TRACE CENTER APPARATUS AND METHOD FOR ENABLING CONTENTS TO BE TRACED

• US 20140373167A1
• Filed: 08/08/2013
• Published: 12/18/2014
• Est. Priority Date: 08/09/2012
• Status: Abandoned Application

• Current Assignee: Nippon Telegraph and Telephone Corporation
• Original Assignee: Nippon Telegraph and Telephone Corporation
• Inventors: Matsumura, Takahiro, Motoda, Toshihiro, Nakahara, Shinichi
• Application Number:
  US14/373,667
• Publication Number:
  US 20140373167A1
• Time in Patent Office: Days
• US Class Current: 726/26
• CPC Class Codes: G06F 21/16 Program or content traceability, e.g. by watermarking
• CPC Class Codes: G06F 21/556 involving covert channels, i.e. data leakage between processes inhibiting the analysis of circuitry or operation with measures against power attack G06F21/755
• CPC Class Codes: G06F 21/564 by virus signature recognition
• CPC Class Codes: G06F 21/60 Protecting data
• CPC Class Codes: G06F 21/73 by creating or determining hardware identification, e.g. serial numbers
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04L 67/535 Tracking the activity of the user network monitoring arrangements H04L43/00; recording of computer activity G06F11/34

Abstract

A leaked information tracing technique enabling a recipient of leaked information to be identified. A trace center apparatus includes a tracer generation and registration part which issues a tracer identification number uniquely identifying both of a content residing on different computer and a tracer, generates a tracer program having the function of reporting identification information of a computer on which the content resides and the tracer identification number to a trace center, and registers the tracer program with the trace center.

Claims

1. A trace center apparatus comprising a tracer generation and registration part issuing a tracer identification number that uniquely identifies a content residing on a different computer and also uniquely identifies a tracer, generating a tracer program having the function of reporting identification information of a computer on which a content resides and the tracer identification number to a trace center while holding the trace identification number, and registering the tracer program with the trace center.

2. The trace center apparatus according to claim 1,

wherein the tracer generation and registration part is configured to receive the content from the different computer, include the tracer program in the content to generate a tracer-containing content, register the tracer-containing content with the trace center, and send the tracer-containing content to the different computer.

3. The trace center apparatus according to claim 1,

wherein the tracer generation and registration part is configured to send the tracer program to the different computer and to include the tracer program in the content to generate a tracer-containing content on the different computer.

4. The trace center apparatus according to claim 2 or 3,

wherein, after the content including the tracer is copied to another or the same computer, the tracer is activated, acquires identification information concerning the computer and sends the computer identification information and the tracer identification number, and the trace center apparatus further comprises an information receiving part receiving the computer identification information and the tracer identification number.

5. The trace center apparatus according to claim 4, comprising an additional program sending part sending an additional program embeddable in the tracer to the tracer program,

wherein in the tracer generation and registration part, the tracer program is configured to receive the additional program from the additional program sending part and is capable of embedding the additional program into the tracer program, and is configured to acquire system environment information of the different computer and send the system environment information to the trace center;

and

the additional program sending part is configured to select a type of an additional program to be sent to the tracer program in accordance with the received system environment information of the different computer.

6. The trace center apparatus according to claim 4,

wherein when the trace center apparatus receives a registration fee from a user, the tracer generation and registration part generates the content including a tracing function, registers the content including the tracing function, and sends the content including the tracing function to the user and, when the trace center apparatus receives a report fee from the user, the tracer generation and registration part reports identification information of a leak recipient computer to the user.

7. The trace center apparatus according to claim 4, comprising:

a billing part providing a notification of a registration fee or a report fee to a relevant computer and receiving a payment from the relevant computer; and

a report processing part reporting at least an identification number of a leak recipient computer to an information source computer.

8. The trace center apparatus according to claim 4,

wherein when the trace center apparatus receives the content from a computer, the tracer generation and registration part issues the tracer identification number, generates the tracer having the function of reporting identification information of a computer on which the content resides and the tracer identification number, adds an electronic signature to the tracer by using a secret key of the trace center, includes the tracer with the signature into the content, registers the tracer with the signature or the content including the tracer with the signature, and sends the content including the tracer with the signature to the computer;

the trace center apparatus comprises a signature verification part configured to verify a signature of a tracer with the signature by using a public key of the trace center and send the result of the verification to the tracer;

the tracer is configured in the tracer generation and registration part so as to be activated before a body of the content is disclosed;

the tracer is configured to ask for approval of reporting identification information of the user'"'"'s computer and the tracer identification number to the trace center in order that the body of the content can be disclosed;

the tracer is configured to send the tracer with the signature to the trace center if the user approves the reporting, and is configured to disclose the body of the content to the user if the tracer receives an indication that the signature verification part of the trace center has successfully verified that the signature of the tracer has been added by the trace center.

9. The trace center apparatus according to claim 1,

wherein in the tracer generation and registration part, a content is reconstructed, on the basis of the content, in an executable format that prevents access to the content unless certain preprocessing is executed and the tracer program is configured so as to be activated during the preprocessing.

10. The trace center apparatus according to claim 9, wherein in the tracer generation and registration part, the content is reconstructed in a self-extract format on the basis of the content.

11. A method for enabling a content to be traced, the method comprising the steps of:

issuing a tracer identification number uniquely identifying a content residing on a different computer and also uniquely identifying a tracer;

generating a tracer program including the function of reporting identification information of a computer on which the content resides and the trace identification number to a trace center while holding the tracer identification number; and

registering the tracer program with the trace center.