Images

Classifications

• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
  • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
  • H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
  • H04L9/0819—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s)
  • H04L9/083—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06F—ELECTRIC DIGITAL DATA PROCESSING
  • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
  • G06F21/10—Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM]
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L63/00—Network architectures or network communication protocols for network security
  • H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
  • H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L63/00—Network architectures or network communication protocols for network security
  • H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
  • H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
  • H04L63/0442—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L63/00—Network architectures or network communication protocols for network security
  • H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
  • H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
  • H04L63/0464—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload using hop-by-hop encryption, i.e. wherein an intermediate entity decrypts the information and re-encrypts it before forwarding it
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L63/00—Network architectures or network communication protocols for network security
  • H04L63/06—Network architectures or network communication protocols for network security for supporting key management in a packet data network
  • H04L63/061—Network architectures or network communication protocols for network security for supporting key management in a packet data network for key exchange, e.g. in peer-to-peer networks
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L63/00—Network architectures or network communication protocols for network security
  • H04L63/12—Applying verification of the received information
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L63/00—Network architectures or network communication protocols for network security
  • H04L63/12—Applying verification of the received information
  • H04L63/126—Applying verification of the received information the source of the received data
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
  • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
  • H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
  • H04L9/0819—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s)
  • H04L9/0825—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
  • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
  • H04L9/3247—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving digital signatures
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
  • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
  • H04N21/60—Network structure or processes for video distribution between server and client or between remote clients; Control signalling between clients, server and network components; Transmission of management data between server and client, e.g. sending from server to client commands for recording incoming content stream; Communication details between server and client 
  • H04N21/63—Control signaling related to video distribution between client, server and network components; Network processes for video distribution between server and clients or between remote clients, e.g. transmitting basic layer and enhancement layers over different transmission paths, setting up a peer-to-peer communication via Internet between remote STB's; Communication protocols; Addressing
  • H04N21/633—Control signals issued by server directed to the network components or client
  • H04N21/6332—Control signals issued by server directed to the network components or client directed to client
  • H04N21/6334—Control signals issued by server directed to the network components or client directed to client for authorisation, e.g. by transmitting a key
  • H04N21/63345—Control signals issued by server directed to the network components or client directed to client for authorisation, e.g. by transmitting a key by transmitting keys
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
  • H04N5/00—Details of television systems
  • H04N5/76—Television signal recording
  • H04N5/91—Television signal processing therefor
  • H04N5/913—Television signal processing therefor for scrambling ; for copy protection
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
  • H04N7/00—Television systems
  • H04N7/16—Analogue secrecy systems; Analogue subscription systems
  • H04N7/162—Authorising the user terminal, e.g. by paying; Registering the use of a subscription channel, e.g. billing
• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06F—ELECTRIC DIGITAL DATA PROCESSING
  • G06F2211/00—Indexing scheme relating to details of data-processing equipment not covered by groups G06F3/00 - G06F13/00
  • G06F2211/007—Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06F—ELECTRIC DIGITAL DATA PROCESSING
  • G06F2211/00—Indexing scheme relating to details of data-processing equipment not covered by groups G06F3/00 - G06F13/00
  • G06F2211/007—Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
  • G06F2211/008—Public Key, Asymmetric Key, Asymmetric Encryption
• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06F—ELECTRIC DIGITAL DATA PROCESSING
  • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
  • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
  • G06F2221/2101—Auditing as a secondary aspect
• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06F—ELECTRIC DIGITAL DATA PROCESSING
  • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
  • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
  • G06F2221/2117—User registration
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L2209/00—Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
  • H04L2209/60—Digital content management, e.g. content distribution
  • H04L2209/605—Copy protection
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L2463/00—Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00
  • H04L2463/101—Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00 applying security measures for digital rights management
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
  • H04N5/00—Details of television systems
  • H04N5/76—Television signal recording
  • H04N5/91—Television signal processing therefor
  • H04N5/913—Television signal processing therefor for scrambling ; for copy protection
  • H04N2005/91357—Television signal processing therefor for scrambling ; for copy protection by modifying the video signal
  • H04N2005/91364—Television signal processing therefor for scrambling ; for copy protection by modifying the video signal the video signal being scrambled

Definitions

• the present application is also a Reissue of U.S. Pat. No. 6,076,077. More than one reissue application have been filed for the reissue of U.S. Pat. No. 6,076,077.
• the reissue applications are application Ser. Nos. 10/170,677, 11/701,946, 11/701,943 (the present application), and 11/701,945.
• the present invention relates to a system for managing copyrights in dealing in copyrighted digital data content, i.e., dealing in original digital data content and edited digital data content.
• Use of a data content includes not only referring to its contents but also normally effectively using by storing, copying, or editing obtained data content by a user. Moreover, it is possible to transmit data content which is edited by a user to another person via on-line basis by a communication line or via off-line basis using a proper recording medium. Furthermore, it is possible to transmit the edited data content to the database to be registered as new data content. In such a case, the user who has edited the data content may also be an information provider.
• the inventor of the present invention proposed a system for managing a copyright by obtaining a permit key from a key control center via a public telephone line in Japanese Patent Laid-Open No. 46419/1994 (GB 2269302A) and Japanese Patent Laid-Open No. 141004/1994 (U.S. Pat. No. 5,504,933) and moreover, proposed an apparatus for managing the copyright in Japanese Patent Laid-Open No. 132916/1994 (GB 2272822A).
• the database copyright management system of the above application in order to manage the copyright, either one or more of a program for managing the copyright, copyright information, and a copyright control message are used in addition to a use permit key corresponding to a requested use, and data content which has been transferred with encryption is decrypted to be used for viewing and editing, and the data content is encrypted again when used for storing, copying and transferring.
• the copyright control message is displayed when utilization beyond the range of the user's request or authorized operation is found to give caution or warning to a user and the copyright management program performs monitoring and managing so that utilization beyond the range of the user's request or authorized operation is not performed.
• the above-mentioned system comprises a key management center that manages a crypt key and a copyright management center that manages the database copyright.
• a key management center that manages a crypt key and a copyright management center that manages the database copyright.
• all of the data content delivered from a database is encrypted by a first crypt key
• a first user who wishes to uses data content directly from the database requests the key management center the key corresponding to the specific usage by presenting information on the first user to the center.
• the key management center transfers the information on the first user to the copyright management center.
• the copyright management center transfers this information together with a copyright management program to the key control center.
• the key control center On receiving the copyright management program, transfers the first crypt key and a second crypt key K 2 corresponding to the specific usage together with the copyright management program to the first user via a communication network.
• the first user On receiving the first crypt key, the first user uses this key to decrypt the data content for usage.
• the user uses the second crypt key to encrypt and decrypt data content when subsequently storing, copying or transmitting the data content.
• the first and second crypt keys are abandoned. If the first user wishes to use the data content again, the first and second crypt keys are re-delivered to the user from the copyright management center. The re-delivery of the second crypt key indicates a confirmation that the data content has been copied or transferred to a second user, and this is recorded in the copyright management center.
• the second user In requesting a secondary usage to the copyright management center, the second user presents the information on the first user and information on the original copyright to the copyright management center.
• the copyright management center transmits to the second user a permit key corresponding to the specific usage, together with a second crypt key (viewing permit key), a third crypt key (a permit key corresponding to the specific usage), and the copyright management program which have been encrypted.
• LAN Local Area Network
• Internet is now organized in global scale, by which a plurality of networks are utilized as if they are a single network.
• the access control method based on encryption is disclosed in U.S. Pat. Nos. 4,736,422, 5,224,163, 5,400,403, 5,457,746, and 5,584,023, in EP 438154 and EP 506435, and in Japanese Patent Laid-Open 145923/1993.
• the access control method based on encryption and digital signature is described in U.S. Pat. Nos. 4,919,545 and 5,465,299.
• Intranet is now being propagated, in which a plurality of LANs are connected with each other via Internet and these LANs are utilized as if they are a single LAN.
• information exchange is performed via Internet, which basically provides no guarantee for prevention of piracy, and information is encrypted to prevent the piracy when secret information is exchanged.
• both data content and software are supplied by a server as an object, which comprises program and data.
• a system called object container in which operating system, application program and data content are provided by a server and data content processing and data content storage are performed by a user terminal unit, which is an ordinary computer
• a system called server object in which operating system, application program and data content are provided by a server, and data content processing is performed by a user terminal unit called network computer, while data content storage is carried out by a server.
• a system is further developed, in which data content processing is also performed by the server, and the user terminal unit is provided only with input/output function, and the whole system functions as a single computer.
• object oriented programming performing various processing by using “object” integrated with data content and program handling data content, instead of general form file consisting of data header and data body.
• a storing portion called as “slot” in an envelope called as “instance” accommodates data called as “instance variable”.
• the slot is surrounded by one or more of procedures called as “method” for referring, processing, binding and so on, and the instance variable can be referred to or operated only via “method”. This function is called as “encapsulation”. Instruction from outside for make the “method” refer to or operate the instance variable is called as “message”.
• license network As rental network system, is considered.
• an enterprise providing network base such as communication lines also provides the systems other than communication lines such as fee charging system, security system, copyright management system, certification system, etc.
• a service enterprise utilizes these services and carries out network business as if it is his own system.
• Secret-key system is also called “common key system” because the same key is used for encryption and decryption, and because it is necessary to keep the key in secret, it is also called “secret-key system”.
• Typical examples of encryption algorithm using secret-key are: DES (Data Encryption Standard) system of National Bureau of Standards, FEAL (Fast Encryption Algorithm) system of NTT, and MISTY system of Mitsubishi Electric Corp.
• the secret-key is referred as “Ks”.
• the public-key system is a cryptosystem using a public-key being made public and a private-key, which is maintained in secret to those other than the owner of the key.
• One key is used for encryption and the other key is used for decryption.
• Typical example is RSA public-key system.
• the public-key is referred as “Kb”, and the private-key is referred as “Kv”.
• the encryption technique is the means to exclude illegitimate use of data content, but perfect operation is not guaranteed. Thus, the possibility of illegitimate use of data content cannot be completely excluded.
• electronic watermark technique cannot exclude the possibility of illegitimate use, but if illegitimate use is detected, it is possible to check the illegitimate use by verifying the content of electronic watermark, and there are a number of methods in this technique. These methods are described in Nikkei Electronics, No.683, 1997-2-24, pp.99-124, “‘Digital watermark’ to help stop to use illegal proprietary digital works in the multimedia age”. Also, description is given on this technique by Walter Bender et al., “Introducing data-hiding technology to support digital watermark for protecting copyrights”, IBM System Journal, vol. 35, Nos. 3 & 4, International Business Machines Corporation.
• a data content is handled as an object, and the data content, functioning as an object, is edited in accordance with a edit program. Therefore, the edited data content can be expressed by the original data content and the editing scenario, which describes the edit detail based on an edit program.
• the original data content to be utilized there are, in addition to the one stored in the database, those prepared originally by the data editor.
• the data content prepared by the data editor can also be handled in the same manner as the other data by storing it in the database.
• the user decrypts the encrypted editing scenario by using a crypt key obtained from a key management center, and obtains the original data content from the database in accordance with the editing scenario and reconstitutes the edited data content.
• FIG. 1 is a block diagram of an embodiment of a data management system.
• FIG. 2 illustrates an example of producing new data content using a plurality of data contents as objects.
• FIG. 3 is a block diagram of another embodiment of a data management system.
• FIG. 4 is an outlined block diagram of an embodiment of a data content dealing system.
• FIG. 5 is an outlined block diagram of another embodiment of a data content dealing system.
• FIG. 6 is an outlined block diagram of yet another embodiment of a data content dealing system.
• FIG. 7 is an outlined block diagram of a system dealing in en editing scenario.
• the present invention is a copyright management system for digital data.
• numerous specific details are set forth to provide a more thorough description of the present invention. It will be apparent, however, to one skilled in the art, that the present invention may be practiced without these specific details. In other instances, well known features have not been described in detail so as not to obscure the present invention.
• the edit processing of data content is performed by editing the original copyrighted data using an edit tool, which is an application program.
• the edited data content obtained by editing can be expressed by the utilized original data content, the information of the used edit tool and the editing process data. Specifically, in case the edit tool is available, it is possible to reproduce the edited data content by obtaining the original copyrighted data and the editing process data.
• edited data content can be reproduced as the original data content, edit tool and editing process data content (editing scenario) are specified. In other words, unless the original data content, edit tool and the editing scenario are specified, it is impossible to reproduce the edited data content.
• edited data content ⁇ A′ ⁇ is obtained by altering original data content A
• edited data content ⁇ A+X ⁇ is obtained by adding data content X to the original data content A by a user
• edited data content ⁇ A′′ ⁇ is obtained by dividing the original data content A into original data content elements A 1 , A 2 , A 3 . . . and changing the arrangement of the elements to such as A 3 , A 2 and A 1
• ⁇ is obtained by dividing the original data content A into original data content elements A 1 , A 2 , A 3 , . . . , also dividing the data content X of the user into X 1 , X 2 , X 3 , . . . and arranging these elements.
• edited data content ⁇ A+B+C . . . ⁇ is obtained by simply combining original data contents A, B, C, . . . ; a case in which edited data content such as ⁇ A+X ⁇ is obtained by adding data content X to the original data content A, B, C, . . . ; a case in which edited data content ⁇ A 1 +B 1 +C 1 + . . . +A 2 +B 2 +C 2 + . . . +A 3 +B 3 +C 3 + . . . ⁇ is obtained by dividing the original data content A, B, C, . . .
• combination of a plurality of original data contents, combination of a plurality of original data contents with user data content, division of a plurality of original data contents and change of the arrangements, and combination of divided plurality of original data contents with the user data content arise respectively a secondary copyright, which is necessary to be protected.
• the original copyright of the user of course, exists in the data content X 1 , X 2 , X 3 , . . . added by the user.
• Embodiment 1 The description of Embodiment 1 is given below referring to the drawing.
• FIG. 1 shows a schematic view of a data copyrights management system in which a user edits one original copyrighted data and transfers it to a next user.
• reference numerals 1 , 2 , and 3 represent databases that store text data or binary, audio, and/or picture data constituting computer graphics screens or programs, which is not encrypted; 9 is a communication line such as a public telephone line provided by a communication company or a CATV line provided by a cable television company; 10 is a recording medium such as a flexible disk; 4 is a primary user terminal; 5 is a secondary user terminal; 6 is a tertiary user terminal; and 7 is an n-th user terminal device.
• Reference numeral 8 represents a copyright management center for managing the data copyright.
• the databases 1 , 2 , and 3 , copyright management center 8 , primary user terminal 4 , secondary user terminal 5 , tertiary user terminal 6 , and n-th user terminal 7 are connected to communication line 9 .
• encrypted data content is transmitted via the path shown by a broken line
• requests are transmitted from user terminal 4 , 5 , 6 , or 7 to database 1 , 2 , or 3 and copyright management center 8 via the path shown by a solid line.
• the permit key, copyright management program, and crypt key corresponding to a specific usage are transmitted from database 1 , 2 , or 3 and copyright management center 8 to user terminal 4 , 5 , 6 , or 7 via the path shown by an one-dot chain line.
• the Embodiment 1 employs a first public-key Kb 1 , a first private-key Kv 1 corresponding to the first public-key Kb 1 , a second public-key Kb 2 , and a second private-key Kv 2 corresponding to the second public-key Kb 2 that are prepared by a first user, and a first secret-key Ks 1 and a second secret-key Ks 2 prepared by the database.
• the database then transmits these encrypted data content Cmks 1 and the first and the second secret-keys Cks 1 kb 1 and Ck 2 kb 2 to the first user.
• the data content does not involve the copyright of first user because no modifications have been made to the data content. If, however, first user produces new data content based on the data content obtained or using a means for combining the original data content with other data content, the new data content involves a secondary exploitation right for first user, and first user has the original copyright for this secondary work.
• second user produces new data content based on the data content obtained from first user or combining with other data content
• the new data content involves a secondary exploitation right for the second user, and the second user has the original copyright of this secondary work.
• Databases 1 , 2 , and 3 store text data content or binary, digital audio, or digital picture data content constituting computer graphics screens or programs in unencrypted form. This data content is encrypted and supplied to the user terminal 4 via communication line 8 during a data content read operation in response to a request from first user terminal 4 .
• first user extracts parts M 4 , M 5 and M 6 constituting data content from a plurality of data contents M 1 , M 2 and M 3 obtained from one or more databases, and produces new data content M 7 from these parts M 4 , M 5 and M 6 .
• New data content M 7 involves a secondary copyright associated with the editing of original data content M 1 , M 2 and M 3 as well as the original copyright for original data content M 1 , M 2 and M 3 from which parts M 4 , M 5 and M 6 produce new data content M 7 .
• the original data content M 1 , M 2 and M 3 are encrypted using each of the second secret-keys Ks 21 , Ks 22 , Ks 23 supplied with each of data content M 1 , M 2 and M 3 when used for operations other than display; i.e., store, edit, copy or transmit:
• Cm 1 ks 21 E(M 1 ,Ks 21 )
• Cm 2 ks 22 E(M 2 ,Ks 22 )
• Cm 3 ks 23 E(M 3 ,Ks 23 ).
• the data content parts M 4 , M 5 and M 6 , of original data content are also encrypted using each of the second secret-keys Ks 21 , Ks 22 , Ks 23 supplied with each of the original data content when used for operations other than display:
• Cm 4 ks 21 E(M 4 ,Ks 21 )
• Cm 5 ks 22 E(M 5 ,Ks 22 )
• Cm 6 ks 23 E(M 6 ,Ks 23 ).
• second user Upon receipt of the encrypted original data content parts Cm 4 ks 21 , Cm 5 ks 22 and Cm 6 ks 23 , and the edit program Pe, second user requests second secret-keys Ks 21 , Ks 22 , Ks 23 for decryption of the encrypted original data content parts Cm 4 ks 21 , Cm 5 ks 22 and Cm 6 ks 23 by presenting the edit program Pe with the digital signature, to the copyright management center 8 .
• the digital signature Spe presented to the copyright management center is registered in the center as a valid procedure for authorizing the first user being a secondary copyright owner.
• agent-oriented software a user can synthesize data content with little labor.
• the agent-oriented software unlike the conventional one, is a program having autonomy, flexibility and cooperativeness, which is able to meet a user's request with its characteristics of autonomy, flexibility and cooperativeness in accordance with only a general instruction of the user without specifically giving every operation instruction to the software.
• agent program By incorporating the agent program into a basic system of a data copyright management system so that the database utilization of a user is monitored, and it is arranged that information including data utilization condition and charging is collected at the database or the copyright management center, using metering function placed in user terminal, and thus, it is possible to know the database utilization condition of the user at the database side or the copyright management center side and achieve more accurate copyright management.
• agent program and its data are also necessary to be protected in copyrights, and therefore, are encrypted like original data content.
• the data on copyrights can be handled in the computer programming or processing as “object” integrated of program and data content.
• Embodiment 2 is described referring to FIG. 3 .
• This embodiment uses first secret-key Ks 1 , second secret-key Ks 2 , third secret-key Ks 3 , plaintext original copyright label Lc 0 and plaintext copyright management program Pc.
• the data copyright management system shown in FIG. 3 comprises database 11 , key control center 12 , users 13 , 13 , 13 . . . and the network 14 that connects these entities.
• Database 11 receives data content from information providers(IP) 15 , 15 , 15 . . . . However, in some cases, data content is supplied directly to users 13 from information providers 16 , 16 , 16 . . . via communication line 14 without database 11 intervening.
• the data content used in the invention is the object comprising combined program and data content.
• Data is supplied from information providers 15 , 15 , 15 . . . to database 11 and to primary users 13 .
• data content is supplied from information providers 16 , 16 , 16 . . . via communication line 14 or via information record medium 17 such as CD-ROM or the like directly to primary users 13 without database 11 intervening.
• the solid line, broken line and one-dot chain line in this FIG. 3 show the path for data content and requests for crypt keys, path of encrypted data content and path of crypt keys, respectively.
• Primary users 13 are not merely users but can be information providers 15 or 16 that provide new data content (secondary copyrighted data) by combining or revising a plurality of obtained original data content.
• the original data content provided by each of information providers 15 and 16 has been encrypted to protect the copyright. Therefore, the use of the encrypted original data content obtained by first user 13 needs to be decrypted. All of the crypt keys for the decryption are deposited in key control center 12 to be controlled by the center.
• Each information provider 15 or 16 can adopt freely any cryptosystem. However, the cryptosystem described later and used after secondary utilization of data content is limited to one adopted by key control center 12 .
• Original plaintext copyright label Lc 0 is attached to encrypted original data content Cm 0 ks 1 provided for primary users 13 , and is used for obtaining primary use permit keys, etc.
• encrypted original data content Cm 0 ks 1 includes plaintext original copyright label Lc 0 and encrypted original data content Cm 0 ks 1 .
• the name of application programs in use, outlined explanation, fees and charging method are entered into plaintext original copyright label Lc 0 in addition to general information including the name of original creator, title name and creation date. The number of a crypt key is also entered if necessary. Digital signature by original creator added to plaintext original copyright label Lc 0 prevents false copyright claiming.
• Primary users 13 who require use of encrypted original data content Cm 0 ks 1 make a request to key control center 12 via communication line 14 for distributing primary use permit keys K 1 indicating original copyright label Lc 0 .
• Key control center 12 that has identified secret-key as first secret-key Ks 1 to be distributed, by original copyright label Lc 0 indicated, distributes this identified first secret-key Ks 1 to primary users 13 via network system 14 .
• the devices of primary users 13 Upon receipt of distributed primary use permit key K 1 , the devices of primary users 13 are turned to the copyright management mode, and the primary copyrighted data content becomes available for use to primary users 13 .
• key control center 12 charges as well as grasps the use condition of original data content and of the database used by primary users 13 .
• Primary users 13 who require to edit original copyrighted data content M 0 make a request to key control center 12 for distributing second secret-key Ks 2 via communication line 14 .
• Key control center 12 that receives the request for distributing second secret-key Ks 2 provides primary users 13 via communication line 14 .
• Primary users 13 that have received second secret-key Ks 2 edit original data content M 0 and obtain halfway edited data content M 0 ′.
• primary users 13 prepare third secret-key Ks 3 in order to execute the secondary copyright with reference to the data content edition concerning final editorial data content M 1 , and register third secret-key Ks 3 into key control center 12 .
• the key control center 12 also may prepare third secret-key Ks 3 and distribute it in response to a request from primary users 13 .
• Secondary users 19 who desire to use provided encrypted editorial data content Cm 1 ks 3 request key control center 12 for distributing third secret-key Ks 3 via communication line 14 .
• Key control center 12 that has received the request for distributing third secret-keys Ks 3 from secondary users 19 distributes third secret-key Ks 3 to secondary users 19 via communication line 14 .
• Embodiment 3 in which a user edits one original copyrighted data content and transfers it to a next user, is described as below referring to FIG. 4 .
• This embodiment uses “user label”, “copyright label” and “edit label” in order to protect data content copyrights and execute the copyrights.
• Information of the label owner is described in the user label; information relating copyrighted data content is described in the copyright label; and contains information of the edit tool and editing process data (editing scenario) are described in the edit label, which may be described edit tool (edit program) instead of edit tool information.
• the user label is generated by the data management center according to the information of the user when the user joins the system.
• the copyright label is generated by the data management center when the author of the data content presents the content to the data management center.
• the edit label is generated by the data management center, when the user who has edited the data content presents the user label and the editing scenario to the data management center. These are transferred to each label owner and are stored at the data management center.
• the original author A stores the original secret-key Ks 0 and encrypts the original data content M 0 without depending on the data management center, while the original secret-key Ks 0 must be stored at the data management center to utilize the original data content M 0 by the user (data content user).
• the data management center performs one-way hash to the original copyright label Lc 0 using algorithm such as MD 5, for example, to 16-byte data content amount, prepares an original copyright label fingerprint F 0 , and sends it to the original author A.
• This electronic fingerprint is prepared on each of the original data content and edited data content each time the original data content is edited and edited data content is obtained and is transferred, together with the data content.
• the edited data content Me 1 thus obtained contains copyright of the first user, who edited the data content, and also copyright of the original author who prepared the original data content.
• the copyright of the original author relating to the original data content M 0 can be protected by the original copyright label Lc 0 which has been registered, original copyright label fingerprint F 0 and the original secret-key Ks 0 corresponding to the original copyright label Lc 0 and also by the first user label Lu 1 and the first secret-key Ks 1 corresponding to the first user label Lu 1 .
• the secondary copyright of the first user relating to the edited data content Me 1 is not yet protected.
• the edited data content can be expressed by data content of the utilized original data content, information of the used edit tool and the editing scenario (editing process data content). Accordingly, these informations and editing scenario are entered in the first user label, i.e. the first edit label Le 1 .
• the user U 1 presents the first edit label Le 1 to the data management center so that the secondary exploitation right of the user U 1 is registered.
• Each user may put digital signature which one-way hash value of the user's label is encrypted using user's private-key on the user's label to be presented to the data management center. Then, the data management center decrypts the encrypted one-way hash value using the user's public-key, calculates the one-way hash value of the label and compares the two one-way hash values in order to verify validity of each user's label.
• the data content is encrypted using secret-key
• the secret-key for its decryption and secret-key for re-encryption used for storage, copying and transfer are distributed by the data management center based on the user label presented by the user.
• This network computer does not have data content storage unit and cannot store or copy the data content.
• the editing of data content is performed by modifying the original data content using the edit tool, and data content of the edited data content thus obtained can be expressed by the utilized original data content, information of the used edit tool and the editing scenario.
• the edited data content can be reproduced by specifying the utilized database, the used original data content, information of the used edit tool and the editing scenario. The same applies to the case where a plurality of data content obtained from a single database or a plurality of databases are utilized.
• the original copyright owner and the information provider holding the data content are discriminated from the user who does not hold data content, and are arranged on the network side with the data management center and the like.
• public-key and private-key are used. If original data content is transferred to a user, the original data content is encrypted by using a secret-key or a public-key of transferred destination for the purpose of security.
• the first user U 1 searches the data content and collects necessary data content utilizing the network, broadcasting or recording medium.
• the collected data content is simply stored temporarily on memory of the user U 1 . Even when data content storage unit such as a hard disk drive is included in the device of the user U 1 , the data content is not stored in the data content storage unit.
• inhibition of storage of the data content is performed by destroying the data content on memory, changing data content header on memory, turning the data content to one-way hash value, changing file name to non-storable file name, etc.
• the first user label Lu 1 is referred, and utilizing conditions of the original data content M 0 i and the edit tool Pe are recorded at the data management center and are utilized for charging of a fee.
• the computer of the first user U 1 When the computer of the first user U 1 is provided with a data content storage unit, there is possibility that the collected data content or the edited data content may be stored in the storage unit, however, storage inhibition as described above is carried out to exclude storage, copying and transfer.
• the data management center encrypts the first edited data content M 1 i and the edit tool Pe using the public-key Kb 2 of the second user U 2 :
• Cm 1 ikb 2 E(M 1 i,Kb 2 )
• Cpekb 2 E(Pe,Kb 2 ) and transfers the encrypted first edited data content Cm 1 ikb 2 and the encrypted edit tool Cpekb 2 to the second user U 2 .
• the data content is not stored by the user, but it is stored only in the database.
• the user controls and stores only the information relating to user and editing, i.e. the edit label having information of the utilized original data content and the used edit tool, the editing scenario and the information of the user who has edited. Only this edit label is encrypted and transferred between the users. Therefore, the data content is not stored, copied or transferred.
• the original data content handled in this system is an object, and the edited data content is expressed as the original data content object linked by an editing scenario. Therefore, only the editing scenario is dealt in.
• the user collects and links the original data content used in accordance with the editing scenario and reproduces the edited data content.
• the original data content may be collected or linked by the user himself, but the burden on the user may be reduced if it is performed in the system side or by using an agent program.
• a data content dealing center which serves as a core of the system, comprises a data content database, an editing scenario database, a key management center, and a data content dealing management center present on a network.
• the data content database stores the original data content provided by an information provider (IP) and supplies it in response to the request of the user.
• IP information provider
• the editing scenario database stores the editing scenario when the user obtained the edited data content by utilizing the original data content or user data content created by the user and supplies it in response to the request of the user.
• the key management center stores a secret key for encryption/decryption for the original data content, the user data content and the editing scenario and supplies it in response to the request of the user.
• a data content dealing management center prepares a catalog and advertises for the original data content or the edited data content and performs sales management and collecting a fee to the user, and also manages a copyright label of the data content to be stored in the data content database.
• An editing scenario dealing management center prepares a catalog and advertises for the edited data content and performs sales management and collecting a fee to the user, and further, when necessary, collects and links the original data content according to the editing scenario and manages a label for the editing scenario to be stored in the editing scenario database
• the original secret-key Ks 0 i may be prepared by the information provider IPi, or the information provider IPi may ask the key management center to generate it.
• the key management center generates the original secret-key Ks 0 i
• the information provider or the data content dealing center may add watermark to the original data content M 0 i to check illegitimate use and may store it.
• the data content dealing management center prepares a catalog by means to compress or to divide into parts so that the original data content cannot be utilized as it is and posts it in the data content dealing center.
• the user's data content may be added. Therefore, as the data content to be used for edit in this embodiment, there are, in addition to a single data content, a plurality of original data contents, and user's data content.
• the edited data content comprises these data content and editing scenario, i.e. the details of editing. By obtaining these, it is possible to reproduce the edited data content.
• the original data content is originally stored in the data content database of the data content dealing center. Accordingly, data which is not yet stored in the data content dealing center when newly generated by editing of the data content, is the user's data content and the editing scenario.
• the original data content M 0 i is stored in the data content database of the data content dealing center. Accordingly, what is to be stored newly in the data content dealing center for executing secondary copyright of the first user includes the first editing scenario S 1 i and the first user data content Mu 1 i.
• the first user or the data content dealing center may add watermark to the original data content M 0 i to check illegitimate use and may store it.
• the database where the first secret-key Ks 1 i, the first editing scenario S 1 i and the first user data content Mu 1 i are to be stored may be the data content database where the original data content M 0 i is stored, or another scenario database may be provided to store them.
• the data content dealing management center prepares a catalog by means to compress or to divide into parts so that the first edited data content cannot be utilized as it is and posts it in the data content dealing center.
• the encrypted original data content Cm 0 iks 0 i (shown as “m 0 i” in the figure), the encrypted first editing scenario Cs 1 iks 1 i (shown as “s 1 i” in the figure), the encrypted first user data content Cmu 1 iks 1 i (shown as “mu 1 i” in the figure), the encrypted original secret-key Cks 0 ikb 2 i and the encrypted first secret-key Cks 1 ikb 2 i are transferred to the second user U 2 i. And then, the data content dealing center charges for utilization of the original data content M 0 i and the first editing scenario S 1 i to the second user U 2 i.
• the original data content handled in the present system is an object, and the edited data content is expressed as the original data content object linked by the editing scenario. Therefore, only the editing scenario is dealt in.
• the editing scenario has been purchased or lent, the user collects and links the original data content used in accordance with the editing scenario and reproduces the edited data content.
• the original data content may be collected by the user himself, but the burden on the user may be reduced if it is performed in the system side or by using an agent program.
• a data content dealing center which serves as a core of the system, comprises a key management center, a data content database, a data content dealing management center, an editing scenario database, and an editing scenario market management center present on the network.
• the data content database stores the original data content provided by an information provider (IP) and supplies it to a data content editor.
• IP information provider
• the editing scenario database stores the editing scenario when the data content editor obtains the edited data content by utilizing the original data content or the editor's data content created by the data content editor and supplies it to the editing scenario sellers, who participate in auction.
• the key management center stores a secret-key for encryption/decryption for the original data content, the editor's data content and the editing scenario and supplies it to the data content editor or the editing scenario seller.
• the data content dealing management center prepares a catalog and advertises for the original data content and manages sales for the data content editor.
• the editing scenario market management center prepares a catalog and advertises for the edited data content, and manages editing scenario auction and collects a fee. Further, the editing scenario market management center collects and links the original data content according to the editing scenario, when necessary, and also manages a Ibe 1 for the editing scenario which is to be stored in the editing scenario database.
• the original secret-key Ks 0 i may be prepared by the information provider IPi, or the information provider IPi may ask the key management center to generate it.
• the key management, center generates the original secret-key Ks 0 i
• the information provider or the data content dealing center may add watermark to the original data content M 0 i to check illegitimate use and may store it.
• the data content dealing management center prepares a catalog by means to compress or to divide into parts so that the original data content cannot be utilized as it is and posts it in the data content dealing center.
• the data content of the data content editor may be added. Therefore, as the data content to be used for editing in this embodiment, there are, in addition to a single data content, a plurality of original data contents and the data content of the data content editor.
• the edited data content comprises the data content and the editing scenario, i.e. the detail of editing. By obtaining these, it is possible to reproduce the edited data content.
• the original data content is originally stored in the data content database of the data content dealing center. Accordingly, data which is not yet stored in the data content dealing center when newly generated by editing the data content, is the editor's data content of the data content editor and the editing scenario.
• the data content dealing center it is possible to handle the editor's data content of the data content editor who has edited the data content in the same manner as the original data content, and the data content editor can be an information provider. Further, it is also possible to sell utilization right of the editing scenario and/or the editor's data content by auction in the market. In this case, the utilization right of the editing scenario and the editor's data content may be plural for a single edited data content.
• the original data content M 0 i is stored in the data content database of the data content dealing center. Accordingly, what is to be stored newly in the data content dealing center is the editing scenario S 1 i and the editor's data content Medi.
• the encrypted editing scenario Cseiksei (shown as “sei” in the figure), the encrypted editor's data content Cmeiksei (shown as “mei” in the figure), and the encrypted secret-key Ckseikbc (shown as “ksei” in the figure) are transferred to the data content dealing center.
• the secret-key Ksei may be prepared by the data content editor Ei, or the data content editor Ei may ask the key management center to generate it.
• the key management center generates the secret-key Ksei
• the data content editor or the data content dealing center may add watermark to the editing scenario Sei and the editor's data content Medi to check illegitimate use and may store them.
• the database where the secret-key Ksei, the editing scenario Sei and the editor's data content Medi are to be stored may be the data content database where the original data content M 0 i is stored, or another scenario database may be provided to store them.
• the editing scenario market management center in the data content dealing center prepares a catalog by means to compress or to divide into parts so that the edited data content cannot be utilized as it is and posts it shown number of the selling utilization rights in the editing scenario market management center to announce the auction.
• the utilization right of the editing scenario and the editor's data content may be plural for a single edited data content.
• the content of the copyright label is changed from the one based on the data content editor label Lei to the one based on the editing scenario seller label Ldi.
• the secret-key Ksei of the data content editor cannot be used any more, and the secret-key Ksdi of the editing scenario seller can be used substantially.
• it instead of changing the content of the copyright label, it may be newly added based on the editing scenario seller label Ldi.
• the editing scenario seller who purchases the encrypted editing scenario Cseiksdi executes thereafter the utilization right of the purchased editing scenario.
• the original data content can also be sold by auction in the same manner as the editing scenario. However, it is preferable to avoid to sell to a specific seller because there may be a plurality of users utilizing the original data content.

Landscapes

• Engineering & Computer Science (AREA)
• Computer Security & Cryptography (AREA)
• Signal Processing (AREA)
• Computer Networks & Wireless Communication (AREA)
• Computer Hardware Design (AREA)
• General Engineering & Computer Science (AREA)
• Computing Systems (AREA)
• Multimedia (AREA)
• Software Systems (AREA)
• Theoretical Computer Science (AREA)
• Technology Law (AREA)
• Physics & Mathematics (AREA)
• General Physics & Mathematics (AREA)
• Storage Device Security (AREA)
• Management, Administration, Business Operations System, And Electronic Commerce (AREA)
• Facsimile Transmission Control (AREA)

Abstract

Description

Claims (20)

Priority Applications (1)

Applications Claiming Priority (7)

Related Parent Applications (1)

Publications (1)

Family

ID=17399897

Family Applications (7)

Family Applications Before (6)

Country Status (4)

Families Citing this family (191)

Citations (225)