Server device, terminal device, storage device, and communication system

Description: TECHNICAL FIELD [Detailed description of the invention]

【0001】

[Technical field to which the invention belongs]

The present invention relates to a server device, a terminal device, a storage device and a communication system, and is particularly suitable for use in a content data distribution system.

【0002】

[Conventional technology]

With the development and spread of network communication networks, various distribution servers that distribute contents such as music and video have been constructed. The user can play and listen to his / her favorite music on his / her mobile terminal device by accessing the distribution server from his / her own mobile terminal device and downloading the desired music content to his / her own mobile terminal device, for example. Will be.

【0003】

By the way, the problem of copyright protection has been pointed out in the distribution of such contents. Content data is distributed as digital data. Therefore, the downloaded content data can be easily copied from the mobile terminal device to another medium. Therefore, even if the copyright fee is collected by the charge at the time of distribution, if the copy is made carelessly between users, the rights of the copyright holder will be unfairly infringed. Therefore, in such a distribution service, it is particularly important to apply a so-called copy protection mechanism that restricts copying between users.

【0004】

One such mechanism is content data encryption. That is, the content data is encrypted with a predetermined encryption key, and the encrypted content data is distributed to the mobile terminal device. On the mobile terminal device side, the downloaded content data is demodulated and reproduced while being decrypted by the above encryption key. Therefore, when playing back the content data, it is necessary to separately acquire the license data including the encryption key in addition to the content data.

【0005】

The license data is distributed from the distribution server at the time of distribution of the content data, or is acquired by separately accessing the distribution server that distributes only the license data from the mobile terminal device. In addition to the above-mentioned encryption key, the license data includes data indicating the number of times of reproduction, the period of reproduction, prohibition of movement / copying of contents, and the like. The mobile terminal device reproduces the content data while being limited to the license contents.

【0006】

A memory device for storing content data and license data is provided on the mobile terminal device side. Such a memory device includes a memory area for storing content data and a TRM (Tamper-Resistant-Module) for storing license data. Of these, the TRM is a circuit module whose confidentiality is physically protected, and is configured to restrict data exchange with devices other than the mobile terminal device. Therefore, even if the content data is copied / moved to another medium, the license data is not taken out from the TRM and copied. Therefore, the content data is encrypted by the device to which the content data is copied. It cannot be solved. As a result, it becomes virtually impossible to copy and reproduce the content data.

【0007】

As described above, in the content distribution service, the copy / playback of the content data is suppressed by the encryption of the content data, the application of the license data, and the deployment of the TRM function on the mobile terminal device side. The copyright protection related to the above is being thoroughly implemented. By thoroughly protecting the content copyright in this way, the content to be distributed can be added to the lineup with peace of mind, and as a result, the needs of users who receive the distribution service can be met more broadly. Will be.

【0008】

[Problems to be Solved by the Invention]

As described above, in the conventional content distribution system, in order to ensure thorough copyright protection, the use of license data is limited to the mobile terminal device, and therefore, the purchased content data is the mobile device. It could only be played on a terminal device.

【0009】

However, the same user may own a plurality of mobile terminal devices, or may own a content playback device such as a personal computer in addition to the mobile terminal device. In such a case, purchase other devices as well. It is better to be able to play the content data to meet the needs of the user. In addition, when the content data is no longer needed, it may be desired to transfer the unnecessary content data to another user, and facilitating such transfer can be one of the improvements in the service of the distribution system. It is a thing.

【0010】

Therefore, the present invention makes it possible to copy and move license data under limited conditions, thereby realizing a content distribution system that can meet the needs of users while ensuring thorough copyright protection. Is what you do.

【0011】

[Means for solving problems]

In the present invention, an intermediary server is arranged in addition to the content distribution server, and license data that is no longer needed is deposited with the intermediary server, for example. Such an intermediary server has a means for forming an encrypted communication path with the terminal device, and exchanges license data with the terminal device via the encrypted communication path. When depositing the license data to the intermediary server, the terminal device sets the redistribution conditions of the license data to the intermediary server. When the intermediary server receives the license data redistribution request, the intermediary server determines whether the redistribution request meets the set redistribution conditions, and if so, distributes the license data to the terminal device. However, if it does not match, the distribution of license data to the terminal device is prohibited. As a result, the license data is redistributed to other devices only under limited conditions such as when the same user changes the terminal or when the content data is transferred to another user. , Content data playback restrictions are relaxed.

【0012】

The features of the invention according to each claim are as follows.

【0013】

The invention of claim 1 relates to a server device, and is a means for establishing an encrypted communication path for establishing an encrypted communication path between a communication means for performing data communication with a terminal device via a communication network and the terminal device. And the license data storage means for storing the license data transmitted from the terminal device via the established encrypted communication path, and the redistribution for storing the redistribution conditions of the license data transmitted from the terminal device. When the condition storage means and the condition determination means for determining whether the distribution request of the license data from the terminal device conforms to the redistribution condition of the license data are provided, and the determination means determines that the redistribution condition is satisfied. In addition, the license data is transmitted to the terminal device via the encrypted communication path.

【0014】

The invention of claim 2 further includes a license analysis means for analyzing license data transmitted from the terminal device in the server device according to claim 1, and when it is determined by the license analysis means that the license data can be stored. The license data is stored in the license data storage means.

【0015】

The invention of claim 3 relates to a terminal device, and is a means for establishing an encrypted communication path for establishing an encrypted communication path between a communication means for performing data communication with a server device via a communication network and the server device. A license data transmission means for transmitting license data to the server device via the established encrypted communication path, and a redistribution condition transmission means for transmitting the redistribution condition of the transmitted license data to the server device. It is characterized by having.

【0016】

The invention of claim 4 further includes a license analysis means for analyzing license data to be transmitted to the server device in the terminal device according to claim 3, and when it is determined by the license analysis means that transmission is possible, the invention described above. The license data is transmitted to the server device.

【0017】

According to the invention of claim 5, when it is determined by the license analysis means that the license data cannot be shared by a plurality of terminal devices in the terminal device according to claim 3 or 4, the license data in the terminal device is used. It is characterized by erasing.

【0018】

The invention of claim 6 is a storage device attached to a terminal device that performs data communication with a server device via a communication network, a license storage means for storing license data, and a server device in response to a request from the terminal device. License data transmission for transmitting license data to the server device via the terminal device and an encrypted communication path establishment means for establishing an encrypted communication path between the two and the encrypted communication path. It is characterized by having means.

【0019】

The invention of claim 7 further includes a license analysis means for analyzing license data to be transmitted to the server device in the storage device according to claim 6, and when it is determined by the license analysis means that transmission is possible, the invention described above. The license data is transmitted to the server device.

【0020】

The invention of claim 8 is the storage device according to claim 6 or 7, when it is determined by the license analysis means that the license data cannot be shared between a plurality of terminal devices and / or storage devices. It is characterized by erasing the license data in the device.

【0021】

The invention of claim 9 is the storage device according to any one of claims 6 to 8, wherein the storage device includes a memory area for storing content data and a circuit area whose confidentiality is physically protected. The license storage means, the encrypted communication path establishment means, the license data transmission means, and the license analysis means are arranged in the circuit area.

【0022】

The invention of claim 10 is a communication system in which data communication is performed between a server device and a terminal device via a communication network, wherein the server device is a communication means for performing data communication with the terminal device via the communication network. And the encrypted communication path establishment means for establishing the encrypted communication path with the terminal device, and the license data storage for storing the license data transmitted from the terminal device via the established encrypted communication path. Determines whether the means, the redistribution condition storage means for storing the redistribution condition of the license data transmitted from the terminal device, and the distribution request of the license data from the terminal device conform to the redistribution condition of the license data. The terminal device includes a communication means for performing data communication with a server device via a communication network, an encrypted communication path establishment means for establishing an encrypted communication path between the server device, and a means for establishing an encrypted communication path. It includes a license data transmitting means for transmitting license data to the server device via the established encrypted communication path, and a redelivery condition transmitting means for transmitting the redistribution condition of the transmitted license data to the server device. At the time of depositing the license data, the license data is transmitted from the terminal device to the server device via the encrypted communication path established by the encrypted communication path establishment means, and the redistribution condition of the license data is set as described above. Output from the terminal device to the server device, the license data and redistribution conditions are held in the server device, and when the license data is redistributed, the distribution request of the license data in the server device is the redistribution condition of the license data. It is characterized in that the license data is transmitted from the server device to the terminal device via the encrypted communication path established by the encrypted communication path establishment means. ..

【0023】

In the wording described in the above claim, the "encrypted communication path" is a unique encryption key shared between a server device, a terminal device, or a storage device that transmits / receives data, and is encrypted by the encryption key. It means a communication path for transmitting and receiving data. In addition to the encryption key for decrypting the content data, the "license data" can broadly include data indicating the number of times the content data has been played, the playing period, or prohibition of movement or copying of the content data. Is. Further, the "re-delivery condition" can broadly include the re-delivery period, the number of re-delivery, and the like, in addition to the condition of limiting the terminal device of the re-delivery destination.

【0024】

The features of the present invention will be further clarified by the description of the embodiments shown below.

【0025】

In the embodiment, each of the constituent elements in the above claims is mainly realized by the controller 204 and the encryption circuit 203 shown in FIG. 3 or the controller 421 and the encryption circuit 423 shown in FIG.

【0026】

However, the following embodiments are merely one embodiment of the present invention, and the meanings of the terms of the present invention or each constituent requirement are not limited to those described in the following embodiments. Absent.

【0027】

BEST MODE FOR CARRYING OUT THE INVENTION

Hereinafter, embodiments of the present invention will be described with reference to the drawings.

【0028】

First, FIG. 1 shows the configuration of the content distribution system according to the embodiment.

【0029】

The distribution system is composed of a distribution server 100, a license intermediary server 200, a mobile terminal device 300, and a communication network. A memory card 400 is attached to the mobile terminal device 300.

【0030】

The content data is encrypted with a predetermined encryption key Kc, then transmitted from the distribution server 100 to the mobile terminal device 300 via the communication network, and downloaded to the memory card 400. Further, at the same time as such distribution, or by accessing the distribution server again after the distribution is completed, the license data of the content data is transmitted from the distribution server 100 to the mobile terminal device 300 and stored in the memory card 400.

【0031】

In addition to the above-mentioned encryption key Kc used when encrypting the content data, such license data includes the content ID of the content, the number of times the content data has been played, the playing period, prohibition of movement / copying of the content data, etc. Contains data indicating that. Such license data is transmitted from the distribution server 100 to the memory card 400 after an encrypted communication path is established between the distribution server 100 and the memory card 400.

【0032】

Here, the encrypted communication path is a communication path in which a unique encryption key is shared between the distribution server 100 and the memory card 400, and data is transmitted and received encrypted by the encryption key. The details of the process of establishing such an encrypted communication path will be described later.

【0033】

After the content data and license data are downloaded to the memory card 400, when a playback command for the content data is input to the mobile terminal device 300, the encryption key Kc is taken out from the license data in the memory card 400, and this is the mobile terminal. Set in device 300. After that, the reading of the content data is started from the memory card 400, and the encryption of the read content data is sequentially decrypted by the above encryption key Kc. Then, the decrypted content data is sequentially demodulated and reproduced by the reproduction circuit of the mobile terminal device 300, whereby, for example, if the content data is music content, the reproduced audio signal is transmitted on the mobile terminal device 300. It is output to the outside via the headphones.

【0034】

In the distribution system shown in FIG. 1, the license data can be deposited in the intermediary server 200. When depositing license data from the mobile terminal device 300 to the intermediary server 200, an encrypted communication path is first established between the mobile terminal device 300 and the intermediary server 200, as in the case of the distribution server. Then, the license data is read from the memory card 400, and this is transmitted to the intermediary server 200 via the mobile terminal device 300 and the communication network. The transmitted license data is stored in the database in the intermediary server 200.

【0035】

At the time of such transmission, the user operates the key operation unit of the mobile terminal device 300 to set the redistribution condition of the license data, and transmits this to the intermediary server 200. Here, the re-delivery condition is a condition that limits the mobile terminal device of the re-delivery destination, as well as a condition that defines, for example, the re-delivery period and the number of re-delivery. The redelivery destination limit is set, for example, by specifying the personal ID of the mobile terminal device. After being transmitted to the intermediary server 200, the data regarding the redelivery condition is stored in the database of the intermediary server 200 in association with the license data.

【0036】

After the license data is deposited in the intermediary server 200, when the distribution request of the license data is transmitted from the mobile terminal device 300 to the intermediary server 200, the intermediary server 200 has the personal ID of the mobile terminal device 300 in the database. Determine if it matches the personal ID corresponding to the relevant license data. Then, when the two match, the above encrypted communication path is established with the memory card 400 of the mobile terminal device 300, and then the license data is read from the database and transmitted to the memory card 400. To do. Then, the deposited license data is redistributed from the intermediary server 200 and stored in the memory card 400 mounted on the mobile terminal device 300 within the redistribution condition range.

【0037】

According to such a distribution system, for example, when trying to reproduce content data on a plurality of mobile terminal devices owned by the same user, the license data is temporarily deposited in the intermediary server 200, and the content data is stored in the memory of another device. After copying to the card, by reacquiring the deposited license data from the intermediary server 200, the content data can be used by any mobile terminal device without receiving double distribution of the content data and the license data from the distribution server 100. Will be able to play.

【0038】

When transferring unnecessary content data to another user, after copying the content data to the memory card 400 of the mobile terminal device 300 owned by the other user, the license data of the content data is transferred. If the mobile terminal device 300 of another user is included in the redelivery destination condition and deposited with the intermediary server 200, the other user acquires the license data from the intermediary server 200, and the other user's mobile terminal device 300 Allows the content data to be played.

【0039】

In this way, according to the distribution system shown in Fig. 1, it is possible to easily replace or transfer content data under certain conditions, thereby protecting copyright and improving user convenience in content distribution. Can be achieved at the same time.

【0040】

Hereinafter, a configuration example of the distribution server 100, the license server 200, the mobile terminal device 300, and the memory card 400 in the distribution system of FIG. 1 and the flow of data transmission / reception control will be described with reference to FIGS. 2 to 10. In addition, although the following is a configuration example in the case of distributing music content data, it goes without saying that the present invention is also applicable to the case of distributing text data and video data.

【0041】

FIG. 2 shows a configuration example of the distribution server 100.

【0042】

The communication device 101 performs data communication with the mobile terminal device 300 via a communication network. The authentication unit 102 decrypts the device certificate transmitted from the memory card 400 via the playback terminal device 300 with the authentication key Kpa, and determines the suitability of the device certificate.

【0043】

Here, the device certificate is held in the intermediary server 200, the mobile terminal device 300, and the memory card 400 to prove the safety of the held device and to perform encryption that can be decrypted in the device. It is data that includes the public key and also certifies the validity of the public key, and is data that can be authenticated by the authentication key Kpa to determine the validity of the device certificate. Therefore, if it is determined that the device certificate is valid in the authentication process, the security of the device can be confirmed and the included public key can be used. On the contrary, if it is determined to be fraudulent, it is assumed that the device is not secure or the device certificate has been rewritten, and the use of the included public key is prohibited.

【0044】

The encryption circuit 103 establishes an encrypted communication path with the memory card 400, encrypts data transmitted through the encrypted communication path, and decrypts the received data (also called decryption). To tell). The encryption key generated and held in such processing and the process of establishing the encrypted communication path will be described in detail later.

【0045】

The controller 104 controls each unit according to a control program stored in the built-in memory. The content database 105 stores the content data encrypted by the content encryption key Kc separately for each content.

【0046】

The license database 106 stores the license data of each content including the content ID separately for each content. The above content encryption key Kc is included as one of the license data. In addition to the content encryption key Kc, the license data includes, for example, data indicating the number of times the content data has been played, the playing period, prohibition of movement / copying of the content data, and the like.

【0047】

The customer database 107 stores the personal ID of the user who can distribute the content data and the license data, and the billing data of the user and the content ID of the distributed content.

【0048】

In this system, two types of personal IDs (personal ID1 and personal ID2) are set by the user as the user's personal ID. Of these, the personal ID 1 is registered in the distribution server 100 before the first distribution of the content data, and the personal ID 2 is registered in the intermediary server 200 before the first deposit of the license data.

【0049】

FIG. 3 shows a configuration example of the intermediary server 200.

【0050】

The communication device 201 performs data communication with the mobile terminal device 300 via the communication network. The authentication unit 202 authenticates the device certificate transmitted from the memory card 400 via the playback terminal device 300 with the authentication key Kpa, and determines the validity of the transmitted device certificate.

【0051】

The encryption circuit 203 establishes an encrypted communication path with the memory card 400, encrypts data transmitted through the encrypted communication path, and decrypts received encrypted data. The encryption key generated and held in such processing and the process of establishing the encrypted communication path will be described in detail later.

【0052】

The controller 204 controls each unit according to a control program stored in the built-in memory. The license database 205 stores the license data of each content in association with the content ID. Similar to the distribution server, the license data includes, in addition to the content encryption key Kc, data indicating, for example, the number of times the content data has been played, the playing period, or prohibition of movement / copying of the content data.

【0053】

The customer database 207 stores the personal ID of the user who can deposit the license data and the data regarding the redistribution conditions of the deposited license data. The personal ID stored here is personal ID 2 as described above.

【0054】

The device certificate holding unit 207 holds the device certificate of the intermediary server 200.

【0055】

Of the above configurations, the authentication unit 202, the encryption circuit 203, and the device certificate holding unit 207 are composed of a TRM whose confidentiality is physically protected.

【0056】

FIG. 4 shows a configuration example of the mobile terminal device 300.

【0057】

The communication device 301 performs data communication with the distribution server 100 and the intermediary server 200 via the communication network. The key operation unit 302 includes a numeric keypad, function keys, and the like, and is used for selecting distribution contents, inputting a personal ID, and the like. The decryption key storage unit 303 stores the content encryption key Kc acquired from the memory card 400 by the encryption circuit 308. The decryption unit 304 decrypts the content data read from the memory card 400 by using the content encryption key Kc stored in the decryption key storage unit 303. The DA conversion unit 305 converts the decrypted content data into an analog audio signal and supplies this to the speaker.

【0058】

The controller 306 controls each part according to the control program stored in the built-in memory. The device certificate holding unit 307 holds the device certificate of the mobile terminal device 300.

【0059】

The encryption circuit 308 establishes an encrypted communication path with the memory card 400, encrypts data transmitted through the encrypted communication path, and decrypts received encrypted data. Further, the encryption circuit 203 holds a private key paired with the public key included in its own device certificate, and decrypts the data encrypted by the public key included in its own device certificate. The encryption key generated and held in such processing and the process of establishing the encrypted communication path will be described in detail later.

【0060】

The memory card interface 309 controls data transfer to and from the memory card 400.

【0061】

Of the above configurations, the decryption key storage unit 303, the decryption unit 304, the D / A conversion unit 305, the device certificate holding unit 307, the encryption circuit 308, and the memory card interface 309 are physically concealed. It is composed of a sex-protected TRM.

【0062】

FIG. 5 shows a configuration example of the memory card 400.

【0063】

The memory card 400 is composed of a memory 410 for storing content data and a TRM 420 for storing and processing license data. Further, the TRM 420 includes a controller 421, a memory unit 422, an encryption circuit 423, and an authentication unit 424.

【0064】

The controller 306 controls each part according to the control program stored in the built-in memory. The memory unit 422 stores the license data in association with the content ID and holds the device certificate of the memory card 400.

【0065】

The encryption circuit 423 establishes and establishes an encrypted communication path between the distribution server 100, the intermediary server 200, and the mobile terminal device 300, and encrypts and receives data transmitted through the encrypted communication path. Decrypt the encrypted data. In addition, the encryption circuit 423 holds a private key paired with the public key included in its own device certificate, and decrypts the data encrypted by the public key included in its own device certificate. The encryption key generated and held in such processing and the process of establishing the encrypted communication path will be described in detail later.

【0066】

The authentication unit 424 authenticates the device certificate transmitted from the intermediary server 200 and the mobile terminal device 300 with the authentication key Kpa, and determines the validity of the transmitted device certificate.

【0067】

FIG. 6 shows the processing flow between the distribution server 100, the mobile terminal device 300, and the memory card 400 when the content data and the license data are distributed.

【0068】

First, the user operates the key operation unit 302 of the mobile terminal device 300 to transmit the content ID and personal ID 1 of the content to be distributed to the distribution server 100 (S101), which is received by the distribution server 100 (S101). S102) and whether the received personal ID1 exists in the customer list in the customer database 107 (S103). Here, if it is determined that the personal ID 1 does not exist in the customer list, the process proceeds to S119, an error notification is sent from the distribution server 100 to the mobile terminal device 300, and the distribution operation ends (S120).

【0069】

When it is determined in the above S103 that the personal ID 1 exists in the customer list, the distribution server 100 sends a distribution permission notification to the mobile terminal device 300 (S104, S105), and the distribution server 100 and the mobile terminal device 300 And the license distribution process is executed between the memory cards 400 (S106). Here, when the license distribution process is performed properly, the license data is transmitted from the distribution server 100 to the mobile terminal device 300, and this is stored in the memory unit 422 of the memory card 400. The specific processing flow of the license distribution process (S106) will be described in detail later with reference to FIG.

【0070】

If the distribution request from the mobile terminal device 300 does not include the license data distribution request, the license distribution process of S106 is not performed. In such a case, when the delivery permission notification is received in S105, S106 is skipped and the process proceeds to S107.

【0071】

When the license distribution process is properly performed in S106, it is next determined whether the distribution request from the mobile terminal device 300 includes the content data distribution request (S107). Here, if it is determined that the content data distribution request is not included, a license acceptance notification is sent from the playback mobile terminal 300 to the distribution server 100 (S108, S109) and sent to the customer database 107 of the distribution server 100. The distribution record of the license data is stored (S118). Then, the delivery process for the delivery request is completed.

【0072】

When it is determined in S107 that the distribution request includes the content data distribution request, the content request notification is transmitted from the mobile terminal device 300 to the distribution server 100 (S110, S111). In response to such a request, the distribution server 100 reads the content data corresponding to the content ID from the content database 105 and transmits the content data to the mobile terminal device 300 (S112, S113). In response to this, the mobile terminal device 300 specifies the storage address and outputs the content data to the memory card 400 (S114). The memory card 400 stores the received content data at a designated address in the memory 410, and outputs the stored response to the mobile terminal device 300 (S115).

【0073】

Then, when the storage of the content data is completed, the content acceptance notification is output from the mobile terminal device 300 to the distribution server 100 (S114, S115). Then, the distribution record of the license data and the content data is stored in the customer database 107 of the distribution server 100 (S118), whereby the distribution process for the distribution request is completed.

【0074】

FIG. 7 shows the flow of processing between the intermediary server 200, the mobile terminal device 300, and the memory card 400 at the time of deposit and redistribution of license data. 0, the flow of processing between the mobile terminal device 300 and the memory card 400 is shown.

【0075】

When the user operates the key operation unit 302 of the mobile terminal device 300 to transmit the personal ID 2 to the intermediary server 200 (S201) and this is received by the intermediary server 100 (S202), the received personal ID 2 is the customer. Determined if it exists in the customer list in database 206 (S203). Here, if it is determined that the personal ID 2 does not exist in the customer list, the process proceeds to S216, an error notification is sent from the intermediary server 200 to the mobile terminal device 300, and the process ends (S217).

【0076】

When it is determined in the above S203 that the personal ID 2 exists in the customer list, the intermediary server 200 sends a connection permission notification to the mobile terminal device 300 (S204, S205).

【0077】

The connection permission notification is displayed on the monitor unit of the mobile terminal device 300. Upon receiving such a display, the user inputs a desired processing request, that is, either a deposit processing or a redistribution processing, to the mobile terminal device 300. Here, in the case of redelivery processing, the content ID of the license data to be redelivered is input at the same time.

【0078】

Then, when the processing request is input by the user, it is next determined whether the processing request is a deposit or a redelivery (S206). Here, if it is determined that the deposit processing is performed, the process proceeds to S207, and the license deposit processing is executed between the intermediary server 200, the mobile terminal device 300, and the memory card 400. Here, when the license deposit process is performed properly, the license data is transmitted from the memory card 400 to the intermediary server 200, and this is stored in the license database 205 of the intermediary server 200. The specific processing flow of the license deposit processing (S207) will be described in detail later with reference to FIG.

【0079】

When the license deposit process is properly performed in such S207, the redelivery conditions (personal ID 2 of the redelivery destination, the number of redelivery times, the redelivery period, etc.) are then set from the key operation unit 302 of the mobile terminal device 300. Entered and sent to the intermediary server 200 (S208, S209). Then, the received redelivery condition data is stored in the customer database 206 of the intermediary server 200 together with the content ID (S210). As a result, the processing for the deposit request is completed.

【0080】

On the other hand, if it is determined in the above S206 that the redistribution process is performed, the process proceeds to S211, the redistribution condition data of the content ID is read from the customer database 107, and whether or not the license data of the content ID can be transmitted is confirmed. It is determined. Such determination is made by referring to whether the user's personal ID 2 exists in the redelivery conditions, and whether the number of redelivery times and the redelivery period have not been exceeded.

【0081】

Here, if it is determined that the distribution conditions are met, the process proceeds to S212, and the license data redistribution process is executed between the intermediary server 200, the mobile terminal device 300, and the memory card 400. When the redistribution process of the license data is properly performed, the license data is transmitted from the intermediary server 200 to the mobile terminal device 300, and this is stored in the memory unit 422 of the memory card 400.

【0082】

The specific processing flow of the license redistribution processing (S212) is the same as the distribution processing of the license data from the distribution server 100. The processing flow will be described in detail later with reference to FIG.

【0083】

When the license redistribution process is properly performed in S212, the mobile terminal device 300 then sends a license acceptance notification to the intermediary server 200 (S213, S214). After that, the redelivery record of the license data is stored in the customer database 206 (S215), whereby the processing for the redelivery request is completed.

【0084】

FIG. 8 shows the processing flow of the license data distribution processing (S106) and redistribution processing (S212).

【0085】

When entering the distribution processing step, first, a device certificate output request is transmitted from the mobile terminal device 300 to the memory card 400 (S301, S302). In response to such a request, the memory card 400 reads the device certificate from the memory unit 422 and transmits the device certificate to the mobile terminal device 300 (S303). Further, such a device certificate is transmitted from the mobile terminal device 300 to the distribution server 100 or the intermediary server 200 (hereinafter, for convenience, the processing with and from the distribution server 100 will be described) (S304, S305).

【0086】

The device certificate received by the distribution server 100 is authenticated by the authentication unit 102 using the authentication key Kpa, and the validity of the device certificate is determined (S306). Here, if the device certificate is invalid, the process proceeds to S319, and an error notification is transmitted from the distribution server 100 to the playback terminal device 300 (S319, S320). On the other hand, if the device certificate is valid, the process proceeds to S307 to establish an encrypted communication path.

【0087】

In establishing such an encrypted communication path, first, the common key Ks1 is issued by the encryption circuit 103 of the distribution server 100, and after being encrypted with the public key included in the received device certificate, the mobile terminal. It is transmitted to the device 300 and further transferred to the memory card 400 (S307, S308). The transferred common key Ks1 is decrypted by the encryption circuit 423 of the memory card 400 by the private key paired with the public key included in the above-transmitted device certificate, and is held here (S309). After that, the common key Ks2 is issued by the encryption circuit 423 of the memory card 400, and this is encrypted by the above common key Ks1 (S310). The encrypted common key Ks2 is transmitted to the encryption circuit 103 of the distribution server 300 via the mobile terminal device 300 (S311 and S312). The encryption circuit 103 decrypts the common key Ks2 using Ks1 issued by itself and holds it.

【0088】

By the above processing, the encryption circuit 103 of the distribution server 100 and the encryption circuit 423 of the memory card 400 hold the common keys Ks1 and Ks2, respectively, and thereby the encrypted communication path is established via the common keys Ks1 and Ks2, respectively. ..

【0089】

After that, the distribution server 100 encrypts the license data to be distributed with the common key Ks2, further encrypts with the common key Ks1, and then transmits this to the mobile terminal device 300 (S313, S314). The license data is transferred from the mobile terminal device 300 to the encryption circuit 423 of the memory card 400, and is decrypted using the common key Ks1 (S315). In addition, it is decrypted with the common key Ks2, which acquires unencrypted license data (S316).

【0090】

Then, when the license data is decrypted, the storage address is specified from the mobile terminal device 300 to the memory card 400 (S317). In response to this, the memory card 400 stores the decrypted license data at the designated address of the memory unit 422 (S318). As a result, the distribution process of the license data is completed.

【0091】

Of the above processes, the processes after S316 have been described by taking data transfer to and from the distribution server 100 as an example for convenience, but data transfer to and from the intermediary server 200 is also performed by following the same steps. .. In such a case, the device certificate is authenticated by the authentication unit 202 of the intermediary server 200, and the encrypted communication path is established by the encryption circuit 203.

【0092】

FIG. 9 shows the processing flow of the deposit processing (S207) of the above license data.

【0093】

When entering the deposit processing step, first, the mobile terminal device 300 sends a device certificate output request to the intermediary server 200 (S401, S402). In response to such a request, the intermediary server 200 reads the device certificate from the device certificate holding unit 207 and transmits the device certificate to the mobile terminal device 300 (S403). Further, such a device certificate is transferred from the mobile terminal device 300 to the memory card 400 (S404, S405).

【0094】

The device certificate received by the memory card 400 is authenticated by the authentication unit 424 using the authentication key Kpa, and the validity of the device certificate is determined (S406). Here, if the device certificate is invalid, the process proceeds to S424, and an error notification is transmitted from the memory card 400 to the playback terminal device 300 (S424, S425). On the other hand, if the device certificate is valid, the process proceeds to S407 to establish an encrypted communication path.

【0095】

The establishment of such an encrypted communication path is performed in the same manner as the establishment of the encrypted communication path in the distribution server. First, the common key Ks2 is issued by the encryption circuit 423 of the memory card 400, and after being encrypted with the public key included in the received device certificate, it is transmitted to the mobile terminal device 300, and further, the intermediary server 200. Is sent to (S407, S408). The transmitted common key Ks2 is decrypted by the encryption circuit 203 of the intermediary server 200 by the private key paired with the public key included in the transmitted device certificate, and is held here (S409). After that, the common key Ks1 is issued by the encryption circuit 203 of the intermediary server 200, and this is encrypted by the above common key Ks2 (S410). The encrypted common key Ks1 is transmitted to the encryption circuit 423 of the memory card 400 via the mobile terminal device 300 (S411, S412). The encryption circuit 433 decrypts the common key Ks1 using Ks2 issued by itself and holds it.

【0096】

By the above processing, the encryption circuit 203 of the intermediary server 200 and the encryption circuit 423 of the memory card 400 hold the common keys Ks1 and Ks2, respectively, and thereby the encrypted communication path is established via the common keys Ks1 and Ks2, respectively. ..

【0097】

After that, the mobile terminal device 300 specifies the address of the license data to be deposited to the memory card 400 (S413). Upon receiving such an address designation, the memory card 400 takes out the license data from the memory unit 422 and sends it to the controller 421. The controller 421 analyzes the license data and first determines whether the license data does not specify copy prohibition of the content data (S415). Here, if copy prohibition is stipulated, the deposit of license data is prohibited and an error notification is given (S424, S425).

【0098】

If it is determined in S415 above that copy prohibition is not specified in the license data, then movement is prohibited (license data can be copied, but it is prohibited to own license data on multiple memory cards at the same time). Is not specified (S416). Here, if movement prohibition is stipulated, the license data of the deposit target stored in the memory unit 422 is deleted (S417). On the other hand, if the license data does not specify movement prohibition, the process proceeds to S418 as it is without erasing the license data in the memory unit 422.

【0099】

After that, the memory card 400 encrypts the license data to be deposited with the common key Ks2, further encrypts with the common key Ks1, and then transmits this to the mobile terminal device 300 (S418, S419). The license data is transmitted from the mobile terminal device 300 to the encryption circuit 203 of the intermediary server 200, and is first decrypted using the common key Ks1 (S420). In addition, it is decrypted with the common key Ks2, which acquires unencrypted license data (S421).

【0100】

Then, when the license data is decrypted, the decrypted license data is stored in the license database 205 (S422). Further, the license deposit record is stored in the customer database 206 (S423), which ends the deposit process.

【0101】

FIG. 10 shows the processing flow between the mobile terminal device 300 and the memory card 400 during content data reproduction.

【0102】

When the key operation unit 302 is operated and a playback command for a predetermined content is input, the device certificate is first read from the device certificate holding unit 307 of the mobile terminal device 300, and this is output to the memory card 400. (S501, S502). The device certificate received by the memory card 400 is authenticated by the authentication unit 424 using the authentication key Kpa, and the validity of the device certificate is determined (S503). Here, if the device certificate is invalid, the reproduction process is terminated. On the other hand, if the device certificate is valid, the process proceeds to S504 and the encrypted communication path is established.

【0103】

The establishment of such an encrypted communication path is performed in the same manner as described above. First, the common key Ks3 is issued by the encryption circuit 423 of the memory card 400, and after being encrypted with the public key included in the received device certificate, it is transmitted to the mobile terminal device 300 (S504). The transmitted common key Ks3 is decrypted by the encryption circuit 308 of the mobile terminal device 300 using the private key paired with the public key included in the transmitted device certificate, and is held here (S505). After that, the common key Ks4 is issued by the encryption circuit 308 of the mobile terminal device 300, encrypted by the above common key Ks3, and transmitted to the encryption circuit 423 of the memory card 400 (S506). The encryption circuit 433 decrypts the common key Ks4 by using Ks3 issued by itself and holds it.

【0104】

By the above processing, the encryption circuit 308 of the mobile terminal device 300 and the encryption circuit 423 of the memory card 400 hold the common keys Ks3 and Ks4, respectively, and thereby the encrypted communication path is established via the common keys Ks3 and Ks4, respectively. To.

【0105】

After that, the mobile terminal device 300 specifies the address of the license data related to the content to be played back to the memory card 400 (S508). In response to such an address designation, the memory card 400 takes out the license data from the memory unit 422 and sends it to the controller 421 (S509). The controller 421 analyzes the license data and determines whether or not the license data has a reproduction restriction specified (S510).

【0106】

Here, if there is no reproduction restriction, the content encryption key Kc in the license data is encrypted with the common key Ks4 and transmitted to the mobile terminal device 300 (S512). The mobile terminal device 300 decrypts this with the private key K4 and acquires the unencrypted content encryption key Kc (S513). The content encryption key Kc is stored in the decryption key storage unit 303. After that, the content data is read from the memory 410 of the memory card 400 and supplied to the decoding unit 304. Then, after being decrypted by the content encryption key Kc stored in the decryption key storage unit 303, it is converted into an analog audio signal by the DA conversion unit 305 and output from the speaker.

【0107】

On the other hand, if it is determined in the above S510 that the license data has a limitation on the number of times of reproduction, the number of times of reproduction (allowable number of reproductions) in the license data is reduced by 1 (S511), and then the license data is concerned. The content encryption key Kc inside is encrypted with the common key Ks4, and this is transmitted to the mobile terminal device 300 (S512). Hereinafter, in the same manner as above, the content encryption key Kc is decrypted and the content data is reproduced (S513).

【0108】

When it is determined in the above S510 that the content cannot be reproduced, for example, when the allowable number of reproductions is zero or when the reproduction permission period has expired, the reproduction process is terminated.

【0109】

As described above, according to the distribution system in the present embodiment, the license data can be deposited with the intermediary server 200, so that the mobile terminal device for reproducing the content data can be easily changed and the content data can be transferred easily. The convenience of the user can be improved. In addition, such deposit is prohibited when copy prohibition is stipulated in the license data, and is executed after erasing the license data from the memory card 400 when movement prohibition is stipulated. Since it complies with the license content, it does not unduly harm the copyright of the content, and the redelivery destination of the license data is also restricted by the user, so the sharing of the license data is unlimited. There is no such thing.

【0110】

As described above, according to the above-mentioned distribution system, it is possible to simultaneously achieve the simplification of the redistribution of the content data and the license data and the prevention of improper copying of the data, thereby providing the convenience of the user and the convenience of the user. From both sides of copyright holder protection, the quality of the content distribution system can be improved at the same time.

【0111】

It goes without saying that the present invention is not limited to the above-described embodiment, and various other modifications can be made.

【0112】

For example, in the above embodiment, the suitability of depositing the license data is determined in the memory card 400 (S415 to S417 in FIG. 9), but such determination may be performed on the intermediary server 200 side. Further, the determination may be performed by both the memory card 400 and the intermediary server 200. FIG. 11 shows a processing flow when the determination is performed by both the memory card 400 and the intermediary server 200. In this flow, S430 and S431 are newly added as compared with the processing flow shown in FIG. That is, when the license data is analyzed by S430 and the prohibition of copying is determined as a result, an error notification is given by S431 and S425, and the deposit of the copy is prohibited.

【0113】

Further, in the above embodiment, a configuration example in which the memory card 400 is mounted on the mobile terminal device 300 has been shown, but a configuration corresponding to the memory card 400 may be built in the mobile terminal device 300, and further. May be realized by a storage means different from the memory card, such as a disk drive device.

【0114】

Further, in the above embodiment, only the mobile terminal device 300 has been described as an example of the terminal device connected to the communication network, but other than this, a non-portable terminal device such as a stationary personal computer may be used. It may be connected to a communication network, and in such a case, the present invention naturally applies to the terminal device.

【0115】

Further, in the above embodiment, the mediation server and the distribution server are shown separately, but both may be integrated, and the mediation server 200 may also have a content data distribution function. good.

【0116】

The embodiments of the present invention can be appropriately modified in various ways within the scope of the technical idea of the present invention.

【0117】

[Effect of the invention]

As described above, according to the present invention, by deploying the server device for depositing the license data, the license data can be easily distributed, and thus the convenience of the distribution system can be improved.

【0118】

Further, since such deposit is performed via an encrypted communication path established between the terminal device and the server device, the confidentiality of the license data is ensured, and further, copy prohibition is stipulated in the license data. Deposits are prohibited, and if movement prohibition is stipulated, the license data is deleted before depositing, and the deposit processing is restricted according to the analysis results of the license data analysis. Therefore, it does not unduly harm the rights of the copyright holder of the content.

【0119】

As described above, the present invention can simultaneously achieve the simplification of redistribution of content data and license data and the prevention of improper copying of the data, thereby providing user convenience. From both sides of the protection of the copyright holder, it can contribute to the improvement of the quality of the content distribution system at the same time.

[Simple explanation of drawings]

[Figure 1]

The figure which shows the structure of the distribution system which concerns on embodiment [Figure 2]

The figure which shows the structure of the distribution server which concerns on embodiment [Fig. 3]

The figure which shows the structure of the intermediary server which concerns on embodiment [Fig. 4]

The figure which shows the structure of the mobile terminal apparatus which concerns on embodiment [Fig. 5]

The figure which shows the structure of the memory card which concerns on embodiment [Fig. 6]

The figure which shows the flow of the content distribution processing which concerns on embodiment [Fig. 7]

The figure which shows the flow of the content mediation processing which concerns on embodiment [Fig. 8]

The figure which shows the distribution process of the license data which concerns on embodiment [Fig. 9]

The figure which shows the deposit processing of the license data which concerns on embodiment [Fig. 10]

The figure which shows the flow of the content reproduction processing which concerns on embodiment [Fig. 11]

The figure which shows the deposit processing of the license data which concerns on other embodiment [Explanation of symbols]

100 delivery server 103 Cryptographic circuit 104 controller 200 intermediary server 203 Cryptographic circuit 204 controller 205 License database 206 Customer database 300 mobile terminal device 400 memory card 422 Memory section 423 Cryptographic circuit