent the use of unauthorized domain IDs.

[0034] It should be noted that, as the operation for setting the domain ID, a force for rewriting the identification medium 200 for which the domain ID has already been set. Use 00 to set a common domain ID.

[0035] In the first embodiment, the card interface unit 104 may decode the key domain ID, and other functional units within the device 100 may decrypt the card ID. . In the first embodiment, the domain ID is copied when the domain ID is read in the copy process of the domain IDs in the two identification media 200. However, in the copy process, the copy is performed without any change. Processing may be performed. Alternatively, the copy process may be performed without encryption only when the above-described two identification media 200 are inserted into the device 100a at the same time.

In the first embodiment, the case where an IC card is used as the identification medium 200 has been described. However, the first embodiment has a data storage area, an internal arithmetic unit, and an external interface function. Any medium that can be punched is applicable.

As described above, according to the content management system of Embodiment 1, at least one of the domain ID for identifying a plurality of devices as one group and the reading or writing of the domain ID An identification medium having an internal calculation unit that performs communication with the identification medium, an arbitrary identification medium is connected for communication, and the domain ID of the identification medium is predetermined to permit the content If it is a domain ID, it has a device that allows the use of the content, so that it is possible for the user of the device to easily set a domain and to prevent unauthorized use of the content.

[0038] Also, according to the identification medium of the first embodiment, it has an interface with an arbitrary device, a domain ID for identifying a plurality of devices as one group, and an internal arithmetic unit, The operation unit is configured to read the domain ID and assign the domain ID based on the interface command from the outside, so that the domain ID can be read and written by the interface command from the outside. effective.

[0039] Also, according to the identification medium of the first embodiment, when assigning the domain ID, the internal arithmetic unit generates the domain ID using information that uniquely identifies the identification medium. Therefore, there is an effect that the domain ID can be set with a simple configuration and high security.

[0040] Also, according to the identification medium of the first embodiment, the internal arithmetic unit performs encryption 'decoding means'. If the domain ID is output to the outside, the encryption domain ID is generated and output using the “喑” key means, and if the encryption domain ID is received from the outside, the decryption means is used. Since the domain ID is decrypted and the domain ID is assigned, the domain ID can be managed more safely and the domain ID setting process for the identification medium can be performed more safely.

[0041] Further, according to the identification medium of the first embodiment, since only one domain ID is held, it is possible to prevent an illegal domain setting and to obtain a highly reliable identification medium. There is an effect that can.

[0042] Also, the content management system of the first embodiment has an interface with an arbitrary device, a domain ID for identifying a plurality of devices as one gnole, and an internal calculation unit. The internal computing unit reads out the domain ID based on an interface command from the outside, and also provides an identification medium configured to assign a domain ID, an identification medium in which a domain ID is set, and a new When an identification medium for setting a domain ID is connected, a domain ID read request is sent to the identification medium for which a domain ID is set, and the domain ID obtained by this read request is Set the domain ID from the identification medium set with the domain ID to the identification medium that newly sets the domain ID. Since the domain ID is set, the identification medium is connected to the device. For example, from the function menu of the device, “Set new domain” or “Add new domain, add function” is displayed. Since domain setting is possible simply by selecting and executing the menu, setting various parameters has the effect of making it easy for the user of the device to always set the domain. In addition, since domain identification media must be used for domain settings, unauthorized domain settings can be prevented. As a result, secure rights sharing within the domain is possible, and secure copyright management is possible. It is possible to provide convenience.

[0043] Also, according to the content management system of the first embodiment, when a device is connected simultaneously with an identification medium for which a domain ID is set and an identification medium for which a new domain ID is set Since a new domain ID is set only for the domain name, there is an effect that a safer domain ID can be set.

[0044] Also, according to the content management system of the first embodiment, an interface with an arbitrary device is possible. A domain ID for identifying multiple devices as a single gnole, and an internal calculation unit. The internal calculation unit reads the domain ID based on an interface command from the outside, and When an identification medium configured to give an ID and a single identification medium connection means and a domain ID set to the identification medium connection means is connected, the identification medium Domain ID is acquired from the storage medium and retained. After that, when an identification medium that sets a new domain ID is connected to the identification medium connection means, the retained domain ID is set as the domain ID. The ID is set for the identification medium for which the domain ID is newly set from the identification medium for which the domain ID is set. Even systems that do not have only a single identification medium connection hand stages, there is an effect that can set the simple and safe domain ID.

[0045] Also, according to the content management system of the first embodiment, the device acquires the domain ID from the identification medium in which the domain ID is set, and then sets the new domain ID. When a predetermined time has passed before the connection is established, the domain ID setting process is invalidated, so even a system that does not have the power to connect to a single identification medium There is an effect that a safer domain ID can be set.

[0046] Also, according to the content management system of the first embodiment, since the identification medium is an IC card, a content management system can be constructed using a widely used IC card. The ability to realize copyright management and convenience for cost-safe content.

[0047] Embodiment 2.

The second embodiment relates to control when each device 100 is connected to the network in the configuration of the first embodiment and data is transmitted / received between these devices 100. Since the configuration in the drawing is the same as that of the first embodiment, the description will be made with reference to these drawings. Each device 100 has a network communication control unit (not shown), and negotiates with each other when transmitting and receiving data. Here, the communication control unit obtains the domain ID of the identification medium 200 via the card interface unit 104, and establishes communication only when the domain IDs match each other. Note that data transmission / reception control by domain ID is not limited to such communication control, and other control methods may be used.

[0048] As described above, according to the content management system of the second embodiment, data is transmitted and received only between a plurality of devices connected via a network and between devices with the same domain ID set. As a result, data transmission / reception control of each device connected to the network can be performed with a simple configuration and high security.

[0049] Also, according to the content management system of the second embodiment, the domain ID is confirmed before data transmission / reception between the communicating devices, and if the domain ID is the same, the data Because it is designed to perform data transmission / reception, it is possible to provide a specific method for data transmission / reception control of each device connected to the network, and to perform data transmission / reception control with higher security. .

Industrial applicability

[0050] As described above, the content management system according to the present invention performs domain management of a plurality of devices using an identification medium and has a digital information recording function having a function of realizing copyright protection. Suitable for use in playback devices.

Claims

The scope of the claims

[1] An identification medium having a domain ID for identifying a plurality of devices as one group, and an internal arithmetic unit that performs at least one of reading or writing of the domain ID,

If there is a means for communicating with the identification medium, any identification medium is connected for communication, and the domain ID power of the identification medium is a predetermined domain ID permitting the content, the content is used. Content management system with devices to allow.

[2] It has an interface with an arbitrary device, a domain ID for identifying a plurality of devices as a group, and an internal processing unit, and based on an interface command from the outside by the internal processing unit An identification medium configured to read the domain ID and to assign the domain ID.

[3] The identification medium according to claim 2, wherein, when the domain ID is assigned, the internal arithmetic unit generates the domain ID using information for uniquely identifying the identification medium.

[4] The internal arithmetic unit has an encryption / decryption unit, and when outputting the domain ID to the outside, generates and outputs an encryption domain ID using the encryption unit, and

3. The identification medium according to claim 2, wherein when an encrypted domain ID is received from the outside, the domain ID is decrypted using the decryption means, and the domain ID is given.

5. The identification medium according to claim 2, wherein only one domain ID is held.

[6] It has an interface with an arbitrary device, a domain ID for identifying a plurality of devices as a group, and an internal processing unit, and based on the interface command from the outside by the internal processing unit An identification medium configured to read the domain ID and to assign the domain ID;

When an identification medium with a domain ID set is connected to an identification medium with a new domain ID, the domain ID is read from the identification medium with the domain ID set. Making a request, and sending the domain ID obtained by this read request to an identification medium for setting the domain ID,

From the identification medium in which the domain ID is set, an identification for newly setting the domain ID. 2. The content management system according to claim 1, wherein a domain ID is set for another medium.

[7] A new domain ID should only be set when a domain ID is set for the device and it is connected at the same time as an identification medium for which a new domain ID is set. 7. The content management system according to claim 6, wherein

[8] It has an interface with an arbitrary device, a domain ID for identifying a plurality of devices as one group, and an internal operation unit, and based on an interface command from the outside by the internal operation unit An identification medium configured to read the domain ID and to assign the domain ID;

When an identification medium with a single identification medium connection means and a domain ID set to the identification medium connection means is connected, the domain ID is acquired from the identification medium and retained. After that, when an identification medium is newly connected to the identification medium connection means, an apparatus for sending the held domain ID to the identification medium for setting the domain ID is provided. Prepared,

2. The content management system according to claim 1, wherein a domain ID is set for an identification medium for newly setting a domain ID from the identification medium for which the domain ID is set.

[9] The device has acquired a domain ID from the identification medium for which the domain ID has been set, and a certain period of time has elapsed from when the identification medium for setting the domain ID is newly connected. 9. The content management system according to claim 8, wherein the domain ID setting process is invalidated.

[10] The content management system according to claim 1, wherein the identification medium is an IC card.

[11] The content management system according to claim 1, wherein data is transmitted / received only between devices that are set with the same domain ID among a plurality of devices connected via a network.

[12] The domain ID is confirmed before data transmission / reception between the communicating devices, and when the domain ID is the same, the data transmission / reception is executed. The content management system according to claim 11.