Device and method for restricting content access and storage

• US 7,650,630 B2
• Filed: 12/09/2002
• Issued: 01/19/2010
• Est. Priority Date: 12/25/2001
• Status: Expired due to Fees

• Current Assignee: NTT Docomo Incorporated (Nippon Telegraph and Telephone Corporation)
• Original Assignee: NTT Docomo Incorporated (Nippon Telegraph and Telephone Corporation)
• Inventors: Yamada, Kazuhiro, Eguchi, Hisatoshi, Wakabayashi, Tatsuaki, Miura, Fumiaki
• Primary Examiner(s): Moazzami, Nasser G
• Assistant Examiner(s): Reza, Mohammad W
• Application Number:
  US10/314,520
• Publication Number:
  US 20030135748A1
• Time in Patent Office: 2,598 Days
• Field of Search: 713/193, 713/182, 726/4, 726/27, 455/466
• US Class Current: 726/4
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/123 by using dedicated hardware, e.g. dongles, smart cards, cryptographic processors, global positioning systems [GPS] devices
• CPC Class Codes: H04M 1/675 the user being required to insert a coded card, e.g. a smart card carrying an integrated circuit chip
• CPC Class Codes: H04M 1/72406 by software upgrading or downloading
• CPC Class Codes: H04M 1/72445 for supporting Internet browser applications
• CPC Class Codes: H04M 2250/14 including a card reading device
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

UIMID of a UIM 50 owned by the owner of a portable phone 40 is stored in an owner information registration area 410b of phone 40. A CPU 405 of portable phone 40, upon receiving content, compares a UIMID of a UIM 50 inserted in phone 40 to the UIMID registered in owner information registration area 410b. The storing of the content in a nonvolatile memory 410 is permitted only when the two UIMIDs agree with each other.

Claims

1. A communication device comprising:

a nonvolatile memory storage means;

an IC card interface for communicating with any one or more IC cards, each of said one or more IC cards storing access qualification information used to verify a user requesting access to the communication device;

communication means for receiving content from a mobile packet communication network;

accessing means for accessing the qualification information that is stored on an IC card in communication with the IC card interface at a time of receiving the content;

storing means for storing in said nonvolatile memory storage means the received content from the mobile packet communication network in association with the accessed qualification information accessed from the IC card in communication with the IC card interface at the time of receiving the content;

input means for receiving input identifying received content in the nonvolatile memory storage means for access;

the accessing means for accessing the qualification information that is stored on an IC card in communication with the IC card interface at a time of receiving the input identifying the received content for access;

retrieving means for retrieving, from the nonvolatile memory storage means, the accessed qualification information stored in association with the identified received content;

comparing means for comparing the accessed qualification information from the IC card in communication with the IC card interface at the time of accessing the received content with the retrieved accessed qualification information; and

determination means for determining, based on the comparison, whether to permit access to the stored received content.

2. A communication device according to claim 1,

wherein said one or more IC cards are use identify modules for storing information for enabling said communication device to access the mobile packet communication network.

3. A communication device according to claim 1,

wherein said one or more IC cards are able to be interchangeably inserted in and removed from said communication device.

4. A communication device according to claim 1,

wherein content is provided with access restriction information designating whether access to the content is restricted;

wherein said storing means further stores, in association with the received content, said access restriction information provided with the received content; and

wherein said determination means performs the determination on the basis of said access restriction information and said access qualification information.

5. A communication device according to claim 4,

wherein said determination means does not perform the determination as to whether to permit access to the received content, when it is designated, according to said access restriction information stored in association with the received content, that access to the received content is not restricted.

6. A communication device according to claim 4,

wherein said determination means performs the determination as to whether to permit access to the received content, when it is designated, according to said access restriction information stored in association with the received content, that access to the received content is restricted.

7. A communication device according to claim 4,

wherein said access restriction information is provided by a content provider which provides content to said communication device.

8. A communication device according to claim 1,

wherein said storing means further stores, in a case that content is provided with access restriction information designating whether access to the content is restricted, in association with the received content, said access restriction information provided with the received content;

and

wherein said determination means detects whether access restriction information is stored in association with the requested content, and performs, in a case that a result of the detection shows that access restriction information is not stored in association with the requested content, the determination on the basis of said access qualification information, while performs, in a case that a result of the detection shows that access restriction information is stored in association with the requested content, the determination on the basis of said access restriction information and said access qualification information.

9. A communication device according to claim 1, further comprising:

updating means for updating, in a case that a user replaces a first data storage module with a second data storage module, access qualification information of said first storage module stored, in association with received content, in said nonvolatile memory storage means, to access qualification information of said second data storage module.

10. A communication device according to claim 9, further comprising:

permission means for permitting updating of said access qualification information by said updating means in a case of receiving a signal which permits updating of said access qualification information from a service management device for managing a communication service provided to said communication device.

11. A communication device according to claim 1,

wherein, in a case that a user replaces a first data storage module with a second data storage module, said second data storage module stores access qualification information of said first data storage module in addition to access qualification information of said second data storage module;

and

wherein said determination means compares said access qualification information stored in association with the received content, to access qualification information of each of said first and second IC cards obtained from said any one of said one or more IC cards connecting to said communication device when access to the stored content is requested, and determines that access to the stored content is permitted in a case that said access qualification information stored in association with the received content agrees with access qualification information of at least one of said first or second data storage module.

12. A communication device according to claim 1,

wherein, in a case that a user is an authorized user of one or more of the IC cards, one of said one or more IC cards said user is authorized to use stores access qualification information of at least one of said one or more IC cards said user is authorized to use, in addition to access qualification information of said one of said one or more IC cards;

and

wherein said determination means compares said access qualification information stored in association with the received content, to a plurality of access qualification information corresponding to said one or more IC cards said user is authorized to use, said plurality of access qualification information being obtained from said any one of said one or more IC cards connecting to said communication device when access to the stored content is requested, and determines that access to the stored content is permitted in a case that said access qualification information stored in association with the received content agrees with any of said plurality of access qualification information.

13. A communication device according to claim 1,

wherein said access qualification information comprises identification information for receiving a communication service through said mobile packet communication network.

14. A communication device according to claim 1,

wherein said access qualification information comprises identification information for identifying respective IC cards.

15. A communication device according to claim 1,

wherein said access qualification information comprises authorization information for authenticating a valid user of respective data modules.

16. A communication device according to claim 1,

wherein said access qualification information stored in said each of said one or more IC cards comprises a private/public key pair of a valid user of respective IC cards;

wherein said storing means stores, in association with the received content, a public key specifying said any one of said one or more IC cards connecting to said communication device at the time of receiving the content; and

wherein said determination means determines whether to permit access to the stored content on the basis of said public key stored in said nonvolatile memory in association with the content.

17. A communication device according to claim 1,

wherein each one of said one or more IC cards comprises:

authentication means for authenticating, when each data storage module connects to said communication device, whether a user of said communication device is a valid user of respective IC cards; and

determination means for determining, on the basis of a result of authentication by said authentication means, whether to permit said communication device to access data stored in respective IC cards.

18. A communication device according to claim 1,

wherein said IC card is a recording medium.

19. A communication device according to claim 1,

wherein said determination means determines, from among at least one of content sets stored in said nonvolatile memory storage means, at least one content set corresponding to access qualification information of any one of said one or more IC cards connecting to said communication device at the time of determination, as access-permitted content,

the device further comprising:

presenting means for presenting said access-permitted content to a user of said any one of said one or more IC cards connecting to said communication device at the time of determination.

20. A communication device according to claim 19,

wherein said presenting means displays information with respect to content to which access by said user is permitted.

21. A communication device according to claim 19,

wherein said presenting means displays said access-permitted content and access-prohibited content in different means of presentations.

22. A communication device according to claim 19,

wherein content is provided with access restriction information designating whether to restrict access to said content;

wherein said storing means further stores, in association with the received content, access restriction information provided with the received content; and

wherein said presentation means further presents as access-permitted content, from among at least one of content sets stored in said nonvolatile memory storage means, those content sets to which access is permitted according to said access restriction information stored in association with the received content.

23. A communication device according to claim 19,

wherein, in a case that a user replaces a first data storage module with a second data storage module, said second data storage module stores access qualification information of said first data storage module in addition to access qualification information of said second data storage module;

wherein said determination means determines, from among at least one of content sets stored in said nonvolatile memory storage means by said storing means, at least one content set corresponding to access qualification information of either one of said first or second data storage module obtained from any one of said one or more IC cards connecting to said communication device at the time of determination, as access-permitted content; and

wherein said presenting means presents, to said user, said at least one content set determined as access-permitted content by said determination means.

24. A communication device according to claim 19,

wherein, in a case that a user is authorized to use one or more of the IC cards, one of said one or more IC cards said user is authorized to use stores access qualification information of at least one other of said one or more IC cards said user is authorized to use in addition to access qualification information of said one of said one or more IC cards said user is authorized to use;

wherein said determination means determines, from among at least one of content sets stored in said nonvolatile memory storage means by said storing means, at least one content set corresponding to a plurality of access qualification information corresponding to said one or more IC cards said user is authorized to use, said plurality of access qualification information being obtained from any one of said one or more IC cards connecting to said communication device at the time of determination, as access-permitted content; and

wherein said presenting means presents, to said user, said at least one content set determined as access-permitted content by said determination means.

25. A communication device according to claim 1,

wherein said communication device is a portable phone configured to perform packet communication.

26. A communication device according to claim 1,

wherein said content is an application program.

27. A method for restricting content access and storage, for use in a communication device,

wherein qualification information is stored in each of one or more IC cards connected to the communication device, the qualification information used to verify a user requesting access to the communication device;

the method comprising;

receiving, at said communication device, content from a mobile packet communication network;

accessing the access qualification information that is stored on an IC card in communication with the IC card interface at a time of receiving the content;

storing in a nonvolatile memory of the communication device the content received from the mobile packet communication network in association with the accessed qualification information accessed from the IC card in communication with the IC card interface at the time of receiving the content;

receiving input identifying received content in the nonvolatile memory for access;

accessing the qualification information that is stored on an IC card in communication with the IC card interface at a time of receiving the input identifying the received content for access;

retrieving, from the nonvolatile memory storage means, the accessed qualification information stored in association with the identified received content;

comparing the accessed qualification information from the IC card in communication with the IC card interface at the time of accessing the received content with the retrieved accessed qualification information; and

determining in said communication device, based on the comparison, whether to permit access to the stored received content.

28. The method according to claim 27,

wherein said determining step includes determining, from among at least one of content sets stored in said nonvolatile memory storage means by said storing means, at least one content set corresponding to access qualification information of any one of said one or more IC cards connecting to said communication device at the time of determination, as access-permitted content,

the method further comprising:

presenting said access-permitted content to a user of said any one of said one or more IC cards connecting to said communication device at the time of determination.

29. A computer readable recording medium storing a program,

wherein access qualification information is stored in each of one or more IC cards connected to the communication device, the access qualification information used to verify a user requesting access to the communication device,

the program for causing a computer to:

receive, at said communication device, content from a mobile packet communication network;

accessing the access qualification information that is stored on an IC card in communication with the IC card interface at a time of receiving the content;

store in a nonvolatile memory of the communication device the content received from the mobile packet communication network in association with the the accessed qualification information accessed from the IC card in communication with the IC card interface at the time of receiving the content;

receive input identifying received content in the nonvolatile memory for access;

access the qualification information that is stored on an IC card in communication with the IC card interface at a time of receiving the input identifying the received content for access;

retrieve, from the nonvolatile memory storage means, the accessed qualification information stored in association with the identified received content;

compare the accessed qualification information from the IC card in communication with the IC card interface at the time of accessing the received content with the retrieved accessed qualification information; and

determine in said communication device, based on the comparison, whether to permit access to the stored received content.

30. The computer readable recording medium according to claim 29, wherein determining when access to the stored content in said nonvolatile memory storage means is requested, whether to permit access to the stored content on the basis of said access qualification information stored in association with said received content comprises:

determining, from among at least one of content sets stored in said nonvolatile memory storage means, at least one content set corresponding to access qualification information of any one of said one or more IC cards connecting to said communication device at the time of determination, as access-permitted content;

wherein the program stored on the computer-readable recording medium further causes a computer to;

present said access-permitted content to a user of said any one of said one or more IC cards connecting to said communication device at the time of determination.