JP2006195844A - Electronic rights assignment management method and rights assignment processing device by least transaction, rights assignment device, rights assignment management device, and program thereof - Google Patents

Abstract

An electronic right transfer is realized by a minimum communication transaction.
A right transfer processing device generates common shared information from common key information and arbitrary temporary calculation information, the specific shared information matches the shared shared information, and a specific combination of other shared information The right information can be decrypted and the right information can be decrypted from all combinations of distributed information so that the right information can be decrypted and the shared information group and temporary operation information can be transferred. Send to processing device. The right assignment processing device partially decrypts the right assignment information from the shared information group, confirms the contents, and sends the shared information group and the temporary calculation information to the right assignment management device. The right assignment management device generates common shared information from the common key information and the temporary calculation information, completely restores the right assignment information from the shared information group and the common shared information, and executes the transfer process.
[Selection] Figure 2

Description

  The present invention relates to a transfer management technique for electronic rights such as an online ticket, a content use right, and an electronic bill, and more particularly to a transfer management technique for electronic rights using a minimum number of communication transactions.

  Managing the issuance and exercise of so-called electronic rights such as online tickets that manage admission to concerts and movie theaters, content usage rights that manage the use of digital content, and electronic bills that manage the transfer of electronic cash and value Computer systems are collectively referred to as an electronic rights management system.

  In these electronic rights management systems, identification information such as a right ID that uniquely represents an electronic right and authentication information such as a user ID and a password that represent the owner of the electronic right are combined as electronic rights management server as rights owner information. It is stored in etc. When an owner of an electronic right exercises an electronic right, the owner must identify his own electronic right or identification information such as a right ID that uniquely represents the electronic right, and proof that he is the owner. It is necessary to present authentication information such as user ID and password, and possesses electronic rights by collating with rights owner information stored in electronic rights management server etc. and is a valid owner of electronic rights When things are certified, electronic rights can be exercised.

  Conventionally, in such an electronic rights management system, several techniques for realizing transfer of electronic rights have been proposed (see, for example, Patent Document 1, Patent Document 2, Patent Document 3, etc.).

  For example, in Patent Document 1, the transfer right user assigns the transfer authorization information for the transfer source user who assigns the electronic right together with the electronic right itself or the identification information thereof and the transfer source user authentication information to establish the transfer. In addition, the transfer authorization information is submitted to the transferee user who assigns the electronic rights, and the electronic rights management server assigns the electronic rights to the transferee users who transfer the electronic rights. When the transfer authentication information for establishing the certificate is submitted, the transferee user is judged as the new owner of the electronic right, and the right holder information of the electronic right is rewritten with the transferee user authentication information. This realizes the transfer of electronic rights.

  Also, in Patent Document 2, a transfer source user who assigns an electronic right owns the electronic right itself or its identification information and the user ID of the transfer destination user who assigns the electronic right together with the authentication information of the transfer source user. The electronic right management server submits the authentication information such as the user ID of the transfer source user to the electronic right management server. In this case, the transferee user is judged as a new owner of the electronic right, and the electronic rights lecture is realized by rewriting the right holder information of the electronic right with the authentication information of the transferee user. .

  Further, in Patent Document 3, a transfer source user who assigns an electronic right arbitrarily divides the electronic right that he owns and submits a part thereof together with authentication information of the transfer source user to an electronic rights management server or the like. The electronic rights management server submits another part of the electronic right to the assignee user who assigns the electronic right, and the electronic rights management server accepts the electronic right part of the electronic right. When submitting, the transferee user is judged as a new owner of the transferable electronic right, and the transfer of the electronic right is realized by rewriting the right holder information of the electronic right with the authentication information of the transferee user. Yes.

JP 2001-14409 A “Ticket Sales Information Management Method” JP 2002-269279 A "Online Ticket Assignment Management Method and Management Server System Therefor" Japanese Patent Application Laid-Open No. 2003-248738 “Method for transferring right to use digital contents, use right transfer management device, use right transfer enforcement device, use right transfer management program, use right transfer enforcement program”

  As described above, in the electronic rights management system, several technologies that enable the transfer of electronic rights have been proposed so far. In these conventional technologies, there are transactions related to the transfer of rights, that is, between actors. This communication processing is required at least three times, and there is a problem that the convenience of the user is remarkably impaired.

  For example, Patent Document 1 submits transfer authorization information for establishing transfer together with identification information of the right to be transferred and authentication information of the transfer source user from the transfer source use document to the rights manager, and transfer from the transfer source user. By sending the transfer authentication information to the destination user and submitting the transfer authentication information from the transfer destination user to the rights manager, the rights manager considers that the right transfer has been established and uses the transfer destination from the transfer source user. Transfer of rights to the user and requires at least three transactions.

  Further, Patent Document 3 submits a part of the electronic right itself to be transferred to the rights manager from the transfer source user together with the authentication information of the transfer source user, and transfers the remaining divided part to the transfer source user. To the transferee user, and the transferee user submits the remainder of the division to the rights manager, so that the rights manager considers the transfer of rights and the transferee uses the transferee. The right is transferred to the person and requires at least three transactions.

  In Patent Document 2, the assignment source user identification information and the transfer source user identification information are submitted to the transfer manager from the transfer source user to the transfer manager. By submitting the identification information or authentication information of the transfer source user, the rights manager regards the transfer of rights as if the transfer of rights is considered to have been established, but the transfer source user transfers the rights to the transfer destination user. A transaction corresponding to the exchange of identification information or authentication information is required between the user and the transferee user, and at least four transactions are required.

  As described above, in the prior art, when assigning a right, an action corresponding to the declaration of the right assignment is necessary every time, so at least three transactions are required. In other words, when assigning rights, first, the assigning user submits to the rights manager the transfer authorization information for establishing the transfer, or submits a part of the divided electronic rights, or the transferee. It is necessary to define the conditions for the transfer of rights at the same time as declaring the transfer of the rights owned by the user, such as by presenting the user's identification information. It is necessary to present information related to the transfer of rights to the transferee user and to perform the transfer procedure of the right by the transferee user. Such declaration of transfer of rights requires communication to a transferee other than the transferee who is the transfer partner, and thus greatly impairs the convenience of the user. For example, there is a possibility that a malicious third party may eavesdrop on the identification information and authentication information of the user and cause an unauthorized transfer of rights.

  The present invention has been made in view of the above-described circumstances of the prior art, and assigns the rights assignment information declaring the assignment of rights using the secret sharing method in a distributed and distributed manner for distribution. By generating temporary shared information common to both devices for shared information that must be held in common between the rights transfer processing device of the former user and the rights transfer management device of the rights manager, Without performing communication equivalent to the declaration of transfer of rights from the transfer source user to the rights manager, with a small number of communication transactions, under the correct transfer conditions agreed by both the transfer right user and the transfer destination user It is an object of the present invention to provide an electronic rights assignment management method, an apparatus, and a program for easily realizing electronic rights assignment.

  The present invention relates to a restoration control described in Japanese Patent Application No. 2003-366538, which is an extension of the conventional (k, n) threshold secret sharing method and (d, k, n) threshold secret sharing method, and which is already filed by the present applicant. Use type secret information distribution method.

The (k, n) threshold secret sharing method is an integer distribution number n of 2 or more, which is the number of distributed information distribution, and an integer of 2 or more, n or less, which is the minimum number of distributed information necessary for restoring the secret information S. (K−1) degree polynomial f (x) with secret information S as a constant term
f (x) = S + r ₁ x +... + r _k−1 x ^k−1 mod p (1)
(R ₁ ,..., R _k−1 : random number, p: prime number), and the secret information distributor who owns or distributes the original secret information S by deposit is each shared information holder i that stores the shared information. The distributed information Wi = f (i) is distributed to (i = 1, 2,..., N).

  This (k, n) threshold secret sharing method can restore the original secret information S by solving simultaneous equations relating to f (x) if any k pieces of distributed information are gathered among n pieces of shared information. However, there is a feature that the original secret information S cannot be restored because the simultaneous equations relating to f (x) cannot be solved even if up to (k−1) pieces of distributed information are collected. Therefore, even if up to (n−k) pieces of shared information are lost or destroyed, the original secret information S can be restored, and up to (k−1) pieces of shared information can be obtained by leakage or theft. However, it is possible to realize a method for safely storing the secret information in which the original secret information S cannot be restored.

The (d, k, n) threshold secret sharing method is an extension of the above (k, n) threshold secret sharing method, and is an integer number n of 2 or more, which is the number of distributed information distribution, and the secret information S. An integer threshold value k of 2 or more and n or less, which is the minimum number of shared information necessary for complete restoration of the information, and a shortage number of shared information that allows partial restoration of the secret information S with respect to the threshold value k 2 The secret information S is divided into S ₀ , S ₁ ,..., S _d−1 from an integer division number d of k or less, and the divided secret information (division information) is a constant term (k−1). ) The following polynomial f (x)
_{f (x) = S 0 +} S 1 x + ... + S d-1 x d-1 r 1 x d + ... + r kd x k-1 mod P ... (2)
(R ₁ ,..., R _k−d : random number, p: prime number) and the secret information distributor who owns or distributes the original secret information S by deposit is each shared information holder i that stores the distributed information. The distributed information W _i = f (i) is distributed to (1 = 1, 2,..., N).

This (d, k, n) threshold secret sharing method is similar to the (k, n) threshold secret sharing method described above. If any k pieces of shared information are gathered among n pieces of shared information, f ( The original secret information S can be restored by solving the simultaneous equations relating to x), but the simultaneous equations relating to f (x) cannot be solved even if any (k−d) pieces of distributed information are collected. The secret information S cannot be restored. However, when any (k−d + 1) to (k−1) pieces of distributed information are collected, the division information S ₀ , S ₁ ,..., S _{d−1 is} obtained from simultaneous equations relating to f (x). Since the relational expression is obtained, possible values can be obtained as the pieces of divided information S ₀ , S ₁ ,..., S _d−1 , and the original secret information S can be partially restored.

  The (k, n) threshold secret sharing method and the (d, k, n) threshold secret sharing method are described in detail in “A. Shamir,“ How to Share a Secret ”, Commun. Of ACM, Vol. 22, No. 11, pp. 612-613, 1979 ”and“ GR Blakley, C. Meadows, “Security of ramp schemes”, Proc. Of Crypto '84, Lecure Notes on Computer. Sci., 196, pp. 242-268, 1984 ".

The restoration control type secret information distribution method previously proposed by the present applicant is a method obtained by further extending the above (k, n) threshold secret distribution method and (d, k, n) threshold secret distribution method. If there are k pieces of shared information among the pieces of shared information, the original secret information S can be restored by solving simultaneous equations relating to f (x), but up to (k−d) pieces of shared information can be obtained. Even if all of them are used, simultaneous equations relating to f (x) cannot be solved, so that the original secret information S cannot be restored. However, by defining a distribution function for distributing information in a specific format, when any (k−d + 1) to (k−1) pieces of distributed information are arranged in a specific combination, f (x ), The specific division information S ₀ , S ₁ ,..., S _d−1 can be obtained, and the original secret information S can be partially restored.

This restoration control type secret information distribution method is basically based on the threshold value k and the threshold value k, which are two or more integers, which is the minimum number of shared information necessary for complete restoration of the secret information S. An integer division number d of 2 or more and k or less that determines the number of shared information deficiencies that allow partial restoration of the secret information S, and d pieces of division information S ₀ , S _{1 ,.} Enter the conditions for distributing the secret information S such as _-1 .
A prime number p larger than the maximum division information S _t (0 ≦ t ≦ d−1), and a random number r _i (1 ≦ 1 ≦ k−d) smaller than the prime number p and not 0 (k−d), (K (k−1) / 2) random numbers a _j (1 ≦ j ≦ k (k−1) / 2) are generated,
f (x) = S ₀ + S ₁ (x−a ₁ ) +... + S _d−1 (x−a _{(d−1) (d−2) / 2 + 1} ) (x−a _{(d−1) (d− 2) / 2 + 2) ...} (x-a (d-1) (d-2) / 2 + d-1) + r 1 (x-a d (d-1) / 2 + 1) (x-a d (d-1) _{/ 2 + 2)} ... (x- _{ad (d-1) / 2 + d} ) + ... + rk _-d (x-a _{(k-1) (k-2) / 2 + 1} ) (x-a _{(k-1) ( k-2) / 2 + 2} ) (x-a _{(k-1) (k-2) / 2 + k-1} ) mod P (3)
The shared information f (x) of the secret information S expressed by the following formula is generated.

For example, when the dispersion function f (x) in the above formula (3) is k = 3 and d = 2,
f (x) = S0 + S1 (x-a1) + r (X-a2) (x-a3) mod P (4)
The simultaneous equations for any two pieces of distributed information Wx and Wx + b (x> 0, b> 0) can be expressed by the following determinant.

上記行列式の左項を掃き出し法により変形すると、

When the left term of the above determinant is transformed by the sweep method,

となり、ａ_１，ａ_２，ａ_３の値によっては−ｘ^２＋（２ａ_１−ｂ）＋ａ_１ｂ−ａ_１ａ_２−ａ_１ａ_３＋ａ_２ａ_３＝０，もしくは２ｘ＋ｂ−ａ_２−ａ_３＝０を満たすｘとｂがある場合に、連立方程式から分割情報（部分情報）のＳ_０のみ、もしくはＳ_１のみを求めることができる。

Depending on the values of a ₁ , a ₂ , and a ₃ , −x ² + (2a ₁ −b) + a ₁ b−a ₁ a ₂ −a ₁ a ₃ + a ₂ a ₃ = 0, or 2x + b−a ₂ − When there are x and b satisfying a ₃ = 0, only S _{0 of the} division information (partial information) or only S ₁ can be obtained from the simultaneous equations.

The present invention relates a right assignment processing device possessed by a transfer source user who transfers electronic rights, a right assignment process possessed by a transfer destination user who assigns the electronic rights, and rights information of the electronic rights and information relating to the owner thereof. An electronic rights assignment management method in which the rights assignment management device manages and executes the assignment of electronic rights between the assignment source user and the assignment destination user.
The right transfer processing device includes right information including identification information indicating an electronic right to be transferred, authentication information indicating a transfer source user who owns and transfers the electronic right, and transfer conditions indicating conditions for the transfer to be performed. Information is generated, and shared right information is dynamically generated from common key information previously owned in common with the right assignment management device and temporary calculation information used only once when calculating common shared information, and the right assignment information is specified. The shared information matches the common shared information, and the specific part of the right transfer information can be restored from a specific combination of other shared information, and all of the right transfer information is restored from all the combinations of the shared information In order to be possible, it is distributed and encoded into a plurality of pieces of shared information, the shared information group that makes it possible to partially restore the rights assignment information and the temporary calculation information is sent to the rights assignment processing device,
The right assignment processing device is a right assignment information that is retrievable from the shared information group sent from the right assignment processing device and is right assignment information excluding authentication information indicating a transfer source user of the right assignment information. Confirming the content of the right transfer process by restoring the identification information indicating the electronic right and transfer conditions, and sending the shared information group and the temporary calculation information to the right transfer management device,
The rights assignment management device dynamically generates common shared information from common key information previously owned in common with the rights assignment processing device and temporary computation information sent from the rights assignment processing device, and the rights assignment processing device The rights assignment information generated by the rights assignment processing device is completely restored based on the shared information group sent from the shared information and the common shared information, and the assignment indicated by the identification information included in the restored rights assignment information The owner information of the electronic right to be subject to the electronic information and the owner information of the electronic right to be transferred indicated by the authentication information included in the restored right assignment information match, and are described in the restored right assignment information When the transfer condition is confirmed or executed, the owner information and the transfer destination can be rewritten by rewriting the owner information of the electronic right from the transfer user authentication information to the transferee user authentication information. With users To perform the transfer rights of the electronic rights in between,
It is characterized by things.

Further, the present invention provides an electronic rights assignment management method,
The right assignment processing device is a right that allows the right assignment processing device to partially restore temporary computation information for dynamically generating common shared information from common key information previously owned in common with the right assignment management device. Generate a distributed information group included in the transfer information part,
The rights assignment management device obtains temporary calculation information by partially restoring the rights assignment information from the shared information group sent from the rights assignment processing device, and has a common key previously owned in common with the rights assignment processing device Dynamically generating common shared information using the temporary calculation information from the information to completely restore all rights transfer information,
It is characterized by things.

In the electronic rights transfer management method of the present invention,
The right assignment processing device further generates verification information for verifying the consistency of the right assignment information, generates a distributed information group from the right assignment information and the verification information,
The rights assignment management device obtains temporary calculation information by partially restoring the rights assignment information from the shared information group sent from the rights assignment processing device, and has a common key previously owned in common with the rights assignment processing device The shared shared information is dynamically generated from the information and all rights assignment information and verification information are completely restored to verify the integrity of the rights assignment information.
It is characterized by things.

Further, the present invention is a right assignment processing device used for generating right assignment information and a distributed information group for transferring an electronic right to a transfer destination user by a transfer source user,
Transfer that accepts input of right transfer information including identification information indicating an electronic right to be transferred, authentication information indicating a transfer source user who owns and transfers the electronic right, transfer conditions for determining whether transfer processing can be executed, etc. Information input means;
A common key previously owned in common with a rights transfer management device that acquires or generates temporary computation information that is used only once to calculate common shared information, and manages the rights information of the electronic rights in association with information about the owner. Common shared information generating means for dynamically generating common shared information according to a predetermined calculation from the information and the temporary calculation information;
Transfer information distribution means for generating a shared information group by distributedly encoding the right transfer information that has received the input so that the common shared information is one of the generated shared information;
For transmitting the distributed information group and the temporary calculation information that can partially restore the right transfer information among the generated shared information group to the right transfer processing device owned by the other transferee user who transfers the electronic right. Distributed information output means;
It is characterized by having.

In the right assignment processing apparatus of the present invention,
The transfer information distribution unit generates a shared information group from transfer information that includes temporary calculation information.

In the right assignment processing apparatus of the present invention,
The transfer information distribution means is characterized in that verification information for verifying the consistency of the right transfer information is generated from the right transfer information, and a distributed information group is generated from the right transfer information and the verification information.

Further, the present invention is a rights assignment processing device used to partially restore the rights assignment information from the distributed information group in order for the assignee user to obtain the electronic rights from the assignee user,
A shared information input means for receiving input of the shared information group and the temporary calculation information output by the rights transfer processing device owned by the transfer source user who transfers the electronic rights;
Transfer information restoring means for restoring rights transfer information that can be partially restored from the input shared information group;
A transfer information confirmation means for presenting the restored right to the transfer destination user;
Authentication information input means for receiving input of authentication information indicating a transferee user who receives the transfer of the electronic right;
In order to send the transferred distributed information group and temporary calculation information, and the input transfer destination user authentication information to a rights transfer management device that manages transmission rights information and information related to the owner in association with each other. Distributed information output means,
It is characterized by having.

The present invention also relates to a rights assignment management device for performing electronic rights assignment management between a rights assignment processing device possessed by a transfer source user to which electronic rights are transferred and a rights assignment processing device possessed by a transfer destination user who receives the electronic rights. Because
Storage means for storing identification information indicating an electronic right and authentication information of a user who owns the electronic right in association with each other;
A shared information group output by the rights assignment processing device, and a shared information input means for accepting input of the temporary assignment information and the authentication information of the transferee user, which can partially restore the rights assignment information;
Common shared information generating means for dynamically generating common shared information according to a predetermined calculation from the input temporary calculation information and the common key information previously owned in common with the right transfer processing device;
Transfer information restoring means for restoring all right transfer information from the inputted shared information group and common shared information;
It is verified whether or not the identification information indicating the electronic right to be transferred included in the restored right lecture information exists in the storage means, and if it exists, the electronic right stored in association with the identification information It is verified whether the authentication information of the user and the authentication information indicating the transfer source user included in the restored right transfer information match, and if they match, the transfer included in the restored right transfer information A right assignment determination means for verifying or substituting the assignment condition indicating the condition for satisfying,
When all the verifications in the right transfer determination unit are established, the authentication information of the user of the electronic right stored in the storage unit is rewritten with the authentication information of the transfer destination user input from the right transfer processing device. A right transfer execution means;
It is characterized by having.

The present invention also relates to a rights assignment management device that manages and executes assignment of electronic rights between a rights assignment processing device possessed by a transfer source user who transfers electronic rights and a rights assignment processing device possessed by a transfer destination user who receives the electronic rights. Because
Storage means for storing identification information indicating an electronic right and authentication information of a user who owns the electronic right in association with each other;
A shared information input unit that receives the input of authentication information of the transfer destination user and the shared information group that can be partially restored from the transfer of rights transfer information output by the rights transfer processing device;
The right transfer information is partially restored from the input shared information group to obtain temporary calculation information, and the common shared information is moved in accordance with a predetermined calculation from common key information that is previously owned in common with the right transfer processing device. Common distributed information generating means for generating automatically,
Transfer information restoring means for restoring all right transfer information from the inputted shared information group and common shared information;
It is verified whether or not the identification information indicating the electronic right to be transferred included in the restored right assignment information exists in the storage means, and if it exists, the electronic right stored in association with the assignment identification information It is verified whether the authentication information of the user and the authentication information indicating the transfer source user included in the restored right transfer information match, and if they match, they are included in the restored right transfer information A right assignment determination means for verifying or substituting the assignment condition indicating the condition for the assignment;
When all the verifications in the right transfer determination unit are established, the authentication information of the user of the electronic right stored in the storage unit is rewritten with the authentication information of the transfer destination user input from the right transfer processing device. A right transfer execution means;
It is characterized by having.

In the right assignment management device of the present invention,
The transfer information restoration means restores right transfer information and verification information from the shared information group and the shared shared information,
Whether the right assignment determination means verifies the integrity of the right assignment information using the verification information, and whether the storage means has identification information indicating the electronic right to be assigned included in the restored right assignment information If it exists, the authentication information of the user of the electronic right stored in association with the identification information matches the authentication information indicating the transfer source user included in the restored right transfer information. Verifying or substituting establishment of transfer conditions indicating conditions for establishment of transfer included in the restored right transfer information if they match,
It is characterized by things.

  According to the present invention, with regard to electronic rights transfer management processing that conventionally required a plurality of communication transactions, only one communication is performed from the transfer source user to the transfer destination user and from the transfer destination user to the rights manager. Transactions enable rights transfer with few transactions.

  Further, according to the present invention, when the distributed information group generated in the right assignment processing device possessed by the transfer source user is sent to the right assignment processing device possessed by the specific transfer destination user, and the right assignment possessed by any user In either case, the user ID of the transfer source user and the authentication information such as the password are concealed from the transfer destination user, and the transfer source user is also transferred. It is not necessary for the user ID of the previous user to know authentication information such as a password, and the transfer of the electronic right specified by the identification information is executed under the transfer conditions agreed by both parties. It is possible to maintain anonymity between users and to transfer electronic rights based on an agreement.

  As a result, the electronic right transfer source user can transfer the electronic right independent of the distribution medium or the communication medium. For example, an intermediary can be obtained by any means such as e-mail, Internet website, auction site, etc. Since the transfer of electronic rights can be negotiated and transferred without using a network, the opportunity for transfer of electronic rights is dramatically increased. On the other hand, in the transfer of electronic rights not via an intermediary, the user to whom electronic rights are transferred may negotiate and transfer electronic rights after confirming the electronic rights to be transferred and the conditions for the transfer. As a result, the security of the transfer of electronic rights is dramatically improved. Furthermore, an electronic rights manager can manage the distribution of electronic rights from the transferor user to the transferee user, and at the same time, can control illegal distribution and transfer of electronic rights. Since the management fee and the like can be collected from the transfer source user and the transfer destination user, the convenience of transfer management of electronic rights is dramatically improved.

  Based on the advantages of the present invention as described above, it is expected that the opportunity and convenience of electronic rights distribution will be dramatically increased and activated.

  In the following, as one embodiment of the present invention, a right transfer of an electronic ticket using an electronic right transfer management system will be described.

  FIG. 1 shows the overall configuration of an electronic rights assignment management system according to an embodiment of the present invention. In FIG. 1, 10 is a rights transfer processing device possessed by a transfer source user who transfers electronic rights, 20 is a rights transfer processing device possessed by a transfer destination user who receives the electronic rights, and 30 is related to rights information and owners of the electronic rights. Rights assignment management device 40 that associates and manages information, and 40 is a communication line such as the Internet, and rights assignment management device 30 manages and executes assignment of electronic rights between rights assignment processing device 10 and rights assignment processing device 20. To do. In the embodiment, for the electronic ticket purchased by the transfer source user, identification information uniquely indicating the electronic ticket is recorded in the right transfer management device 30 as the right owner information together with the user authentication information. The right transfer of the electronic ticket is realized by rewriting the authentication information of the transfer source user in the right owner information with the authentication information of the transfer destination user in the record on the right transfer management device 30.

  FIG. 2 is a diagram showing a processing sequence for electronic ticket right assignment in one embodiment of the present invention. Here, it is assumed that the transfer source user has previously registered in the right transfer management device 30 the common key information for generating the shared shared information by the use transfer processing device 10.

  Based on the result of the negotiation performed by the transfer source user and the transfer destination user regarding the transfer of rights, first, the temporary transfer information such as the date and time and the sequential number used temporarily by the transfer source user in the right transfer processing device 10 and Common shared information used in common with the right transfer management device 30 owned by the ticket service provider is generated from the common key information (step 1), identification information indicating the electronic ticket to be transferred, and authentication indicating the transfer source user Rights assignment information composed of information and assignment conditions such as the assignment amount at the time of rights assignment is constructed, and distributed information I and II in which rights assignment information is distributedly encoded based on common shared information is generated (step 2). Then, the generated shared information I and II and the temporary calculation information are sent to the right transfer processing device 20 possessed by the transfer destination user (step 3).

  The transferee user uses the rights transfer processing device 20 to transfer the rights such as the transfer conditions such as the transfer amount of the right transfer information from the distributed information I and II sent from the right transfer processing device 10 and the identification information of the electronic ticket to be transferred. Information related to confirmation and billing is partially restored to confirm the contents of the transfer process (step 4), and the shared information I and II and temporary calculation information are sent to the right transfer management device 30 of the ticket service provider. An update of the right owner information is requested (step 5).

  The ticket service provider partially restores the right assignment information from the distributed information I and II sent from the right assignment processing device 20 in the right assignment management device 30 (step 6), and assigns it from the temporary calculation information and the common key information. Common shared information used in common with the right transfer processing device 10 of the former user is generated (step 7), and the right transfer information is completely restored from the shared information I and II and the common shared information (step 8). Then, after verifying the consistency of the right transfer information with the verification information, confirm the match between the transfer source user authentication information included in the restored right transfer information and the right holder information of the electronic ticket, and further transfer After confirming or substituting the conditions, the electronic ticket is transferred by rewriting the right holder information of the electronic ticket with the authentication information of the transfer destination user (step 9).

  FIG. 3 is a functional configuration diagram of the electronic rights assignment management system in one embodiment of the present invention. In the electronic rights assignment management system according to the present embodiment, as shown in FIG. 1, the rights assignment processing device 10, the rights assignment processing device 20, and the rights assignment management device 30 are connected in a network through a communication line 40 such as the Internet. It shall be. In the electronic rights assignment management process according to the present invention, it is only necessary to exchange data between devices, and it is not necessary to be connected via a network.

  The right transfer processing device 10 includes a transfer information input unit 11, a common shared information generation unit 12, a transfer information distribution unit 13, a transfer information output unit 14, and an information storage unit 15. To generate common shared information from the common key information and the temporary calculation information, to generate a distributed information group by distributedly encoding the right assignment information, and to transfer the shared information group and the temporary calculation information to the right assignment processing device 20. Output to. Specifically, the transfer information input unit 11 includes identification information indicating an electronic right to be transferred, authentication information indicating a transfer source user who owns and transfers the electronic right, transfer conditions for determining whether or not transfer processing can be performed, and the like. Accepts input of rights transfer information consisting of The common shared information generation unit 12 acquires or generates temporary calculation information that is used only once to calculate the common shared information, and previously uses the common key information that is commonly owned with the right transfer management device 30 and the temporary calculation information. The common distribution information is dynamically generated according to a predetermined operation. The transfer information distribution unit 13 generates a shared information group by distributedly encoding the right transfer information that has received the input so that the shared shared information is one of the shared information that is generated. The shared information output unit 14 sends, to the rights assignment processing device 20, a shared information group in which the right assignment information can be partially restored and the temporary calculation information in the generated shared information group. In one embodiment, the transfer information distribution unit 13 generates a shared information group from right transfer information that includes temporary calculation information. Furthermore, verification information for verifying the consistency of the right assignment information is generated from the right assignment information, and a distributed information group is generated from the right assignment information and the verification information. The information storage unit 15 stores input information, information such as a process or a process result.

  The rights assignment processing device 20 includes a shared information input unit 21, a transfer information restoration unit 22, a transfer information confirmation unit 23, an authentication information input unit 24, a shared information output unit 25, and an information storage unit 26. Receiving the input of the shared information group and the temporary calculation information from, partially restoring the right transfer information from the inputted shared information group, displaying and confirming the restored right transfer information, Accepting the input of the authentication information of the user to whom the right is transferred, outputs the input shared information group, temporary calculation information, and the authentication information to the right transfer management device 30. Specifically, the shared information input unit 21 receives an input of a shared information group and temporary calculation information output from the right transfer processing device 10. The transfer information restoration unit 22 restores right transfer information that can be partially restored from the input shared information group. The transfer information confirmation unit 23 displays the restored right information and presents it to the transfer destination user. The authentication information input unit 24 receives input of authentication information indicating a transfer destination user who receives the transfer of the electronic right. The shared information output unit 25 sends the shared information group and temporary calculation information input from the transfer information input unit 11 and the authentication information of the transfer destination user input from the authentication information input unit 24 to the right transfer management device 30. To do. The information storage unit 26 stores information such as input information and processing results.

  The right assignment management device 30 includes a right information management unit 31, an authentication information management unit 32, a distributed information input unit 33, a transfer information restoration unit 34, a common shared information generation unit 35, a right transfer determination unit 36, a right transfer execution unit 37, and Consists of a right information storage unit 38, an authentication information storage unit 39, a transfer information storage unit 3A, and an information storage unit 3B, stores information on electronic rights and their owners, and stores information on users of the device. Accepting the input of the shared information group and the authentication information from the rights assignment processing device 20, partially restoring the rights assignment information from the inputted shared information group, and generating the common shared information from the temporary calculation information and the common key information The right transfer information is completely restored from the shared information group and the common shared information, and whether or not the right transfer can be executed is determined based on the restored right transfer information. The determination result and the restored right transfer information are Zui to execute the transfer rights to.

  Specifically, the right information management unit 31 manages input, storage, authentication, change, output, and the like of right information of electronic rights managed by the right assignment management device 30. The right information of the electronic right managed by the device 30 is stored in the right information storage unit 38. The authentication information management unit 32 manages input, storage, authentication, change, output, and the like of authentication information of users of electronic rights managed by the right management device 30. The authentication information of the user of the electronic right managed by the device 30 is stored in the authentication information storage unit 39. The shared information input unit 33 receives input of the shared information group, temporary calculation information, and transfer destination user authentication information output by the right transfer processing device 20. The transfer information restoration unit 34 partially restores the right transfer information from the input shared information group, and transfers the right transfer information from the input shared information group and the common shared information generated by the common shared information generation unit. Restore all. The common shared information generation unit 35 acquires the temporary calculation information that has been input or temporary calculation information obtained by partially restoring the right transfer information from the transfer information restoration unit 34, and the temporary calculation information and the right transfer processing device 10 in advance. The shared shared information is dynamically generated according to a predetermined calculation from the shared key information owned by the client. The common key information is stored in the information storage unit 3B. The right assignment determination unit 37 verifies whether or not the identification information indicating the electronic right to be transferred included in the right lecture information restored by the assignment information restoration unit 34 exists in the right information storage unit 38. Whether the authentication information of the user of the electronic right stored in the authentication information storage unit 39 in association with the identification information matches the authentication information indicating the transfer source user included in the restored right transfer information. If it matches, it verifies or substitutes for the establishment of a transfer condition indicating a condition for the transfer to be included included in the restored right transfer information. When all the verifications in the rights assignment determination unit 36 are established, the rights assignment execution unit 37 assigns the authentication information of the user of the electronic right stored in the rights information storage unit 38 as input from the rights assignment processing device. Rewrite the authentication information of the previous user. In the transfer information storage unit 3A, the processing result of the right transfer is stored as transfer information. In one embodiment, the transfer information restoration unit 34 restores the right transfer information and the verification information from the shared information group and the common shared information, and the right transfer determination unit 36 verifies the consistency of the right transfer information using the verification information. Then, it is verified whether or not the identification information indicating the electronic right to be transferred included in the restored right assignment information exists in the right information storage unit 38, and if it exists, the identification information is associated with the identification information. It is verified whether or not the stored authentication information of the user of the electronic right and the authentication information indicating the transfer source user included in the restored right transfer information match, and if they match, the restored right It verifies or substitutes for the establishment of a transfer condition or the like indicating a condition for the transfer that is included in the transfer information.

  In the embodiment of FIG. 3, the right assignment processing device 10 and the right assignment processing device 20 are described as different devices, but the elements constituting each device may be combined and mounted as one device. In addition, the present embodiment does not limit the configuration of each device to the configuration in the present embodiment, and the right assignment processing device 10 assigns rights created by inputting information on the electronic rights to be assigned and the transfer source user. A right information processing device 20 includes a distributed information group in which information is distributedly encoded based on the common shared information calculated from the temporary calculation information temporarily generated and the common key information owned in common with the right assignment management device 30. The rights assignment processing device 20 outputs the information on the shared information group and the transfer destination user to the rights assignment management device 30 after partially restoring the rights assignment information from the inputted shared information group, and the rights assignment management. The device 30 partially restores the right transfer information from the input shared information group, and calculates the common shared information calculated from the common key information shared with the right transfer processing device 10 and the enemy information group. Well if it has a function to rewrite the rights owner information of the electronic rights Luo rights assignment information after completely restored, FIG. 3 is a configuration example thereof.

  Hereinafter, an example of the operation of each device in the electronic right assignment management system shown in FIG. 3 will be described in detail by taking the right assignment of an electronic ticket as an example. In the following, the rights information of the electronic ticket is distributedly encoded into two pieces of shared information I and II, but generally it is not necessary to have only two.

<Operation of Rights Assignment Processing Device 10>
First, a process for generating right transfer information and shared information I and II of an electronic ticket in the right transfer processing device 10 of the transfer source user will be described.

  In the right transfer processing device 10, the transfer information input unit 11 includes, as the right transfer information, identification information such as a user ID by a transfer source user, authentication information such as a password, a ticket ID representing an electronic ticket to be transferred, and a transfer amount. Is received, encoded, and stored in the internal memory or the information storage unit 15.

  In this embodiment, “endo” is the user ID indicating the transfer source user, “gu8she3” is the password, “T00000001” is the ticket ID indicating the electronic ticket to be transferred, and “2500” is the transfer amount indicating the transfer condition. It is assumed that it has been entered. In the embodiment, it is assumed that encoding is performed using a shift JIS code, and the encoding results are “656e646F2020”, “6775387368653300”, “543030303030303031”, and “3032353030”, respectively. FIG. 4 shows a configuration example of the right assignment information in this embodiment.

  The present embodiment does not particularly define the configuration of the right transfer information and the encoding method for the input value. In this embodiment, the right transfer information is composed of a 6-byte user ID, an 8-byte password, a 9-byte ticket ID of the ticket to be transferred, and a 5-byte transfer amount. The information to be enabled and the information to enable identification of the ticket to be transferred need only be included in a minimum length, and are not limited to the configuration of this embodiment. In addition, the right transfer information may include other information. In addition to including the conditions related to ticket transfer in the form of transfer amount as in this embodiment, for example, transfer execution date and time, transfer expiration date, transfer destination user, etc. A configuration including a personal identification number and a password for confirming transfer and a password can be considered. Further, as an encoding method, this embodiment encodes an input value using a shift JIS code, and “20” indicating blank or “00” indicating no input for an input that is less than a specified length. , “30” indicating the number 0 is assigned, but other encoding methods and assignment methods may be used, and by using means such as calculating a hash value or encrypting the right, It may be possible to improve safety against leakage or alteration of transfer information.

  Further, the present invention does not particularly stipulate the method and format for inputting the user ID, password, ticket ID to be transferred, and transfer amount. The user ID and password recorded in advance in the right transfer processing device 10 or recorded on an external recording medium such as an IC card may be input as a file, or the ticket ID to be transferred is included in the ticket to be transferred. It may be acquired from ticket information or a ticket image.

  The common distribution information generation unit 12 generates temporary calculation information that is a temporary value, and generates common distribution information from the common key information and the temporary calculation information. The temporary calculation information may be an arbitrary value, and may be a sequence number such as the date and time when the input is received by the transfer information input unit 11, the number of times of processing in the right transfer processing apparatus 10, or a value generated at random. . In this embodiment, it is assumed that the current time is acquired and used as the temporary calculation information T. For example, “20041112161359” is obtained from 16:13:59 on November 12, 2004. The common key information is information unique to the user that is shared with the right transfer management device 30, and in this embodiment, the 16-digit hexadecimal number “941661C1C81D693D” is used as the common key information CK.

  The common key information may be recorded in advance in the information storage unit 15, or the transfer information input unit 11 may accept input from the user. The method for managing and inputting the common key information is not specified in this embodiment.

The common shared information generation unit 12 calculates common shared information CW from the temporary calculation information T and the common key information CK. The method of calculating the common shared information is not defined by the present invention, but in this embodiment, simply CW = T * CK (mod P) (7)
And Here, P represents a fixed character string for remainder calculation, and in this embodiment, a 28-digit hexadecimal number “FFFFFFFFFFFFFFFFFFFFFFFFFFB5” is used. In this embodiment, T = 20041112161359 and CK = 941661C1C81D693D are substituted into the equation (7), and the common dispersion information CW = 852671B2E0A912FB93331647227B is obtained as a result of the calculation. Temporary calculation information T and common distribution information CW are temporarily stored in the internal memory or the information storage unit 15.

  Next, the assignment information distribution unit 13 generates distribution information I and II based on the common distribution information for the right assignment information. The transfer information distribution unit 13 firstly splits the right transfer information into the divided information S0 including the user ID and password of the transfer source user who is not permitted to restore in the right transfer processing device 20, and the electronic ticket that allows the right transfer processing device 20 to restore the right transfer information. Is divided into two pieces of division information S1 consisting of the ticket ID and the transfer amount. In the example of FIG. 4, S0 and S1 are each 14-byte electronic data, S0 is “656E646F20206775387368653300”, and S1 is “5430303030303030313032353030”.

Next, the transfer information distribution unit 13 sets a special function f (x) called a distribution function for distributedly encoding the right transfer information. In the present embodiment, the dispersion function f (x) is assumed to be expressed by the following equation (8) where a1 = 7, a2 = 1, and a3 = 5 in the above equation (4).
f (x) = S0 + S1 (x-7) + R (x-1) (x-5) (mod P) (8)

  In Expression (8), x is an information number for distributedly encoding electronic data to generate distributed data Wx, S0 and S1 are division information obtained by dividing the right transfer information, and R is division information S0 and S1 from the distributed data Wx. Is a random character string (which corresponds to r in the above equation (4)), and P represents a fixed character string for remainder calculation.

  The dispersion function f (x) in the above formula (8) is calculated by substituting 2 for x, W (2) is calculated by substituting 2 for x, and f (3) is calculated by substituting 3 for x. When f (4) calculated in this way is W4, W3 and W4 to S0 can be restored, W2 and W4 to S1 can be restored, and W2 and W3 and W4 or any three Wx can be restored to S0, S1, and R. This is the dispersion function. Further, since the original pieces of divided information S0 and S1 are not known from the individual distributed data Wx including W2, W3 and W4, the divided information S0 and S1 can be safely distributed. Such a special distribution function f (x) can be obtained by the restoration control type secret information distribution method described in Japanese Patent Application No. 2003-366538, and is not limited to the expression in this embodiment.

  In this embodiment, since the division information S0 and S1 are 14 bytes in length, a 14-byte hexadecimal character string P = FFFFFFFFFFFFFFFFFFFFFFFFFFB5 is used as the fixed character string P. In this embodiment, P is described as a fixed character string, but the actual P used in the calculation is treated as numerical information. In the case of numerical information, the fixed character string P is preferably a prime number. Note that the size and value of the fixed character string P are not particularly defined in this embodiment, and are arbitrarily determined from the viewpoint of the assumed length of electronic data to be distributed and encoded and the security strength against brute force attacks. You can do it.

  The distribution function f (x) and the fixed character string P are commonly used not only by the right assignment processing device 10 but also by the right assignment processing device 20 and the right assignment management device 30. The means for sharing these pieces of information between each device is not specified in the present invention, but for example, these pieces of information may be always built into a fixed memory in each device as fixed information. A means of commonly using a recording medium such as an IC card storing these pieces of information can be considered.

The shared information I and II are generated as follows. The transfer information distribution unit 13 first determines the random character string R by calculation so that f (6), where x = 6 in the distribution function f (x) of the above equation (8), becomes the common distribution information CW. That is, the formula for sharing information CW = f (6) = S0−S1 + 5R with x = 6 is modified with respect to R. R = (CW−S0 + S1) / 5 (mod P) (9)
R is calculated by substituting the division information S0 and S1 and the common distribution information CW. In this embodiment, the calculation result R = 172E72BOC9BE9257B59660049FEF is obtained from the shared information S0 = 656E646F202067 finished 5387368653300, S1 = 5430303030303030313032353030, and the common shared information CW = 852671B2EOA912FB93331647227B.

Next, the transfer information distribution unit 13 uses f (2) in which x = 2 is assigned to the distribution function f (x) in Expression (8) as the distribution information I, and f (4) in which x = 4 is used as the distribution information II. Respectively. In the present embodiment, division information S0 = 656E646F20206775387368653300, S1 = 5430303030303030313032353030, and random number R = 172E72BOC9BE9257B59660049FEF. From P = FFFFFFFFFFFFFFFFFFFFFFFFFFB5, each piece of distributed information I and II is calculated as follows.
Distributed information I = f (2) = S0-5S1-3R = 7AF21B6BD1F3BF7D21BF4D4D61AD (mod P)
Distributed information II = f (4) = S0-3S1-3R = 223527BCC32541FDD841FB1B7C258 (mod P)
From the calculated distribution information, the division information S1 can be restored from the distribution information I and II and the division information S0 from the distribution information I and II and the common distribution information CW according to the characteristics of the distribution function f (x) described above. S1 and the random number character string R can all be restored. FIG. 5 shows a calculation example of the common shared information generation unit 12 and the transfer information distribution unit 13 in the right transfer processing device 10.

  The shared information output unit 14 transmits the shared information I = 7AF21B6BDIF3BF7D21BF4D4D61AD and II = 223527BCC32541FDD841FBIB7C258 generated by the transfer information distributing unit 13 to the right transfer processing device 20 of the transfer destination user together with the temporary calculation information T = 20041112161359. .

  Note that this embodiment does not particularly define the output and transmission methods and contents in the distributed information output unit 14. Instead of direct communication through a network line, other communication means such as mail may be used, or output may be performed by physical means using an external recording medium such as an IC card. Instead of directly outputting the code, it may be embedded in an image file such as a ticket image using a technique such as digital watermarking or steganography. In addition, when transmitting via a network line, it is desirable to increase the security on the network line by, for example, encrypting and transmitting using the public key of the ticket service provider or transferee user.

<Operation of Rights Assignment Processing Device 20>
The partial restoration processing of the right transfer information in the right transfer processing device 20 of the transfer destination user who acquired the shared information I and the shared information II from the transfer source user's right transfer processing device 10 will be described.

  In the shared information input unit 21, the rights assignment processing device 20 first receives input of the shared information I and II and the temporary calculation information T and stores them in the internal memory or the information storage unit 26. In the present embodiment, it is assumed that the distributed information I = 7AF21B6BDIF3BF7D21BF4D4D61AD, II = 223527BCC32541FDD841FBIB7C258 and the temporary calculation information T = 20041112161359 are input and output in the right transfer processing device 10.

  This embodiment does not particularly define the input target, method, and format of the shared information input means 21. As an input means, not only accepts the input of the shared information I and II and the temporary calculation information T directly transmitted from the right transfer processing device 10, but also the user's keyboard input, file name input, and copy and paste on the screen In addition to the input by, the input by reading from an external recording medium such as an IC card or the information embedded in a ticket image or the like by digital watermark or the like may be read and accepted.

  Next, the transfer information restoration unit 22 restores the division information S1 in the right transfer information from the input shared information I and II according to a predetermined calculation process. In the present embodiment, the shared information I and II are f (2) obtained by substituting x = 2 into the dispersion function f (x) of the previous equation (8) and f (4) obtained by substituting x = 4. The following simultaneous equations can be established.

したがって、分散情報ＩとIIから分割情報Ｓ１を求める式は以下の式（１１）ようになる。ただし、分割情報Ｓ０と乱数文字列Ｒはこの方程式からは得る事ができない。
Ｓ１＝（II−Ｉ）／２ （mod Ｐ） …（１１）

Therefore, the equation for obtaining the division information S1 from the shared information I and II is as the following equation (11). However, the division information S0 and the random number character string R cannot be obtained from this equation.
S1 = (II−I) / 2 (mod P) (11)

  In this embodiment, since the shared information I and II are I = 7AF21B6BD1F3BF7D21BF4D4D61AD and II = 223527BCC32541FDD841FBIB7C258, when S1 is calculated by the above equation (11), S1 = 5430303030303030313032353030 is obtained. When the calculated S1 is divided into a 9-byte ticket ID and a 5-byte transfer amount according to a predetermined configuration, and reverse encoding is performed, “T00000001” as the ticket ID to be transferred and “2500” as the transfer amount are obtained. Since the division information S0 cannot be calculated, the user ID and password of the transfer source user in the right transfer information cannot be restored. FIG. 6 shows a calculation example of the transfer information restoring unit 22 in the right transfer processing device 20.

  The transfer information confirmation unit 23 displays the ticket ID restored by the transfer information restoration unit 22 and the transfer amount on a display or the like, thereby giving the transfer destination user a ticket ID that is a result of the negotiation with the transfer source user. And confirm the transfer amount. If the transfer destination user confirms the ticket ID and transfer amount and does not agree to transfer, the transfer processing may be interrupted.

  In addition, the present Example does not prescribe | regulate the content of the display in the transfer information confirmation part 23 in particular. The transfer destination user only needs to be able to confirm the minimum information regarding the ticket to be transferred. As other information, detailed information on the ticket to be transferred is acquired and displayed based on the ticket ID, or the distributed information I , II and ticket information sent together with the ticket image may be displayed.

Next, the rights assignment processing device 20 accepts input of authentication information such as a user ID and a password by the transferee user in the authentication information input unit 24. In this embodiment, it is assumed that “hirota” is input as the user ID of the transfer destination user and “kh3his9” is input as the password.
Note that the present invention does not particularly define the method and format for inputting the user ID and password. Each time, an input from a keyboard or the like may be accepted, or a user ID and password recorded in advance in the rights assignment processing device 20 or recorded in an external recording medium such as an IC card may be input as a file. Further, the present invention does not define the timing for inputting authentication information. You may make it receive the input of the authentication information of a transferee user at the time of starting of this apparatus, initialization, and arbitrary timings.

  The shared information output unit 25 sends the distributed information I and II, the temporary calculation information T, and authentication information such as the user ID and password of the transfer destination user to the right transfer management device 30 possessed by the ticket service provider via the communication line 40. To update the ticket information.

  This embodiment does not particularly define the output and communication method and contents in the distributed information output unit 25. Instead of direct communication through a network line, other communication means such as mail may be used, or physical means using an external recording medium such as an IC card may be used for submission. Also, when submitting via a network line, it is desirable to increase the security of the submission via the network line by, for example, encrypting and submitting using the public key of the ticket service provider.

<Operation of Rights Assignment Management Device 30>
In the following, in the rights assignment management device 30 possessed by the ticket service company that has received the distributed information I and II, the temporary calculation information T, and the assignment destination user authentication information from the rights assignment processing device 20 possessed by the destination user The right transfer information restoration process and the electronic right transfer process will be described.

  The right assignment management device 30 manages input, storage, authentication, change, output, and the like of right information of electronic rights managed by the device in the right information management unit 31. The rights information of the electronic rights managed by the device is recorded in the rights information storage unit 38. FIG. 7 shows a storage example of the right information in the right information storage unit 38 in this embodiment.

  In the present embodiment, the configuration of the right information managed and stored in the right information management unit 31 and the right information storage unit 38 is not particularly specified. At a minimum, it is only necessary to manage and store a combination of identification information for uniquely identifying each electronic right and authentication information for uniquely identifying the owner of the electronic right. The date and time and other information may be included.

  Further, the right information management device 30 manages the input, storage, authentication, change, output, and the like of the authentication information of the user of the electronic right managed by the device in the authentication information management unit 32. The authentication information of the user of the electronic right managed by the device is recorded in the authentication information storage unit 39. FIG. 7 shows a storage example of authentication information in the authentication information storage unit 39 in the present embodiment. Here, the right information stored in the right information storage unit 38 shown in FIG. 7 is associated by the user ID.

  In this embodiment, the configuration of authentication information managed and stored in the authentication information management unit 32 and the authentication information storage unit 39 is not particularly specified. At a minimum, authentication information for uniquely authenticating each user who uses the electronic rights and the common key information of the user need only be managed and stored. In addition, the user's name, gender, address and telephone number Other information such as personal information such as an e-mail address, usage history of electronic rights, and an available balance in which electronic rights can be purchased or sold may be included.

  First, the rights assignment management device 30 uses the shared information input unit 33 to transmit the shared information I and II, the temporary calculation information T, and the assignment destination transmitted from the right assignment processing device 20 of the assignment destination user via the communication line 40 or the like. An input of authentication information including a user ID and a password of the user is accepted and stored in the internal memory or the information storage unit 3B. In this embodiment, it is assumed that shared information I = 7AF21B6BDIF3BF7D21BF4D4D61AD, II = 223527BCC32541FDD841FBIB7C258, temporary calculation information T = 20041112161359, “hirota” as the user ID, and “kh3his9” as the password. The distributed information input unit 33 records these information in the internal memory or the information storage unit 39.

  Note that this embodiment does not particularly define the input target, method, and format of the shared information input unit 33. As an input means, not only accepts the input of the distributed information I, II, temporary calculation information T and authentication information directly transmitted from the rights assignment processing device 20, but also the user's keyboard input, file name input and on-screen In addition to input by copy and paste, input by reading from an external recording medium such as an IC card may be accepted.

  The transfer information restoration unit 34 first restores the division information S1 of the right transfer information, that is, the ticket ID and the transfer amount according to a predetermined calculation process from the input shared information I and II. The right transfer information is completely restored according to a predetermined calculation process from the common shared information CW calculated from the information T and the common key information CK of the transfer source user and the shared information I and II, and the user ID and password of the transfer source user To get.

  First, the transfer information restoration unit 34 restores the division information S1 in the right transfer information from the input shared information I and II according to a predetermined calculation process. Since the shared information I and II in this embodiment are f (2) obtained by substituting x = 2 into the dispersion function f (x) of the equation (8) and f (4) obtained by substituting x = 4. The following simultaneous equations similar to Equation (10) can be established.

したがって、分散情報ＩとIIから分割情報Ｓ１を求める式は、先の式（１１）と同じく以下の式（１３）のようになる。ただし、分割情報Ｓ０と乱数文字列Ｒはこの方程式からは得る事ができない。
Ｓ１＝（II−Ｉ）／２ （mod Ｐ） …（１３）

Therefore, the equation for obtaining the division information S1 from the shared information I and II is the following equation (13), similar to the previous equation (11). However, the division information S0 and the random number character string R cannot be obtained from this equation.
S1 = (II-I) / 2 (mod P) (13)

  In this embodiment, since the disperse information I and II are I = 7AF21B6BD1F3BF7D21BF4D4D61AD and II = 223527BCC32541FDD841FB1B7C258, when S1 is calculated by the above formula, S1 = 5430303030303030313032353030 is obtained. If the calculated S1 is divided into a 9-byte ticket ID and a 5-byte transfer amount according to a predetermined configuration, and reverse encoding is performed, T00000001 as a transfer target ticket ID and 2500 as a transfer amount are obtained.

  The common shared information generation unit 35 acquires the user ID of the transfer source user as information regarding the owner of the electronic right stored in the right information storage unit 38 based on the restored ticket ID, and then acquires Based on the user ID, the common key information CK of the transfer source user stored in the authentication information storage unit 39 is acquired. The common key information CK may be acquired by the transfer information restoring unit 34.

Next, the common shared information generation unit 35 calculates common shared information CW from the acquired common key information CK and the input temporary calculation information T. The common shared information is calculated using Expression (7) common to the previous right assignment processing apparatus 10.
CW = T * CK (mod P) (14)
And In this embodiment, T = 20041112161359 and CK = 941661CIC81D693D are substituted into equation (14), and CW = 852671B2EOA912FB93331647227B is obtained as a result of the calculation. The common shared information CW is temporarily stored in the internal memory or the information storage unit 3B.

  The transfer information restoring unit 34 completely restores the right transfer information based on the input shared information I and II and the calculated common shared information CW. The shared information I and II in the present embodiment are f <2> in which x = 2 is substituted into the dispersion function f (x) in Expression (8), and f (4) in which x = 4 is substituted. Since CW is f (6) obtained by substituting x = 6 into the dispersion function f (x), the following simultaneous equations can be established.

この連立方程式を行列式で表わすと次の式（１６）ようになる。

When this simultaneous equation is represented by a determinant, the following equation (16) is obtained.

上記式（１６）の行列式を掃き出し法などにより解く事で、分割情報Ｓ０，Ｓ１と乱数文字列Ｒの計算式および値を得る事ができる。本実施例においては、分散情報Ｉ，II、共通分散情報ＣＷがそれぞれ、Ｉ＝7AF21B6BDIF3BF7D21BF4D4D61AD、II＝23527BCC32541FDD841FBIB7C258、ＣＷ＝852671B2EOA912FB93331647227Bである事から、上記式（１６）の行列式を解いてＳ０，Ｓ１，Ｒを算出すると、Ｓ０＝656E646F20206775387368653300、Ｓ１＝5430303030303030313032353030、およびＲ＝172E72BOC9BE9257B59660049FEFが得られる。図９に権利譲渡管理装置３０における譲渡情報復元部３４と共通分散情報生成部３５の計算例を示す。

By solving the determinant of the above equation (16) by a sweeping method or the like, the calculation formulas and values of the division information S0 and S1 and the random character string R can be obtained. In this embodiment, the shared information I and II and the common shared information CW are I = 7AF21B6BDIF3BF7D21BF4D4D61AD, II = 223527BCC32541FDD841FBIB7C258, and CW = 852671B2EOA912FB93331647227B. When R is calculated, S0 = 656E646F20206775387368653300, S1 = 5430303030303030313032353030, and R = 172E72BOC9BE9257B59660049FEF are obtained. FIG. 9 shows a calculation example of the transfer information restoration unit 34 and the common shared information generation unit 35 in the right transfer management device 30.

  When the calculated S0 is divided into a 6-byte user ID and an 8-byte password according to a predetermined configuration and subjected to reverse encoding, “endo” is obtained as the user ID of the transfer source user and “gu8sfes3” is obtained as the password. Similarly, when S1 is divided into a 9-byte ticket ID and a 5-byte transfer amount according to a predetermined configuration, and reverse encoding is performed, “T00000001” as the ticket ID to be transferred and “2500” as the transfer amount are obtained. .

  The right assignment determination unit 36 determines whether or not the right assignment of the electronic right can be executed according to the restored right assignment information. First, the right assignment determination unit 36 acquires a user ID and a password, which are authentication information of the owner having the right of the electronic ticket recorded in the right information storage unit 38, based on the restored ticket ID. Next, it is verified whether or not the user ID and password, which are authentication information of the transfer source user in the right transfer information, match the acquired user ID and password. These values match when the electronic ticket to be transferred is correctly for the transfer source user and the shared information I and II are correctly created by the transfer source user. If they do not match, the distributed information I and II are not distributed information of correct right transfer information regarding the electronic ticket, the right regarding the electronic ticket has already been transferred to another user, or the registration is canceled from the registration of the ticket service provider. For this reason, it is preferable to perform processing such as returning an error message such as an unprocessable notification to the right transfer processing device 20.

  Next, the right assignment determination unit 36 determines whether or not the right assignment can be executed according to the assignment condition such as the transfer amount in the restored right assignment information. In the present embodiment, since the transfer condition is only the transfer amount, the right transfer determination unit 36 charges the transfer destination user for the transfer amount and gives a refund to the transfer source user. Such a charging process can be realized, for example, by subtracting the transfer amount from the available balance of the transfer destination user recorded in the authentication information storage unit 39 and adding the transfer amount to the available balance of the transfer source user. . If the available balance of the transferee user does not reach the transfer amount, the transfer condition cannot be achieved, and therefore processing such as returning an error message such as a transfer non-establishment notification to the right transfer processing device 20 is performed. Is good.

  Note that this embodiment does not particularly define a determination and substitution method regarding the achievement of the transfer condition in the right transfer determination unit 36. In this embodiment, the charging process is performed on the available balance in the authentication information storage unit 39 based on the transfer amount. However, the charging process and determination may be performed depending on an external device or the like. In addition to the transfer amount as a transfer condition, a determination is made based on personal information such as the age, gender, and address of the transfer destination user, and if the transfer of rights information includes transfer conditions specifying the transfer destination user, the transfer destination The determination can also be made based on the user ID of the user. Further, when the transfer amount specified as the transfer condition is unfair as the price of the original electronic right, it is desirable to determine whether to approve the right transfer or limit the transfer amount.

  In the right assignment determination unit 36, the identification information in the restored right assignment information, the authentication information matches the identification information and the authentication information recorded in the right information storage unit 38 and the authentication information storage unit 39, and the assignment in the right assignment information When the condition is satisfied, the right transfer execution unit 37 changes the user ID of the ticket with the ticket ID recorded in the right information storage unit 38 from “endo” of the transfer source user to “hirota” of the transfer destination user. Rewrite and update rights holder information. At this time, it is preferable to perform processing such as returning a message such as a transfer establishment notice to the right transfer processing device 20. Further, by recording the transfer target ticket ID, the user IDs of the transfer source user and the transfer destination user, the transfer amount, the date and time of transfer, and the like as transfer information in the transfer information storage unit 3A, a history of transfer of rights You may leave it.

<Disclosure of distributed information>
In this embodiment, the shared information I and II and the temporary calculation information T are output from the right transfer device 10 of the transfer source user to the right transfer device 20 of the transfer destination user. Can output the shared information I, II and temporary calculation information T to any of a plurality of rights assignment processing devices without specifying a transfer destination user, or to publish them to a public device on the Internet such as a bulletin board or the Web. It is. In that case, transfer conditions such as the transfer amount can be arbitrarily set by the transfer source user, and a plurality of users who have received any rights transfer processing device received or shared distributed information I, II and temporary calculation Among a plurality of users who have acquired the information T, agree to the transfer amount and first submit the distributed information I and II and the temporary calculation information T to the ticket service provider's right transfer management device 30 to request a ticket information update The user who issued can be a transferee user.

<Inclusive of temporary calculation information>
In the present embodiment, the temporary calculation information T for calculating the common shared information CW is output separately from the shared information I and II. However, the temporary calculation information T is included in the right transfer information and the shared information I, II is output. It is also possible to calculate II. In that case, in the right assignment processing device 10, the temporary calculation information T must be included in the right assignment information partially restored from the shared information I and II. That is, the transfer information distribution unit 13 of the right transfer processing apparatus 10 uses the temporary calculation information T for dynamically generating the common shared information CW from the common key information CK previously owned in common with the right transfer management apparatus 30 as the right. The transfer information I and II are generated by including them in the right transfer information portion that can be partially restored in the transfer processing device 30. The rights assignment management device 30 acquires the temporary calculation information T from the partially restored rights assignment information, calculates the common shared information CW, and completely reassigns the rights assignment information from the shared information I, II and the common shared information CW. It can be restored.

  By including the temporary calculation information in the right transfer information in this way, the information that needs to be transmitted between the devices is only the distributed information I and II, which can be simplified.

<Attachment of verification information>
In the right transfer processing device 10, the transfer of rights such as the input user ID and the authentication information such as a password, identification information such as a ticket ID representing an electronic ticket to be transferred and transfer conditions such as the transfer amount, etc. It is also possible to generate verification information such as a hash value for the information, and include the verification information in the right transfer information to calculate the shared information I and II. In this case, it is desirable that the right transfer information partially restored from the shared information I and II does not include verification information, and the right transfer information completely restored includes verification information. The right assignment management device 30 can obtain verification information from the completely restored right assignment information, and can also verify whether authentication information, identification information, assignment conditions, etc. in the right assignment information are correct values.

  By including the verification information in the right transfer information in this way, it is possible to prevent an erroneous transfer process from being executed due to falsification of the distributed information I and II, a transmission error in the communication path, or the like.

  Note that the computer can realize that the present invention can be realized by configuring some or all of the processing functions of each unit in each apparatus shown in FIG. 3 by a computer program and executing the program using the computer. It can be recorded on a readable recording medium, for example, FD, MO, ROM, memory card, CD, DVD, removable disk, etc., stored, provided, and the program can be transmitted through a network such as the Internet. And can be distributed.

1 is an overall configuration diagram of an electronic rights transfer system in an embodiment of the present invention. It is a processing sequence figure of right assignment in one example of the present invention. It is a functional block diagram of the electronic rights transfer management system in this invention. It is a structural example of the right assignment information in the right assignment processing apparatus. It is an example of a calculation of common shared information property western part and transfer information dispersion | distribution part in a rights assignment processing apparatus. It is an example of a calculation of the transfer information restoration part in a right transfer processing apparatus. It is a storage example of the rights information in the rights assignment management device. It is the example of a memory | storage of the authentication information in a right transfer management apparatus. It is an example of a calculation of the transfer information restoration part and common information generation part in a rights transfer management apparatus.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 Rights transfer processing apparatus 11 Transfer information input unit 12 Common shared information generation unit 13 Transfer information distribution unit 14 Distributed information output unit 15 Information storage unit 20 Rights transfer processing device 21 Distributed information input unit 22 Transfer information restoration unit 23 Transfer information confirmation unit 24 Authentication Information Input Unit 25 Distributed Information Output Unit 26 Information Storage Unit 30 Rights Assignment Management Device 31 Rights Information Management Unit 32 Authentication Information Management Unit 33 Distributed Information Input Unit 34 Assignment Information Restoration Unit 35 Common Distributed Information Generation Unit 36 Rights Assignment Determination Unit 37 Rights Assignment Execution Unit 38 Rights Information Storage Unit 39 Authentication Information Storage Unit 3A Assignment Information Storage Unit 3B Information Storage Unit 40 Network

Claims (11)

Rights transfer processing device possessed by the transfer source user who transfers the electronic rights, rights transfer processing held by the transfer destination user who receives the electronic rights, and the rights to manage the rights information of the electronic rights and information related to the owner in association with each other An electronic rights transfer management method in which a rights transfer management device manages and executes electronic rights transfer between a transfer source user and a transfer destination user using a transfer management device,
The right transfer processing device includes right information including identification information indicating an electronic right to be transferred, authentication information indicating a transfer source user who owns and transfers the electronic right, and transfer conditions indicating conditions for the transfer to be performed. Information is generated, and shared right information is dynamically generated from common key information previously owned in common with the right assignment management device and temporary calculation information used only once when calculating common shared information, and the right assignment information is specified. The shared information matches the common shared information, and the specific part of the right transfer information can be restored from a specific combination of other shared information, and all of the right transfer information is restored from all the combinations of the shared information In order to be possible, it is distributed and encoded into a plurality of pieces of shared information, the shared information group that makes it possible to partially restore the rights assignment information and the temporary calculation information is sent to the rights assignment processing device,
The right assignment processing device is a right assignment information that is retrievable from the shared information group sent from the right assignment processing device and is right assignment information excluding authentication information indicating a transfer source user of the right assignment information. Confirming the content of the right transfer process by restoring the identification information indicating the electronic right and transfer conditions, and sending the shared information group and the temporary calculation information to the right transfer management device,
The rights assignment management device dynamically generates common shared information from common key information previously owned in common with the rights assignment processing device and temporary computation information sent from the rights assignment processing device, and the rights assignment processing device The rights assignment information generated by the rights assignment processing device is completely restored based on the shared information group sent from the shared information and the common shared information, and the assignment indicated by the identification information included in the restored rights assignment information The owner information of the electronic right to be subject to the electronic information and the owner information of the electronic right to be transferred indicated by the authentication information included in the restored right assignment information match, and are described in the restored right assignment information When the transfer condition is confirmed or executed, the owner information and the transfer destination can be rewritten by rewriting the owner information of the electronic right from the transfer user authentication information to the transferee user authentication information. With users To perform the transfer rights of the electronic rights in between,
Electronic rights transfer management method characterized by things. The electronic rights transfer management method according to claim 1,
The right assignment processing device is a right that allows the right assignment processing device to partially restore temporary computation information for dynamically generating common shared information from common key information previously owned in common with the right assignment management device. Generate a distributed information group included in the transfer information part,
The rights assignment management device obtains temporary calculation information by partially restoring the rights assignment information from the shared information group sent from the rights assignment processing device, and has a common key previously owned in common with the rights assignment processing device Dynamically generating common shared information using the temporary calculation information from the information to completely restore all rights transfer information,
Electronic rights transfer management method characterized by things. The electronic rights transfer management method according to claim 1 or 2,
The right assignment processing device further generates verification information for verifying the consistency of the right assignment information, generates a distributed information group from the right assignment information and the verification information,
The rights assignment management device obtains temporary calculation information by partially restoring the rights assignment information from the shared information group sent from the rights assignment processing device, and has a common key previously owned in common with the rights assignment processing device The shared shared information is dynamically generated from the information and all rights assignment information and verification information are completely restored to verify the integrity of the rights assignment information.
Electronic rights transfer management method characterized by things. A right transfer processing device used for generating right transfer information and a distributed information group for transferring an electronic right to a transfer destination user by a transfer source user,
Transfer that accepts input of right transfer information including identification information indicating an electronic right to be transferred, authentication information indicating a transfer source user who owns and transfers the electronic right, transfer conditions for determining whether transfer processing can be executed, etc. Information input means;
A common key previously owned in common with a rights transfer management device that acquires or generates temporary computation information that is used only once to calculate common shared information, and manages the rights information of the electronic rights in association with information about the owner. Common shared information generating means for dynamically generating common shared information according to a predetermined calculation from the information and the temporary calculation information;
Transfer information distribution means for generating a shared information group by distributedly encoding the right transfer information that has received the input so that the common shared information is one of the generated shared information;
For transmitting the distributed information group and the temporary calculation information that can partially restore the right transfer information among the generated shared information group to the right transfer processing device owned by the other transferee user who transfers the electronic right. Distributed information output means;
A right transfer processing device characterized by comprising: The right assignment processing device according to claim 4,
The transfer information distribution unit generates a shared information group from transfer information that includes temporary calculation information. The right assignment processing device according to claim 4 or 5,
The transfer information distributing means generates verification information for verifying the consistency of rights transfer information from the rights transfer information, and generates a distributed information group from the rights transfer information and verification information. A right assignment processing device used to partially restore the right assignment information from the shared information group in order for the assignee user to obtain the electronic right from the assignee user,
A shared information input means for receiving input of the shared information group and the temporary calculation information output by the rights transfer processing device owned by the transfer source user who transfers the electronic rights;
Transfer information restoring means for restoring rights transfer information that can be partially restored from the input shared information group;
A transfer information confirmation means for presenting the restored right to the transfer destination user;
Authentication information input means for receiving input of authentication information indicating a transferee user who receives the transfer of the electronic right;
In order to send the transferred distributed information group and temporary calculation information, and the input transfer destination user authentication information to a rights transfer management device that manages transmission rights information and information related to the owner in association with each other. Distributed information output means,
A rights assignment processing device characterized by comprising: A rights assignment management device that executes electronic rights assignment management between a rights assignment processing device possessed by a transfer source user who transfers electronic rights and a rights assignment processing device possessed by a transfer destination user who receives the electronic rights,
Storage means for storing identification information indicating an electronic right and authentication information of a user who owns the electronic right in association with each other;
A shared information group output by the rights assignment processing device, and a shared information input means for accepting input of the temporary assignment information and the authentication information of the transferee user, which can partially restore the rights assignment information;
Common shared information generating means for dynamically generating common shared information according to a predetermined calculation from the input temporary calculation information and the common key information previously owned in common with the right transfer processing device;
Transfer information restoring means for restoring all right transfer information from the inputted shared information group and common shared information;
It is verified whether or not the identification information indicating the electronic right to be transferred included in the restored right lecture information exists in the storage means, and if it exists, the electronic right stored in association with the identification information It is verified whether the authentication information of the user and the authentication information indicating the transfer source user included in the restored right transfer information match, and if they match, the transfer included in the restored right transfer information A right assignment determination means for verifying or substituting the assignment condition indicating the condition for satisfying,
When all the verifications in the right transfer determination unit are established, the authentication information of the user of the electronic right stored in the storage unit is rewritten with the authentication information of the transfer destination user input from the right transfer processing device. A right transfer execution means;
A right transfer management device characterized by comprising: A rights assignment management device that manages and executes assignment of electronic rights between a rights assignment processing device possessed by a transfer source user to which electronic rights are transferred and a rights assignment processing device possessed by a transfer destination user who receives the electronic rights,
Storage means for storing identification information indicating an electronic right and authentication information of a user who owns the electronic right in association with each other;
A shared information input unit that receives the input of authentication information of the transfer destination user and the shared information group that can be partially restored from the transfer of rights transfer information output by the rights transfer processing device;
The right transfer information is partially restored from the input shared information group to obtain temporary calculation information, and the common shared information is moved in accordance with a predetermined calculation from common key information that is previously owned in common with the right transfer processing device. Common distributed information generating means for generating automatically,
Transfer information restoring means for restoring all right transfer information from the inputted shared information group and common shared information;
It is verified whether or not the identification information indicating the electronic right to be transferred included in the restored right assignment information exists in the storage means, and if it exists, the electronic right stored in association with the assignment identification information It is verified whether the authentication information of the user and the authentication information indicating the transfer source user included in the restored right transfer information match, and if they match, they are included in the restored right transfer information A right assignment determination means for verifying or substituting the assignment condition indicating the condition for the assignment;
When all the verifications in the right transfer determination unit are established, the authentication information of the user of the electronic right stored in the storage unit is rewritten with the authentication information of the transfer destination user input from the right transfer processing device. A right transfer execution means;
A right transfer management device characterized by comprising: The rights assignment management device according to claim 8 or 9,
The transfer information restoration means restores right transfer information and verification information from the shared information group and the shared shared information,
Whether the right assignment determination means verifies the integrity of the right assignment information using the verification information, and whether the storage means has identification information indicating the electronic right to be assigned included in the restored right assignment information If it exists, the authentication information of the user of the electronic right stored in association with the identification information matches the authentication information indicating the transfer source user included in the restored right transfer information. Verifying or substituting establishment of transfer conditions indicating conditions for establishment of transfer included in the restored right transfer information if they match,
Rights transfer management device characterized by things.   A program for causing a computer to execute processing functions of the rights assignment processing device, rights assignment processing device, or rights assignment management device according to any one of claims 4 to 9.

Images