JP2006013695A - Content providing apparatus, method of using key information in the apparatus, and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To improve the convenience of a system by constructing a mechanism that allows a third party to use key information without impairing security.
A content server receives key information transmitted by a credit server having write authority for the content using device, and encrypts the content using the received key information with the connected content using device. By performing communication, the content server uses a part of the authority of the credit server. Further, the received key information is stored in the tamper resistant device, and a command to be transmitted to the content using apparatus is encrypted and transmitted in the tamper resistant device.
[Selection] Figure 2

Description

  The present invention relates to a content providing apparatus, a method of using key information in the same apparatus, and a program in which a content providing apparatus that does not have write authority for the connected content using apparatus communicates with the content using apparatus.

In recent years, information providing services for distributing digital contents such as movies and music using a computer network such as the Internet have become widespread.
Here, in providing a content distribution service, a content provider manages a user's content usage history, calculates a usage fee based on the usage history, and notifies the user of this usage fee. Settlement is performed (see, for example, Patent Document 1).
In the case of performing communication while maintaining the transmission / reception of information related to such settlement, the parties basically conceal the RSA private key and DES (Data Encryption Standard) common key within a single device. It will continue. As a result, in providing the content distribution service, only those having specific authority can rewrite information about the user.
JP 2001-147970 A

In operation, if such a security key can be used by a third party, the convenience of the system is improved, but the security is lowered.
For example, if it is assumed that the payment for the content service is credit settlement on the network, according to the current specifications, the credit company has the authority to rewrite user information, but the service provider does not have the authority . For this reason, even if it is known that the burden on the credit company can be reduced if the service provider can do it on behalf of the credit company, such as writing purchase histories and writing usage points, it is currently not realized in terms of security is there.

  The present invention has been made in view of the above circumstances, and by constructing a mechanism that allows a third party to use key information without compromising security, the content providing apparatus and the same are intended to improve the convenience of the system. It is an object of the present invention to provide a key information utilization method and program in an apparatus.

  In order to solve the above-described problem, the present invention provides the content providing apparatus in which a content providing apparatus that does not have write authority for a connected content using apparatus communicates with the using apparatus, Encrypted communication is performed between the key information receiving unit that receives the key information transmitted by the payment management apparatus having write authority for the using apparatus and the connected content using apparatus using the received key information. And an encryption / decryption processing unit.

  In the present invention, the received key information is stored in a tamper resistant device, and a command to be transmitted to the content using device is encrypted and transmitted in the tamper resistant device.

  In the present invention, the command is a command for rewriting information stored in the content using device.

  Further, the present invention is a method of using key information in the content providing apparatus in which a content providing apparatus that does not have write authority for the connected content using apparatus communicates with the content using apparatus, Receiving key information transmitted by a payment management apparatus having write authority for the using apparatus, and performing encrypted communication with the connected content using apparatus using the received key information; It is characterized by having.

  The present invention is also a program used for the content providing apparatus in which a content providing apparatus that does not have write authority for the connected content using apparatus communicates with the content using apparatus, the content using apparatus Processing for receiving key information transmitted by a payment management device having write authority to the device, processing for performing encrypted communication with the connected content using device using the received key information, Is executed by a computer.

  According to the present invention, the content providing apparatus receives key information transmitted by a payment management apparatus having write authority for the content using apparatus, and is connected with the content using apparatus connected using the received key information. By performing encrypted communication between them, it is possible to allow the content providing device to use a part of the authority that the payment management device has, and it is possible to operate safely without misusing the key information at that time . Furthermore, the payment management apparatus does not need to authenticate the content use apparatus each time, and the load can be distributed to the content use apparatus.

  Further, according to the present invention, the received key information is stored in the tamper resistant device, and the content transmitted from the outside can be viewed by encrypting and transmitting the command to be transmitted to the content using device in the tamper resistant device. Therefore, it is possible to construct a security-safe system that cannot be used for other purposes. Furthermore, since the command used at that time is a command for rewriting the information stored in the content using device, a content providing device that does not have the write authority for the connected content using device can communicate with the content using device. It becomes possible to communicate with.

FIG. 1 is a diagram showing an example of a system configuration of a content providing system in which the present invention is implemented.
Here, since credit settlement is assumed, a content server 2 installed and managed by a content provider on a computer network 3 such as the Internet and a settlement installed and managed by a credit company are installed. A credit server 4 as a management device and a plurality of content utilization devices 1 that are connected to an IC card reader / writer possessed by a user or are built in a personal computer or the like are connected.
Note that the content here includes maps and the like in addition to still images, moving images, music, photos, movies, and programs.

FIG. 2 is a block diagram showing an example of the configuration of the content providing apparatus according to the embodiment of the present invention.
The content providing apparatus according to the present invention is implemented in the content server 2 shown in FIG. 1, and includes an authentication processing unit 21, a key information receiving unit 22, a tamper resistant device 20 as an example of a tamper resistant device, and encryption / decryption. It comprises a processing unit 24, a transmission information DB 25, and a reception information DB 26.

The authentication processing unit 21 has a function of performing authentication with the credit server 4 and setting a secure session. The key information receiving unit 22 receives the key information (Km) transmitted by the credit server 4 having the write authority with respect to the content using apparatus 1 using the communication path. The tamper resistant device 20 stores the Km received by the key information receiving unit 22 in a tamper area having high tamper resistance. For example, an IC card is applied to the tamper resistant device 20.
The encryption / decryption processing unit 24 performs encrypted communication with the connected content using apparatus 1 using the Km received by the key information receiving unit 22, the transmission information is stored in the transmission information DB 25, and the reception information is stored in the transmission information DB 25. Store in the reception information DB 26. The transmission / reception information includes, for example, a content purchase history, usage points, and the like, and these are written into the content usage device 1 by a restricted command that is permitted to be used.

  In the configuration described above, when payment information is transmitted and received, here, it is assumed that it conforms to the EMV (Europay Mastercard VISA) specification. EMV is a common specification formulated for the interoperability of smart cards developed by the three credit companies shown in the name, and the card and the card are used to ensure accurate operation and compatibility in the payment system. It shows the minimum functionality required for terminals and applications. Moreover, when performing key exchange, you may comply with RSA system.

FIG. 3 is an operation sequence diagram quoted for explaining the operation of the embodiment of the present invention, and FIG. 4 is an operation concept diagram cited for explaining the operation concept.
The operation of the embodiment of the present invention shown in FIGS. 1 and 2 will be described in detail below with reference to FIGS.

  Here, a system is assumed in which encrypted communication is performed between a credit card company and its user (end user). At this time, if another service provider, a service provider, tries to communicate with the user using the key information held by the credit company (rewrites the IC card information held by the end user according to the credit), the following Follow the steps.

First, authentication is performed between the credit server 4 of the credit company and the content server 2 of the service provider, and a secure session is set (S31). This operation is executed by the authentication processing unit 21 in the content providing apparatus 2. Then, the credit server 4 uses the communication path to deliver the key information Km held by the credit company to the content server 2, and the content server 2 receives the key information reception unit 22.
At this time, SSL (Security Sockets Layer) or the like is used. For this reason, the credit server 4 authenticates the tamper resistant device 20 (for example, an IC card as an example of a tamper resistant device) in advance (S32). The content server 2 has the above-described tamper resistant device 20 permitted by the credit company, and the Km received by the key information receiving unit 22 is stored in the tamper resistant device 20 while being encrypted (S33). Here, the session set between the credit servers 4 ends (S34).

In the tamper resistant device 20, this encrypted key information is decrypted to extract Km, but Km is kept inside the tamper resistant device 20. When the content server 2 executes encrypted communication using the content utilization apparatus 1 and Km, the information is encrypted in the tamper resistant device 20 and distributed to the content utilization apparatus 1 (S35, S36). This is executed by the encryption / decryption processing unit 24. Since the command used at that time is a command for rewriting information stored in the content using device 1, the content server 2 that does not have the write authority for the connected content using device 1 communicates with the content using device 1. It becomes possible to communicate between each other.
Thus, the service provider can perform communication in a secure environment such as that performed between the credit company and the end user. At this time, the credit company can be operated safely without looking into the key information by a third party including the service provider, and can be realized by using the existing mechanism while minimizing the specifications of the credit server 4.

  FIG. 5 shows an example of the internal configuration of the IC card. Here, the IC card is mounted as the content utilization apparatus 1 of the present invention, and the CPU 51 is the core, and the ROM 52, RAM 53, EEPROM (nonvolatile storage device) 54, S / P 56 (serial-parallel conversion circuit), P / S 57 ( A parallel-serial conversion circuit) is configured by a main body chip commonly connected to the internal bus 62 and an RF interface 60 (only in the case of a non-contact IC card). An interrupt logic 55 is connected to the CPU 51, and a reset 58, a clock 59, and a power supply 60 supplied from the outside are supplied to each block.

  As described above, according to the present invention, the content server 2 receives the key information transmitted by the credit server 4 having the write authority to the content using device 1 and is connected using the received key information. By performing encrypted communication with the use device 1, the content server 2 is allowed to use a part of the authority that the credit server 4 has. At this time, the credit company can operate safely without misuse of the key information. Furthermore, the credit server 4 does not need to authenticate the content use device 1 each time, and the load can be distributed to the content use device 1.

Further, according to the present invention, the received key information is stored in the tamper resistant device 20, and the content transmitted from the outside is removed by encrypting and transmitting the command to be transmitted to the content using apparatus 1 in the tamper device 20. Therefore, it is possible to construct a security-safe system that cannot be used for other purposes. Further, since the command used at that time is a command for rewriting the information stored in the content use device 1, the content server 2 that does not have the write authority for the connected content use device 1 is used by the content use device. Communication with 1 is possible.
In the case of a payment method using the EMV method, the key information Km matches the key information in the credit server 4 and the key information held by the end user (secret key). In the RSA method, the key information Km is Saved by the service provider and decrypted by the end user with the public key.

  In addition, the procedures executed by each of the authentication processing unit 21, the key information receiving unit 22, and the encryption / decryption processing unit 24 shown in FIG. 2 are recorded on a computer-readable recording medium and recorded on this recording medium. The content providing apparatus of the present invention can be realized by causing the computer system to read and execute the program. The computer system here includes an OS and hardware such as peripheral devices.

Further, the “computer system” includes a homepage providing environment (or display environment) if a WWW system is used.
The program may be transmitted from a computer system storing the program in a storage device or the like to another computer system via a transmission medium or by a transmission wave in the transmission medium. Here, the “transmission medium” for transmitting the program refers to a medium having a function of transmitting information, such as a network (communication network) such as the Internet or a communication line (communication line) such as a telephone line.
The program may be for realizing a part of the functions described above. Furthermore, what can implement | achieve the function mentioned above in combination with the program already recorded on the computer system, and what is called a difference file (difference program) may be sufficient.

  The embodiments of the present invention have been described in detail with reference to the drawings. However, the specific configuration is not limited to the embodiments, and includes designs and the like that do not depart from the gist of the present invention.

It is a figure which shows an example of the system configuration | structure of the content provision system with which this invention is implemented. It is a block diagram which shows the internal structure of the content provision apparatus concerning embodiment of this invention. It is the operation | movement sequence diagram quoted in order to demonstrate the operation | movement concerning embodiment of this invention. It is the operation | movement conceptual diagram quoted in order to demonstrate the operation | movement concerning embodiment of this invention. It is a block diagram which shows the internal structure of the content utilization apparatus concerning embodiment of this invention.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 ... Content utilization apparatus, 2 ... Content server (content provision apparatus), 3 ... Network, 4 ... Credit server, 20 ... Tamper-resistant device, 21 ... Authentication processing part, 22 ... Key information receiving part, 24 ... Encryption / decryption Processing unit, 25 ... transmission information DB, 26 ... reception information DB

Claims (5)

A content providing apparatus that does not have write authority for a connected content using apparatus communicates with the using apparatus.
A key information receiving unit that receives key information transmitted by a payment management apparatus having write authority to the content using apparatus;
An encryption / decryption processing unit for performing encrypted communication with the connected content using apparatus using the received key information;
A content providing apparatus comprising:   The content providing apparatus according to claim 1, wherein the received key information is stored in a tamper resistant apparatus, and a command to be transmitted to the content using apparatus is encrypted and transmitted in the tamper resistant apparatus.   The content providing apparatus according to claim 2, wherein the command is a command for rewriting information stored in the content using apparatus. A method of using key information in the content providing apparatus in which a content providing apparatus that does not have write authority for the connected content using apparatus communicates with the content using apparatus,
Receiving key information transmitted by a payment management apparatus having write authority to the content utilization apparatus;
Performing encrypted communication with the connected content using device using the received key information;
A method for using key information, comprising: A program that is used in the content providing apparatus that communicates with the content using apparatus by a content providing apparatus that does not have write authority for the connected using apparatus,
Processing for receiving key information transmitted by a payment management apparatus having write authority to the content utilization apparatus;
A process of performing encrypted communication with the connected content using apparatus using the received key information;
A program that causes a computer to execute.

Images