CONTENT TRANSACTION MANAGEMENT SERVER DEVICE, CONTENT-PROVIDING SERVER DEVICE, AND TERMINAL DEVICE AND CONTROL PROGRAM

• US 20110004555A1
• Filed: 02/07/2008
• Published: 01/06/2011
• Est. Priority Date: 02/08/2007
• Status: Active Grant

• Current Assignee: NTT Docomo Incorporated (Nippon Telegraph and Telephone Corporation)
• Original Assignee: NTT Docomo Incorporated (Nippon Telegraph and Telephone Corporation)
• Inventors: Kushida, Yusuke, Onda, Yasushi, Kano, Izua, Yamada, Eiju, Yamada, Kazuhiro, Murakami, Keiichi, Kamiya, Dai
• Granted Patent: US 8,626,842 B2
• Time in Patent Office: Days
• US Class Current: 705/59
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 2221/2135 Metering
• CPC Class Codes: G06Q 20/123 Shopping for digital content
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 67/06 specially adapted for file transfer, e.g. file transfer protocol [FTP]

Abstract

A content transaction management server device includes: a memory storing decryption keys used in decryption of encrypted content data; a communication unit for information; a payment-request reception unit receiving, through the communication unit, a first storage address indicating a storage area where the decryption keys of encrypted content data in the memory are stored and user identifiers identifying users who are purchasers of the encrypted content data; a payment-procedure processing unit implementing payment-procedure processes related to purchase transactions of encrypted content data by a user identified by user identifiers in the payment request; and a decryption-key transmission unit that, after payment-procedure processing based on the payment-procedure processing unit is completed, reads out, from the memory, decryption keys stored in the storage area indicated by the first storage address included in the payment request and transmits, through the communication unit, the decryption keys to the transmission source of the payment request.

Claims

1-7. -7. (canceled)

8. A content transaction management server device comprising:

storage means for storing a decryption key used for decryption of encrypted content data;

communication means for communicating information;

payment-request reception means for receiving a payment request through the communication means, the payment request including a first storage address and a user identifier, the first storage address indicating a storage area in the storage means in which the decryption key is stored, the user identifier identifying a user, who is a purchaser of the encrypted content data;

payment-procedure processing means for performing payment-procedure processes related to a transaction for purchase of the encrypted content data by the user identified by the user identifier included in the payment request; and

decryption-key transmission means for transmitting the decryption key through the communication means to a transmission source of the payment request, after the payment-procedure processing by the payment-procedure processing means is completed, the transmitted decryption key being read out from the storage area in the storage means, the storage area being indicated by the first storage address included in the payment request.

9. The content transaction management server device according to claim 8, further comprising:

content-data reception means for receiving, through the communication means, content data and a second storage address indicating a storage area of an external device;

encryption means for generating encrypted content data by applying a predetermined encryption key to the received content data;

storage control means for controlling the storage means to store a decryption key that is a counterpart of the encryption key used in the encryption by the encryption means; and

file transmission means for transmitting a definitions file and the encrypted content data, through the communication means to a transmission source of the content data and the second storage address, the definitions file including the first storage address indicating the storage area where the decryption keys are stored and the second storage address, the encrypted content data being generated by the encryption means.

10. The content transaction management server device according to claim 8, further comprising:

content-data reception means for receiving, through the communication means, content data including a plurality of data sets, a second storage address indicating a storage area of an external device, and a data-set identifier for identifying one of the data sets included in the content data;

encryption means for generating encrypted content data including an encrypted data set and unencrypted content data, by applying a predetermined encryption key to a data set specified from among the received content data by the data-set identifier;

storage control means for controlling the storage means to store a decryption key that is a counterpart of the encryption key used in the encryption by the encryption means; and

file transmission means for transmitting a definitions file and the encrypted content data through the communication means to a transmission source of the content data and the data-set identifiers, the definitions file including the first storage address, the second storage address and the data-set identifier, the encrypted content data being generated by the encryption means.

11. The content transaction management server device according to claim 8, further comprising:

content-data reception means for receiving, through the communication means, content data including a plurality of data sets and a data-set identifier for specifying a data set included in the content data;

encryption means for generating encrypted content data including an encrypted data set and unencrypted content data, the encrypted data set being encrypted by applying a predetermined encryption key to a data set specified from among the received content data by the data-set identifier;

storage control means for controlling the storage means to store a decryption key that is a counterpart of the encryption key used in the encryption by the encryption means; and

file transmission means for transmitting, through the communication means to a transmission source of the content data and the data-set identifier, a definitions file for data-set acquisition procedures and encrypted content data, the definitions file including the first storage address and the data-set identifier, the encrypted content data being generated by the encryption means.

12. A content-providing server device comprising:

storage means for storing information;

communication means for communicating information;

file reception means for receiving encrypted content data and a definitions file for acquisition procedures, the definitions file including a first storage address and a second storage address, the first storage address indicating a storage area in which a decryption key is stored, the decryption key being a counterpart of an encryption key used for generating the encrypted content data, the second storage address indicating a storage area in the storage means;

storage control means for controlling the storage area to store the encrypted content data in the storage area indicated by the second storage address, and to store the definitions file in another storage area different from the storage area;

file transmission means for transmitting the definitions file, the definitions file being read out from the storage means;

request reception means for receiving, through the communication means, a download request including the second storage address from a transmission source of the definitions file; and

encrypted-content-data transmission means for transmitting, through the communication means to a transmission source of the download request, the encrypted content data read out from the storage area in the storage means indicated by the second storage address included in the received download request.

13. A terminal device comprising:

storage means for storing a user identifier for identifying a user of the terminal device;

communication means for communicating information;

file reception means for receiving, through the communication means, a definitions file for download acquisition procedures including a first storage address and a second storage address, the first storage address indicating a storage area in a first external device in which a decryption key is stored, the decryption key being a counterpart of an encryption key used for encrypting content data, the second storage address indicating a storage area of a second external device in which the encrypted content data is stored, the encrypted content data being encrypted with the encryption key;

payment-request transmission means for transmitting, through the communication means to the first external device, a payment request including the first storage address and a user identifier, is the first storage address being included in the definitions file, the user identifier being read out from the storage means;

download-request transmission means for transmitting, through the communication means to the second external device, a download request including the second storage address, the second storage address being extracted from the definitions file and;

content reception means for receiving, through the communication means, encrypted content data stored in a storage area of the second external device indicated by the second storage address;

decryption-key reception means for receiving, through the communication means, the decryption key stored in the storage area of the first external device indicated by the first storage address; and

decryption means for decrypting content data by applying the received decryption key to the received encrypted content data.

14. A program causing a computer device to execute a process, the computer device including storage means for storing a user identifier for identifying a user of a terminal device and communication means for communicating information, the process comprising:

receiving, through the communication means, a definitions file for download acquisition procedures including a first storage address and a second storage address, the first storage address indicating a storage area in a first external device in which a decryption key is stored, the decryption key being a counterpart of an encryption key used for encrypting content data, the second storage address indicating a storage area of a second external device in which the encrypted content data is stored, the encrypted content data being encrypted with the encryption key;

transmitting, through the communication means to the first external device, a payment request including the first storage address and a user identifier, is the first storage address being included in the definitions file, the user identifier being read out from the storage means;

transmitting, through the communication means to the second external device, a download request including the second storage address, the second storage address being extracted from the definitions file and;

receiving, through the communication means, encrypted content data stored in a storage area of the second external device indicated by the second storage address;

receiving, through the communication means, the decryption key stored in the storage area of the first external device indicated by the first storage address; and

decrypting content data by applying the received decryption key to the received encrypted content data.