JP2003345762A - Content distribution apparatus, system, method, computer program and recording medium therefor - Google Patents

Abstract

(57) [Summary] [PROBLEMS] To provide a means and a method capable of preventing unauthorized download of contents without complicating processing procedures between operators in a communication network environment in which contents are sold and distributed. I do. SOLUTION: Apart from an access token as a content use ticket issued by a content sales company, the content distribution device becomes an identifier for judging the validity of various requests from a user terminal on the content distribution device side. Issue an access key. One access key is issued for a transaction originating from a content distribution request from one user, and the content distribution device uses the access key internally to reduce access from the user to content sales. It is managed independently of the business operator. As described above, two types of access tokens and access keys that do not have a particular rule are used.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a content distribution system for distributing content via a communication network such as the Internet.

[0002]

2. Description of the Related Art In recent years, with the spread of the Internet, contents such as music and computer game software have been distributed via the Internet (communication network). FIG. 1 is a block diagram showing a schematic configuration of a content distribution system for selling and distributing content. In this figure, a content sales server 2 is located on a content sales company side and sells contents via the Internet. Content data files sold by content sellers (hereinafter referred to as
The content file) is distributed to the user side in response to a distribution request transmitted from the user terminal 4 from the distribution system 3 located at the side of the distributor that distributes the content. At present, control transfer between content sellers and content distributors is mostly performed by an internalized control unit (redirect) or externalized authentication means (password), and is logged in. And the format in which the content file is distributed in one session generally occupies, but the problem has become apparent. Attempting to respond to a large file download request while preventing unauthorized access will cause the following problems with current systems.

[0005] Specifically, an access token is issued from the content sales server 2 to the user terminal 4 as a content use ticket. Then, when a content distribution request using the access token is sent from the user terminal 4 to the content sales server 2, the distribution request is transferred to the distribution system 3, and the access is performed between the content sales server 2 and the distribution system 3. -User authentication is performed based on the token. When the authenticity of the user is confirmed by this authentication, the content file requested from the distribution system 3 to the user terminal 4 is distributed using the access token.

[0004]

As described above, when the content file is distributed, the access token as the content ticket is used for the transaction between the content distributor and the distributor (the settlement processing). , Etc.), the code generally has a rule (for example, has a predetermined format). Conventionally, such an access token is used between two parties in a contractual agreement between a content distributor and a distributor, and an internal process for distributing a content file (data transmission / retransmission) Or confirmation of distribution completion, distribution record, etc.).

[0005] When such an access token is used for internal processing of distribution, a purchase of a plurality of contents is applied at once and a plurality of contents are distributed, or a request for re-distribution of contents is required. If the content is tracked by some kind of logic, for example, the rules may be broken by analogy from the access token used in the internal processing, and the content may be downloaded illegally. Was. In addition, even when the access token used for such internal processing is illegally copied by a third party on the user side, there is a possibility that the file may be downloaded illegally, causing a problem. That is, there is a problem in using a code having a rule (regularity) (in this case, an access token) for internal processing for distribution.

[0006] The present invention has been made in view of the above points, and in a communication network environment in which contents are sold and distributed, it is possible to prevent unauthorized downloading of contents without complicating processing procedures between businesses. An object of the present invention is to provide a content distribution device, a system, and a method, and a computer program and a recording medium thereof.

[0007]

According to a first aspect of the present invention, there is provided a content distribution apparatus for distributing a content via a communication network, wherein the content sales company sells the content via the communication network. When the server receives a content distribution request using an access token issued as a content use ticket to the user terminal from the server, the identifier is used to determine the legitimacy of various requests from the user terminal. Access key issuing means for issuing an access key that does not have any property to the user terminal in accordance with the access token and the transaction, and validity of various requests using the access key received from the user terminal Is determined from the access key, and only when the validity of the access key is confirmed, And transaction management means for receiving various requests from the terminal, the distribution of the content is completed, characterized in that it comprises a disabling means for disabling the access key.

[0008] In this specification, a transaction refers to a series of procedures (processing operations) starting from a content distribution request from a user terminal.

The invention described in claim 2 is the first invention.
In the content distribution device described in (1), when the content is divided and provided to the user side, an access key is received together with a file download request received for each divided file.

The invention described in claim 3 is the same as the invention described in claim 2.
In the content distribution device described in the above,
The key may include a random value.

According to a third aspect of the present invention, there is provided a content sales company-side server for selling content via a communication network, a content distribution device for delivering content via the communication network, In the content distribution system including the above, the content seller side server, the authentication means for authenticating the user, and, if the authentication by the authentication means is successful, the access token as a content use ticket to the user terminal to the user terminal Access token issuing means for issuing, wherein the content distribution device is configured to provide an access token issued as a content use ticket to the user terminal from a content sales company side server connecting the user terminal to the communication network. Upon receiving a content distribution request using the token, various requests from the user terminal are received. An access key issuing means for issuing an access key, which is an identifier for judging validity and does not have a rule, to the user terminal in accordance with the access token and the transaction, and receiving from the user terminal Transaction management means for judging the validity of various requests using the access key from the access key, and only when the validity of the access key is confirmed, accepting various requests from the user terminal; Invalidating means for invalidating the access key when content distribution is completed.

According to a fourth aspect of the present invention, there is provided a content distribution method for distributing content via a communication network, wherein the content distribution method includes: Receiving a content distribution request using an access token issued as a content voucher to the user terminal from a content vendor server that sells the content via the server, and receiving the content distribution request Issuing an access key, which is an identifier for judging the validity of various requests from the user terminal and has no rule, to the user terminal in accordance with the access token and the transaction. When,
A step of determining, from the access key, the validity of various requests using the access key received from the user terminal;
In the procedure for determining the validity, only when the validity of the access key is confirmed, a procedure for controlling to accept various requests from the user terminal, and when the distribution of the content is completed, And a disabling means for disabling the key.

According to a fifth aspect of the present invention, there is provided a computer program which, when installed in a computer, causes the computer to serve as the content distribution apparatus according to the first aspect of the present invention. Using an access token issued as a content use ticket to the user terminal from the content sales company side server that sells, receiving a content distribution request, and receiving the content distribution request,
A procedure for issuing an access key, which is an identifier for judging the validity of various requests from the user terminal and has no law, to the user terminal corresponding to the access token and the transaction, A procedure for judging the validity of various requests using the access key received from the user terminal from the access key, and a procedure for judging the validity only when the validity of the access key is confirmed. A computer comprising: a procedure for controlling to receive various requests from the user terminal; and a revocation unit for revoking the access key when the distribution of the content is completed. It is a program.

According to a sixth aspect of the present invention, there is provided a recording medium in which a computer program which is installed in a computer to be the content distribution apparatus according to the first aspect of the present invention is provided. Receiving a content distribution request using an access token issued as a content voucher to the user terminal from a content distributor server that sells the content via the server, and receiving the content distribution request Issuing an access key, which is an identifier for judging the validity of various requests from the user terminal and has no rule, to the user terminal in accordance with the access token and the transaction. And various requests using the access key received from the user terminal A step of determining the validity from the access key and a step of controlling to accept various requests from the user terminal only when the validity of the access key is confirmed in the procedure of determining the validity And a revoking means for revoking the access key when the distribution of the content is completed.

According to the present invention, apart from an access token as a content use ticket issued by a content seller who sells content via a communication network, a user terminal is provided on the content distribution device side. It issues an access key which is an identifier for judging the validity of various requests from the company and does not have a rule. In this case, as described above, when only the access token having the regularity is used, and this is also used for internal processing for distributing the content, unauthorized access by analogy or the like (such as downloading of unauthorized content). Issue one access key for the transaction originating from a content distribution request from one user, and use the access key internally in the content distribution device. Thus, the access from the user can be managed independently of the content seller. When one transaction is completed, that is, when one content is delivered, the access key issued for this transaction is invalidated, so that the same access token and access key are used improperly. Can be prevented. That is, by using two types of access token and access key, the shielding property of the content distribution device can be further improved. Also, the access key has no regularity, and in particular contains a random value,
Since the code has no rule, it is difficult to analogize the structure of the access key, and it is possible to prevent unauthorized access by analogy.

[0016]

Embodiments of the present invention will be described below with reference to the drawings. In FIG. 1, reference numeral 1 denotes an ISP (Internet) to which a user subscribes as a member.
This is a gateway server provided in the Service Provider. The gateway server 1 authenticates the user when logging in, and connects the user terminal 4 to the Internet 5 if authentication is successful.
Connect to

Reference numeral 2 denotes a content sales server on the content sales company side. Upon receiving the content distribution designation (delivery request) from the user terminal 4, the content sales server 2 starts a transaction starting from the user terminal 4 (here, a series of transactions starting from the content distribution request from the user terminal 4). In response to the procedure (processing operation), the distribution system 3 that is the distribution source of the content is selected, and an access token (details will be described later) is issued as a content ticket (access right to the distribution system 3). The information such as the access token and the IP address of the distribution system 3 is given to the user terminal 4.

Next, the distribution system denoted by reference numeral 3 is a system for distributing contents via the Internet 5, and includes a control unit 3a, a file management unit 3b, and a contents distribution unit 3c. The control unit 3a confirms the validity of the added access token to the content sales server 2 in response to the content distribution request from the user terminal 4, and in response to the access token and the transaction, An access key (details will be described later) serving as an identifier for judging the validity of various requests from the user terminal 4 is issued.

The control unit 3a controls communication (request and response) with the user terminal 4 using an access key. Then, control for distributing the content according to the request from the user terminal 4 is performed. For example, access management from the user terminal 4 or the user terminal 4
The following file management unit 3b is selected in response to a download request of a content file from the user terminal, and management of allocation according to the access amount from the user terminal 4 to the file management unit 3b is performed. When the download of the content file is completed in the user terminal 4, the access key issued for the transaction is invalidated. In the present embodiment, one content file is composed of a plurality of content files (CFA #
n).

The file management section 3b manages the following content distribution section 3c composed of a plurality of distribution servers (not shown). The file management section 3b mainly manages storage of content files in each distribution server, It manages the operation status of the distribution server. Further, it requests the content distribution unit 3c to create a URL indicating the storage location of the content file requested by the user terminal 4, and notifies the user terminal 4 of the URL created by the content distribution unit 3c. There are a plurality of content distribution units 3c and a plurality of file management units 3b (not shown).

The content distribution unit 3c is composed of a plurality of distribution servers (cache servers) as described above.
Stores content files to be delivered to the user side. In addition, a URL indicating the storage location of the content file to be distributed is created in response to a URL creation request received from the file management unit 3b, and given to the file management unit 3b. Then, in response to the download request of the content file from the user terminal 4 by the URL specification, the requested content file is distributed. The content distribution unit 3
The URL generated in c is composed of, for example, an address or server name of the distribution server, an access key, and a time stamp. With this configuration, the URL is uniquely determined. The control unit 3a, the file management unit 3b, and the content distribution unit 3c are connected to the Internet 5 and can be accessed from the user terminal 4, respectively.

Next, reference numeral 4 denotes a user terminal. The user accesses the content sales server 2 and the distribution system 3 via the gateway server 1 and the Internet 5 by using the user terminal 4, and obtains desired content. Request and receive its delivery. The user terminal 4
When transmitting a content distribution request to the control unit 3a of the distribution system 3, an access token issued from the content sales server 2 is added to the distribution request. When transmitting various requests (including a download end notification) such as a request for downloading a content file to the control unit 3a or the file management unit 3b, an access key is added to the request.

Next, the access token, access key, and content file will be described.

As described above, the access token is issued as a content use ticket (access right to the distribution system 3) by the content seller who sells the content via the communication line network. In the embodiment, for example, a specific hexadecimal number is used. In general, the access token has a format that can be negotiated between the content distributor and the distributor such as a distributor, and includes, for example, information that can identify the content distributor. The access key is an identifier for managing a series of procedures (transactions) between the user and the distribution system 3 until the end of the distribution of one content, and is composed of time information such as a time stamp and a random numerical value. It is a code that is structured and has uniqueness. As described above, since the present access key is configured to include a random numerical value, it has no regularity. The content is divided into a plurality of content files (CFA # n), and is further managed as a file group including a header file storing information such as the number of divided files, the title of the file, and the length of each divided file. .

The control unit 3a, the file management unit 3b, and the content distribution unit 3 of the gateway server 1, the content sales server 2, and the distribution system 3
c is each realized using a server computer. Further, the functions as the authentication means and the access token issuing means and other processing functions in the content sales server 2 and the functions as the access key issuing means, the transaction issuing means and the invalidating means in the control unit 3a and the like Processing function is constituted by a memory and a CPU (Central Processing Unit), etc.
It is assumed that the functions are realized by loading a program (not shown) for realizing each function into a memory in a processing unit mounted in each server and executing the program.

Next, the operation of the content distribution system of the present embodiment configured as described above will be described.

First, the user terminal 4 and the gateway
Authentication processing is performed between the servers 1. Here, first, authentication information including a user ID and a password is sent from the user terminal 4 to the gateway server 1, and the gateway
In the server 1, the authentication information received from the user terminal 4 and the I
The user is authenticated by checking whether it matches the authentication information registered on the SP side. If the authentication is successful, the gateway server 1 connects the user terminal 4 to the Internet 5. Further, as shown in FIG. 3, when the content sales server 2 is accessed from the user terminal 4 and the user authentication process for purchasing the content is completed in the content sales server 2 (), the above-described access token is generated. User terminal 4 together with the address of distribution system 3
Give to ().

The user terminal 4 stores and holds the acquired access token and the like. In the following, this user terminal 4
Will be described as a content distribution request source and accesses the distribution system 3 of the present embodiment. At this time, the user terminal 4 accesses the control unit 3a (see FIG. 2).

First, a distribution request including an access token is sent from the user terminal 4 to the control unit 3a (t1, FIG. 3 :). Of course, the distribution request includes information for identifying desired content (information such as the name of the content), the IP address of the user terminal 4, and the like. The control unit 3a inquires of the content sales server 2 whether the access token received from the user terminal 4 is valid (FIG. 3 :), and receives a notification that the access token is valid (FIG. 3:
), Start the distribution process. Here, an access key corresponding to the access token and the transaction is generated, and the access key (Accesses) is generated.
s Key) and download start file number information (CFA Start #) of the divided content file
Is transmitted (t2).

Based on the access key received from the distribution system 3 and the download start file number information of the divided content file, the user terminal 4 requests the download of one of the divided content files (CFA # n). Download request) is transmitted to the control unit 3a (t3). An access key is added to the download request transmitted at this time.

The control unit 3a sends a CFA #
Upon receiving the n download request, first, the validity of the access key is confirmed. Then, one of the file management units 3b is selected, and a download allocation request (download assignment request) for allocating to the selected file management unit 3b a distribution server that distributes CFA # n which is one of the divided content files. ) (T
4). In the following, it is assumed that the control unit 3a confirms the validity of each request based on the access key added to the request from the user terminal 4, and a description thereof will be omitted.

Upon receiving a download assignment request from the control unit 3a, the file management unit 3b determines whether a distribution server constituting the content distribution unit 3c is assignable or not according to the operating status. Is given to the control unit 3a (t5). When the control unit 3a receives the notification of the consent from the file management unit 3b, the control unit 3a stores information (File Maga) of the selected file management unit 3b in the user terminal 4.
ger information: the IP address of the file management unit 3b) (t6).

[0033] The user terminal 4 transmits the Fi
Upon receiving the le-magazine information, it accesses the file management unit 3b based on this information, and transmits a CFA file request #n requesting distribution of the CFA #n with an access key added (t7). Next, when receiving the request #n of the CFA file to which the access key is added from the user terminal 4, the file management unit 3b inquires of the control unit 3a about the validity of the received access key (t
8).

Next, the control unit 3a that has received the inquiry about the validity of the access key replies the validity (t
9). Here, it is assumed that this access key is valid. Of course, if the file is illegal, the file management unit 3b is notified of that fact. When the validity of the access key received from the user terminal 4 is confirmed, the file management unit 3b notifies the content distribution unit 3c of the UR indicating the storage location of the CFA # n as the distribution target file.
Request the creation of L (t10). Upon receiving the URL creation request, the content distribution unit 3c creates a URL indicating the storage location of the CFA # n, and notifies the file management unit 3b of the URL (t11).

Then, the file management unit 3b sends the UR
When the notification of L is received from the content distribution unit 3c, the received URL is notified to the user terminal 4 (t12). Then
The user terminal 4 having received the notification of the URL from the file management unit 3b accesses the content distribution unit 3c by designating the URL, and transmits a distribution request for CFA # n which is one of the divided content files. (T1
4). The content distribution unit 3c transmits the CF from the user terminal 4.
Upon receiving the A # n distribution request, the corresponding file is distributed (t14).

When the reception of the CFA # n file is completed at the user terminal 4, the user terminal 4 transmits a completion notification to the content distribution unit 3c to notify the completion (t15). The end notification is further notified from the content distribution unit 3c to the file management unit 3b (t16), and further notified from the file management unit 3b to the control unit 3a (t17). Next, when the control unit 3a confirms the end notification, a notification of the confirmation is sequentially transmitted from the control unit 3a to the file management unit 3b, the content distribution unit 3c, and the user terminal 4 (t18, t19). , T20).

Then, from the user terminal 4 to the control unit 3a,
An access key is added to notify that the download of the CFA # n file has been completed (t21). Control unit 3
When a receives the notification of the end of the download of the CFA # n file from the user terminal 4, a counts up D / L # (t22). This D / L # is for counting the number of downloaded files. If this D / L # matches the total number of divided content files, it is determined that all the files have been downloaded to the user terminal 4. Become. Thereafter, t3 to t22 are repeated until all the divided content files have been downloaded.

Here, all files are stored in the user terminal 4
And downloaded to At this time, D / L # matches the total number of divided content files as described above. Then, the control unit 3a invalidates the access key issued for the transaction (t23). Thus, one transaction by one access token is completed. Thereafter, no one can access the distribution system 3 using the previously issued access key. The operation sequence described above is an example, and is not limited to the above-described processing flow.

The present invention is not limited to the Internet,
A network using an AN or dial-up may be used. Further, a program for realizing some or all of the functions of the content sales server 2 or the distribution system 3 is recorded on a computer-readable recording medium, and the program recorded on the recording medium is read by a computer system. The content distribution system may be configured by executing the content distribution system. Here, the “computer system” includes an OS and hardware such as peripheral devices.

The "computer system" is a WW
If the W system is used, a homepage providing environment (or display environment) is also included. The “computer-readable recording medium” is a flexible disk, a magneto-optical disk, a ROM, a CD-ROM, or the like.
It refers to a portable medium such as a ROM or a storage device such as a hard disk built in a computer system. Further, the “computer-readable recording medium” refers to a volatile memory (R) in a computer system that is a server or a client when a program is transmitted via a network such as the Internet or a communication line such as a telephone line.
AM), for example, those holding a program for a certain period of time.

The above program may be transmitted from a computer system storing the program in a storage device or the like to another computer system via a transmission medium or by a transmission wave in the transmission medium. Here, the “transmission medium” for transmitting a program refers to a medium having a function of transmitting information, such as a network (communication network) such as the Internet or a communication line (communication line) such as a telephone line. Further, the program may be for realizing a part of the functions described above. further,
What can realize the above-mentioned function in combination with a program already recorded in the computer system, that is, a so-called difference file (difference program) may be used.

The embodiment of the present invention has been described in detail with reference to the drawings. However, the specific configuration is not limited to this embodiment, and the configuration and the like may be made without departing from the gist of the present invention. included.

[0043]

As described above, according to the present invention, according to the present invention, an access token as a content ticket issued by a content seller who sells content via a communication network. Separately, on the content distribution device side, an access key which is an identifier for judging the validity of various requests from the user terminal and has no regularity is issued, and when one transaction is completed, When distribution of one content is completed,
The access key issued for this transaction has been invalidated. In addition, an access key is received together with a file download request received for each divided file. This makes it difficult for the access token and the access key to be used illegally. That is, by using two types of access tokens and access keys, the shielding property of the content distribution device can be improved. In addition, since the access key used for internal processing for distribution separately from the access token does not have a rule, especially since this access key contains a random value, it is possible to analogize the structure of the access key. This makes it difficult to prevent unauthorized access by analogy and unauthorized download of content.

[Brief description of the drawings]

FIG. 1 is a diagram showing a schematic configuration of a content distribution system for selling and distributing content.

FIG. 2 is an example of an operation sequence of the content distribution system according to the embodiment of the present invention;

FIG. 3 is a diagram illustrating an operation between the distribution system and the content sales server according to the embodiment, and a user terminal.

[Explanation of symbols]

DESCRIPTION OF SYMBOLS 1 ... Gateway server 2 ... Content sales server (content sales company side server) 3 ... Distribution system 3a ... Control part (content distribution device) 3b ... File management part 3c ... Content distribution part 4 ... User terminal 5 ... Internet (communication) Network)

Claims (7)

[Claims] 1. A content distribution device for distributing content via a communication network, wherein a content sales company server which sells the content via the communication network issues a content use ticket to the user terminal. When a content distribution request is received using an access token to be received, an access key that is not an identifier for judging the validity of various requests from the user terminal and does not have a rule is used as the access token. And an access key issuing means for issuing to the user terminal in response to the transaction, and judging from the access key the validity of various requests using the access key received from the user terminal, Only when the validity of the user terminal is confirmed, the transaction for accepting various requests from the user terminal is performed. And transfection management means, the delivery of the content is completed, the content delivery apparatus comprising: a, and disabling means for disabling the access key. 2. The content distribution apparatus according to claim 1, wherein when the content is divided and provided to a user, an access key is received together with a file download request received for each divided file. 3. The content distribution device according to claim 2, wherein the access key includes a random number value. 4. A content distributor server that sells content via a communication network, a content distribution device that distributes content via the communication network,
In the content distribution system including the above, the content seller server includes: an authentication unit for authenticating a user; and, when the authentication by the authentication unit is successful, an access token as a content use ticket to the user terminal. Access token issuing means for issuing, wherein the content distribution apparatus is configured to provide an access token issued as a content use ticket to the user terminal from a content sales company side server connecting the user terminal to the communication network. Using tokens,
Upon receiving a content distribution request, an access key, which is an identifier for judging the validity of various requests from the user terminal and has no law, is assigned to the user in accordance with the access token and the transaction. Access key issuing means for issuing to the terminal, and judging the validity of various requests using the access key received from the user terminal from the access key, and only when the validity of the access key is confirmed. A transaction management unit for receiving various requests from the user terminal; and an invalidation unit for invalidating the access key when distribution of the content is completed. 5. A content distribution method for distributing content via a communication network, wherein a content sales company server which sells the content via the communication network issues a content use ticket to the user terminal. Receiving a content distribution request using an access token to be received, and, when receiving the content distribution request, an identifier for judging the validity of various requests from the user terminal and having a rule. Issuing a non-access key to the user terminal corresponding to the access token and the transaction, and judging from the access key validity of various requests using the access key received from the user terminal And the procedure for determining the validity of the access key. Only when it is performed, a procedure of controlling to receive various requests from the user terminal, and a step of invalidating the access key when the distribution of the content is completed, comprising: Characteristic content distribution method. 6. A computer program which, when installed on a computer, becomes the content distribution device according to claim 1, wherein the server sells contents via a communication network. A procedure for receiving a content distribution request using an access token issued as a content use ticket to the user terminal, and upon receiving the content distribution request, verifies the validity of various requests from the user terminal. A procedure for issuing an access key, which is an identifier for judging and having no rule, to the user terminal in accordance with the access token and the transaction, and using the access key received from the user terminal. A procedure for judging the validity of various requests from the access key; A step of controlling to accept various requests from the user terminal only when the validity of the access key is confirmed in the step of determining validity; and -A computer program characterized by including a procedure comprising: invalidating means for invalidating a key. 7. A recording medium on which a computer program which is installed on a computer to be the content distribution apparatus according to claim 1 is recorded, the content being sold via a communication network. A procedure for receiving a content distribution request using an access token issued as a content use ticket from the sales company server to the user terminal, and upon receiving the content distribution request, various requests from the user terminal Issuing an access key, which is an identifier for judging the validity of the access key and having no law, to the user terminal in accordance with the access token and the transaction; and Whether the request using the key is valid for the access key And a step of controlling to accept various requests from the user terminal only when the validity of the access key is confirmed in the step of determining the validity. A computer-readable recording medium recording a procedure including, when completed, a step of invalidating the access key.