License management server, license management system and usage restriction method

• US 7,103,663 B2
• Filed: 06/10/2002
• Issued: 09/05/2006
• Est. Priority Date: 06/11/2001
• Status: Active Grant

• Current Assignee: Red Hat, Inc. (International Business Machines Corporation)
• Original Assignee: Matsushita Electric Industrial Company Limited (Panasonic Holdings Corporation)
• Inventors: Okamoto, Ryuichi, Inoue, Mitsuhiro
• Primary Examiner(s): Eng, David Y.
• Application Number:
  US10/164,574
• Publication Number:
  US 20030005135A1
• Time in Patent Office: 1,548 Days
• Field of Search: 709/225, 709/203, 709/219, 709/218
• US Class Current: 709/225
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04M 3/38 Graded-service arrangements, i.e. some subscribers prevented from establishing certain connections queuing arrangements H04Q3/64
• CPC Class Codes: H04N 21/2541 Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/25816 involving client authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/25875 involving end-user authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; arrangements for secret or secure communication including means for verifying the identity or authority of a user of the system H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/4627 Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/4751 for defining user accounts, e.g. accounts for children
• CPC Class Codes: H04N 21/8355 involving usage data, e.g. number of copies or viewings allowed
• CPC Class Codes: H04N 7/165 Centralised control of user terminal subsequent to an upstream request signal H04N7/17345; Registering at central by two-way working H04N7/17309
• CPC Class Codes: H04N 7/17318 Direct or substantially direct transmission and handling of requests

Abstract

A right management server manages usage of a content on a parent terminal and a child terminal. The right management server includes content usage right database that stores right information indicating a usage rule of a content for each terminal ID or user ID, and a parental control information management unit that acquires, from the parent terminal or the parent user, parental control information that is an instruction to put a restriction on usage of a content on the child terminal or by a child user, and stores the parental control information in a parental control information database. The right management server also includes a license ticket generation unit that acquires a license ticket issuance request from the child terminal or the child user, generates a license ticket that is information for permitting usage of the content on the child terminal or by the child user, under a usage rule with a restriction indicated by the parental control information which is held in the parental control information management unit, and sends the license ticket to the child terminal or the child user.

Claims

1. A license management server device for managing content usage on a terminal device, the license management server device comprising:

a license information storage unit operable to store license information indicating a usage rule of a content for each terminal device or user;

a usage restriction information management unit operable to acquire from a first terminal device or a first user an instruction to put a restriction on content usage on a second terminal device or by a second user, and usage restriction information indicating details of the restriction, and hold the usage restriction information; and

a ticket issuance unit operable to acquire an instruction to request the content usage from the second terminal device or the second user, generate a license ticket that is information for permitting the content usage on the second terminal device or by the second user, under a usage rule with the restriction indicated by the usage restriction information which is held in the usage restriction information management unit, and send the license ticket to the second terminal device or the second user.

2. The license management server device according to claim 1,

wherein the ticket issuance unit is operable to generate the license ticket by combining information indicating the usage rule for the requested content usage and information indicating the usage rule with the restriction.

3. The license management server device according to claim 1,

wherein the ticket issuance unit is operable to acquire the instruction to request the content usage from the second terminal device or the second user, and send a first license ticket that is information for permitting the content usage under the usage rule indicated by the license information and a second license ticket indicating the usage rule with the restriction indicated by the usage restriction information, to the second terminal device or the second user.

4. The license management server device according to claim 1,

wherein the usage restriction information indicates details of the restriction which is to be put on the content usage on the second terminal device, and

the ticket issuance unit is operable to acquire the instruction to request the content usage from the second terminal device, generate the license ticket for permitting the content usage for any content on the second terminal device, under the usage rule with the restriction indicated by the usage restriction information, and send the license ticket to the second terminal device.

5. The license management server device according to claim 1,

wherein the usage restriction information indicates details of the restriction which is to be put on the content usage by the second user, and

the ticket issuance unit is operable to acquire the instruction to request the content usage from the second user, generate the license ticket for permitting the content usage by the second user, under the usage rule with the restriction indicated by the usage restriction information, and send the license ticket to the second user.

6. The license management server device according to claim 1,

wherein the usage restriction information indicates details of the restriction which is to be put on the content usage on the second terminal device depending upon a content to be used, and

the ticket issuance unit is operable to acquire the instruction to request the content usage from the second terminal device, generate the license ticket for permitting the usage of the requested content on the second terminal device, under the usage rule with the restriction indicated by the usage restriction information, and send the license ticket to the second terminal device.

7. The license management server device according to claim 1,

wherein the usage restriction information indicates details of the restriction which is to be put on the content usage by the second user depending upon a content to be used, and

the ticket issuance unit is operable to acquire the instruction to request the content usage from the second user, generate the license ticket for permitting the usage of the requested content by the second user, under the usage rule with the restriction indicated by the usage restriction information, and send the license ticket to the second user.

8. The license management server device according to claim 7,

wherein the ticket issuance unit is operable to acquire the instruction to request the content usage from the second terminal device or the second user, and does not accept the instruction when the restriction indicated by the usage restriction information is not put on the content.

9. The license management server device according to claim 6,

wherein the ticket issuance unit is operable to acquire the instruction to request the content usage from the second terminal device or the second user, and does not accept the instruction when the restriction indicated by the usage restriction information is not put on the content.

10. The license management server device according to claim 1, further comprising a stop unit operable to acquire an instruction to stop the usage on the second terminal device or by the second user from the first terminal device or the first user, and send a usage stop signal for stopping the usage on the second terminal device or by the second user immediately to the second terminal device or the second user.

11. The license management server device according to claim 1, further comprising a personal information storage unit operable to store personal information about the first user and the second user,

wherein the usage restriction information management unit is operable to hold the usage restriction information acquired from the first user for the second terminal device or the second user when there is a predetermined relationship between the first user and the second user based on the personal information.

12. The license management server device according to claim 11,

wherein the ticket issuance unit is operable to not send the license ticket to the second terminal device or the second user when the usage restriction information for the second terminal device or the second user is not held in the usage restriction information management unit.

13. The license management server device according to claim 11,

wherein the personal information storage unit includes:

a payment information management unit operable to manage payment information that specifies a payment method of each user of the first terminal device or the first user, and of the second terminal device or the second user, for purchasing a license from the license management server device; and

an identification information management unit operable to accept registration of identification information for specifying that one terminal device or one user among terminals or users having payment information identical to the payment information managed in the payment information management unit is the first terminal device or the first user, and

the usage restriction information management unit is operable to register the second terminal device or the second user in response to a request from the first terminal device or the first user having the registered identification information, and hold the usage restriction information for the registered second terminal device or second user.

14. The license management server device according to claim 1,

wherein the first terminal device and the second terminal device are identical terminal devices.

15. The license management server device according to claim 14, further comprising:

a terminal device management unit operable to accept a registration request of the terminal device used by the first user from the first user, and register the terminal device; and

a second user registration unit operable to accept a registration request of the second user for the terminal device from the first user registered for the terminal device, and register the second user in the terminal device management unit for the identical terminal device for the first user,

wherein the ticket issuance unit is operable to acquire the instruction to request the content usage by the second user from the terminal device, generate the license ticket that is information for permitting the content usage by the second user on the terminal device, under the usage rule with the restriction indicated by the usage restriction information which is held in the usage restriction information management unit, and send the license ticket to the second user.

16. The license management server device according to claim 15,

wherein the usage restriction information management unit is operable to acquire from the first user the usage restriction information specifying a usage expiration date of the terminal device by the second user, and hold the usage restriction information, and

the license management server device is operable to not accept the instruction by the second user from the terminal device when the usage expiration date specified by the usage restriction information has passed.

17. The license management server device according to claim 16,

wherein the usage restriction information management unit is operable to delete the registration of the second user for the terminal device from the terminal device management unit when the usage expiration date specified by the usage restriction information has passed, and

the license management server device is operable to not accept the instruction from the terminal device by the second user who is not registered in the terminal device management unit.

18. The license management server device according to claim 17, further comprising:

an authentication information management unit operable to accept registration request of authentication information for identifying and authenticating the first user or the second user from the first user or the second user himself;

a terminal registration decision unit operable to acquire the authentication information of the first user or the second user from the terminal device, and decide whether or not the first user or the second user identified with the authentication information is registered for the terminal device; and

a usage restriction unit operable not to accept the instruction from the terminal device when the first user or the second user is not registered as a result of the decision by the terminal registration decision unit.

19. The license management server device according to claim 15,

wherein the usage restriction information management unit is operable to acquire from the first user an instruction to limit a range of a request that the second user can give the license management server device using the terminal device and usage restriction information indicating the limited range, and hold the instruction and the usage restriction information, and

the license management server device is operable to not accept the instruction made by the second user beyond the range indicated by the usage restriction information from the terminal device.

20. The license management server device according to claim 1, further comprising:

a history storage unit operable to store a usage history of a content on the second terminal device or by the second user; and

a usage amount decision unit operable to decide whether or not a past usage amount of the content on the second terminal device or by the second user exceeds a predetermined reference amount,

wherein the ticket issuance unit is operable to acquire, from the second terminal device or the second user whose usage amount is decided to exceed the reference amount by the usage amount decision unit, an instruction to request the content usage that exceeds the range of the usage rule indicated by the license information, and send a license ticket that exceeds the usage rule indicated by the license information by a predetermined amount within the range of restriction indicated by the usage restriction information, to the second terminal device or the second user.

21. A license management system comprising a license management server device for managing content usage on a terminal device and a plurality of terminal devices that request content usage to the license management server device,

wherein the license management server device includes:

a license information storage unit operable to store license information indicating a usage rule of a content for each terminal device or a user;

a usage restriction information management unit operable to acquire an instruction to put a restriction on content usage on a second terminal device or by a second user and usage restriction information indicating details of the restriction, from a first terminal device or a first user, and hold the usage restriction information; and

a ticket issuance unit operable to acquire an instruction to request the content usage from the second terminal device or the second user, generate a license ticket that is information for permitting the content usage on the second terminal device or by the second user, under a usage rule with the restriction indicated by the usage restriction information which is held in the usage restriction information management unit, and send the license ticket to the second terminal device or the second user,

the first terminal device includes a usage restriction information sending unit operable to send the usage restriction information that is the instruction of the first user to put a restriction on the content usage on the second terminal device or by the second user to the license management server device, and

the second terminal device includes;

an issuance request unit operable to request the license management server device to issue the license ticket based on a request from the second user;

an acquisition unit operable to acquire the license ticket for permitting the requested content usage under the usage rule with the restriction, from the license management server device; and

a usage unit operable to use the content according to the acquired license ticket.

22. The license management system according to claim 21,

wherein in the license management server device, the ticket issuance unit is operable to generate a license ticket including the information indicating the usage rule and the information indicating the restriction, and

in the second terminal device, the usage unit is operable to find a logical product of the usage rule described in an item indicating the usage rule and the usage rule with the restriction described in a corresponding predetermined item in the acquired license ticket, and use the content according to a usage rule that is the logical product.

23. The license management system according to claim 21,

wherein in the license management server device, the ticket issuance unit is operable to acquire from the second terminal device or the second user an instruction to request the content usage on the second terminal device or by the second user, and send a first license ticket that is information for permitting the content usage under the usage rule indicated by the license information and a second license ticket indicating the usage rule with the restriction indicated by the usage restriction information, to the second terminal device or the second user,

in the second terminal device, the acquisition unit is operable to acquire the first license ticket and the second license ticket from the license management server device, and

the usage unit is operable to find a logical product of the usage rule of the first license ticket and the corresponding usage rule of the second license ticket with the restriction, and use the content according to a usage rule that is the logical product.

24. The license management system according to claim 21,

wherein in the license management server device, the usage restriction information is operable to indicate details of the restriction which is to be put on the content usage on the second terminal device, and

the ticket issuance unit is operable to acquire the instruction to request the content usage from the second terminal device, generate the license ticket for permitting the content usage for any content on the second terminal, under the usage rule with the restriction indicated by the usage restriction information, and send the license ticket to the second terminal.

25. The license management system according to claim 21,

wherein in the license management server device, the usage restriction information is operable to indicate details of the restriction which is to be put on the content usage by the second user, and

the ticket issuance unit is operable to acquire the instruction to request the content usage from the second user, generate the license ticket for permitting the content usage for any content by the second user, under the usage rule with the restriction indicated by the usage restriction information, and send the license ticket to the second user.

26. The license management system according to claim 21,

wherein in the license management server device, the usage restriction information is operable to indicate details of the restriction which is to be put on the content usage on the second terminal device depending upon a content to be used, and

the ticket issuance unit is operable to acquire the instruction to request the content usage from the second terminal device, generate the license ticket for permitting the usage of the requested content on the second terminal device, under the usage rule with the restriction indicated by the usage restriction information, and send the license ticket to the second terminal device.

27. The license management system according to claim 21,

wherein in the license management server device, the usage restriction information is operable to indicate details of the restriction which is to be put on the content usage by the second user depending upon a content to be used, and

the ticket issuance unit is operable to acquire the instruction to request the content usage from the second user, generate the license ticket for permitting the usage of the requested content by the second user, under the usage rule with the restriction indicated by the usage restriction information, and send the license ticket to the second user.

28. The license management system according to claim 21,

wherein the license management server device further includes a stop unit operable to acquire an instruction to stop the usage on the second terminal device or by the second user from the first terminal device or the first user, and send a usage stop signal for stopping the usage on the second terminal device or by the second user immediately to the second terminal device or the second user, and

the second terminal device further includes a usage stop unit operable to receive the usage stop signal from the license management server device and stop an operation of the usage unit.

29. The license management system according to claim 21,

wherein the license management server device further includes:

a payment information management unit operable to manage payment information that specifies a payment method of each user of the first terminal device or the first user, and the second terminal device or the second user, for purchasing a license from the license management server device; and

an identification information management unit operable to accept registration of identification information for specifying that one terminal device or one user among terminals or users having the identical payment information registered is the first terminal device or the first user, and

the usage restriction information management unit is operable to register the second terminal device or the second user in response to a request from the first terminal device or the first user having the registered identification information, and hold the usage restriction information for the registered second terminal device or second user.

30. The license management system according to claim 21,

wherein the first terminal device and the second terminal device are identical terminal devices.

31. The license management system according to claim 30,

wherein the license management server device further includes:

a terminal device management unit operable to accept registration request of the terminal device used by the first user from the first user, and register the terminal device; and

a second user registration unit operable to accept registration request of the second user for the terminal device from the first user registered for the identical terminal device, and register the second user in the terminal device management unit for the identical terminal device for the first user, and

the usage restriction information management unit is operable to acquire from the terminal device or the first user an instruction to put a restriction on content usage by the second user using the terminal device and usage restriction information indicating details of the restriction, and hold the usage restriction information,

the ticket issuance unit is operable to acquire the instruction to request the content usage by the second user from the terminal device, generate a license ticket that is information for permitting the content usage by the second user on the terminal device, under a usage rule with the restriction indicated by the usage restriction information which is held in the usage restriction information management unit, and send the license ticket to the second user,

the terminal device further includes a registration request unit operable to request the license management server device to register the second user for the terminal device by the first user registered for the terminal device,

the usage restriction information sending unit is operable to send the usage restriction information that is the instruction from the first user to put a restriction on the content usage by the second user using the terminal device, to the license management server device,

the issuance request unit is operable to request the license management server device to issue the license ticket based on a request from the second user,

the acquisition unit is operable to acquire the license ticket for permitting the requested content usage under the usage rule with the restriction, from the license management server device, and

the usage unit is operable to use the content according to the acquired license ticket.

32. The license management system according to claim 31,

wherein in the license management server device, the usage restriction information management unit is operable to acquire from the first user the usage restriction information specifying a usage expiration date of the terminal device by the second user, and delete the registration of the second user for the terminal device when the usage expiration date specified by the usage restriction information has passed, and

the license management server device is operable to not accept the instruction by the second user who is not registered in the terminal device management unit from the terminal device.

33. The license management system according to claim 32,

wherein the license management server device further includes:

an authentication information management unit operable to accept registration of authentication information for identifying and authenticating the first user or the second user from the first user or the second user himself;

a terminal registration decision unit operable to acquire the authentication information of the first user or the second user from the terminal device, and decide whether or not the first user or the second user identified with the authentication information is registered for the terminal device; and

a usage restriction unit operable to not accept the instruction from the terminal device when the first user or the second user is not registered as a result of the decision by the terminal registration decision unit.

34. A usage restriction control method for a license management server device that manages content usage on a terminal device,

wherein the license management server device includes a license information storage unit operable to store license information indicating a usage rule of a content for each terminal device or user, and

the usage restriction control method includes:

a usage restriction setting operation for acquiring from a first terminal device or a first user an instruction to put a restriction on content usage on a second terminal or by a second user, and usage restriction information indicating details of the restriction, and holding the usage restriction information in the usage restriction information management unit; and

a ticket issuing operation for acquiring an instruction to request the content usage from the second terminal device or the second user, generating a license ticket that is information for permitting the content usage on the second terminal device or by the second user, under a usage rule with the restriction indicated by the usage restriction information which is held in the usage restriction information management unit, and sending the license ticket to the second terminal device or the second user.

35. The usage restriction control method according to claim 34,

wherein the license management server device further includes a terminal device management unit operable to accept registration of the terminal device used by the first user from the first user and hold the terminal device,

the usage restriction control method further includes a second user registering operation for accepting registration of the second user for the terminal device from the first user registered for the identical terminal device, and registering the second user in the terminal device management unit for the identical terminal device for the first user, and

in the ticket issuance operation, an instruction to request the content usage by the second user is acquired from the terminal device, the license ticket that is information for permitting the content usage on the terminal device is generated under the usage rule with the restriction indicated by the usage restriction information which is held in the usage restriction information management unit, and the license ticket is sent to the second user.

36. A program embodied on a computer readable storage medium for controlling a usage restriction in a license management server device that manages content usage in a terminal,

the program causing a computer to execute:

a usage restriction setting operation for acquiring from a first terminal device or a first user an instruction to put a restriction on content usage by a second user, and usage restriction information indicating details of the restriction, and holding the usage restriction information in the usage restriction information management unit;

a ticket issuing operation for acquiring an instruction to request the content usage from the second terminal device or the second user, generating a license ticket that is information for permitting the content usage on the second terminal device or by the second user, under a usage rule with the restriction indicated by the usage restriction information which is held in the usage restriction information management unit, and sending the license ticket to the second terminal device or the second user; and

a second user registering operation for accepting registration of the second user for the terminal device from the first user registered for the identical terminal device, and registering the second user in the terminal device management unit for the identical terminal device for the first user.

37. A usage restriction control method for a terminal device that requests a license management server device for content usage that manages content usage, the usage restriction control method comprising:

a usage restriction requesting operation for sending usage restriction information that is information for restricting content usage on a specified terminal device or by a specified user to the license management server device;

a ticket requesting operation for requesting the license management server device to issue a license ticket that is information for permitting content usage under a predetermined usage rule based on a usage restriction request from the specified terminal device or the specified user;

a ticket acquiring operation for acquiring from the license management server device a license ticket for permitting content usage under a usage rule with a restriction based on the usage restriction information; and

a using operation for using the content based on the acquired license ticket.

38. A program embodied on a computer readable storage medium for controlling a usage restriction on a terminal device that requests content usage from a license management server device that manages content usage,

the program causing a computer to execute:

a usage restriction requesting operation for sending usage restriction information that is information for restricting content usage on a specified terminal device or by a specified user to the license management server device;

a ticket requesting operation for requesting the license management server device to issue a license ticket that is information for permitting content usage under a predetermined usage rule based on a usage restriction request from the specified terminal device or the specified user;

a ticket acquiring operation for acquiring from the license management server device a license ticket for permitting content usage under a usage rule with a restriction based on the usage restriction information; and

a using operation for using the content based on the acquired license ticket.