JP2007087020A - Authentication processor - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To apply a use right which is rich in flexibility in authentication processing using an electronic ticket. <P>SOLUTION: An electronic ticket acquiring part 110 acquires an electronic ticket corresponding to a key identifier associated with protection content. A combination condition analyzing part 130 analyzes combination conditions described in an acquired electronic ticket. The electronic ticket acquiring part 110 acquires an electronic ticket detected by the combination condition analyzing part 130. When a plurality of necessary electronic tickets are acquired according to the combination conditions, an authentication processing part 140 executes authentication processing by using a plurality of electronic tickets. The authentication processing part 140 performs processing to confirm whether or not encapsulated content is available by using the electronic ticket. When the authentication result is correct in such a status that all the necessary electronic tickets are arranged, a user is able to use the content according to an operation permitted in each electronic ticket. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to an authentication process using an electronic ticket for granting content usage rights.

  An electronic ticket technique is known as a technique for preventing illegal use and illegal use of digital contents such as image data and document data.

  The following example can be given as an authentication system using an electronic ticket. The provider of digital content performs processing such as encryption (encapsulation) on the digital content and then distributes the digital content to the user. An electronic ticket is required to decrypt the encryption. The electronic ticket is issued in accordance with, for example, specific information of hardware such as a computer used by the user and provided to the user. Thereby, it becomes possible to permit the use of digital content only when a legitimate user uses a computer corresponding to the electronic ticket.

  The electronic ticket can further be given a user operation authority. For example, it is possible to set whether to give the user authority such as a digital content printing operation or editing operation. As a result, for example, it is possible to restrict only other operations by allowing only the user to view digital content.

  Inventions that further enhance such electronic ticket technology have also been proposed (Patent Documents 1 to 4, etc.).

JP 2000-48076 A JP 2000-293439 A JP 2004-240959 A JP 2004-240960 A

  As described above, various content provision modes can be realized by using electronic ticket technology while preventing unauthorized use of digital content. However, the conventional electronic ticket system basically has a form in which only one electronic ticket (one electronic ticket) corresponds to a specific content or a specific function. For example, one electronic ticket is issued in order to give a plurality of operation authorities to specific content, and one electronic ticket corresponding to a specific function to be used is issued.

  For this reason, for example, when a part of a plurality of operation authorities is changed or added in a situation where one electronic ticket that gives a plurality of operation authorities is issued for specific content, a new operation authority is changed. It is necessary to generate an electronic ticket and to regenerate protected content (encapsulated content) corresponding to the new electronic ticket.

  As in this example, the conventional electronic ticket system has a lack of flexibility when changing or adding the operation authority.

  The present invention has been made in such a background, and an object of the present invention is to make it possible to grant a flexible usage right in an authentication process using an electronic ticket.

  In order to achieve the above object, an authentication processing apparatus according to a preferred aspect of the present invention is an authentication processing apparatus that performs an authentication process using an electronic ticket for granting a right to use content. A combination condition analysis unit that analyzes a combination condition for the ticket, and an authentication processing unit that performs an authentication process on the target content based on a plurality of electronic tickets required by the combination condition. The right to use the target content is given by a combination of electronic tickets.

  In the above configuration, the authentication processing related to the target content is executed based on a plurality of electronic tickets required depending on the combination condition. For example, when all the electronic tickets required according to the combination conditions are prepared and the authentication process is executed, the right to use the target content is given according to the usage conditions described in each electronic ticket. By combining a plurality of electronic tickets in this way, it is possible to give a flexible usage right.

  In a preferred aspect, the combination condition includes a logical operation related to a plurality of electronic tickets. In a preferred aspect, the combination condition is described in each electronic ticket. In a preferred aspect, the combination condition is described in the target content.

  In order to achieve the above object, an authentication system according to a preferred aspect of the present invention includes an electronic ticket issuing unit that issues an electronic ticket for granting a right to use content, and an electronic ticket corresponding to the target content. A combination condition analysis unit that analyzes combination conditions, an electronic ticket acquisition unit that acquires a plurality of electronic tickets required by the combination conditions, and an authentication that performs an authentication process on target content based on the plurality of acquired electronic tickets And a processing unit, whereby the right to use the target content is given by a combination of a plurality of electronic tickets.

  In order to achieve the above object, a program according to a preferred aspect of the present invention is a program for causing a computer to function as an authentication processing apparatus that performs an authentication process using an electronic ticket for granting a right to use content. And causing the computer to analyze a combination condition for an electronic ticket corresponding to the target content, and to execute an authentication process for the target content based on a plurality of electronic tickets required by the combination condition, Thus, the right to use the target content is given by a combination of a plurality of electronic tickets.

  The program having the above configuration may be provided via a network, for example, or may be provided by being stored in a storage medium such as an optical disc. The program having the above-described configuration may be divided into a plurality of programs. For example, a form in which a program serving as a main body is provided first, and an additional program for adding a part of the function later is provided. Further, as a desirable mode, when all the electronic tickets required by the combination conditions are prepared and the authentication process is executed, the right to use the target content is determined according to the usage conditions described in each electronic ticket. It is characterized by being given. In a preferred aspect, the combination condition includes a logical operation related to a plurality of electronic tickets. In a preferred aspect, the combination condition is described in each electronic ticket. In a preferred aspect, the combination condition is described in the target content.

  According to the present invention, it is possible to give a flexible usage right by combining a plurality of electronic tickets.

  DESCRIPTION OF EXEMPLARY EMBODIMENTS Hereinafter, preferred embodiments of the invention will be described with reference to the drawings.

  FIG. 1 shows a preferred embodiment of the present invention, and FIG. 1 is an overall configuration diagram of an authentication system using an authentication processing apparatus according to the present invention.

  The authentication system of FIG. 1 is a system in which a terminal device 100 that functions as an authentication processing device, a content providing server 200, and an electronic ticket issuing server 300 are connected to each other via a network 400. A typical example of the network 400 is the Internet, but other public networks may be used. The network 400 may include a LAN (local area network).

  The content providing server 200 provides the content managed by the content providing server 200 to the terminal device 100 in response to a request from the terminal device 100. At this time, the content is encapsulated and then provided to the terminal device 100. Content managed by the content providing server 200 is document data, image data, audio data, and the like.

  The electronic ticket issuing server 300 issues an electronic ticket. The electronic ticket is required when decapsulating the encapsulated (encrypted) content. The issued electronic ticket is provided to the terminal device 100 directly or via the content providing server 200.

  The terminal device 100 is a user terminal that uses content provided from the content providing server 200, and performs authentication processing using the electronic ticket issued from the electronic ticket issuing server 300. A typical example of the terminal device 100 is a computer, but it may be a portable information terminal such as a PDA (personal digital assistance).

  FIG. 1 shows a functional configuration inside the terminal device 100. The terminal device 100 includes a hardware configuration (not shown) such as a CPU, a memory, and a hard disk. Then, the software (program) for causing the hardware configuration to function as an authentication processing device and the hardware configuration cooperate to thereby obtain the electronic ticket acquisition unit 110, the electronic ticket storage unit 120, and the combination condition analysis shown in FIG. Each function of the unit 130 and the authentication processing unit 140 is realized. For example, the functions of the electronic ticket acquisition unit 110, the combination condition analysis unit 130, and the authentication processing unit 140 are realized mainly by the CPU and the memory. For example, a storage area inside the hard disk is used as the electronic ticket storage unit 120.

  A user who uses the terminal device 100 acquires the encapsulated content (protected content) provided from the content providing server 200 and uses the content in accordance with the given usage conditions. The user terminal device 100 acquires an electronic ticket issued by the electronic ticket issuing server 300 when using the protected content provided from the content providing server 200. The electronic ticket corresponds to the capsule key when the protected content is encapsulated, and also corresponds to the use conditions given to the user. Then, by acquiring the necessary electronic ticket, the terminal device 100 can release the encapsulation of the protected content. In addition, the user can use the content within the restrictions imposed by the usage conditions described in the electronic ticket.

  FIG. 2 is a diagram for explaining the electronic ticket of the present embodiment, and FIG. 2 shows various conditions described in the electronic ticket. Hereinafter, the electronic ticket 10 of this embodiment will be described with reference to FIG. In the following, the reference numerals in FIG. 1 are used for the portions shown in FIG.

  The electronic ticket 10 is issued by the electronic ticket issuing server 300 in accordance with, for example, specific information of hardware such as the terminal device 100 used by the user. Of course, the content providing server 200 may generate an electronic ticket and provide it to the user. By providing content using the electronic ticket 10, for example, it becomes possible to permit use of the content only when a legitimate user uses the terminal device 100 corresponding to the electronic ticket 10. Note that the electronic ticket 10 that can be used by a plurality of terminal devices used by a legitimate user may be generated.

  The electronic ticket 10 describes usage conditions for content. For example, it is possible to set whether to give the user authority such as a content printing operation or editing operation. By appropriately setting the usage conditions, for example, it is possible to restrict only other operations by allowing only the user to view the content.

  FIG. 2 shows a setting state of content usage conditions by the electronic ticket 10. In the electronic ticket 10 of the present embodiment, usage conditions such as an expiration date and the number of times of use are shown as usage conditions, in addition to user operation authority such as printing, annotation editing, and document editing. Of course, the usage conditions that can be given to the electronic ticket 10 are not limited to the conditions shown in FIG. Incidentally, in FIG. 2, among the operation authorities for printing, annotation editing, and document editing, those that are permitted to be operated are marked with a circle in the lower column of the operation item. That is, in the example of FIG. 2, printing (printout) and transcription (copying) are permitted, and other operations are not permitted.

  Further, the electronic ticket 10 can be set with an expiration date and the number of times of use of the ticket. In the example illustrated in FIG. 2, the electronic ticket 10 has an expiration date set up to January 1, 2006. When the expiration date is set, the electronic ticket 10 can be used until the expiration date, and the ticket becomes invalid after the expiration date. The electronic ticket 10 is set with the number of uses. When the number of uses is set, the electronic ticket 10 can be used for the number of uses. For this reason, in the example shown in FIG. 2, if the ticket is used ten times, the ticket becomes invalid after the tenth use.

  As described above, various usage conditions are set for the electronic ticket 10. Furthermore, a combination condition is set for the electronic ticket 10 of the present embodiment.

  The combination condition indicates the combination condition for the electronic ticket corresponding to the content to be used, and the target content can be used for the first time when a plurality of electronic tickets required by the combination condition are prepared. Become. A specific example of the authentication process based on the combination condition will be described in detail later. Incidentally, in the example shown in FIG. 2, K1 & K2 is set as a combination condition in the electronic ticket 10, and it is necessary to have both a ticket corresponding to the key identifier K1 and a ticket corresponding to the key identifier K2. Show.

  Returning to FIG. 1, the authentication process in the terminal device 100 will be described. When using the provided protected content on the terminal device 100, the electronic ticket acquisition unit 110 acquires an electronic ticket corresponding to the key identifier associated with the protected content from the electronic ticket issuing server 300. The acquired electronic ticket is stored in the electronic ticket storage unit 120. Note that when using the provided protected content on the terminal device 100, an electronic ticket corresponding to the protected content may be acquired in advance and already stored in the electronic ticket storage unit 120.

  The combination condition analysis unit 130 analyzes the combination condition described in the acquired electronic ticket. That is, the combination condition described in the electronic ticket corresponding to the protected content is analyzed, and a plurality of electronic tickets required by the combination condition are detected.

  Then, the electronic ticket acquisition unit 110 acquires the electronic ticket detected by the combination condition analysis unit 130 from the electronic ticket issue server 300. If the electronic ticket is already stored in the electronic ticket storage unit 120, the stored electronic ticket may be used.

  Thus, when a plurality of electronic tickets required according to the combination conditions are obtained, the authentication processing unit 140 performs an authentication process using the plurality of electronic tickets. That is, the authentication processing unit 140 performs a confirmation process as to whether or not the content encapsulated using the electronic ticket can be used. If all the required electronic tickets are available and the authentication result is correct, the user can use the content by an operation permitted for each electronic ticket. On the other hand, in the state where all the required electronic tickets are not available, the use of content is prohibited because the combination condition is not satisfied.

  Next, a specific example regarding a combination condition of a plurality of electronic tickets will be described.

<Specific example 1>
・ Combination condition R2 = K1 & K2
Electronic ticket A1: Effective electronic ticket corresponding to key identifier K1 Combination condition R2 is set for electronic ticket A1 Electronic ticket A2: Effective electronic ticket corresponding to key identifier K2 Electronic ticket A2 Combination condition R2 is set

  In Specific Example 1, the key identifier K1 is associated with the protected content to be used, and the electronic ticket acquisition unit (reference numeral 110 in FIG. 1) uses the electronic ticket A1 corresponding to the key identifier K1 as a base point. To be acquired. Then, the combination condition analysis unit (reference numeral 130 in FIG. 1) analyzes the combination condition R2 set in the electronic ticket A1. The combination condition R2 = K1 & K2 means that two electronic tickets of a valid electronic ticket A1 corresponding to the key identifier K1 and a valid electronic ticket A2 corresponding to the key identifier K2 are necessary. That is, “&” corresponds to a logical product (AND) of logical operations.

  For this reason, when the combination condition analysis unit analyzes the combination condition R2, the electronic ticket acquisition unit acquires two electronic tickets of the electronic ticket A1 and the electronic ticket A2. Since the electronic ticket A1 has already been acquired, the electronic ticket A2 is acquired by the electronic ticket acquisition unit. When the electronic ticket A2 is acquired, the combination condition R2 of the electronic ticket A2 is analyzed. The combination condition of the electronic ticket A2 is also R2. For this reason, the combination conditions of both the electronic ticket A1 and the electronic ticket A2 are satisfied when the two electronic tickets of the electronic ticket A1 and the electronic ticket A2 are prepared.

  Then, the validity of each electronic ticket is confirmed in the authentication processing unit (reference numeral 140 in FIG. 1). If both the electronic ticket A1 and the electronic ticket A2 are valid, the use of the protected content is permitted. By the way, if the usage conditions, that is, each operation authority (see FIG. 2) such as printing, annotation editing, and document editing is set in the electronic ticket A1 and the electronic ticket A2, it is permitted by both of the two tickets. Only operations are allowed. Alternatively, an operation permitted by at least one of the two tickets may be permitted.

  Specific example 1 is suitable for the following usage scenes. For example, in the office, it is assumed that there is a license (electronic ticket A1) of a member belonging to the sales department and a license (electronic ticket A2) of a support member. Moreover, in order to browse the content including specific customer information of the sales department, the electronic ticket A1 is necessary, and the electronic ticket A2 is also necessary depending on the combination condition R2. Then, when a member leaves the support member, the electronic ticket A2 of the support member is invalidated, and the use of the content is not permitted for the member who has left the support member due to the combination condition R2.

  Also, in the first specific example, the following usage scene is also conceivable. There are a member license (electronic ticket A1) and a video content viewing license (electronic ticket A2) for the member. In order to view the video content, the electronic ticket A1 and the electronic ticket A2 are required. In this case, even if the viewing license (electronic ticket A2) is valid, for example, when the membership license (electronic ticket A1) expires, viewing of the video content is not permitted.

<Specific example 2>
・ Combination condition R3 = K1 & K3
・ Combination condition R4 = K3 & K4
Electronic ticket A1: Effective electronic ticket corresponding to key identifier K1 Combination condition R3 is set for electronic ticket A1 Electronic ticket A3: Valid electronic ticket corresponding to key identifier K3 Electronic ticket A3 Combination condition R4 is set

  In specific example 2, the key identifier K1 is associated with the protected content to be used, and the electronic ticket acquisition unit (reference numeral 110 in FIG. 1) uses the electronic ticket A1 corresponding to the key identifier K1 as a base point. To be acquired. Then, the combination condition R3 set in the electronic ticket A1 is analyzed by the combination condition analysis unit (reference numeral 130 in FIG. 1). The combination condition R3 indicates that the electronic ticket A3 is necessary in addition to the electronic ticket A1, and the electronic ticket acquisition unit acquires the electronic ticket A3. When the electronic ticket A3 is acquired, the combination condition R4 of the electronic ticket A3 is analyzed. It can be seen from the combination condition R4 that an electronic ticket A4 (an electronic ticket corresponding to the key identifier K4) is further required. For this reason, when the electronic ticket A4 cannot be acquired, the combination condition R4 is not satisfied, and the use of the protected content is not permitted. If the electronic ticket A4 can be acquired and all the acquired electronic tickets are valid, the use of the protected content is permitted.

<Specific example 3>
・ Combination condition R5 = K1 & (K2 | K3)
Electronic ticket A1: Effective electronic ticket corresponding to key identifier K1 Combination condition R5 is set for electronic ticket A1 Electronic ticket A2: Effective electronic ticket corresponding to key identifier K2 Electronic ticket A2 No combination condition is set. Electronic ticket A3: A valid electronic ticket corresponding to key identifier K3. No combination condition is set for electronic ticket A3.

  In the third specific example, the key identifier K1 is associated with the protected content to be used, and the electronic ticket acquisition unit (reference numeral 110 in FIG. 1) uses the electronic ticket A1 corresponding to the key identifier K1 as a base point. To be acquired. Then, the combination condition R5 set in the electronic ticket A1 is analyzed by the combination condition analysis unit (reference numeral 130 in FIG. 1). In the combination condition R5, (K2 | K3) requires at least one of the two electronic tickets of the valid electronic ticket A2 corresponding to the key identifier K2 and the valid electronic ticket A3 corresponding to the key identifier K3. It is shown that. That is, “|” corresponds to a logical sum (OR) of logical operations, and the combination condition R5 indicates that at least one of the electronic ticket A2 and the electronic ticket A3 is required in addition to the electronic ticket A1. Yes. Therefore, in the specific example 3, even if the electronic ticket A2 cannot be acquired, the electronic ticket A3 is acquired in addition to the electronic ticket A1, and if the two acquired electronic tickets are valid, Since there is no combination condition, use of protected content is permitted.

<Specific Example 4>
・ Combination condition R6 = (! K1) & K2
Electronic ticket L1: Electronic ticket valid only for 7 days corresponding to the key identifier K1 No combination condition is set for the electronic ticket L1 Electronic ticket L2: Valid electronic ticket corresponding to the key identifier K2 Electronic ticket L2 Is set with the combination condition R6

  In the specific example 4, when the protected content corresponding to the electronic ticket L2 is used, the protected content is associated with the key identifier K2, and the electronic ticket L2 corresponding to the key identifier K2 is acquired. Then, the combination condition R6 set in the electronic ticket L2 is analyzed by the combination condition analysis unit (reference numeral 130 in FIG. 1). In combination condition R6, (! K1) indicates that electronic ticket L1 corresponding to key identifier K1 is invalid. That is, “!” Corresponds to the negation of the logical operation (NOT), the electronic ticket L1 has already been acquired, and the electronic ticket L1 is invalid (for example, the expiration date of 7 days has expired). When the electronic ticket L1 is invalid, the combination condition R6 set in the electronic ticket L2 is satisfied by the invalid electronic ticket L1 and the valid electronic ticket L2, and the protected content corresponding to the electronic ticket L2 can be used.

  Specific example 4 is suitable for the following usage scenes. For example, if there is a question collection content that can be used by the electronic ticket L1 and the answer collection content corresponding to the question collection content is set to be used by the electronic ticket L2, the electronic ticket L1 can be used after the expiration date. The ticket L2 makes it possible to use the answer collection contents.

  Heretofore, several specific examples regarding the combination conditions of the electronic ticket have been described. Regarding the electronic ticket combination conditions, it can be seen that there are innumerable aspects other than the specific examples described above by changing the types of logical operations and combinations of logical operations included therein.

  As described above, according to a preferred embodiment of the present invention, it is possible to give a flexible usage right by combining a plurality of electronic tickets.

  The above-described embodiment is merely an example in all respects, and does not limit the scope of the present invention. For example, the electronic ticket combination condition may be described in the protected content. That is, in the above-described embodiment, the protected content is associated with the key identifier corresponding to the electronic ticket serving as the base point. Instead, electronic ticket combination conditions are described in the protected content. And when a user uses protected content, the form in which the combination conditions described in the protected content are analyzed and a required electronic ticket is acquired is also possible.

  In addition, content usage conditions (printing, annotation editing, document editing, etc.) are described in the electronic ticket (see FIG. 2). However, an electronic ticket with only a combination condition for which no use condition is set may be issued.

1 is an overall configuration diagram of an authentication system according to the present invention. It is a figure for demonstrating the electronic ticket of this embodiment.

Explanation of symbols

  10 electronic ticket, 100 terminal device, 200 content providing server, 300 electronic ticket issuing server.

Claims (7)

In an authentication processing device that performs an authentication process using an electronic ticket for granting the right to use content,
A combination condition analysis unit for analyzing a combination condition for an electronic ticket corresponding to the target content;
An authentication processing unit that executes an authentication process related to the target content based on a plurality of electronic tickets required by the combination condition;
Have
As a result, the right to use the target content is granted by a combination of multiple electronic tickets.
An authentication processing device. An electronic ticket issuing unit that issues an electronic ticket for granting the right to use the content;
A combination condition analysis unit for analyzing a combination condition for an electronic ticket corresponding to the target content;
An electronic ticket acquisition unit for acquiring a plurality of electronic tickets required by the combination conditions;
An authentication processing unit that executes an authentication process related to the target content based on the plurality of electronic tickets acquired;
Have
As a result, the right to use the target content is granted by a combination of a plurality of electronic tickets.
An authentication system characterized by that. In a program for causing a computer to function as an authentication processing apparatus that performs an authentication process using an electronic ticket for granting a right to use content,
On the computer,
Analyzing the combination conditions for the electronic ticket corresponding to the target content;
Executing an authentication process on the target content based on a plurality of electronic tickets required by the combination condition;
And execute
This gives the right to use the target content by combining multiple electronic tickets.
A program characterized by that. In the program according to claim 3,
When all the electronic tickets required by the combination conditions are prepared and the authentication process is executed, the right to use the target content is granted according to the usage conditions described in each electronic ticket.
A program characterized by that. The program according to claim 4, wherein
The combination condition includes a logical operation related to a plurality of electronic tickets.
A program characterized by that. The program according to claim 5,
The combination condition is described in each electronic ticket.
A program characterized by that. The program according to claim 5,
The combination condition is described in the target content.
A program characterized by that.

Images