JPH09114787A - Information distribution method and system - Google Patents

Abstract

(57) [Abstract] [Problem] Information distribution that enables information to be protected and then placed anywhere on the network, performs authentication and payment as necessary, and can refer to the information PROBLEM TO BE SOLVED: To provide a method and a system, in which information that is a product is registered in an encrypted information center in a protected state, and a user terminal who wants to refer to the information accesses the information center through a network and applies After obtaining the encrypted information, the key center is electronically paid for the information over the network prior to decrypting the information. Next, the user terminal secretly obtains the decryption key in exchange for the payment from the key center through a network by using a secret communication method in which a public key and a secret key are combined with the key center. .
Further, the user terminal is characterized in that the above-mentioned information is decrypted and used by using the obtained decryption key.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a decryption key which allows any user to freely register any information, freely distributes it on a network with the information protected by encryption, and pays a fee when referring to the information. The present invention relates to an information distribution method and system for enabling information reference by distributing information.

[0002]

2. Description of the Related Art Conventionally, information is stored in a specific center on the Internet, and a person who wants to refer to the information accesses the center via a network, performs authentication and payment processing, and then transfers the information. I was getting information by doing.

Alternatively, the encrypted information is a CD-ROM
A user who wants to refer to the information by putting it in a password and accessing it has obtained the information by accessing the center that manages the decryption key, performing authentication and settlement processing, and then obtaining the decryption key.

A method of keeping information in a specific center is as follows.
There is a problem that the distribution destination of information is limited to a center having an authentication and settlement function, and a person who wants to obtain the information must access the center without fail, and the access is concentrated. Moreover, user access management at the center,
Since information is transferred in addition to authentication and billing, a heavy load is placed on the computer and network. In addition, the information itself cannot be applied to a usage form in which the information itself is stored in a computer and a usage fee is paid each time the information is referenced.

In addition, in the method of distributing encrypted information in a CD-ROM, the information provider needs to issue a cost to issue and distribute the CD-ROM. It is possible to reduce the cost per piece of information by collecting a plurality of pieces of information from the CD-ROM issuer, but new costs such as collecting and managing the information also occur. Further, since the CD-ROM is a physical medium, there is a problem that the time cost in the issuing and distribution process is large.

[0006]

As described above, the method of placing information in a specific center has a problem that access is concentrated and a heavy load is applied to a computer and a network. In addition, the information itself cannot be applied to a usage mode in which a fee is paid for each reference of the information, which is stored in the own computer. For this reason, it is necessary to have an information distribution system that can protect the information and put it in any place on the network, perform authentication and payment as necessary, and refer to the information.

Further, the method of distributing the encrypted information in the CD-ROM has a problem that the information provider needs to issue the CD-ROM and distribute it.
Moreover, since the CD-ROM is a physical medium, there is a problem that the time cost in the issuing and distribution process is large. Therefore, there is a need for a method in which ordinary users, rather than a specific large organization, can easily register information on the network and ultimately collect a fee from a person who refers to the information.

The present invention has been made in view of the above-mentioned needs, and enables general users to protect information that can be easily registered on the network and place it at any place on the network. It is an object of the present invention to provide an information distribution method and system in which information can be referred to by performing authentication and payment by means of authentication.

[0009]

In order to solve the above-mentioned problems, in the information distribution method of the present invention, information that is a product is registered in an information center in a protected state by being encrypted, and the product is stored. The information utilizing terminal accesses the information center through the network and obtains the corresponding encrypted information, and the utilizing terminal uses the network to pay the electronic fee for the information prior to decrypting the information. To the key center, and the user terminal uses a secret communication method in which a decryption key is exchanged for the payment and a public key and a secret key are combined between the key center and the user terminal. Secretly obtained from the key center through the network, the use terminal decrypts the above information using the obtained decryption key,
It is characterized by using.

In addition, the information distribution system of the present invention protects information that is a product by encrypting it, and stores it together with the identifier of the information product in a state where tampering can be detected using an authenticator function. The information center, a key center that accepts payment from any information using terminal, and returns the key for decrypting the above information product to the using terminal in exchange for the reception, and the identifier and the encrypted information product. In the case where the information product obtaining means to be obtained and the determination to obtain the information product in response to the identifier portion are made or accepted,
A settlement performing means for paying a fee for the information product prior to the decryption of the information, and a secret communication method in which a key for decryption in exchange for the payment is used in combination with a public key and a secret key. A decryption key acquisition unit that is secretly received from the key center, an information decryption unit that decrypts the information product with a key for the decryption, and a network interface unit that communicates with the outside and transmits and receives information. And a plurality of information utilization terminals each including the information center, an information network serving as an intermediary for transmitting and receiving information between the information center, an arbitrary information utilization terminal and a key center.

According to the present invention, the shaping process of information is performed at a specific center, but the access to the center is only at the time of registration of the information, and it can be freely distributed on the network after encryption. Therefore, the load on the network is distributed. In addition, even in a usage mode in which a fee is paid for each reference, the information itself may be stored in its own computer, and authentication, payment, delivery of a decryption key, etc. may be performed. Also,
Since it is freely distributed in the network, there is a possibility that tampering by a third party and information will be mixed in, but these can be detected by the digital signature and the authenticator function. Since the key center that performs the authentication and settlement processing and the distribution of the decryption key does not have to be the same computer as the registration center, the calculation load and network load can be distributed.

[0012]

DESCRIPTION OF THE PREFERRED EMBODIMENTS The present invention will be described with reference to the drawings. FIG. 1 is a block diagram showing a configuration of an example of an exemplary embodiment of the present invention, and FIG. 2 is a flowchart showing an operation procedure in the configuration of the example.

In FIG. 1, reference numeral 1 is an information provider who provides information as a product to the information center 2 through the product information registration means 11. Reference numeral 2 denotes an information product encryption unit 21 that encrypts the provided information and shapes it by an authenticator function so as to protect it from tampering by a third party, an information ID assigning unit 22 that attaches an identifier to the encrypted information product, and the like. It is an information center that it has. 3 is the information identifier ID from the information center 2,
A key center that has a decryption key management unit 31 that receives and manages a decryption key, accepts payment from an arbitrary information utilization terminal, and returns a key for decrypting an information product in exchange for reception to the utilization terminal. .

Reference numeral 4 designates a plurality of utilization terminals, each utilization terminal obtaining an information commodity acquisition means 41 for obtaining an identifier and an encrypted information commodity, a non-tampering proof means 42 for confirming that the commodity has not been tampered with by an authenticator, When it is determined or accepted that the information product is obtained in response to the identifier part, the payment execution means 43 for paying the fee for the information product prior to the decryption of the information, and the payment execution device for the decryption in exchange for the payment. Decryption key acquisition means 44 for secretly receiving a key from the key center 3 by a secret communication system in which a public key and a secret key are combined, and information for decrypting an information product with a key for decryption It comprises a decryption means 45 and a network interface means for communicating with the outside and transmitting / receiving information.

An anonymous FTP host 5 has a file management means 51 for encrypted information products distributed from the information center 2 and provides the information products to the utilization terminal. The information center 2, the arbitrary information use terminal 1 or 4, the key center 3
The anonymous FTP host 5 and the anonymous FTP host 5 are connected via an information network.

Next, regarding the operation procedure in the embodiment,
This will be described with reference to FIG.

The information center 1 is a place where an information provider registers information. In the registration process (step 1), information is uploaded and information for payment such as an information fee payment destination is input. The information center collects these pieces of information as one block and generates a capsule. In this embodiment, the capsule is composed of a header part generated by digitally signing the control information and a data part consisting of an encrypted information body.

The header portion H is generated by a digital signature according to the public key cryptosystem. This public key cryptography Fp () uses a bijective function that allows digital signature, and has a public key Kp that is public and a secret key Ks that forms a pair with it. Since the public key cipher Fp () has a bijective property, a sentence encrypted with the public key Kp can be decrypted with the secret key Ks, and conversely, a sentence encrypted with the secret key Ks can be decrypted with the public key Kp.

At the information center, the information body to be distributed is encrypted (step 2). The secret key cryptosystem Fsec () and the key Ksec are used for this cipher, and Dsec = Fsec (
Information body, key Ksec) is generated. This Dsec is the encrypted data part. In order to decrypt the information body, the key Ksec is applied to the secret key cryptosystem Fsec (), and Fsec (Dsec, key K
sec).

Next, a value dependent on all the bits of the data part Dsec is generated, and Fa (D) = for a certain data D.
Authenticator Va = Fa (Dsec) is calculated by using an authenticator function Fa () having a property that it is difficult to find D'which is not equal to D which becomes Fa (D '). Next, an information identifier IDi that is uniquely determined is added to this information body (step 2), and the information identifier IDi and the key Ksec are sent to the key center (step 3).

On the other hand, after setting the authenticator Va, the information identifier IDi and the address of the key center in the control information, the header part H = public key encryption Fp (control information, secret key Ks) is calculated by the secret key Ks. This header part H and data part Dse
The data in which c is combined is distributed to the anonymous FTP host as a capsule to be distributed (step 4).

After the capsule is generated, the information center distributes it as a product to the anonymous FTP host. The encapsulated information is the digital signature and the authenticator function F as described above.
Since tampering is prevented by a (), it is possible to use a system for accumulating / distributing files, which is generally used on the Internet like an anonymous FTP host.

A person who wants to refer to the information can retrieve the control information with the public key Kp that is made public and the control information = public key encryption Fp (header H, public key Kp). Since it is impossible to generate the header part H because the private key Ks is not known, it is confirmed that the header part H is information generated by the information center and has not been tampered with by a third party. It

In practice, a user who wants to refer to information accesses an information center or an anonymous FTP host and downloads necessary information using a normal transfer protocol such as FTP (step 5). On the terminal side, the control information is taken out by the public key Kp, which is publicly available, and the control information = public key encryption Fp (header H, public key Kp), and the address of the key center required for decryption, the authenticator Va, and the information identifier IDi To get

Next, in order to confirm that the data has not been tampered with, the result of recalculating the data section Dsec by the above authenticator Va and the authenticator function Fa () is confirmed to be Va = Va '. If it is confirmed that the key has not been tampered with, the key center address is accessed, authentication and settlement processing for fee settlement is performed, and the key K corresponding to the information identifier IDi.
After obtaining sec (step 6), the information body can be obtained by the information body = secret key cryptosystem Fsec (data section Dsec, key Ksec).

[0026]

As described above, according to the present invention,
Any information can be freely registered by any user, and can be freely distributed on the network in a state where the information is protected by encryption, and the fee is settled when the information is referenced and the decryption key is distributed to store the information. It is possible to refer. It is also possible to place frequently referred information near the network, or reclassify it and organize it in an easy-to-understand location. It can also be applied to usage forms where information charges are paid.

[Brief description of the drawings]

FIG. 1 is a block diagram showing a configuration of an embodiment.

FIG. 2 is a flowchart showing an operation procedure in the configuration of the embodiment.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 Information provider 11 Product information registration means 2 Information center 21 Information product encryption means 22 Information ID giving means 3 Key center 31 Decryption key management means 4 Utilization terminal 41 Encrypted information product acquisition means 42 Non-tampering proof means 43 Payment execution means 44 Decryption Key Acquisition Means 45 Information Decryption Means 5 Anonymous FTP Host 51 File Management Means

Claims (5)

[Claims] 1. Information that is a product is protected by being encrypted, registered in an information center in a state where tampering can be detected using an authenticator function, and freely distributed on a network. A terminal that uses certain information accesses the information center or a computer to which the information that is a product is distributed through the network and obtains the corresponding encrypted information. The user terminal uses the network before decrypting the information. Through the electronic payment of the information to the key center, the user terminal exchanges the payment with a decryption key, and the key center and the user terminal combine a public key and a private key. The secret communication method is used to obtain the information secretly from a key center through a network to the third party, and the user terminal decrypts and uses the above information by using the obtained decryption key. Broadcast distribution methods. 2. The information distribution method according to claim 1, wherein a combination of a public key encryption method and a secret key encryption method is used as an encryption method applied to the encryption of information which is the product and the secret communication method. . 3. An information center for storing and holding together with an identifier of the information product in a state where the product information is protected by being encrypted and tampering can be detected by using an authenticator function, and arbitrary information use A key center for accepting payment from the terminal and returning a key for decrypting the information product in exchange for the acceptance, to the utilization terminal; and an information product acquisition unit for obtaining the identifier and the encrypted information product. When it is determined or accepted that the information product is obtained in response to the identifier portion, a payment execution means for paying a charge for the information product prior to the decryption of the information, and a decryption in exchange for the payment. The key to
Decryption key acquisition means for secretly receiving from the key center to a third party, using a secret communication system combining a public key and a secret key,
A plurality of information use terminals each including an information decryption unit that decrypts the information product with the decryption key and a network interface unit that communicates with the outside to send and receive information; and the information center, An information distribution system comprising an information network serving as an intermediary for transmitting and receiving information between an arbitrary information utilization terminal and a key center. 4. The information center stores and holds a part of the product information protected by encryption, and the information product acquisition means of the information use terminal encrypts the part. 4. The information processing apparatus according to claim 3, wherein the payment fulfilling means is activated when a determined information product is obtained and, in response to a non-encrypted portion, a determination to obtain the information product is made or accepted. Distribution system. 5. The information according to claim 3, wherein a public key cryptosystem and a secret key cryptosystem are used in combination as an encryption system applied to the encryption of the product information and the secret communication system. Distribution system.