Recording device, data reproduction device and data distribution device using such recording device and data reproduction device

Recording device, data reproducing device and data distribution system using the device.

<p>10. . . Copyright server</p><p>12. . . Authentication server</p><p>20. . . Distribution company (mobile phone company)</p><p>30. . . Distribution server</p><p>100, 102. . . Mobile phone</p><p>110, 112, 114, 116, 118. . . Memory card</p><p>302. . . Fee database</p><p>304. . . Information database</p><p>310. . . Data Processing Department</p><p>312, 320. . . Decoding processing unit</p><p>315. . . Distribution Control Department</p><p>316. . . Dialogue key generation part</p><p>326, 328. . . Encryption Processing Department</p><p>350. . . Communication device</p><p>1102. . . antenna</p><p>1104. . . Reception Department</p><p>1106, 1420. . . Control Department</p><p>1108. . . Key touch</p><p>1110. . . monitor</p><p>1112. . . Sound reproduction section</p><p>1120. . . Connector</p><p>1122. . . External face</p><p>1200. . . Memory interface</p><p>1400.1, 1500.1, 1400.2, 1500.2. . . Certification data retention department</p><p>1402. . . Kmc(1) holding part</p><p>1404, 1408, 1422. . . Decoding processing unit</p><p>1406, 1410, 1424. . . Encryption Processing Department</p><p>1415. . . Memory</p><p>1418. . . Dialogue key generation part</p><p>1440. . . Copyright Keeping Department</p><p>1448, SW1, SW2. . . Switch circuit</p><p>1504, 1510, 1516. . . Decoding processing unit</p><p>1506. . . Encryption Processing Department</p><p>1508. . . Dialogue key generation part</p><p>1518. . . Music Reproduction Department</p><p>1520. . . Kp holding part</p><p>1525. . . Mixing department</p><p>BS1, BS2, BS3. . . Data bus</p>

Figure 1 is a conceptual diagram for briefly explaining the overall structure of the data distribution system of the present invention.

Figure 2 is the data distribution system shown in Figure 1 to illustrate the characteristics of the password keys used in communication and data distribution.

Figure 3 is a diagram showing the use of Kmc and Kmb which are common to the system under normal circumstances.

Fig. 4 is a schematic block diagram of the structure of the copyright server 10 shown in Fig. 1.

Fig. 5 is a schematic block diagram for explaining the structure of the mobile phone 100 shown in Fig. 1.

FIG. 6 is a schematic block diagram for explaining the structure of the memory card 110 shown in FIG. 5.

Fig. 7 is a first flowchart for explaining the distribution operation when purchasing content data in the data distribution system according to the first embodiment.

Fig. 8 is a second flowchart for explaining the distribution operation when purchasing content data in the data distribution system according to the first embodiment.

Fig. 9 is a third flowchart for explaining the distribution operation when purchasing content data in the data distribution system according to the first embodiment.

Figure 10 is a flowchart for explaining the actions of each part during the playback dialogue.

Figure 11 is the first flow chart for explaining the movement process between the two memory cards 110 and 112.

Figure 12 is a second flow chart for explaining the movement process between the two memory cards 110 and 112.

Figure 13 is a third flow chart for explaining the movement process between the two memory cards 110 and 112.

Fig. 14 is a block diagram showing the structure of the memory card 114 of the second embodiment.

Figure 15 is a diagram for explaining the characteristics of the encryption key and the distributed data related to the communication used in the data distribution system of the second embodiment.

Figure 16 is the first flow chart for explaining the distribution operation when content materials are purchased in the material distribution system according to the second embodiment.

Figure 17 is a second flow chart for explaining the distribution operation when purchasing content data in the data distribution system according to the second embodiment.

Figure 18 is a third flowchart for explaining the distribution operation when purchasing content data in the data distribution system according to the second embodiment.

Figure 19 is a flowchart for explaining the operations of each part during the playback session using the memory card of the second embodiment.

Fig. 20 is a block diagram showing the structure of the memory card 116 of the third embodiment.

Figure 21 is the first flow chart for explaining the distribution operation when purchasing content materials in the material distribution system according to the third embodiment.

Figure 22 is a second flow chart for explaining the distribution operation when purchasing content data in the data distribution system according to the third embodiment.

Figure 23 is a third flow chart for explaining the distribution operation when purchasing content data in the data distribution system according to the third embodiment.

Fig. 24 is a flowchart for explaining the reproducing operation using the memory card 116 of the third embodiment.

Fig. 25 is a first flowchart for explaining the movement processing of the third embodiment.

Fig. 26 is a second flowchart for explaining the movement processing of the third embodiment.

Fig. 27 is a third flowchart for explaining the movement processing of the third embodiment.

[Technical Field]

The present invention relates to a data distribution system. In the information distribution system for distributing information to mobile phones and other terminals, a recording device such as a memory card that can protect the copyright of copied information, and the information recorded in the recording device A reproducing device, and a data distribution system equipped with the recording device and the reproducing device.

[Background technique]

With the advancement of digital information communication networks such as the Internet, users can easily obtain network information by using personal-oriented terminals such as mobile phones.

The above-mentioned digital information communication mainly uses digital signals to transmit information. That is, in the above-mentioned digital information communication network, when users transmit music or video information, there will be no problems such as deterioration of sound quality or picture quality.

Therefore, it is a very advantageous system for copyright holders to charge appropriate fees when distributing content data such as music or video information through the rapidly expanding digital information communication network.

On the other hand, in the absence of an effective copyright protection law when transmitting music, video information and other copyrighted content data on the above-mentioned digital information communication network, it will lead to the proliferation of copyright information in the digital information network. And seriously infringe the rights of copyright holders.

Therefore, when distributing content data such as music through the aforementioned digital communication network, or reproducing copyright information of the aforementioned content data, it is necessary to confirm whether the machine requesting the distribution is a regular machine.

At the same time, during the authentication process, it is necessary to prevent a third party from obtaining the content of the authentication procedure by improper means, and use the content to receive and distribute through the digital communication network.

In addition, it is also necessary to prevent the user from receiving the distribution of the above-mentioned music data, and copying the music data distributed at a time without restriction under the condition that reproduction is possible.

[Summary of Invention]

The purpose of the present invention is to provide a recording device, a reproducing device and a data distribution system using the device. With information communication networks such as mobile phones and other information communication networks, for users who can receive data, copyright can be protected, and at the same time, music data and other copyright information can be supplied.

Another object of the present invention is to provide a distributed data system that can effectively prevent the distributed copyrighted material from being arbitrarily copied without the permission of the copyright owner, and a recording device and reproducing device used in the data distribution system.

The present invention is a recording device for storing copyright information of reproduced encrypted content data; it has a first recording part, a plurality of authentication data holding parts and a first selection part.

The first memory part stores at least part of copyright information. A plurality of authentication data holding units respectively hold plural authentication data that can be authenticated by using a plurality of public authentication keys. The first selection unit selectively outputs the authentication data of the plurality of authentication data holding units to the outside of the recording device according to a request from the outside of the recording device.

An ideal recording device is provided with a second key holding unit, a third key holding unit, and a second decoding unit.

The second key holding unit holds the second public password key set in the recording device in advance. The third key holding part is asymmetrical with the second public encryption key, and at the same time, it uses the second public encryption key to hold the second secret decryption key for decoding the encrypted data. The second decoding unit receives the encrypted copyright information using the second public encryption key, and decodes it using the second secret decryption key.

In addition, an ideal recording device includes a second storage unit, a fourth key holding unit, a first encryption unit, and a third decoding unit.

The second memory part encrypts and stores the content data decoding key used to decode the encrypted content data in the copyright information. The fourth key holding unit is an original device of each recording device and holds at least one asymmetric secret inherent key in the common key mode. The first encryption unit receives the output of the second decoding unit and decodes it with a secret unique key. The second storage unit uses the first encryption unit to store the encrypted content decoding key, and the third decoding unit uses the secret inherent key to decode the content decoding key stored in the second storage unit.

According to another aspect of the present invention, a data reproduction device for decoding encrypted content data and reproducing the content data is provided with a data storage unit and a data reproduction unit.

The data storage unit holds the encrypted content data and the content decoding key used to decode the encrypted content data, and outputs the content decoding key in the encrypted state, and at the same time, it can be installed and unloaded on the data reproduction device. The data reproduction unit receives the output from the data storage unit and reproduces the encrypted content data.

The data reproduction unit includes: a first decoding processing unit; a second decoding processing unit; a plurality of authentication data holding units and a selection unit.

The first decoding processing unit uses the encrypted content decoding key from the data storage unit as the standard, and uses the first decoding key to perform decoding processing to extract the content decoding key. The second decoding processing unit receives the encrypted content data read from the data storage unit, and decodes and extracts the content data by the output of the first decoding processing unit. A plurality of authentication data holding parts, using the common plural public authentication keys in the distribution system, respectively hold plural authentication data that can be authenticated, and output them to the data storage part. The selection unit selectively outputs the data from the plurality of authentication data holding units to the outside of the data reproduction unit according to a request from the outside of the data reproduction unit. The data storage unit includes a control unit that performs authentication processing based on the authentication data from the selection unit, determines whether to output the encrypted content decoding key to the data reproduction unit according to the authentication result, and controls the output of the previous encrypted content decoding key.

According to the present invention, there are other aspects: a receiving terminal and a server.

The receiving terminal is a distribution system for distributing copyright materials that can reproduce at least encrypted content materials, and at the same time receiving distributed copyright information. The receiving terminal holds the encrypted content data and the content decoding key used to decode the encrypted content data, and outputs the content decoding key in the encrypted state, and the receiving terminal includes a removable data storage unit. The data storage unit has: a first storage unit; a second storage unit; a plurality of first authentication data storage units; and a first selection unit.

The first memory part stores encrypted content data. The second memory part uses the distribution system to store at least a part of the distributed copyright information. The multiple first authentication data holding parts use the multiple public authentication keys common in the distribution system to hold multiple authentication data that can be authenticated. The first selection unit selectively outputs authentication data from a plurality of first authentication data storage units to the outside of the data storage unit according to an external request from the data storage unit.

The server distributes copyright information. The server is equipped with a first control unit that performs authentication processing based on the authentication data from the data storage unit, and when the authentication result is judged to be valid, the first control unit is used to distribute copyright information.

Therefore, the advantage of the present invention lies in the following: using the distribution system of the recording device of the present invention, since most of the authentication keys for mutual authentication are used in a plural state, the authentication key corresponding to one of the authentication keys is even The security of the system can still be maintained if it is cracked by a third party.

In addition, for content keys that are ciphered by asymmetric key public key method and distributed, the original common secret key of the memory card with symmetric key method that can be quickly decoded can be re-encrypted and kept in memory. In the card, therefore, in the reproduction process of the music data corresponding to the encrypted content data, the content key of the information required for the reproduction process can be decoded at a high speed. In addition, by changing the key when sending the above data and the key when storing in the memory card, the security can be strengthened even more.

Schematic description

Figure 1 is a conceptual diagram for briefly explaining the overall structure of the data distribution system of the present invention.

Figure 2 is the data distribution system shown in Figure 1 to illustrate the characteristics of the password keys used in communication and data distribution.

Figure 3 is a diagram showing the use of Kmc and Kmb which are common to the system under normal circumstances.

Fig. 4 is a schematic block diagram of the structure of the copyright server 10 shown in Fig. 1.

Fig. 5 is a schematic block diagram for explaining the structure of the mobile phone 100 shown in Fig. 1.

FIG. 6 is a schematic block diagram for explaining the structure of the memory card 110 shown in FIG. 5.

Fig. 7 is a first flowchart for explaining the distribution operation when purchasing content data in the data distribution system according to the first embodiment.

Fig. 8 is a second flowchart for explaining the distribution operation when purchasing content data in the data distribution system according to the first embodiment.

Fig. 9 is a third flowchart for explaining the distribution operation when purchasing content data in the data distribution system according to the first embodiment.

Figure 10 is a flowchart for explaining the actions of each part during the playback dialogue.

Figure 11 is the first flow chart for explaining the movement process between the two memory cards 110 and 112.

Figure 12 is a second flow chart for explaining the movement process between the two memory cards 110 and 112.

Figure 13 is a third flow chart for explaining the movement process between the two memory cards 110 and 112.

Fig. 14 is a block diagram showing the structure of the memory card 114 of the second embodiment.

Figure 15 is a diagram for explaining the characteristics of the encryption key and the distributed data related to the communication used in the data distribution system of the second embodiment.

Figure 16 is the first flow chart for explaining the distribution operation when content materials are purchased in the material distribution system according to the second embodiment.

Figure 17 is a second flow chart for explaining the distribution operation when purchasing content data in the data distribution system according to the second embodiment.

Figure 18 is a third flowchart for explaining the distribution operation when purchasing content data in the data distribution system according to the second embodiment.

Figure 19 is a flowchart for explaining the operations of each part during the playback session using the memory card of the second embodiment.

Fig. 20 is a block diagram showing the structure of the memory card 116 of the third embodiment.

Figure 21 is the first flow chart for explaining the distribution operation when purchasing content materials in the material distribution system according to the third embodiment.

Figure 22 is a second flow chart for explaining the distribution operation when purchasing content data in the data distribution system according to the third embodiment.

Figure 23 is a third flow chart for explaining the distribution operation when purchasing content data in the data distribution system according to the third embodiment.

Fig. 24 is a flowchart for explaining the reproducing operation using the memory card 116 of the third embodiment.

Fig. 25 is a first flowchart for explaining the movement processing of the third embodiment.

Fig. 26 is a second flowchart for explaining the movement processing of the third embodiment.

Fig. 27 is a third flowchart for explaining the movement processing of the third embodiment.

Symbol description of main components

10. . . Copyright server

12. . . Authentication server

20. . . Distribution company (mobile phone company)

30. . . Distribution server

100, 102. . . Mobile phone

110, 112, 114, 116, 118. . . Memory card

302. . . Fee database

304. . . Information database

310. . . Data Processing Department

312, 320. . . Decoding processing unit

315. . . Distribution Control Department

316. . . Dialogue key generation part

326, 328. . . Encryption Processing Department

350. . . Communication device

1102. . . antenna

1104. . . Reception Department

1106, 1420. . . Control Department

1108. . . Key touch

1110. . . monitor

1112. . . Sound reproduction section

1120. . . Connector

1122. . . External face

1200. . . Memory interface

1400.1, 1500.1, 1400.2, 1500.2. . . Certification data retention department

1402. . . Kmc(1) holding part

1404, 1408, 1422. . . Decoding processing unit

1406, 1410, 1424. . . Encryption Processing Department

1415. . . Memory

1418. . . Dialogue key generation part

1440. . . Copyright Keeping Department

1448, SW1, SW2. . . Switch circuit

1504, 1510, 1516. . . Decoding processing unit

1506. . . Encryption Processing Department

1508. . . Dialogue key generation part

1518. . . Music Reproduction Department

1520. . . Kp holding part

1525. . . Mixing department

BS1, BS2, BS3. . . Data bus

[Best embodiment of the invention] The first embodiment

Figure 1 is a conceptual diagram for briefly explaining the overall structure of the data distribution system of the present invention.

In addition, the following takes the structure of a data distribution system that distributes music data to each user through a mobile phone network as an example. From the following description, it is clear that the distribution system of the present invention is not limited to music data. It can also be applied to the distribution of content data of other works, such as: image data, image data, reading data, teaching materials, game programs, etc., and also applicable to distribution through other digital information communication networks .

Referring to Figure 1, the copyright server 10 that manages copyrighted music data encrypts the music data (hereinafter also referred to as content data) in accordance with the prescribed encryption method, and then sends the encrypted content data to the user The distribution company 20 that distributes the encrypted content data and the information containing the content decoding key for reproduction (the right information for reproduction is referred to as "copyright") is also the mobile phone company. In addition, the authentication server 12 authenticates whether the mobile phone and memory card of the user requesting the distribution of the music data is a regular machine.

The distribution company 20 forwards the distribution request (distribution request) of each user to the copyright server 10 through its mobile phone network. The copyright server 10, under the distribution request, uses the authentication server 12 to confirm whether the user's memory card is a regular machine, and then through the mobile phone network of the distribution company 20, the encrypted content corresponding to the requested music The information and its copyright are distributed to the mobile phone of each user.

In Fig. 1, for example, the mobile phone 100 of the user 1 is configured to be equipped with a removable memory card 110.

The memory card 110 uses the mobile phone 100 to receive the received encrypted content data and copyright, decodes the above-mentioned encrypted content data, and then transmits it to the music reproduction part (not shown in the figure) in the mobile phone 100.

In addition, for example, the user 1 can listen to music by using the headset 130 connected to the mobile phone 100 to "reproduce" the above-mentioned content data.

Hereinafter, the above-mentioned copyright server 10, authentication server 12, and distribution company 20 (mobile phone company) are merged and collectively referred to as distribution server 30.

In addition, the processing of transmitting content data to each mobile phone by the above-mentioned distribution server 30 is called "distribution".

With the above configuration, firstly, users who have not purchased a regular memory card cannot obtain and reproduce the distribution data from the distribution server 30.

At the same time, the distribution company 20 pre-calculates the degree when distributing, for example, a piece of content material. The user should pay the copyright fee when receiving the distribution of the content material. The distribution company 20 charges a mobile phone call fee. In this way, the copyright fee of the copyright owner can be effectively ensured.

At the same time, the distribution of the above-mentioned content data is carried out through a closed mobile phone network, which is more advantageous for copyright protection than open systems such as the Internet.

At this time, the user 2 possessing the memory card 112 can directly receive the content data distributed from the distribution server 30 through the mobile phone 102 possessed. However, when the user 2 directly receives a large amount of content data from the distribution server 30, it takes a lot of time. At this time, if the user 1 who has received the data distribution can copy the content data, the user's convenience can be improved.

However, from the point of view of protecting the rights of copyright owners, arbitrary copying of content materials is not allowed in the system configuration.

As shown in Figure 1, regarding the data received by user 1, when user 1 copies the data and moves the copyright of the data to user 2, it is called "movement" of music data. At this time, with the mobile phone 100 or 102, the encrypted content data and copyright (right for reproduction) between the mobile memory cards 110 and 112. Here, as explained below, "copyright" has: a copyright decoding key that can be used to decode content data encrypted in a prescribed encryption method; News.

For "move", only copying the encrypted content data is called "copy". In the process of copying, user 2 cannot reproduce the content data because the copyright has not been obtained. The description is omitted here. By distributing the copyright including the copyright decoding key, the user 2 can reproduce the content data.

With the above configuration, the recipient can flexibly use the content data distributed by the distribution server 30 once they receive it.

In addition, when the mobile phones 100 and 102 are PHS (Personal HandyPhone), they can make calls in a so-called transceiver mode. Therefore, the function can be used to move information between user 1 and user 2.

In the structure shown in Figure 1, in order to allow the user to regenerate the distributed encrypted content data, the necessary items on the system are: first, the method to distribute the encrypted key during communication, and the second , The method of encrypting content data, third, to prevent the above-mentioned, distributed content data from being copied at will to achieve data protection.

In the embodiment of the present invention, in particular, during the distribution and reproduction of each session period, the authentication and inspection functions of the destination of the content data are strengthened, and the distribution of the data of the non-authenticated recording device is prevented. Sending or moving and the reproduction in the content reproduction circuit explain the structure of strengthening the copyright protection of the distributed material.

[The composition of system keys and data]

Figure 2 is a diagram illustrating the characteristics of the password key used in communication and the data distribution in the data distribution system shown in Figure 1.

First, the data distributed by the distribution server is content data such as music data. The content data Date, as described below, is in a form that the encrypted content data {Date}Kc can be decoded by at least the content decoding key Kc, and is transmitted to the user by the distribution server 30.

In addition, in the following, the notation of {Y}X means the information that transforms the data Y into a decodable code using the key X.

In addition, the distribution server 30 distributes the content data, and the additional information Date-inf of the work related to the content data or the plain text data related to server access. That is, the additional information Date-inf includes: the track of the content data and other information used to specify the content data; the distribution server 30 is used to specify the information of the server therein.

In addition, the encryption and decoding of relevant content materials. The authentication keys for reproduction processing, content reproduction circuits of mobile phones, memory cards of recording devices, etc., include the following parts.

That is, as mentioned above, there is a content decoding key Kc for encrypting or decoding content data; a public encryption key KPp(x) in the content reproduction circuit (mobile phone 100); a public password in the memory card The key KPmc(x).

The data encrypted with the public encryption keys KPp(x) and KPmc(x) can use the inherent secret decoding key Kb(x) of the content reproduction circuit (mobile phone 100) and the fixed secret decoding key Kmc(x) of the memory card Decode them separately. The public cipher keys KPp(x) and KPmc(x) are asymmetric cipher keys that can be respectively decoded by the secret decoding keys Kp(x) and Kmc(x). The fixed secret decryption key has different contents with different mobile phones and different types of memory cards. Here, the mobile phone or memory card is based on the type and date of manufacture of the manufacturer that manufactures the product. The natural number x represents the number used to distinguish the types of memory cards and content reproduction circuits (mobile phones).

In addition, there are public authentication keys Kpma and KPmb that are commonly used in the overall distribution system. The following description is that at the initial stage, the number of authentication keys commonly used in the overall distribution system is two, but during the operation period of the distribution system, in general, the system uses more than two authentication keys.

In addition, the above-mentioned memory card and the encryption keys KPmc(x) and KPp(x) respectively set in the content reproduction section are used as authenticated public encryption keys with a certificate' to {KPmn(x)}Kpmy and { KPp(x)}Kpmy in the form (y=a,b), recorded on the memory card and mobile phone at the time of shipment _。

In addition, the equipment constituting the system, that is, the information used to control the actions of the mobile phone 100 or the memory card 110 for the content reproduction circuit includes: when the user purchases the content decoding key, etc., the mobile phone 100 sends the server to the distribution server 30 Send purchase condition information AC for specifying purchase conditions; purchase condition information AC according to the intention of the content data provider and the intention of the content data purchaser is sent from the distribution server 30 to the memory card 110 installed in the mobile phone 100 , And limit the access restriction information AC1 of the access times of the memory card 110; sent from the distribution server 30 to the memory card 110 installed in the mobile phone 100, and from the memory card 110 to the content reproduction circuit in the mobile phone 100 , Reproduction circuit restriction information AC2 that restricts the reproduction conditions of the content reproduction circuit. The reproduction condition of the content reproduction circuit means, for example, when a cheap or free sample is distributed during the promotion of a new song, the condition that allows the reproduction of the material only at the time specified at the beginning of each content material.

In addition, the keys used to manage the data processing in the memory card 110 include: a publicly encrypted key KPm(i) (i: natural number) set in recording devices such as memory cards; and a publicly encrypted key KPm(i) ) The inherent secret decoding key Km(i) for decoding encrypted data. Here, the natural number I represents the number used to distinguish each memory card.

In addition, in the data distribution system shown in Figure 1, the keys used in data communication include the following parts.

That is, as the secret key for keeping the data received between the external memory card and the memory card, the common keys Ks1 to Ks4 are often used. Regeneration circuit (mobile phone 100 or 102), memory card 110 or 112.

Here, the common keys Ks1 to Ks4 are inherent common keys that are generated in the "dialogue" of the communication unit or access unit between the distribution server, content reproduction circuit, or memory card. Hereinafter, the common keys Ks1 to Ks4 are called "Talk button".

These dialog keys Ks1 to Ks4 are managed by the distribution server, content reproduction circuit, and memory card by having the inherent values in each communication dialog.

Specifically, the dialog key Ks1 is generated in each distribution dialog by the copyright server in the distribution server. The dialogue key Ks2 is generated by the memory card in each distribution dialogue and mobile (receiving side) dialogue, and the dialogue key Ks3 is also generated by the memory card in each reproducing dialogue and mobile (transmitting side) dialogue. The dialogue key Ks4 is generated in each regeneration dialogue by the regeneration circuit. In each dialog, the dialog key is granted and accepted, and the dialog key generated by other machines is received, and the encryption key is used for encryption and the transmission of the copyright decoding key, etc., which can improve the security between the dialogs.

In addition, the authorization and acceptance data between the authorization server and the mobile phone includes the content ID used by the system to identify the content data, the copyright issuance date, and the copyright ID of the management code used to specify the distribution object, which are generated in each distribution dialog to specify The transaction ID of each distribution dialogue, etc.

[Use of System Authentication Key]

Figure 3 shows that in the above-mentioned distribution system, the common public authentication keys KPma and KPmb are used to decode to perform authentication ciphering. Under normal conditions, the use of the secret authentication keys Kma and Kmb common to the systemPicture. The certification key Kma, the certification key KPma, the certification key Kmb, and the certification key KPmb are pairs.

As mentioned above, in the initial stage, the number of certification keys commonly used in the entire distribution system is two. Use the keys set at the beginning of the system operation as the proof keys Kma1 and Kmb1. Corresponding to the two secret certification keys, the public certification keys KPma1 and KPmb1 have also begun to be used in the system.

After starting to use the system for a set period of T1 (for example: 2 years), the system starts to operate with two pairs of certification keys and certification keys.

After the period T1 has elapsed, the common secret certification keys Kma2 and Kmb2 and the public certification keys KPma2 and KPmb2 are newly added to the entire distribution system to use the system. In the following, in the same way as above, after the period T1 has elapsed, two pairs of certification keys and authentication keys are newly added to operate the system.

The two certification keys invested in the same period will stop their use on the system after the specified period T2 (for example: 18 years).

Although there are no special restrictions, according to the above-mentioned operation method, after the period of T2 has elapsed, the number of authentication keys usually set (as shown in Figure 3, there are 9 groups) can be used in the system.

By using the above authentication keys, the memory card 110 of the machine that constitutes the system usually uses plural public authentication keys and plural secret certification keys to hold the ciphered plural public cipher keys with certificates, and the content reproduction circuit (mobile phone) 100) Keep the plural public keys with certificates. In addition, each secret certificate key is managed by a different administrator. In this way, even if a third party obtains one of the secret certificate keys in the system by improper means, By using other secret certification keys to cipher the certification process of the public encryption key with certification, the secret certification key can prevent the acceptance of the distribution or regeneration process of the public encryption key with certification obtained by illegal means. .

In addition, the number of authentication keys put into the system during the same period is not limited to two, and multiple authentication keys can also be put in at the same time.

To simplify the description, the following description is for the period T1 after the start of operation, and the system uses two authentication keys KPma and KPmb. In addition, the public ciphered key with the certificate will be referred to as the authentication data below.

[Configuration of Copyright Server 10]

Fig. 4 is a schematic block diagram showing the structure of the copyright server 10 shown in Fig. 1.

The copyright server 10 has: a copyright ID corresponding to the encrypted music data (content data); an information database 304 for holding distributed data such as copyright decoding keys for decoding the encrypted music data; each user starts to access The charging database 302 used to maintain the charging data when music data; the data processing unit 310 used to perform prescribed processing through the data bus BS0 to receive the data from the information database 304 and the charging database 302; through the communication network, use A communication device 350 for receiving and receiving data between the distribution company 20 and the data processing unit 310.

The data processing unit 310 includes: a distribution control unit 315 that responds to the data on the data bus BS0 to control the actions of the data processing unit 310; it is controlled by the distribution control unit 315 and is used to generate a dialog key Ks1 when a dialog is distributed The dialogue key generating part 316; using the communication device 350 and the data bus BS1 to receive the authentication data {KPmc(j)}Kpmy(y=a,b) transmitted by the mobile phone from the memory card to perform the authentication key KPmt(y = a, b) the decoding processing section 312 of the decoding process; using the public encryption key KPmc(j) obtained by the decoding processing section 312, the dialogue key Ks1 generated by the dialogue key generation section is encrypted and output In the encryption processing unit 318 of the data bus BS1; each user receives the transmission data encrypted with the dialogue key Ks1 from the data bus BS1, and performs the decoding processing of the decoding processing unit 320.

The data processing unit 310 further includes: an encryption processing unit 326 for encrypting the copyright data output by the distribution control unit 315 by using the inherent public encryption key KPm(i) of the memory card obtained by the decoding processing unit 320; The dialog key Ks2 obtained by the decoding processing unit 320 is used to cipher the output of the encryption processing unit 326 to be output to the encryption processing unit 328 of the data bus BS1.

[Constitution of mobile phone 100]

Fig. 5 is a schematic block diagram for explaining the structure of the mobile phone 100 shown in Fig. 1.

In the mobile phone 100, the natural number representing the type (level) of the content data reproduction circuit of the mobile phone 100 is x, and x=1.

The mobile phone 100 includes: an antenna 1102 that uses the mobile phone network to receive wirelessly transmitted signals; receives the signal transmitted by the antenna and transforms it into a baseband signal, or modulates the data of the mobile phone 100 for transmission The receiving part 1104 to the antenna 1102; the data bus BS2 for receiving data from each part of the mobile phone 100; and the control part 1106 for controlling the actions of the mobile phone 100 through the data bus BS2.

The mobile phone 100 further includes: a key touch portion 1108 for transmitting external instructions to the mobile phone 100; a display 1110 for transmitting the information output by the control portion 1106 as visual information to the user; in general call actions, use The data bus BS2 is used to reproduce the sound according to the received data. The sound reproduction part 1112; the connector 1120 to receive and receive data from the outside; to convert the data 1120 of the connector to be sent to the data bus BS2 signal, or the external interface 1122 used to transform the data of the data bus BS2 into a signal that can be sent to the connector 1120.

The mobile phone 100 also includes: a removable memory card 110 that memorizes encrypted music data (encrypted content data) and stores the encrypted information at any time; it is used to control the reception of data between the memory card 110 and the data bus BS2 The memory interface 1200; the public encryption key KP(1) set in different types of mobile phones, the authentication data holding part 1500.1 that holds the encrypted data in a decodable state using the authentication key Kpma; the public encryption key KP(1), use the authentication key Kpmb to hold the authentication data holding unit 1500.2 of the encrypted data in a decipherable state; selectively transmit the data of the authentication data holding unit 1500.1 and the authentication data holding unit 1500.2 controlled by the control unit 1106 Switch circuit SW1 to data bus BS2.

In addition, as mentioned above, in the data distribution system, as the number of authentication keys used in the system increases during operation, the authentication data holding part 1500.m (m: natural number) can be added to match the increase in the number of authentication keys. ).

The mobile phone 100 also includes: a Kp holding unit 1520 for holding the inherent secret decoding key Kp(1) of the mobile phone (content reproduction circuit); using the secret decoding key Kp(1) to decode the data from the data bus BS2, and obtain the information from the memory The decoding processing unit 1504 of the dialogue key Ks3 generated by the card; in the reproducing dialogue of the content data stored in the memory card 110, the data bus BS between the memory card 110 and the memory card 110 are used to generate random numbers and so on. The dialog key generation unit 1508 of the dialog key Ks4 for ciphering dialog data; the dialog key Ks4 generated is encrypted using the dialog key Ks3 obtained by the decoding processing unit 1504 and output to the encryption processing unit 1506 of the data bus BS2 ; Use the dialogue key Ks4 to decode the data on the data bus BS2, and output the content decoding key Kc and the decoding processing unit 1510 of the reproduction circuit control information AC2.

The mobile phone 100 further includes: a decoding processing unit 1516 that receives encrypted content data {Date}Kc from the data bus BS2, and decodes it by using the content decoding key obtained by the decoding processing unit 1510 to output content data; receiving and decoding The output of the processing unit 1516 is used for the music reproduction unit 1518 for reproducing content data; the output of the music reproduction unit 1518 and the sound reproduction unit 1112 are received, and the mixing unit 1525 for selective output in cooperation with the dynamic mode; the output of the mixing unit 1525 is received , Used to connect the connection terminal 1530 of the earphone 130.

Here, the reproduction circuit control information AC2 output by the decoding processing unit 1510 is transmitted to the control unit 1106 through the data bus BS2.

In addition, in Figure 5, in order to simplify the description, the block diagram constituting the mobile phone only describes the distribution of the music data and the block diagram related to the reproduction of the present invention, and the remaining block diagrams related to the original communication function of the mobile phone. It is omitted.

[Composition of memory card 110]

FIG. 6 is a schematic block diagram for explaining the structure of the memory card 110 shown in FIG. 5.

As explained above, the public encryption key KP(i) and the secret decryption key Km(i) corresponding to the public encryption key are inherent values of each memory card, but in the memory card 110, its natural number i=1 . In addition, KPmc(x) and Kmc(x) are provided as the public encryption key and secret decryption key inherent in the type (level) of the memory card. In the memory card 110, the natural number x is represented by x=1.

The memory card 110 includes: a data bus BS3 that uses the terminal 1202 to receive signals between the memory interface 1200; a certification data retention unit 1400.1 that retains certification data {KPmc(1)}KPmb; and a certification data retention portion 1400.1 that retains certification data {KPmc(1)}KPmb The authentication data holding part 1400.2; the output of the authentication data holding part 1400.1 and the output of the authentication data holding part 1400.2 controlled by the control part 1420 are selectively sent to the switch circuit SW2 of the data bus BS3; the storage is set to different memory card types The Kmc holding section 1402 of the unique decoding key Kmc(1); the Km(1) holding section 1421 holding the secret decoding keys Km(1) set in different memory card types; using the secret decoding key Km(1) to hold The KPm(1) holding part 1416 of the publicly ciphered key KPm(1) that performs decodable encryption.

Here, the authentication data holding unit 1400.1 decodes the public encryption keys KPmc(1) set in the memory cards of different levels with the authentication key Kpma and encrypts and holds them in an authenticated state. The authentication data holding unit 1400.2, the public encryption key KPmc(1) is decoded with the authentication key KPmb, encrypted and kept in an authenticated state. As the number of authentication keys increases during the operation of the system, an authentication data holding unit 1400m (m: natural number, m&gt;2) is added to match the increase in authentication keys.

The memory card 110 also includes: according to the data obtained from the memory interface 1200 in the data bus BS3, the Kmc(1) holding unit 1402 receives the inherent secret decoding key Kmc(1) according to different memory card types, and distributes it to the server 30 and output the dialog key Ks1 generated in the distribution dialog or the dialog key Ks3 generated in the mobile dialog of other memory cards to the decoding processing unit 1404 of the contact Pa; the authentication keys used to hold the authentication keys Kpma and KPmb respectively Holding part 1444.1 and authentication key holding part 1444.2; a switch circuit 1448 that receives the authentication key KPma from the authentication key holding part 1444.1 and receives the authentication key Kpmb from the authentication key holding part 1444.2, and selectively outputs it according to the control of the control part 1420 ; Receive the output of the switch circuit 1448, the data transmitted by the data bus BS3 is decoded using the authentication key KPma or Kpmb, and the decoded result is output to the control unit 1420 and the encryption processing unit 1410 through the data bus BS4 for decoding processing Section 1408: Use the key selected by the switch 1442 to encrypt the data selected by the switch 1444 and output it to the encryption processing section 1406 of the data bus BS3.

As the number of authentication keys increases during the operation of the system, an authentication data storage unit 1400.m (m: natural number, m&gt;2) is added to match the increase in authentication keys.

The memory card 110 includes: a dialog key generating unit 1418 that generates a dialog key Ks2 or Ks3 in each dialog of distribution, reproduction, and movement; using the public encryption key KPp(x) or Kpmc() obtained by the decoding processing unit 1408 x) Encrypt the dialog key Ks3 output by the dialog key generating unit 1418 and output it to the encryption processing unit 1410 of the data bus BS3; use the dialog key Ks2 or Ks3 to receive the encrypted data from the data bus BS3 and use it The dialog key Ks2 or Ks3 obtained by the dialog key generating unit 1418 is decoded, and the decoded result is output to the decoding processing unit 1412 of the data bus BS4.

The memory card 110 includes: an encryption processing unit 1424 for encrypting the data on the data bus BS4 with the public encryption key KPm(i)(i1) inherent in other memory cards; and the data on the data bus BS4 The decryption processing unit 1422 that uses the inherent secret decryption key Km(1) in the memory card 110 that is paired with the public encryption key KPm(1) is used for encryption; Receive and store reproduction information (content decoding key Kc, content ID, copyright ID, access control information AC1, reproduction circuit control information AC2), and at the same time receive and store encrypted content data {Date}Kc and additional information from data bus BS3 Date-inf memory 1415. The structure of the memory 1415 is not particularly limited, and its structure is, for example, a semiconductor memory such as a flash memory.

The memory card 110 further includes: a copyright holding unit 1440 for holding the copyright ID, content ID, and access restriction information AC1 obtained by the decoding processing unit 1422; The reproduced information between the data bus BS4 is used to control the operation of the memory card 110 by the control unit 1420.

The copyright holding unit 1440 can receive data of copyright ID, data content ID data, and access restriction information AC1 between the data bus BS4. The copyright holding unit 1440 has N (N: natural numbers) storages that can correspond to each copyright Part of the regeneration information is stored in each storage.

In addition, the copyright holding unit 1440 records information about prohibited use sent by the distribution server as required.

In addition, in Figure 6, the part enclosed by the dotted line is equipped with the memory card 110, due to improper external unpacking processing, which causes the disappearance of internal data or the destruction of the internal circuit, so as to prevent the third person from reading The TRM module is the circuit data module that exists in the field. Most of the aforementioned modules are Tamper Resistant Modules.

The memory 1415 can also be assembled in an anti-interference module. With the structure shown in Figure 6, the data held in the memory 1415 is encrypted data. The third party can only use the data in the memory 1415 to reproduce music data, and at the same time, it is not necessary. The memory 1415 is assembled in the expensive anti-interference module, so it has the advantage of reducing the manufacturing cost.

In addition, it can also be a structure that keeps all reproduction information in the copyright holding section. In this case, there is no need to record the reproduced information encrypted with the public key KPm(1) in the memory 1415.

[Distribution Action]

Hereinafter, according to the first embodiment of the present invention and with reference to the flowchart, the operation of each dialogue related to the data distribution system of the present invention will be described in detail.

Figures 7, 8, and 9 are used to illustrate the first, second, and second distribution actions (hereinafter referred to as the distribution dialog) that occur when the content data of the data distribution system is purchased according to the first embodiment The third flowchart.

7, 8 and 9 illustrate the operation of the user 1 using the memory card 110 and receiving the content data from the distribution server 30 through the mobile phone 100 for distribution.

First, the user 1 uses the mobile phone 100 of the user 1 to use the keyboard operation of the key touch portion 1108 to execute the distribution request. (Step S100)

In response to the distribution request, the memory card 110 first determines whether the copyright holding unit 1440 does not record the authentication key KPma for prohibiting use. (Step S101) If the authentication key KPma is not instructed to prohibit the use of the authentication key KPma, the process of step S102 is performed, and if the use of the authentication key KPma is instructed to be prohibited, the process of step S118 is performed.

When the use of the authentication key Kpma is not prohibited, the authentication data {Kpma(1)} Kpma is output by the authentication data holding unit 1400.1 (step S102). In addition, when the system starts to operate, when the authentication key Kpma is cracked by a third party and is not recorded on the memory card 110, the authentication key is not prohibited from being used, and the processing path can be selected.

The mobile phone 100 sends the authentication data {Kpma(1)}Kpma received from the memory card 110, the content data ID used to instruct to receive the distributed content data, and the data AC of the copyright purchase conditions to the distribution server 30 . (Step S104)

After the distribution server 30 receives the content data ID of the mobile phone 100, the authentication data {Kpma(1)}Kpma, and the copyright purchase condition data AC (step S106), the decoding processing unit 312 performs a decoding process with the authentication key Kpma. Thereby, the distribution server 30 accepts the public encryption key KPmc(1) of the memory card 110 (step S108).

The distribution control unit 315 performs a comparison with the authentication server 12 based on the received secret decryption key KPmc(1) and authentication key Kpma (step S110), and the public encryption key KPmc(1) encrypted with the authentication key KPma ) Make a formal login, and because of the implementation of formal encryption, when the authentication result is judged to be valid by the authentication key Kpma (step S110), the process of step S132 is performed.

On the other hand, when the public encryption key KPmc(1) encrypted with the authentication key KPma has not been ciphered with respectful registration (step S110), the process ends when it is judged that the authentication result is invalid (step S110). S190).

In addition, if the authentication key Kpma is a key that has been cracked by a third party, when the authentication key Kpma is judged to be invalid by the result of the comparison with the authentication server 12 (step S110), the server 30 is distributed to output "Authentication key Kpma use prohibited Notification" (step S112). When the mobile phone 100 accepts the use prohibition notification of the authentication key Kpma (step S114), that is, in the copyright holding section 1440 of the memory card 110, the use prohibition of the authentication key Kpma is recorded (step S116). Then, the authentication data {Kpmc(1)}Kpmb is output by the data holding unit 1400.2 (step S118).

The mobile phone 100 sends the authentication data {Kpmc(1)}Kpmb received from the memory card 110, the content data ID used to indicate the reception of the distributed content data, and the data AC of the copyright purchase conditions to the distribution server 30 (Step S120).

The distribution server 30 receives the content data ID of the mobile phone 100, the authentication capital {Kpmc(1)}Kpmb, and the copyright purchase condition data AC (step S122), and then performs the decoding process in the decoding processing unit 312 with the authentication key Kpma. Thereby, the distribution server 30 accepts the public encryption key KPmc(1) of the memory card 110 (step S124).

The distribution control unit 315 performs a comparison with the authentication server 12 based on the received secret decryption key KPmc(1) and authentication key Kpmb (step S126), and the public encryption key KPmc(1) encrypted with the authentication key KPma ) Make a formal login, and because of the implementation of formal encryption, when the authentication result is judged to be valid by the authentication key Kpmb (step S110), the process of step S132 is performed.

On the other hand, when the public encryption key KPmc(1) encrypted with the authentication key KPmb has not been properly registered and encrypted (step S110), or the authentication key KPmb has been cracked by a third party and is invalid (Step S126), when it is determined that the authentication result is invalid, the processing is ended (Step S190).

Here, when the authentication key is used for the decoding process, when the public encryption key KPmc is authenticated, the authentication key KPma or KPmb can be used to decode, and the certificate attached to each public encryption key KPmc(1) is encrypted And send the message to the distribution server 30.

According to the result of the above comparison, when it is judged that the memory card 110 is valid, the distribution control unit 315 generates a transaction ID for specifying the distribution dialogue (step S132).

Referring to Fig. 8, after that, the dialogue key generating unit 312 generates the dialogue key Ks1 for distribution. The conversation key Ksl is used to correspond to the public encryption key KPmc(1) of the memory card 110 obtained by the decoding processing unit 312, and is encrypted by the encryption processing unit 318 (step S134).

The transaction ID and the encrypted dialogue key {Ks1}Kmc(1) are output to the outside through the data bus BS1 and the communication device 350 (step S136).

When the mobile phone 100 receives the transaction ID and the encrypted dialogue key {Ks1}Kmc(1) (step S138), the encrypted dialogue key {Ks1}Kmc(1) is input into the memory card 110. In the memory card 110, through the memory interface 1200, the decoding processing unit 1404 uses the inherent secret decoding key Kmc(1) of the memory card 110 held in the holding unit 1402 to perform the decoding process, and the received signal from the data bus BS3 Data, decode and extract the dialogue key KS1 (step S140).

After the control unit 1420 confirms the acceptance of the dialogue key Ks1 generated by the distribution server 30, it instructs the dialogue key generation unit 1418 to generate the dialogue key Ks2 when the distribution dialogue is performed in the memory card 110.

The encryption processing unit 1406, through the contact Pa of the switch 1442, by the dialogue key Ks1 from the decoding processing unit 1404, and through the contact Pc of the switch 1444, by switching the contact of the switch 1446, and Encrypt the conversation key Ks2 and the inherent public encryption key KPm(1) of each memory card through the contact Ke and Kf respectively, and output {KS2//KPm(1)}Ks1 to the data bus BS3 (step S142).

The data {KS2//KPm(1)}KS1 output on the data bus BS3 is sent to the mobile phone 100 by the data bus BS3 through the terminal 1202 and the memory interface 1200 (step S142), and the mobile phone 100 is attached After the transaction ID is sent to the distribution server 30 (step S144).

In addition, the symbol of {X//Y}Z means that data X and data Y are encrypted data that can be decoded with the key Z respectively.

The distribution server 30 receives the transaction ID and encrypted data {Ks2//KPm(1)}Ks1, decodes it with the dialogue key Ks2 in the decoding processing unit 320, and accepts the dialogue key Ks2 and the memory card generated on the memory card 110 inherent public encryption key KPm(1). (Step S146)

In addition, the distribution control unit 315 generates the copyright ID, the access restriction information AC1, and the reproduction circuit control information AC2 based on the content ID and copyright purchase condition data AC obtained in step S106 (step S150). In addition, the information database 304 is used to obtain the content decoding key Kc for decoding the encrypted content data (step S152).

The distribution control unit 315 uses the encryption processing unit 326 to convert the content decoding key Kc, reproduction circuit control information AC2, copyright ID, content ID, and access restriction information AC1 to the memory card 110 obtained by the decoding processing unit 320 The inherent public encryption key KPm(1) is encrypted. (Step S156)

The encryption processing unit 328 receives the output of the encryption processing unit 326, and uses the dialogue key Ks2 generated by the memory card 110 to encrypt it. Attach the transaction ID to the encrypted data {{Kc//AC2//copyright ID//content ID//AC1}Km(1)} Ks2 output by the encryption processing unit 328, using the data bus BS1 and communication The device 350 sends the signal to the mobile phone 100 (step S158).

In the above-mentioned manner, the dialog keys generated by the distribution server 30 and the memory card 110 are corresponding to each other, and the encrypted keys received from each other are used for encryption. By sending the encrypted data to the other party, Mutual authentication can be carried out when the encrypted data is received, and the security of the data distribution system can be improved.

The mobile phone 100 receives the sent transaction ID and encrypted data {{Kc//AC2/copyright ID//content ID//AC1}Km(1)}Ks2 (step S160), and encrypts the received information Data is input to the memory card 110. The memory card 110 uses the decoding processing unit 1412 to decode the encrypted data from the data bus BS3 through the memory interface 1200. That is, the decoding processing unit 1412 decodes the received data of the data bus BS3 with the dialog key Ks2 from the dialog key generating unit 1418 and outputs it to the data bus BS4 (step S164).

Referring to Figure 9, the data {{Kc//AC2//copyright ID//content ID//AC1}Km(1)} Ks2 output on the data bus BS4 is recorded on the memory card 1415 outside the TRM domain (step S116 ).

In addition, the data can be decoded by the secret decoding key Km(1) held in the Km(1) holding part 1421, and output to the data bus BS4 {{Kc/AC2//copyright ID//content ID//AC1} Km(1)}Ks2, according to the instruction of the control unit 1420, the decoding processing unit 1422 uses the secret decoding key Km(1) to decode, and accepts the content decoding key Kc, playback circuit control information AC2, copyright ID, content ID, and storage Obtain restriction information AC1 (step S168).

In addition, the copyright ID, content ID, and access restriction information AC1 are recorded in the storage j of the jth storage in the space of the copyright holding unit 1440 (step S172). Here, the natural number j is the number corresponding to the content data, 1jN (N: the total number of storage).

After the steps to step S152 are correctly completed, the mobile phone 100 requests the distribution of reproduced information such as content decoding keys and encrypted content data, or only the distribution of reproduced information such as content boundary code keys, instructed by the user 1 (Step S174).

When it is requested to distribute the reproduction information and content data such as the content decoding key, the distribution request of the content data and the transaction ID are sent from the mobile phone 100 to the distribution server 30 (step S176). On the other hand, when only the copyright information such as the content decoding key is required to be distributed, the processing of step S184 is performed.

When receiving the content data distribution request, the distribution server 30 receives the content data distribution request, obtains the encrypted content data {Date}Kc and the additional data DATE-inf from the information database 304, and attaches it to the additional data The transaction ID is output through the data bus BS1 and the communication device 350 (step S178).

The mobile phone 100 receives {Date}Kc//DATE-inf//transaction ID, and accepts the encrypted content data {Date}Kc and the additional data DATE-inf (step S180). The encrypted content data {Date}Kc and the additional data DATE-inf are transmitted to the data bus BS3 of the memory card 110 through the memory interface 1200 and the terminal 1202. In the memory card 110, the received encrypted content data {Date}Kc and the additional data DATE-inf are directly recorded in the memory 1415 (step S182).

In addition, the mobile phone 100 transmits the notification of the transaction ID distribution acceptance to the distribution server 30 (step S184), and when the distribution server 30 receives the transaction ID distribution acceptance (step S186), it starts to store the charge data In the database 302, the distribution process is ended (step S188), and the entire process is completed (step S190).

Through the above-mentioned processing, the distribution request can only be performed when the public encryption key KPmc(1) transmitted by the memory card 110 of the mobile phone 100 is confirmed to be valid, and the distribution of the content data can be effectively prohibited. Improper machine distribution, so the safety can be improved during distribution.

In addition, the transaction ID is attached to a series of receptions, and the transaction ID is used to identify the communication in the same distribution. The transaction ID is not explained in detail, but the processing ends when the corresponding transaction ID is not obtained.

[Regeneration Action]

The mobile phone 100 is used for reproducing music from the encrypted content data held in the memory card 110, and outputting the music to the outside (hereinafter referred to as reproducing dialogue).

Figure 10 is a flow chart for explaining the actions of each part when the dialogue is replayed.

Referring to Fig. 10, a regeneration request is generated by the instruction of the user 1 from the key touch portion 108 of the mobile phone 100 (step S200).

The mobile phone 100 responds to the generated regeneration request, and the authentication data holding unit 1500.1 outputs the authentication data fKPp(1)}Kpma that can be decoded by the authentication key Kpma to the data bus BS2 (step S202).

The authentication data {KPp(1)}Kpma is transmitted to the memory card 110 through the data bus BS2 and the memory interface 1200.

In the memory card 110, the authentication data {KPp(1)}Kpma for authentication transmitted to the data bus BS3 via the terminal 1202 is received by the decoding processing unit 1408. The decoding processing unit 1408 receives the authentication key Kpma from the authentication key holding unit 1414.1, decodes the data of the data bus BS3, and accepts the decoded public encryption key KPp(1) (step S204).

Use the authentication key Kpma to formally register the encrypted public password key KPp(1), and apply the formal encryption, that is, the authentication key Kpma can be used to decode and identify the subordinate data generated during decoding. At the same time, the copyright preservation department When the authentication key in 1440 is not recorded as prohibited to use (step S206), the authentication result of the authentication key Kpma is recognized and the processing of step S214 is performed.

On the other hand, when it cannot be decoded, or the dependent data generated during the decoding process cannot be recognized, or the authentication key is prohibited to use (step S206), the authentication result obtained by the authentication key Kpma is not recognized, and the result is notified to the mobile phone 100.

When the authentication result of the authentication key Kpma is not recognized, the mobile phone 100 outputs the authentication data {KPp(1)}KPmb that can be decoded by the authentication key KPmb from the authentication data holding unit 1500.2 to the data bus BS2 (step S208).

The encrypted data {KPp(1)}KPmb for authentication is transmitted to the memory card 110 through the data bus BS2 and the memory interface 1200.

In the memory card 110, the authentication data {KPp(1)}Kpmb for authentication transmitted to the data bus BS3 via the terminal 1202 is received by the decoding processing unit 1408. The decoding processing unit 1408 receives the authentication key Kpmb from the authentication key holding unit 1414.2, decodes the data of the data bus BS3, and accepts the decoded public encryption key KPp(1) (step S210).

Use the authentication key Kpmb to formally register the encrypted public password key KPp(1), and apply the formal encryption, that is, the authentication key Kpmb can be used to decode the subordinate data generated during the decoding process. At the same time, the copyright preservation department When the authentication key in 1440 is not recorded as prohibited to use (step S212), the authentication result of the authentication key Kpmb is recognized and the processing of step S214 is performed.

On the other hand, if it cannot be decoded, or the dependent data generated during the decoding process cannot be recognized, or the authentication key is forbidden to use (step S212), the authentication result obtained by the authentication key Kpmb is not recognized, and the result is notified to the mobile phone 100 (step S240).

The control unit 1420 uses the decoding processing unit 1408 to receive the public encryption key KPp(1) inherent in the content reproduction circuit of the mobile phone, and the result of authentication is approved by the content reproduction circuit of the mobile phone 100, and the public encryption of the transmission is The key KPp(1) is judged to be a public encryption key attached to the recognized content reproduction circuit in the data distribution system, and the conversation key Ks3 generated in the reproduction conversation is instructed by the data bus BS4 to the conversation key generating unit 1418 . The dialogue key Ks3 generated by the dialogue key generating unit 1418 is sent to the encryption processing unit 1410. The encryption processing unit 1410 uses the public encryption key KPp(1) of the mobile phone 100 obtained from the decoding processing unit 1408 to encrypt the conversation key Ks3, and outputs the encrypted data {Ks3}Kp(1) to the data Bus BS3 (step S214).

The mobile phone 100, through the terminal 102 and the memory interface 1200, accepts the encrypted data {Ks3}Kp(1) in the data bus BS. The encrypted data {Ks3}Kp(1) is decoded by the decoding processing unit 1504, and the dialogue key Ks3 generated on the memory card 110 is received (step S216).

The control unit 1106 responds to the acceptance of the dialogue key Ks3, and for the dialogue key generating unit 1508, uses the data bus BS2 to instruct the generation of the dialogue key Ks4 generated by the mobile phone 100 in the replay dialogue. The generated dialog key Ks4 is sent to the encryption processing unit 1506, and the encrypted {Ks4}Ks3 is output to the data bus BS2 using the dialog key Ks3 obtained by the decoding processing unit 1504 (step S218).

The encrypted dialogue key {Ks4}Ks3 is transmitted to the memory card 110 through the memory interface 1200. In the memory card 110, the decryption processing unit 1412 decodes the encrypted conversation key {Ks4}Ks3 transmitted to the data bus BS3, and accepts the conversation key Ks4 generated in the mobile phone 100 (step S220).

In response to the acceptance of the dialogue key Ks4, the control unit 1420 confirms the access restriction information AC1, which has the content ID corresponding to the copyright holding unit 1440. (Step S222).

In step S222, by confirming the restriction information AC1 of the information about the access restriction of the memory, if it is unable to be reproduced, the reproduction dialogue is ended (step S240). If it is reproducible but the number of reproduction is limited, it must be updated. After the data of the access restriction information AC1 is updated, the operation of step S226 is continued (step S224). On the other hand, when the access control information AC1 does not limit the number of reproduction times, step S224 is skipped, and the process of the next step S226 is performed without updating the access information AC1. In addition, in the copyright holding unit 1140, if there is no content ID in the music to be distributed, it is determined that the content cannot be reproduced, and the reproduction dialog ends (step S240).

In step S222, when the playback dialog is judged to be reproducible, a decoding process for obtaining the content decoding key Kc of the reproduced music or the reproducing circuit control information AC2 recorded in the memory is performed. Specifically, in response to the instruction of the control unit 1420, the decoding processing unit 1422 uses the secret key Km(1) to convert the encrypted data read from the memory 1415 on the data bus BS4 {Kc//AC2//copyright ID /Content ID/AC1}Km(1) to decode it. In the above manner, the content decoding key Kc and the reproduction circuit control information AC2 are obtained (step S226).

The acquired content decoding key Kc and reproduction circuit control information AC2 are transmitted to the encryption processing unit 1406 through the contact Pd of the switch 1444. The encryption processing unit 1406, by turning off the contact point Pb of the switch 1442, uses the dialogue key Ks4 from the decoding processing unit 1412 to encrypt the data Kc and AC2 from the data bus BS4, and cipher {Kc//AC2 }Ks4 is output to data bus BS3. (Step S228).

The encrypted data output in the data bus BS3 is sent to the mobile phone 100 through the memory interface 1200.

In the mobile phone 100, the encrypted data {Kc//AC2}Ks4 sent to the data bus BS2 through the memory interface 1200 is decoded using the dialogue key Ks4 by the decoding processing unit 1510, and the content decoding key Kc and The regeneration circuit control information AC2 is reproduced (step S230). The decoding processing unit 1510 transmits the content decoding key Kc to the decoding processing unit 1516, and outputs the reproduction circuit control information AC2 to the data bus BS2.

The control unit 1106 receives the regeneration circuit control information AC2 via the data bus BS2 and confirms whether the regeneration can be performed (step S232).

In step S232, when it is judged that it cannot be reproduced by using the reproducing circuit control information AC2, the reproducing session is ended (step S240).

On the other hand, when it is judged to be reproducible, the encrypted content data {Date}Kc of the music recorded in the memory will be output from the memory card 110 to the data bus BS3, and transmitted to the mobile phone 100 through the memory interface 1200 (Step S234).

In the mobile phone 100, the encrypted content data {Date}Kc output by the memory card 210 and transmitted to the data bus BS4 is decoded in the decoding processing unit 1516 by the content decoding key Kc to obtain the plain text content data Date (step S236). The decoded normal text content data Date is reproduced as music by the music reproducing unit 1518, and the reproduced music is output to the outside through the mixing unit 1525 and the terminal 1530 to end the process (step S240). In the replay dialogue, the mobile phone 100 and the memory card 110 respectively output the cipher key, and the cipher key received from each other is used for ciphering, and the ciphered data is transmitted to the other party. The above result is the same as the distribution dialogue. In the reproduction dialogue, the data is received and received separately, and mutual authentication can be carried out, which helps to improve the security of the data distribution system.

[Move Action]

The following describes the processing of moving content data between two memory cards.

Figures 11, 12, and 13 are used to illustrate the first, second, and third flow diagrams of the mobile phone 100 and 102 between the memory cards 110 and 112 to move content data and reproduced information. .

In Figures 11 to 13, the natural number X used to identify the type of mobile phone 100 and memory card 110 is set to X=1, and the natural number X used to identify the type of mobile phone 102 and memory card 112 is set to X=2. In addition, the natural number i used to identify the memory card 110 and the memory card 112 is set to i=1 and i=2, respectively.

In Figures 11 to 13, the mobile phone 100 and the memory card 110 are on the transmitting side, and the mobile phones 102 and 112 are on the receiving side. In addition, the mobile phone 102 is equipped with a memory card 112 having the same structure as the memory card 110. Hereinafter, the structure of each part of the memory card 112 will be described with the same symbols as the corresponding parts of the memory card 110.

Referring to FIG. 11, first, from the mobile phone 100 of the user 1 on the sending side, the user makes a request for content movement through the key operation of the key touch portion 1108 (step S300).

The generated movement request is transmitted to the memory card 112 through the mobile phone 120 of the user 2 on the receiving side. In the memory card 112, the public encryption key KPmc(2) corresponding to the memory card 112 is output as the authentication key {KPmc(2)}KPma by the authentication key holding unit 1500.1. (Step S301).

The authentication data {KPmc(2)}KPma of the memory card 112 is sent by the mobile phone 120 of the user 2 and sent to the memory card 110 via the mobile phone 110 of the user 1 (step S302).

In the memory card 110, the decoding processing unit 1408 performs decoding processing, and accepts the decoded public encryption key KPmc(2) (step S303).

The public encryption key KPmc(2) encrypted with the authentication key KPma is a formal login and is subjected to formal encryption, that is, it can be decoded with the authentication key KPma, and the dependent data generated during decoding can be identified At the same time, when the copyright holding unit 1440 does not record that the authentication key KPma is forbidden to use, if the authentication result of the authentication key KPma is valid, the process of step S312 is performed (step S304). On the other hand, when it cannot be decoded, or the dependent data generated in the decoding process or the authentication key KPma cannot be recognized as use prohibited, the authentication result of the authentication key KPma is judged to be invalid, and the result is notified to the memory card 112 side (step S04).

When the authentication result of the authentication key KPma is invalid, in the memory card 112, the public encryption key KPmc(2) corresponding to the memory card 112 is output as the authentication data {KPmc(2)}KPmb through the authentication data holding unit 1500.2 (Step S305).

The authentication data {KPmc(2)}KPmb of the memory card 112 is sent by the mobile phone 120 of the user 2 and sent to the memory card 110 via the mobile phone 110 of the user 1 (step S306).

In the memory card 110, the decoding processing unit 1408 performs decoding processing, and receives the decoded public encryption key KPmc(2) (step S307).

The public encryption key KPmc(2) encrypted with the authentication key KPmb is a formal login and is subjected to formal encryption, that is, it can be decoded with the authentication key KPmb, and the dependent data generated during decoding can be identified At the same time, when the copyright holding unit 1440 does not record that the authentication key KPmb is forbidden to use, and when the authentication result of the authentication key KPmb is valid, the process of step S312 is performed (step S308). On the other hand, when it cannot be decoded, or the dependent data generated in the decoding process or the authentication key KPmb cannot be recognized, and the authentication result of the authentication key KPmb is invalid, it is judged to be improper access by an unauthorized machine , The processing is ended (step S360).

When the authentication result is judged to be valid, the control section 1420 instructs the dialogue key generating section 1418 to output the dialogue key Ks3 generated on the sending side when the dialogue is moved. Then, the dialog key Ks3 generated by the dialog key generation unit 1418 is transmitted to the encryption processing unit 1410. The encryption processing unit 1410 uses the decryption processing unit 1408 to receive the public encryption key KPmc(2) of the decoded memory card 112 in step S306, and uses the public encryption key KPmc(2) to encrypt the conversation key Ks3 (step S306). S312). In this way, the encrypted dialogue key {Ks3}Kmc(2) is output to the data bus BS3 (step S314).

The {Ks3}Kmc(2) output to the data bus BS3 is transmitted to the memory card 112 through the memory interface 1200, the mobile phone 100 and the mobile phone 120.

The memory card 112 receives the {Ks3}Kmc(2) output from the memory card 110, and the decoding processing unit 1404 performs the decoding process corresponding to the secret decryption key Kmc(2) of the memory card 112, and receives the result from the sending side The dialogue key Ks3 generated by the memory card 110 (step S316).

The control unit 1420 of the memory card 112 accepts the acceptance of the dialogue key Ks3, and the dialogue key generating unit 1418 instructs the generation of the dialogue key Ks2 generated on the receiving side during the mobile dialogue. The generated dialogue key Ks2 is transmitted to the encryption processing unit 1406 via the contact Pf in the switch 1446 and the contact Pc in the switch 1444.

The encryption processing unit 1406 receives the dialogue key Ks3 obtained in step S316 from the decoding processing unit 1404, and switches the contact Pc of the switch 1444 with the contact Pf of the switch 1446 and the dialogue obtained by switching with Pe The key Ks2 and the public encryption key KPm(2) are encrypted with the dialogue key Ks1, and {Ks2//KPm(2)}Ks3 is output to the data bus BS3 (step S318).

The encrypted data {Ks2//KPm(2)}Ks3 output to the data bus BS3 is transmitted to the data bus BS3 of the memory card 110 through the mobile phones 102 and 100.

In the memory card 110, the encrypted data transmitted to the data bus BS3 is decoded by the symbol processing unit 1412 using the dialog key Ks3, and the dialog key Ks2 and the public encryption key KPm(2) of the memory card 112 are received (step S320) ).

The control unit 1420 of the memory card 110 accepts the dialog key Ks2 and the public encryption key KPm(2), and confirms the access control information AC1 in the copyright holding unit 1440 (step S322). The access control information AC1 is confirmed, and if the result is that the reproduction information cannot be moved, the move processing is ended at this stage (step S360).

On the other hand, if the access control information AC1 is confirmed, and if the result is removable reproduction information, the next step S324 is processed. The control section 1420 avoids the access control information of the copyright holding section 1440 and sets the copyright holding section The value of is changed to 0000h (step S324). Corresponding to this change, the access control information AC1 is confirmed and processed in the replay dialog and the move dialog. Since the dialog is respectively prohibited, the memory card 110 cannot reproduce or move the content data moved to the memory card 112 again.

Subsequently, the control unit 1420 obtains the corresponding content ID and copyright ID from the copyright holding unit 1440 (step S325).

In addition, the control unit 1420 instructs the memory card 1415 to output encrypted data related to the reproduction information including the content decoding key corresponding to the moved content data {Kc//AC2/copyright ID//content ID//AC1}Km( 1) The output. The encrypted data {Kc//AC2//copyright ID//content ID//AC1}Km(1) output by the memory card 1415 is decoded by the decoding processing unit 1422, and Kc and AC2 ( Step S326).

The copyright ID, content ID, and avoided access control information AC1 obtained by the copyright holding unit 1440 in step S325, and the Kc and AC2 obtained in step S326 are received by the encryption processing unit 1424 by the data transfer card BS4 And encrypt it. The encryption processing unit 1424 uses the inherent public encryption key KP(2) of the memory card 112 obtained by the decoding processing unit 1412 in step S320 to encrypt the data and generate {KC//AC2// Copyright ID//Content ID/AC1}Km(2) (step S328).

The encrypted data {Kc//AC2//copyright ID//content ID//AC1}Km(2) output to the data bus BS4 is transmitted to the encryption processing unit 1406 through the contact Pd in the switch 1444 . The encryption processing unit 1406 uses the contact Pb of the switch 1442 to receive the dialogue key Ks2 generated by the memory card 112 obtained by the decoding processing unit 1412, and uses the dialogue key Ks2 to encrypt the data received by the contact Pd .

The encryption processing unit 1406 outputs {{Kc//AC2//copyright ID//content ID//AC1}Km(2)} Ks2 to the data bus BS3 (step S330). In step S330, the encrypted data output to the data bus BS3 is transmitted to the memory card 112 on the receiving side of the mobile conversation through the mobile phones 100 and 102.

In the memory card 112, the decoding processing unit 1412 uses the dialog key Ks2 generated by the dialog key generation unit 1418 to decode and accept {Kc//AC2//copyright ID//content ID//AC1}Km(2)( Step S332).

The data {Kc//AC2//copyright ID//content ID//AC1}Km(2) is recorded in the memory 1415 which does not exist in the module TKM (step S334).

{Kc//AC2//copyright ID//content ID//AC1}Km(2) encrypted with the public encryption key KPm(2), in the decoding processing unit 1422, by using the inherent in the memory card 112 The secret decoding key Km(2) performs decoding processing, and accepts copyright ID, content ID, and access restriction information AC1 (step S336).

In addition, the copyright ID, content ID, and access restriction information AC1 received by the decoding processing unit 1422 are recorded in the storage designated by the copyright holding unit 1440 (step S338).

According to the above method, after finishing the processing to step S3387, the mobile phone 102 responds to the movement of the reproduced data including the content decoding key Kc, and performs the copy request of the content data through the mobile phone 102 (step S340).

The copy request of the content data is transmitted to the memory card 110 via the mobile phone 100, and in response to the request, the encrypted content data {Date}Kc and the additional information Date-inf corresponding to the memory 1415 in the memory card 110 are output to the data bus BS3 (step S342). The data output to the data bus BS3 is transmitted to the memory card 112 through the memory interface 1200, the mobile phone 100 and the mobile phone 102, and is recorded in the memory 1415 in the memory card 112 (step S344).

When the recording of the encrypted content data {Date}Kc and the additional information Date-inf is completed, the mobile phone 102 transmits a mobile acceptance (step S346). Thereby, if the memory card 112 and the corresponding mobile phone 102 can carry out a normal playback dialogue, the mobile phone 102 can listen to music according to the encrypted content data {Date}Kc and the content decoding key Kc recorded on the memory card 112.

The mobile phone 100 on the receiving side receives the mobile acceptance sent by the mobile phone 102 (step S348), and the user uses the key touch unit 1108 to receive an instruction to delete the content data or keep the content data (step S350).

By using the touch portion 1108 to instruct the deletion of the content data, the memory 1415 in the memory card 110 deletes the corresponding encrypted content data {Date}Kc and the additional information Date-inf (step S354). On the other hand, when it is instructed to keep the content material, step S354 is skipped, and the move process is ended at this stage (step S356).

When the mobile conversation is normally performed, step S356 of the mobile process is ended, or when the mobile conversation is terminated by checking the authentication and confirmation access restriction information AC1, steps S308 and 322 are skipped to end the process of the mobile conversation (step S360).

In addition, the reproduction information such as the corresponding content ID recorded in the copyright holding unit 1440 is updated in step S324 because the access control information AC1 is updated, and the reproduction dialogue and the mobile dialogue are prohibited, so the state is the same as the erasure. In this case, the storage for recording and reproducing information is allowed to rewrite when receiving the distribution or movement of the reproduced information to the new content data. Therefore, in step S324, the same effect of erasing all the data in the storage body can be obtained.

In addition, when the encrypted content data is recorded and held in the memory 1415, the distribution server 30 is accessed again, and when only the distribution of the reproduction information is received, the encrypted content data can be reproduced again and the music can be listened to. . Regarding the distribution processing of reproduced information, as illustrated in Figs. 7-9.

With the above configuration, even in a mobile conversation, the content reproduction circuit (mobile phone) and the memory card on the receiving circuit side are authenticated to move the encrypted content data, so the security of the system can be strengthened.

Second embodiment

Fig. 14 is a block diagram showing the structure of the memory card 114 of the second embodiment. This figure and Fig. 6 of the first embodiment are comparison diagrams.

Referring to Fig. 14, the memory card 114 is compared with the memory card 110 of the first embodiment shown in Fig. 6. The memory card 114 has a structure different from that of the memory card 110, which is provided with: common keys inherent in the memory card In the method, the K(1) holding part 1450 is used to hold the secret key K(1); the encryption processing part 1452 is used to encrypt the data on the data bus BS4 by the secret key K(1); by the secret key k (1) The decoding processing unit 1454 that decodes the data on the data bus BS4.

In other parts, the memory card 114 has the same structure as the memory card 110 of the first embodiment, and the same parts are marked with the same symbols, so the description will not be repeated.

Figure 15 is a diagram illustrating the characteristics of the encryption key used for communication and the distribution of data in the data distribution system of the second embodiment.

Different from the data distribution system of the first embodiment shown in Fig. 2 in the key and data distribution characteristics, as described above, the difference lies in the use of the secret key K(1) inherent in the memory card. The other parts are the same as the first embodiment, so the description will not be repeated.

[Distribution processing]

Figures 16, 17, and 18 are the first, second, and third flowcharts for explaining the distribution action that occurs when the content is purchased in the data distribution system of the second embodiment, which is the first A comparison diagram of Fig. 7 to Fig. 9 of the embodiment.

FIGS. 16 to 18 illustrate the actions when the user 1 uses the memory card 114 to receive the content data from the distribution server 30 through the mobile phone 100 for distribution.

Here, unlike the distribution process of the memory card 110 of the first embodiment, step S166 is omitted, and after step S168, the process of step S170 is performed as described below.

That is, the secret key K(1) inherent in the memory card 110 is used again in the encryption processing unit 1452 to decode the content decoding key Kc received in step S168, the reproduction circuit restriction information AC2, the copyright ID, the content ID, and access The restricted information AC1 is encrypted, and {Kc//AC2//copyright ID//content ID//AC1}K(1) is recorded in the memory 1415 outside the module TRM (step S170).

According to the above method, in step S168, the secret decoding key Km(1) is used to decode the content decoding key Kc, the reproduction circuit restriction information AC2, the copyright ID, the content ID, and the access restriction information AC1, and then in step S170, the next The reason why the secret key K(1) is encrypted and then stored in the memory 1415 is as follows.

That is, the combination of the public encryption key KPm(1) and the secret decryption key Km(1) using the public key method of asymmetric keys will greatly increase the time required for decoding.

Therefore, with the common secret key K(1) inherent in the memory card of the symmetric key method that can be decoded at high speed, the data can be re-encrypted. Therefore, in the content data reproduction process corresponding to the encrypted content data, the The content decoding key Kc and the reproduction restriction information AC2 of the required information during the reproduction process are decoded at a high speed.

In addition, changing the keys for data transmission and the keys stored in the memory card in the above-mentioned way can improve its security.

Here, the above-mentioned public key method includes RAS encryption method (Rivest-Shamir-Adlemae-cryptosystem) or elliptic curve encryption method, and common key encryption method includes DES (Date-Encryption Standrd) encryption method, etc.

In addition, the above explained the structure of re-encrypting the encrypted data based on the key KPm(1)//Km(1) of the asymmetric public cipher system with all the symmetric secret keys K(1). The structure can be, for example, : The data copyright ID, content ID, and access restriction information AC1, etc., held in the copyright holding section 1440 in the TRM area installed on the memory card 110, will not be re-encrypted and will not be stored in the memory at the same time In 1415, the content decoding key Kc and the reproduction circuit control information AC2 are re-encrypted with the secret key K(1) and then recorded in the memory 1415.

Since the other points are the same as the dispensing operation of the first embodiment, the same reference numerals are attached to the same processing, and the description thereof will be omitted.

[Regeneration Treatment]

Figure 19 is a flowchart for explaining the operations of each part in the playback dialog when the memory card of the second embodiment is used.

Different from the reproduction process of the memory card 110 of the first embodiment shown in Fig. 10, the structure of the memory card 114 is such that in the process of step S226 in Fig. 19 performed instead of the process of step S226 in Fig. 10, In response to the instruction of the control unit 1420, the decoding processing unit 1454 uses the secret key K(1) held in the K(1) holding unit 1450 to convert the encrypted data read from the memory 1415 from the data bus BS4 {Kc// AC2//copyright ID//content ID//AC1}K(1) is decoded to obtain the content decoding key Kc and the reproduction circuit restriction information AC2.

Since the other points are the same as the reproduction operation of the first embodiment, the same reference numerals are attached to the same processing, and the description thereof will be omitted.

With the above-mentioned structure, in the decoding process for reading the content decoding key Kc and the reproduction circuit control information AC2 required for reproduction from the memory card in the reproduction session, the time required for the decoding process can be shortened, which is useful for the user The reproduction request can start the music reproduction immediately.

In addition, the movement operation of the memory card in the second embodiment is basically the same as the operation in the first embodiment. However, in step S326 shown in Fig. 12, the data {KC//AC2//copyright ID//content ID//AC1}K(1) obtained from the memory 1415 uses the secret key K(1 ) To decode.

In addition, for the memory card on the receiving side, step S334 is omitted, and at the same time, the content decoding key Kc, reproduction circuit restriction information AC2, copyright ID, content ID, and access restriction information AC1 accepted in step S336 will be retained in K (2) The unique secret key K of the memory card of the holding unit 1450 is encrypted again by the encryption processing unit 1452, and the encrypted {Kc//AC2//copyright ID//content ID//AC1 }K(2) is recorded in the memory 1415 outside the module.

Embodiment 3

FIG. 20 is a block diagram showing the structure of the memory card 116 of the third embodiment, which is a comparison diagram of FIG. 6 of the first embodiment.

Referring to FIG. 20, the memory card 116 is compared with the memory card 110 of the first embodiment shown in FIG. 6, and the memory 1415 is also configured to be installed in the module TRM. In addition, the difference lies in the structure of each storage body of the copyright holding section 1440, which is changed to hold all the reproduction information.

The other points are the same in structure as the memory card 110 of the first embodiment, and the same parts are given the same reference numerals and their description is omitted.

Figure 21, Figure 22, and Figure 23 are the first, second, and third flowcharts for explaining the distribution action that occurs when the content data is purchased by the data distribution system according to the third embodiment. They are A comparison chart of Figures 7 to 9 of the first embodiment.

In FIGS. 21 to 23, the operation when the user uses the memory card 116 to receive the content data from the distribution server 30 through the mobile phone 100 is described.

Here, different from the distribution process of the memory card 110 of the first embodiment, in the memory card 116, in step S166, the data of the memory 1415 {Kc//AC2//copyright ID//content ID//AC1} K(1) does not perform recording processing. Step S172 is used instead of step S172 to record the relevant content decoding key Kc, reproduction circuit control information AC2, copyright ID, content ID, and access restriction information AC1 in the copyright holding section. Processing of storage volume j of the jth storage volume of the space.

Since the other points are the same as the dispensing operation of the first embodiment, the same parts are given the same symbols and their descriptions are omitted.

[Regeneration Treatment]

FIG. 24 is a flowchart for explaining the reproducing operation using the memory card 116 of the third embodiment.

Different from the reproduction operation of the first embodiment shown in Fig. 10, the process of step S226 is replaced by step S266', and the content decoding key Kc and reproduction circuit control information of the music requested to be reproduced held in the copyright holding section 1440 are obtained. AC2 processing.

Since the other points are the same as the dispensing operation of the first embodiment, the same parts are given the same symbols and their descriptions are omitted.

[Mobile processing]

Figures 25, 26, and 27 are for illustration. In the third embodiment, the two memory cards 116 and 118 are processed by mobile phones 100 and 102 to move content data and keys. The second and third flowcharts are comparison diagrams with Figs. 11 to 13 of the first embodiment.

In Figures 25 to 27, the natural number x used to identify the types of the mobile phone 100 and the memory card 116 is set to x=1, and the natural number x used to identify the types of the mobile phone 102 and the memory card 118 is set Is x=2. In addition, the natural number I used to identify the memory card 116 and the memory card 118 is set to i=1 and i=2, respectively.

In FIGS. 25-27, the mobile phone 100 and the memory card 116 are the transmitting side, and the mobile phone 102 and the memory card 118 are the receiving side. In addition, the mobile phone 102 is also equipped with a memory card 118 having the same structure as the memory card 116. Hereinafter, the components of the memory card 118 are described using the same symbols as the corresponding parts of the memory card 116.

The points that differ from the movement processing of the first embodiment are described below.

i) Step S325' is used instead of step S325 in Fig. 12, and the copyright holding unit 1440 obtains the content decoding key Kc, the reproduction circuit control information AC2, the copyright ID, the content ID, and the access restriction information AC1.

ii) The data read from the memory 1415 in step 326 is omitted.

iii) Step 328' is used instead of step 328, using the encryption key KPmc(2) to encrypt the content decoding key Kc, reproduction circuit control information AC2, copyright ID, content ID, and access control information AC1 obtained by the copyright holding unit 1440 , To generate {Kc/AC2/copyright ID//content ID//AC1}Km(2).

iv) The memory recording process of step S334 is omitted.

v) Step S336' is used instead of step S336, the {Kc//AC2//copyright ID//content ID//AC1}Km(2) encrypted by the public encryption key KPm(2) is processed in the decoding processing unit 1422 , Using the secret decoding key Km(2) inherent in the memory card 112 to perform decoding processing to accept the content decoding key Kc, the reproduction circuit control information AC2, the copyright ID, the content ID, and the access control information AC1.

vi) Step S338' is substituted for step S338, and the content decoding key Kc, the reproduction circuit control information AC2, the copyright ID, the content ID, and the access control information AC1 received by the decoding processing unit are recorded in the storage designated by the copyright holding unit 1140 Treatment of the body.

The other points are the same as the movement operation of the first embodiment, and the same parts are assigned the same symbols and their descriptions are omitted.

With the above-mentioned structure, the same effect as that of the first embodiment can be obtained.

In addition, the processing in the first, second, and third embodiments are different only in the processing in the memory card, and there is no difference in the encryption of data outside the memory card. The combination of the transmitting side and the receiving side of the moving action is the same as the previous description. In each embodiment, any combination of the memory cards 110, 114, and 116 can be moved.

Therefore, the memory cards 110, 114, and 116 are interchangeable memory cards.

In addition, in the above description, the memory 1415 is a non-volatile semiconductor memory medium that can be read and written at any time. For example, it is described as a flash memory. However, the memory 1415 can also be configured as a semiconductor memory device dedicated to readout using a mask ROM, etc., during the manufacturing stage, pre-written content data or encrypted content decoding keys, etc., to distribute access control information AC1 or copyright ID and other part of the composition of the reproduction information.

In addition, the memory 1415, such as a non-semiconductor memory medium, can also be other memory media, such as a card-type disk or an optical disk. In this case, when the TRM module is not installed, it is the same as the memory card 110 and the memory card 116, and the copyright must be encrypted before being recorded.

In addition, in the above description, the storage process of receiving and distributing data and the memory card is a configuration performed by a mobile phone. However, the present invention is not limited to the above configuration. For example, the configuration may be in the absence of content. In the case of a reproduction circuit, a dedicated terminal device for receiving and distribution is used to store the data distributed to the memory card.

In addition, in the above description, the use of the authentication key Kpma in the memory cards 110, 112, and 116 is prohibited through the "Kpma Prohibition Notice", but it is also possible to use the Certification Revocation List CRL to achieve the prohibition of use Purpose. In this case, in the distribution dialog, instead of "Kpma Prohibition Notice", the latest certificate invalidation list CRL will be attached. The memory card contains the certification data of the certificate invalidation list CRL. In the above description, use the authentication key to The certification materials that can be certified are excluded from the certification object.

The embodiments disclosed in the present invention are for reference only and are not limited to specific forms. The scope of the present invention is not the above description but is detailed in the scope of the patent application, and it is intended to cover the same meaning and all changes within the scope of the patent application.