JP2008176736A - Service distribution system, prepaid ticket issuing method, prepaid ticket using method, prepaid ticket collection method, IC chip, portable terminal, and program - Google Patents

Abstract

In content viewing control using a prepaid ticket, the security condition of the prepaid ticket is satisfied, the communication load is reduced, and offline characteristics are provided.
A prepaid ticket is issued to a mobile terminal based on the amount information of a prepaid ticket to be issued, counter information indicating the accumulated use count of the prepaid ticket, and signature information for serial information that can uniquely identify the prepaid ticket. Issue.
[Selection] Figure 3

Description

  The present invention relates to a service distribution system, a prepaid ticket issuing method, a prepaid ticket using method, a prepaid ticket collection method, an IC chip, a portable terminal, and a program.

  In BS / terrestrial digital broadcasting, content viewing control is performed using an IC card (IC chip built-in card) called a CAS card mounted on a receiver (STB; Set Top Box) using a conditional access system (CAS). It is carried out. This CAS card decrypts the received control data, extracts a key, and manages data related to the license, thereby controlling content viewing. A service is also provided in which a communication service provider distributes STBs that record user license data to users and performs viewing control based on the licenses. In addition, a video distribution service for distributing video content via a communication line has been started in a telecommunications carrier using an STB incorporating an IC chip in which data related to a user's license is recorded. In this service, viewing control similar to CAS is enabled by an IC chip built in the STB.

Here, when a user uses a content viewing service using CAS or an IC chip built-in STB at a place other than his / her home such as a place where he / she is away from home, he / she needs to take out a CAS card or STB from his / her home. There is a problem that family members in the country cannot view the content. As a technique for solving this problem, for example, a technique has been proposed in which billing is performed in advance by an electronic prepaid method and a content viewing service is used by a mobile phone or the like on the go (see, for example, Patent Document 1).
JP 2003-8787 A

  By the way, when viewing content using the electronic prepaid method as described above, a prepaid ticket for license control and service billing is used. The security conditions required for this prepaid ticket are as follows: There seems to be something like this.

  Issuance / billing validity: Prepaid ticket issuance is ensured under the control of the license issuance management organization that issues the license data and the CAS card or IC chip with built-in STB. In addition, the user who uses the service on the go should be charged under the management of the CAS card or the IC chip with built-in STB.

  Unforgeability: It is impossible for a user or a third party to generate a prepaid ticket or change the balance without going through a license issuance management organization.

  Inability to eavesdrop: Even if an eavesdropper eavesdrops and obtains information on the communication path, it cannot be deciphered and cannot be used as a prepaid ticket.

  Overuse impossibility: A user who has a properly issued prepaid ticket cannot copy the prepaid ticket and use it more than once.

  Anonymity: The user's personal information is not specified from the prepaid ticket usage history.

  Divided availability: As long as the user properly pays with a prepaid ticket, payment can be made in any amount. In addition, users must be able to pay for multiple prepaid tickets.

  In recent years, in particular, the number of users who are aware of privacy has increased, and for users, personal information that links information that identifies users and information such as viewing content and viewing location has been increased by third parties such as content providers or research organizations. It is important not to be grasped by a person.

  Further, there is a possibility that communication with the license issuance management organization may be concentrated at the time of payment by the prepaid ticket, and there is a concern that the processing load in the license issuance management organization will increase.

  Further, when the issued prepaid ticket is used for payment, it is also required to be offline so that the prepaid ticket corresponding to the remaining amount can be reissued without communicating with the license issuance management organization.

  The present invention has been made in view of the above points, and the object thereof is to enable content viewing control using a prepaid ticket that satisfies the required security conditions, and to reduce the communication load, and is offline. A service distribution system, a prepaid ticket issuing method, a prepaid ticket using method, a prepaid ticket collection method, an IC chip, a portable terminal, and a program are provided.

  The present invention has been made in order to solve the above-described problems, and is a service distribution system that delegates license information to a mobile terminal as a prepaid ticket and can use the prepaid ticket as a price for a service provided. A license information management means for issuing and managing the license information; amount information of a prepaid ticket to be issued; counter information indicating the accumulated use number of the prepaid ticket; signature information for serial information uniquely identifying the prepaid ticket; Prepaid ticket issuing means for issuing a prepaid ticket based on the mobile terminal, and receiving the prepaid ticket from the mobile terminal storing the issued prepaid ticket, and verifying the signature information in the received prepaid ticket And receive the The amount information indicating the remaining amount of the prepaid ticket is calculated from the amount information of the prepaid ticket and the usage fee information of the provided service, and a predetermined calculation is performed on the counter information of the received prepaid ticket, and the amount of the remaining amount is calculated. Prepaid ticket processing means for updating the prepaid ticket based on the information and the calculated counter information and reissuing it to the portable terminal, and verifying that the signature information in the prepaid ticket is valid by the prepaid ticket processing means And a service providing means for providing the service when the service is performed.

  In the service distribution system, the prepaid ticket processing unit accumulates the received prepaid ticket serial information and the prepaid ticket counter information as a set, and the license information management unit includes the prepaid ticket processing unit. A set of serial information and counter information stored in the database is collected, a history of counter information is created and updated for each serial information, and validity of use of a prepaid ticket is determined based on the history.

  Further, in the service distribution system, the prepaid ticket processing unit accumulates prepaid ticket usage amount information corresponding to the usage fee information of a service provided by using a prepaid ticket, and the license information management unit includes the license information management unit. The accumulated prepaid ticket usage amount information is tabulated for those for which it is determined that the use of the prepaid ticket is valid.

  In the service distribution system, the prepaid ticket issuing unit blindly processes the serial information and transmits the serial information to the license information management unit. The license information management unit includes a signature of the blinded serial information. Is generated and transmitted to the prepaid ticket issuing means.

  In the service distribution system, the money amount information included in the prepaid ticket is information that is not signed by the license information management means.

  Further, in the service distribution system, the prepaid ticket processing means receives one or a plurality of prepaid tickets required for the service from the mobile terminal, and receives the amount information of the received prepaid ticket and the service provided. It is characterized in that the amount information representing the remaining amount of the prepaid ticket is calculated from the usage fee information.

  A prepaid ticket issuance method in a service distribution system that delegates license information to a mobile terminal as a prepaid ticket and can use the prepaid ticket as a price for a provided service, the amount information of the prepaid ticket to be issued, A prepaid ticket is issued based on counter information indicating the cumulative number of times the ticket is used and signature information for serial information that can uniquely identify a prepaid ticket.

Also, a prepaid ticket usage method in a service distribution system that delegates license information to a mobile terminal as a prepaid ticket and can use the prepaid ticket as a price for a provided service, including prepaid ticket price information, The prepaid ticket is received from the portable terminal that stores the prepaid ticket issued based on the counter information indicating the cumulative use count and the signature information for the serial information that can uniquely identify the prepaid ticket, and the received prepaid Calculate the amount information indicating the remaining amount of the prepaid ticket from the amount information of the ticket and the usage fee information of the provided service, perform a predetermined calculation on the counter information of the received prepaid ticket, and the amount information of the remaining amount Said operation If the prepaid ticket is updated based on the counter information and issued to the mobile terminal again, the signature information in the received prepaid ticket is verified, and the signature information is verified as valid, The service providing means provides the service.
Further, in the above prepaid ticket usage method, one or a plurality of prepaid tickets required as a consideration for the service are received from the mobile terminal, and the prepaid from the received prepaid ticket price information and the service usage fee information provided. It is characterized by calculating money amount information representing the remaining amount of the ticket.

  Also, a prepaid ticket collection method used in a service distribution system that delegates license information to a mobile terminal as a prepaid ticket and can use the prepaid ticket as a price for a provided service, comprising: The counter information indicating the accumulated number of times the prepaid ticket is used, and the signature information for the serial information that can uniquely identify the prepaid ticket, and the serial information and the counter information of the prepaid ticket issued from the mobile terminal. A set of serial information and counter information is collected, and the stored amount information of the prepaid ticket corresponding to the usage fee information of the service provided for the use of the prepaid ticket is stored. Count for each serial information Create and update information history, determine the validity of the use of the prepaid ticket based on the history, and store the accumulated amount information of the prepaid ticket for those that are determined to be valid use of the prepaid ticket It is characterized by counting.

  Also, an IC chip used in a service distribution system that delegates license information permitted to be issued by the license information management apparatus to a mobile terminal as a prepaid ticket and can use the prepaid ticket as a price for a provided service, Means for registering a portable terminal for delegating a prepaid ticket; means for generating serial information capable of uniquely identifying a prepaid ticket; and means for blindly processing the generated serial information and transmitting the serial information to the license information management apparatus And means for receiving the blinded serial information signature from the license information management device and performing unblinding processing, amount information of the prepaid ticket to be issued, counter information indicating the accumulated use count of the prepaid ticket, The unblinded And means for issuing the signature information, pre-paid tickets based on the relative said registered mobile terminal has, and characterized by including the.

  Also, an IC chip used in a service distribution system that delegates license information permitted by the license information management apparatus to a portable terminal as a prepaid ticket and can use the prepaid ticket as a price for a service provided from the service providing apparatus. The prepaid ticket issued based on the amount information of the prepaid ticket, the counter information indicating the accumulated use count of the prepaid ticket, and the signature information for the serial information that can uniquely identify the prepaid ticket are stored. Means for receiving the prepaid ticket from a portable terminal; means for verifying the signature information in the received prepaid ticket; and if the signature information is verified as valid, the service providing apparatus is provided with the service. Means for providing, and The amount information indicating the remaining amount of the prepaid ticket is calculated from the amount information of the prepaid ticket and the usage fee information of the provided service, and a predetermined calculation is performed on the counter information of the received prepaid ticket. Means for updating a prepaid ticket based on the amount information and the calculated counter information and reissuing it to the portable terminal.

  In the IC chip, a means for storing the serial information and the counter information of the received prepaid ticket as a set, and a prepaid ticket corresponding to usage fee information of a service provided for the use of the prepaid ticket Means for accumulating used amount information, a set of accumulated serial information and counter information, and a set of used amount information of prepaid ticket corresponding to service provider information and usage fee information from the license information management device. Means for transmitting in response to the request.

  In addition, a portable terminal used in a service distribution system that can use a prepaid ticket as a price for a service to be provided, the function of transmitting unique identification information to a first IC chip to perform registration, and the first IC Issued based on prepaid ticket amount information, counter information indicating the cumulative number of times the prepaid ticket is used, and signature information for serial information that can uniquely identify the prepaid ticket, which is sent when authentication is received from the chip A function of receiving and storing the prepaid ticket, a function of determining the number of prepaid tickets required based on usage fee information of the provided service, and transmitting the determined number of prepaid tickets to the second IC chip. A function of using a prepaid ticket, and the second It is transmitted from the C chips, the money amount information and the counter information is characterized by comprising a function of receiving and storing a prepaid ticket is updated.

  A function of transmitting and registering unique identification information to a first IC chip to a computer of a mobile terminal used in a service distribution system capable of using a prepaid ticket as a price for the provided service; and the first IC Issued based on prepaid ticket amount information, counter information indicating the cumulative number of times the prepaid ticket is used, and signature information for serial information that can uniquely identify the prepaid ticket, which is sent when authentication is received from the chip A function of receiving and storing the stored prepaid ticket, a function of using the prepaid ticket by transmitting the stored prepaid ticket to the second IC chip, and the amount information transmitted from the second IC chip; Receive a prepaid ticket with updated counter information A function of storing, provides a program for implementing the.

  According to the present invention, content viewing control can be performed using a prepaid ticket that satisfies the above-described security conditions, the communication load can be reduced, and offline use can be obtained in the use of a prepaid ticket.

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. In the present embodiment, a CAS method will be described as an example.
FIG. 1 is a diagram showing a configuration of a service distribution system according to an embodiment of the present invention. The service distribution system includes a CAS management institution 11 that performs license management such as issuance of a prepaid ticket, a CAS card 12 that is installed in a receiver 14 at a user's home, and a CAS card 18 that is installed in a receiver 17 that is out of the office. And a portable terminal 15 such as a cellular phone that stores a prepaid ticket and is carried by the user.

  In FIG. 1, the prepaid ticket issuance management unit 11a of the CAS management institution 11 generates a prepaid ticket when the validity of the CAS card 12 issued in advance to the user is confirmed, and this prepaid ticket Is issued to the CAS card 12 mounted on the receiver 14 at the user's home.

  The CAS card 12 at home registers the mobile terminal 15 used for the service, and delegates the prepaid ticket issued from the CAS management organization 11 to the registered mobile terminal 15. The delegated prepaid ticket is stored in a reliable tamper resistant module (TRM) in the portable terminal 15.

  When the user goes out, the user views the content using the CAS card 18 attached to the receiver 17 outside the home without taking out the CAS card 12 at home. The content is provided from the service provider 19 to the receiver 17 on the go through broadcasting or a network. At the time of viewing the content on the go, the mobile terminal 15 uses the prepaid function 13 to pay the content usage fee to the CAS card 18 on the go using the prepaid ticket stored in the TRM. At this time, one or a plurality of prepaid tickets can be paid according to the usage fee required for viewing the content. Here, as will be described later, the prepaid ticket does not include information that can directly identify the user.

  The CAS card 18 on the go accumulates prepaid tickets paid from the mobile terminal 15 and totals the prepaid tickets paid during a certain period for each service provider 19.

  The prepaid ticket fee collection management unit 11b of the CAS management organization 11 collects the prepaid ticket from each CAS card 18 on the go by a polling method, and the content usage fee based on the collected prepaid ticket is distributed to the CAS management organization 11 usage fee. It is distributed to each service provider 19 by the section 11c. The distribution of the usage fee is totaled for each service provider 19 in the CAS management organization 11 and is performed via an existing financial institution (not shown).

  In FIG. 1, the CAS card 12 at home and the CAS card 18 at the outside are both IC cards including an IC chip having a CPU (Central Processing Unit) and a memory as a tamper resistant module. 14 and the IC card read / write device provided in the receiver 17 on the go can input / output data.

FIG. 2 is a sequence diagram illustrating processing for registering the mobile terminal 15 in the CAS card 12 at home.
In FIG. 2, first, in response to a user operation, the mobile terminal 15 transmits a registration request to the CAS card 12 (step S101). Upon receiving this registration request, the CAS card 12 generates a random number r ₀ and transmits it to the mobile terminal 15 (step S102).

Next, the mobile terminal 15 transmits a public key certificate including the public key pK and the mobile terminal identifier IDa to the CAS card 12 (step S103). This mobile terminal identifier IDa is generated by hashing IDmt‖r ₀ in which a mobile terminal identification number IDmt that is information that can identify a mobile terminal such as a telephone number and a random number r ₀ are concatenated. CAS card 12, as well as to verify the public key pK by the public key certificate received, to generate a work key Kw, encrypt the data Kw‖r ₀ that was connected to the work key Kw and the random number r ₀ with the public key pK The pENC (Kw‖r ₀ , pK) is transmitted to the mobile terminal 15 (step S104). Then, the portable terminal 15 receives this and decrypts it to obtain the work key Kw. Here, the symbol 表 し represents the concatenation of the preceding and succeeding data, and pENC (m, k) represents the data obtained by encrypting the message m with the public key k by the public key cryptosystem.

The portable terminal 15 encrypts the random number r ₀ with the work key Kw by the common key encryption method, and transmits sENC (r ₀ , Kw) to the CAS card 12 (step S105). Here, sENC (m, k) represents data obtained by encrypting the message m with the shared key k.

CAS card 12 receives the data transmitted in step S105, verifies the random number _{r 0} received, if there is no problem, the received mobile terminal identifier IDa the work key Kw and association with CAS card 12 Are registered in the database (CAS-DB) (step S107). Then, the CAS card 12 transmits a signal Ack indicating the completion of processing to the mobile terminal 15 (step S106). The portable terminal 15 receives the signal Ack and stores the work key Kw in the work key storage area (step S108).

Next, a prepaid ticket issuing process will be described.
FIG. 3 is a sequence diagram showing a process in which the CAS management organization 11 issues a prepaid ticket and the prepaid ticket is delegated to the mobile terminal 15. Here, it is assumed that the CAS management institution 11 and the CAS card 12 share the master key Km in advance.

In FIG. 3, first, in response to a user's operation, the mobile terminal 15 transmits a prepaid ticket issuance request to the CAS card 12 at home (step S201). Upon receiving this prepaid ticket issue request, the CAS card 12 generates a random number r ₁ and transmits it to the portable terminal 15 (step S202).

The mobile terminal 15, and connecting the mobile terminal identifier IDa and a random number _{r 1} to produce a MAC (IDa‖r _1, Kw), concatenating the mobile terminal identifier IDa and the resulting MAC (IDa‖r _1, Kw) IDa‖MAC (IDa‖r ₁ , Kw) is transmitted as a response to the CAS card 12 (step S203). Here, MAC (m, k) represents a message authentication code (MAC) with the key m of the message m with the shared key k. In particular, when m = ALL, all the concatenated except the self are connected. Means a message authentication code for the message.

The CAS card 12 authenticates the portable terminal 15 by comparing the portable terminal identifier IDa in the received response with the portable terminal identifier IDa registered in the database CAS-DB. If there is no problem, the CAS card 12 requests the user interface STB-UI of the home receiver 14 for an issuance amount desired by the user of the prepaid ticket (step S204). It acquires the amount issued _{X 0} input to-UI (step S205).

Then CAS card 12 is encrypted with the master key Km by concatenating the CAS card identifier ID _L is the above prepaid ticket issued amount of money X ₀ and CAS card 12 itself of the identification information input by the user, also unique Serial information S ₀ is generated, and its blind signature BL (S ₀ ) is generated. The CAS card 12 concatenates the encrypted data sENC (X ₀ ‖ID _L , Km) and the blind signature BL (S ₀ ), attaches MAC (ALL, Km) to the CAS management institution 11. Transmit (step S206).

The CAS management organization 11 receives the data and verifies the MAC of the received data using the master key Km. If there is no problem, the payment process is executed according to the CAS card identifier ID _L. Furthermore, the CAS management institution 11 signs the received blind signature BL (S ₀ ), encrypts the signed data SIG _L (BL (S ₀ )) with the master key Km, and sENC (SIG _L ( BL (S ₀ )), Km) ‖MAC (ALL, Km) is transmitted to the CAS card 12 (step S207).

The CAS card 12 verifies the MAC of this data using the master key Km, and further verifies the signature by unblinding the signature data SIG _L (BL (S ₀ )). CAS card 12 also generates a random number rc _0, it sets the balance data _{Z 0} of the usage history counter _{T 0} and prepaid ticket. The usage history counter is a variable whose value increases by 1 each time a prepaid ticket is used, and is for verifying whether or not the prepaid ticket is used correctly. Balance data, here the amount issued X ₀ of the is substituted as an initial value.

CAS card 12 includes a random number rc _0, and use history counter _{T 0,} the balance data _{Z 0,} the serial information _{S 0,} the signature for the serial information _{S 0 SIG L (S 0)} , and the MAC to these data, , And the concatenated data is encrypted with the work key Kw, and sENC (rc ₀ ‖T ₀ ‖Z ₀ ‖S ₀ ‖SIG _L (S ₀ ) ‖MAC (rc ₀ ‖T ₀ ‖Z ₀ ‖S ₀ ‖SIG _L (S ₀ ), Km), Kw) ‖MAC (ALL, Kw) is transmitted to the mobile terminal 15 (step S208).

The mobile terminal 15 receives the data and verifies the MAC using the work key Kw. If there is no problem, the mobile terminal 15 decrypts the data and reads rc ₀ ‖T ₀ ‖Z ₀ ‖S ₀ ‖SIG _L (S ₀ ). ‖MAC (rc ₀ ‖T ₀ ‖Z ₀ ‖S ₀ ‖SIG _L (S ₀ ), Km) is stored in the tamper-resistant module as a prepaid ticket (step S209).
By repeating the above processing, the mobile terminal 15 can store a plurality of prepaid tickets.

Next, processing when using a prepaid ticket will be described.
FIG. 4 is a sequence diagram illustrating a process in which the mobile terminal 15 performs payment by a prepaid ticket to the CAS card 18 on the go. It is assumed that the CAS card 18 on the go has a master key Km in advance.

In FIG. 4, first, the mobile terminal 15 transmits a request for using a prepaid ticket to the CAS card 18 that is away from home (step S301). CAS card 18 generates a random number _{r 3} transmits to the mobile terminal 15 (step S302). The portable terminal 15 transmits a public key certificate including the temporary public key pKt (a public key for temporary use outside the office) to the CAS card 18 (step S303). The CAS card 18 generates a temporary work key Kwt (a temporary work key for the mobile terminal 15 to use a prepaid ticket when going out), and receives the temporary work key Kwt from the mobile terminal 15 as described above. Encryption is performed using the key pKt and pENC (Kwt, pKt) is transmitted to the mobile terminal 15 (step S304). The portable terminal 15 encrypts the random number r ₃ received in step S302 with the temporary work key Kwt and transmits sENC (r ₃ , Kwt) to the CAS card 18 (step S305). CAS card 18 receives the data, confirms the random number _{r 3} decodes.

  When the user selects content to be viewed through the user interface STB-UI of the receiver 17 on the go, the CAS card 18 acquires the usage fee data Y of the content based on the content selected by the user, and acquires the content. The usage fee data Y and the content provider information PROVIDER are transmitted to the user interface STB-UI (steps S306 and S307). When the user performs an input operation on the user interface STB-UI to agree to the payment of the usage fee, a confirmation signal Ack is transmitted to the CAS card 18 (step S308).

  Next, the CAS card 18 transmits Y‖MAC (ALL, Kwt) to the mobile terminal 15 (step S309).

The mobile terminal 15 receives the data acquired usage fee data Y, to check the balance data Z ₀ of the prepaid tickets are stored. If the balance is larger than the usage fee (Z ₀ > Y), the prepaid ticket is encrypted with the temporary work key Kwt and attached with MAC, sENC (rc ₀ ‖T ₀ ‖Z ₀ ‖S ₀ ‖SIG _L ( S ₀ ) ‖MAC (rc ₀ ‖T ₀ ‖Z ₀ ‖S ₀ ‖SIG _L (S ₀ ), Km), Kwt) ‖MAC (ALL, Kwt) is transmitted to the CAS card 18 (step S310). If the balance is insufficient, the number of prepaid tickets to be used is determined, a plurality of prepaid tickets are concatenated, the concatenated data is encrypted with the temporary work key Kwt, and the MAC is added to the CAS card 18 to be transmitted. To do.

The CAS card 18 receives data from the mobile terminal 15 and verifies the MAC and signature SIG _L (S ₀ ). If there is no problem, the CAS card 18 performs a charging process for the use of the content according to the usage fee data Y, and generates a prepaid ticket corresponding to the remaining amount after payment. At this time, the CAS card 18 calculates the balance data Z ₁ = Z ₀ −Y after payment, sets the usage history counter to T ₁ = T ₀ +1, and generates a random number rc ₁ . Then, rc ₁ ‖T ₁ ‖Z ₁ ‖S ₀ ‖SIG _L (S ₀ ) ‖MAC (rc ₁ ‖T ₁ ‖Z ₁ ‖S ₀ ‖SIG _L (S ₀ ), Km) As a corresponding prepaid ticket, this prepaid ticket is encrypted with the temporary work key Kwt, and the MAC is attached to the prepaid ticket (step S311).

The portable terminal 15 stores the above prepaid ticket (step S312) and uses it for the next and subsequent payments.
The CAS card 18 stores in the database CAS-DB in the CAS card 18 the total payment amount Σ _(provider) Y of the usage fee for each service provider 19, serial information S _{0 for} each payment, and usage history counter T _n ( However, a set (S ₀ , T _n ) of n = 0, 1, 2,... Is stored (step S313). The data to be stored corresponds to a prepaid ticket that has been paid between the time when the CAS management institution 11 collects the previous prepaid ticket (see FIG. 5 for collection) and the next time the prepaid ticket is collected. Is. This stored total payment amount Σ _(provider) Y is used to distribute the content usage fee to each service provider 19, and the pair (S ₀ , T _n ) indicates whether or not the prepaid ticket is used properly. Is used to verify (discussed next).

Next, prepaid ticket collection processing will be described.
FIG. 5 is a sequence diagram showing processing in which the CAS management institution 11 collects the prepaid ticket from the CAS card 18 on the go. Here, the CAS management organization 11 has a serial information history that is information on prepaid tickets collected in the past. This serial information history is a history in which all the usage history counters for each serial information already received in step S403 described below are recorded. Here, the usage history counters T ₀ , T for the serial information S ₀ are recorded. ₁ ,..., T _n−1 are recorded.

  The CAS management institution 11 transmits a prepaid ticket collection request to the CAS card 18 at a predetermined time (which may be a predetermined regular time or an arbitrary time) (step S401). This collection request is made by a polling method, and collection requests are sequentially transmitted to a plurality of CAS cards 18, and the CAS card 18 that has received the collection requests sequentially executes the following processing.

When the CAS card 18 receives the collection request, the CAS card 18 stores the payment total amount Σ _(provider) Y of the usage fee for each service provider 19 stored in the database CAS-DB since the previous prepaid ticket collection processing was performed, and 1 All the data of the serial information S _{0 for} each payment and the set (S ₀ , T _n ) of the usage history counter T _n are concatenated, and these are encrypted with the master key Km, and sENC ((S ₀ , T _n1 ) ‖ _{(S 1, T n2)} || _{... ‖Σ (provider1) Y‖Σ (provider2} ) Y‖ ..., Km) ‖MAC (ALL, Km) and transmits to the CAS management engine 11 (step S402).

For the set (S ₀ , T _n ) of the serial information S ₀ and usage history counter T _n received in step S 402, the CAS management organization 11 uses this usage history counter T _n and the latest usage history counter in the serial information history. Compare with _Tn-1 . Here, since T _n > T _n−1 , it is confirmed that the prepaid ticket has been used correctly. In this case, the CAS management institution 11 aggregates Σ _(provider) Y received in step S402 and transmits a confirmation signal Ack to the CAS card 18 (step S403). Thus, the content usage charges for each service provider 19 aggregated from the plurality of CAS cards 18 are distributed to the service provider 19 by the CAS management organization 11. If the usage history counter received in step S402 is T _n−1 , the prepaid ticket having the same usage history counter is used twice, so the second use is illegal. Can be detected.

As described above, according to the present embodiment, it is possible to reliably issue a prepaid ticket and charge for using the service at a place where the user is away.
In addition, since the prepaid ticket includes a MAC which is information that can be created only by a person who knows the master key Km, a prepaid ticket cannot be generated unless a CAS management organization or a CAS card is involved. Tampering can be detected.

  Further, since serial information necessary for creating a prepaid ticket is encrypted or blinded and communicated, it is impossible for a third party to create a prepaid ticket even if they are wiretapped.

Further, since the serial information S ₀ and the usage history counter T _{n of the} used prepaid ticket are recorded as serial information history in the CAS management organization, the prepaid ticket having the same serial information S ₀ and the usage history counter T _n is duplicated. Even so, the second unauthorized use can be detected.

Also, when issuing a prepaid ticket, serial information S ₀ is to be sent to a blinding has been CAS management organization, CAS management center can not identify information of the user from the use history of the recovered pre-paid tickets Anonymity is maintained.

  Moreover, since the balance data is calculated in the CAS card at the place of going out, a new prepaid ticket corresponding to the balance can be generated, and one prepaid ticket can be divided and used.

In addition, the balance data in the prepaid ticket is not signed by the CAS management organization, and the serial information and the usage history counter are verified when the prepaid ticket is collected, so when using the prepaid ticket, the CAS management organization is used. It is not necessary to communicate with the device, and the offline nature is satisfied.
In addition, since prepaid tickets can be collected at a later time rather than at the time of use, it is possible to reduce the communication load / processing load at the CAS management organization. In addition, by collecting usage charges for each service provider within a certain period of time, it becomes impossible to specify the services (such as content viewing) used by individual users. Sex can be secured.

As described above, the embodiment of the present invention has been described in detail with reference to the drawings. However, the specific configuration is not limited to the above, and various design changes and the like can be made without departing from the scope of the present invention. It is possible to
For example, instead of a CAS card, an IC chip incorporated (mounted) in a receiver can be used.
In addition, a prepaid ticket issuance terminal 16a installed in a prepaid store 16 having a part of a prepaid ticket issuance management function of a CAS management institution issues a prepaid ticket to a portable terminal that can authenticate a CAS card at home. You can also.

It is a block diagram of the service delivery system by one Embodiment of this invention. It is the sequence diagram explaining the process which registers a portable terminal to a CAS card at home. It is a sequence diagram which shows the issuing process of a prepaid ticket. It is a sequence diagram which shows the utilization process of a prepaid ticket. It is a sequence diagram which shows the collection process of a prepaid ticket.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 11 ... CAS management organization 11a ... Prepaid ticket issue management function 11b ... Prepaid ticket use collection management function 11c ... Usage charge distribution function 12 ... CAS card (home) 14 ... Receiver (home) 15 ... Mobile terminal 16 ... Prepaid store 16a ... Prepaid ticket issuing terminal 17 ... Receiver (outing) 18 ... CAS card (outing) 19 ... Service provider

Claims (15)

A service distribution system that delegates license information to a mobile terminal as a prepaid ticket and can use the prepaid ticket as a price for a service provided,
License information management means for issuing and managing the license information;
Prepaid ticket that issues a prepaid ticket to the mobile terminal based on the amount information of the prepaid ticket to be issued, counter information indicating the accumulated use number of the prepaid ticket, and signature information for serial information that can uniquely identify the prepaid ticket. Ticket issuing means;
Receiving a prepaid ticket from the portable terminal storing the issued prepaid ticket, verifying the signature information in the received prepaid ticket, and using the amount information of the received prepaid ticket and a provided service Amount information representing the remaining amount of the prepaid ticket is calculated from the fee information, a predetermined calculation is performed on the counter information of the received prepaid ticket, and a prepaid ticket is calculated based on the amount information of the remaining amount and the counter information after the calculation Prepaid ticket processing means for renewing and reissuing to the mobile terminal;
Service providing means for providing the service when the prepaid ticket processing means verifies that the signature information in the prepaid ticket is valid;
A service distribution system comprising: The prepaid ticket processing means accumulates the serial information of the received prepaid ticket and the counter information of the prepaid ticket as a set,
The license information management means collects a set of serial information and counter information accumulated in the prepaid ticket processing means, creates and updates a history of counter information for each serial information, and uses a prepaid ticket based on the history The service distribution system according to claim 1, wherein the validity of the service is determined. The prepaid ticket processing means accumulates prepaid ticket usage amount information corresponding to the usage fee information of the service provided by the use of the prepaid ticket,
The service distribution system according to claim 2, wherein the license information management unit aggregates the accumulated amount information of the stored prepaid ticket for those determined to be valid to use the prepaid ticket. The prepaid ticket issuing means performs blind processing on the serial information and then transmits it to the license information management means,
The service distribution according to any one of claims 1 to 3, wherein the license information management unit generates a signature of the blinded serial information and transmits the signature to the prepaid ticket issuing unit. system.   5. The service distribution system according to claim 1, wherein the amount information included in the prepaid ticket is information not signed by the license information management unit.   The prepaid ticket processing means receives one or a plurality of prepaid tickets necessary for the service from the mobile terminal, and determines the prepaid ticket from the received prepaid ticket price information and the service usage fee information provided. 6. The service distribution system according to claim 1, wherein money amount information representing the remaining amount is calculated. A prepaid ticket issuance method in a service distribution system that delegates license information to a mobile terminal as a prepaid ticket and can use the prepaid ticket as a price for a provided service,
A prepaid ticket is issued based on the amount information of a prepaid ticket to be issued, counter information indicating the cumulative number of times the prepaid ticket is used, and signature information for serial information that can uniquely identify the prepaid ticket. Issuing method. A method of using a prepaid ticket in a service distribution system that delegates license information to a mobile terminal as a prepaid ticket and can use the prepaid ticket as a price for a provided service,
From the portable terminal storing the prepaid ticket issued based on the amount information of the prepaid ticket, the counter information indicating the accumulated use number of the prepaid ticket, and the signature information for the serial information that can uniquely identify the prepaid ticket. Receive prepaid tickets,
Calculate the amount information indicating the remaining amount of the prepaid ticket from the amount information of the received prepaid ticket and the usage fee information of the provided service, perform a predetermined calculation on the counter information of the received prepaid ticket, and Update the prepaid ticket based on the amount information and the calculated counter information, and issue it again to the mobile terminal,
A method of using a prepaid ticket, comprising: verifying the signature information in the received prepaid ticket and allowing the service providing means to provide the service when the signature information is verified as valid.   Receive one or more prepaid tickets required for the service from the mobile terminal, and calculate the amount information representing the remaining amount of the prepaid ticket from the amount information of the received prepaid ticket and the usage fee information of the provided service The method of using a prepaid ticket according to claim 8. A method of collecting a prepaid ticket used in a service distribution system that delegates license information to a mobile terminal as a prepaid ticket and can use the prepaid ticket as a price for a provided service,
The serial number of the prepaid ticket issued based on the amount information of the prepaid ticket, the counter information indicating the accumulated use number of the prepaid ticket, and the signature information for the serial information that can uniquely identify the prepaid ticket, and transmitted from the mobile terminal Information and the counter information are stored in pairs,
Accumulating prepaid ticket usage amount information corresponding to usage fee information of services provided for the use of the prepaid ticket,
The set of accumulated serial information and counter information is collected to create and update the history of the counter information for each serial information, and the validity of the use of the prepaid ticket is determined based on the history,
A prepaid ticket collection method characterized in that the accumulated prepaid ticket usage amount information is aggregated for those for which it is determined that the use of a prepaid ticket is valid. An IC chip used in a service distribution system that delegates license information permitted to be issued by a license information management apparatus to a mobile terminal as a prepaid ticket and can use the prepaid ticket as a price for a provided service,
Means for registering a portable terminal for delegating a prepaid ticket;
Means for generating serial information capable of uniquely identifying a prepaid ticket;
Means for blindly processing the generated serial information and transmitting it to the license information management device;
Means for receiving a blinded signature of the serial information from the license information management device and performing an unblinding process;
Means for issuing a prepaid ticket to the registered mobile terminal based on the amount information of the prepaid ticket to be issued, counter information indicating the accumulated use count of the prepaid ticket, and the unblinded signature information;
An IC chip comprising: This is an IC chip used in a service distribution system in which license information authorized by the license information management device is transferred to a mobile terminal as a prepaid ticket and the prepaid ticket can be used as a price for a service provided from the service providing device. And
From the portable terminal storing the prepaid ticket issued based on the amount information of the prepaid ticket, the counter information indicating the accumulated use number of the prepaid ticket, and the signature information for the serial information that can uniquely identify the prepaid ticket. Means for receiving prepaid tickets;
Means for verifying the signature information in the received prepaid ticket;
Means for causing the service providing apparatus to provide the service when the signature information is verified as valid;
Calculate amount information representing the remaining amount of the prepaid ticket from the amount information of the received prepaid ticket and usage fee information of the provided service, perform a predetermined calculation on the counter information of the received prepaid ticket, Means for updating the prepaid ticket based on the remaining amount information and the calculated counter information and re-issuing to the mobile terminal;
An IC chip comprising: Means for storing the serial information of the received prepaid ticket and the counter information as a set;
Means for storing prepaid ticket usage amount information corresponding to usage fee information of a service provided for the use of the prepaid ticket;
Means for transmitting, in response to a request from the license information management device, a set of stored serial information and counter information, and a set of prepaid ticket usage amount information corresponding to service provider information and usage fee information;
The IC chip according to claim 12, comprising: A mobile terminal used in a service distribution system that can use a prepaid ticket as a price for a service provided,
A function for transmitting and registering unique identification information to the first IC chip according to claim 11;
The amount information of the prepaid ticket, the counter information indicating the accumulated use number of the prepaid ticket, and the signature information for the serial information that can uniquely identify the prepaid ticket, which are transmitted when authentication is performed from the first IC chip. A function to receive and store a prepaid ticket issued based on
A function for determining the number of prepaid tickets required based on usage fee information for the service provided;
A function of using a prepaid ticket by transmitting the determined number of prepaid tickets to the second IC chip according to claim 12 or claim 13,
A function of receiving and storing a prepaid ticket transmitted from the second IC chip and updated in the amount information and the counter information;
A portable terminal comprising: To a computer of a mobile terminal used in a service distribution system that can use a prepaid ticket as a price for the provided service,
A function for transmitting and registering unique identification information to the first IC chip according to claim 11;
The amount information of the prepaid ticket, the counter information indicating the accumulated use number of the prepaid ticket, and the signature information for the serial information that can uniquely identify the prepaid ticket, which are transmitted when authentication is performed from the first IC chip. A function to receive and store a prepaid ticket issued based on
A function of using a prepaid ticket by transmitting the stored prepaid ticket to the second IC chip according to claim 12 or claim 13,
A function of receiving and storing a prepaid ticket transmitted from the second IC chip and updated in the amount information and the counter information;
A program to realize

Images