WO2013073115A1 - Content distribution apparatus and content distribution system - Google Patents

Abstract

A content distribution apparatus (200b) for distributing content is provided with: an obtaining unit (201b) that obtains region identification information indicating a second region, which is different from a first region where packaged content is to be sold for the first time in the world; a determining unit (202b) that determines, as a period during which the content is to be distributed within the second region identified by the region identification information, a distribution period including a period prior to the sales date in the first region where the packaged content is to be sold for the first time in the world; and a distribution unit (203b) that distributes the content to a terminal apparatus (300b) in the second region, via a network, during the determined distribution period.

Description

Content distribution apparatus and content distribution system

The present invention relates to a technology for distributing content.

Conventionally, various techniques for preventing unauthorized use of content have been proposed.

Patent Document 1 discloses a technique for preventing illegal sales of a recording medium on which a voyeur video is recorded when a movie screened in a theater or a movie theater is voyeurized by a camcorder or the like. According to this technique, watermark information is superimposed on a video, and a video on which the watermark information is superimposed is screened in a theater. When this movie is voyeurized and a pirated recording medium on which voyeur video is recorded is illegally sold, the voyeur video is analyzed by a dedicated watermark decryption device. As a result, information related to the identification of the voyeur culprit such as the voyeur time and the location of the voyeur can be detected later.

Movie contents are usually released by movie production companies: (1) screenings in theaters and cinemas (first stage), (2) screenings in airplanes and hotels (second stage), (3) DVDs, Blu-ray Discs, etc. Package sales (third stage) and so on.

The technique disclosed in Patent Document 1 is one means for solving the problem in the first stage disclosure.

Japanese Unexamined Patent Publication No. 2009-76985 Japanese Unexamined Patent Publication No. 11-149707 Japanese Unexamined Patent Publication No. 2001-202280

The film production company first screened the movie content in theaters and movie theaters in the first region, and after a certain period of time has passed since the screening, Sell regular packaged media such as Blu-ray Discs. When a legitimate package medium is sold, an unauthorized person illegally duplicates content extracted from the legitimate package medium and manufactures the package medium. Such illegal package media is sold at a low price in a second region different from the first region. When such illegal package media is sold, there is a problem that the right of the rightful owner is infringed.

In order to address such problems, an object of the present invention is to provide a content distribution apparatus and a content distribution system that can suppress illegal distribution of package media in the second region and protect content. To do.

In order to achieve the above object, one aspect of the present invention is a content distribution apparatus for distributing content, which shows a second region different from the first region where the packaged content is first sold in the world. In the first region where the packaged content is sold for the first time in the world as a period for distributing the content in the second region identified by the region identification information; Determining means for determining a distribution period including a period before the sales start date, and distribution means for distributing the content via the network to the terminal devices in the second region within the determined distribution period; With.

According to this aspect, before the package media that are illegally manufactured based on the regular package media are sold in the second region, the content is distributed in the second region. For this reason, the willingness to purchase illegally manufactured package media can be reduced. As a result, it can be expected that distribution of illegally manufactured package media is suppressed in the second region.

1 shows an overall configuration of a content distribution system 12 according to Embodiment 1 of the present invention. The whole structure of the early window content delivery system 10 in Embodiment 2 which concerns on this invention is shown. 2 is a block diagram illustrating a configuration of a content creator device 100. FIG. An example of the data structure of the period information table 130 is shown. A screen 180 for content transmission and period information processing is shown. A screen 800 for writing and updating period information is shown. The relationship between the screening period 171 and the sales period 172 in “A country” and the distribution periods 173 and 174 in “B country” and “C country” is shown. The relationship between the screening period 171a and the sales period 172a in “A country” and the distribution periods 173a and 174a in “B country” and “C country” is shown. The relationship between the screening period 171b and the sales period 172b in “A country” and the distribution periods 173b and 174b in “B country” and “C country” is shown. The relationship between the screening period 171c and the sales period 172c in "A country" and the distribution periods 173c and 174c in "B country" and "C country" is shown. 2 is a block diagram showing a configuration of a content distribution device 200. FIG. An example of the data structure of the delivery period table 240 is shown. 3 is a block diagram showing a configuration of a terminal device 300. FIG. 4 is a block diagram showing a configuration of a recording medium device 400. FIG. 4 is a flowchart showing operations of content transmission and period information processing in the content creator device 100. FIG. 10 is a sequence diagram (part 1) illustrating an operation of transmitting and receiving content between the content creator device and the content distribution device. Continued to FIG. FIG. 11 is a sequence diagram (part 2) illustrating an operation of transmitting and receiving content between the content creator device 100 and the content distribution device 200. Continuing from FIG. 5 is a flowchart showing operations of writing and updating period information in the period information table 130. 7 is a flowchart showing an operation for setting a delivery period in a period information table 130. 6 is a flowchart illustrating an operation of calculating a distribution period by a period determination unit 104. It is a flowchart which shows the operation | movement of transmission / reception of delivery information. FIG. 10 is a sequence diagram showing an operation of transmitting / receiving distribution information between the content creator device 100 and the content distribution device 200. FIG. 11 is a sequence diagram (part 1) illustrating an operation of transmitting / receiving encrypted content between the content distribution device 200 and the recording medium device 400 via the terminal device 300. Continued to FIG. FIG. 10 is a sequence diagram (part 2) illustrating an operation of transmitting / receiving encrypted content between the content distribution device 200 and the recording medium device 400 via the terminal device 300. It continues from FIG. FIG. 6 is a sequence diagram (part 1) illustrating an operation of reproducing content. Continued to FIG. FIG. 11 is a sequence diagram (part 2) illustrating an operation of reproducing content. Continuing from FIG. FIG. 11 is a sequence diagram (part 1) illustrating operations of mutual authentication and key sharing between the content distribution apparatus 200 and the recording medium apparatus 400. Continued to FIG. FIG. 11 is a sequence diagram (part 2) illustrating operations of mutual authentication and key sharing between the content distribution apparatus 200 and the recording medium apparatus 400. It continues from FIG. The whole structure of the content delivery system 11 in Embodiment 3 which concerns on this invention is shown. An example of the data structure of the delivery period table 501 is shown.

One aspect of the present invention is a content distribution apparatus that distributes content, and obtains region identification information indicating a second region different from the first region where the packaged content is first sold in the world. And a period before the sales start date in the first region where the packaged content is sold for the first time in the world as a period for distributing the content in the second region identified by the region identification information And a distribution unit that distributes the content to a terminal device in the second region through the network within the determined distribution period. To do.

According to this aspect, before the package media that are illegally manufactured based on the regular package media are sold in the second region, the content is distributed in the second region. For this reason, the willingness to purchase illegally manufactured package media can be reduced. As a result, it can be expected that distribution of illegally manufactured package media is suppressed in the second region.

Here, the acquisition means further acquires system identification information indicating a copyright protection system of the content in the second region, and the determination means is based on a copyright protection system identified by the acquired system identification information. The length of the distribution period may be determined according to the strength of content protection.

According to this aspect, it is possible to determine a delivery period having a length corresponding to the strength of content protection.

Here, the determination means may determine the length of the distribution period as zero when the strength of content protection by the copyright protection method is lower than a threshold.

According to this aspect, since the distribution period becomes zero, the content is not distributed illegally.

Here, the determination means may determine, as the end date of the distribution period, a date obtained by adding or subtracting the number of days determined according to the strength of protection by the copyright protection method to the sales start date. .

According to this aspect, it is possible to determine a delivery period having a length corresponding to the strength of content protection.

Here, the acquisition unit further acquires screening period information indicating a screening period of the content in the first region, and the determination unit includes the number of screening days on the start date of the screening period indicated by the screening period information. Is determined as the start date of the distribution period, or the end date of the screening period indicated by the screening period information is determined according to the degree of protection according to the copyright protection method. A date obtained by addition or subtraction may be determined as the start date of the distribution period.

こ の According to this aspect, distribution can be started immediately after the end of the screening. In addition, it is possible to determine a delivery period having a length corresponding to the strength of content protection.

Here, the determination means may determine an end date of the distribution period based on the sales start date.

Here, the acquisition unit further acquires a screening period information indicating a screening period of the content in the first region, and the determination unit further performs the distribution based on the period indicated by the screening period information. The start date of the period may be determined.

Here, the determination means may further provide a period for performing streaming distribution of content and a period for performing download distribution of content within the determined distribution period.

Here, the determination means may provide the period for performing download distribution after the period for performing streaming distribution within the distribution period.

According to this aspect, since streaming distribution is performed before download distribution, it is possible to prevent unauthorized distribution of content within the period of streaming distribution.

Here, the distribution means acquires a request receiving unit that receives the content transmission request from the terminal device, a region specifying unit that specifies a region where the terminal device is located, and a current time of the specified region. It is determined whether or not the time acquisition unit matches the specified region and the second region indicated by the acquired region identification information, and whether or not the acquired current time is included in the determined distribution period If the region does not match or is not included in the distribution period, the transmission of the content is rejected, and if the region matches and is included in the distribution period, the determination unit permits the transmission of the content When the transmission is permitted, a transmission unit that transmits the content to the terminal device may be included.

According to this aspect, it is possible to transmit content only to terminal devices that exist in the second region and whose current time is within the distribution period.

Here, the area specifying unit may specify an area where the terminal device exists based on the IP address of the terminal device.

Here, the region specifying unit receives region identification information indicating a region where the terminal device exists from the terminal device, and specifies the region where the terminal device exists using the received region identification information. Also good.

Here, the time acquisition unit may acquire the current time from a date server based on the identified region.

Here, the time acquisition unit calculates a time difference between the identified region and the region where the content distribution device exists, acquires the current time of the region where the content distribution device exists, and the content distribution device exists. The current time of the area where the terminal device exists may be calculated using the current time of the area to be used and the calculated time difference.

Here, the distribution period includes a first period in which content streaming distribution is performed and a second period in which content download distribution is performed, and the determination unit determines that the current time is the first period and the second period. It is determined in which period, and when it is included in the first period, streaming distribution is permitted, and when it is included in the second period, download distribution is permitted, and the transmission unit May distribute the content in a streaming manner or download the content in accordance with the permission of the determination unit.

Here, the acquisition unit further acquires first scheme identification information indicating a copyright protection scheme of the content in the second region, and the distribution unit further includes a recording medium device attached to the terminal device. An authentication unit that performs mutual authentication with the authentication unit, wherein the authentication unit acquires second method identification information that identifies a copyright protection method used in the recording medium device, and the first method identification information and the The determination unit may compare the second method identification information and reject the transmission of the content when the first method identification information and the second method identification information do not match.

According to this aspect, it is possible to prevent the content from being transmitted when the copyright protection method does not match.

Another aspect of the present invention is a content distribution system including a content distribution device and a terminal device, wherein the content distribution device is a first region where the packaged content is first sold in the world. As a period for distributing the content in the second area identified by the area identification information, the packaged content is the first in the world to acquire area identification information indicating a second area different from Determining means for determining a distribution period including a period before the sales start date in the first area to be sold; and the content is transmitted to the terminal device in the second area within the determined distribution period. Distribution means for distributing via a network, wherein the terminal device receives the content.

According to this aspect, before the package media that are illegally manufactured based on the regular package media are sold in the second region, the content is distributed in the second region. For this reason, the willingness to purchase illegally manufactured package media can be reduced. As a result, it can be expected that distribution of illegally manufactured package media is suppressed in the second region.

According to another aspect of the present invention, there is provided a control method used in a content distribution apparatus for distributing content, wherein a second region different from the first region where the packaged content is first sold in the world is provided. The first region in which the packaged content is sold for the first time in the world as an acquisition step of acquiring the region identification information shown, and as a period for distributing the content in the second region identified by the region identification information A determination step of determining a distribution period including a period before the sales start date in the distribution, and distribution of distributing the content via the network to the terminal devices in the second region within the determined distribution period And a step.

According to this aspect, before the package media that are illegally manufactured based on the regular package media are sold in the second region, the content is distributed in the second region. For this reason, the willingness to purchase illegally manufactured package media can be reduced. As a result, it can be expected that distribution of illegally manufactured package media is suppressed in the second region.

According to another aspect of the present invention, there is provided a control program used in a content distribution apparatus for distributing content, wherein the packaged content is first sold worldwide to a content distribution apparatus that is a computer. The packaged content is the first in the world as an acquisition step of acquiring region identification information indicating a second region different from the region, and a period for distributing the content in the second region identified by the region identification information. A determination step of determining a distribution period including a period before the sales start date in the first region sold in the first region, and the content for the terminal device in the second region within the determined distribution period And a distribution step of distributing the network via a network.

According to this aspect, before the package media that are illegally manufactured based on the regular package media are sold in the second region, the content is distributed in the second region. For this reason, the willingness to purchase illegally manufactured package media can be reduced. As a result, it can be expected that distribution of illegally manufactured package media is suppressed in the second region.

According to another aspect of the present invention, there is provided a computer-readable recording medium that records a control program used in a content distribution apparatus that distributes content, and is packaged in the content distribution apparatus that is a computer. An acquisition step of acquiring area identification information indicating a second area different from the first area where the content is sold for the first time in the world, and a period for distributing the content in the second area identified by the area identification information Determining a distribution period including a period before the sales start date in the first region where the packaged content is first sold in the world; and within the determined distribution period, the second A distribution step for distributing the content to a terminal device in a region via a network. Characterized in that it records a control program for executing and.

According to this aspect, before the package media that are illegally manufactured based on the regular package media are sold in the second region, the content is distributed in the second region. For this reason, the willingness to purchase illegally manufactured package media can be reduced. As a result, it can be expected that distribution of illegally manufactured package media is suppressed in the second region.

According to another aspect of the present invention, there is provided an integrated circuit constituting a content distribution apparatus for distributing content, wherein a second region different from a first region where the packaged content is first sold in the world is provided. The first area in which the packaged content is sold for the first time in the world as a period for distributing the content in the second area identified by the area identification information; Determining means for determining a distribution period including a period before the sales start date in the distribution, and distribution for distributing the content via the network to the terminal devices in the second region within the determined distribution period Means.

According to this aspect, before the package media that are illegally manufactured based on the regular package media are sold in the second region, the content is distributed in the second region. For this reason, the willingness to purchase illegally manufactured package media can be reduced. As a result, it can be expected that distribution of illegally manufactured package media is suppressed in the second region.

Another aspect of the present invention is a period determining device for determining a content distribution period, which is a region indicating a second region different from the first region where the packaged content is first sold in the world. Sales in the first region where the packaged content is sold for the first time in the world as an acquisition means for acquiring identification information and a period for distributing the content in the second region identified by the region identification information Determining means for determining a delivery period including a period before the start date.

According to this aspect, by distributing the content in the second region within the determined distribution period, the package media that is illegally manufactured based on the regular package media is sold before the second region is sold in the second region. The content is distributed in two regions. For this reason, the willingness to purchase illegally manufactured package media can be reduced. As a result, it can be expected that distribution of illegally manufactured package media is suppressed in the second region.

Hereinafter, embodiments of the present invention will be described with reference to the drawings.

1. Embodiment 1
The content distribution system 12 as Embodiment 1 according to the present invention will be described.

(1) As shown in FIG. 1, the content distribution system 12 includes a content distribution device 200b for distributing content and a terminal device 300b for receiving content.

The content distribution apparatus 200b includes an acquisition unit 201b, a determination unit 202b, and a distribution unit 203b.

The acquisition unit 201b acquires region identification information indicating a second region different from the first region where the packaged content is first sold in the world.

The determination unit 202b determines, as a period for distributing the content in the second region identified by the region identification information, before the sales start date in the first region where the packaged content is first sold in the world. The delivery period including the period is determined.

The distribution unit 203b distributes the content to the terminal device 300b in the second region via the network within the determined distribution period.

(2) The acquisition unit 201b may further acquire method identification information indicating a copyright protection method of the content in the second region.

The determining unit 202b determines the length of the distribution period according to the strength of content protection by the copyright protection method identified by the acquired method identification information.

(3) The determination unit 202b may determine that the length of the distribution period is zero when the strength of content protection by the copyright protection method is lower than a threshold.

(4) The determination unit 202b may determine, as the end date of the distribution period, a date obtained by adding or subtracting the number of days determined according to the strength of protection by the copyright protection method to the sales start date. .

(5) The acquisition unit 201b may further acquire screening period information indicating the screening period of the content in the first region. The determination unit 202b determines a day obtained by adding the number of screening days to the starting date of the screening period indicated by the screening period information as the start date of the distribution period, or the screening indicated by the screening period information A date obtained by adding or subtracting the number of days determined according to the strength of protection by the copyright protection method may be determined as the start date of the distribution period.

(6) The determination unit 202b may determine the end date of the distribution period based on the sales start date.

(7) The acquisition unit 201b may further acquire screening period information indicating a screening period of the content in the first region.

The determination unit 202b may further determine the start date of the distribution period based on the period indicated by the screening period information.

(8) The determination unit 202b may further provide a period for performing content streaming distribution and a period for performing content download distribution within the determined distribution period.

(9) The determination unit 202b may provide the period for performing download distribution after the period for performing streaming distribution within the distribution period.

(10) The distribution unit 203b acquires a request receiving unit that receives the content transmission request from the terminal device 300b, a region specifying unit that specifies a region where the terminal device 300b is located, and the current time of the specified region. It is determined whether or not the time acquisition unit matches the specified region and the second region indicated by the acquired region identification information, and whether or not the acquired current time is included in the determined distribution period If the region does not match or is not included in the distribution period, the transmission of the content is rejected, and if the region matches and is included in the distribution period, the determination unit permits the transmission of the content When the transmission is permitted, a transmission unit that transmits the content to the terminal device 300b may be included.

(11) The region specifying unit may specify the region where the terminal device 300b exists based on the IP address of the terminal device.

(12) The region specifying unit receives region identification information indicating a region where the terminal device exists from the terminal device, and specifies the region where the terminal device exists using the received region identification information. Also good.

(13) The time acquisition unit may acquire the current time from a date / time server based on the identified region.

(14) The time acquisition unit calculates a time difference between the identified region and the region where the content distribution device exists, acquires a current time of the region where the content distribution device exists, and the content distribution device exists The current time of the area where the terminal device exists may be calculated using the current time of the area to be used and the calculated time difference.

(15) The distribution period may include a first period in which content is distributed by streaming and a second period in which content is distributed by download.

The determination unit determines whether the current time is included in the first period or the second period, and if the current time is included in the first period, permits the streaming distribution, If it is included in the period, download distribution is permitted.

The transmission unit may perform streaming distribution of the content or download distribution of the content in accordance with permission from the determination unit.

(16) The acquisition unit 201b may further acquire first method identification information indicating a copyright protection method of the content in the second region.

The distribution unit 203b may further include an authentication unit that performs mutual authentication with the recording medium device mounted on the terminal device.

The authentication unit acquires second method identification information for identifying a copyright protection method used in the recording medium device, and compares the first method identification information with the second method identification information.

The determination unit rejects transmission of the content when the first method identification information and the second method identification information do not match.

2. Embodiment 2
An early window content distribution system 10 as Embodiment 2 according to the present invention will be described.

2.1 Configuration of Early Window Content Distribution System 10 As shown in FIG. 2, the early window content distribution system 10 includes a content creator device 100, a content distribution device 200, and a terminal device 300. A recording medium device 400 is attached to the terminal device 300.

The content creator device 100 and the content distribution device 200 are connected to each other by a network 20 represented by the Internet. The content distribution device 200 and the terminal device 300 are also connected to each other via the network 20.

The content creator device 100 receives an input of a screening period and a sales start date in the first release country for each content from the content creator. Further, the content creator device 100 receives a designation of the second release country and a designation of a copyright protection method in the second release country from the content creator. Furthermore, the content creator device 100 calculates the distribution period in the second release country based on the screening period, the sales start date, and the designation of the copyright protection method.

Here, the content is, for example, compressed data generated by highly efficiently compressing digital video data and digital audio data.

Also, the first release country (also referred to as the first region) is a country or region where the risk of unauthorized use of content is low. In the first release country, the content is released for the first time in the world. The second release country (also referred to as the second region) is a country or region with a high risk of unauthorized use of content. After the content is released in the first release country, the content is released in the second release country. Release means the release of content. Releases include content screening, package sales, content distribution over a network, and the like. The content will be screened at theaters and cinemas. The package is a content recorded on a portable recording medium such as a DVD or a BD. Content distribution via a network includes content download-type distribution and streaming-type distribution. In download-type distribution, received content can be recorded in a receiving device. In streaming-type distribution, the content can be reproduced in real time while receiving the content at the receiving device.

The screening period includes the start date and the end date of the content in the first release country. Further, the sales start date is the sales start date of the package in the first release country. Further, the distribution period includes a distribution start date and a distribution end date via the content network.

Usually, after a content is screened in a theater or a movie theater in the first release country, for example, after 6 months, the package is sold in the first release country.

In the early window content distribution system 10, for example, the distribution period in the second release country is calculated between the screening end date and the sales start date in the first release country.

The content creator device 100 transmits the content designated by the content creator to the content distribution device 200 via the network 20. Further, the content creator device 100 transmits distribution information including the content distribution period designated by the content creator to the content distribution device 200 via the network 20. At this time, the content and the distribution information are transmitted to the content distribution apparatus 200 safely, in other words, not to be known to others and not to be tampered with.

The content distribution device 200 securely receives content and distribution information from the content creator device 100 via the network 20. Next, the received content and distribution information are stored inside. Next, the content distribution device 200 generates a content key for each content. Next, using the generated content key, the received content is encrypted to generate an encrypted content. The content distribution device 200 stores the content key and the encrypted content in association with each other.

The terminal device 300 is installed in the second release country or used in the second release country.

The terminal device 300 requests the content distribution device 200 to transmit content. When there is a request for content transmission, the content distribution device 200 and the terminal device 300 perform charging processing, mutual authentication processing, and key sharing processing. Further, the content distribution device 200 determines whether or not the terminal device 300 exists in the second release country. Further, the content distribution apparatus 200 determines whether or not the current date and time is within the distribution period corresponding to the content to be transmitted. When it is determined that the terminal device 300 exists in the second release country and is within the distribution period, the content distribution device 200 sends the designated encrypted content and content key to the terminal device 300 via the network 20. Send to. At this time, the encrypted content and the content key are transmitted safely.

The terminal device 300 securely receives the encrypted content and the content key from the content distribution device 200 via the network 20. Next, the terminal device 300 writes the received encrypted content and content key to the recording medium device 400.

The recording medium device 400 stores the encrypted content and the content key.

The terminal device 300 receives an instruction to reproduce the content recorded on the recording medium device 400 from the user. When receiving the instruction, the terminal device 300 and the recording medium device 400 perform mutual authentication processing and key sharing processing. When the mutual authentication process and the key sharing process are normally completed, the recording medium device 400 safely outputs the encrypted content and the content key to be instructed to the terminal device 300.

The terminal device 300 receives the encrypted content and the content key from the recording medium device 400 safely. Next, the encrypted content is decrypted using the received content key to generate content. Furthermore, the generated content is reproduced, and the reproduced content is output as audio and video.

2.2 Content creator device 100
As shown in FIG. 3, the content creator device 100 includes a display unit 101, an input unit 102, a control unit 103, a period determination unit 104, an input / output unit 105, a data storage unit 106, an authentication unit 107, a key storage unit 108, The encryption signature unit 109 and the communication unit 110 are included.

Note that the content creator device 100 is specifically a computer system including a memory device including a microprocessor, RAM and ROM, a hard disk device, a network connection device, a display, a keyboard, and the like. A computer program is stored in the memory device or the hard disk device. The content creator apparatus 100 fulfills its function by the microprocessor operating according to the program.

Here, the display unit 101 is composed of a display. The input unit 102 includes a keyboard. The input / output unit 105 and the data storage unit 106 are composed of hard disk devices. The key storage unit 108 is configured by a memory device. The control unit 103, the period determination unit 104, the authentication unit 107, and the cryptographic signature unit 109 are configured by computer programs stored in a microprocessor and a memory device. The communication unit 110 is configured by a network connection device.

However, it is not limited to these configurations. For example, the authentication unit 107, the key storage unit 108, and the cryptographic signature unit 109 may be configured by dedicated hardware circuits.

Further, each functional block of the content creator device 100 is typically realized as an LSI which is an integrated circuit. These may be individually made into one chip, or may be made into one chip so as to include one or more components or a part of each component. Each functional block may be realized as an IC, a system LSI, a super LSI, or an ultra LSI.

Further, the method of circuit integration is not limited to LSI's, and implementation using dedicated circuitry or general purpose processors is also possible. An FPGA (Field Programmable Gate Array) that can be programmed after manufacturing the LSI or a reconfigurable processor that can reconfigure the connection and setting of circuit cells inside the LSI may be used.

Furthermore, if integrated circuit technology that replaces LSI emerges as a result of advances in semiconductor technology or other derived technology, it is naturally also possible to integrate functional blocks using this technology.

Each function block may be realized by software. Further, it may be realized by a combination of LSI and software. Furthermore, the software may be tamper resistant.

The period determination unit 104 determines a distribution period including a period before the sales start date of the packaged content in the first release country as a period for distributing the content in the second release country. Further, the length of the distribution period may be determined according to the strength of content protection by the copyright protection method. In this case, when the strength of content protection by the copyright protection method is lower than a threshold value, the length of the distribution period may be determined as zero. Further, the end date of the distribution period may be determined based on the sales start date. Further, a date obtained by adding or subtracting the number of days determined according to the strength of protection on the sales start date may be set as the end date of the distribution period. The start date of the distribution period may be determined based on the content screening period in the first release country. Also, the day obtained by adding the number of screening days to the start date of the screening period is determined as the start date of the distribution period, or according to the strength of protection by the copyright protection method on the end date of the screening period A date obtained by adding or subtracting a fixed number of days may be determined as the start date of the distribution period. In addition, within the determined distribution period, a period for performing content streaming distribution and a period for performing content download distribution may be provided. At this time, within the distribution period, a period for performing download distribution is provided after a period for performing streaming distribution.

(1) Data storage unit 106
The data storage unit 106 stores a plurality of contents 121, 122, 123,... As shown in FIG. Further, as shown in FIG. 3, a period information table 130 is stored.

Here, the contents 121, 122, 123,... Are compressed data generated by highly efficiently compressing digital video data and digital audio data, respectively, as an example.

(Period information table 130)
As an example, the period information table 130 includes an area for storing a plurality of period information, as shown in FIG. The plurality of pieces of period information correspond to the contents 121, 122, 123,.

Each period information includes a content ID, a screening period, a screening area ID, one or a plurality of distribution information, a sales start date, and a sales area ID.

The content ID is identification information for uniquely identifying the content.

The screening period includes the screening start date and screening end date. The screening start date and the screening end date indicate the date when the content starts to be displayed and the date when the screening ends in the theater, movie theater, etc. in the first release country, respectively. The screening start date and the screening end date are represented by year, month and day, respectively. In the period information table 130 shown in FIG. 4, for example, the screening start date is expressed as “2012/01/01”. This represents January 1, 2012. Other dates are also expressed in the same way.

The screening area ID is identification information for identifying the first release country in which the content, the theater, the movie theater, etc. are present.

Each distribution information includes a distribution period, a distribution area ID, and a copyright protection method ID. The distribution information corresponds to the second release country.

The distribution period indicates the period during which content is distributed in the second release country. The distribution period includes a distribution start date and a distribution end date. The distribution start date and the distribution end date indicate the date when content distribution starts and the date when content distribution ends in the second release country, respectively. The distribution start date and the distribution end date are represented by year, month, and date, respectively.

The distribution area ID is identification information for identifying the second release country of the content distribution destination.

The copyright protection method ID is identification information for identifying the copyright protection method for protecting the content adopted in the second release country.

* Sales start date indicates the date on which the package will be sold in the first release country. The sales start date is represented by year, month and day.

The sales region ID is identification information for identifying the first release country where the package is sold.

As shown in FIG. 4, the period information table includes period information 145 as an example. Period information 145 includes a content ID (131) “ABC123”, a screening start date 132 “2012/01/01”, a screening end date 133 “2012/03/09”, a screening region ID (134) “A01”, and distribution start. Date 135 “2012/03/10”, distribution end date 136 “2012/09/09”, distribution area ID (137) “B01”, copyright protection method ID (138) “A”, distribution start date 139 “2012” / 03/10 ”, distribution end date 140“ 2012/09/09 ”, distribution area ID (141)“ C01 ”, copyright protection method ID (142)“ A ”, and sales start date 143“ 2012/09/10 ” "And sales area ID (144)" A01 ".

The period information 145 indicates that the content identified by the content ID (131) “ABC123” is to be screened in a theater and a movie theater in the first release country identified by the screening region ID (134) “A01”. Show. The screening period is from a screening start date 132 “2012/01/01” to a screening end date 133 “2012/03/09”. In addition, the package of the content is sold from the sales start date 143 “2012/09/10” in the first release country identified by the sales region ID (144) “A01”.

The content is distributed in the second release country identified by the distribution area ID (137) “B01”. The distribution period is from the distribution start date 135 “2012/03/10” to the distribution end date 136 “2012/09/09”. The copyright protection method is a method identified by the copyright protection method 138 “A”.

Also, the content is distributed in the second release country identified by the distribution area ID (141) “C01”. The distribution period is from the distribution start date 139 “2012/03/10” to the distribution end date 140 “2012/09/09”. The copyright protection method is a method identified by the copyright protection method 142 “A”.

Here, the distribution period may include a first period in which the content is distributed and a second period in which the content is downloaded and distributed.

(2) Key storage unit 108
The key storage unit 108 stores a private key and a public key of the content creator device 100. The key storage unit 108 stores a first authentication key for authentication and key sharing with the content distribution apparatus 200.

Further, the key storage unit 108 stores the public key certificate of the content distribution apparatus 200. The public key certificate of the content distribution apparatus 200 applies a digital signature to the public key of the content distribution apparatus 200, identification information for identifying the public key, other information, and the identification information, public key, and other information. The signature data generated in this way is included.

(3) Display unit 101
Under the control of the control unit 103, the display unit 101 displays a screen 180 for content transmission and period information processing shown in FIG. 5 and a screen 800 for writing and updating period information shown in FIG. . Other screens are also displayed.

(Screen 180)
The screen 180 includes an input field 181 and buttons 182, 183, 184, 185 and 186 as shown in FIG.

The input field 181 is used for inputting a content ID.

Buttons 182, 183, 184, 185, and 186 are operation buttons for performing operations of transmitting content, writing and updating period information, setting a distribution period, transmitting distribution information, and ending processing, respectively. .

(Screen 800)
As shown in FIG. 6, the screen 800 includes an input field 801, an input area 802, an input area 803, a button 806 and a button 807.

Entry area 802 corresponds to the first release country. Input area 802 includes input fields 821, 822, 823, and 824 for the first release country. Input fields 821, 822, 823, and 824 are used to input a screening area ID, a screening start date, a screening end date, and a sales start date, respectively.

The input area 803 includes input areas 804, 805,. Each of the input areas 804, 805,... Corresponds to a plurality of second release countries.

The input area 804 includes input fields 831, 832, 833, 834, 835, 836, 837 and 838. The input fields 831, 832, 833, 834, 835, 836, 837, and 838 are a distribution area ID, a distribution start date, a distribution end date, a streaming distribution start date, a streaming distribution end date, a download distribution start date, and a download distribution, respectively. Used to enter end date and copyright protection scheme ID.

The input area 805 is the same as the input area 804.

The button 806 is an operation button for writing and updating period information. A button 807 is an operation button for returning to the display of the screen 180.

(4) Input unit 102
The input unit 102 receives input information by user operation in the input field of each screen. In addition, operation information indicating a user's button operation with respect to a button on each screen is received. The received input information and operation information are output to the control unit 103.

(5) Control unit 103
(Receiving input information)
The control unit 103 receives input information from the input unit 102.

(Control of processing)
The control unit 103 receives operation information from the input unit 102.

When the operation information indicates content transmission, the control unit 103 controls to transmit the designated content.

When the operation information is writing and updating period information, the control unit 103 performs control so that the screen 800 is displayed.

When the operation information is setting period information, the control unit 103 calculates the distribution period in the period information table 130 and sets the distribution period in the period information table 130.

When the operation information is transmission of distribution information, the control unit 103 controls to read the distribution information from the period information table 130 and transmit the read distribution information.

If the operation information is complete, the control unit 103 terminates the content transmission and the period information processing.

When the operation information is update, the control unit 103 writes or updates the period information table 130.

When the operation information is returned, the control unit 103 controls to display the screen 180 from the state in which the screen 800 is displayed.

(Writing and updating period information table 130)
The control unit 103 receives the content ID from the input unit 102. Next, the received content ID is searched from the period information table 130.

When the received content ID does not exist in the period information table 130, the control unit 103 generates period information based on the input information received from the input unit 102, and writes the generated period information in the period information table 130.

When the received content ID exists, the period information is generated based on the input information received from the input unit 102, and the period information table 130 is updated with the generated period information.

(Setting of distribution period of period information table 130)
The control unit 103 receives the content ID from the input unit 102. Next, the received content ID is searched from the period information table 130.

If the received content ID does not exist, the control unit 103 displays a message to that effect on the display unit 101, and then ends this process.

When the received content ID exists, the control unit 103 reads the period information including the content ID from the period information table 130. Next, it is checked whether there is any unfilled item in the period information. If there is no entry in the item, a message indicating that is displayed on the display unit 101, and then this process is terminated.

When there is no uninput in the item, the control unit 103 calculates a distribution period and updates the period information with the calculated distribution period. Next, this process ends.

(Sending delivery information)
The control unit 103 receives the content ID from the input unit 102. Next, the received content ID is searched from the period information table 130.

If the received content ID does not exist, the control unit 103 displays a message to that effect on the display unit 101, and then ends this process.

When the received content ID exists, the control unit 103 reads the period information including the content ID from the period information table 130. Next, it is checked whether there is any unfilled item in the period information. If there is no entry in the item, a message indicating that is displayed on the display unit 101, and then this process is terminated.

If there is no entry in the item, the control unit 103 generates distribution information from the read period information, and outputs the generated distribution information to the content distribution apparatus 200 in a safe manner, the authentication unit 107, the cryptographic signature The unit 109 and the communication unit 110 are controlled.

(Send content)
The control unit 103 receives the content ID from the input unit 102. Next, the content identified by the received content ID is read from the data storage unit 106.

Next, the control unit 103 controls the authentication unit 107, the encryption signature unit 109, and the communication unit 110 so that the read content is safely output to the content distribution apparatus 200.

(6) Period determination unit 104
The period determining unit 104 determines the distribution start date in the second release country based on the screening start date of the content in the first release country or the like, or the screening end date. Further, the distribution end date in the second release country is determined based on the sales start date of the package of the content in the first release country. A terminal device 300 is arranged in the second release country.

For example, the screening end date of the content identified by the content ID “ABC123” in the first release country is “2012/03/09”, and the sales start date of the package of the content in the first release country is “2012”. In the case of “/ 09/10”, the distribution period “2012/03/10” to “2012/09/09” is determined in the second release country. In this distribution period, content is distributed prior to package sales.

The period determination unit 104 calculates a distribution start date and a distribution end date in the period information table 130 and writes the calculated distribution start date and distribution end date to the period information table 130 via the input / output unit 105.

(Calculation of delivery period)
The period determination unit 104 holds a first threshold value and a second threshold value. The first threshold value and the second threshold value are used to determine the protection strength of the content by the copyright protection method. Here, the first threshold value is smaller than the second threshold value.

The period determination unit 104 extracts a screening period and a sales start date from the read period information. Next, the copyright protection method ID is extracted.

Next, the protection strength of the content by the copyright protection method identified by the extracted copyright protection method ID is determined. Here, it is assumed that there are four protection strengths: “very weak”, “weak”, “normal”, and “strong”.

When the protection strength of the copyright protection method is normal, in other words, when the protection strength is equal to the second threshold value, the period determination unit 104 calculates the distribution start date and the distribution end date according to the following equations.

Distribution start date = screening end date + 1 day Distribution end date = sales start date−1 day When the copyright protection method is extremely weak, in other words, when the protection strength is smaller than the first threshold, the period determination unit 104 determines the distribution period. Set to zero day.

When the copyright protection method is weak, in other words, when the protection strength is equal to or greater than the first threshold value and the protection strength is less than the second threshold value, the period determination unit 104 performs distribution according to the following equation: Calculate the start date and delivery end date.

Distribution start date = Screening end date + 10 days Distribution end date = Sales start date−10 days When the copyright protection method is strong and the protection strength is greater than the second threshold, the period determination unit 104 calculates the distribution start date according to the following formula: And the distribution end date is calculated.

Distribution start date = Screening end date-10 days Distribution end date = Sales start date + 10 days (Specific example of calculation of distribution period)
Here, the calculation of the distribution period by the period determination unit 104 of the content creator device 100 will be described using a specific example. In the following example, “A country” is a first release country, and “B country” and “C country” are each a second release country.

(A) First Example FIG. 7 shows a screening period 171 and a sales period 172 in “country A”, and distribution periods 173 and 174 in “country B” and “country C”. In this figure, the vertical axis indicates “Country A”, “Country B”, and “Country C”, and the horizontal axis indicates the passage of time from January to December 2012.

As shown in this figure, the screening period 171 of a certain content in “Country A” is determined to be from the screening start date “January 1, 2012” to the screening end date “March 9, 2012”. Suppose that Further, it is assumed that the start date of the sales period 172 of the content package is determined to be the sales start date “September 10, 2012”.

Also, “B country” and “C country” are designated as the second release countries for the content. In “Country B” and “Country C”, the copyright protection method for protecting the content is the one identified by “A”.

The content creator apparatus 100 distributes the distribution periods 173 and 174 in “B country” and “C country” after the screening end date “March 9, 2012” and the sales start date “September 10, 2012”, respectively. Within the period before "." Specifically, the content creator device 100 calculates the distribution periods 173 and 174 from the distribution start date “March 10, 2012” to the distribution end date “September 9, 2012”, respectively. .

As shown in this example, distribution periods 173 and 174 are set before the sales period 172. For this reason, before the package manufactured based on the illegal content acquired from the package sold in the sales period 172 is distributed in the second release country, it can be distributed via the network. In this way, illegal distribution of packages in the second release country can be suppressed.

(B) Second Example FIG. 8 shows a screening period 171a and a sales period 172a in “Country A”, and distribution periods 173a and 174a in “Country B” and “Country C”. In this figure, as in FIG. 7, the vertical axis indicates “Country A”, “Country B”, and “Country C”, and the horizontal axis indicates the passage of time.

As shown in FIG. 8, it is determined that the screening period 171a of a certain content in “Country A” is from the screening start date “January 1, 2012” to the screening end date “March 9, 2012”. Suppose that Further, it is assumed that the start date of the sales period 172a of the content package is determined to be the sales start date “September 10, 2012”.

Also, “B country” and “C country” are designated as the second release countries for the content. In “Country B” and “Country C”, the copyright protection method for protecting the content is the one identified by “B”.

Here, it is assumed that the content protection by the copyright protection method “B” is stronger than the content protection by the copyright protection method “A”.

The content creator device 100 sets the distribution period 173a in “Country B” from the date “February 28, 2012” prior to the screening end date “March 9, 2012” to the sales start date “September 2012”. The calculation is made until the day “September 20, 2012” after “10th”. That is, the distribution period 173a is calculated from the distribution start date “February 28, 2012” to the distribution end date “September 20, 2012”.

Similarly, the content creator device 100 calculates the distribution period 174a in “C country” from the distribution start date “February 28, 2012” to the distribution end date “September 20, 2012”.

As shown in this example, distribution periods 173a and 174a including a period before the sales period 172a are set. For this reason, before the package manufactured based on the illegal content acquired from the package sold in the sales period 172a is distributed in the second release country, it can be distributed via the network. In this way, illegal distribution of packages in the second release country can be suppressed.

Also, content protection by the copyright protection method “B” is stronger than content protection by the copyright protection method “A”. For this reason, even if it is a case where the screening period 171a and the delivery period 173a overlap, possibility that the delivered content will distribute | circulate illegally can be suppressed low. For this reason, the audience in theaters and movie theaters during the screening period does not decrease, and the overlap between the screening period 171a and the distribution period 173a does not affect the screening.

Moreover, even if the distribution period 173a and the sales period 172a overlap, the possibility that the distributed content will be illegally distributed can be kept low. For this reason, the overlap between the distribution period 173a and the sales period 172a does not affect the sales of the package.

The same applies to the delivery period 174a.

(C) Third Example FIG. 9 shows a screening period 171b and a sales period 172b in “A country”, and distribution periods 173b and 174b in “B country” and “C country”. In this figure, as in FIG. 7, the vertical axis indicates “Country A”, “Country B”, and “Country C”, and the horizontal axis indicates the passage of time.

As shown in FIG. 9, it is determined that the screening period 171b of a certain content in “Country A” is from the screening start date “January 1, 2012” to the screening end date “March 9, 2012”. Suppose that Further, it is assumed that the start date of the sales period 172b of the content package is determined to be the sales start date “September 10, 2012”.

Also, “B country” and “C country” are designated as the second release countries for the content. In “Country B” and “Country C”, a copyright protection method for protecting the content is identified by “C”.

Here, it is assumed that content protection by the copyright protection method “C” is weaker than content protection by the copyright protection method “A”.

The content creator device 100 sets the distribution period 173b in “Country B” from the date “March 19, 2012” after the screening end date “March 9, 2012” to the sales start date “September 2012”. The calculation is made until “August 31, 2012” before “10th”. That is, the distribution period 173b is calculated to be from the distribution start date “March 19, 2012” to the distribution end date “August 31, 2012”.

Similarly, the content creator apparatus 100 calculates that the distribution period 174b in “C country” is from the distribution start date “March 19, 2012” to the distribution end date “August 31, 2012”.

As shown in this example, distribution periods 173b and 174b including a period before the sales period 172b are set. For this reason, before the package manufactured based on the illegal content acquired from the package sold in the sales period 172b is distributed in the second release country, it can be distributed via the network. In this way, illegal distribution of packages in the second release country can be suppressed.

Also, content protection by the copyright protection method “C” is weaker than content protection by the copyright protection method “A”. Here, there is no overlapping period between the screening period 171b and the distribution period 173b. Even if the content distributed during the distribution period 173b flows out illegally, the distributed content will not be distributed illegally during the screening period 171b. For this reason, the audience in theaters and movie theaters during the screening period will not decrease.

The same applies to the delivery period 174a.

(D) Fourth Example FIG. 10 shows a screening period 171c and a sales period 172c in “A country”, and distribution periods 173c and 174c in “B country” and “C country”. In this figure, as in FIG. 7, the vertical axis indicates “Country A”, “Country B”, and “Country C”, and the horizontal axis indicates the passage of time.

As shown in FIG. 10, a screening period 171c of a certain content in “Country A” is determined to be from a screening start date “January 1, 2012” to a screening end date “March 9, 2012”. Suppose that Further, it is assumed that the start date of the sales period 172c of the content package is determined to be the sales start date “September 10, 2012”.

Also, “B country” and “C country” are designated as the second release countries for the content. In “B country”, a copyright protection method for protecting the content is to be identified by “A”. Also, in “C country”, a copyright protection method for protecting the content is to be identified by “C”.

As in the case shown in FIG. 7, the content creator device 100 sets the distribution period 173c in “Country B” from the distribution start date “March 10, 2012” to the distribution end date “September 9, 2012”. It is calculated that

Similarly to the case illustrated in FIG. 9, the content creator device 100 changes the distribution period 174 c in “C country” from the distribution start date “March 19, 2012” to the distribution end date “August 31, 2012”. ”Is calculated.

Thus, when different copyright protection methods are used in each of the plurality of second release countries, the distribution period is calculated depending on each copyright protection method.

(7) Input / output unit 105
The input / output unit 105 writes data into the data storage unit 106 and reads data from the data storage unit 106 according to instructions and control from the control unit 103, the period determination unit 104, and the cryptographic signature unit 109.

(8) Authentication unit 107
The authentication unit 107 uses the private key, public key, first authentication key, and public key certificate stored in the key storage unit 108 to perform mutual authentication processing and key sharing processing with the content distribution apparatus 200. I do.

Here, in mutual authentication processing and key sharing processing, publicly known techniques such as ECDSA (Elliptic Curve Digital Signature Algorithm), ECDH (Elliptic Curve Diffie-Hellman), or AES (Advanced Encryption Standard) can be used. Explanation here is omitted.

The authentication unit 107 generates a shared key in the key sharing process. At this time, the authentication unit of the mutual authentication partner device also generates the same shared key as the shared key generated by the authentication unit 107.

(9) Cryptographic signature unit 109
The encryption signature unit 109 encrypts the content using the shared key. As a result, encrypted content is generated, and the generated encrypted content is output to the communication unit 110.

Also, the cryptographic signature unit 109 digitally signs the encrypted content using the private key of the content creator device 100. As a result, signature data is generated, and the generated signature data is output to the communication unit 110.

(10) Communication unit 110
The communication unit 110 establishes a connection with the content distribution apparatus 200 via the network 20. Next, information is received from the control unit 103, the authentication unit 107, and the cryptographic signature unit 109, and the received information is transmitted to the content distribution apparatus 200 via the network 20. Further, the communication unit 110 receives information from the content distribution apparatus 200 via the network 20 and outputs the received information to the control unit 103, the authentication unit 107, and the cryptographic signature unit 109.

2.3 Content distribution apparatus 200
As shown in FIG. 11, the content distribution apparatus 200 includes a communication unit 201, a data storage unit 202, a content key generation unit 203, an input / output unit 204, a date and time acquisition unit 205, a region specification unit 206, a distribution determination unit 207, and a control unit. 208, an authentication unit 209, a key storage unit 210, and an encryption signature unit 211.

Note that the content distribution apparatus 200 is specifically a computer system including a memory device including a microprocessor, RAM and ROM, a hard disk device, a network connection device, and the like. A computer program is stored in the memory device or the hard disk device, and the content distribution apparatus 200 functions as the microprocessor operates according to the program.

Here, the input / output unit 204 and the data storage unit 202 are constituted by hard disk devices. The key storage unit 210 is configured by a memory device. The content key generation unit 203, the date and time acquisition unit 205, the region identification unit 206, the distribution determination unit 207, the control unit 208, the authentication unit 209, and the cryptographic signature unit 211 are configured by a computer program stored in a microprocessor and a memory device. Yes. The communication unit 201 is composed of a network connection device.

However, it is not limited to these configurations. For example, the authentication unit 209, the key storage unit 210, and the cryptographic signature unit 211 may be configured by a dedicated hardware circuit.

Note that the communication unit 201, content key generation unit 203, input / output unit 204, date and time acquisition unit 205, region specifying unit 206, distribution determination unit 207, control unit 208, authentication unit 209, key storage unit 210, content distribution device 200, Each functional block of the cryptographic signature unit 211 is typically realized as an LSI that is an integrated circuit. These may be individually made into one chip, or may be made into one chip so as to include one or more components or a part of each component. Each functional block may be realized as an IC, a system LSI, a super LSI, or an ultra LSI.

Further, the method of circuit integration is not limited to LSI's, and implementation using dedicated circuitry or general purpose processors is also possible. An FPGA (Field Programmable Gate Array) that can be programmed after manufacturing the LSI or a reconfigurable processor that can reconfigure the connection and setting of circuit cells inside the LSI may be used.

Furthermore, if integrated circuit technology that replaces LSI emerges as a result of advances in semiconductor technology or other derived technology, it is naturally also possible to integrate functional blocks using this technology.

Each function block may be realized by software. Further, it may be realized by a combination of LSI and software. Furthermore, the software may be tamper resistant.

(1) Data storage unit 202
As shown in FIG. 11, the data storage unit 202 stores a plurality of encrypted contents 231,..., A plurality of content keys 232,.

The plurality of encrypted contents 231,... Correspond to the plurality of content keys 232,.

(Encrypted content and content key)
Each encrypted content is generated by encrypting the content received from the content creator device 100 using the content key generated by the content key generation unit 203.

Each content key is a key generated by the content key generation unit 203 corresponding to the content received from the content creator device 100.

(Delivery period table 240)
As an example, the delivery period table 240 includes a plurality of delivery period information as shown in FIG. Each of the plurality of distribution period information corresponds to a plurality of encrypted contents stored in the data storage unit 202.

Delivery period information is information given to each content. The distribution period information is transmitted from the content creator device 100.

Delivery period information includes a content ID and one or more pieces of delivery information.

The content ID is identification information for uniquely identifying the content.

Distribution information corresponds to the second release country. Each piece of distribution information includes a distribution period, a distribution region ID, and a copyright protection method ID.

Delivery period includes delivery start date and delivery end date. The distribution start date and the distribution end date indicate the date when content distribution starts and the date when it ends in the second release country, respectively. The distribution start date and the distribution end date are represented by year, month, and date, respectively.

The distribution area ID is identification information for identifying the second release country where the content is distributed.

The copyright protection method ID is identification information for identifying the copyright protection method for protecting the content in the second release country.

12 includes a plurality of pieces of distribution period information including content IDs “ABC123”, “PPP”, “XYZ”, and so on. In addition, the distribution period table 240 includes distribution period information 250 as an example.

The distribution period information 250 includes a content ID (241) “ABC123”, a distribution start date 242 “2012/03/10”, a distribution end date 243 “2012/09/09”, a distribution area ID (244) “B01” Rights protection method ID (245) “A”, distribution start date 246 “2012/03/10”, distribution end date 247 “2012/09/09”, distribution area ID (248) “C01”, copyright protection method ID (249) Includes “A”.

Here, the distribution period information 250 indicates the distribution period of the content identified by the content ID (241) “ABC123”, the distribution area, and the copyright protection method used in the area. The distribution areas of the content are two areas identified by “B01” and “C01”. These regions are second release countries. In each region, the distribution period of the content is from “2012/03/10” to “2012/09/09”. Further, in each region, the content is protected by a copyright protection method identified by the copyright protection method ID “A”.

Here, the copyright protection method corresponding to the content is a copyright protection method corresponding to the terminal device 300 or the recording medium device 400 or a copyright protection method provided in the terminal device 300 or the recording medium device 400. In the mutual authentication process with the terminal device 300 and the recording medium device 400, the content distribution device 200 determines whether the terminal device 300 and the recording medium device 400 are compatible with the copyright protection method. The content is distributed only to the terminal device 300 or the recording medium device 400 that supports the copyright protection method.

Here, the distribution period may include a first period in which the content is distributed and a second period in which the content is downloaded and distributed.

As described above, the data storage unit 202 stores the distribution period in association with the region and the content in the distribution period table 240. In addition, system identification information indicating the copyright protection system of the content in the area is stored in association with the area and the content.

(2) Key storage unit 210
The key storage unit 210 stores a private key and a public key of the content distribution device 200. The key storage unit 210 stores a first authentication key for authentication and key sharing between the content distribution device 200 and the content creator device 100. Further, a second authentication key for authentication and key sharing between the content distribution device 200 and the recording medium device 400 is stored.

Further, the key storage unit 210 stores the public key certificate of the content creator device 100, the public key certificate of the terminal device 300, and the public key certificate of the recording medium device 400.

Here, the public key certificate of the content creator device 100 corresponds to the public key of the content creator device 100, identification information identifying the public key, other information, and the identification information, public key, and other information. Signature data generated by applying a digital signature.

The public key certificate of the terminal device 300 applies a digital signature to the public key of the terminal device 300, identification information for identifying the public key, other information, and the identification information, the public key, and other information. The signature data generated in this way is included.

Further, the public key certificate of the recording medium device 400 includes a digital signature for the public key of the recording medium device 400, identification information for identifying the public key, other information, and the identification information, public key, and other information. The signature data generated by applying is included.

(3) Authentication unit 209
The authentication unit 209 uses the private key, public key, first authentication key, second authentication key, and public key certificate stored in the key storage unit 210 to communicate with the content creator device 100 and the recording medium device 400. Mutual authentication processing and key sharing processing are performed.

Here, in mutual authentication processing and key sharing processing, known techniques such as ECDSA, ECDH, and AES can be used, and the description thereof is omitted here.

The authentication unit 209 generates a shared key in the key sharing process. At this time, the authentication unit of the mutual authentication partner device also generates the same shared key as the shared key generated by the authentication unit 209.

When the authentication unit 209 performs mutual authentication with the authentication unit 407 of the recording medium device 400 in addition to the above authentication processing, whether the copyright protection methods match each other as follows. Confirm whether or not.

The authentication unit 209 extracts the copyright protection method ID from the distribution period information. Further, the copyright protection method ID is received from the authentication unit 407 of the recording medium device 400. Next, the authentication unit 209 determines whether or not the extracted copyright protection method ID matches the received copyright protection method ID. If they do not match, it is assumed that authentication has failed.

(4) Cryptographic signature unit 211
The cryptographic signature unit 211 uses the shared key generated by the authentication unit 209 to decrypt the encrypted content. As a result, content is generated. Further, the content is encrypted using the content key generated by the content key generation unit 203. As a result, encrypted content is generated. The generated encrypted content is written into the data storage unit 202 via the control unit 208 and the input / output unit 204.

Also, the cryptographic signature unit 109 verifies the digital signature on the signature data using the public key of the content distribution apparatus 200. Next, the verification result is output to the control unit 208. The verification result is either a verification success or a verification failure. As a result, signature data is generated, and the generated signature data is output to the communication unit 110.

(5) Area identification unit 206
The region specifying unit 206 acquires information on a geographical location such as a country or region in which the terminal device 300 that is a content request source is located.

Here, the area specifying unit 206 may specify the area where the terminal device 300 exists based on the IP address of the terminal device 300. In addition, a region identifier indicating a region where the terminal device 300 exists may be received from the terminal device 300, and the region where the terminal device 300 exists may be specified using the received region identifier.

(6) Date and time acquisition unit 205
The date and time acquisition unit 205 obtains information (year, month, day, hour, minute, and second) on the date and time (current time) when the content request is transmitted by the terminal device 300, and the geographical location where the terminal device 300 exists. Based on information, it is acquired from a date / time (time) server or the like. Further, it may be calculated from the time difference between the date and time information of the position information where the content distribution device 200 is located.

As described above, the date acquisition unit 205 acquires the current time from the date server based on the area specified by the area specifying unit 206.

Further, the date acquisition unit 205 calculates a time difference between the specified area and the area where the content distribution apparatus 200 exists, and uses the calculated time difference and the current time of the area where the content distribution apparatus 200 exists. You may calculate the present time of the area where 300 exists.

(7) Distribution determination unit 207
The distribution determination unit 207 determines whether or not the distribution period table 240 includes a distribution period corresponding to the area ID that identifies the area specified by the area specifying unit 206 and the content ID that identifies the content that is the target of the transmission request. to decide. If it is determined that the content is not included, the distribution determination unit 207 rejects the transmission of the content.

When the distribution period corresponding to the area ID and the content ID is included in the distribution period table 240, the distribution determining unit 207 corresponds to the acquired current time corresponding to the area ID and the content ID as described below. It is determined whether or not it is included in the distribution period. If it is determined that the content is not included, transmission of the content is rejected. On the other hand, when it is determined that the content is included, the transmission of the content is permitted.

The distribution determination unit 207 includes the geographical position information acquired by the area specifying unit 206, the date information acquired by the date acquisition unit 205, and the distribution period included in the distribution period table 240 stored in the data storage unit 202. To determine whether or not the request satisfies the permitted conditions. In addition, based on the result of the authentication process by the authentication unit 209, it is determined whether to distribute the content in response to a request from the terminal device 300.

In addition, the distribution determination unit 207 determines whether the current time is included in the first period or the second period within the distribution period, and permits the streaming distribution when included in the first period. However, when it is included in the second period, download distribution may be permitted.

Also, the distribution determination unit 207 rejects transmission of content when the authentication unit 209 determines that the extracted copyright protection method ID and the received copyright protection method ID do not match.

(8) Communication unit 201
The communication unit 201 receives content requests, data related to authentication processing, and the like from the terminal device 300. In addition, data, content, and the like related to the authentication process are transmitted to the terminal device 300.

The communication unit 201 transmits content when content transmission is permitted.

In addition, the communication unit 201 may perform streaming distribution of content or download distribution of content according to the permission from the distribution determination unit 207.

2.4 Configuration of Terminal Device 300 As shown in FIG. 13, the terminal device 300 includes a communication unit 301, an output unit 302, a playback unit 303, an input unit 304, a control unit 305, an authentication unit 306, a key storage unit 307, an encryption unit. It consists of a signature unit 308 and a connection unit 309.

The terminal device 300 is specifically a computer system including a memory device including a microprocessor, a RAM and a ROM, a network connection device, an IO connection device, a liquid crystal display, a speaker, an input device including a numeric keypad, and the like. . A computer program is stored in the memory device, and the terminal device 300 functions as the microprocessor operates according to the program.

Here, the key storage unit 307 is configured by a memory device. The output unit 302 includes a liquid crystal display and a speaker. The input unit 304 includes an input device. The reproduction unit 303, the control unit 305, the authentication unit 306, and the cryptographic signature unit 308 are configured by a computer program stored in a microprocessor and a memory device. The communication unit 301 is configured by a network connection device. Further, the connection unit 309 is configured by an IO connection device.

However, it is not limited to these configurations. For example, the authentication unit 306, the key storage unit 307, and the cryptographic signature unit 308 may be configured by dedicated hardware circuits.

Note that each functional block of the communication unit 301, the reproduction unit 303, the control unit 305, the authentication unit 306, the key storage unit 307, and the cryptographic signature unit 308 of the terminal device 300 is typically realized as an LSI that is an integrated circuit. The These may be individually made into one chip, or may be made into one chip so as to include one or more functional blocks or a part of each functional block. Each functional block may be realized as an IC, a system LSI, a super LSI, or an ultra LSI.

Further, the method of circuit integration is not limited to LSI's, and implementation using dedicated circuitry or general purpose processors is also possible. An FPGA (Field Programmable Gate Array) that can be programmed after manufacturing the LSI or a reconfigurable processor that can reconfigure the connection and setting of circuit cells inside the LSI may be used.

Furthermore, if integrated circuit technology that replaces LSI emerges as a result of advances in semiconductor technology or other derived technology, it is naturally also possible to integrate functional blocks using this technology.

Each function block may be realized by software. Further, it may be realized by a combination of LSI and software. Furthermore, the software may be tamper resistant.

(1) Key storage unit 307
The key storage unit 307 stores a private key and a public key of the terminal device 300. The key storage unit 307 stores a third authentication key for authentication and key sharing between the terminal device 300 and the recording medium device 400.

In addition, the key storage unit 307 stores the public key certificate of the recording medium device 400.

Here, the public key certificate of the recording medium device 400 is digital for the public key of the recording medium device 400, identification information for identifying the public key, other information, and the identification information, the public key, and other information. Includes signature data generated by applying a signature.

(2) Input unit 304
The input unit 304 accepts content specification by the user from a content list (not shown) displayed by the output unit 302. The content that has received the designation is the content that is the target of a transmission request to the content distribution device 200. The input unit 304 receives a content ID that identifies the specified content, and outputs the received content ID to the control unit 305.

(3) Control unit 305
The control unit 305 receives the content ID from the input unit 304. When the content ID is received, control is performed so that the content distribution request and the received content ID are transmitted to the content distribution apparatus 200 via the communication unit 301 and the network 20.

Further, the control unit 305 receives the encrypted content key, the double encrypted content, and the signature data from the communication unit 301. When the encrypted content key, the double encrypted content, and the signature data are received, the received encrypted content key, the double encrypted content, and the signature data are output to the recording medium device 400 via the connection unit 309. .

(4) Communication unit 301
The communication unit 301 receives a content distribution request and a content ID from the control unit 305. When the content distribution request and the content ID are received, the content distribution request and the content ID are transmitted to the content distribution apparatus 200 via the network 20.

Also, the communication unit 301 receives the encrypted content key, the double encrypted content, and the signature data from the content distribution device 200 via the network 20. When the encrypted content key, the double encrypted content, and the signature data are received, the received encrypted content key, the double encrypted content, and the signature data are output to the control unit 305.

Further, when performing content charging processing, the communication unit 301 receives information related to charging from the content distribution apparatus 200. In addition, information related to charging is transmitted to the content distribution apparatus 200.

Further, when mutual authentication processing and key sharing processing are performed between the content distribution device 200 and the recording medium device 400, the communication unit 301 receives information on mutual authentication processing and key sharing processing from the content distribution device 200. Receive. Also, information regarding mutual authentication processing and key sharing processing is transmitted to the content distribution apparatus 200.

In addition, the communication unit 301 transmits and receives information between the content distribution device 200 and each component in the terminal device 300.

(5) Authentication unit 306
The authentication unit 306 uses the private key, the public key, the third authentication key, and the public key certificate stored in the key storage unit 307 to perform mutual authentication processing between the terminal device 300 and the recording medium device 400. And key sharing processing.

Here, in mutual authentication processing and key sharing processing, known techniques such as ECDSA, ECDH, and AES can be used, and the description thereof is omitted here.

The authentication unit 306 generates a shared key in the key sharing process. At this time, the authentication unit of the mutual authentication partner device also generates the same shared key as the shared key generated by the authentication unit 306.

(6) Cryptographic signature unit 308
The cryptographic signature unit 308 receives signature data from the connection unit 309 under the control of the control unit 305. When the signature data is received, the signature data is verified using the public key included in the public key certificate of the recording medium device 400 stored in the key storage unit 307. The verification result is output to the control unit 305. The verification result indicates either success or failure of the verification of the signature data.

The cryptographic signature unit 308 receives the double encrypted content and the encrypted content key from the connection unit 309 under the control of the control unit 305 when the verification of the signature data is successful. Upon receiving the double encrypted content and the encrypted content key, the cryptographic signature unit 308 uses the shared key generated by the authentication unit 306 to decrypt the double encrypted content. As a result, encrypted content is generated. Further, the encrypted content key is decrypted using the shared key generated by the authentication unit 306. As a result, a content key is generated. Further, the encrypted content is decrypted using the generated content key. As a result, content is generated. The generated content is output to the playback unit 303.

(7) Playback unit 303 and output unit 302
The playback unit 303 receives the content generated by decryption from the encryption signature unit 308, and performs a decoding process on the received content. The resulting video signal and audio signal are output to the output unit 302.

The output unit 302 receives the video signal and the audio signal from the reproduction unit 303, displays the received video signal as video, and outputs the audio signal as audio.

2.5 Recording medium device 400
As illustrated in FIG. 14, the recording medium device 400 includes a connection unit 401, a memory unit 402, and a controller 403. The memory unit 402 includes a storage unit 404 and an input / output unit 405. The storage unit 404 includes a normal area 410 and a protected area 411. The controller 403 includes a control unit 406, an authentication unit 407, a key storage unit 408, and an encryption signature unit 409.

The controller 403 is specifically a computer system including a memory device including a microprocessor, RAM, and ROM. A computer program is stored in the memory device, and the controller 403 functions as the microprocessor operates according to the program.

Here, the key storage unit 408 is configured by a memory device. The control unit 406, the authentication unit 407, and the cryptographic signature unit 409 are configured by a computer program stored in a microprocessor and a memory device.

However, it is not limited to these configurations. For example, the authentication unit 407, the key storage unit 408, and the cryptographic signature unit 409 may be configured by a dedicated hardware circuit.

Note that the functional blocks of the control unit 406, the authentication unit 407, the key storage unit 408, and the cryptographic signature unit 409 of the controller 403 are typically realized as an LSI that is an integrated circuit. These may be individually made into one chip, or may be made into one chip so as to include one or more functional blocks or a part of each functional block. Each functional block may be realized as an IC, a system LSI, a super LSI, or an ultra LSI.

Further, the method of circuit integration is not limited to LSI's, and implementation using dedicated circuitry or general purpose processors is also possible. An FPGA (Field Programmable Gate Array) that can be programmed after manufacturing the LSI or a reconfigurable processor that can reconfigure the connection and setting of circuit cells inside the LSI may be used.

Furthermore, if integrated circuit technology that replaces LSI emerges as a result of advances in semiconductor technology or other derived technology, it is naturally also possible to integrate functional blocks using this technology.

Each function block may be realized by software. Further, it may be realized by a combination of LSI and software. Furthermore, the software may be tamper resistant.

Here, the recording medium device 400 may be a storage device that can be attached to and detached from the terminal device 300, for example, a memory card. Further, the recording medium device 400 may be incorporated in or incorporated in the terminal device 300. Furthermore, the recording medium device 400 may have a configuration in which a controller and a flash memory are integrated.

(1) Storage unit 404
The storage unit 404 includes a normal area 410 and a protected area 411.

The normal area 410 is an area where the user can freely write information or read information. In the normal area 410, encrypted content 421 is stored as an example.

The protected area 411 is an area where information can be written or read only by the access device when mutual authentication between the access device to the recording medium device 400 and the recording medium device 400 succeeds. It is. Here, an example of the access device is the terminal device 300.

(2) Input / output unit 405
The input / output unit 405 relays input / output of information between the storage unit 404 and the controller 403.

The input / output unit 405 reads information from the storage unit 404 in response to a read instruction from the controller 403 and outputs the read information to the controller 403. Also, information is received from the controller 403, and the information received from the controller 403 is written into the storage unit 404 in response to a write instruction from the controller 403.

(3) Connection unit 401
The connection unit 401 is connected to the terminal device 300. The connection unit 401 relays transmission / reception of information between the controller 403 and the terminal device 300.

(4) Control unit 406
The control unit 406 controls the authentication unit 407, the key storage unit 408, and the cryptographic signature unit 409 included in the controller 403.

(5) Key storage unit 408
The key storage unit 408 stores a private key and a public key of the recording medium device 400. The key storage unit 408 stores a second authentication key for authentication and key sharing between the recording medium device 400 and the content distribution device 200. Also, a third authentication key for authentication and key sharing between the recording medium device 400 and the terminal device 300 is stored.

Also, the key storage unit 408 stores the public key certificate of the content distribution apparatus 200. The public key certificate of the content distribution apparatus 200 applies a digital signature to the public key of the content distribution apparatus 200, identification information for identifying the public key, other information, and the identification information, public key, and other information. The signature data generated in this way is included.

Furthermore, the key storage unit 408 stores the public key certificate of the terminal device 300. The public key certificate of the terminal device 300 is generated by applying a digital signature to the public key of the terminal device 300, identification information identifying the public key, other information, and the identification information, public key, and other information. Contains signed data.

(6) Authentication unit 407
The authentication unit 407 uses the private key, the public key, the first authentication key, the third authentication key, and the public key certificate stored in the key storage unit 408 between the content distribution apparatus 200 and the recording medium apparatus 400. In addition, mutual authentication processing and key sharing processing are performed between the terminal device 300 and the recording medium device 400, respectively.

Here, in mutual authentication processing and key sharing processing, known techniques such as ECDSA, ECDH, and AES can be used, and the description thereof is omitted here.

The authentication unit 407 generates a shared key in the key sharing process. At this time, the authentication unit of the mutual authentication partner device also generates the same shared key as the shared key generated by the authentication unit 407.

Further, the authentication unit 407 stores a copyright protection method ID for identifying a copyright protection method applied to the recording medium device 400. The authentication unit 407 reads the stored copyright protection method ID. Next, the authentication unit 407 outputs the read copyright protection method ID to the authentication unit 209.

(7) Cryptographic signature unit 409
The cryptographic signature unit 409 receives the double encrypted content, the encrypted content key, and the signature data from the content distribution device 200 via the terminal device 300.

The cryptographic signature unit 409 verifies the signature data received from the content distribution device 200 via the terminal device 300. As a result, the verification result is output to the control unit 406. The verification result indicates either the success or failure of the verification.

When the received signature data is successfully verified, the encryption signature unit 409 uses the shared key generated by the authentication unit 407 to decrypt the double encrypted content under the control of the control unit 406. As a result, encrypted content is generated. Next, the encryption signature unit 409 decrypts the encrypted content key using the shared key generated by the authentication unit 407. As a result, a content key is generated. Next, the cryptographic signature unit 409 writes the encrypted content in the normal area 410 via the input / output unit 405. In addition, the content key is written in the protection area 411 via the input / output unit 405.

The cryptographic signature unit 409 receives the encrypted content and the content key from the input / output unit 405.

Upon receiving the encrypted content, the cryptographic signature unit 409 encrypts the encrypted content using the shared key generated by the authentication unit 407 under the control of the control unit 406. As a result, double encrypted content is generated. Next, the double encrypted content is output to the terminal device 300 via the connection unit 401 under the control of the control unit 406.

Upon receiving the content key, the encryption signature unit 409 encrypts the content key using the shared key generated by the authentication unit 407 under the control of the control unit 406. As a result, an encrypted content key is generated. Next, the encrypted content key is output to the terminal device 300 via the connection unit 401 under the control of the control unit 406.

2.6 Operation of Early Window Content Distribution System 10 The operation of the early window content distribution system 10 will be described.

(1) Operation of Content Transmission and Period Information Processing in Content Creator Device 100 The operation of content transmission and period information processing in the content creator device 100 will be described with reference to the flowchart shown in FIG.

The input unit 102 inputs a content ID, a button 182 for transmitting the content, a button 183 for writing and updating period information, a button 184 for setting a distribution period, and transmitting a distribution information. The pressing of any one of the button 185 and the button 186 for ending the process is accepted (step S101).

When the button 182 for content transmission is pressed (“YES” in step S102), the control unit 103 controls to transmit / receive the content (step S103). When the button 182 for content transmission is not pressed (“NO” in step S102), the control is transferred to step S104.

When the button 183 for writing and updating period information is pressed (“YES” in step S104), the control unit 103 controls to write and update period information (step S105). When the button 183 for writing and updating the period information is not pressed (“NO” in step S104), the control is transferred to step S106.

When the button 184 for setting the delivery period is pressed (“YES” in step S106), the control unit 103 controls to set the delivery period (step S107). When the button 184 for setting the distribution period is not pressed (“NO” in step S106), the control is transferred to step S108.

When the button 185 for transmission / reception of the distribution period is pressed (“YES” in step S108), the control unit 103 controls transmission / reception of the distribution period (step S109). If the button 185 for transmission / reception of the distribution period is not pressed (“NO” in step S108), the control is transferred to step S110.

When the button 186 for ending the process is pressed (“YES” in step S110), the content creator device 100 ends the process. When the button 186 for ending the process is not pressed (“NO” in step S110), the process returns to step S101 and the process is repeated.

(2) Content Transmission / Reception Operation The operation of transmitting / receiving content between the content creator device 100 and the content distribution device 200 will be described with reference to sequence diagrams shown in FIGS. The following operations are details of step S103 in FIG. Here, the content creator device 100 and the content distribution device 200 establish a secure communication path and perform data transmission / reception.

The control unit 103 reads the content identified by the content ID received from the input unit 102 from the data storage unit 106 via the input / output unit 105 (step S131).

Next, the authentication unit 107 of the content creator device 100 and the authentication unit 209 of the content distribution device 200 perform mutual authentication and key sharing (step S132).

When authentication by the authentication unit 107 fails (“failure” in step S133), the control unit 103 generates a message indicating that. Next, the generated message is output to the display unit 101. The display unit 101 displays the message (step S134). Next, the control unit 103 ends the content transmission / reception operation.

If authentication by the authentication unit 209 fails (“failure” in step S135), the control unit 208 generates a message indicating that. Next, the generated message is output to the display unit of the content distribution apparatus 200 (not shown). The display unit displays the message (step S136). Next, the control unit 208 ends the content transmission / reception operation.

If the authentication by the authentication unit 107 is successful (“success” in step S133), the control unit 103 instructs the encryption signature unit 109 to perform encryption. The encryption signature unit 109 encrypts the read content using the shared key generated by the authentication unit 209. Thus, the encryption signature unit 109 generates encrypted content (step S137).

Encrypted content = Enc (shared key, content)
Here, C = Enc (Ksc, A) is a ciphertext generated by applying the encryption algorithm Enc to the plaintext A using the secret key Ksc. Here, the encryption algorithm E is an AES encryption algorithm as an example.

Next, the control unit 103 instructs the cryptographic signature unit 109 to generate signature data. The cryptographic signature unit 109 applies a digital signature to the encrypted content using the private key of the content creator device stored in the key storage unit 108. Thus, the cryptographic signature unit 109 generates signature data (step S138).

Signature data = Sign (private key of content creator device, encrypted content)
Here, S = Sign (Kpr, B) is signature data generated by applying a digital signature Sign to data B using the private key Kpr. Here, as an example, the digital signature Sign is a digital signature algorithm based on ECDSA.

The communication unit 110 transmits the encrypted content and signature data to the content distribution apparatus 200 via the network 20 (step S139).

The communication unit 201 receives the encrypted content and signature data from the content creator device 100 via the network 20 (step S139).

The cryptographic signature unit 211 reads the public key certificate of the content creator device 100 from the key storage unit 210 and extracts the public key from the read public key certificate. Next, the cryptographic signature unit 211 performs digital signature verification of the received encrypted content and signature data using the extracted public key (step S140).

Verification result = Vrfy (public key, encrypted content, signature data)
Here, R = Vrfy (Kpu, B, S) is a verification result obtained by applying signature verification Vrfy to data B and signature data S using the public key Kpu. The verification result indicates either success or failure.

When verification by the cryptographic signature unit 211 fails (“failure” in step S141), the control unit 208 generates a message indicating that. Next, the generated message is output to the display unit of the content distribution apparatus 200 (not shown). The display unit displays the message (step S142). Next, the control unit 208 ends the content transmission / reception operation.

When the verification by the cryptographic signature unit 211 is successful (“success” in step S141), the cryptographic signature unit 211 decrypts the received encrypted content using the shared key generated by the authentication unit 209. Thus, the cryptographic signature unit 211 generates plaintext content (step S143).

Plain text content = Dec (shared key, encrypted content)
Here, D = Dec (Ksc, C) is a decrypted text generated by applying the decryption algorithm Dec to the ciphertext C using the secret key Ksc. Here, the decoding algorithm Dec is, for example, a decoding algorithm based on AES.

Next, the content key generation unit 203 generates a content key (step S144). The content key generation unit 203 randomly generates a 128-bit bit string, and uses the generated bit string as a content key. Next, the content key generation unit 203 writes the generated content key into the data storage unit 202 via the input / output unit 204 (step S145).

Next, the encryption signature unit 211 encrypts the generated content using the content key generated by the content key generation unit 203. Thus, encrypted content is generated (step S146).

Encrypted content = Enc (content key, content)
Next, the cryptographic signature unit 211 writes the generated encrypted content into the data storage unit 202 via the input / output unit 204 (step S147).

Thereby, the operation of transmitting / receiving content between the content creator device 100 and the content distribution device 200 is terminated.

(3) Period Information Writing and Updating Operations Period information writing and updating operations in the period information table 130 will be described with reference to the flowchart shown in FIG. The following operation is details of step S105 in FIG.

The control unit 103 receives the content ID from the input unit 102. Next, the period information including the content ID is retrieved from the period information table 130 of the data storage unit 106 via the input / output unit 105 (step S161).

When the period information including the content ID exists in the period information table 130 (“Yes” in step S162), the control unit 103 reads the period information (step S163). Next, each item included in the read period information is displayed in the corresponding field of the screen 800 shown in FIG. 6 (step S164). Next, the input unit 102 receives an input in each input field (step S165).

Next, when a button 806 for writing and updating period information is received by the input unit 102 (“YES” in step S166), the period information in the period information table 130 is updated according to the contents received by each input field. (Step S167). Next, the control unit 103 ends the period information writing and updating operations.

When the button 806 is not accepted (“NO” in step S166), the control unit 103 ends the period information writing and updating operations.

When the period information including the content ID does not exist in the period information table 130 (“None” in step S162), the control unit 103 controls to display the screen 800. Next, the input unit 102 receives an input in each input field (step S168).

The control unit 103 generates period information from the contents received by each input field (step S169). Next, when the input unit 102 receives a button 806 for writing and updating period information (“YES” in step S170), the period information is written in the period information table 130 (step S171). Next, the control unit 103 ends the period information writing and updating operations.

When the button 806 is not accepted (“NO” in step S170), the control unit 103 ends the period information writing and updating operations.

(4) Distribution Period Setting Operation The distribution period setting operation in the period information table 130 will be described with reference to the flowchart shown in FIG. The following operation is details of step S107 in FIG.

The control unit 103 receives the content ID from the input unit 102. Next, the period information including the content ID is retrieved from the period information table 130 of the data storage unit 106 via the input / output unit 105 (step S181).

When the period information including the content ID exists in the period information table 130 (“Yes” in step S182), the control unit 103 reads the period information (step S183). Next, it is determined whether or not there is no input for each item included in the read period information (step S184). Items to be determined are a screening start date, a screening end date, a screening region ID, a sales start date, a sales region ID, and a distribution region ID in the period information. If any of these items has not been input (“Yes” in step S185), the control unit 103 generates a message indicating that. Next, the generated message is output to the display unit 101. Display unit 101 displays the message (step S188). Next, the control unit 103 ends the operation for setting the distribution period.

When there is no uninputted item (“None” in step S185), the control unit 103 controls the period determining unit 104 to calculate the distribution period. The period determining unit 104 calculates a distribution period under the control of the control unit 103 (step S186).

Next, the control unit 103 updates the period information in the period information table 130 with the calculated distribution period via the input / output unit 105 (step S187). Next, the control unit 103 ends the operation for setting the distribution period.

When the period information including the content ID does not exist in the period information table 130 (“None” in step S182), the control unit 103 generates a message indicating that. Next, the generated message is output to the display unit 101. The display unit 101 displays the message (step S189). Next, the control unit 103 ends the operation for setting the distribution period.

(5) Distribution Period Calculation Operation The distribution period calculation operation performed by the period determination unit 104 will be described with reference to the flowchart shown in FIG. The following operation is details of step S186 in FIG.

The period determining unit 104 extracts a screening end date from the period information (step S201), and extracts a sales start date from the period information (step S202). Next, a copyright protection method ID is extracted (step S203).

Next, the period determining unit 104 determines the degree of protection by the copyright protection method identified by the extracted copyright protection method ID (step S204).

When the degree of protection is weak (“weak” in step S205), the period determination unit 104 calculates the distribution start date and the distribution end date using the following expressions.

Distribution start date = Screening end date + 10 days (Step S206)
Distribution end date = sales start date−10 days (step S207)
Next, the period determination unit 104 ends the distribution period calculation process.

When the degree of protection is normal (“normal” in step S205), the period determining unit 104 calculates the distribution start date and the distribution end date using the following expressions.

Delivery start date = Screening end date + 1 day (Step S208)
Distribution end date = sales start date−one day (step S209)
Next, the period determination unit 104 ends the distribution period calculation process.

When the degree of protection is strong (“strong” in step S205), the period determination unit 104 calculates the distribution start date and the distribution end date using the following expressions.

Distribution start date = Screening end date−10 days (Step S210)
Distribution end date = sales start date + 10 days (step S211)
Next, the period determination unit 104 ends the distribution period calculation process.

(6) Distribution Information Transmission / Reception Operation The distribution information transmission / reception operation will be described with reference to the flowchart shown in FIG. The following operation is details of step S109 in FIG.

The control unit 103 receives the content ID from the input unit 102. Next, the period information including the content ID is retrieved from the period information table 130 of the data storage unit 106 via the input / output unit 105 (step S231).

When the period information including the content ID exists in the period information table 130 (“Yes” in step S232), the control unit 103 reads the period information (step S233). Next, for each item included in the read period information, it is determined whether or not there is an uninput item (step S234). Items to be determined are the screening start date, screening end date, screening region ID, sales start date, sales region ID, distribution region ID, distribution start date, and distribution end date in the period information. If there is an uninput item among these items (“Yes” in step S235), the control unit 103 generates a message indicating that. Next, the generated message is output to the display unit 101. Display unit 101 displays the message (step S239). Next, the control unit 103 ends the operation for setting the distribution period.

When there is no uninput item (“None” in step S235), the control unit 103 generates distribution information. The distribution information includes a content ID, a distribution start date, a distribution end date, a distribution area ID, and a copyright protection method ID (step S236).

Next, the communication unit 110 transmits distribution information to the content distribution apparatus 200. The communication unit 201 receives distribution information (step S237).

The input / output unit 204 writes the distribution information in the distribution period table 240 or updates the distribution information in the distribution period table 240 (step S238).

Thus, the transmission / reception operation of the distribution information in the content creator device 100 and the content distribution device 200 is completed.

(7) Distribution Information Transmission / Reception Operation The operation of transmitting / receiving distribution information between the content creator device 100 and the content distribution device 200 will be described with reference to the sequence diagram shown in FIG. The following operation is details of step S237 in FIG. Here, the content creator device 100 and the content distribution device 200 establish a secure communication path and perform data transmission / reception.

The authentication unit 107 of the content creator device 100 and the authentication unit 209 of the content distribution device 200 perform mutual authentication and key sharing (step S251).

If authentication by the authentication unit 107 fails (“failure” in step S252), the control unit 103 generates a message indicating that. Next, the generated message is output to the display unit 101. The display unit 101 displays the message (step S253). Next, the control unit 103 ends the transmission / reception operation of the distribution information.

If authentication by the authentication unit 209 fails (“failure” in step S254), the control unit 208 generates a message indicating that. Next, the generated message is output to the display unit of the content distribution apparatus 200 (not shown). The display unit displays the message (step S255). Next, the control unit 208 ends the transmission / reception operation of the distribution information.

If the authentication by the authentication unit 107 is successful (“success” in step S252), the control unit 103 instructs the encryption signature unit 109 to perform encryption. The cryptographic signature unit 109 encrypts the read distribution information using the shared key generated by the authentication unit 209. In this way, the cryptographic signature unit 109 generates encrypted distribution information (step S256).

Encrypted distribution information = Enc (shared key, distribution information)
Next, the control unit 103 instructs the cryptographic signature unit 109 to generate signature data. The cryptographic signature unit 109 applies a digital signature to the encrypted distribution information using the private key of the content creator device stored in the key storage unit 108. Thus, the cryptographic signature unit 109 generates signature data (step S257).

Signature data = Sign (private key of content creator device, encrypted distribution information)
The communication unit 110 transmits the encrypted distribution information and signature data to the content distribution apparatus 200 via the network 20 (step S258).

The communication unit 201 receives the encrypted distribution information and signature data from the content creator device 100 via the network 20 (step S258).

The cryptographic signature unit 211 reads the public key certificate of the content creator device 100 from the key storage unit 210 and extracts the public key from the read public key certificate. Next, the cryptographic signature unit 211 performs digital signature verification of the received encrypted distribution information and signature data using the extracted public key (step S259).

Verification result = Vrfy (public key, encrypted distribution information, signature data)
Here, the verification result indicates either success or failure.

If the verification by the cryptographic signature unit 211 fails (“failure” in step S260), the control unit 208 generates a message indicating that. Next, the generated message is output to the display unit of the content distribution apparatus 200 (not shown). The display unit displays the message (step S261). Next, the control unit 208 ends the content transmission / reception operation.

If the verification by the cryptographic signature unit 211 is successful (“success” in step S260), the cryptographic signature unit 211 decrypts the received encrypted distribution information using the shared key generated by the authentication unit 209. Thus, the cryptographic signature unit 211 generates plaintext distribution information (step S262).

Plaintext distribution information = Dec (shared key, encrypted distribution information)
Thereby, the operation | movement which transmits / receives distribution information between the content creator apparatus 100 and the content distribution apparatus 200 is complete | finished.

(8) Encrypted Content Transmission / Reception Operation The sequence diagram shown in FIG. 23 to FIG. 24 is used for the operation of transmitting / receiving encrypted content between the content distribution device 200 and the recording medium device 400 via the terminal device 300. I will explain. Here, the content distribution apparatus 200 and the recording medium apparatus 400 establish a secure communication path and perform data transmission / reception.

The input unit 304 of the terminal device 300 receives an input of a content ID that identifies the encrypted content that is the target of the distribution request (step S279).

Next, the control unit 305 transmits a distribution request and a content ID to the content distribution apparatus 200 via the communication unit 301 and the network 20 (step S280). Here, the distribution request indicates a request for distribution of the encrypted content identified by the content ID to the terminal device 300.

The control unit 208 of the content distribution device 200 receives the distribution request and the content ID from the terminal device 300 via the network 20 and the communication unit 201 (step S280).

Next, the region specifying unit 206 acquires a region ID for identifying the region where the terminal device 300 exists, and outputs the acquired region ID to the control unit 208 and the distribution determination unit 207 (step S281). Further, the date acquisition unit 205 acquires the current date and time in the area where the terminal device 300 exists, and outputs the acquired current date and time to the control unit 208 and the distribution determination unit 207 (step S282).

The control unit 208 attempts to extract distribution period information corresponding to the received content ID and area ID from the distribution period table 240 (step S283).

When the distribution period information corresponding to the content ID and the region ID cannot be extracted (“NO” in step S284), the control unit 208 generates a message indicating that. Next, the generated message is transmitted to the terminal device 300 via the communication unit 201 and the network 20 (step S293). The control unit 305 of the terminal device 300 receives a message from the content distribution device 200 via the network 20 and the communication unit 301 (step S293). Next, control is transferred to step S294.

When the distribution period information corresponding to the content ID and the region ID can be extracted (“Yes” in step S284), the encrypted content is transmitted between the control unit 208 of the content distribution device 200 and the control unit 208 of the terminal device 300. The billing process related to the sale is performed (step S285).

The authentication unit 209 of the content distribution device 200 and the authentication unit 407 of the recording medium device 400 perform mutual authentication and key sharing (step S286). In this mutual authentication, the agreement of the copyright protection scheme ID is confirmed.

If authentication by the authentication unit 209 fails (“failure” in step S287), the control unit 208 generates a message indicating that. Next, the generated message is output to a display unit (not shown) included in the content distribution apparatus 200. The display unit displays the message (step S288). Next, the control unit 208 ends the operation of transmitting / receiving encrypted content.

If authentication by the authentication unit 407 fails (“failure” in step S289), the control unit 406 generates a message indicating that. Next, it outputs with respect to the terminal device 300 via the connection part 401 (step S290). The control unit 305 of the terminal device 300 receives a message from the recording medium device 400 via the connection unit 309 (step S290). Next, the control unit 305 outputs the received message to the output unit 302. The output unit 302 displays the message (step S291). Next, the control unit 305 ends the operation of transmitting / receiving encrypted content. Further, the control unit 406 of the recording medium device 400 also ends the operation of transmitting / receiving encrypted content.

When the authentication by the authentication unit 209 of the content distribution device 200 is successful (“success” in step S287), the distribution determination unit 207 determines whether the current date and time in the area where the terminal device 300 exists is within the range of the extracted distribution period. Is determined (step S292). Specifically, whether the current date is equal to the delivery start date, or whether the current date is greater than the delivery start date and the current date is equal to the delivery end date, or whether the current date is less than the delivery end date. to decide.

That is, it is determined whether or not the following expression is satisfied.

Distribution start date ≦ current date and time ≦ delivery end date When the distribution determination unit 207 determines that the current date and time are not within the range of the extracted distribution period (“NO” in step S292), the control unit 208 indicates that Generate a message to indicate. Next, the generated message is transmitted to the terminal device 300 via the communication unit 201 and the network 20 (step S293). The control unit 305 of the terminal device 300 receives a message from the content distribution device 200 via the network 20 and the communication unit 301 (step S293). The control unit 305 outputs a message to the output unit 302, and the output unit 302 displays the message (step S294).

When the distribution determination unit 207 determines that the current date and time is within the range of the extracted distribution period (“YES” in step S292), the cryptographic signature unit 211 is identified by the content ID from the data storage unit 202. The encrypted content and the corresponding content key are read out (step S295).

Next, the encryption signature unit 211 encrypts the read encrypted content using the shared key generated by the authentication unit 209. In this way, double encrypted content is generated (step S296).

Double encrypted content = Enc (shared key, encrypted content)
Next, the encryption signature unit 211 encrypts the read content key using the shared key generated by the authentication unit 209. Thus, an encrypted content key is generated (step S297).

Encrypted content key = Enc (shared key, content key)
The cryptographic signature unit 211 uses the private key of the content distribution device 200 stored in the key storage unit 210 to apply a digital signature Sign to the double encrypted content. Thus, the cryptographic signature unit 211 generates signature data (step S298).

Signature data = Sign (private key of content distribution device, double encrypted content)
Next, the control unit 208 transmits the encrypted content key, the double encrypted content, and the signature data to the recording medium device 400 via the communication unit 201, the network 20, and the terminal device 300 (Step S299). . The control unit 406 of the recording medium device 400 receives the encrypted content key, the double encrypted content, and the signature data from the content distribution device 200 via the network 20, the terminal device 300, and the connection unit 401 (Step S299). .

The cryptographic signature unit 409 reads the public key certificate of the content distribution apparatus 200 from the key storage unit 408, and extracts the public key from the read public key certificate. Next, the cryptographic signature unit 409 performs digital signature verification of the received double-encrypted content and signature data using the extracted public key (step S300).

Verification result = Vrfy (public key, double encrypted content, signature data)
Here, the verification result indicates either success or failure.

When verification by the cryptographic signature unit 409 fails (“failure” in step S301), the control unit 406 generates a message indicating that. Next, the generated message is output to the terminal device 300 via the connection unit 401 (step S302). The control unit 305 of the terminal device 300 receives a message from the recording medium device 400 via the connection unit 309 (step S302). The control unit 305 outputs the received message to the output unit 302. The output unit 302 displays the message (step S303). Next, the control unit 406 of the recording medium device 400 ends the transmission / reception operation of the encrypted content. The control unit 305 of the terminal device 300 also ends the operation of transmitting / receiving encrypted content.

If the verification by the cryptographic signature unit 409 is successful (“success” in step S301), the cryptographic signature unit 409 decrypts the received double encrypted content using the shared key generated by the authentication unit 407. Thus, the cryptographic signature unit 409 generates encrypted content (step S304).

Encrypted content = Dec (shared key, double encrypted content)
Next, the encryption signature unit 409 uses the shared key generated by the authentication unit 407 to decrypt the received encrypted content key. Thus, the cryptographic signature unit 409 generates a content key (step S305).

Content key = Dec (shared key, encrypted content key)
Next, the cryptographic signature unit 409 writes the generated encrypted content in the normal area 410 of the storage unit 404. Further, the generated content key is written into the protected area 411 of the storage unit 404 (step S306).

Thus, the operation of transmitting / receiving encrypted content between the content distribution device 200 and the recording medium device 400 via the terminal device 300 is completed.

(9) Content Playback Operation The content playback operation will be described with reference to the sequence diagrams shown in FIGS. Here, the terminal device 300 and the recording medium device 400 establish a safe communication path and perform data transmission / reception.

The input unit 304 of the terminal device 300 receives an input of a content ID that identifies content to be played back (step S321).

Next, the control unit 305 outputs the reproduction request and the content ID to the recording medium device 400 via the connection unit 309 (step S322). Here, the reproduction request indicates that reproduction of the encrypted content identified by the content ID is requested.

The control unit 406 of the recording medium device 400 receives the reproduction request and the content ID from the terminal device 300 via the connection unit 401 (step S322).

Next, the authentication unit 306 of the terminal device 300 and the authentication unit 407 of the recording medium device 400 perform mutual authentication and key sharing (step S323).

If authentication by the authentication unit 306 fails (“failure” in step S324), the control unit 305 generates a message indicating that fact. Next, the generated message is output to the output unit 302. The output unit 302 displays the message (step S325). Next, the control unit 305 ends the operation of transmitting / receiving encrypted content.

If authentication by the authentication unit 407 fails (“failure” in step S326), the control unit 406 generates a message indicating that. Next, it outputs with respect to the terminal device 300 via the connection part 401 (step S327). The control unit 305 of the terminal device 300 receives a message from the recording medium device 400 via the connection unit 309 (step S327). Next, the control unit 305 outputs the received message to the output unit 302. The output unit 302 displays the message (step S325). Next, the control unit 305 ends the content reproduction operation. The control unit 406 of the recording medium device 400 also ends the content reproduction operation.

When the authentication by the authentication unit 407 of the recording medium device 400 is successful (“success” in step S326), the cryptographic signature unit 409 receives the encrypted content 421 from the normal area 410 of the storage unit 404 via the input / output unit 405. read out. Also, the encrypted content 421 is read from the protected area 411 of the storage unit 404 (step S328).

Next, the encryption signature unit 409 encrypts the read encrypted content 421 using the shared key generated by the authentication unit 407. In this way, double encrypted content is generated (step S329).

Double encrypted content = Enc (shared key, encrypted content)
Next, the encryption signature unit 409 encrypts the read content key 422 using the shared key generated by the authentication unit 407. Thus, an encrypted content key is generated (step S330).

Encrypted content key = Enc (shared key, content key)
The cryptographic signature unit 409 applies a digital signature Sign to the double encrypted content using the private key of the recording medium device 400 stored in the key storage unit 408. Thus, the cryptographic signature unit 409 generates signature data (step S331).

Signature data = Sign (private key of recording medium device, double encrypted content)
Next, the control unit 406 transmits the encrypted content key, the double encrypted content, and the signature data to the terminal device 300 via the connection unit 401 (step S332). Next, the control unit 406 ends the content reproduction operation.

When the authentication by the authentication unit 306 is successful (“success” in step S324), the control unit 305 of the terminal device 300 transmits the encrypted content key and the double encrypted content from the recording medium device 400 via the connection unit 309. The signature data is received (step S332).

The cryptographic signature unit 308 reads the public key certificate of the recording medium device 400 from the key storage unit 307, and extracts the public key from the read public key certificate. Next, the cryptographic signature unit 308 performs digital signature verification of the received double encrypted content and signature data using the extracted public key (step S333).

Verification result = Vrfy (public key, double encrypted content, signature data)
Here, the verification result indicates either success or failure.

If the verification by the cryptographic signature unit 308 fails (“failure” in step S334), the control unit 305 generates a message indicating that. Next, the generated message is output to the output unit 302. The output unit 302 displays a message (step S335). Next, the control unit 305 of the terminal device 300 ends the content reproduction operation.

If the verification by the cryptographic signature unit 308 is successful (“success” in step S334), the cryptographic signature unit 308 decrypts the received double encrypted content using the shared key generated by the authentication unit 306. Thus, the cryptographic signature unit 308 generates encrypted content (step S336).

Encrypted content = Dec (shared key, double encrypted content)
Next, the cryptographic signature unit 308 uses the shared key generated by the authentication unit 306 to decrypt the received encrypted content key. Thus, the encryption signature unit 308 generates a content key (step S337).

Content key = Dec (shared key, encrypted content key)
Next, the encryption signature unit 308 decrypts the generated encrypted content using the generated content key. Thus, the cryptographic signature unit 308 generates plain text content (step S338).

Content = Dec (content key, encrypted content)
Next, the control unit 305 outputs the generated content to the reproduction unit 303. The reproduction unit 303 reproduces content and generates video data and audio data. The output unit 302 displays video data and outputs audio data (step S339).

This completes the content playback operation.

(9) Mutual Authentication and Key Sharing Operations The mutual authentication and key sharing operations between the content distribution apparatus 200 and the recording medium apparatus 400 will be described with reference to the sequence diagrams shown in FIGS. A secure communication path is established between the content distribution device 200 and the recording medium device 400 by mutual authentication and key sharing. The operation described below is the details of step S286 shown in FIG.

Note that the content distribution device 200 and the recording medium device 400 transmit and receive information via the network 20 and the terminal device 300. In the following description, the description about the network 20 and the terminal device 300 is omitted for simplification.

The authentication unit 209 generates a random number R1 (step S351). Next, the generated random number R1 is transmitted to the recording medium device 400 (step S352).

The authentication unit 407 receives the random number R1 from the content distribution device 200 (step S352). Next, the received random number R1 is encrypted by the encryption algorithm E3 to generate an encrypted random number E3 (R1) (step S353). Next, the generated encrypted random number E3 (R1) is transmitted to the content distribution apparatus 200 (step S354).

Here, the ciphertext obtained by encrypting the plaintext P by the encryption algorithm E is expressed as E (P).

The authentication unit 209 receives the encrypted random number E3 (R1) from the recording medium device 400 (step S354). Next, the received encrypted random number E3 (R1) is decrypted by the decryption algorithm D3 to generate a decrypted text R1 '= D3 (E3 (R1)) (step S355).

Here, the decrypted text obtained by encrypting the cipher text E (P) by the decryption algorithm D is expressed as D (E (P)).

The authentication unit 209 compares the random number R1 with the decrypted text R1 '(step S356). When the random number R1 and the decrypted text R1 ′ do not match (“mismatch” in step S356), the authentication unit 209 determines that the recording medium device 400 is illegal, outputs an authentication result, and performs authentication processing. finish.

The authentication unit 407 generates a random number R2 (step S357). Next, the generated random number R2 is transmitted to the content distribution apparatus 200 (step S358).

On the other hand, when the random number R1 matches the decrypted text R1 '("match" in step S356), the authentication unit 209 determines that the recording medium device 400 is valid. Next, the authentication unit 209 receives the random number R2 from the recording medium device 400 (step S358). The random number R2 is encrypted by the encryption algorithm E4 to generate an encrypted random number E4 (R2) (step S359). Next, the generated encrypted random number E4 (R2) is transmitted to the recording medium device 400 (step S360).

The authentication unit 407 receives the encrypted random number E4 (R2) from the content distribution device 200 (step S360). Next, the received encrypted random number E4 (R2) is decrypted by the decryption algorithm D4 to generate a decrypted text R2 '= D4 (E4 (R2)) (step S361).

The authentication unit 407 compares the random number R2 with the decrypted text R2 '(step S362). When the random number R2 and the decrypted text R2 ′ do not match (“mismatch” in step S362), the authentication unit 407 determines that the content distribution apparatus 200 is illegal and outputs a result indicating authentication failure.

On the other hand, when the random number R2 and the decrypted text R2 ′ match (“match” in step S362), the authentication unit 407 determines that the content distribution apparatus 200 is valid, and outputs a result indicating a successful authentication. .

If it is determined that the content distribution apparatus 200 is valid, the authentication unit 407 reads the copyright protection method ID stored therein (step S364). Next, the read copyright protection method ID is transmitted to the content distribution apparatus 200 (step S365).

On the other hand, the authentication unit 209 extracts the copyright protection method ID from the distribution period information (step S363). Next, the copyright protection method ID is received from the recording medium device 400 (step S365).

The authentication unit 209 compares the extracted copyright protection method ID with the received copyright protection method ID (step S366). When the extracted copyright protection method ID does not match the received copyright protection method ID (“mismatch” in step S366), the authentication unit 209 generates a message indicating that (step S367). Next, the generated message is output to the terminal device 300 (step S368), and the process ends. The terminal device 300 receives a message from the content distribution device 200 (step S368). The output unit 302 of the terminal device 300 displays the received message (step S369). Next, the terminal device 300 ends the process.

When the extracted copyright protection method ID matches the received copyright protection method ID (“match” in step S366), the authentication unit 209 sets xA (step S370). Next, YA = xA * G is calculated (step S371). Here, G is a point on the elliptic curve. Next, the authentication unit 209 transmits YA to the recording medium device 400 (step S374).

The authentication unit 407 receives YA from the content distribution apparatus 200 (step S374).

After successfully authenticating the content distribution apparatus 200 (“match” in step S362) and transmitting the read copyright protection method ID (steps S364 to S365), the authentication unit 407 sets xB (step S372). . Next, YB = xB * G is calculated (step S373). Next, the authentication unit 407 transmits YB to the content distribution apparatus 200 (step S375).

The authentication unit 209 receives YB from the recording medium device 400 (step S375).

Upon receiving YB, the authentication unit 209 calculates a shared key k = xA * YB (step S376).

Further, when YA is received, the authentication unit 407 calculates a shared key k ′ = xB * YA (step S377).

Thus, the mutual authentication and key sharing operations between the content distribution device 200 and the recording medium device 400 are completed.

Here, shared key k = xA * YB
= XA x (xB * G)
= XB x (xA * G)
= XB * YA
= Shared key k '
Therefore, the shared key k generated by the authentication unit 209 matches the shared key k ′ generated by the authentication unit 407.

Note that mutual authentication and key sharing between the content creator device 100 and the content distribution device 200 may be performed in the same manner as described above. In the mutual authentication and key sharing between the content creator device 100 and the content distribution device 200, the comparison of the copyright protection method IDs and the operations (steps S363 to S369) associated therewith are not included.

Also, mutual authentication and key sharing between the terminal device 300 and the recording medium device 400 may be performed in the same manner as described above. In the mutual authentication and key sharing between the terminal device 300 and the recording medium device 400, the comparison of the copyright protection method ID and the operation accompanying it (steps S363 to S369) are not included.

2. Embodiment 3
A content distribution system 11 as Embodiment 3 according to the present invention will be described.

As shown in FIG. 29, the content distribution system 11 includes a period determination device 100a, a content distribution device 200a, and a terminal device 300a.

(1) The period determination device 100a includes an acquisition unit 101a and a determination unit 102a.

The acquisition unit 101a acquires region identification information indicating a second region different from the first region where the packaged content is first sold in the world.

The determination unit 102a is configured to distribute the content in the second region identified by the region identification information before the sales start date in the first region where the packaged content is first sold in the world. The delivery period including the period is determined.

(2) The content distribution device 200a includes a period storage unit 201a, a request reception unit 202a, a region specification unit 203a, a time acquisition unit 204a, a determination unit 205a, and a transmission unit 206a.

The period storage unit 201a stores the distribution period corresponding to the region and the content.

The request receiving unit 202a receives a content transmission request from the terminal device 300a.

The area specifying unit 203a specifies the area where the terminal device 300a is located.

The time acquisition unit 204a acquires the current time of the specified area.

The determination unit 205a determines whether or not the specified region matches the second region indicated by the acquired region identification information, and whether or not the acquired current time is included in the determined distribution period. If the region does not match or is not included in the distribution period, the transmission of the content is rejected, and if the region matches and is included in the distribution period, the transmission of the content is permitted.

When the transmission is permitted, the transmission unit 206a transmits the content to the terminal device.

(3) The terminal device 300a includes a receiving unit 301a.

The receiving unit 301a receives content from the content distribution device 200a.

3. Other Modifications Although the present invention has been described based on the above-described embodiments, it is needless to say that the present invention is not limited to the above-described embodiments. The following cases are also included in the present invention.

(1) In the second embodiment, as shown as an example in FIG. 12, the copyright protection method ID is explicitly held as information in the distribution period information included in the distribution period table 240. Further, when performing the mutual authentication process, the authentication unit 209 of the content distribution apparatus 200 and the authentication unit 407 of the recording medium apparatus 400 determine whether or not the copyright protection method IDs of both match. Yes. However, the present invention is not limited to such a configuration.

For example, the authentication unit 209 of the content distribution apparatus 200 may support three types of copyright protection methods “A”, “B”, and “C” as an example. Further, the authentication unit 407 of the recording medium device 400 may correspond to any one of the three types of copyright protection methods “A”, “B”, and “C”. As an example, it is assumed that the copyright protection method “A” is supported.

Here, it is assumed that the copyright protection method “A” stipulates that challenge-response type authentication is performed between the first device and the second device. As an example, it is assumed that the first device executes the challenge process A. On the other hand, in response to the challenge process A, the second device executes the response process A ′. If the response process A 'is successful, the first device recognizes that the second device is valid. Further, the second device executes the challenge process B. On the other hand, in response to the challenge process B, the first device executes the response process B ′. If the response process B 'is successful, the second device recognizes that the first device is valid. It is assumed that mutual authentication succeeds when the other party is recognized as valid.

Also, in the copyright protection method “B”, as in the case of the copyright protection method “A”, it is prescribed that challenge-response type authentication is performed between the first device and the second device. It shall be. Differences from the copyright protection method “A” are as follows. The first device executes a challenge process C, and in response, the second device executes a response process C ′. Further, the second device executes the challenge process D, and in response to this, the first device executes the response process D ′.

Further, in the copyright protection method “C”, as in the case of the copyright protection method “A”, it is prescribed that challenge-response type authentication is performed between the first device and the second device. It shall be. Differences from the copyright protection method “A” are as follows. The first device executes the challenge process E, and in response, the second device executes the response process E ′. Further, the second device executes a challenge process F, and in response to this, the first device executes a response process F ′.

An example of the first device is the content distribution device 200. An example of the second device is the recording medium device 400.

Here, the authentication unit 209 of the content distribution apparatus 200 may include a sub-authentication unit 209a, a sub-authentication unit 209b, and a sub-authentication unit 209c. The sub-authentication unit 209a performs authentication processing according to the copyright protection method “A”. Further, the sub-authentication unit 209b performs an authentication process according to the copyright protection method “B”. Further, the sub-authentication unit 209c performs an authentication process according to the copyright protection method “C”.

The authentication unit 209 performs the following authentication when performing mutual authentication with the authentication unit 407 of the recording medium device 400.

The authentication unit 209 extracts the copyright protection method ID from the distribution period information. Next, one sub-authentication unit corresponding to the extracted copyright protection method ID is selected from the sub-authentication units 209a, 209b, and 209c. Here, when the copyright protection method ID is “A”, the sub-authentication unit 209a is selected. If the copyright protection method ID is “B”, the sub-authentication unit 209b is selected. Further, when the copyright protection method ID is “C”, the sub-authentication unit 209c is selected.

Next, mutual authentication is performed between the selected sub-authentication unit and the authentication unit 407 of the recording medium device 400.

When the sub-authentication unit 209a is selected, mutual authentication is performed between the sub-authentication unit 209a and the authentication unit 407 of the recording medium device 400. In this case, since both copyright protection methods are the same, mutual authentication succeeds.

On the other hand, when the sub-authentication unit 209b (or the sub-authentication unit 209c) is selected, mutual authentication is performed between the sub-authentication unit 209b (or the sub-authentication unit 209c) and the authentication unit 407 of the recording medium device 400. In this case, since both copyright protection methods are different, mutual authentication fails.

Thus, when the copyright protection methods selected by the two match, the challenge process and the response process correspond to each other, so that mutual authentication succeeds. If the copyright protection methods selected by the two do not match, the challenge process and the response process do not correspond, and mutual authentication fails.

(2) In the second embodiment, the content distribution device 200 transmits both the encrypted content and the content key to the recording medium device 400 via the terminal device 300. However, the present invention is not limited to such a configuration.

Instead of the single content distribution device 200, the content distribution device and the key distribution device may be configured. The content distribution device stores the content and distributes the content. The key distribution device stores the content key and distributes the content key.

In this case, the content distribution apparatus may hold the distribution period information and determine whether to transmit the content based on the distribution period information. The key distribution device may hold the distribution period information and determine whether to transmit the content key.

(3) In the second embodiment, the IP address is specified as a method for acquiring information on the geographical location where the terminal device 300 exists. However, the present invention is not limited to such a configuration.

For example, the terminal device 300 may include holding means for holding area identification information that can specify the country or area where the device is sold. The terminal device 300 transmits the region identification information to the content distribution device 200. The content distribution device 200 may receive the region identification information and acquire information on a geographical location where the terminal device 300 exists based on the region identification information.

(4) In the second embodiment, as shown in FIGS. 23 to 24, mutual authentication and key sharing are performed between the content distribution apparatus 200 and the recording medium apparatus 400 via the terminal apparatus 300. Establish a safe communication path. Next, the encrypted content and the content key are transmitted / received using the established communication path. However, this is not a limitation.

The content distribution device 200 and the terminal device 300 may perform mutual authentication and key sharing to establish a secure communication path and transmit / receive data. Thereafter, the terminal device 300 may write the encrypted content and the content key into the recording medium device 400.

Here, when the encrypted content and the content key are recorded in the recording medium device 400, the terminal device 300 may perform mutual authentication processing with the recording medium device 400. When the authentication process is successful, the encrypted content and the content key are recorded in the recording medium device 400.

(5) In the second embodiment, the content distribution device 200 encrypts and transmits the encrypted content and the content key to the recording medium device 400, respectively. However, the present invention is not limited to such a configuration.

For example, an authentication process is executed between the content distribution device 200 and the terminal device 300. As a result, the shared key is shared to establish a secure communication path. The content distribution device 200 includes an encryption unit, and the terminal device 300 includes a decryption unit. The content distribution apparatus 200 encrypts plaintext content by using the content key by the encryption unit to generate encrypted content. Further, the content key is encrypted using the shared key to generate an encrypted content key. Next, the encrypted content and the encrypted content key are transmitted to the terminal device 300 via the transmission / reception means. The terminal device 300 receives the encrypted content and the encrypted content key via the transmission / reception means. The decrypting means decrypts the encrypted content key using the shared key to obtain the content key. Next, the encrypted content and the content key are recorded on the recording medium device 400.

(6) In the second embodiment, the encrypted content and the content key are securely transmitted from the content distribution device 200 to the recording medium device 400. However, the present invention is not limited to such a configuration.

For example, an authentication process is executed between the content distribution device 200 and the recording medium device 400. As a result, the shared key is shared to establish a secure communication path. The content distribution device 200 includes an encryption unit, and the recording medium device 400 includes a decryption unit. The content distribution apparatus 200 encrypts plaintext content by using the content key by the encryption unit to generate encrypted content. Further, the content key is encrypted using the shared key to generate an encrypted content key. Next, the encrypted content and the encrypted content key are transmitted to the recording medium device 400 via the transmission / reception means. The recording medium device 400 receives the encrypted content and the encrypted content key via the terminal device 300 and the transmission / reception means of the recording medium device 400. Next, the content key is obtained by decrypting the encrypted content key using the shared key by the decrypting means. Next, the encrypted content and the content key are recorded in the storage unit of the recording medium device 400.

(7) In the second embodiment, the distribution period table 240 stored in the data storage unit 202 of the content distribution apparatus 200 includes a distribution region ID for identifying a country or region for which distribution is permitted. However, the present invention is not limited to such a configuration.

The content distribution device may be operated individually for each country or region. The content distribution apparatus operated for each country or each region may store a distribution period table 501 shown in FIG. 30 as an example.

The delivery period table 501 includes a plurality of delivery period information as shown in FIG. Each distribution period information includes a content ID, a screening start date, a sales start date, and a copyright protection method ID.

Here, the content ID is identification information for uniquely identifying the content.

The screening start date is the date when the content will be shown in the theater or movie theater in the first release country.

The sales start date is the date when the package of the content starts to be sold in the first release country.

The copyright protection method ID is identification information for identifying the copyright protection method.

Thus, the delivery period information does not include information indicating the region.

Since the content distribution device itself is operated individually for each country or region, even if the distribution period information does not include information that identifies the region, content distribution is controlled appropriately for each country or region. can do.

(8) In the second embodiment, the distribution period table 240 stored in the data storage unit 202 of the content distribution apparatus 200 includes a distribution start date for starting distribution and a distribution end date for ending distribution. However, the present invention is not limited to such a configuration.

The distribution period table 501 shown in FIG. 30 includes a plurality of distribution period information as described above. Each distribution period information includes a content ID, a screening start date, a sales start date, and a copyright protection method ID.

The delivery period table 501 includes delivery period information 506 as an example. The distribution period information 506 includes a content ID (502) “ABC123”, a screening start date 503 “2012/3/10”, a sales start date 504 “2012/9/09”, and a copyright protection method ID (505) “A”. including.

The distribution period information 506 indicates that the content identified by “ABC123” has been screened from March 10, 2012, the package has been sold from September 9, 2012, and the copyright protection method is “A”. ing.

The distribution determination unit 207 of the content distribution apparatus 200 determines the distribution start date based on the screening start date and the sales start date included in the distribution period information based on a predetermined rule or based on a specified rule. Alternatively, the distribution end date may be calculated and determined.

Examples of rules are the following (a) and (b).

(A) The distribution start date is three months after the screening start date.

(B) The delivery end date is the day before the sales start date.

In the case of the content identified by the content ID “ABC123” shown in FIG. 30, according to the above rules, the distribution start date is June 10, 2012, and the distribution end date is September 8, 2012. The distribution determination unit 207 of the content distribution apparatus 200 controls the distribution of content according to the distribution start date and distribution end date obtained by calculation.

In addition, instead of the screening start date described above, the screening end date may be included in the distribution period information. At this time, based on the screening end date, the next day may be calculated and determined as the distribution start date.

(9) In the second embodiment, the terminal device 300 or the recording medium device 400 can download and record content within a period during which content distribution is permitted. However, the present invention is not limited to such a configuration.

It is possible to follow a predetermined period or a specified rule from the delivery start date.

Examples of rules are the following (a), (b), (c) and (d).

(A) The distribution start date is three months after the screening start date.

(B) The delivery end date is the day before the sales start date.

(C) For a period of one month from the distribution start date, only streaming distribution is permitted and download distribution is prohibited.

(D) After 1 month from the start date of distribution, download distribution is permitted.

The content distribution device 200 controls content distribution according to this rule.

As an example, as shown in FIG. 30, in the case of the content identified by the content ID “ABC123”, following the above rule, the content is as follows.

* For the period from June 10, 2012 (three months after the screening start date) to July 9, 2012 (one month from the distribution start date), only streaming distribution that does not allow recording is performed. Download distribution is performed for the period from July 10, 2012 to September 8, 2012 (the day before the sales start date).

(10) In the second embodiment, a method of specifying from the IP address is used as a method of acquiring geographical location information where the terminal device 300 exists. However, the present invention is not limited to such a configuration.

For example, the content distribution device 200 may acquire geographical location information where the terminal device 300 exists based on the residence information included in the personal information linked to the credit card used for the purchase payment of the content.

Further, the terminal device 300 may be provided with identification information holding means for holding region identification information that can specify the country or region where the device is sold. The content distribution device 200 can know the position where the terminal device 300 exists by receiving the region identification information from the terminal device 300. Further, the content distribution apparatus 200 may determine by combining the area identification information and the residence information included in the personal information.

Also, a device ID of the terminal device 300 or a certificate ID included in a certificate used for authentication processing may be used. In addition, the content distribution device 200 holds the relationship between the device ID and certificate ID and the region where the terminal device 300 is sold. The content distribution device 200 can acquire the device ID and the certificate ID, and can specify the country or region where the terminal device 300 exists using the device ID and the certificate ID.

Furthermore, the content distribution device 200 is configured so that the terminal device 300 can obtain the combination of the device ID of the terminal device 300, the residence information included in the personal information obtained from a credit card, and the IP address that can be acquired when the terminal device 300 is accessed. You may determine the country or region that exists.

(11) In the second embodiment, one device has a plurality of functions (components). However, the present invention is not limited to such a configuration. Each function (component) may be divided into a plurality of devices. Similar effects and functions are realized by these plural devices.

(12) In the second embodiment, the content creator device 100 and the content distribution device 200 are assumed to be separate devices. However, it is not limited to this. The content creator device 100 and the content distribution device 200 may be an integrated device.

(13) A part or all of the constituent elements constituting each of the above devices may be configured as an IC card that can be attached to and detached from each device or a single module. The IC card or the module is a computer system including a microprocessor, a ROM, a RAM, and the like. The IC card or the module may include a super multifunctional LSI. The IC card or the module achieves its function by the microprocessor operating according to the computer program. This IC card or this module may have tamper resistance.

(13) The present invention may be a control method for controlling each device described above. Further, the present invention may be a computer program that realizes these control methods by a computer, or may be a digital signal composed of the computer program.

The present invention also provides a computer-readable recording medium such as a flexible disk, hard disk, CD-ROM, MO, DVD, DVD-ROM, DVD-RAM, BD (Blu-ray Disc). ), Recorded in a semiconductor memory or the like. The digital signal may be recorded on these recording media.

In the present invention, the computer program or the digital signal may be transmitted via an electric communication line, a wireless or wired communication line, a network represented by the Internet, a data broadcast, or the like.

Further, the present invention may be a computer system including a microprocessor and a memory, the memory storing the computer program, and the microprocessor operating according to the computer program.

In addition, the program or the digital signal is recorded on the recording medium and transferred, or the program or the digital signal is transferred via the network or the like, and is executed by another independent computer system. It is good.

(14) The following configuration may be adopted.

One aspect of the present invention is a content distribution apparatus that distributes content, and obtains region identification information indicating a second region different from the first region where the packaged content is first sold in the world. As a period for distributing the content in the second area identified by the circuit and the area identification information, a period before the sales start date in the first area where the packaged content is first sold in the world And a distribution circuit that distributes the content to a terminal device in the second region via the network within the determined distribution period. To do.

One aspect of the present invention is an integrated circuit constituting a content distribution apparatus that distributes content, and a region identification indicating a second region different from the first region where the packaged content is first sold in the world Start of sales in the first region where the packaged content is sold for the first time in the world as a period for distributing the content in the second region identified by the region identification information and an acquisition circuit for acquiring information A determination circuit for determining a distribution period including a period before the date, and a distribution circuit for distributing the content via the network to the terminal devices in the second region within the determined distribution period. It is characterized by providing.

One aspect of the present invention is a content distribution apparatus that distributes content, the memory unit storing a computer program configured by combining a plurality of computer instructions, and the computer stored in the memory unit A computer instruction is read from the program one by one, decoded, and a processor that operates according to the decoded result. The computer program obtains, in the content distribution device, which is a computer, region identification information indicating a second region different from the first region where the packaged content is sold for the first time in the world, A distribution period including a period before the sales start date in the first region in which the packaged content is first sold in the world as a period for distributing the content in the second region identified by the region identification information And a distribution step of distributing the content via the network to the terminal device in the second region within the determined distribution period.

Further, one embodiment of the present invention is a computer-readable non-transitory recording medium that records a computer program used in a content distribution apparatus that distributes content. The computer program obtains, in the content distribution device, which is a computer, region identification information indicating a second region different from the first region where the packaged content is sold for the first time in the world, A distribution period including a period before the sales start date in the first region in which the packaged content is first sold in the world as a period for distributing the content in the second region identified by the region identification information And a distribution step of distributing the content via the network to the terminal device in the second region within the determined distribution period.

(15) The following configuration may be adopted.

One aspect of the present invention is an early window content distribution system including a terminal device that uses content, a recording medium that records the content, and a server device that distributes the content to the terminal device and the recording medium. The server device includes: a country or region in which content distribution is permitted; a distribution information holding unit that holds a start date of content distribution and an end date of distribution termination; and a content distribution request from the terminal device Transmitting and receiving means for distributing content, specifying the country or region where the terminal device that transmitted the content distribution request is located, and acquiring region information acquisition means for acquiring the date and time of the specified country or region; A determination unit is provided for determining whether to distribute the content in response to a distribution request from the terminal device. The start date and the end date are determined based on a release window related to the content in a region different from the country or region where the terminal device is located. The determination unit compares the country / region and date / time specified by the region information acquisition unit with the distribution information held by the distribution information holding unit, and determines whether to distribute the content in response to the distribution request. decide. The terminal device includes transmission / reception means for transmitting a content distribution request and receiving the distributed content, and recording means for recording the received content on the recording medium.

One aspect of the present invention is the early window content distribution system. In the distribution information held by the distribution information holding means of the server device, the distribution start date is determined based on the theater release date of the content in a region different from the country or region where the terminal device is located, or the theater release end date. The delivery end date is determined based on the release date of the package media of the content in a region different from the country or region where the terminal device is located.

One aspect of the present invention is the early window content distribution system. The server device includes authentication processing means for executing authentication processing with the terminal device, and copyright protection method specifying means for specifying a copyright protection method of the terminal device by executing authentication processing. The distribution information holding means additionally holds information relating to a copyright protection scheme that permits distribution of content, and the determining means includes the copyright protection specified by the copyright protection scheme specifying means in addition to the regional information. The information on the method is compared with the information on the copyright protection method held by the distribution information holding means, and it is determined whether or not to distribute the content in response to the distribution request.

One aspect of the present invention is the early window content distribution system. The server device includes an encryption unit that encrypts data. The authentication processing unit executes authentication processing to share a key to establish a secure communication path, and the encryption unit encrypts content with a content key to generate encrypted content, and the shared key The content key is encrypted to generate an encrypted content key, and the transmission / reception means transmits the encrypted content and the encrypted content key to the terminal device. The terminal device includes an authentication processing unit that executes an authentication process with the server device, and a decoding unit that decrypts data. The transmission / reception means receives the encrypted content and the encrypted content key, the decryption means decrypts the received encrypted content key with the shared key to obtain a content key, and the recording means The encrypted content and the decrypted content key are recorded on the recording medium.

One aspect of the present invention is a server device of the early window content distribution system, wherein authentication processing means for executing an authentication process with the recording medium, and a work included in the recording medium by executing the authentication process. A copyright protection method specifying means for specifying the right protection method is provided. The distribution information holding means additionally holds information relating to a copyright protection scheme that permits distribution of content, and the determining means includes the copyright protection specified by the copyright protection scheme specifying means in addition to the regional information. The information on the method is compared with the information on the copyright protection method held by the distribution information holding means, and it is determined whether or not to distribute the content in response to the distribution request.

One aspect of the present invention is the early window content distribution system. The server device includes encryption means for encrypting data, and by executing authentication processing in the authentication processing means, a key is shared to establish a secure communication path, and the encryption means is a content key. The content is encrypted to generate an encrypted content, the content key is encrypted with the shared key to generate an encrypted content key, and the transmission / reception means transmits the encrypted content and the encrypted content key to the recording medium. Send. The recording medium includes an authentication processing unit that performs an authentication process with the server device, and a decryption unit that decrypts data. The transmission / reception unit receives the encrypted content and the encrypted content key, and The decrypting means decrypts the received encrypted content key with the shared key to obtain a content key, and stores the encrypted content and the decrypted content key.

One aspect of the present invention is the early window content distribution system, wherein the recording medium is a built-in memory of the terminal device.

One aspect of the present invention is the early window content distribution system. The region information acquisition means of the server device specifies the country or region where the terminal device is located by acquiring the IP address of the terminal device.

One aspect of the present invention is the early window content distribution system. The terminal device includes an identifier holding unit that holds an identifier for identifying the country or region where the terminal is sold, and the transmission / reception unit transmits the identifier held by the identifier holding unit to the server device. The area information acquisition means of the server device specifies the country or area where the terminal device is located based on the identifier received via the transmission / reception means.

One aspect of the present invention is the early window content distribution system. The area information acquisition means of the server device acquires the date / time information of the country / region by accessing the date / time server based on the geographical information of the specified country / region.

One aspect of the present invention is the early window content distribution system. The area information acquisition means of the server device calculates a time difference from the geographical information of the country or region where the identified terminal device is located and the geographical information where the server device is located, and the server device is located. From the date and time information of the region and the calculated time difference, date and time information of the country or region where the terminal device is located is acquired.

One embodiment of the present invention is a server device that distributes content to a terminal device or a recording medium, and a country or region in which content distribution is permitted, a start date for starting content distribution, and the distribution ends. A distribution information holding unit that holds an end date, a transmission / reception unit that receives a content distribution request from the terminal device and distributes the content, and a country or region in which the terminal device that transmitted the content distribution request is located And a region information acquisition unit that acquires the date and time of the specified country or region, and a determination unit that determines whether to distribute the content in response to a distribution request from the terminal device. The start date and the end date are determined based on a release window related to the content in a region different from the country or region in which the terminal device is located. The determination unit compares the country / region and date / time specified by the region information acquisition unit with the distribution information held by the distribution information holding unit, and determines whether to distribute the content in response to the distribution request. decide.

One aspect of the present invention is the server device, in the distribution information held by the distribution information holding unit, the theater release date of the content in a region different from the country or region in which the terminal device is located, or theater release The distribution start date is determined based on the end date, and the distribution end date is determined based on the release date of the package media of the content in a region different from the country or region where the terminal device is located.

One aspect of the present invention is the server device, wherein an authentication processing unit that executes an authentication process with the terminal device, and a copyright protection method included in the terminal device by executing the authentication process are specified. Provide copyright protection method identification means. The distribution information holding means additionally holds information relating to a copyright protection scheme that permits distribution of content, and the determining means includes the copyright protection specified by the copyright protection scheme specifying means in addition to the regional information. The information on the method is compared with the information on the copyright protection method held by the distribution information holding means, and it is determined whether or not to distribute the content in response to the distribution request.

One aspect of the present invention is the server device including encryption means for encrypting data. The authentication processing unit executes authentication processing to share a key to establish a secure communication path, and the encryption unit encrypts content with a content key to generate encrypted content, and the shared key The content key is encrypted to generate an encrypted content key, and the transmission / reception means transmits the encrypted content and the encrypted content key to the terminal device.

One aspect of the present invention is the server apparatus, wherein an authentication processing unit that executes an authentication process with the recording medium, and a copyright protection method included in the recording medium by executing the authentication process are specified. Provide copyright protection method identification means. The distribution information holding means additionally holds information relating to a copyright protection scheme that permits distribution of content, and the determining means includes the copyright protection specified by the copyright protection scheme specifying means in addition to the regional information. The information on the method is compared with the information on the copyright protection method held by the distribution information holding means, and it is determined whether or not to distribute the content in response to the distribution request.

One aspect of the present invention is the server device including encryption means for encrypting data. The authentication processing unit executes authentication processing to share a key to establish a secure communication path, and the encryption unit encrypts content with a content key to generate encrypted content, and the shared key The content key is encrypted to generate an encrypted content key, and the transmission / reception means transmits the encrypted content and the encrypted content key to the recording medium.

One aspect of the present invention is the server device, wherein the region information acquisition unit specifies a country or region where the terminal device is located by acquiring an IP address of the terminal device.

One aspect of the present invention is the server device, wherein the region information acquisition unit specifies a country or region in which the terminal device is located based on the identifier of the terminal device received via the transmission / reception unit.

One aspect of the present invention is the server device, wherein the area information acquisition unit acquires date information of the country or area by accessing the date server based on the geographical information of the specified country or area. To do.

One aspect of the present invention is the server device, wherein the area information acquisition unit includes geographical information of a country or region where the identified terminal device is located and geographical information where the server device is located. The time difference is calculated, and the date and time information of the country or region where the terminal device is located is acquired from the date and time information of the region where the server device is located and the calculated time difference.

One aspect of the present invention is an early window content distribution method including a terminal device that uses content, a recording medium that records the content, and a server device that distributes the content to the terminal device and the recording medium. In the early window content distribution method, the server device includes a distribution information holding step for holding a country or region in which content distribution is permitted, a start date for starting content distribution, and an end date for ending distribution; A transmission / reception step of receiving a content distribution request from a device and distributing the content, a country or region where the terminal device that transmitted the content distribution request is located is specified, and a date and time of the specified country or region is acquired. A local information acquisition step and a determination step of determining whether or not to distribute the content in response to a distribution request from the terminal device. The start date and end date are determined based on a release window related to the content in a region different from the country or region in which the terminal device is located, and the determination step includes the country or region identified by the region information acquisition step, In addition, the date and time are compared with the distribution information held in the distribution information holding step to determine whether or not to distribute the content in response to the distribution request. The early window content distribution method includes a transmission / reception step of transmitting a content distribution request and receiving the distributed content and a recording step of recording the received content on the recording medium in the terminal device.

One aspect of the present invention is the early window content distribution method. In the distribution information held in the distribution information holding step by the server device, the distribution start date is determined based on the theater release date or the theater release end date of the content in a region different from the country or region in which the terminal device is located. The delivery end date is determined based on the release date of the package media of the content in a region different from the country or region where the terminal device is located.

One aspect of the present invention is an early window content distribution system including a terminal device that uses content, a recording medium that records the content, and a server device that distributes the content to the terminal device and the recording medium. The server device receives distribution information holding means for holding information related to a release window of the content in a region different from the country or region in which the terminal is located, and a content distribution request from the terminal device, and distributes the content A transmission / reception means for identifying the country or region where the terminal device that transmitted the content distribution request is located, a region information acquisition means for acquiring the date and time of the specified country or region, and a distribution request from the terminal device. In response, a determination unit is provided for determining whether to distribute the content. The determination unit compares the country / region and date / time specified by the region information acquisition unit with the distribution information held by the distribution information holding unit, and determines whether to distribute the content in response to the distribution request. decide. The terminal device includes transmission / reception means for transmitting a content distribution request and receiving the distributed content, and recording means for recording the received content on the recording medium.

One aspect of the present invention is the early window content distribution system. In the distribution information held by the distribution information holding means of the server device, similarly to information related to theatrical release such as the theater release start date or theatrical release end of the content in a region different from the country or region where the terminal is located Information about the start date of the provision form that is assumed to be used at home such as package media of the content in a region different from the country or region where the terminal is located or content distribution is held.

One aspect of the present invention is the early window content distribution system. In the distribution information held by the distribution information holding means of the server device, it is set based on information about theatrical release such as the theater release start date of the content in the region different from the country or region where the terminal is located, or the theater release end. Set on the basis of the start date and information on the start date of the provision form that is assumed to be used at home such as package media or content distribution of the content in a region different from the country or region where the terminal is located. Hold end date.

One aspect of the present invention is the early window content distribution system, in which the area information acquisition unit of the server device includes personal information including user residence information input and transmitted to the terminal device, The country or region in which the terminal device is located is specified by any one of the IP address of the terminal device, the terminal identifier held by the terminal device, the certificate identifier of the certificate used for authentication processing, or a combination thereof.

One aspect of the present invention is a server device that distributes content to a terminal device or a recording medium, and the server device relates to a release window of the content in a region different from the country or region in which the terminal is located. A distribution information holding means for holding content, a transmission / reception means for receiving a content distribution request from the terminal device, and a country or region where the terminal device that has transmitted the content distribution request is located, A region information acquisition unit that acquires the date and time of the specified country or region; and a determination unit that determines whether or not to distribute content in response to a distribution request from the terminal device, the determination unit including the region information The country / region and date / time specified by the acquisition means are compared with the distribution information held by the distribution information holding means, and the content request is sent in response to the distribution request. To determine whether or not to deliver the tool.

One aspect of the present invention is the server apparatus, wherein the distribution information held by the distribution information holding unit is a theater release start date of the content in a region different from the country or region where the terminal is located, or theater release Information related to theatrical release such as the end, and information related to the start date of the provision form that is assumed to be used at home such as package media or content distribution of the content in a region different from the country or region where the terminal is located Including.

One aspect of the present invention is the server apparatus, wherein the distribution information held by the distribution information holding unit is a theater release start date of the content in a region different from the country or region where the terminal is located, or theater release Providing the start date set based on information related to theatrical release, such as the end, and the package media of the content in a region different from the country or region in which the terminal is located, or the home use such as content distribution It includes an end date set based on information about the start date of the form.

One aspect of the present invention is the server device, wherein the area information acquisition unit includes personal information including a user's residence information input and transmitted to the terminal device, an IP address of the terminal device, and the like. The country or region in which the terminal device is located is specified by one of a terminal identifier held by the terminal device, a certificate identifier of a certificate used for authentication processing, or a combination thereof.

One aspect of the present invention is an early window content distribution method including a terminal device that uses content, a recording medium that records the content, and a server device that distributes the content to the terminal device and the recording medium. The early window content distribution method includes a distribution information holding step for holding information related to a release window of the content in a region different from the country or region in which the terminal is located in the server device, and a content distribution request from the terminal device. Step of receiving information or distributing content, and region information acquisition step of identifying the country or region where the terminal device that transmitted the content distribution request is located and acquiring the date and time of the identified country or region And a determination step of determining whether or not to distribute the content in response to a distribution request from the terminal device. In the determination step, whether the content is distributed in response to the distribution request by comparing the country, region, and date / time specified in the regional information acquisition step with the distribution information held in the distribution information holding step. decide. The early window content distribution method includes a transmission / reception step of transmitting a content distribution request and receiving the distributed content and a recording step of recording the received content on the recording medium in the terminal device.

(16) The above embodiment and the above modifications may be combined.

(17) In the early window content distribution system according to the present invention, even in a country or region where piracy is rampant and the content business and related equipment business are in a devastating state, package media will be released in different regions By implementing content distribution (early window content distribution) before being released, it will be possible to distribute content safely and in a timely manner, both in the content business and related equipment business in these countries and regions. Useful in.

The content distribution device according to the present invention can be expected to suppress distribution of illegally manufactured package media in a second region different from the first region where regular package media are sold, and distribute contents. It is useful as a technology to do.

DESCRIPTION OF SYMBOLS 10 Early window content delivery system 11 Content delivery system 12 Content delivery system 100 Content creator apparatus 101 Display part 102 Input part 103 Control part 104 Period determination part 105 Input / output part 106 Data storage part 107 Authentication part 108 Key storage part 109 Cryptographic signature Unit 110 communication unit 200 content distribution device 201 communication unit 202 data storage unit 203 content key generation unit 204 input / output unit 205 date and time acquisition unit 206 area identification unit 207 distribution determination unit 208 control unit 209 authentication unit 210 key storage unit 211 encryption signature unit 300 terminal device 301 communication unit 302 output unit 303 playback unit 304 input unit 305 control unit 306 authentication unit 307 key storage unit 308 encryption signature unit 3 09 Connection unit 400 Recording medium device 401 Connection unit 402 Memory unit 403 Controller 404 Storage unit 405 Input / output unit 406 Control unit 407 Authentication unit 408 Key storage unit 409 Cryptographic signature unit

Claims (22)

A content distribution device for distributing content,
Obtaining means for obtaining region identification information indicating a second region different from the first region in which the packaged content is first sold in the world;
Distribution including a period before the sales start date in the first region where the packaged content is sold for the first time in the world as a period for distributing the content in the second region identified by the region identification information A determination means for determining a period;
A content distribution device comprising: distribution means for distributing the content via a network to a terminal device in the second region within the determined distribution period. The acquisition means further acquires system identification information indicating a copyright protection system of the content in the second region,
The content distribution according to claim 1, wherein the determination unit determines the length of the distribution period according to the strength of content protection by a copyright protection method identified by the acquired method identification information. apparatus. The content distribution apparatus according to claim 2, wherein the determination unit determines that the length of the distribution period is zero when the strength of content protection by the copyright protection method is lower than a threshold value. The determining means determines, as the end date of the distribution period, a date obtained by adding or subtracting the number of days determined according to the strength of protection by the copyright protection method to the sales start date. Item 3. The content distribution device according to Item 2. The acquisition means further acquires screening period information indicating a screening period of the content in the first region,
The determining means determines the day obtained by adding the number of screening days to the start date of the screening period indicated by the screening period information as the start date of the distribution period or the screening period indicated by the screening period information The date obtained by adding or subtracting the number of days determined according to the strength of protection by the copyright protection method to the end date of the period is determined as the start date of the distribution period. Content distribution device. The content distribution apparatus according to claim 1, wherein the determination unit determines an end date of the distribution period based on the sales start date. The acquisition means further acquires screening period information indicating a screening period of the content in the first region,
The content distribution device according to claim 1, wherein the determination unit further determines a start date of the distribution period based on a period indicated by the screening period information. The content distribution apparatus according to claim 1, wherein the determination unit further includes a period for performing streaming distribution of content and a period for performing content download distribution within the determined distribution period. The content distribution apparatus according to claim 8, wherein the determination unit provides the period for performing download distribution after the period for performing streaming distribution within the distribution period. The delivery means includes
A request receiving unit for receiving a transmission request for the content from the terminal device;
An area specifying unit for specifying an area where the terminal device is located;
A time acquisition unit for acquiring the current time of the identified area;
Determining whether or not the identified region and the second region indicated by the acquired region identification information match, determining whether or not the acquired current time is included in the determined distribution period; A determination unit that refuses transmission of the content when the region does not match or is not included in the distribution period, and permits the transmission of the content when the region matches and is included in the distribution period;
The content distribution device according to claim 1, further comprising: a transmission unit that transmits the content to the terminal device when transmission is permitted. The content distribution device according to claim 10, wherein the region specifying unit specifies a region where the terminal device exists based on an IP address of the terminal device. The region specifying unit receives region identification information indicating a region where the terminal device exists from the terminal device, and specifies the region where the terminal device exists using the received region identification information. The content delivery apparatus according to claim 10. The content distribution device according to claim 10, wherein the time acquisition unit acquires a current time from a date / time server based on the identified region. The time acquisition unit calculates a time difference between the identified region and the region where the content distribution device exists, acquires a current time of the region where the content distribution device exists, The content distribution device according to claim 10, wherein the current time of an area where the terminal device exists is calculated using the calculated time difference with the current time. The distribution period includes a first period for performing streaming distribution of content and a second period for performing download distribution of content,
The determination unit determines whether the current time is included in the first period or the second period, and if the current time is included in the first period, permits the streaming distribution, If it is included in the period, download distribution is permitted,
The content distribution apparatus according to claim 10, wherein the transmission unit performs streaming distribution of the content or download distribution of the content in accordance with permission from the determination unit. The acquisition means further acquires first method identification information indicating a copyright protection method of the content in the second region,
The distribution means further includes an authentication unit that performs mutual authentication with a recording medium device attached to the terminal device,
The authentication unit obtains second method identification information for identifying a copyright protection method used in the recording medium device, compares the first method identification information with the second method identification information,
The content distribution apparatus according to claim 10, wherein the determination unit rejects transmission of the content when the first method identification information and the second method identification information do not match. A content distribution system comprising a content distribution device and a terminal device,
The content distribution device includes:
Obtaining means for obtaining region identification information indicating a second region different from the first region in which the packaged content is first sold in the world;
Distribution including a period before the sales start date in the first region where the packaged content is sold for the first time in the world as a period for distributing the content in the second region identified by the region identification information A determination means for determining a period;
Distribution means for distributing the content via the network to the terminal device in the second area within the determined distribution period, and the terminal device receives the content system. A control method used in a content distribution apparatus for distributing content,
Obtaining region identification information indicating a second region different from the first region in which the packaged content is first sold in the world;
Distribution including a period before the sales start date in the first region where the packaged content is sold for the first time in the world as a period for distributing the content in the second region identified by the region identification information A decision step to determine the period;
A distribution step of distributing the content via a network to a terminal device in the second region within the determined distribution period. A control program used in a content distribution apparatus for distributing content,
To a content distribution device that is a computer,
Obtaining region identification information indicating a second region different from the first region in which the packaged content is first sold in the world;
Distribution including a period before the sales start date in the first region where the packaged content is sold for the first time in the world as a period for distributing the content in the second region identified by the region identification information A decision step to determine the period;
A control program for causing a terminal device in the second region to execute a distribution step of distributing the content via a network within the determined distribution period. A computer-readable recording medium recording a control program used in a content distribution apparatus for distributing content,
To a content distribution device that is a computer,
Obtaining region identification information indicating a second region different from the first region in which the packaged content is first sold in the world;
Distribution including a period before the sales start date in the first region where the packaged content is sold for the first time in the world as a period for distributing the content in the second region identified by the region identification information A decision step to determine the period;
A recording medium recording a control program for causing a terminal device in the second region to execute a distribution step of distributing the content via a network within the determined distribution period. An integrated circuit constituting a content distribution device for distributing content,
Obtaining means for obtaining region identification information indicating a second region different from the first region in which the packaged content is first sold in the world;
Distribution including a period before the sales start date in the first region where the packaged content is sold for the first time in the world as a period for distributing the content in the second region identified by the region identification information A determination means for determining a period;
An integrated circuit comprising: distribution means for distributing the content via a network to a terminal device in the second area within the determined distribution period. A period determining device for determining a content distribution period,
Obtaining means for obtaining region identification information indicating a second region different from the first region in which the packaged content is first sold in the world;
Distribution including a period before the sales start date in the first region where the packaged content is sold for the first time in the world as a period for distributing the content in the second region identified by the region identification information A period determining device comprising: a determining unit that determines a period.

Images