Content usage-right management system and management method

• US 7,496,756 B2
• Filed: 08/15/2002
• Issued: 02/24/2009
• Est. Priority Date: 09/11/2001
• Status: Expired due to Fees

• Current Assignee: Sony Corporation (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.)
• Inventors: Oka, Makoto, Shimada, Noboru, Ishibashi, Yoshihito, Abe, Hiroshi, Enari, Masahiko, Yoshino, Kenji
• Primary Examiner(s): Barron, Jr.; Gilberto
• Assistant Examiner(s): ALMEIDA, DEVIN E
• Application Number:
  US10/415,852
• Publication Number:
  US 20040039911A1
• Time in Patent Office: 2,385 Days
• Field of Search: 726/31, 713/175
• US Class Current: 713/175
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions

Abstract

A system in which content usage conditions can be upgraded without the need for a service provider to control content-usage rights of a user. In the system in which encrypted content is distributed and is allowed to be utilized only by authorized users, the service provider receives a content usage-right certificate from the user, and on the condition that it is determined that data is not tampered with by verifying a digital signature of an issuing entity of the content usage-right certificate, the service provider obtains user information and content purchase information of the user from the content usage-right certificate, and performs upgrade processing by, for example, changing the usage conditions. It is thus possible to change the content usage conditions without the need for the service provider to possess usage control data.

Claims

1. A content usage-right management system comprising:

a user device that utilizes content; and

a service provider that distributes to said user device a content usage-right certificate in which content-usage condition information is stored, wherein;

said user device is configured to utilize the content according to the content-usage condition information stored in the content usage-right certificate received from said service provider and to make a request to change the content-usage condition information stored in the content usage-right certificate by sending the content usage-right certificate to said service provider, wherein

said service provider is configured to generate, upon receiving the content usage-right certificate involving the request to change the content-usage condition information from said user device, an upgraded content usage-right certificate by changing the content-usage condition information recorded in the received content usage-right certificate and to send the upgraded content usage-right certificate to said user device,

the content-usage condition information stored in the content usage-right certificate include usage condition information in which one of on-line usage that requires a determination of usage rights in said service provider and off-line usage that does not require a determination of usage rights in said service provider is set, and

said service provider is configured to generate, upon receiving the content usage-right certificate involving the request to change the content-usage condition information from said user device, an upgraded content usage-right certificate by changing the usage-condition information between on-line usage and off-line usage for changing the content-usage condition information recorded in the received content usage-right certificate and to send the upgraded content usage-right certificate to said user device.

2. The content usage-right management system according to claim 1, wherein:

the content usage-right certificate stores therein an encrypted content key encrypted with a content key used for decrypting encrypted content; and

said user device is configured to obtain the content key by decrypting the encrypted content key on the condition that the content is to be utilized according to the content-usage condition information stored in the content usage-right certificate received from said service provider.

3. The content usage-right management system according to claim 1, wherein:

the content usage-right certificate stores therein an encrypted content key encrypted with a content key used for decrypting encrypted content; and

said user device is configured to determine whether the content is to be utilized according to the content-usage condition information stored in the content usage-right certificate received from said service provider and, on the condition that the content is to be utilized according to the content usage conditions, said user device decrypts the encrypted content key stored in the content usage-right certificate based on a key stored in said user device.

4. The content usage-right management system according to claim 1, wherein:

the content usage-right certificate stores therein an encrypted content key encrypted with a content key used for decrypting encrypted content; and

said service provider is configured to receive the content usage-right certificate sent from said user device and to determine whether the content is to be utilized according to the content-usage condition information stored in the received content usage-right certificate and, on the condition that the content is to be utilized according to the content usage conditions, said service provider decrypts the encrypted content key stored in the content usage-right certificate based on a unique key of said service provider.

5. The content usage-right management system according to claim 1, wherein:

the content-usage condition information stored in the content usage-right certificate is one of three modes;

content usage-period restricted information, content usage-number restricted information, and content full-purchase without imposing any usage restriction;

the request to change the content-usage condition information from said user device includes at least one of a change in a content usage-period restriction, a change in a content usage-number restriction, and a change among the three modes;

a usage period restriction, a usage number restriction, and content full-purchase; and

said service provider is configured to generate, upon receiving the content usage-right certificate involving the request to change the content-usage condition information from said user device, the upgraded content usage-right certificate by performing at least one of a change in the content usage-period restriction, a change in the content usage-number restriction, and a change among the three modes;

the usage-period restriction, the usage-number restriction, and the content full-purchase for changing the content-usage condition information recorded in the received content usage-right certificate, and to send the upgraded content usage-right certificate to said user device.

6. The content usage-right management system according to claim 1, wherein:

a digital signature of an entity that has issued the content usage-right certificate is attached to the content usage-right certificate; and

said service provider is configured to generate the upgraded content usage-right certificate upon receiving the content usage-right certificate when it is determined that data is not tampered with by verifying the digital signature.

7. The content usage-right management system according to claim 1, wherein:

the content usage-right certificate stores therein link information concerning a public key certificate corresponding to the content usage-right certificate; and

said service provider is configured to generate the upgraded content usage-right certificate upon receiving the content usage-right certificate on the condition that the integrity of the content usage-right certificate is determined by verifying the public key certificate obtained by the link information.

8. The content usage-right management system according to claim 1, wherein:

the content usage-right certificate is an attribute certificate issued by an attribute certificate authority; and

an encrypted content key encrypted with a content key used for decrypting content is stored in an attribute information field of the attribute certificate.

9. The content usage-right management system according to claim 1, wherein:

the content usage-right certificate is an attribute certificate issued by an attribute certificate authority; and

the content usage conditions are stored in an attribute information field of the attribute certificate.

28. The system of claim 1, wherein if the content is to be used on-line, the content includes at least one of a period restriction and a usage-number restriction.

10. A content usage-right management system comprising:

a user device that utilizes content; and

a service provider that distributes a content usage-right certificate in which purchased content information is stored to said user device, the content usage-right certificate having content-usage condition information including usage condition information in which one of on-line usage that requires a determination of usage rights in said service provider and off-line usage that does not require a determination of usage rights in said service provider is set, wherein;

said user device is configured to send the content usage-right certificate to said service provider, and wherein

said service provider is configured to generate, based on the content information stored in the content usage-right certificate received from said user device, an upgraded content usage-right certificate by changing the usage-condition information between on-line usage and off-line usage, the upgraded content usage-right certificate corresponding to an item of content belonging to an album that comprises of a set of items of content, which belong to the same group of content as the content information stored in the received content usage-right certificate, and to send the upgraded content usage-right certificate to said user device.

11. The content usage-right management system according to claim 10, wherein:

a digital signature of an entity that has issued the content usage-right certificate is attached to the content usage-right certificate; and

said service provider is configured to generate the upgraded content usage-right certificate upon receiving the content usage-right certificate when it is determined that data is not tampered with by verifying the digital signature.

12. The content usage-right management system according to claim 10, wherein:

the content usage-right certificate stores therein link information concerning a public key certificate corresponding to the content usage-right certificate; and

said service provider is configured to generate the upgraded content usage-right certificate upon receiving the content usage-right certificate on the condition that the integrity of the content usage-right certificate is determined by verifying the public key certificate obtained by the link information.

13. A content usage-right management method for use in a system that comprises a user device that utilizes content, and a service provider which distributes a content usage-right certificate in which content-usage condition information is stored to said user device, comprising the steps of:

configuring said user device to make a request to change the content-usage condition information stored in the content usage-right certificate by sending the content usage-right certificate to said service provider; and

configuring said service provider to generate, upon receiving the content usage-right certificate involving the request to change the content-usage condition information from said user device, an upgraded content usage-right certificate by changing the content-usage condition information recorded in the received content usage-right certificate and to send the upgraded content usage-right certificate to said user device;

wherein the content-usage condition information stored in the content usage-right certificate include one of usage condition information in which on-line usage that requires a determination of usage rights in said service provider off-line usage that does not require a determination of usage rights in said service provider is set; and

said service provider generates, upon receiving the content usage-right certificate involving the request to change the content-usage condition information from said user device, an upgraded content usage-right certificate by changing the usage-condition information between on-line usage and off-line usage for changing the content-usage condition information recorded in the received content usage-right certificate, and sends the upgraded content usage-right certificate to said user device.

14. The content usage-right management method according to claim 13, wherein:

the content usage-right certificate stores therein an encrypted content key encrypted with a content key used for decrypting encrypted content; and

said user device is configured to obtain the content key by decrypting the encrypted content key on the condition that the content is to be utilized according to the content-usage usage condition information stored in the content usage-right certificate received from said service provider.

15. The content usage-right management method according to claim 13, wherein:

the content usage-right certificate stores therein an encrypted content key encrypted with a content key used for decrypting encrypted content; and

said user device is configured to determine whether the content is to be utilized according to the content-usage condition information stored in the content usage-right certificate received from said service provider and, on the condition that the content is to be utilized according to the content usage conditions, said user device decrypts the encrypted content key stored in the content usage-right certificate based on a key stored in said user device.

16. The content usage-right management method according to claim 13, wherein:

the content usage-right certificate stores therein an encrypted content key encrypted with a content key used for decrypting encrypted content; and

said service provider receives the content usage-right certificate sent from said user device and determines whether the content is to be utilized according to the content-usage condition information stored in the received content usage-right certificate and, on the condition that the content is to be utilized according to the content usage conditions, said service provider decrypts the encrypted content key stored in the content usage-right certificate based on a unique key of said service provider.

17. The content usage-right management method according to claim 13, wherein:

the content-usage condition information stored in the content usage-right certificate is one of three modes;

content usage-period restricted information, content usage-number restricted information, and content full-purchase without imposing any usage restriction;

the request to change the content-usage condition information from said user device includes at least one of a change in a content usage-period restriction, a change in a content usage-number restriction, and a change among the three modes;

a usage period restriction, a usage number restriction, and content full-purchase; and

said service provider generates, upon receiving the content usage-right certificate involving the request to change the content-usage condition information from said user device, the upgraded content usage-right certificate by performing at least one of a change in the content usage-period restriction, a change in the content usage-number restriction, and a change among the three modes;

the usage-period restriction, the usage-number restriction, and the content full-purchase for changing the content-usage condition information recorded in the received content usage-right certificate, and sends the upgraded content usage-right certificate to said user device.

18. The content usage-right management method according to claim 13, wherein:

a digital signature of an entity that has issued the content usage-right certificate is attached to the content usage-right certificate; and

said service provider generates the upgraded content usage-right certificate upon receiving the content usage-right certificate when it is determined that data is not tampered with by verifying the digital signature.

19. The content usage-right management method according to claim 13, wherein:

the content usage-right certificate stores therein link information concerning a public key certificate corresponding to the content usage-right certificate; and

said service provider generates the upgraded content usage-right certificate upon receiving the content usage-right certificate on the condition that the integrity of the content usage-right certificate is determined by verifying the public key certificate obtained by the link information.

29. The method of claim 13, wherein if the content is to be used off-line, the method further comprises:

determining whether the content has a restricted number of usages;

determining whether the content can be used based on the number of usages remaining; and

if it is determined the content can be used based on the number of usages remaining, updating content-usage-number control data that is controlled in the user device.

20. A content usage-right management method used in a system that comprises a user device that utilizes content, and a service provider that distributes a content usage-right certificate in which purchased content information is stored to said user device, the content usage-right certificate having content-usage condition information including usage condition information in which one of on-line usage that requires a determination of usage rights in said service provider and off-line usage that does not require a determination of usage rights in said service provider is set, the method comprising:

sending the content usage-right certificate from said user device to said service provider; and

causing said service provider to generate, based on the content information stored in the content usage-right certificate received from said user device, an upgraded content usage-right certificate by changing the usage-condition information between on-line usage and off-line usage, the upgraded content usage-right certificate corresponding to an item of content belonging to an album which comprises of a set of items of content, that belong to the same group of content as the content information stored in the received content usage-right right certificate, and to send the upgraded content usage-right certificate to said user device.

21. The content usage-right management method according to claim 20, wherein:

a digital signature of an entity that has issued the content usage-right certificate is attached to the content usage-right certificate; and

said service provider generates the upgraded content usage-right certificate upon receiving the content usage-right certificate when it is determined that data is not tampered with by verifying the digital signature.

22. The content usage-right management method according to claim 20, wherein:

the content usage-right certificate stores therein link information concerning a public key certificate corresponding to the content usage-right certificate; and

said service provider generates the upgraded content usage-right certificate upon receiving the content usage-right certificate on a condition that an integrity of the content usage-right certificate is determined by verifying the public key certificate obtained by the link information.

23. An information processing apparatus for use in a system that comprises a user device that utilizes content, and a service provider that distributes to said user device a content usage-right certificate in which purchased content information is stored, said information processing apparatus issuing the content usage-right certificate, wherein said information processing apparatus is configured to receive a request to change content-usage conditions of the issued content-usage condition information from said user device, verify the received content usage-right certificate, and generate an upgraded content usage-right certificate by changing the content-usage condition information recorded in the received content usage-right certificate on a condition that an integrity of the content usage-right certificate is determined by verifying the received content usage-right certificate and to send the upgraded content usage-right certificate to said user device;

wherein the content-usage conditions stored in the content usage-right certificate include one of usage condition information in which on-line usage that requires a determination of usage rights in said service provider and off-line usage that does not require a determination of usage rights in said service provider is set; and

said information processing apparatus is configured to generate, upon receiving the content usage-right certificate involving the request to change the content-usage condition information from said user device, an upgraded content usage-right certificate by changing the usage-condition information between on-line usage and off-line usage for changing the content-usage condition information recorded in the received content usage-right certificate and to send the upgraded content usage-right certificate to said user device.

24. The information processing apparatus according to claim 23, wherein said information processing apparatus is configured to generate, upon receiving the content usage-right certificate involving the request to change the content-usage condition information from said user device, the upgraded content usage-right certificate by performing at least one of a change in a content usage-period restriction, a change in a content usage-number restriction, and a change among three modes:

the usage-period restriction, the usage-number restriction, and the content full-purchase for changing the content-usage condition information recorded in the received content usage-right certificate, and to send the upgraded content usage-right certificate to said user device.

25. The information processing apparatus according to claim 23, wherein:

a digital signature of an entity that has issued the content usage-right certificate is attached to the content usage-right certificate; and

said information processing apparatus is configured to generate the upgraded content usage-right certificate upon receiving the content usage-right certificate when it is determined that data is not tampered with by verifying the digital signature.

26. The information processing apparatus according to claim 23, wherein:

the content usage-right certificate stores therein link information concerning a public key certificate corresponding to the content usage-right certificate; and

said information processing apparatus is configured to generate the upgraded content usage-right certificate upon receiving the content usage-right certificate on a condition that an integrity of the content usage-right certificate is determined by verifying the public key certificate obtained by the link information.

27. A computer-readable recording medium recorded with a computer program allowing, in a system that comprises a user device that utilizes content, and a service provider that distributes to said user device a content usage-right certificate in which purchased content information is stored, the content usage-right certificate having content-usage condition information including usage condition information in which one of on-line usage that requires a determination of usage rights in said service provider and off-line usage that does not require a determination of usage rights in said service provider is set, processing for issuing a content usage-right certificate to be executed on a computer system, said computer program comprising:

receiving a request to change content-usage conditions of the issued content-usage condition information;

verifying the received content usage-right certificate; and

generating an upgraded content usage-right certificate by changing the content-usage condition information recorded in the received content usage-right certificate between on-line usage and off-line usage on a condition that an integrity of the content usage-right certificate is determined by verifying the received content usage-right certificate and sending the upgraded content usage-right certificate to said user device.