JP5708365B2 - Content data browsing control method, content data management browsing program - Google Patents

Description

  The present invention relates to a method for managing browsing display on a user terminal for digital content distributed to a network or the like, and a computer program therefor.

  Along with the widespread use of dedicated browsing terminals and highly functional portable information terminals, an environment for services in which books, magazines, comics, etc. are digitized and distributed as digital contents has been established.

  In order to browse digital content, a browsing application program (viewer) corresponding to the data format of the content file is required. The viewer usually does not have an editing function such as rewriting or a function of creating a copy, but exclusively plays a role of rendering content data in a form visible to the viewer.

  On the other hand, since digital data is inherently easy to copy, when distributing digital content, it is desired from the content providing side to distribute it in such a form that it is not copied unnecessarily. The technology and mechanism for this purpose are generally called DRM (Digital Rights Management). A typical DRM is a method in which digital content is encrypted and distributed, while a key for decrypting the content is distributed as a license for a fee. If the license (content decryption key) is encrypted and distributed with the public key of the content purchaser, it can be controlled so that only the content purchaser himself can extract the content decryption key and use it.

  For example, Patent Document 1 discloses a content management system using a content management server 110 and a user management server 120 (FIG. 1). The client 140 used by the user accesses the content management server 110 to obtain content data. After that, the reproduction software of the client 140 tries to reproduce the downloaded purchased content but cannot reproduce it as it is. The playback software accesses the user management server 120 to acquire a decryption key from the playback control information, decrypts the content with the decryption key, and then executes playback processing. It is described that the decryption key is preferably obtained from the user management server 120 every time playback is performed (paragraph 0032).

  On the other hand, apart from such a method, a method for collating the device ID of a playback device has been proposed as a method for protecting content data stored in package media for a long time. Patent Document 2 discloses a content usage control apparatus that uses content recorded on an MO medium. In the present invention, the content usage control apparatus is composed of a user computer 110, an MO apparatus 120, and an MPEG2 coder 130. The MO medium stores content data and permission information AC relating to reproduction thereof, and the AC stores the MO medium. Number, MO device number, and MPEG decoder number are recorded. At the time of reproduction, the reproduction program of the user computer 110 causes the MO device to check the MO medium number of the license information, the MO medium number read from the MO medium, the MO device number of the license information, and the number of the MO device itself. If they match, the content data is read from the MO medium, and the decoder number of the license information and the decoder's own number are collated with the coder in MPEG, and the compressed data read from the medium is read only if they match. It describes that control is performed so that content (moving image) is reproduced by performing expansion.

  "License method" as in Patent Document 1 (a general term for a method of distributing data including information (decryption key, usage condition information, etc.) relating to whether or not content can be used at a timing independent of content data acquisition) Has been able to strictly control the playback and copying of paid content, etc., and various methods have been proposed. Whenever content is purchased or when more strict control is applied, a license is obtained each time the content is used. There is a complication that it is necessary to connect to the server each time.

JP 2008-3960 A JP 2001-92721 A

  SUMMARY OF THE INVENTION An object of the present invention is to provide a content data browsing control method and a content data management browsing program that are simpler than the license method for controlling the use of content data distributed through a network.

A first invention for solving the above-mentioned problem is
A content data browsing control method for browsing content data only to a terminal device authenticated only by a user who has the viewing rights, using a management browsing program that operates on the user terminal and index information paired with the content data Because
The index information is information including content identification information generated by a predetermined conversion process based on purchaser identification information of content data, a predetermined portion of content data and terminal device identification information,
The management browsing program is a program in which identification information of a program registrant and identification information of an installed terminal device are registered in advance in the management browsing program by a predetermined procedure,
A first collation in which the management browsing program activated in the terminal device checks the unique identification information of the terminal device and collates with the terminal identification information registered in the management browsing program;
A second collation for collating the purchaser identification information recorded in the index information and the registrant identification information registered in the management browsing program with reference to the index information paired with the content data by the management browsing program;
A third collation in which the management browsing program retrieves the content matching information from the index information and collates with a result obtained by converting a predetermined portion of the content data and the identification information of the terminal device by the same conversion algorithm;
The content data browsing control method of performing browsing display of the content data on the user terminal device only when all the three matching results are matched.

    According to such a method, after registering the identification information of the program registrant and the identification information of the installed terminal device in the management browsing program by a predetermined procedure, the recorded contents of the index information and the function of the management browsing program Thus, only a genuine purchaser of electronic content who is a user who has installed the management browsing program can display and browse the purchased electronic content only on a terminal in which the management browsing program is registered.

  The index information includes terminal identification information, and the second collation further includes collating the terminal identification information recorded in the index information with the terminal information registered in the management browsing program. Good.

The second invention for solving the above-mentioned problem is
A content data management browsing program for browsing and displaying content data on a user terminal device with reference to index information of electronic content data,
The index information is information including content identification information generated by a predetermined conversion process based on purchaser identification information of content data, a predetermined portion of content data and terminal device identification information,
An area for storing information for identifying a terminal on which the program operates as terminal information, user identification information for identifying a user registered using the program as user information, and storing both as registration information,
When it is activated with user identification information on the user terminal,
If the user information is not set in the registration information storage area, the registration request including the user identification information received from the user is sent to the preset access destination, and the registration is approved. A function to read out the terminal identification information for identifying the user terminal, and write the terminal identification information as the terminal information and the user identification information as the user information in the registration information area only when a response to that effect is received;
A function to request download to the management server and acquire an index information file of the same content as the purchased content when the purchased electronic content is specified,
When electronic content is specified for viewing,
Read terminal identification information of the user terminal, first collation to collate with terminal information in the registration information storage area, read out information identifying the purchaser from the index information of the selected electronic content, A second collation to collate with user information,
A third collation that reads the content matching information from the index information of the selected electronic content and collates the result obtained by converting the predetermined part of the content data and the identification information of the terminal device by the same conversion algorithm; Function to execute,
A function for browsing and displaying the selected electronic content only when all of the three matches match;
This is a content data management browsing program including a series of instructions that perform each of the functions.

    According to such a program, after registering the identification information of the program registrant and the identification information of the installed terminal device in the management browsing program, the recorded contents of the index information and the function of the management browsing program allow the electronic content Only a genuine purchaser and a user who has installed the management browsing program can display and browse the electronic content purchased only on a terminal in which the management browsing program is registered.

  The index information includes terminal identification information, and the second collation further includes collating the terminal identification information recorded in the index information with the terminal information registered in the management browsing program. Good.

According to the present invention,
Realizes a content management method and content management system that performs simple usage control that can be completed only on the user terminal when content data is used by simply reproducing (displaying for viewing) without copying, editing, etc. it can.

1 is an overall configuration diagram illustrating an overview of an electronic content distribution system 1. FIG. 5 is a flowchart illustrating an outline of a use procedure of the electronic content distribution system 1. 2 is a hardware configuration diagram of a management server 40. FIG. 3 is a functional block diagram of a management server 40. FIG. It is a hardware block diagram of a content server. 3 is a functional block diagram of a management server 40. FIG. 2 is a hardware configuration diagram of a user terminal 10. FIG. It is a sequence diagram explaining the registration step of a management browsing application in detail. It is a sequence diagram explaining the download step of the purchase content of a management browsing application in detail. It is a figure explaining the operation | movement at the time of browsing on the user terminal (browsing terminal) in the electronic content delivery system. It is a reference figure explaining operation | movement at the time of browsing on the user terminal (browsing terminal) in the electronic content delivery system. It is a figure explaining the operation | movement at the time of browsing on the user terminal (browsing terminal) in the electronic content delivery system. It is a figure explaining the operation | movement at the time of browsing on the user terminal (browsing terminal) in the electronic content delivery system.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. FIG. 1 is an overall configuration diagram illustrating an outline of an electronic content distribution system 1 configured according to a content data browsing control method according to the first invention of the present application. By describing the electronic content distribution system 1, the content data browsing control method according to the first invention of the present application and the content data management browsing program according to the second invention will be described. The electronic content distribution system 1 is configured by connecting a browsing terminal 10 used by a user, a management server 40, and a content server 70 to a network 9.

  The browsing device 10 is connected to a host computer on the network and exchanges IP with a wireless communication function for performing wireless communication with the base station 20 constituting the mobile phone network 8 by a communication method compliant with the IMT-2000 standard. Network communication function. The browsing device 10 is, for example, a mobile phone, a smartphone, or an electronic book terminal, and includes a Web browser and a dedicated program described later.

  The management server 40 implements a bookstore site that provides a bookstore function to the user. Also responsible for membership management and payment requests. A server computer equipped with a database management program is loaded with a management database and a dedicated program described later.

  The content server 70 is a server device that holds various content data in a content database and distributes content data in response to a download request from a purchaser. Although only one unit is shown in the figure for simplicity, a plurality of content servers may exist.

  In addition, the management server 40 and the content server 70 are servers having some functions to be described later. However, in an actual implementation, these functions may be distributed to a plurality of computers. The management server 40 or the content server 70 may be configured as a group of computers.

  FIG. 2 is a flowchart for explaining the outline of the use procedure of the electronic content distribution system 1 according to the present invention. The flow of services provided by the electronic content distribution system 1 as viewed from the user will be described with reference to FIG. (Here is an overview, and details of each step will be described later)

  First, the user registers as a member at the bookstore site. The user accesses a bookstore site (management server 40) on the Internet, transmits information necessary to be able to purchase an electronic book on the site, and registers as a member. The information input here may include a user name, a password, an e-mail address, and information related to payment. The management server 40 issues a member ID and associates the user name / password and other personal information entered by the user with the member ID and registers them in the database as a new member information record (S10). The issued member ID is returned to the user. Instead of directly replying to the terminal of the accessing user, the user may be notified by e-mail at the e-mail address given by the user, and the existence of the e-mail address of the user and the user may be confirmed.

  Next, the user downloads an installer program (hereinafter referred to as “installer program”) of an electronic book content management browsing application program for browsing the purchased electronic book content to the user terminal (S20). However, since anyone can download the installer program, S20 may be performed first and the member registration process (S10) may be performed later.

  The user executes the downloaded installer program to install the electronic book content management browsing application program (hereinafter “management browsing application”) on the user terminal. After the installation is completed, the user activates the management browsing application and inputs the member ID and password. The member ID and password are sent to the management server 40. The management server 40 checks the member information database, and if it can be confirmed, returns a response of the authentication pass to the terminal. The management browsing application of the user terminal that has received the response of the authentication pass sucks up the terminal unique ID and records and embeds (embeds) the user ID in the user terminal with the user information. The management browsing application in which the terminal unique ID is embedded in itself is in a state where it can be used for content browsing (it is said to be activated). The user terminal in which the activated management browsing application is installed becomes the browsing terminal 10 (S30).

A user accesses a bookstore site, finds a favorite content, and purchases it. When the payment process is successful, the bookstore site returns the payment process completion information including the content ID and the download destination URL to the user browsing terminal (S40).
The user accesses the URL of the download destination and obtains the purchased electronic book content (S50, details will be described later).
The user selectively browses the electronic book purchased by the management browsing application (S70, details will be described later).

  FIG. 3 is a hardware configuration diagram of the management server 40. As shown in FIG. 3, in the management server 40, a control unit 41, a local storage unit 42, a peripheral device I / F unit 43, an input unit 44, a display unit 45, and a communication unit 46 are connected via a bus 49. FIG. 4 is a functional block diagram of the management server 40. The management server 40 includes an overall control unit 60, a transmission / reception unit 61, a bookstore function providing unit 62, a settlement unit 63, a terminal registration unit 64, an index providing unit 65, and a database management unit 66.

The transmission / reception means 61 receives various requests sent from the user terminal (browsing terminal) 10 and transmits response information from the management server 40 to the request source.
The bookstore function providing means 62 provides a user login process and subsequent online bookstore functions. The settlement means 63 performs a credit inquiry to a settlement institution when a member purchases content with a credit card or the like and processing according to the inquiry result. The terminal registration unit 64 performs a process of registering the management browsing application on the user terminal when a registration request for the management browsing application is received from the user terminal (viewing terminal) 10. The index generation means 65 generates a bookshelf index information file in response to an index download request from the management browsing application when one of the purchase contents is designated on the user terminal (viewing terminal) 10. Perform the provided process.

  The storage unit 42 of the management server 40 includes a hard disk device 50 that is a large-capacity storage. The hard disk device 50 stores a management database file and various management files including a member master 51, a member content table 52, and a content management table 53, which are member information databases.

  The member master 51 is a management file corresponding to a member management original book that holds one or more terminal registration flags, which will be described later, in addition to registered personal information such as a registered member's member ID, login password, and name. The member content table 52 is a file that manages information such as the date of purchase, the number of downloads, and the latest download date and time for a combination of (member ID, content ID) each time a member purchases content. The most distracted by authors and copyright holders is the overlooked mischief of electronic content. For this reason, the copyright holder's understanding of digitization can be obtained by providing a content downloadable period or setting an upper limit on the number of downloads for legitimate purchasers of electronic content. The current situation is. The member content table 52 is a table for performing such management.

  The content management table 53 includes bibliographic information (content title, volume, author, cover thumbnail image, table of contents, etc.), product information (sales price, inventory information, publisher, etc.) for configuring the bookstore site. ) Management file. It is also referred to when a bookshelf index information file described later is generated.

The database management unit 66 updates and deletes the member master 51, the member content table 52, and the content management table 53, and creates and registers a new record.
The overall control unit 60 controls the units 60 to 66 and controls the input unit 44, the display unit 45, the communication unit 46, and the peripheral device I / F unit 46.

  3 and FIG. 4, the storage unit 42 of the management server 40 receives a request from the client by the program code of the OS of the computer used as the management server 40 and the HTTP protocol, and responds to it. In addition to the Web server software to be returned (main part of the transmission / reception means 61), a computer program module for performing terminal registration processing (main part of the terminal registration means 64) and a computer program module for generating a bookshelf index information file (index provision means 65) A computer program module (main part of the settlement means 63) and a transmission / reception means 61 for creating a transmission message to the settlement organization in response to the content purchase application and receiving a response message from the settlement organization. Management browsing via A computer program module (bookstore function providing means 62) that receives a request relating to search, search, selection, and purchase of electronic content from a pre, creates an interactive screen corresponding to each request, and sends it back through the transmission / reception means 61 And main program (main part of the overall control means 60) for controlling the entire management server 40 are stored, and these program codes are read out by the control unit 41 for management. It functions as each means 60-66 by driving and controlling the hardware of the server 40. Since the bookstore function providing means 62 and the settlement means 63 are existing technologies, further explanation is omitted. The functions of other means will be described later in detail.

  Next, FIG. 5 is a hardware configuration diagram of the content server 70. As shown in FIG. 5, the content server 70 is connected to a control unit 71, a local storage unit 72, a peripheral device I / F unit 73, an input unit 74, a display unit 75, and a communication unit 76 via a bus 79. The storage unit 72 of the content server 70 includes a hard disk device 90 that is a large-capacity storage. The hard disk device 90 stores and manages a content database 91 that centrally manages content data that is the content itself.

FIG. 6 is a functional block diagram of the content server 70. The content server 70 includes an overall control unit 80, a transmission / reception unit 81, a content providing unit 82, and a database management unit 83. The transmission / reception means 81 receives various requests sent via the network and transmits response information from the content server 70 to the request source. The content providing unit 82 determines whether or not download is possible in response to a content download request from the management browsing application, and then prepares content data if it can be downloaded and transmits it to the request source. The database management unit 83 updates and deletes registration information in the content database 91 and registers a new record.

  The storage unit 72 of the content server 70 stores the program code of the OS of the computer used as the content server 70, and Web server software (main part of the transmission / reception means 81) that receives a request from the client and returns a response to it. In addition, a computer program module for performing content data provision processing (main part of the content providing unit 82), a database application program for registering, updating, deleting, and searching records of the content database (main part of the database management unit 83), content A main program (main part of the overall control means 80) for controlling the entire server 70 is stored, and these computer programs are read out by the control unit 71 and stored in the contents server 70. It functions as each means 80-83 by driving-controlling the software.

  FIG. 7 is a hardware configuration diagram of a portable information device as an example of a user terminal (browsing terminal 10) according to the embodiment of the present invention. A processor unit 11 controls the portable information device. This is an integrated circuit in which a central processing circuit that reads and interprets a control program, a RAM (random access memory) that holds temporary data, a sound processing circuit that connects a speaker 111, a microphone 112, and the like are integrated. Reference numeral 12 denotes a ROM (Read Only Memory). The program code of the OS of the portable information device is stored. Reference numeral 13 denotes a display unit. It is a small liquid crystal display device. Reference numeral 14 denotes a touch panel unit. A contact detection element (not shown) on the two-dimensional array is mounted integrally with the display unit, for example, by being inserted into the surface portion of the display unit 13. Reference numeral 15 denotes a display control unit. A video RAM that temporarily stores display data to be displayed on the display unit 13 is included. The display unit 13 is controlled by receiving a control signal and display data through the bus 19 and displaying an image. In addition, the display control unit 15 scans the contact detection element to detect contact of a finger on the display unit 13 of the operator and notifies the processor unit 11 that an input event has occurred along with the contact position information. Reference numeral 16 denotes a nonvolatile memory such as a flash memory. Application programs, user data, and the like are stored, but some are defined as areas used by the OS. Reference numeral 17 denotes a communication function unit. Provide voice communication and packet communication with a base station by CDMA2000 or W-CDMA. Reference numeral 18 denotes a SIM card (Subscriber Identity Module Card). In normal use, the SIM card is inserted and fixed in a socket provided in the user terminal. A unique number called IMSI (International Mobile Subscriber Identity) is given inside. In the system area of the nonvolatile memory 16, an identification number assigned to the mobile terminal itself called IMEI (International Mobile Equipment Identity) is recorded. The processor unit 11, ROM 12, display control unit 15, nonvolatile memory 16, and communication function unit 17 are connected by a bus 19.

  Next, as steps in which the features of the present invention are manifested, the steps of S30—management browsing application registration, S50—purchased content download, and S70—content browsing in FIG. 2 will be described in detail.

  FIG. 8 is a sequence diagram for explaining in detail S30 of FIG. 2 and the management browsing application registration step. The management browsing application registration step will be described in detail below with reference to FIG.

  The user activates the management browsing application and inputs the member ID and password (S31). The member ID and password are sent to the management server 40 by the operation of the management browsing application (S32). When the transmission / reception means 61 of the management server 40 receives the member ID and password, it passes them to the overall control means 60. The overall control means 60 calls a user authentication processing program. The user authentication processing program searches the member management database (member master 51) to check whether there is a registration record that matches the combination of (member ID, password) (S33). If there is no member record having the corresponding combination, the overall control unit 60 immediately notifies the authentication failure and ends the process. That is, the authentication failure notification page is returned to the management browsing application through the transmission / reception means 61 (S34). If there is a member record having the corresponding combination, the overall control unit 60 calls the terminal registration unit 64. The terminal registration means 64 sets an unused one (a flag value of “0”) among terminal registration flags provided in advance in the member record for the member to “1” (S35). Setting the terminal registration flag from “0” to “1” indicates that the management browsing application is newly “registered” for the member. When registration of up to n managed browsing apps is permitted for one member (n is a positive integer greater than or equal to 1), n terminal registration flags are prepared in advance for one member. Since only one managed browsing application needs to be installed on one user terminal, the number n that can be registered for the managed browsing application is the same as the number of terminals on which one member can browse the electronic book content purchased by the member. If n terminal registration flags are already set to “1”, the terminal registration unit 64 notifies the error that the number of registered management browsing applications has been exhausted via the transmission / reception unit 61 and ends the process. To do. (S36). If the terminal registration flag can be set from “0” to “1”, the terminal registration unit 64 notifies the completion of authentication via the transmission / reception unit 61 and ends the process (S37). The transmission / reception means 61 returns a notification of authentication completion as a response to the terminal registration request to the management browsing application.

  When the management browsing application receives an authentication completion notification, the management browsing application acquires a terminal unique ID (terminal information 300 in FIG. 10 to be described later) of the user terminal in which the management browsing application is operating, and stores it in a predetermined memory area of the management browsing application. The terminal unique ID is written together with the user ID as user information (S38). The terminal unique ID may be any fixed information that can uniquely identify the user terminal and can be read by the management browsing application. For example, it is preferable to use the IMSI that is fixedly recorded in the SIM 18. Furthermore, the fact that the user information and the terminal unique ID are registered in the management browsing application is displayed (S39). The user knows that the registration of the management browsing application has been completed. As a result, the management browsing application can browse the electronic book content.

  FIG. 9 is a sequence diagram for explaining in detail the step of downloading purchased content of the management browsing application in S50 of FIG. The content purchase / download step will be described in detail below with reference to FIG.

  When the content is newly purchased and the settlement information including the content ID for specifying the content and the URL of the download request destination of the content data is received by the management browsing application, the management browsing application performs the content ID by the user's operation. The content title character string designated by or an icon representing the content can be displayed on the purchased content list selection screen together with other purchased content. The content newly purchased by the user's operation is selected (S51). The management browsing application transmits an index information download request including information (content ID) designating the selected content to the URL of the download request destination (S52). When the user selects and downloads the purchased content on the management browsing application, the electronic content distribution system 1 first downloads the bookshelf index information file related to the content to the user terminal, and then Thus, a two-step procedure of downloading actual content data is taken. The description is continued below.

  When receiving the selection of the content to be downloaded from the member in S51, the management browsing application first issues an index download request to the management server. The URL of the download request destination of the content data indicated in the payment completion information obtained by the purchaser after purchasing the content is actually the URL of the server (management server 40) that receives the index download request. When the transmission / reception means 61 of the management server 40 receives the index download request, it passes the received information to the overall control means 60. The overall control unit 60 calls the index providing unit 65. The index providing means 65 determines whether or not the requesting member may be permitted to download the content (S53). Here, it is determined whether or not the member is a valid purchaser for the target content and other conditions are determined. As a desirable specific example, referring to the member content table 52, whether or not the combination of the member and the content ID is registered first, the total number of downloads associated with the combination, etc. If the inspection is smaller than the predetermined number of times, it is considered that the download is permitted, and a procedure such as incrementing the download number counter is performed. According to such an inspection, only the content purchaser who is a valid purchaser of the content and satisfies the predetermined conditions such as the number of downloads and whether or not it is within a certain period of time after the purchase can advance the content download procedure. Can do.

  The index providing unit 65 immediately returns an error notification through the transmission / reception unit 61 when the download is not permitted. When the download is permitted, a bookshelf index information file is generated here, and the created bookshelf index information file is transmitted to the user terminal through the transmission / reception means 61 as a response to the index information download request (S54).

  A bookshelf index information file (index information for short) is information that is always paired with purchased content. Member ID (member ID), member password, content bibliographic information (content title, cover thumbnail image, author, publisher, publication year, etc.), content data DL request destination URL, terminal specific information (drawn later) Included). The URL is a URL of a content server that holds content data and actually downloads the content data. As will be described in detail later, the bookshelf index information file plays an important role in the DRM mechanism of the electronic content distribution system 1.

  The management browsing application that has received the bookshelf index information file decrypts it with an appropriate decryption key if it is encrypted, and records the member information (member identifier, member) It is checked whether or not the password and those in the bookshelf index information file match (S55). If there is a match, the content data DL request destination URL is read and stored in the temporary storage area, the terminal identification information of the user terminal on which the management browsing application is operating is acquired, and the content identification Copy data, generate consistency check information for checking the consistency between the content data and the index information, and write it into the consistency check information recording area of the bookshelf index information. (S56). Details of the procedure for generating the consistency confirmation information will be described later. Now, the member ID (user information), the terminal identification information (terminal information), and the consistency check information are written in the bookshelf index information, and the bookshelf index information loaded on the user terminal is the DRM of the electronic content distribution system 1. Will function correctly as part of the mechanism.

  Next, the management browsing application reads the content data DL request destination URL saved in the temporary storage area, and issues a content download request to this URL (S57). This URL is the URL of the content server 70 that holds the content data and actually downloads the content data. In the preferred embodiment, the management server 40 and the content server 70 are separate. By doing so, the functions of bookstore management, membership management, settlement (request) processing, and the management and provision of content data can be distributed. Upon receiving the content download request, the content server 70 performs some kind of determination processing as to whether or not content data may be provided in response to this request. As the determination processing, the content server 70 may confirm by making a confirmation inquiry to the management server 40, or when the index providing means 65 of the management server 40 creates the bookshelf index information file, the content download destination URL is managed. A method may be used in which additional information that can be confirmed to be surely provided by the server is included, and the content server 70 checks it. If the determination process is OK, the content data to be provided by the designated content ID is extracted from the content database 91 and returned to the management browsing application of the user terminal through the transmission / reception means 81 (S58). The management browsing application receives the content data, displays a screen for notifying the completion of the content DL, and notifies the user (S59).

  FIG. 10 to FIG. 13 are diagrams for explaining the operation at the time of browsing on the user terminal (viewing terminal) in the electronic content distribution system 1. Hereinafter, the operation of the user terminal during content browsing will be described with reference to FIGS.

  First, a description will be given with reference to FIG. At the user terminal where the content has been downloaded normally, there is content data 210 and a bookshelf index information file 220 corresponding to the content. In the bookshelf index information file 220, the terminal identification information of the user terminal as the terminal information 222 is recorded together with the member ID as the user information 221 by the process of S56. On the other hand, user information 101 and terminal information 102 are embedded in the registration information area inside the management browsing application 100. Furthermore, the terminal identification information 300 of the user terminal is fixedly recorded in a predetermined area of the memory inside the terminal. This terminal identification information can be read by calling a specific function of the OS (Operating System) of the user terminal.

  When the management browsing application is activated, terminal identification information 300 is first acquired using a specific function of the OS via the API. Then, the management browsing application checks whether or not the terminal identification information 300 matches the terminal information 102 embedded in itself. If they do not match, the management browsing application is forcibly terminated. The management browsing application can continue processing only when both match. In this way, checking whether the terminal information 102 embedded in the management browsing application matches the terminal identification information 300 of the user terminal 10 is referred to as “application consistency check”. Due to the “consistency check of app”, the browsing management application is a legitimate one activated on the terminal, and the one that was activated on the other terminal was copied and brought to the own terminal It can be confirmed that it is not a thing.

  When the management browsing application intends to browse content, it is determined whether the user information 221 and the terminal information 102 embedded in the management browsing application match the user information 221 and the terminal information 222 of the bookshelf index information file. Check for verification. This inspection is referred to as “book shelf index information file consistency check”. It is possible to verify whether or not the content has been purchased by the registrant of the management browsing application by checking the consistency of the bookshelf index information file.

  The reason for performing the “book shelf index information file consistency check” will be described with reference to FIG. FIG. 11 is a diagram conceptually illustrating a case where only “application consistency check” is performed. In this case, the management browsing application uses the terminal identification information of the terminal that is operating at a predetermined timing (such as the timing when the user specifies the download content) and the terminal information recorded in the registered information area of the terminal. If the number does not match, further operations will be rejected, and the number of managed browsing apps registered on the management server will be kept below a predetermined number, resulting in a reduction in the number of terminals used per registered member. Will limit. Since the purchased content is downloaded via the management browsing application, the download of the content is also controlled within the range of the terminal on which the management browsing application operates. However, if a pair of content that has been obtained by another person and a bookcase index information file of the content is copied to the terminal, it cannot be prevented. (Even if the "content consistency check" described later is performed at the same time, the consistency is maintained when the pair is copied, so this is not hindered.) However, the "book shelf index information file consistency check" , It can be seen that the user information 101 and the user information 221 and the terminal information 102 and the terminal information 222 do not match. This is the reason why “consistency check of bookshelf index information file” is necessary.

  Furthermore, the management browsing application also checks the consistency between the content data and the bookshelf index information file. This is a process of checking whether the pair of the content data and the bookshelf index information file is a correct combination when the pair is created, and whether the content data has been downloaded to the terminal. This inspection will be referred to as “content consistency check”. As already mentioned in the description of FIG. 9, immediately after receiving the bookshelf index information file, the management browsing application performs a process of writing consistency confirmation information used for “content consistency confirmation” in the file (S56). .

  In this process, first, consistency confirmation original data in which the content data of a specific part of the content is connected after the terminal specifying information is constituted. Next, a hash of the constructed original data is generated. The hash value obtained as a result and the information specifying the content portion added after the terminal specifying information are written in the bookshelf index information file as consistency confirmation information (“content matching information” in the figure). (Note that since the bookshelf index information file is encrypted, transmitted, received, and stored, decryption and re-encryption using an appropriate key must be performed before and after the consistency check information writing process and other processes for rewriting the contents of the file. Applied.)

  As a specific example, as terminal identification information, information obtained by connecting IMEI (International Mobile Equipment Identity) and IMSI (International Mobile Subscriber Identity) is preferable. When the user terminal is not a 3G telephone terminal, it is preferable to use a Wi-Fi MAC address as the terminal specifying information. As the specific part of the content, it is preferable to use a predetermined part of one arbitrarily selected file among the group of files constituting the content (the group of files contained in the content storage folder of the content). As the hash value, it is preferable to use a hash obtained by using a known hash function such as SHA-1 or SHA-2 for consistency check original data composed of the terminal identification information and the one content file. Further, it is preferable that the information specifying the content portion is the full path (file name) of the content file used for creating the original data. However, these are only specific examples, and are not limited to such an implementation.

  Processing at the time of “content consistency check” is as follows. First, information (full path of the content file used for creating the original data) used to identify the content part used when constructing the consistency check original data is extracted from the bookcase index information file. Next, consistency confirmation original data is comprised from terminal specific information and content partial data. Then, the constructed original data is subjected to a hash function to generate a hash, and this is compared with the hash value stored in the bookshelf index information file. If the two match, it has been verified that the bookshelf index information file is the correct one associated with the content and has been downloaded to the terminal.

  In this way, the “content consistency check” is a copy of the content A that is properly obtained by another person to the terminal, and then crafts the copy B of the bookshelf index information file that is paired with the other content that the user has purchased. This is a procedure for judging an unauthorized copy such that the copy contents A and B ′ obtained from the other person are disguised as a pair, by setting it as B ′.

FIG. 12 is a diagram showing a modification of FIG. “Consistency check of bookshelf index information file” may be performed only by collating the terminal information 222 (bookshelf index information file) and the terminal information 102 (registration information of the management browsing application). This is because it is the same as collating the terminal information 222 (bookcase index information file) with the terminal information 300 (specific information specific to the terminal). FIG. 13 is also a diagram showing a modification of FIG. “Consistency check of bookshelf index information file” may be performed only by comparing user information 221 (bookshelf index information file) with user information 101 (registration information of the management browsing application). In either case, it is possible to prevent a pair of content purchased by another person and its index information from being copied to the terminal and viewed. However, in the case of FIG. 12, the content purchased by the user and downloaded to another terminal cannot be copied and transferred to the own terminal for viewing. In that case, there is no substantial problem because it is only necessary to download from the content server.
Thus, “consistency confirmation of bookshelf index information file” is not limited to a method of collating both user information and terminal information as shown in FIG. In the case of FIG. 13, the recording area of the terminal information 222 of the index information 220 may be omitted. This is because even if the terminal information 222 does not exist in the index information 220, “application consistency check”, “bookcase index information file consistency check”, and “content consistency check” can be performed.

The content data browsing control method according to the present invention has been described above by describing the electronic content distribution system 1. It has been described that the management server 40 does not record and manage terminal information that member users register and use the management browsing application. As this modified configuration, when the management server 40 registers the management browsing application in response to a request from the member user terminal, the management server 40 is also informed of information identifying the terminal to be used. You may make it record and manage the terminal specific information which registered the management browsing application for every member user. In this case, since it is possible to know the user who registered the management browsing application in the management server 40 and the terminal identification information used by the user, the counter is incremented in step S35 of FIG. "Is no longer necessary. If the management server 40 holds all the terminal identification information necessary for generating the consistency check information, the terminal identification information is written and the consistency check information is generated / embedded in step S54 of FIG. It can be performed, and the process of step S56 performed by the management browsing application on the user terminal can be simplified or omitted.

1 Electronic content distribution system 8 Wireless communication network 9 Internet 10 User terminal (or browsing terminal)
18 SIM card 20 base station 40 management server 41 control unit 42 storage unit 43 peripheral device I / F unit 44 input unit 45 display unit 46 communication unit 50 hard disk 51 member master 52 member content table 53 content management table 60 overall control unit 61 transmission / reception Means 62 Bookstore function providing means 63 Settlement means 64 Terminal registration means 65 Index providing means 66 Database management means 70 Content server 71 Control unit 72 Storage unit 73 Peripheral device I / F unit 74 Input unit 75 Display unit 76 Communication unit 80 Overall control unit 81 Transmission / reception means 82 Content provision means 83 Database management means 90 Hard disk 91 Content database

Claims (4)

A content data browsing control method for browsing content data only to a terminal device authenticated only by a user who has the viewing rights, using a management browsing program that operates on the user terminal and index information paired with the content data Because
The index information is information including content identification information generated by a predetermined conversion process based on purchaser identification information of content data, a predetermined portion of content data and terminal device identification information,
The management browsing program is a program in which identification information of a program registrant and identification information of an installed terminal device are registered in advance in the management browsing program by a predetermined procedure,
A first collation in which the management browsing program activated in the terminal device checks the unique identification information of the terminal device and collates with the terminal identification information registered in the management browsing program;
A second collation for collating the purchaser identification information recorded in the index information and the registrant identification information registered in the management browsing program with reference to the index information paired with the content data by the management browsing program;
A third collation in which the management browsing program retrieves the content matching information from the index information and collates with a result obtained by converting a predetermined part of the content data and the identification information of the terminal device by the same conversion algorithm; Let's run a match
A content data browsing control method for browsing and displaying the content data on a user terminal device only when all of the three matching results match. The index information includes terminal identification information,
The content data browsing control method according to claim 1, wherein the second collation further includes collating terminal identification information recorded in the index information with terminal information registered in the management browsing program. A content data management browsing program for browsing and displaying content data on a user terminal device with reference to index information of electronic content data,
The index information is information including content identification information generated by a predetermined conversion process based on purchaser identification information of content data, a predetermined portion of content data and terminal device identification information,
An area for storing information for identifying a terminal on which the program operates as terminal information, user identification information for identifying a user registered using the program as user information, and storing both as registration information,
When it is activated with user identification information on the user terminal,
If the user information is not set in the registration information storage area, the registration request including the user identification information received from the user is sent to the preset access destination, and the registration is approved. A function to read out the terminal identification information for identifying the user terminal, and write the terminal identification information as the terminal information and the user identification information as the user information in the registration information area only when a response to that effect is received;
A function to request download to the management server and acquire an index information file of the same content as the purchased content when the purchased electronic content is specified,
When electronic content is specified for viewing,
Read terminal identification information of the user terminal, first collation to collate with terminal information in the registration information storage area, read out information identifying the purchaser from the index information of the selected electronic content, A second collation to collate with user information,
A third collation that reads the content matching information from the index information of the selected electronic content and collates the result obtained by converting the predetermined part of the content data and the identification information of the terminal device by the same conversion algorithm; Function to execute,
A function for browsing and displaying the selected electronic content only when all of the three matches match;
Content data management browsing program that includes a series of instructions that perform each function of. The index information includes terminal identification information,
The content data management browsing program according to claim 3, wherein the second collation further includes collating terminal identification information recorded in the index information with terminal information registered in the management browsing program.

Images