Patent Application
20060195405
The present invention relates to a system in which a digital content such as video and music, and a license permitting use of the digital content are distributed from a server device over a network and in which a user uses the digital content by a terminal device. More particularly, the present invention relates to a system and devices that prevent the unauthorized duplication and tampering of the license in a communication between the server device and the terminal device as well as preventing the loss and double-distribution of the license even in the event of the occurrence of a communication disconnection.
In recent years, a system referred to as a content distribution system has come into practical use. A content distribution system is a system in which a digital content such as music, video, and game (such a digital content is hereinafter described as a content) is distributed from a server device to a terminal device through a communication over the Internet or the like or through a digital broadcasting or the like, and in which it is possible to use the content by the terminal device. A general content distribution system uses copyright protection technology in order to protect the copyright of a content and to prevent unauthorized use of the content by a malicious user or the like. More specifically, the copyright protection technology is a technology for securely controlling the user's use of a content through use of cryptography or the like, such as the reproduction of the content and the copying of the content onto a storage medium.
For example, as an example content distribution system, Patent Document 1 describes a system in which a terminal device, after receiving an encrypted content, a usage condition, and a content decryption key from a server device and performing tampering detection, verifies the conformity to the usage condition, and decrypts and outputs the content only when all of the verification requirements are satisfied.
As described above, in the conventional content distribution system, since a license (which is a generic name for the usage condition and content decryption key, and is also referred to as a usage right) is distributed from the server device to the terminal device generally through a public network such as the Internet, it is necessary to prevent the tapping and tampering of the license. In other words, it is necessary to prevent the tampering of the usage condition and the leakage of the content key. Furthermore, the server device is required to authenticate the terminal device to which the license is to be distributed. In other words, it is also necessary to prevent the server device from distributing the license to an unintended terminal device. Protocols intended for the prevention of tapping and tampering and for the authentication of the party at the other end are called Secure Authenticated Channel (SAC) protocols, of which Secure Socket Layer (SSL) is well known, for example (Non-patent Document 1).
Meanwhile, in the case where a communication disconnection occurs during the license distribution due to the breakdown of the communication device or the communication line, power failure, or others, there is a possibility that such license is lost. This causes a loss to the user such as that the user cannot reproduce the content s/he has purchased. For example, Patent Document 2 and Patent Document 3 describe a protocol for preventing the loss of communication data attributable to a communication disconnection by re-sending the data.
(Patent Document 1): Japanese Patent No. 3276021
(Patent Document 2): Japanese Laid-Open Patent application No. 2002-251524
(Patent Document 3): Japanese Laid-Open Patent application No. 2003-16041
(Non-patent Document 1): A. Frier, P. Kariton, and P. Kocher, “The SSL 3.0 Protocol”, [online], NetScape Communication Corp., Nov. 18, 1996, [searched on Jan. 17, 2003], Internet <URL: http://wp.netscape.com/eng/ssl3/draft302.txt.>
However, in order to expand the scope of application, a SAC protocol and a communication disconnection countermeasure protocol place their emphasis on the versatility and each of them are proposed individually. For this reason, in order to achieve all the functions using both of the above protocols, that is, the prevention of license tapping and tampering, the authentication of the party at the other end, and countermeasures for communication disconnection, sendings and receivings are required to be performed for the number of times required for the both protocols.
Furthermore, in the case where transactions such as obtainment and returning of a license need to be carried out in a successive manner and the SAC protocol and the communication disconnection countermeasure protocol are simply repeated on a transaction basis, the number of sendings and receivings increases by a multiple of the number of sendings and receivings required to be performed per transaction. For example, letting that the number of sendings and receivings required per transaction is 4, sending and receiving needs to be performed for 4n times to process “n” transactions.
This causes a problem that there occurs a delay in a communication until the terminal device completes transaction processes and thus the user has to wait until such user receives a response after making a request.
The present invention aims at solving the conventional problem as described above, and it is an object of the present invention to provide a system and devices with which it is possible to (1) achieve all the functions, that is, the prevention of license tapping and tampering, the authentication of the party at the other end, and countermeasures for communication disconnection, (2) reduce the number of times sendings and receivings are carried out between a server device and a terminal device in the case where plural transaction processes are performed, and (3) realize a protocol that requires the server device and the terminal device to manage and hold a small amount of information to achieve the above functions. Through the above, the present invention aims at providing a content distribution system that is capable of reducing the time the user has to wait until such user receives a response after making a request.
The terminal device that achieves the above object is a terminal device that obtains, from a server device, a license for using a content based on transaction processes and controls use of the content based on the license, each of the transaction processes including sending of a request message, receiving of a response message, and sending of a commit message for finalizing completion of one transaction, the terminal device including: a holding unit that holds a 1-bit transaction identification flag indicating whether a current transaction process is in progress or completed; and a sending unit that sends the transaction identification bit instead of a commit message when sending a second or later request message, without sending a commit message in each transaction process except for a last transaction process in successive transaction processes.
Furthermore, the server device that achieves the above object is a server device that provides a terminal device with a license for using a content based on transaction processes, each including receiving of a request message, sending of a response message, and receiving of a commit message for finalizing completion of one transaction, the server device including: a receiving unit that receives a 1-bit transaction identification flag that is sent, instead of the commit message, together with a second or later request message in successive transaction processes, the transaction identification flag indicating whether a transaction process is in progress or completed in the terminal device; and a judgment unit that judges whether or not completion of one transaction should be finalized based on the received transaction identification flag.
With the above structure, in the case where plural transaction processes are performed in a content distribution system that includes the terminal device and the server device, a transaction identification flag is sent instead of a commit message, together with a request message. In other words, with the above structure, a commit message and a request message that are conventionally sent separately in two successive transaction processes are sent by being multiplexed as a single message. As described above, since a commit message is not sent, it is possible to reduce the number of times message sendings and receivings are carried out between the server device and the terminal device. Furthermore, a small amount of information, a 1-bit transaction identification flag, allows the server device and the terminal device to achieve both the reduction in the number of message sendings and receivings and countermeasures for communication disconnection. Accordingly, it is possible to reduce the time the user has to wait until such user receives a response after making a request.
Here, the terminal device may include: a response receiving unit that receives each response message sent from the server device in the transaction processes; and an update unit that updates the transaction identification flag held by the holding unit according to each reception result of the response receiving unit. Furthermore, the update unit may set a same value as a value of a transaction identification flag held by the server device as an initial value of the transaction identification flag held by the holding unit, and may invert a value of the transaction identification flag held by the holding unit when a response message is received by the response receiving unit.
Here, in the server device, a value of the transaction identification flag may be inverted every time a transaction is processed by the terminal device, and the server device may further include a holding unit that holds a first flag that is a copy of the transaction identification flag that is sent together with a preceding request message in the transaction processes, wherein the judgment unit may judge that completion of a preceding transaction should be finalized in the case where the transaction identification flag in the current transaction process and the first flag held by the holding unit do not match, the transaction identification flag being received by the receiving unit.
With the above structure, it is possible for the judgment unit in the server device to judge whether the preceding transaction process has completed or not in the terminal device by comparing the first flag that is a copy of the preceding transaction identification flag and the current transaction identification flag received.
Here, in the terminal device, the initial value of the transaction identification flag may be included in a first response message sent from the server device in the transaction processes, and the update unit may set the transaction identification flag held by the holding unit to the initial value when the response receiving unit receives the first response message, and may invert the value of the transaction identification flag held by the holding unit when a response message is normally received by the response receiving unit.
Here, the server device may include a response sending unit that sends, to the terminal device, an initial value of the first flag as an initial value of the transaction identification flag, together with a first response message in the transaction processes.
With the above structure, the judgment unit in the server device judges that the transaction process has not completed in the case where the first flag and the current transaction identification flag received match since there is no change in the state of the transaction process in the terminal device, whereas it judges that the transaction process has completed in the case where they do not match since there is a change in the state of the transaction process in the terminal device. As described above, it is possible for the server device to easily judge the state of a transaction process (whether it has completed or not) in the terminal device based on a transaction identification flag, without receiving any commit messages.
Here, the request sending unit in the terminal device may send again the transaction identification bit that is not inverted, together with a request message for the current transaction process, in the case where a response message is not normally received by the response receiving unit.
Here, the response sending unit may send again the response message for the preceding transaction process in the case where the judgment unit judges that the completion of the preceding transaction should not be finalized.
Here, the terminal device may perform processing for mutual authentication with the server device immediately before a first transaction process in the transaction processes, and may further include: an authentication unit that: provides the sending unit with first authentication information as an authentication request, the first authentication information being used by the server device to authenticate the terminal device; verifies second authentication information that is received by the response receiving unit as a response to the first authentication information, the second authentication information being used by the terminal device to authenticate the server device; and provides the sending unit with a finalization message for finalizing the mutual authentication according to a result of the verification, wherein the sending unit may send the finalization message together with a request message for the first transaction process. Furthermore, the server device may perform processing for mutual authentication with the terminal device immediately before a first transaction process in the transaction processes, and may further include: an authentication unit that: verifies first authentication information that is received by the receiving unit as an authentication request, the first authentication information being used by the server device to authenticate the terminal device; and provides second authentication information that is used by the terminal device to authenticate the server device in the case where the first authentication information is verified as valid, wherein the request receiving unit may receive a finalization message for finalizing the mutual authentication together with the first request message.
With the above structure, since the server device and the terminal device perform plural transaction processes via a secure communication path that is established through the above authentication, it is possible to prevent spoofing which is masquerade as an authorized terminal device, message tampering, and message tapping, in addition to being able to achieve the above-described countermeasures for communication disconnection.
Here, in the terminal device, the transaction processes may be performed on a session that is same as a session on which the mutual authentication has been performed.
With the above structure, in the case where n transaction processes are performed, it is possible to reduce the number of sendings and receivings to n+2 times from some 4n times which is the number of sendings and receivings having been required to be carried out conventionally.
As described above, according to the terminal device and the server device of the present invention, it is possible to achieve all the functions, that is, the prevention of license tapping and tampering, the authentication of the party at the other end, and countermeasures for communication disconnection as well as to reduce the number of times sendings and receivings is carried out between the server device and the terminal device in the case where plural transaction processes are performed. Furthermore, it is possible to realize a protocol that requires the server device and the terminal device to manage and hold a small amount of information to achieve the above functions. Accordingly, it becomes possible to reduce the time the user has to wait until such user receives a response after making a request.
The content distribution device 1 is comprised of a content purchase processing unit 11, a user registration unit 12, a user right registration unit 13, a user right generation unit 14, a content encryption unit 15, a content management unit 16, a security management/communication unit 17, a user database 18, a content right database 19, a user-owned right database 20, and a content database 21. Meanwhile, the user terminal 3 is comprised of a user instruction processing unit 31, a terminal information storage unit 32, a content storage unit 33, a usage right management unit 34, a usage right database 35, a security management/communication unit 36, and an output unit 37.
First, a description is given below of an overview of the content distribution device 1 and the user terminal 3 that make up the above content distribution system.
In the content distribution device 1, when content purchase processing is performed, the content purchase processing unit 11 sends, to the user terminal 3, information stored in the content right database 19 such as details, a usage condition, and the fee of each content, so as to present such information to the user. Furthermore, when the user purchases a content, the content purchase processing unit 11 obtains user information (user ID, terminal ID, user name, telephone number, or the like) from the user terminal 3, and performs necessary charging processing. In the content right database 19, one or more information regarding content use is stored for each content (moving images such as movie and TV broadcasting, still images such as book and printed matter, audio and music such as radio broadcasting and recitation, game, and the like).
The user registration unit 12 stores and registers, into the user database 18, the user information obtained by the content purchase processing unit 11. Information about users who have purchased contents are cumulatively stored in the user database 18.
The user right registration unit 13 stores and registers, into the user-owned right database 20, the information about the content purchased by the user as a right owned by the user, the information being provided from the content purchase processing unit 11 via the user registration unit 12. The usage rights of contents purchased by users are stored in the user-owned right database 20.
The user right generation unit 14 generates a usage right (a use rule and a content decryption key) to be sent to the user terminal 3 according to a content use request received from the user terminal 3.
The content encryption unit 15 encrypts the content to be sent to the user terminal 3, and registers the encrypted content into the content database 21.
The content management unit 16 retrieves, from the content database 21, the encrypted content to be sent to the user terminal 3, and passes it to the security management/communication unit 17.
The security management/communication unit 17 performs: authentication of the user terminal 3; secure communications (communications for preventing tapping and tampering and for authenticating the party at the other end) between the content distribution device 1 and the user terminal 3; and countermeasures for communication disconnection. Details about the structure of the security management/communication unit 17 and the communication protocol are given later.
The user instruction processing unit 31 in the user terminal 3 processes instructions (instructions including a content purchase request and a content use request) inputted by the user.
The above-described user information (user ID, terminal ID, user name, telephone number or the like) is stored in the terminal information storage unit 32.
The encrypted content obtained through purchase is stored in the content storage unit 33.
The usage right management unit 34 receives the usage right sent from the content distribution device 1 in response to a content use request, and performs corresponding processing on the content (decryption, reproduction based on the usage condition, or the like) according to the details of the received usage right. Such usage right is stored and managed in the usage right database 35.
The output unit 37, an example of which is a display device such as a display, outputs the content according to the processing performed by the usage right management unit 34.
The security management/communication unit 36 performs: authentication of the content distribution device 1; secure communications (communications for preventing tapping and tampering and for authenticating the party at the other end) between the content distribution device 1 and the user terminal 3; and countermeasures for communication disconnection. Details about the structure of the security management/communication unit 36 and the communication protocol are given later.
Next, referring to
A random number generation unit 202 generates a random number. The generated random number is passed to a control unit 204.
A cipher processing unit 203 performs data encryption, data decryption, signature generation, signature verification, the generation of parameters for session key generation, and the generation of a session key. Advanced Encryption Standard (AES) is used as an algorithm for data encryption and decryption, and Elliptic Curve Digital Signature Algorithm (EC-DSA) is used as an algorithm for signature generation and signature verification. Details about AES are provided in National Institute Standard and Technology (NIST), FIPS Publication 197, and details about EC-DSA are provided in IEEE 1363 Standard.
When encrypting and decrypting data, the cipher processing unit 203 outputs respective data obtained by performing encryption and decryption using an AES key that has been inputted, with the AES key, a plaintext and encrypted data as inputs. When generating and verifying a signature, the cipher processing unit 203 outputs signed data and a verification result, with data to be signed and data to be signature-verified as well as a private key and a public key as inputs. When generating a parameter for session key generation, the cipher processing unit 203 outputs a Diffie-Hellman parameter, with a random number as an input. When generating a session key, the cipher processing unit 203 outputs a session key, with the random number and the Diffie-Hellman parameter as inputs. Here, Elliptic Curve Diffie-Hellman (EC-DH) is used for session key generation. Details about EC-DH algorithm is given in the above-mentioned IEEE1363 Standard.
The control unit 204 checks authentication processing performed on the user terminal 3, encryption/decryption and tampering of data that is sent/received to and from the user terminal 3. Furthermore, the control unit 204 performs communication disconnection countermeasure processing by assigning a 1-bit transaction identification bit to a transaction, and by storing, into a communication log database 206, such transaction identification bit and communication step information. Here, a transaction refers to a process unit such as “obtainment of a usage right” and “returning of the usage right”.
A communication unit 205 communicates with the security management/communication unit 36 of the user thermal 3.
Next, referring to
A random number generation unit 302 generates a random number. The generated random number is passed to a control unit 304.
A cipher processing unit 303 performs data encryption, data decryption, signature generation, signature verification, generation of parameters for session key generation, and generation of a session key. Inputs and outputs to and from the cipher processing unit 303 are the same as those of the cipher processing unit 203 of the content distribution device 1.
The control unit 304 checks authentication processing performed on the content distribution device 1, encryption/decryption and tampering of data that is sent/received to and from the content distribution device 1. Furthermore, the control unit 304 performs communication disconnection countermeasure processing by storing, into a communication log database 306, the transaction identification bit and communication step information generated by the content distribution device 1.
A communication unit 305 communicates with the security management/communication unit 17 of the user thermal 3.
Next, referring to
(1) Content Purchase Processing
Referring to
In the user terminal 3, the user outputs, to the user instruction processing unit 31, an instruction concerning the purchase of a content. The user instruction processing unit 31 issues, to the content distribution device 1, a content purchase request according to the instruction via the security management/communication unit 36 (Step S41).
In the content distribution device 1, the content purchase processing unit 11 receives, via the security management/communication unit 17, the content purchase request issued by the user terminal 3. Upon receipt of the content purchase request, the content purchase processing unit 11 obtains, from the content right database 19, information about all contents stored therein, and sends it to the user terminal 3 via the security management/communication unit 17 (Step 542).
Here, information such as one shown in
Note that in addition to the number of uses and use time described above, it is possible to use, as usage conditions, a variety of rules such as use period and whether or not it is possible to copy a content onto a storage medium and to print a content to a document.
Referring to
In the content distribution device 1, the content purchase processing unit 11 receives, via the security management/communication unit 17, the content purchase determination notice and the user information sent from the user terminal 3. Then, the content purchase processing unit 11 performs necessary charging processing as well as sending, to the user registration unit 12, the information about the purchased content and the user information (Step S45). Note that since charging processing is outside the focus of the present invention, a description thereof is not given.
The user registration unit 12 transfers, to the user right registration unit 13, the information about the purchased content and the user information sent from the content purchase processing unit 11, as well as storing and registering the user information into the user database 18 (Step S47). In the case where information that is the same as the user information sent from the content purchase processing unit 11 is already registered in the user database 18, the above described registration is not carried out (Step S46, Yes).
Information such as one shown in
The user right registration unit 13 stores and registers, into the user-owned right database 20, a right to use the content to be owned by the user through purchase, based on the information about the purchased content and the user information provided from the user registration unit 12 (Step S48).
Information such as one shown in
Through the above processing, the purchase of the content and the registration of the user-owned right that accompanies such purchase complete.
(2) Content Use Processing
Next, referring to
In the user terminal 3, the user outputs, to the user instruction processing unit 31, an instruction concerning the use of the content. When this is done, the user givens an instruction as to how s/he intends to use the content. For example, the user gives an instruction indicating the number of times s/he wishes to use the content in the case where the usage condition of the purchased content is the number of times, and indicating minutes for which s/he wishes to use the content in the case where the usage condition of the purchased content is a length of time. The user instruction processing unit 31 sends, to the content distribution device 1, a content use request according to such instruction via the security management/communication unit 36 (Step S91). Note that the content use request is not necessarily generated according to a user instruction, and thus there may be the case where it is automatically generated inside the user terminal 3. For example, in the case where a usage condition of a content supported by the terminal 3 is fixed, it is possible to create a content use request inside the user terminal 3 without requiring the user to give an instruction. More specifically, in the case where the user terminal 3 is a terminal that is capable of obtaining and processing a usage right equivalent only to single-time use for each content use due to its limited storage capacity, the user instruction processing unit 31 automatically creates a content use request in accordance with such terminal, and issues it to the content distribution device 1. Such content use request includes the details of the above instruction, the user ID, the terminal ID, and the content ID.
In the content distribution device 1, the user right generation unit 14 receives the content use request sent from the user terminal 3 via the security management/communication unit 17. Upon receipt of the content use request, the user right generation unit 14 checks whether or not information corresponding to such request is registered, by reference to the user database 18 and the user-owned right database 20 (Step S92). More specifically, the user right generation unit 14 first checks whether or not the user ID and the terminal ID included in the content use request is registered in the user database 18. When judging that it is registered, the user right generation unit 14 then checks whether or not the content ID included in the content use request and the usage condition for the user ID according to the request are registered in the user-owned right database 20.
When judging that information corresponding to the content use request is registered, as a result of the check performed in the above Step S92 (Step S93, Yes), the user right generation unit 14 generates a usage right according to the content usage request, and sends it to the user terminal 3 via the security management/communication unit 17 (Step S94). Furthermore, the user right generation unit 14 notifies the content management unit 16 of the content ID included in the content use request. The content management unit 16 extracts the content corresponding to the content ID from the content database 21, and sends it to the user terminal 3 via the security management/communication unit 17 (Step S95).
Meanwhile, when judging that information corresponding to the content use request is not registered, as a result of the check performed in the above Step S92 (Step S93, No), the user right generation unit 14 notifies the user terminal 3, via the security management/communication unit 17, that the content use request is rejected (Step S97).
Here, a usage condition is generated in the above Step S94 in the manner as described below. It is assumed that the registration details stored in the user-owned right database 20 becomes as shown in
Also assume the case where such user has sent a content use request indicating that such user wishes to use the content with the content ID “112233” for one time. In this case, since the usage condition registered in the user-owned right database 20 is two times, the user right generation unit 14 generates a usage right that includes information for providing the number of reproductions=1 as requested and that includes the decryption key of the content. Furthermore, at the same time of generating such usage right, the user right generation unit 14 updates the registration details by decrementing by one the number of times indicated by the usage condition registered in the user-owned right database 20 (decremented from 2 to 1 in an example shown in
Note that the user right generation unit 14 may previously store the generated user right on the assumption that a restart transaction is to be issued by the communication disconnection countermeasure processing. This saves the trouble of generating a user right again when a restart transaction is issued.
Note that in the case where there becomes no usage conditions that were provided through the purchase of the content, as a result of updating the information registered in the user-owned right database 20 every time a user right is issued to the user terminal 3, such user-owned right registered in the user-owned right database 20 may be either deleted or remain there. In the case where the user-owned right remains there, it becomes easier to handle such cases as where the same user has purchased the same content again and where a user returns a usage right s/he has obtained without using it.
Referring to
Through the above processing, it is possible to distribute a content corresponding to a requested usage condition.
(3) Secure Communication/Communication Disconnection Processing
First, referring to
All communications performed between the user terminal 3 and the content distribution device 1 are each made up of a request message started from the user terminal 3 and a response message returned from the content distribution device 1 in response to the request message. A pair of a request and a response is refereed to as a phase, and secure communication/communication disconnection processing is made up of four types of phases as shown in
An initial phase P1 is a phase for mutual authentication to be carried out only once at the beginning after a session is established between the user terminal 3 and the content distribution device 1. A description is given of such initial phase P1 in the respective cases where the preceding transaction of the initial phase P1 has ended normally and where it has ended abnormally due to a communication disconnection or the like.
In the initial phase P1, in the case where the preceding transaction has ended normally, the user terminal 3 sends, to the content distribution device 1, authentication information A used by the content distribution device 1 to authenticate the user terminal 3 as a first request message. After verifying the authentication information A, the content distribution device 1 sends authentication information B used by the user terminal 3 to authenticate the content distribution device 1. When this is done, the content distribution device 1 sends, to the user terminal 3, the initial value (e.g., 0) of a transaction identification bit T together with the authentication information B. After the user terminal 3 verifies the authentication information B, authentication information C for finalizing the mutual authentication is not to be sent individually but together with a request message for the following first command communication phase 2. Meanwhile, in the case where the preceding transaction has ended abnormally due to a communication disconnection or the like, the following points are different from the above-described processing to be performed in the case where the preceding transaction has ended normally: the value of the transaction identification bit T sent from the content distribution device 1; and that a transaction is to be restarted. In other words, the content distribution device 1 sends the value of the transaction identification bit used in the transaction that has not ended normally as it is (without inverting it). Furthermore, the content distribution device 1 regards the next request message as a request for a restart transaction to be carried out for the preceding transaction that has abnormally ended.
The first command communication phase P2 is a phase that is carried out only once following the initial phase P1. The first transaction is processed in the first command communication phase P2. In this first command communication phase P2, the user terminal 3 sends the authentication information C and the transaction identification bit T together with a request message. The value of the transaction identification bit T to be sent here is (i) the value that is obtained by inverting the transaction identification bit sent from the content distribution device 1, in the case where the preceding transaction process has completed normally, and (ii) the value that was used in the preceding (suspended) transaction, in the case where the preceding transaction process has not completed normally. In the case where the transaction identification bit is inverted, the content distribution device 1 sends, to the user terminal 3, a response message corresponding to the request message, judging that a new transaction has started. Meanwhile, in the case where the transaction identification bit is not inverted, the content distribution device 1 sends, to the user terminal 3, the same response message as that of the preceding transaction, judging that it is a restart transaction. The user terminal 3 which has received the response message normally transitions to a commit phase P4 by sending a commit message, in the case of not performing transaction processes successively. Meanwhile, the user terminal 3 which has received the response message normally sends a request message for the following command communication phase P3a and the transaction identification bit T without sending a commit message, in the case of performing transaction processes successively.
The command communication phase (P3a and the like) is a phase that takes place in the case where two or more transactions are processed in the same session. In other words, the command communication phase P3a is used in the case where a content use request and transmission of the content right and content are carried out for plural times. The command communication phase P3 does not take place in the case where a content use request and transmission of the content right and content are carried out only once. The command communication phase P3 is repeated by the number of times equivalent to the number of transactions that follow the first transaction. In this command communication phase P3a, the transaction identification bit T is sent, instead of a commit message, together with a request message for the following command communication phase (P3b), without sending any commit messages.
Commit phase is a phase in which the content distribution device 1 finalizes the completion of the transaction processes after all of such transaction processes end.
The initial value (e.g., T=0) of the transaction identification bit T is sent from the content distribution device 1 to the user terminal 3 together with a response for the initial phase P1. Each of the content distribution device 1 and the user terminal 3 holds the initial value. This transaction identification bit T is inverted in the user terminal 3 when the transaction process completes.
The user terminal 3 inverts the transaction identification bit T (T=1) upon receipt of the transaction identification bit T and the authentication information C as a response for the initial phase P1. This inversion indicates that there is no abnormal transaction in particular.
In the following first command communication phase P2, when receiving a response normally, the user terminal 3 inverts the transaction identification bit T (T=0), judging that the transaction process has completed. In the following first command communication phase P3a, when receiving a response normally, the user terminal 3 inverts the transaction identification bit T (T=1), judging that the transaction process has completed. As described above, the user terminal 3 inverts the transaction identification bit T in the case of normally receiving a response.
Since the inverted transaction identification bit T is sent together with a request message for the following command communication phase, this sending serves as a notification to the content distribution device 1 that a transaction process in the user terminal 3 has completed.
In the first command communication phase P2, the content distribution device 1 compares the initial value T (=0) which it holds and the transaction identification bit T (=1) which it has received together with the request message. When they do not match (when the received transaction identification bit is inverted), the content distribution device 1 judges that the transaction process of the user terminal 3 in the preceding suspended transaction has been completed, and then holds the received transaction identification bit T (1). Accordingly, the transaction identification bit T held inside the content distribution device 1 is to be updated as well.
Similarly, in the command communication phase P3a, the content distribution device 1 compares the initial value T (=1) which it holds and the transaction identification bit T (=0) which it has received together with the request message. When they do not match (when the received transaction identification bit is inverted), the content distribution device 1 judges that the transaction process of the user terminal 3 in the first command communication phase P2 has been completed, and then holds the received transaction identification bit T (=0). Accordingly, the transaction identification bit T held inside the content distribution device 1 is to be updated as well. The same processing is to be performed also in the case where successive command communication phases follow.
After the completion of the last command communication phase, a commit message is sent from the user terminal 3 to the content distribution device 1. This marks the start of a commit phase P4. The content distribution device 1 deletes the transaction identification bit T which it holds upon receipt of the commit message. The user terminal 3 deletes the transaction identification bit T upon receipt of a response message to the commit message. As described above, successive transaction processes are performed in a single session.
In the case of failing to receive the response message normally, the user terminal 3 restarts the communication from the initial phase again, in order to restart the suspended transaction.
At the starting point of the initial phase P11 shown in this drawing, the transaction identification bit T of each of the content distribution device 1 and the user terminal 3 equals to 1. In the initial phase P11, since the transaction identification bit T (=1) is stored inside the content distribution device 1 which has received the authentication information A, it sends such transaction identification bit T (=1) and the authentication information B to the user terminal 3. The user terminal 3 which receives them judges that the preceding request message which it sent in the suspended transaction has been delivered to the content distribution device 1 but a response message to such request message fails to have been delivered to the user terminal 3, because the transaction identification bit T (=1) which it has received and the transaction identification bit T (=1) which it holds match. In this case, the content distribution device 1 also judges that the transaction is in a state of suspension since the previously sent request message has been delivered to it. Furthermore, the user terminal 3 stores the transaction identification bit which it has received without inverting it since the preceding transaction is being suspended.
In the following first command communication phase P12, the user terminal 3 sends again a request message with the same contents as that of the previously sent request message, together with the transaction identification bit T (=1). The content distribution device 1 which has received it judges that the current transaction is a restart transaction of the suspended transaction, because the transaction identification bit T (=1) which it has received and the transaction identification bit T (=1) which it internally holds match. In this case, since the transaction has not completed yet, the content distribution device 1 does not invert the transaction identification bit which it internally holds. Furthermore, the content distribution device 1 is to send again a response message to the request message.
The subsequent command communication phases are the same as those shown in
In the case of failing to receive a response message normally, the user terminal 3 restarts the communication again from the initial phase in order to restart the transaction that is suspended.
At the starting point of the initial phase P12 shown in this drawing, the transaction identification bits T of the content distribution device 1 and the user terminal 3 equal to 0 and 1, respectively. In the initial phase P12, since the transaction identification bit T (=0) is stored inside the content distribution device 1 which has received the authentication information A, it sends such transaction identification bit T (=0) and the authentication information B to the user terminal 3. The user terminal 3 which has received them judges that the preceding request message which it sent in the suspended transaction fails to have been delivered to the content distribution device 1, because the transaction identification bit T (=0) which it has received and the transaction identification bit T (=1) which it holds does not match. In this case, the content distribution device 1 does not judge that the transaction is in a state of suspension since the previously sent request message fails to have been delivered to it. In contrast, the user terminal 3 can judge that the transaction is suspended because of the request message having been undelivered. Furthermore, the user terminal 3 stores the transaction identification bit without inverting it since the preceding transaction is being suspended.
In the following first command communication phase P12, the user terminal 3 may send again a request message with the same contents as that of the previously sent request message, together with the transaction identification bit T (=1), or may send a new request message. This is because the user terminal 3 is of the judgment that the transaction is suspended because of the request message having been undelivered. That is to say, this is because the content distribution device 1 will handle any request message as a new transaction. When the user terminal 3 sends a request message again or a new message, the content distribution device 1 judges that the current transaction is a new transaction, because the transaction identification bit T (=1) which it has received and the transaction identification bit T (=0) which it holds does not match, and stores the received transaction identification bit T (=1) (this is, T held by the content distribution device 1 is inverted). Furthermore, the content distribution device 1 sends a response message according to the request message.
The subsequent communication phase are the same as those shown in
Next, referring to
First, referring to
When receiving the random number Rc and the terminal public key certificate from the user terminal 3 via the communication unit 205, the control unit 204 included in the security management/communication unit 17 of the content distribution device 1 first verifies the signature of such terminal public key certificate by providing, to the cipher processing unit 203, the certificate authority public key certificate stored in the unique information storage unit 201 and the terminal public key certificate (Step S1102).
In the case where the verification has failed as a result of the signature verification in Step S1102 (Step S1103, No), the control unit 204 notifies the user terminal 3, via the communication unit 205, that the request is rejected (Step S1104).
Meanwhile, in the case where the verification has succeeded as a result of the signature verification in Step S1102 (Step S1103, Yes), the control unit 204 causes the random number generation unit 202 to generate random numbers Rs and Rs2 and causes the cipher processing unit 203 to generate a Diffie-Hellman parameter, using the random number Rs2 as an input (Step S1105).
Furthermore, the control unit 204 searches the communication log database 206 to check whether or not the transaction identification bit is stored. When the result of the search is that the transaction identification bit is not stored (i.e., it is deleted in the preceding commit phase, and the transaction ended normally), the control unit 204 sets the transaction identification bit T to the initial value 0, whereas in the other case, it sets the transaction identification bit T to the value of the transaction identification bit that is stored. After this, the control unit 204 causes the cipher processing unit 203 to generate a signature (Equation 2) for data (Equation 1) that results from concatenating the random number Rc received from the user terminal 3, the transaction identification bit T, and DHs generated in Step S1105 (Step S1106). Here, the transaction identification bit T is a bit that is associated with a content request transaction to be performed in the first command communication phase that follows the present initial phase. In the case where a communication disconnection occurs afterwards, the suspended transaction is restarted using this transaction identification bit T.
Rc∥T∥DHs (Equation 1)
S(s, Rc∥T∥DHs) (Equation 2)
The control unit 204 sends the random number Rs and Diffie-Hellman parameter DHs generated in Step S1105, the transaction identification bit T, the server public key certificate stored in the unique key information storage unit 201, and the signature (Equation 2) generated in Step S1106, to the user terminal 3 via the communication unit 205 (Step S1107).
Next, referring to
When receiving the random number Rs, the transaction identification bit T, the Diffie-Hellman parameter DHs, the server public key certificate, and the signature data from the content distribution device 1 via the communication unit 305, the control unit 304 included in the security management/communication unit 36 of the user terminal 3 first verifies the signature of such server public key certificate by providing, to the cipher processing unit 303, the certificate authority public key certificate stored in the unique information storage unit 301 and the server public key certificate (Step S1201).
In the case where the verification has failed as a result of the signature verification in Step S1201 (Step S1202, No), the control unit 304 notifies the user instruction processing unit 31 that the content use request is rejected (Step S1203).
Meanwhile, in the case where the verification has succeeded as a result of the signature verification in Step S1201 (Step S1202, Yes), the control unit 304 generates data (Equation 3) that results from concatenating the random number Rc generated in Step S1101 and the transaction identification bit T and DHs that are received from the content distribution device 1 in Step S1107, and input, to the cipher processing unit 303, such data (Equation 3), the signature data (Equation 2) and the server public key certificate that are received from the content distribution device 1 in Step S1107, so as to verify the signature data (Equation 2) (Step S1204).
Rc∥T∥DHs (Equation 3)
In the case where the verification has failed as a result of the signature verification in Step S1204 (Step S1205, No), the control unit 304 notifies the instruction processing unit 31 that the content use request is rejected (Step S1203).
Meanwhile, in the case where the verification has succeeded as a result of the signature verification in Step S1204 (Step S1205, Yes), the user terminal 3 can know that it is surely communicating with the content distribution device 1 (verification of the party at the other end). The control unit 304 causes the random number generation unit 302 to generate a random number Rc2 and causes the cipher processing unit 303 to generate a Diffie-Hellman parameter DHc, using the generated random number Rc2 as an input (Step S1206).
Furthermore, the control unit 304 causes the cipher processing unit 303 to generate a session key KS from the DHs received from the content distribution device 1 in Step S1107 and the Rc2 generated in Step S1206 (Step S1207).
After this, the control unit 304 stores, into the communication log database 306, the transaction identification bit T received from the content distribution device 1 in Step S1107 (Step S1208). Accordingly, a content use request transaction corresponding to the transaction communication bit T is started, and the fact that it is a state for waiting for a response is stored into the database.
The control unit 304 causes the cipher processing unit 303 to generate a signature (Equation 5) for data (Equation 4) that results from concatenating the random number Rs received from the content distribution device 1 in Step S1107 and the DHc generated in Step S1206, to invert the transaction identification bit stored in Step S1108 using the session key KS generated in Step S1207, and to encrypt the inverted transaction identification bit T and a content use request message M (Step S1209). The content use request message includes at least the content identifier of the content to be used. A sequence number Seq and a hash value h are added to the encrypted data (Equation 6). A hash value is assigned to the sequence number Seq and the content use request message M. The sequence number is a serial number which is reset to 0 when a session starts, i.e., when the initial phase starts, and which is incremented by 1 every time a message is sent and received.
Rs∥DHc (Equation 4)
S(c, Rs∥DHc) (Equation 5)
E(KS, Seq∥T∥M∥h) (Equation 6)
The control unit 304 sends the DHc generated in Step S1206, and the signature (Equation 5) and the encrypted data (Equation 6) that are generated in Step S1209, to the content distribution device 1 via the communication unit 305 (Step S1210).
Next, referring to
When receiving the Diffie-Hellman parameter DHc, the signature data, and the encrypted data from the user terminal 3 via the communication unit 205, the control unit 204 included in the security management/communication unit 17 of the content distribution device 1 generates data (Equation 7) that results from concatenating the random number Rs generated in Step S1105 and the DHc received from the user terminal 3 in Step S1210, and inputs, to the cipher processing unit 203, such generated data (Equation 7), the signature data received from the user terminal 3 in Step S1210, and the terminal public key certificate, so as to verify the signature data (Step S1301).
Rs∥DHc (Equation 7)
In the case where the verification has failed as a result of the signature verification in Step S1301 (Step S1302, No), the control unit 204 notifies the user terminal 3, via the communication unit 205, that the content use request is rejected (Step S1303).
Meanwhile, in the case where the verification has succeeded as a result of the signature verification in Step S1301 (Step S1302, Yes), the content distribution device 1 can know that it is surely communicating with the user terminal 3 (verification of the party at the other end). The control unit 204 causes the cipher processing unit 203 to generate a session key KS from the DHc received from the user terminal 3 in Step S1210 and the Rs2 generated in Step S1105. After this, the control unit 204 inputs, to the cipher processing unit 203, the encrypted data received in Step S1210 and the generated KS so as to decrypt the encrypted data and check the sequence number and the hash value (Step S1304).
Furthermore, the control unit 204 searches the communication log database to obtain the transaction identification bit. When the result of the search is that the transaction identification bit is not present or its value does not match that of the transaction identification bit T received in Step S1210 (Step S1305, No), the content distribution device 1 judges that the request message is for a new transaction, and the control unit 204 stores, into the communication log database 206, the transaction identification bit T received from the user terminal 3 in Step S1301 (Step S1306). Accordingly, the transaction identification bit T is to be inverted. Furthermore, the fact that the content use request transaction has completed up to this step, is stored into the database.
After this, the control unit 204 notifies the user right generation unit 14 of the content use request received from the user terminal 3 in Step S1210, as a new transaction (Step S1307).
Meanwhile, when the transaction identification bit is already present and its value match that of the transaction identification bit T received in Step S1210 (Step S1305, Yes), the control unit 204 judges that the transaction is suspended due to a communication disconnection or the like, and notifies the user right generation unit 14 of the content use request received from the user terminal 3 in Step S1210, as a restart transaction (Step S1308).
The control unit 204 causes the cipher processing unit 203 to encrypt the sequence number, the usage right generated by the user right generation unit 14, and their hash value, using the session key KS generated in Step S1304, and sends the resultant to the user terminal 3 via the communication unit 205 (Step S1309). Here, since the usage right to be set has been encrypted using the session key KS that is generable only by the content distribution device 1 and the user terminal 3, it is impossible for a third party to tap the usage right.
When receiving the encrypted data from the content distribution device 1 via the communication unit 305, the control unit 304 included in the security management/communication unit 36 of the user terminal 3 first causes the cipher processing unit 303 to decrypt the encrypted data using the session key KS so as to restore the sequence number, the usage right, and the hash value. After this, the control unit 304 checks the sequence number and the hash value, and notifies the usage condition(s) to the user instruction processing unit 31. Furthermore, the control unit 304 inverts the transaction identification bit stored in the communication log database 306 (Step S1310). This marks the completion of the transaction corresponding to the transaction identification bit T.
After this, the processing goes to Step S1401 when there is a subsequent transaction, whereas it goes to Step S1501 in the other case.
Next, referring to
The control unit 304 encrypts the transaction identification bit T stored into the content log database 306 and the content use request message M, using the session key KS generated in the initial phase (Step S1401). The content use request message includes at least the content identifier of the content to be used. A sequence number Seq and a hash value h are added to the encrypted data. A hash value is assigned to the sequence number Seq and the content use request message M.
The control unit 304 sends the encrypted data generated in Step S1401 to the content distribution device 1 via the communication unit 305 (Step S1402).
When receiving the encrypted data from the user terminal 3 via the communication unit 205, the control unit 204 included in the security management/communication unit 17 of the content distribution device 1 inputs, to the cipher processing unit 203, the encrypted data and the KS generated in the first command communication phase so as to decrypt the encrypted data and check the sequence number and the hash value (Step S1403).
Furthermore, the control unit 204 searches the communication log database to check whether or not the transaction identification bit T received from the user terminal 3 in Step S1402 and the transaction identification bit T stored into the communication log database match. When the result of the check is that they do not match (Step S1404, No), the control unit 204 changes the data stored in the communication log database 206 to T received from the user terminal 3 in Step S1402 (Step S1405). Accordingly, the transaction identification bit T is inverted. Furthermore, the fact that the content use request transaction has completed up to this step, is stored into the database.
After this, the control unit 204 notifies the user right generation unit 14 of the content use request received from the user terminal 3 in Step S1402, as a new transaction (Step S1406).
Meanwhile, when the transaction identification bit T and the transaction identification bit to be stored into the communication log database 206 match (Step S1404, Yes), the control unit 204 judges that the transaction is suspended due to a communication disconnection or the like, and notifies the user right generation unit 14 of the content use request received from the user terminal 3 in Step S1402, as a restart transaction (Step S1407).
The control unit 204 causes the cipher processing unit 203 to encrypt the sequence number, the usage right generated by the user right generation unit 14, and their hash value, using the session key KS generated in the first command communication phase, and sends the resultant to the user terminal 3 via the communication unit 205 (Step S1408). Here, since the usage right to be set has been encrypted using the session key KS that is generable only by the content distribution device 1 and the user terminal 3, it is impossible for a third party to tap the usage right.
When receiving the encrypted data from the content distribution device 1 via the communication unit 305, the control unit 304 included in the security management/communication unit 36 of the user terminal 3 first causes the cipher processing unit 303 to decrypt the encrypted data using the session key KS so as to restore the sequence number, the usage right, and the hash value. After this, the control unit 304 checks the sequence number and the hash value, and notifies the usage condition(s) to the user instruction processing unit 31. Furthermore, the control unit 304 inverts the transaction identification bit T stored in the communication log database 306 (Step S1409). This marks the completion of the transaction corresponding to the transaction identification bit T.
After this, the processing goes to Step S1401 when there is a subsequent transaction, whereas it goes to Step S1501 in the other case.
Finally, referring to
The control unit 304 encrypts a commit message using the session key KS generated in the initial phase (Step S1501).
The control unit 304 sends the encrypted data generated in Step S1501 to the content distribution device 1 via the communication unit 305 (Step S1502).
When receiving the encrypted data from the user terminal 3 via the communication unit 205, the control unit 204 included in the security management/communication unit 17 of the content distribution device 1 inputs, to the cipher processing unit 203, the encrypted data and the KS generated in the first command communication phase so as to decrypt the encrypted data (Step S1503).
Furthermore, the control unit 204 deletes the transaction identification bit stored in the communication log database 206 (Step S1504).
The control unit 204 causes the cipher processing unit 203 to encrypt an ACK message using the session key KS generated in the first command communication phase, and sends the resultant to the user terminal 3 via the communication unit 205 (Step S1505).
When receiving the encrypted data from the content distribution device 1 via the communication unit 305, the control unit 304 included in the security management/communication unit 36 of the user terminal 3 first causes the cipher processing unit 303 to decrypt the encrypted data using the session key KS so as to restore the ACK message, and notifies the user instruction processing unit 31 that the commit processing has completed. After this, the control unit 304 deletes the transaction identification bit T stored in the communication log database 306 (Strep S1506).
Note that a transaction restart process to be performed after a communication disconnection is started in response to a transaction restart process request sent from the user instruction processing unit 31, and is restarted as a first command communication phase, after an initial phase is processed, using the transaction identification bit (the transaction identification bit stored in the communication log database) T corresponding to the transaction that is suspended due to a communication disconnection. The content use request message to be sent in this first command communication phase may be passed to the control unit 304 again by the user instruction processing unit 31 or may be stored by the control unit 304 into the communication log database at the time of storing the transaction identification bit thereto, so that such stored message can be used.
Through the above processing, it is possible to perform processing for authenticating the user terminal 3, processing for preventing usage right tapping and tampering, and communication disconnection countermeasure processing.
In the communication protocols presented in the present embodiment, the number of sendings and receivings required for processing “n” transactions is one sending and receiving in the initial phase, one sending and receiving in the first command communication phase, n minus one sending and receiving in the command communication phase, and one sending and receiving in the commit phase, which amounts to a total of n+two times.
Note that the encryption algorithm, session key sharing algorithm, and certificate format used in the present embodiment do not necessarily have to be those described above, as long as they have the equivalent functions. For example, TripleDES may be used as the data encryption algorithm. Furthermore, checksum values such as CRC may be used as a hash value added to the encrypted data. Moreover, common key cryptography may be used as the SAC protocol instead of public key cryptography.
In the present embodiment, although the terminal public key certificate is sent from the user terminal 3 in the initial phase (Step S1101 in
Note that in Step S1107, the data sent from the content distribution device 1 to the user terminal 3 may include the random number Rc received from the user terminal 3. In other words, the data to be sent from the content distribution device 1 are the random number Rc, the random number Rs, the transaction identification bit T, the parameter DHs, and the signature data. Accordingly, it becomes not necessary for the user terminal 3 to hold therein the random number Rc. Similarly, the data sent from the user terminal 3 to the content distribution device 1 in Step S1210 may include the random number Rs received from the content distribution device 1. In other words, the data to be sent from the content distribution device 1 are the random number Rs, the parameter DHc, the signature data, and the encrypted data.
Although the present embodiment includes the processing performed by the user terminal 3 to authenticate the content distribution device 1, this authentication processing may be deleted if it is not particularly required.
In the present embodiment, although the judgment of whether the transaction identification bits match or not is made in the command communication phase, this judgment processing may be deleted if it is not particularly required. In this case, a transaction to be processed in the command communication phase is always processed as a new transaction.
In the present embodiment, although the transaction identification bit is sent from the content distribution device 1, this may be omitted. In other words, the processing performed by the content distribution device 1 in the initial phase and information about the transaction identification bit included in a message sent in the initial phase are omitted.
In the present embodiment, although registration details is not to be updated in the case where the generation of the user right in Step S1308 and Step S1407 is instructed by the security management/communication unit 17 as a restart transaction, it is also possible to evaluate the content use request again and to generate the user right again. Accordingly, it becomes possible to respond to changes that occur between when a new transaction is issued and when a restart transaction is issued. For example, while the generation and sending of a usage right was performed since it was before the use expiration date of the content at the time of issuing a new transaction, there would be the case where it is beyond such use expiration date when a request is made again as a restart transaction. In such case, no generation and issuing of a usage right is performed for the restart transaction.
Furthermore, the present embodiment may include processing for canceling a transaction that is in process due to a communication disconnection. In the case of performing cancellation processing, a cancellation message is sent from the user terminal 3 in a first command communication phase to be performed after communication disconnection, in response to an instruction by the user instruction processing unit 31, the cancellation message including the transaction identification bit T corresponding to a transaction for which a response is not yet received (the transaction identification bit T stored in the communication log database 306). The content distribution device 1 which has received the cancellation message notifies the user right generation unit 14 that it has received the cancellation message, so as to cause it roll back the state of the transaction in process to the state before the processing begins. After this, the content distribution device 1 sends an ACK message to the user terminal 3.
Suppose that two processes for processing a content use request performed between the content distribution device 1 and the user terminal 3 are Process A and Process B. In the case where a communication needs to be disconnected after the completion of Process A, authentication is performed again and a new session key is created again at the start of Process B in normal cases. However, if response time in Process B is wished to be reduced, it is also possible to previously store the session key of Process A both in the content distribution device 1 and the user terminal 3 to use it again, so that authentication processing in Process B can be excluded.
Note that in the present embodiment, the content distribution device 1 may set a limit on the use of a session key. For example, the content distribution device 1 notifies the user terminal 3 that the reuse of the session key is not possible in cases such as: where the number of reuses of the session key exceeds a prescribed upper limit; where a prescribed length of time has elapsed after the session key is first created; where a prescribed amount of communication data is exceeded after the session key is first created; where a predetermined content or usage right is distributed; and where a predetermined content or usage right is distributed to a predetermined user terminal 3. The user terminal 3 which has received a notice indicating that the reuse of the session key is not possible, creates a session key again, i.e., it restarts the communication from the initial phase again.
The present embodiment describes a protocol between the content distribution device 1 and the user terminal 3, but it is also applicable to license exchange between user terminals. For example, it is applicable to the transfer of a license between user terminals in a house. In this case, a group identifier indicating that they are user terminals in the same house is specified in advance or through the setting performed after the purchase. In the case where the protocol presented in the present embodiment are applied to the transfer of a license between user terminals, a terminal that transfers the license is considered as the content distribution device 1, whereas a terminal that receives the license is considered as the user terminal 3. When the transfer of a license is limited to the transfer within the same house, i.e., only to those with the same group identifier, the license receiving terminal sends the group identifier to the license distributing terminal to judge whether the license distributing terminal has the same group identifier or not, and sends the license only when the group identifiers are the same. Any method may be used to send the group identifier as long as such method is capable of preventing tapping, tampering, and spoofing. For example, the group identifier may be included in encrypted data to be sent in the first command communication phase. Furthermore, it is also possible to send a hash value of the group identifier without sending the group identifier itself. It is also possible to further provide, after the initial phase, a phase for sending a group identifier hash so as to send a group identifier hash encrypted with the session key.
Note that the components included in the content distribution system presented in the present embodiment may be implemented either as hardware or software.
As described above, according to the present invention, it is possible to provide a system and devices with which it is possible to (1) achieve all the functions, that is, the prevention of license tapping and tampering, the authentication of the party at the other end, and countermeasures for communication disconnection, (2) reduce the number of times sendings and receivings are carried out between a server device and a terminal device in the case where plural transaction processes are performed, and (3) realize a protocol that requires the server device and the terminal device to manage and hold a small amount of information to achieve the above functions. Accordingly, it becomes possible to provide a content distribution system that is capable of reducing the time the user has to wait until such user receives a response after making a request.
The present invention is appropriate for use as a digital content distribution system including: a server device that provides a terminal device with a license for using a content, based on transaction processes including the receiving of a request message, the sending of a response message, and the receiving of a commit message for finalizing the completion of the transaction; and the terminal device that controls the use of the content based on the license obtained from the server device. For example, the following are appropriate as the server device: a distribution server of a service provider that distributes a digital content via the Internet; a broadcasting device that digitally broadcasts a digital content via broadcasting; and so forth, and the following are appropriate as the terminal device: a set-top box for receiving digital broadcasting; a content reproduction device and a recording device such as a digital TV, a DVD recorder, a hard disk recorder, and a personal computer; a compound device of these; and so forth.
| Number | Date | Country | Kind |
|---|---|---|---|
| 2003-017637 | Jan 2003 | JP | national |
| 2003-049710 | Feb 2003 | JP | national |
| Filing Document | Filing Date | Country | Kind | 371c Date |
|---|---|---|---|---|
| PCT/JP04/00677 | 1/27/2004 | WO | 7/19/2005 |
