Rights management unit

• US 20020184515A1
• Filed: 05/29/2002
• Published: 12/05/2002
• Est. Priority Date: 05/29/2001
• Status: Abandoned Application

• Current Assignee: Matsushita Electric Industrial Company Limited (Panasonic Holdings Corporation)
• Original Assignee: Matsushita Electric Industrial Company Limited (Panasonic Holdings Corporation)
• Inventors: Yamamoto, Masaya, Uesaka, Yasushi, Tokuda, Katsumi, Okamoto, Ryuichi, Inoue, Mitsuhiro, Oho, Masahiro
• Application Number:
  US10/156,050
• Publication Number:
  US 20020184515A1
• Time in Patent Office: Days
• US Class Current: 713/193
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/105 Arrangements for software license management or administration, e.g. for managing licenses at corporate level
• CPC Class Codes: G06Q 10/10 Office automation; Time management

Abstract

A device 201 of a licensee γ generates an issue request for a permission to use content data by using a media identifier in a portable recording medium 101 of a licensee β, and forwards the resulting issue request to a rights management unit 71. The rights management unit 71 is managing rights information of the content data provided to the licensee β, and based on the rights information together with the issue request, generates permission information to allow the portable recording medium 101 to use the content data. Based on the permission information, the rights management unit 71 then generates license information with which the use of the content data in the device connected to the portable recording medium 101 is controlled, and transmits the license information to the device 201. The device 201 then processes the license information to control the use of the content data. In such a manner, provided is a license information management system with which the licensee β can use the content data with his or her own rights information on the device belonging to the licensee γ.

Claims

1. A unit for managing rights information representing a right for a plurality of devices to use content data, the unit comprising:

a rights database (hereinafter, rights DB) including the rights information each assigned to the plurality of devices;

a rights management section operable to generate, in response to an issue request from any one of the plurality of devices, permission information which represents a permission for the device to use the content data, by using the rights information corresponding to the device in the rights DB;

a license information generation section operable to generate license information which at least includes the permission information generated by the rights management section; and

a communications section operable to transmit the license information generated by the license information generation section to the device from which the issue request is forwarded.

2. The rights management unit according to claim 1, wherein

the issue request forwarded from any one of the plurality of devices at least includes a usage rule of the content data, and

the rights management section at least registers in the rights DB, in response to the issue request from the device, the rights information corresponding to the device from which the issue request is forwarded.

3. The rights management unit according to claim 2, wherein

the plurality of devices are in a predetermined group, and

the rights management section registers in the rights DB the rights information shared by the plurality of devices in the group in response to a setting request forwarded from any one of the plurality of devices.

4. The rights management unit according to claim 2, further comprising a content database (hereinafter, content DB) operable to store distributing content data, wherein

the setting request forwarded from the device identifies acquiring content data,

the rights management unit further comprises:

a content management section operable to read the acquiring content data from the content DB in response to the setting request forwarded from the device;

a content encryption section operable to encrypt the content data read by the content management section; and

a transmission data generation section operable to generate transmission data including the content data encrypted by the content encryption section, and

the communications section further transmits the data generated by the transmission data generation section to the device from which the setting request is forwarded.

5. The rights management unit according to claim 1, further comprising a decryption key database (hereinafter, decryption key DB) including a decryption key for decrypting the content data encrypted by the content encryption section, wherein

the license information generation section generates the license information further including the decryption key in the decryption key DB.

6. The rights management unit according to claim 5, further comprising a decryption key encryption section operable to encrypt the decryption key in the decryption key DB using information relating to the device from which the issue request is forwarded, wherein

the license information generation section generates the license information further including the decryption key encrypted by the decryption key encryption section.

7. The rights management unit according to claim 1, wherein the license information generation section comprises:

a hash value generation section operable to generate, based on the permission information generated by the rights management section, a hash value which is a measure against tampering of the license information; and

a license information assembly section operable to assemble the license information by adding the hash value generated by the hash value generation section to the permission information generated by the rights management section.

8. The rights management unit according to claim 1, wherein

the rights management section generates rejection information when unable to generate the permission information with respect to the device from which the issue request is forwarded, and

the communications section further transmits the rejection information generated by the rights management section to the device from which the issue request is forwarded.

9. The rights management unit according to claim 1, further comprising:

a user information database (hereinafter, user information DB) including device identifiers which uniquely identify the plurality of devices, respectively, in a predetermined group; and

a user information management section operable to register in the user information DB, in response to a registration request from a device whose device identifier is not yet registered in the user information DB, the device identifier included in the received registration request.

10. The rights management unit according to claim 9, wherein

when the number of the device identifiers registered in the group is a predetermined maximum value or larger, the user information management section responds to the registration request, and generates a registration rejection notice to reject registration into the user information DB, and

the communications section further transmits the registration rejection notice generated by the user information management section to the device from which the registration request is forwarded.

11. The rights management unit according to claim 1, further comprising a user information database (hereinafter, user information DB) including device identifiers which uniquely identify the plurality of devices, respectively, in a predetermined group, wherein

any one of the plurality of devices registered in the user information DB transmits a provisional registration request in which the device identifier of its own is at least included as a registering identifier,

the rights management unit further comprises a user information management section operable to provisionally register the registering identifier included in the received provisional registration request into the user information DB, wherein

a device which is not yet registered in the user information DB transmits an actual registration request which at least includes the registering identifier, and a registered identifier as the device identifier of the device from which the provisional registration request is forwarded, and

the user information management section actually registers, based on the registering identifier and the registered identifier included in the received actual registration request, the registering identifier which is provisionally registered in the user information DB.

12. The rights management unit according to claim 1, further comprising a user information database (hereinafter, user information DB) including device identifiers which uniquely identify the plurality of devices, respectively, in a predetermined group, wherein

any one of the plurality of devices which is not yet registered in the user information DB includes the device identifier of its own as a registering identifier, and also transmits a password request including the registered device identifier,

the rights management unit further comprises a user information management section in which the registering identifier included in the received password request is provisionally registered in the user information DB, and a password is issued for the device which is not yet registered,

the device which is not yet registered in the user information DB transmits a registration request including the registering identifier, and the password issued by the user information management section, and

the user information management section actually registers the registering identifier which is provisionally registered in the user information DB based on the password and the registering identifier included in the received registration request.

13. The rights management unit according to claim 1, further comprising a user information database (hereinafter, user information DB) including device identifiers which uniquely identify the plurality of devices, respectively, in a predetermined group, wherein

any one of the plurality of devices which is not yet registered in the user information DB transmits a first registration request which at least includes the device identifier of its own as a registering identifier to the device which is registered in the user information DB,

the device which is registered in the user information DB includes the device identifier of its own as a registered identifier, and also transmits a second registration request including the registering identifier included in the received first registration request, and

the rights management unit further comprises a user information management section operable to register the registering identifier included in the received second registration request in the user information DB.

14. The rights management unit according to claim 1, wherein

the rights DB includes the rights information, and the device identifier of the device which is permitted to exercise the rights information, and

the rights management unit further comprises:

a user information database (hereinafter, user information DB) including device identifiers which uniquely identify the plurality of devices, respectively, in a predetermined group; and

in response to a deletion request from any one of the plurality of devices, a device identifier deletion section operable to delete the corresponding device identifier from the user information DB and the rights DB.

15. The rights management unit according to claim 2, wherein

the plurality of devices are in a predetermined group, and

the rights management section

registers, in response to the setting request from a first device in the group, rights information of the first device to the rights DB, and

registers, in response to the setting request from a second device in the group, the second device in the rights DB in a manner to make the rights information of the first device sharable.

17. The device according to claim 16, wherein the rights management unit includes a rights management section operable to generate permission information, of a minimum level, to make the content data available for the device.

18. The device according to claim 17, wherein

the rights management unit includes:

a first hash value generation section operable to generate a first hash value based on the permission information generated by the rights management section to generate the license information; and

a license information assembly section operable to assemble the license information by adding the first hash value received from the first hash value generation section to the permission information received from the rights management section.

19. The device according to claim 18, wherein

the license information processing section includes:

a second hash value generation section operable to generate a second hash value based on the permission information included in the received license information; and

a tampering determination section operable to determine whether or not the permission information included in the license information received from the first communications section based on the first hash value in the license information and the second hash value received from the second hash value generation section is tampered.

20. The device according to claim 18, wherein

the content data is encrypted by the device using a predetermined encryption key before distribution,

the license information assembly section extracts the media identifier from the issue request received from the rights management section,

the rights management unit further includes:

a decryption key management section operable to manage a decryption key which can decrypt the content data encrypted by the encryption key; and

a decryption key encryption section operable to encrypt the decryption key managed by the decryption key management section using the media identifier extracted by the license information assembly section, and

the license information assembly section also adds the encrypted decryption key received from the decryption key decryption section to the permission information received from the rights management section to assemble the license information.

21. The device according to claim 20, wherein

the license information processing section further includes a decryption key decryption section operable to decrypt the encrypted decryption key included in the license information received from the first communications section.

22. The device according to claim 16, further comprising a device identifier storing section operable to store the device identifier assigned thereto, wherein

the identifier extraction section determines, depending on a user'"'"'s operation, whether to extract the media identifier from the portable recording medium connected to the interface, or to extract the device identifier from the device identifier storing section.

16. A device which receives license information from a rights management unit connected thereto over a transmission path, the device comprising:

an interface operable to connect a portable recording medium for data communications, which stores a media identifier for unique identification;

an identifier extraction section operable to extract the media identifier from the portable recording medium connected to the interface;

an issue request generation section operable to generate, using the media identifier received from the identifier extraction section, an issue request needed to receive a permission to use content data; and

a first communications section operable to transmit the issue request received from the issue request generation section to the rights management unit over the transmission path,

the rights management unit

managing rights information of the content data provided to the portable recording medium, and

in response to the issue request provided from the device, generating and transmitting the license information to control the use of the content data in the device to which the portable recording medium is connected, and

the device further comprising a license information processing section operable to process the license information from the rights management unit, and control the use of the content data.