JP2003069549A - Information protection management system using rfid mounted storage medium - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a system, which provides encrypted information by a recording medium and safely provides a decrypting key for decrypting the information. SOLUTION: In an information providing system using a RFID (radio frequency identification) mounted storage medium, in which encrypted information is recorded and a RFID chip is appended to, the invention is an information protection management system using a RFID mounted storage medium that is characterized in that the system comprises (1) a means for distributing a decrypting key from an information supplier and for recording it in a RFID chip of user's RFID mounted storage medium, and (2) a means for reading the decrypting key from the RFID chip and for decrypting encrypted information by the decrypting key for usage when encrypted information is read from the RFID mounted storage medium.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention has means for distributing a decryption key on the Internet so that when information is provided on a large capacity recording medium, the information encrypted and recorded on the recording medium can be used. In addition, the present invention relates to an information protection management system for the purpose of preventing unauthorized use of information on the recording medium by copying.

[0002]

2. Description of the Related Art Currently, most of information is recorded and stored in a recording medium as electronic information. Information is also provided on recording media. Electronic information has advantages such as easy copying and easy processing. It can be sent by communication, or can be easily copied and sent to a large number of users. Because of this convenient feature, illegal use by copying recorded information or illegal use by plagiarism has become a social problem.

For example, information (data) such as music, movies, programs, and commercial statistical data provided on CDs and DVDs is copied to another recording medium and is illegally used. In order to prevent such illegal use, a method of encrypting information and recording it on a recording medium and providing it is generally used. In this case, when using information registered in a recording medium such as a CD or a DVD, it is necessary to obtain a decryption key (decryption key) from the information source. There is also a form in which the recording medium in which the encrypted information is recorded is obtained at a mail order store or a store and the decryption key is obtained on the Internet. Since a recent recording medium has a large capacity, a plurality of types of information are registered in one recording medium. Information is encrypted with different encryption keys, and for information to be used, a decryption key for the information is purchased.

Recently, the method of providing information on the Internet has become quite common. Although there are still many forms in which information is transmitted as raw data, encryption methods are becoming more widely used. For example, there is a method of transmitting encrypted information first and then transmitting a decryption key. In most cases, the decryption key is sent by mail, and the user inputs the decryption key to decrypt and use the encrypted information. In this case, when the encrypted information is copied, the decryption key is leaked to a third party, and there is a risk that the copied information will be illegally used. There is also a method of automatically writing the decryption key in the same recording medium, but since the key in the medium can be copied at the same time, it is impossible to prevent unauthorized use.

Recently, RFID has attracted attention as a tool for personal authentication, product identification, position measurement and the like. RFID (Radio
Frequency IDentification: A non-contact automatic identification technology by radio frequency) is a technology in which information is stored and can be read by non-contact. For example, there is a high-speed toll collection system in which an RFID is used to automatically identify a car at a high-speed toll gate, and a high-speed toll is automatically collected according to automatic identification. In this method, personal information is recorded on the RFID chip mounted on the car, the RFID information is read by a RFID reader installed at the tollgate in a contactless manner, and the read personal information is sent to the central computer, Charges will be made.

The RFID chip can read recorded information in a non-contact manner, operates without a battery, and has excellent durability and weather resistance. RF
The ID chip is battery-less, but the electromagnetic induction of the radio waves emitted from the RFID reader / writer causes a current to flow in the RFID chip, which activates the circuit built in the RFID chip. Computer circuits can be built into the RFID chip, not only as a tool for recording and storing information, but also as logic circuits for security management. The RFID chip uses a non-volatile RAM (a type of memory that can be read and written, and records in the memory can be saved without a battery), and is usually used as a ROM. For example, it can be used as a contactless automatic ticket gate with an RFID chip embedded in a commuter pass or as an ID card.
A usage pattern in which an RFID chip is embedded to perform personal authentication is being considered. Depending on the size of the RFID chip and the length of the antenna connected to it, contactless operation is possible from a distance of a few millimeters to a distance of several meters. Therefore, application in a wide range of fields is expected.

There are many patent applications relating to RFID, such as "Unauthorized access prevention method in contactless data carrier system" (Japanese Patent Laid-Open No. 2000-259571) and "Product management" (Japanese Patent Laid-Open No. 2001-03).
1218) and so on. The former is a method of preventing unauthorized access to an RFID computer, and the latter is a management method of attaching an RFID chip to a product to manage the product.

[0008]

The development of the digitization of information is remarkable, and it handles not only code information (text information) as in the past, but also large-capacity data such as image data and voice data. It has become very everyday. The day when all television broadcasting will be switched to digital broadcasting will not be so far in the future. The advantages of digital information include easy copying, no deterioration due to copying, and easy processing. Copying of analog data deteriorates the data, and the original information is deformed if the copying is repeated several times. On the other hand, the digital information is not deteriorated no matter how many times it is copied, and there is a problem that it is illegally used by copying.

With the progress of broadband (high speed, large capacity), distribution of music and images via the Internet is drawing attention. Because music and images are digitized,
The strength of digital information is that it can be easily processed by a computer and there is no data deterioration due to distribution or copying. Also, data compression is possible, and it is advantageous compared to analog data in that a large amount of data is handled on the net. On the other hand, distribution of illegal information and illegal use by copying have become a social problem. One of them is the Napster problem. There is a copyright dispute with the rights holders because unauthorized information is exchanged illegally on the Internet.

[0010] A new form of information provision, in which a plurality of pieces of information are encrypted and recorded in one large-capacity recording medium and provided at a store or by mail order, has become popular. Information (music, movies, games, etc.) recorded on the medium can be sample-run (so-called preview, preview, etc.), and the user can decide which information to buy by the sample-run. When a user purchases information, a method of purchasing the decryption key at the store where the user purchased it or a method of having the decryption key transmitted on the Internet is used. Previously, a method was used in which the user directly inputs the decryption key sent by e-mail or the like, but recently, the information distribution system has switched to the method of directly writing it on a recording medium. In short, this is to prevent the decryption key from being known to the user. However, since the information and the decryption key are copied at the same time because the information and the decryption key are written on the same recording medium, it cannot be said to be perfect against illegal use by copying.

The problem to be solved by the present invention is to propose a system for providing encrypted information (encrypted information) on a recording medium and securely providing a decryption key for decryption. Another object of the present invention is to securely provide encrypted information and its decryption key via the Internet.

[0012]

In order to solve the above-mentioned problems, the invention described in claim 1 uses an RFID-equipped recording medium in which an RFID chip is added to a recording medium in which encrypted information is recorded. In the information providing system, (1) a means for distributing the decryption key from the information provider and recording it in the RFID chip of the user's RFID mounted recording medium, (2) when reading the encrypted information from the RFID mounted recording medium An information protection management system using an RFID-equipped recording medium, further comprising means for reading the decryption key from the RFID chip and decrypting and using the encrypted information with the decryption key. And

According to a second aspect of the present invention, in an information providing system that uses an RFID-equipped recording medium in which an RFID chip is added to the recording medium, (1) the encrypted information and the decryption key are distributed from a server, and The encrypted information is recorded on the recording medium, and the decryption key is recorded on the RFID chip.
(2) a means for reading the decryption key from the RFID chip when reading the encrypted information from the RFID-loaded recording medium, and decrypting and using the encrypted information with the decryption key, An information protection management system using an RFID-equipped recording medium characterized by being provided.

According to a third aspect of the present invention, in an information providing system that uses an RFID-equipped recording medium in which an RFID chip is added to the recording medium, (1) the encrypted information and the decryption key are distributed from the server, and Encrypted information and the decryption key in the recording medium, means for recording an ID corresponding to the decryption key in the RFID chip, (2) when reading the encrypted information from the RFID-equipped recording medium, The ID is read from the RFID chip, compared with the decryption key read from the recording medium, and if the decryption key corresponds to the ID, the encrypted information is decrypted and used to correspond to the ID. In the case of a decryption key that does not exist, a means for not decrypting the encrypted information is provided, and an information protection management system using an RFID mounted recording medium is provided.

According to a fourth aspect of the present invention, there is provided the information protection management system using an RFID-equipped recording medium according to the first to third aspects, wherein the distribution uses the Internet.

According to a fifth aspect of the present invention, there is provided an information protection management system using an RFID-equipped recording medium according to the first to third aspects, wherein the distribution uses a dedicated line.

The system according to claim 6 is characterized in that the distribution is wireless.
The information protection management system uses the RFID-equipped recording medium according to any one of 3 to 3.

In the present invention, a recording medium equipped with an RFID chip (RFID-equipped recording medium) is used to construct a system including means for encrypting information, recording the information on the recording medium, and writing a decryption key in the RFID chip. To do. In the present invention, the information provider side basically provides the decryption key to the user. Of course, the information producer and the key provider who distributes the decryption key may be different. The important point is to have a system where the end user cannot see the decryption key directly.

The information provider encrypts the information, records it on the RFID-equipped recording medium, and provides it. On the other hand, the user obtains the RFID-equipped recording medium from a store such as a record store or a video store. Encrypted information is usually recorded on the RFID-equipped recording medium. The user requests the information provider for a key for the information that he / she wants to use from the obtained RFID-equipped recording medium. When the Internet is used, the key is distributed from the Internet and directly written on the RFID of the RFID-equipped recording medium in the online state. When receiving the key at the store, the user takes the RFID-equipped recording medium into which the key is to be written to the store and asks the store staff to write the key to the RFID wirelessly (RFID input / output device). The key is basically prepared for each information.

When the user uses the encrypted information, he or she may handle the encrypted information in the same manner as an ordinary recording medium, but the player for an RFID-equipped recording medium must have a built-in RFID input / output device. This is because the key is recorded in the RFID. In the present invention, this player is called a player with an RFID reader / writer (player with an RFID input / output device). Using the key read from the RFID with the RFID input / output device, the player reads the encrypted information from the recording medium, and at the same time decrypts it with the decoder using the key recorded in the RFID and returns the encrypted information to the original information. Output on the output device.

The device used by the user in the information protection management system of the present invention has the following hardware configuration. RF
The RFID of the ID-equipped recording medium is composed of a CPU, a ROM in which security processing software is recorded, a non-volatile memory for recording a decryption key, a RAM as a spare memory, and an antenna. On the other hand, the RFID input / output device is composed of an RFID and an antenna. In addition, a decoder (IC chip with built-in decryption software) is installed in the player including the RFID input / output device, and the decryption of the encrypted information is performed using the key read from the RFID-equipped recording medium.

It has been described above that the key is different for each piece of information, but in order to identify this information, an ID is attached to each piece of information and recorded on a recording medium and RFID. A header is provided on the recording medium, and an ID (information ID) is recorded together with a recording position (address) of information. The medium ID, which is an identifier for the medium, is also recorded in the header.

When the key is downloaded via the Internet or wirelessly, the user has an ID (information identifier, information ID)
By notifying the provider of the medium ID, the key corresponding to the ID and the ID are downloaded and recorded in the RFID. When reading the information from the RFID-loaded recording medium, if the ID of the recording medium and the ID of the RFID chip do not match, the encrypted information is not decrypted as an unauthorized recording medium.

[0024]

BEST MODE FOR CARRYING OUT THE INVENTION Embodiments of the present invention will be specifically described with reference to the drawings. FIG. 1 is a system configuration diagram viewed from the hardware of the invention. RFID recording medium 1 is information recording surface 1
It is composed of 30 (recording medium), RFID chip 110 (RFID) and antenna 120, and the antenna is connected to the RFID. The reach of radio waves varies depending on the length of the antenna.
In the information protection management system of the present invention, the player
2 uses the RFID I / O device 210 built in,
The RFID input / output device 210 is composed of an RFID chip 211 and an antenna 212 as in the RFID mounted recording medium 1. Antenna is RF
It may be built into the ID, but because of the small chip,
Without antennas 120 and 212, the distance that radio waves can reach (operating distance) is about a few millimeters, which may be a constraint when designing a player. Therefore, in the embodiment of the present invention, a circular antenna is externally attached so as not to affect the recording medium 130. In the embodiment of the present invention, the range of radio waves (operating distance) can be extended to 2-3 centimeters. RFID 11 used in the present invention
An example of specifications of 0 and 211 is given below. RF: ISO14443-B CPU: 8bits Non-volatile memory: 32Kbits ROM: 23Kbits RAM: 1Kbits

RF is an abbreviation for "Radio Frequency", and the radio frequency standard is ISO14443-B. With non-volatile memory
The RAM is basically the same, but the former stores the key and the latter is used as a backup (for example, storage of ID). Both are read / write memory, but normal RAM
Unlike, it is a non-volatile memory. The memory sizes of the RAM and non-volatile memory described above are examples, and the key length and I
The memory size used differs depending on the length of D or the number thereof. Security processing software is recorded in the ROM to prevent unauthorized access.

The player 2 has a head (optical reading head in the case of CD or DVD) for reading the encrypted information from the recording medium, but it is omitted in the figure. The encrypted information read from the recording medium 130 is the RFID
Decryption is performed using the key read by the input device (RFID211), and this decryption is performed by the decoder 230 (IC chip with built-in decryption software).

In the illustrated example, the output destination of the information decrypted by the player 2 is the personal computer 3 (PC). That is, the result that the user sees (or hears) is the image or sound output to the display or speaker (not shown) connected to the personal computer.

In the present invention, it is also possible to write (additionally) information on the recording medium. In that case, the player is required to have a write function as well as a read function for the recording medium (for example, CD-R or DVD-R).
Further, by using a magnetic recording medium equipped with RFID and a hard disk with a built-in RFID input device, the information protection management system of the present invention can be applied to the hard disk. Although a removable hard disk is also possible, a magneto-optical recording medium (MO, MD) is preferable as the large-capacity recording medium according to the gist of the present invention.

To receive the key for decrypting the encrypted information from the Internet 9, the user first connects to the key provider's site with the PC 3 and informs the information provider of the medium ID and the information ID. The information provider side distributes the corresponding key on the Internet based on the information, and the user side directly transmits the key to the RFID 211 of the player 2 via the PC. RFID211 performs security processing on input information (key in this case), and when there is no security problem
Send to RFID110. The RFID 110 performs security processing on the input information, and if there is no problem, writes the key in the nonvolatile memory of the RFID 110. This allows the user to use the information corresponding to the key.

When the player 2 writable on the recording medium is used, the user can directly receive the information, and the key is written in the RFID 110 for the encrypted information and the key sent from the information provider, The encrypted information is recorded on the recording medium 130.
Write in. The key and the encrypted information are recorded separately, and in order to record the key in the RFID 110, even if the encrypted information recorded in the recording medium 130 is copied, the key of the RFID 110 is not copied, Information cannot be illegally used by copying. Since the information protection management system of the present invention automatically writes the key and information, the key is never known to the user.

FIG. 2 shows an example of the data structure of the RFID mounted recording medium. The recording medium 130 includes a header H and encrypted information (data). This medium can be specified by the product number and medium ID. In the individual information recording column, IDn, which is an information identifier, and an address Pn, which is a recording position of encrypted information.
Is registered, and the encrypted information Cn is directly pointed to by Pn (n is a numerical value in the figure). The encrypted information Cn is encrypted with the header Hn. When a user obtains a key for desired information, the information provided to the key provider is the product number (media ID in some cases) and the information ID (ID
1, ID2, etc.). On the other hand, the key Kn is recorded in the nonvolatile memory of the RFID 110, and the IDn is recorded in the RAM. Kn and IDn have a one-to-one relationship.

In the mode of receiving IDn and Kn at the same time,
IDn is written in the recording medium 130 and the RFID 110. When reading the encrypted information, first, both IDn
Are compared, and decryption is performed only when they match. That is, IDn not only identifies information, but also has a function of protecting information.

In the present invention, not only the key but also the information can be delivered at the same time. For example, in the example of the figure, the user sends the encrypted information Cj, the key Kj, and the information identifier IDj from the provider side.
At the same time, the player records each information (data) in each storage location in the order of ,,. At this time, the information protection management system checks so that the information is not redundantly written in the place where the information is already recorded. In the form of writing the information identifier IDj and the encrypted information Cj to the recording medium 130, it is necessary that the player has a read / write function (for example, CD-R).

[0034]

EXAMPLE FIG. 3 shows information (music, video,
This is an example showing the flow of the game software) and the recording medium equipped with RFID. The user 5 can purchase 650 the RFID-equipped recording medium 1 containing the encrypted information at the store 6 (record store, video store, etc.), execute it on the player 52 at home, and enjoy the information on the recording medium. Since the information on the RFID-equipped recording medium 1 is encrypted, information without a key cannot be used. Therefore, if the Internet 9 is connected, the Internet is connected to the server S7 of the key provider 7 and the product number, medium ID, and information ID are transmitted 570,
Request the key that corresponds to the information you want to purchase. Upon receiving the request, the key provider 7 delivers 750 the key. The key is written into the RFID by the player 52.

On the other hand, in the case of the user 5 who cannot connect to the Internet 9, the key cannot be provided from the Internet. Therefore, if there is the used information, the RFID-equipped recording medium 1 is brought to the store 6 561, Ask the player 62 to write the key to the RFID. In this example, the key is not managed by the store but is distributed from the key provider 7. That is, the store connects to the key provider's server S7 via the Internet and sends the product number, medium ID, information ID, etc. for the information desired by the user.
To do. Server S7 delivers the key to the requested information
To 760. The player 62 who received the key is the recording medium 1 equipped with RFID.
Write the key to the RFID. User has RF with key written
Take ID recording medium 1 home 651, home player 52
You can play and enjoy the information recorded with the key.

By the same procedure, not only the key but also the information can be received through the store or the Internet. However, when the user receives information through the Internet at home, the player 52 needs to have a function of writing information on the recording medium of the RFID-equipped recording medium.
It should be noted that billing is not included in the scope of the present invention, and is omitted here.

[0037]

The present invention is a system that uses an RFID recording medium to prevent unauthorized use of information by copying and enable protection management of information. The information is encrypted and recorded on the recording medium, and the key (decryption key) or ID
Since the code is recorded on the RFID chip, even if the encrypted information on the recording medium can be copied, the key cannot be copied. Therefore, the copied encrypted information will not be used illegally.

As the capacity of the recording medium increases, a large number of pieces of information (for example, tens of songs in the case of music) can be simultaneously recorded on one recording medium. But users don't necessarily want everything. On the other hand, in the present invention, the information is provided in the form of selecting only the desired information and purchasing the key. Of course, you have to purchase a recording medium at the beginning, but you can get it cheaply. If you want to use additional information, you can purchase the key only on the Internet and the procedure is easy. Moreover, since it is not necessary to purchase a recording medium, the information can be obtained at a much lower cost than when purchasing information with a single recording medium.

On the other hand, on the information provider side, since it is possible to provide the user with a recording medium in which a plurality of pieces of information are copied at the same time, it is possible to efficiently manufacture products. In addition, by combining the information provided to users, products that stimulate user needs can be planned and manufactured. In addition, since the information that the user does not want to purchase initially exists in the same recording medium, it can be expected that the user has more chances to newly make an additional order. Even in that case, since the medium is already in the user's hand, it is sufficient to sell only the key, the product distribution can be simplified, and an efficient sales strategy can be established. Write-once or full-write type sales are also possible, and efficient and effective product sales can be realized.

It is possible to sell such information as follows.
This is because the information protection management system of the present invention provides complete protection against unauthorized use of information by copying.

[Brief description of drawings]

FIG. 1 is a block diagram of a download type information protection management system using an RFID mounted recording medium of the present invention.

FIG. 2 is a diagram for explaining an example of a data structure of an RFID mounted recording medium used in the information protection management system of the present invention.

FIG. 3 is a diagram for explaining an RFID-equipped recording medium and a flow of information in the information protection management system of the present invention.

[Explanation of symbols]

1 RFID-equipped recording medium (RFID-equipped recording medium: CD,
DVD etc.) 110 RFID chip 120 Antenna (tag) 130 Recording medium surface (recording medium) 2 RFID reader / writer player (player with RFID input / output device) 210 RFID reader / writer (RFID input / output device) 211 RFID chip 212 antenna (Tag) 230 Decoder (hardware decryption software) 3 Personal computer (PC) 5 User (customer) 52 RFID Player with input / output device 561 Bring-in 570 Send PC 5 Personal computer 6 stores (record store, video store, etc.) 62 RFID Player with input / output device 650 Purchase 651 Take-out 670 Transmission PC 6 PC 7 Key provider 750 Distribution 760 Distribution S7 Server 9 Internet H, Hn Header Pn pointer (head address where encrypted information is recorded) IDn information identification (Information ID) Kn key (decryption key, decryption key) medium ID media identifier

Continued front page    F term (reference) 5B035 AA13 BB09 BC05 CA23                 5J104 AA13 AA16 EA16 NA02 NA27                       NA37 PA07

Claims (6)

[Claims] 1. A recording medium on which encrypted information is recorded.
In an information providing system using an RFID mounted recording medium with an RFID chip added, (1) a means for distributing a decryption key from an information provider and recording it on the RFID chip of a user's RFID mounted recording medium, (2) the RFID mounting When the encrypted information is read from the recording medium, a means for reading the decryption key from the RFID chip, decrypting the encrypted information with the decryption key and using the decrypted information is provided. An information protection management system using a recording medium equipped with RFID. 2. An information providing system using an RFID-equipped recording medium having an RFID chip added to the recording medium, wherein (1) the encrypted information and the decryption key are distributed from a server, and the encrypted information is recorded in the recording medium. In the medium, the decryption key is a means for recording in the RFID chip, (2) when reading the encrypted information from the RFID-equipped recording medium, the decryption key is read from the RFID chip, and the decryption key is used. An information protection management system using an RFID-equipped recording medium, comprising: means for decrypting and using encrypted information. 3. An information providing system using an RFID-equipped recording medium having an RFID chip added to the recording medium, wherein (1) the encrypted information and the decryption key are distributed from a server, and the encrypted information and the decryption key are distributed. The key is a means for recording an ID corresponding to the decryption key on the RFID chip on the recording medium, (2)
When reading the encrypted information from the RFID mounted recording medium, the ID is read from the RFID chip, compared with the decryption key read from the recording medium, and if the decryption key corresponds to the ID, Information using an RFID-equipped recording medium, characterized by comprising means for decrypting and using encrypted information, and for a decryption key not corresponding to the ID, not decrypting the encrypted information. Protection management system. 4. The information protection management system using an RFID-equipped recording medium according to claim 1, wherein the distribution uses the Internet. 5. The information protection management system using an RFID-equipped recording medium according to claim 1, wherein the distribution uses a dedicated line. 6. The information protection management system using an RFID-equipped recording medium according to claim 1, wherein the distribution is wireless.