JP2000324329A - Content ID assignment system - Google Patents

Abstract

(57) [Summary] [Problem] To prevent falsification of content by digital signature data for falsification prevention even if the identification information for content management is falsified. A content directory server (1) authenticates a user in response to a request from a terminal (2), issues a content ID as ID information for the content, and manages a relationship between the user ID and the issued content ID. When the terminal 2 receives the content ID, the terminal 2
The assigning means 25 assigns the content ID to the content. At this time, the content ID and the digital signature data are added by embedding the content ID in the content body using a digital watermark and setting digital signature data for the content with the embedded content ID in the header information.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

[0001] 1. Field of the Invention [0002] The present invention relates to a system for managing registration and update of digital content or attribute information such as copyright thereof.

[0002]

2. Description of the Related Art In recent years, the age of digital content distribution has begun. However, digital content is stored and
Since the quality does not deteriorate even when copying, processing, and transferring are repeated, the processing of the copyright caused by these operations is a serious problem. Until now, there has been no precise method for copyright processing of digital contents, and copyright law or contracts have been used. In the Copyright Law, compensation for digital recording / recording equipment has been institutionalized. Only.

[0003] In such a situation, how to handle the copyright of the digital contents in the database becomes a big problem, but no copyright management means has been completed to date.

For example, Japanese Patent Application Laid-Open No. H11-7241 discloses a digital content management system using a digital watermark.
There are techniques disclosed in Japanese Patent Application Publication No. 008 “Data Content Distribution System” and Japanese Patent Application Laid-Open No. Hei 10-254909 “Data Management System”.

For example, in a digital content management system using a digital watermark disclosed in Japanese Patent Application Laid-Open No. H11-7241,
The digital content management program is incorporated into the operating system of the user device as a microkernel, and a monitoring program or a monitoring command linked to the digital content management program is transmitted to the user device by using a network or data broadcasting to prevent the illegal use of the digital content. Monitor. Visible watermarks are embedded in illegally used digital contents, and subsequent use is suppressed. By embedding an invisible watermark even for regular use, it is possible to confirm the path for copying and transferring. Also, the public key is entered on the public key distribution screen and distributed via a network or broadcast. The public key distribution screen is attached with image information in which the information of the public key owner or the user is embedded as an invisible digital watermark, and the validity of the public key or the user is confirmed using the digital watermark.

In the data contents distribution system disclosed in Japanese Patent Application Laid-Open No. Hei 10-302008, objects are handled as data contents, and data contents are processed by processing the data contents as objects by a processing program. The processed data content is expressed by the original data content and a processing scenario in which the processing content by the processing program is described. Only the encrypted processing scenario is circulated, and the user who has obtained the encrypted processing scenario decrypts the encrypted processing scenario using the encryption key obtained from the key management center, and obtains the original from the database according to the processing scenario. Obtain the data content and reconstruct the processed data content. If there is a person who wants to sell the processing scenario, an auction is conducted and the right to use the processing scenario is sold.

In the data management system disclosed in Japanese Patent Application Laid-Open No. 10-254909, in order to prevent theft or leakage of data contents, a data management center embeds user data in data contents to be supplied to a user as an electronic watermark. Content is supplied after being encrypted with an encryption key. The encrypted data content is decrypted and used using the encryption key from the data management center, and is stored and encrypted using another encryption key. To copy / transfer data content to another user, register a scenario for embedding the user data of another user as a digital watermark in the data management center, and encrypt the data content with the digital watermark embedded with another encryption key. Supply. If the validity of the other user is confirmed in the scenario, another encryption key is delivered to the other user, and the encrypted data content is decrypted and used with the other encryption key. Encrypt. If the data content is illegally copied or transferred, the user can be identified by checking the digital watermark.

[0008]

However, in the prior art described above, the content management identification information (content ID) is issued while ensuring the validity of registration, and at the same time, the content management identification information or content is issued. To enable users to search for content such as video or music based on attribute information of
When assigning a content ID using a digital watermark,
There was a problem of falsification of the content ID. Here, the problem of falsification refers to an act of rewriting the content ID, for example, by intentionally embedding the content ID again in the already-assigned content. The present invention
It is an object to prevent falsification of a content ID assigned to content.

[0009]

According to the present invention, there is provided a terminal having means for requesting issuance of a content ID, which is ID information for a content, means for transmitting and receiving a content ID, and means for assigning a content ID to the content.
Means for authenticating the user, means for issuing and transmitting / receiving the content ID, and the user ID and the issued content I
A content ID assigning system comprising a content directory server having means for managing the relationship of D, wherein the content ID assigning means embeds the content ID in the content itself using a digital watermark, and inserts the content in the header information. It is characterized in that it is configured to set digital signature data for content in which an ID is embedded.

[0010] Alternatively, a terminal having means for requesting issuance of a content ID and means for transmitting and receiving content, means for authenticating a user, means for issuing a content ID and assigning a content ID to the content, content and content A content ID assigning system comprising: means for transmitting an ID to a terminal; and a content directory server having means for managing a relationship between a user ID and an issued content ID.
The adding means embeds a content ID in the content body using a digital watermark, and inserts a content I in the header information.
D is configured to set digital signature data for the embedded content.

Here, the former differs from the latter in the configuration whether the means for assigning the content ID is provided in the terminal or in the server. The means for assigning the content ID may be further configured as follows.

That is, the content ID assigning means may be configured to set the content ID and the digital signature data for the content in the header information of the content.

Here, the digital signature data is information for preventing falsification of the content ID information. In addition,
Regarding digital signatures, see “Modern Cryptography (Shinichi Ikeno,
Kenji Koyama, published by the Institute of Electronics, Information and Communication Engineers in 1986)
17 pages to 239 pages, especially 235 pages to 236
Detailed technical content is disclosed on the page.

[0014]

FIG. 1 is a block diagram of a content ID assigning system. As shown in FIG. 1, a content directory server 1 and a user terminal 2 are connected via a network 3.

The server control means 11 of the content directory server 1 includes a user authentication means 12, an ID information management means 13, a content ID transmission / reception means 14, a content attribute information registration / update means 15, and a content search means 16. Control synchronization.

The user authentication means 12 is a means for receiving a content ID issuance request from the terminal 2 and authenticating the requester. As the authentication method, any method may be used. For example, a public key cryptosystem using a public key and a secret key may be used. Using the procedure described in Japanese Patent Application Laid-Open No. 10-39752, entitled "Communication and Authentication Method Using Public Key Cryptography, and Their Devices", it is possible to realize high-strength encryption.

The public key cryptosystem disclosed in Japanese Patent Application Laid-Open No. 10-39752 has a strength equal to or greater than that of a conventional public key cryptosystem on a rational integer ring for complete decryption. In order to realize encryption with higher strength against a broadcast attack than before, the key generation device generates prime ideals (p) and (q) in an integer ring O on an algebraic field to generate a first A secret key, and the remainder of the product (n) = (p) (q) is a first public key. Further, a second secret key d and a second public key e are generated from (p) and (q). Encryption apparatus divides the input plaintext M into blocks, ideal a (n) to encrypt the e-th power calculation modulo, ciphertext (C0, C1, ..., C r-1) communication path Output to The decryption device decrypts the input ciphertext block by a d-th power operation modulo ideal (n), integrates the decrypted plaintext blocks, and outputs a plaintext M. There are various other public key cryptosystems, and a detailed procedure thereof is well known, and a detailed description thereof will be omitted.

The content ID transmitting / receiving means 14 receives the user authentication by the user authentication means 12 and receives the content ID.
And transmits and receives content ID information to and from the terminal 2. ID information management means 13
This is a means for managing content ID information issued to an authenticated user in a database in association with the user. The content attribute information registration / updating unit 15 is a unit that registers and updates content attribute information for each content ID in a database based on content attribute information for each content ID received from the terminal 2.

[0019] The content search means 16 stores the content I
This is a means for notifying attribute information of each D or notifying a set of contents that match the search condition when the search condition of the content attribute information is narrowed down.

In the terminal 2 shown in FIG. 1, the terminal control means 21 synchronizes the content ID issuance request means 22, the content attribute registration request means 23, the content ID transmission / reception means 24, and the content ID assignment means 25. Control.

The content ID issuance requesting means 22 is a means for requesting the content directory server 1 to issue a content ID. The content ID transmitting / receiving means 24 is a means for receiving the content ID issued by the content directory server 1 and transmitting the content ID to the content directory server 1.

The content ID assigning unit 25 assigns a content ID issued by the content directory server 1 to the content. As a method of giving, it is possible to use a method of embedding the content in the main body of the content by a digital watermark or setting a content ID in the header information of the file. For the specific procedure of digital watermarking, see, for example, Japanese Patent Application Laid-Open No.
A procedure described in, for example, Japanese Patent Application Laid-Open No. 145,575, “Method of Inserting and Extracting Digital Watermark” may be used.

In the apparatus described in Japanese Patent Application Laid-Open No. H10-191025, additional embedding of information into image data can be performed safely and reliably in order to promote smooth distribution of image data. For the purpose of making it possible, the processing of the inverse encoding device for restoring the encoded image data to the original image and the processing of the digital watermark insertion device for embedding information in the image data are inseparable, When the original image is restored from the image data, the decoding process is performed by the inverse encoding device, and the information is embedded by the digital watermark insertion device. Embed

Further, the method described in Japanese Patent Application Laid-Open No. H10-145557 aims to improve the reliability by accumulating watermark information in a partial image and extracting the watermark information from the partial image. The processing is performed according to the following procedure. First, the data to be watermarked is divided into a plurality of small areas. The frequency coefficient of the data to be watermarked is calculated for each small area. The watermark signal to be inserted is modulated into a spread spectrum by mapping the watermark signal to a pseudo-random noise sequence. The PN as a function of the average power is spectrally formed into respective frequency coefficients of the data. Then, each spectrum-formed PN sequence is inserted into a predetermined coefficient of the data of each small area. In this way, digital watermarking of data including image, video, and audio data is performed by repeatedly inserting a watermark into a small area or partial image of data. Similarly, the watermark is repeatedly extracted from a small area of the data.

The content attribute registration requesting means 23 is a means for requesting the content directory server 1 to register or update content attribute information relating to the issued content ID. Note that a user authentication unit may be added to the terminal 2.

FIG. 2 shows user ID information and content ID.
It shows an example of each data structure of information and content attribute information. The user ID information is identification information (user number) given by the user from an authentication organization for cryptographic communication. The content ID information is identification information given to the user by the content directory server for identifying the content. In the example shown in FIG.
D and a work number (work ID). The content attribute information stores attribute information of the content for each content ID. For example, the registration date, media type (still image, moving image, music, etc.),
It is composed of search classification codes 1, 2, 3 and contents storage addresses. Here, the content storage address includes an address of a home page posted so that the content can be browsed, a communication address of a contact for purchasing the content, and the like.

FIG. 3 shows an example of a method of adding digital signature data for preventing content tampering. FIG.
The pattern P1 shown in (A) is for embedding a content ID in a content body with a digital watermark and setting digital signature data for preventing content falsification in header information. The pattern P2 shown in FIG. 3B sets a content ID and digital signature data for preventing content tampering in the header information.

Next, an operation example in this embodiment will be described with reference to a content ID registration procedure, a content attribute registration procedure, and a content search procedure. This operation example is an operation example in the case where the content ID is assigned to the content by the terminal, but the same applies when the content ID is assigned on the server side.

FIG. 4 shows an example of a content ID registration procedure. A content ID issuance request is issued from the content ID issuance request unit 22 of the terminal 2 (step S10), and in response to the request, the user authentication unit 12 authenticates the user who has issued the issuance request based on the user ID information. (S11) If the user is correctly authenticated, the content ID transmitting / receiving means 1
4 issues a content ID (S12) and transmits it to the terminal 2 (S13). Further, the ID information management means 13 stores the correspondence between the set of the user ID and the issued content ID in the database (S14).

In the terminal 2, the content ID transmitting / receiving means 2
4 receives the content ID (S15), and the content ID assigning means 25 assigns the content ID to the content (S16). At this time, the content ID assigning means 2
5 is not only the content ID assignment but also the content I
Digital signature data is added to prevent falsification of D. By the two patterns P1 and P2 described in FIG.
A content ID and digital signature data are given. When the content ID assignment is completed, the terminal 2 sends a completion notification to the content directory server 1. Regarding the embedding of the content ID by the digital watermark, the digital watermark is embedded using the fixed key, and before the content ID is assigned, it is checked whether the content ID has already been assigned by reading the electronic watermark with the fixed key. If it is already embedded, it may be configured not to perform the assignment.

FIG. 5 shows an example of a content attribute registration procedure. When the content attribute registration requesting unit 23 of the terminal 2 requests registration / update of the content attribute information (S20),
User authentication means 12 of content directory server 1
Authenticates the user (S21). If the user is correctly authenticated, the terminal 2 sends the content ID and the attribute information on the content ID to the content directory server 1 (S21).
22) When the content directory server 1 receives this (S23), the combination of the content ID and the user ID is compared with the content managed by the ID information management means 13 to confirm that the combination matches the management content. Confirm (S2
4). When the confirmation is completed, the content attribute information registration / update unit 15 registers or updates the content attribute information related to the content ID (S25).

FIG. 6 shows an example of a content search procedure.
When the content ID transmitting / receiving means 14 of the content directory server 1 receives the content ID from the terminal 2 (S30), the content ID information is transmitted to the terminal 2 (S31). Furthermore, if there is a search request from the terminal 2 specifying the attribute parameter of the content attribute information (S3
2) The content searching means 16 of the content directory server 1 searches for content that matches the specified condition (S33), and transmits the search result to the terminal 2 (S34).

In the example shown in FIG. 1, the process of assigning a content ID to a content by using a digital watermark is performed by the content ID assigning means 25 on the terminal 2 side. It can also be configured to do so.

FIG. 7 is a block diagram showing a second embodiment of the present invention. 7, the components having the same reference numerals as those in FIG. 1 have the same functions as those shown in FIG. When requesting the content directory server 1 'to issue a content ID, the terminal 2' transmits the content to the content directory server 1 '.

In the content directory server 1 ',
Upon receiving the content ID issuance request and the content by the content / content ID transmitting / receiving means 17, the user authenticating means 12 authenticates the user who has issued the issuance based on the user ID information. If the user is successfully authenticated,
A content ID is issued, and the content ID
A content ID is assigned to the received content. At this time, the content ID assigning means 18 assigns not only the content ID but also the digital signature data for preventing the content ID from being falsified by using the two patterns described with reference to FIG. The content and the content ID are transmitted to the terminal 2 'by the content / content ID transmitting / receiving means 17.

At the terminal 2 ', the content / content I
The D transmitting / receiving means 26 receives the content and the content ID transmitted from the content directory server 1 '. Note that the processing functions of the other parts are the same as those in FIG. 1 described above, and a description thereof will be omitted.

[0037]

According to the present invention, even if the content ID is falsified, there is the effect of preventing the falsification of the content because there is digital signature data for falsification prevention.

Here, for example, in the pattern P1 as shown in FIG. 3A, the presence or absence of falsification of the content can be determined based on the digital signature data of the header information. Similarly, the pattern P2 shown in FIG.
The presence or absence of tampering can be determined.

[Brief description of the drawings]

FIG. 1 is a block diagram of a content ID assignment system.

FIG. 2 is a diagram showing an example of each data structure of user ID information, content ID information, and content attribute information.

FIG. 3 is a diagram illustrating an example of a method of assigning a content ID and digital signature data for preventing content tampering.

FIG. 4 is a diagram showing an example of a content ID registration procedure.

FIG. 5 is a diagram showing an example of a content attribute registration procedure.

FIG. 6 is a diagram showing an example of a content search procedure.

FIG. 7 is a block diagram of another content ID assignment system.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 Content directory server 11 Server control means 12 User authentication means 13 ID information management means 14 Content ID transmission / reception means 15 Content attribute information registration / update means 16 Content search means 2 Terminal 21 Terminal control means 22 Content ID issue request means 23 Content attribute registration Requesting unit 24 Content ID transmitting / receiving unit 25 Content ID assigning unit 3 Network

Continuing from the front page (72) Inventor Horioka Riki 3-192-2 Nishi-Shinjuku, Shinjuku-ku, Tokyo Japan Telegraph and Telephone Corporation (72) Inventor Yoshiyoshi Yamanaka 3- 19-2 Nishi-Shinjuku, Shinjuku-ku, Tokyo Nippon Telegraph and Telephone Telephone Co., Ltd. F term (reference) 5C076 AA14 BA06 5J104 AA07 AA09 AA14 AA16 EA10 KA01 NA36 PA07 PA14

Claims (4)

[Claims] 1. A system comprising a content directory server for managing content as electronic information or attribute information thereof and a terminal connected to the content directory server via a network, wherein the content directory server is Means for authenticating a user, means for issuing and transmitting and receiving a content ID, which is ID information for the content, and a user ID and an issued content ID
Means for managing the relationship between the content ID and the content ID.
D and a content ID assigning means for assigning the content ID to the content, wherein the content ID assigning means embeds the content ID in the content body using a digital watermark, and includes the content ID in the header information. Is configured to set digital signature data for embedded content. 2. A system comprising a content directory server for managing content which is digitized information or attribute information thereof, and a terminal connected to the content directory server via a network. Means for authenticating a user, means for issuing a content ID as ID information for the content, content ID assigning means for assigning the content ID to the content, content and content ID
And a means for managing the relationship between the user ID and the issued content ID. The terminal includes means for requesting issuance of the content ID and means for transmitting / receiving the content. , The content ID
The adding means embeds the content ID in the content body using a digital watermark, and inserts the content I in the header information.
A content ID assigning system, wherein D is configured to set digital signature data for embedded content. 3. A system comprising a content directory server for managing content as electronic information or attribute information thereof and a terminal connected to the content directory server via a network, wherein the content directory server is Means for authenticating a user, means for issuing and transmitting and receiving a content ID, which is ID information for the content, and a user ID and an issued content ID
Means for managing the relationship between the content ID and the content ID.
D and a content ID assigning means for assigning the content ID to the content, wherein the content ID assigning means includes a content ID in the header information.
D, and a content ID assigning system configured to set digital signature data for the content. 4. A system comprising a content directory server for managing content as electronic information or attribute information thereof, and a terminal connected to the content directory server via a network, wherein the content directory server is Means for authenticating a user, means for issuing a content ID as ID information for the content, content ID assigning means for assigning the content ID to the content, content and content ID
And a means for managing the relationship between the user ID and the issued content ID. The terminal includes means for requesting the issuance of the content ID and means for transmitting and receiving the content. , The content ID
A content ID assigning system, wherein the assigning means is configured to set a content ID and digital signature data to the content in the header information.