Private data protection distribution method and program

• US 20040139315A1
• Filed: 10/06/2003
• Published: 07/15/2004
• Est. Priority Date: 10/09/2002
• Status: Abandoned Application

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: Matsunaga, Hiroshi, Hatakeyama, Takahisa, Tokutani, Takashi
• Application Number:
  US10/679,647
• Publication Number:
  US 20040139315A1
• Time in Patent Office: Days
• US Class Current: 713/156
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

An information entity transmits encrypted private data to a computer of a service provider, which makes a request to use private data, by using a client tool. Additionally, the information entity creates by using the client tool a decryption key for decrypting the private data, and a private data use license which includes information stipulating a use condition of the private data, such as a use purpose, the number of use times, an expiry date, the number of times that a move can be made, and the like, and transmits the decryption key and the license to the computer of the service provider by using a DRM authentication technology. The service provider can use the private data only if its use purpose matches the use condition described in the private data use license created by the information entity.

Claims

1. A private data protection distribution method, comprising:

receiving encrypted private data;

receiving an encrypted private data use license which describes a decryption key for decrypting the private data, and a use condition of the private data;

decrypting the decryption key and the private data use license;

determining whether or not a use purpose of the private data matches the use condition described in the private data use license; and

decrypting the private data by using the decrypted decryption key only if the use purpose of the private data matches the use condition.

2. The private data protection distribution method according to claim 1, wherein

the decryption key and the private data use license are encrypted and decrypted by using a DRM authentication technology.

3. The private data protection distribution method according to claim 2, wherein

a mechanism for decrypting the private data use license by using a DRM authentication technology is implemented as a TRM.

4. The private data protection distribution method according to claim 1, wherein

the use condition of the private data use license includes at least any of an expiry date, a number of available times, a use purpose, and a number of move times of the private data use license.

5. The private data protection distribution method according to claim 4, wherein

the use purpose includes a restriction on an application which uses the private data.

6. The private data protection distribution method according to claim 1, further comprising:

receiving the encrypted private data, and the encrypted private data use license which describes the decryption key for decrypting the private data, and the use condition of the private data from a plurality of information entities;

creating a name list license by concatenating a plurality of private data use licenses which have same conditions; and

creating a name list by concatenating encrypted private data which correspond to the private use licenses used to create the name list license.

7. The private data protection distribution method according to claim 6, wherein

the encrypted private data can be decrypted with a decryption key possessed by an information entity that transmits the private data.

8. The private data protection distribution method according to claim 6, wherein

if the private data is provided to a different information device, at least any one of a name, a type, a use purpose, and an inquiry destination of an organization which manages a different information device to which the private data is provided, and a provided item list of a private data database is created for each information entity, and disclosed to a corresponding information entity depending on need.

9. The private data protection distribution method according to claim 8, further comprising:

receiving corrected contents if a correction is made to at least one of the encrypted private data, and the private data use license which describes the decryption key for decrypting the private data, and the use condition of the private data; and

transmitting the corrected contents to a different information device to secure sameness of the private data and the private data use license.

10. A private data protection distribution program for causing a computer to execute a process, the process comprising:

receiving encrypted private data;

receiving an encrypted private data use license which describes a decryption key for decrypting the private data, and a use condition of the private data;

decrypting the decryption key and the private data use license;

determining whether or not a use purpose of the private data matches the use condition described in the private data use license; and

decrypting the private data by using the decrypted decryption key only if the use purpose of the private data matches the use condition.

11. A private data protection distribution apparatus, comprising:

a unit receiving encrypted private data;

a unit receiving an encrypted private data use license which describes a decryption key for decrypting the private data, and a use condition of the private data;

a unit decrypting the decryption key and the private data use license;

a unit determining whether or not a use purpose of the private data matches the use condition described in the private data use license; and

a unit decrypting the private data by using the decrypted decryption key only if the use purpose of the private data matches the use condition.