JP2009157694A - Data download system and data download method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To reduce the communication load of a portable terminal and suppress battery drain by shortening the communication time required for the portable terminal in download of a content. <P>SOLUTION: The system and method for downloading a content according to content selection information transmitted from the portable terminal 1 to a service server 3 through networks 5 and 6 to an image recording and reproducing device 2 comprises transmitting content selection information selected by a user's operation of the portable terminal 1 from the portable terminal 1 to the server 3; transmitting identification information for specifying the image recording and reproducing device 2 to which download is delegated from the portable terminal 1 to the server 3; transmitting a download delegation message from the portable terminal 1 to the device 2; transmitting a download request from the device 2 to the server 3; and recording a content downloaded from the server 3 to the device 2 in a storage of the device 2. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention downloads data for downloading content from a server to an information recording device different from the mobile terminal via the network according to content selection information (content purchase message) transmitted from the mobile terminal to the server via the network. The present invention relates to a system and a data download method.

  2. Description of the Related Art Conventionally, there is a data download system in which a video recording / playback apparatus, which is an information home appliance, downloads content such as a movie from a service server holding the content via a network. When purchasing content, the user performs a purchase procedure on the video recording / playback apparatus, and the content is downloaded from the service server to the video recording / playback apparatus. However, the user cannot perform an operation for purchasing content unless he / she goes to the place where the video information recording apparatus is installed. For this reason, it has been impossible to immediately view the downloaded content on the video recording / reproducing apparatus after going home after purchasing the content and going home. Further, when content is downloaded by operating the video information recording device after returning home, it takes time to download the content having a large file size, and the video cannot be viewed immediately.

  In addition, there is a system in which a mobile terminal (mobile terminal) that transmits a request for a transaction and a mobile commerce agent that connects directly to a server and directly performs a procedure to perform electronic commerce (for example, Patent Document 1). reference).

JP 2005-71003 A

  However, in the method described in Patent Document 1, for example, when downloading content, the mobile terminal needs to maintain a communication state with the mobile commerce agent until a series of procedures including downloading is completed. For this reason, when downloading data with a large file size such as video content, it is prohibited to turn off the mobile device and use the mobile device for other communications for a long time until the download is completed. In addition, there is a problem in that the battery of the mobile terminal is consumed quickly due to long-time download.

  Accordingly, the present invention has been made to solve the above-described problems of the prior art, and an object of the present invention is a system in which a content to be downloaded is selected by a portable terminal and the content is downloaded to an information recording device. Thus, it is an object of the present invention to provide a data download system and a data download method that can reduce the communication burden of the mobile terminal and suppress battery consumption by reducing the communication time required for the mobile terminal.

  The data download system of the present invention includes a mobile terminal connected to a network, an information recording device connected to the network, and one or more servers connected to the network, and the network is connected to the network. A data download system for downloading content corresponding to content selection information transmitted to the server via the network to the information recording device via the network, wherein the portable terminal is connected to the network First communication function means for generating content selection function means for generating content selection information relating to the content selected by the user, the content selection information to the server via the first communication function means and the network. Transmitting, the first communication function means And transmitting identification information for identifying the information recording device to which download is delegated to the server via the network, and sending a download delegation message to the information recording device via the first communication function means and the network. A first control means for transmitting, and the information recording device receives a second communication function means for connecting to the network, a storage means for recording content, and the download delegation message. Transmitting a content download request to the server via the second communication function means and the network, and storing the content downloaded from the server via the network and the second communication function means in the storage And a second control means for recording the means. It is set to.

  Also, the data download method of the present invention provides content corresponding to content selection information transmitted from a mobile terminal connected to a network to one or more servers connected to the network, from the server to the network. A data download method for downloading to a connected information recording device, the step of transmitting the content selection information selected by a user operation of the portable terminal from the portable terminal to the server via the network; and A step of transmitting identification information identifying the information recording device to which download is delegated from the portable terminal to the server via the network; and a download delegation message from the portable terminal to the information recording device via the network. Sending step and Dow The step of transmitting a content download request from the information recording device that has received the load delegation message to the server via the network, and the content downloaded from the server to the information recording device via the network, And recording on the storage means of the information recording apparatus.

  According to the present invention, by performing the content purchase procedure from the mobile terminal and delegating the download of the content to the information recording device, the network connection time of the mobile terminal can be shortened, so the mobile terminal is occupied by the content purchase. Time can be shortened, and consumption of the battery of the portable terminal can be suppressed.

  In addition, according to the invention, it is possible to download the content from the outside to the home information recording / reproducing device by performing the content purchase procedure from the mobile terminal and entrusting the download of the content to the information recording device. There is an effect that the content downloaded to the information recording apparatus can be viewed immediately.

Embodiment 1 FIG.
FIG. 1 is a diagram showing a configuration of a data download system according to Embodiment 1 of the present invention. As shown in FIG. 1, the data download system according to Embodiment 1 includes a mobile terminal 1, a video recording / reproducing device 2 as an information recording device, a service server 3, and an authentication server 4. . The service server 3 and the authentication server 4 are not necessarily separate servers, and may be a single server. In the example of FIG. 1, the video recording / playback apparatus 2, the service server 3, and the authentication server 4 are connected to a wired network 5, and the mobile terminal 1 is a wireless network connected to the network 5. 6 is connected. However, the network to which the mobile terminal 1 is connected may be a wired network. The network 5 and the network 6 are illustrated as separate networks connected to each other, but the number of networks connected to each other is not limited to two, and may be one network or a plurality of networks capable of communication Any number of associations may be used.

  The mobile terminal 1 is a terminal device that can be connected to a network and operated even when going out like a mobile phone. The video recording / reproducing apparatus 2 is a device having a storage and network function such as a hard disk recorder with a network function installed in a home as an information home appliance. The mobile terminal 1 is not limited to a mobile phone, but may be another terminal having a network connection function. The video recording / reproducing apparatus 2 is not limited to a hard disk recorder, and may be another apparatus having a network connection function and a content recording function.

  The service server 3 is a server that provides a service for distributing video content over a network. The authentication server 4 is a server for authenticating whether a terminal connected to the service server 3 is valid. Specifically, the authentication server 4 determines whether or not a device connected to the network (mobile terminal) is an authorized device to transmit content selection information, and the device connected to the network (video recording / playback apparatus) is a content. Authenticate whether the device is authorized to receive downloads. In the data download system according to the first embodiment, content corresponding to content selection information transmitted from the mobile terminal 1 to the service server 3 via the network is transferred from the service server 3 to the video recording / playback apparatus 2 via the network. to download.

  The data download system according to Embodiment 1 is a system that provides, for example, a service for downloading and viewing or recording a high-definition video via a network. Since the portable terminal 1 has a small display unit, there is not much merit in holding and reproducing a high-definition moving image with a large data size on the portable terminal 1. On the other hand, the video recording / reproducing apparatus 2 such as a hard disk recorder capable of projecting a moving image on a large-screen display monitor (not shown) has a great merit for accumulating and reproducing a high-definition moving image. However, since the video recording / reproducing apparatus 2 is often installed at home and usually does not include a display monitor (not shown), the apparatus cannot normally be operated on the go. Therefore, in the present invention, operations related to content purchase are performed by a portable terminal 1 having a display function and excellent portability, and downloading and playback of actual content data is performed by the video recording / playback apparatus 2. Yes.

  FIG. 2 is a block diagram schematically showing the configuration of the mobile terminal 1 of FIG. As shown in FIG. 2, the mobile terminal 1 includes a mobile communication function unit 11 as a first communication function unit, a content selection function unit 12 as a content selection function unit, a service server access information storage unit 13, , An authentication function unit 14, a common key storage unit 17, and a control unit 18 as a first control unit that controls the overall operation of the mobile terminal 1. The authentication function unit 14 includes an identification information storage unit 15 that stores identification information for uniquely identifying the mobile terminal 1 and a password input function unit 16.

  The mobile communication function unit 11 is configured to enable communication by connecting to the network 5 via the mobile network 6. In the following, the network 6 and the network 5 are collectively referred to simply as a network. The content selection function part 12 is a structure for selecting and determining the content to purchase by user operation. The service server access information storage unit 13 stores information for connecting to the service server 3. The identification information storage unit 15 stores identification information for uniquely identifying the mobile terminal 1. The password input function part 16 calculates | requires the password used for authentication by a calculation. The control unit 18 transmits content selection information to the service server 3 via the mobile communication function unit 11 and the network, and transmits the content selection information to the service server 3 via the mobile communication function unit 11 and the network. In addition, the control unit 18 transmits identification information for specifying the video recording / playback device 2 to which the download is delegated to the service server 3 via the mobile communication function unit 11 and the network. Further, the control unit 18 transmits a download delegation message to the video recording / playback apparatus 2 via the mobile communication function unit 11 and the network.

  FIG. 3 is a block diagram schematically showing the configuration of the video recording / reproducing apparatus 2 of FIG. As shown in FIG. 3, the video recording / playback apparatus 2 includes a communication function unit 21 as a second communication function unit, a storage 22 as a storage unit, a delegation information storage function unit 23, an authentication function unit 24, A common key storage unit 27 and a control unit 28 as second control means for controlling the operation of the entire video recording / reproducing apparatus 2 are provided. The authentication function unit 24 includes an identification information storage unit 25 that stores identification information for uniquely identifying the video recording / playback apparatus 2, and a password input function unit 26.

  The communication function unit 21 enables the video recording / playback apparatus 2 to communicate with each other via a network connection. The storage 22 records and stores the downloaded content. The delegation information storage function unit 23 stores information received from the mobile terminal 1 for connection to the service server 3. The identification information storage unit 25 stores identification information for uniquely identifying the video recording / reproducing apparatus 2. The password input function part 26 calculates | requires the password used for authentication by a calculation. The common key storage unit 27 stores a common key held by a plurality of portable terminals associated with the video recording / playback apparatus 2. The common key storage unit 27 is used to decrypt the encrypted data. The common key storage unit 27 is secured in an area that cannot be taken out of the device, and the data recorded therein cannot be taken out of the video recording / reproducing apparatus 2. Since the data recorded in the common key storage unit 27 is encrypted, the key cannot be decrypted even if the area is read by unauthorized access. When receiving the download delegation message, the control unit 28 transmits a content download request to the service server 3 via the communication function unit 21 and the network. In addition, the control unit 28 records the content downloaded from the service server 3 via the network and communication function unit 21 in the storage 22.

  FIG. 4 is a block diagram schematically showing the configuration of the service server 3 of FIG. As shown in FIG. 4, the service server 3 includes an authentication request unit 31, a communication function unit 32, a service server access information storage unit 33, a storage 34, a common key generation unit 35, and the entire service server 3. And a control unit 36 for controlling the operation. The authentication request unit 31 requests authentication from the authentication server 4 in order to authenticate a device connected to the service server 3. The communication function unit 32 is configured to connect to and communicate with a network. The service server access information storage unit 33 stores information for accessing the service server 3. The storage 34 stores content to be provided to the user. The common key generation unit 35 generates a common key from identification information of connected devices.

  FIG. 5 is a block diagram schematically showing the configuration of the authentication server 4 of FIG. As shown in FIG. 5, the authentication server 4 controls the operation of the communication function unit 41, the authentication function unit 42, the authentication server access information storage unit 43, the common key generation unit 44, and the entire authentication server 4. And a control unit 45. The communication function unit 41 is configured to connect to a network for communication. The authentication function unit 42 is authenticated by the service server 3 and executes authentication. The authentication server access information storage unit 43 stores information for connecting to the authentication server 4. The common key generation unit 44 generates a common key from identification information of connected devices.

  Next, the operation of the data download system according to the first embodiment (data download method according to the first embodiment) will be described. FIG. 6 is a sequence diagram showing an operation of the data download system according to Embodiment 1 of the present invention (data download method according to Embodiment 1). FIG. 6 shows a procedure for purchasing download of video content by the mobile terminal 1, and the video content is stored in the video recording / playback apparatus 2, which is an information recording apparatus associated with the mobile terminal 1 (authorized by the mobile terminal 1) Indicates the process to be downloaded.

  In the data download system according to the first embodiment, prior preparation for performing encryption of communication data is performed before the sequence shown in FIG. 6 is executed. In the data download system according to the first embodiment, for example, common key encryption is used to encrypt data. The portable terminal 1 and the video recording / reproducing apparatus 2 are each assigned a device ID as identification information at the time of purchase, and a common key that is treated as a secret key is introduced. Each device can be identified by this device ID.

  The service server 3 and the authentication server 4 hold a secret calculation formula that derives a common key from the device ID by calculation. The service server 3 and the authentication server 4 can generate a corresponding common key if the device ID of the partner to be connected is known. As described above, by having a configuration capable of generating a common key from the device ID, the service server 3 and the authentication server 4 do not need to store all keys of a large number of devices on the network.

  The association (association) between the portable terminal 1 and the video recording / playback apparatus 2 is performed, for example, when both hold the same common key. For example, the mobile terminal 1 and the video recording / playback apparatus 2 can exchange the video with the common key of the mobile terminal 1 via a memory card (not shown) so that data can be exchanged while being disconnected from the external network. By storing in the recording / reproducing apparatus 2, the portable terminal 1 and the video recording / reproducing apparatus 2 are linked. Further, instead of using a memory card, the common key of the portable terminal is stored in the video recording / reproducing apparatus 2 by infrared communication by the infrared communication means (not shown) of the portable terminal 1 and the video recording / reproducing apparatus 2, There is also a method for associating the portable terminal 1 with the video recording / reproducing apparatus 2. Further, instead of using a memory card, the common key of the portable terminal is stored in the video recording / reproducing apparatus 2 by communication using a dedicated cable (not shown) for connecting the portable terminal 1 and the video recording / reproducing apparatus 2. There is also a method of associating the portable terminal 1 and the video recording / reproducing apparatus 2 with each other.

  Next, the contents of the device authentication (step S1) in FIG. 2 will be described. At the time of device authentication, the mobile terminal 1 first requests a server certificate from the service server 3. Next, the service server 3 sends a server certificate to the mobile terminal 1. The server certificate includes, for example, information such as the server operator's organization name, the certification authority's organization name, the expiration date of the server certificate, and the hash value of the contents of the server certificate is the secret of the certification authority. It has a signature encrypted with a key. The portable terminal 1 performs device authentication by checking the certificate of the certificate authority installed in advance and verifying that the certificate of the certificate authority matches the server certificate. As the server certificate used in the device authentication (step S1), for example, a server certificate registered in advance in the authentication server at the time of device purchase is used. The contents of the server certificate may be updated by upgrading the firmware of the device.

  Next, the mobile terminal 1 issues a service request message to the service server 3 (step S2). The service request message includes a device ID that is identification information of the mobile terminal 1 that is the service request source. The device ID of the mobile terminal 1 is represented by, for example, 8 or more alphanumeric characters.

  Upon receiving this service request message, the service server 3 issues a personal authentication confirmation message to the authentication server 4 (step S3). This personal authentication confirmation message includes the device ID of the mobile terminal 1. The authentication server 4 derives a common key for the portable terminal 1 from the device ID of the portable terminal 1 and encrypts data transmitted to the portable terminal 1 using the derived common key.

  The authentication server 4 issues a personal authentication confirmation message to the mobile terminal 1 (step S4). The mobile terminal 1 that has received the personal authentication confirmation message performs personal authentication confirmation processing between the mobile terminal 1 and the authentication server 4 by transmitting, for example, a one-time password to the authentication server 4 (step S5).

  A mechanism for generating a one-time password is defined in advance between the portable terminal 1 and the authentication server 4. For example, there is a method of using a result obtained by applying the device ID and date / time information to a mathematical formula as a password. In this method, the connection start time has a margin, and a deviation of 1 minute before and after is regarded as a correct password being input. That is, the authentication server 4 confirms that any of the passwords matches the current time of the authentication server 4, the time one minute before the current time, and the time one minute after the current time.

  As the password, for example, a number having a data length of 8 characters or more is used. When the personal authentication is completed, the authentication server 4 issues a personal authentication confirmation message to the service server 3 (step S6). The authentication server 4 authenticates that the portable terminal 1 is a legitimate device by the processes in steps S2 to S6 described above.

  When the authentication of the mobile terminal 1 by the authentication server 4 is completed, the mobile terminal 1 transmits content selection information including information on the content to be purchased to the service server 3 (step S7). Subsequently, the mobile terminal 1 transmits a download notice message for notice of downloading of the selected content to the service server 3 (step S8). The service server 3 that has received the download notice message is in a standby state until it receives a download request message from the video recording / playback apparatus 2.

  The download notice message includes a device ID that is identification information of the video recording / playback apparatus 2 that is a device that executes the download. Further, the download notice message can include a download completion desired time. By notifying the service server 3 in advance of the device ID for executing the download from the portable terminal 1, the content is stored in the video recording / reproducing apparatus 2 having a device ID different from the notified device ID of the designated device. It is possible to prevent illegal downloading.

  If the desired download completion time is not designated, the service server 3 starts downloading immediately after receiving the download request message. The desired download completion time is specified in order to complete the download of data by the desired completion time while managing the priority of the download task in consideration of the CPU load and network load of the video recording / reproducing apparatus 2. It is.

  Next, the portable terminal 1 sends a download delegation message for executing download to the video recording / reproducing apparatus 2 (step S9). The download delegation message includes the device ID of the mobile terminal 1 and information for connecting to the service server 3 included in the download notice message (step S8). Further, the download delegation message can include a download completion desired time.

  The video recording / playback apparatus 2 that has received the delegation of the download task issues a device authentication message to the service server 3 (step S10).

  Next, the video recording / playback apparatus 2 that has received the delegation of the download task issues a download request message to the service server 3 (step S11).

  The service server 3 performs device authentication of the video recording / playback apparatus 2 that is the issuer of the download request message before starting the data download. The service server 3 reads the device ID of the device that executes the download included in the download notice message received in step S8. The service server 3 confirms that the device ID of the device that is scheduled to execute the download matches the device ID of the video recording / playback apparatus 2 that has requested device authentication (step S10). The service server 3 continues the device authentication process when the device IDs match, but immediately stops the processing when the device IDs do not match.

  Next, the service server 3 issues a personal authentication reconfirmation message to the authentication server 4 (step S12). For personal authentication, a device ID and a one-time password are used. The device ID used at this time is the same as that held by the mobile terminal 1, and the information is included in the download delegation message. As the password, a one-time password is used, and the password generation mechanism is the same between the portable terminal 1 and the video recording / reproducing apparatus 2. The video recording / playback apparatus 2 calculates a password from the device ID and date / time information.

  The password necessary for accessing the authentication server 4 is a one-time password, but the authentication method is not limited to this. The authentication method is not limited to an authentication method using a one-time password. For example, an authentication method using a password for a limited period or an authentication method using biometric authentication such as a fingerprint, a vein pattern, and an iris can be used instead.

  Personal authentication processing is performed between the authentication server 4 and the video recording / playback apparatus 2 (step S11). As a result of the authentication, a personal authentication reconfirmed message is issued from the authentication server 4 to the service server 3 (step S11). S14).

  When the authentication of the video recording / playback apparatus 2 that is the device to which the content is actually downloaded is completed, the download of the content from the service server 3 to the video recording / playback apparatus 2 is executed (step S15). When downloading content with a large file size, it takes a long time to complete the process, but the communication of the mobile terminal 1 ends when the download delegation message in step S9 is issued. The portable terminal 1 is not necessary. For this reason, the power source of the mobile terminal 1 can be turned off or the mobile terminal 1 can be used for other purposes during the download.

  The content data downloaded from the service server 3 to the video recording / playback apparatus 2 is downloaded after being encrypted with the common key of the mobile terminal 1 that is the terminal from which the content is purchased, for example. By providing the video recording / playback apparatus 2 that acquires content data with the secret key of the portable terminal 1 by means other than the external network, the video recording / playback apparatus 2 can acquire the encrypted content that has been acquired. Can be decrypted.

  In order to further enhance the secrecy, a new common key applied to the common key generation rule is created from the secret keys of both the mobile terminal 1 and the video recording / playback apparatus 2 and this new common key is used. The data may be encrypted. By using the common key generation rule, both the service server 3 and the video recording / reproducing apparatus 2 can have the same key. Since it is the video recording / reproducing apparatus 2 that finally downloads the content data, it is only necessary that the content can be decoded within the video recording / reproducing apparatus 2.

  As described above, according to the data download system or the data download method according to the first embodiment, electronic commerce is performed from the mobile terminal 1, and the content data download operation via the network 5 is performed on the video recording / playback apparatus 2. Since the delegation is performed, the network connection time of the mobile terminal 1 can be shortened and stable data transmission can be realized.

  In addition, since the portable terminal 1 delegates the data download task to the video recording / reproducing apparatus 2, the data download operation can be started even when the portable terminal 1 and the video recording / reproducing apparatus 2 are separated from each other.

  Furthermore, since the mobile terminal 1 and the video recording / playback apparatus 2 are authenticated by the authentication server, the validity of the download delegation issued from the mobile terminal 1 to the video recording / playback apparatus 2 can be confirmed.

  Furthermore, when the key data used for encryption of communication data is directly transmitted and received between the portable terminal 1 and the video recording / reproducing apparatus 2 without going through the Internet, the confidentiality of the key can be maintained.

  Moreover, since the portable terminal 1 designates the ID of the device from which data is downloaded, it is possible to prevent unauthorized devices having different device IDs from being connected.

  Furthermore, even if the unauthorized video recording / playback apparatus 2 attempts to intercept the downloaded data by altering the device ID, device authentication fails if the common key associated with the device ID cannot be obtained, so that the unauthorized device is excluded. Can do.

Embodiment 2. FIG.
In the first embodiment, the key data used for encrypting the data is stored in advance in the common key storage unit in the device, and the common key is not exchanged between the two parties who want to communicate. Explained how to perform device authentication. In the second embodiment, a Diffie-Hellman (Diffie-Hellman) key sharing algorithm is used to share a secret key between two parties who wish to communicate.

  FIG. 7 is a block diagram schematically showing the configuration of the mobile terminal 1a in the second embodiment, and FIG. 8 is a block diagram schematically showing the configuration of the video recording / reproducing apparatus 2a in the second embodiment. In FIG. 7, the same or corresponding components as those in FIG. In FIG. 8, the same reference numerals are given to the same or corresponding components as those in FIG. As shown in FIG. 7, the mobile terminal 1 a includes a secret key / public key storage unit 17 a that holds a secret key and a public key, and the service server 3, the authentication server 4, or the video recording / reproducing device 2 a. And a key generation unit 17b that generates a first shared key using a Diffie-Hellman key sharing algorithm. As shown in FIG. 8, the video recording / playback apparatus 2a is between the secret key / public key storage unit 27a that holds the secret key and the public key, and the service server 3, the authentication server 4, or the portable terminal 1a. And a key generation unit 27b that generates a second shared key using the Diffie-Hellman key sharing algorithm. Although not shown, each of the service server 3 and the authentication server 4 similarly has a secret key / public key storage unit and a key generation unit that generates a shared key using a Diffie-Hellman key sharing algorithm. is doing.

  When the Diffie-Hellman key sharing algorithm is used, two of the mobile terminal 1, the video recording / playback apparatus 2, the service server 3, and the authentication server 4 are each disclosed as a private key before the data is encrypted. By generating a key, a common key with increased randomness can be generated. By using the Diffie-Hellman key sharing algorithm, it is possible to update the common key by communication without updating the firmware of each device.

  In the second embodiment, points other than those described above are the same as those in the first embodiment.

It is a figure which shows the structure of the data download system which concerns on Embodiment 1 of this invention. FIG. 2 is a block diagram schematically showing the configuration of the mobile terminal in FIG. 1. FIG. 2 is a block diagram schematically showing the configuration of the video recording / playback apparatus in FIG. 1. It is a block diagram which shows the structure of the service server of FIG. 1 schematically. FIG. 2 is a block diagram schematically showing a configuration of an authentication server in FIG. 1. It is a sequence diagram which shows the operation | movement (data download method which concerns on Embodiment 1) of the data download system which concerns on Embodiment 1. FIG. 6 is a block diagram schematically showing a configuration of a mobile terminal according to Embodiment 2. FIG. FIG. 6 is a block diagram schematically showing a configuration of a video recording / reproducing apparatus in a second embodiment.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 1,1a Portable terminal, 2,2a Video recording / reproducing apparatus (information recording device), 3 Service server, 4 Authentication server, 5 Network, 6 Wireless network, 11 Mobile communication function part, 12 Content selection function part, 13 Service server Access information storage unit, 14 authentication function unit, 15 identification information, 16 password input function unit, 17 common key storage unit, 17a, 27a private key / public key storage unit, 17b, 27b key generation unit, 18 control unit (first control unit) Control unit), 21 communication function unit, 22 storage, 23 delegation information storage function unit, 24 authentication function unit, 25 identification information, 26 password input function unit, 27 common key storage unit, 28 control unit (second control unit) ), 31 Authentication request part, 32 Communication function part, 33 Service server access Access information storage unit, 34 storage, 35 common key generation unit, 36 control unit, 41 communication function unit, 42 authentication function unit, 43 authentication server access information storage unit, 44 common key generation unit, 45 control unit.

Claims (12)

A mobile device connected to the network,
An information recording device connected to the network;
One or more servers connected to the network,
A data download system for downloading content corresponding to content selection information transmitted from the portable terminal to the server via the network to the information recording device via the network,
The portable terminal is
First communication function means for connecting to the network;
Content selection function means for generating content selection information regarding the content selected by the user;
Identify the information recording device that transmits the content selection information to the server via the first communication function means and the network, and delegates download to the server via the first communication function means and the network And first control means for transmitting a download delegation message to the information recording device via the first communication function means and the network,
The information recording device includes:
A second communication function means for connecting to the network;
Storage means for recording content;
When the download delegation message is received, a content download request is transmitted to the server via the second communication function means and the network, and the network and the second communication function means are transmitted from the server. And a second control unit for recording the content downloaded via the storage unit on the storage unit. The server
A service server that stores content and downloads the content to the information recording device via the network;
An authentication server that authenticates whether the device connected to the network is an authorized device to transmit content selection information and whether the device connected to the network is an authorized device to download content The data download system according to claim 1. The portable terminal further includes first authentication function means for providing information necessary for authentication of the portable terminal by the server to the server via the first communication function means and the network,
The information recording apparatus further includes second authentication function means for providing information necessary for authentication of the information recording apparatus by the server to the server via the second communication function means and the network. The data download system according to claim 1 or 2, characterized in that: The portable terminal further includes a first common key storage unit that stores a common key used for content encryption by the server,
4. The information recording apparatus according to claim 1, further comprising: a second common key storage unit that stores a common key used for decrypting the content encrypted by the server. 5. The data download system described in 1. The portable terminal holds a secret key and a public key, and uses a Diffie-Hellman key sharing algorithm to generate a first shared key with the server or the information recording device. And further has a generating means,
The information recording apparatus holds a secret key and a public key, and generates a second shared key using a Diffie-Hellman key sharing algorithm with the server or the mobile terminal. And further has a generating means,
The server stores a secret key and a public key, and uses the Diffie-Hellman key sharing algorithm to generate a third shared key with the server or the mobile terminal. The data download system according to any one of claims 1 to 3, further comprising: The portable terminal has means for designating a download completion desired time by a user,
The first control means of the mobile terminal is:
Sending the download completion desired time to the server via the first communication function means and the network;
The data download system according to any one of claims 1 to 5, wherein the download completion desired time is transmitted to the information recording device via the first communication function unit and the network. The mobile terminal is a mobile phone;
The data download system according to any one of claims 1 to 6, wherein the information recording device is a video recording / reproducing device. Data for downloading content corresponding to content selection information transmitted from the mobile terminal connected to the network to one or more servers connected to the network from the server to the information recording device connected to the network A download method,
Transmitting the content selection information selected by a user operation of the mobile terminal from the mobile terminal to the server via the network;
Transmitting identification information for identifying the information recording device that delegates download from the portable terminal to the server via the network;
Transmitting a download delegation message from the mobile terminal to the information recording device via the network;
Transmitting a content download request from the information recording device that has received the download delegation message to the server via the network;
Recording the content downloaded from the server to the information recording device via the network in a storage unit of the information recording device. Providing information necessary for authentication of the mobile terminal by the server from the mobile terminal to the server via the network;
The data download method according to claim 8, further comprising: providing information necessary for authentication of the information recording device by the server to the server from the information recording device via the network. . The server encrypts content downloaded to the information recording device;
The data download method according to claim 8 or 9, further comprising: a step of decrypting the content encrypted by the server. The portable terminal holds a secret key and a public key, and generates a first shared key with the server or the information recording device using a Diffie-Hellman key sharing algorithm;
The information recording device holds a secret key and a public key, and generates a second shared key with the server or the mobile terminal using a Diffie-Hellman key sharing algorithm;
The server holds a secret key and a public key, and further generates a third shared key using the Diffie-Hellman key sharing algorithm with the server or the mobile terminal. The data download method according to claim 8 or 9, characterized in that Transmitting a download completion desired time designated by a user operation using the portable terminal to the server via the network;
The data download method according to any one of claims 8 to 11, further comprising a step of transmitting the download completion desired time to the information recording device via the network.

Images