Data providing system, device, and method

• US 7,073,073 B1
• Filed: 07/06/2000
• Issued: 07/04/2006
• Est. Priority Date: 07/06/1999
• Status: Expired due to Term

• Current Assignee: Sony Corporation (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.)
• Inventors: Ezaki, Tadashi, Nonaka, Akira
• Primary Examiner(s): Sheikh, Ayaz
• Assistant Examiner(s): Chai, Longbit
• Application Number:
  US09/786,516
• Time in Patent Office: 2,189 Days
• Field of Search: 705 51- 57, 705/71, 713281-282, 713/189, 713155-158, 713/176, 380155-158, 380277-286, 726 2- 7, 726 26- 30
• US Class Current: 713/193
• CPC Class Codes: G06F 21/107 License processing; Key processing
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 9/0822 using key encryption key
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3268 using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]
• CPC Class Codes: H04L 9/3273 for mutual authentication network architectures or network communication protocols for achieving mutual authentication in a packet data network H04L63/0869

Abstract

A content provider 101 distributes a secure container 104 storing content data encrypted using content key data, content key data encrypted using distribution key data, and encrypted usage control policy data indicating the handling of the content data to a SAM 105₁ of a user home network 103 etc. The SAM 105₁ etc. decrypts the content data and usage control policy data stored in the secure container 104 and determines the purchase mode and usage mode and other handling of the content data based on said decrypted usage control policy data.

Claims

1. A data providing system for distributing content data from a data providing apparatus to a data processing apparatus, wherein

said data providing apparatus distributes a module storing the content data encrypted by using content key data, encrypted content key data, and an encrypted usage control policy data indicating handling of said content data to said data processing apparatus and

said data processing apparatus decrypts said content key data and said usage control policy data stored in said distributed module and determines the handling of said content data based on the related decrypted usage control policy data,

wherein said data providing apparatus performs mutual authentication with said data processing apparatus, encrypts said module using session key data obtained by said mutual authentication, and transmits said encrypted module to said data processing apparatus,

wherein a management apparatus manages said data providing apparatus and said data processing apparatus,

wherein said data providing apparatus sends said usage control policy data and requests said management apparatus to certify legitimacy of said usage control policy data and said management apparatus registers and services said usage control policy data from said data providing apparatus, and certifies the legitimacy of said usage control policy data in response to a request from said data providing apparatus.

2. A data providing system as set forth in claim 1, wherein:

said data providing apparatus distributes said module storing said content key data and said usage control policy data encrypted using distribution key data to said data processing apparatus and

said data processing apparatus decrypts said content key data and said usage control policy data stored in said distributed module using said distribution key data.

3. A data providing system as set forth in claim 2, wherein said management apparatus manages said distribution key data and distributes said distribution key data to said data providing apparatus and said data processing apparatus.

4. A data providing system as set forth in claim 3, wherein:

said data processing apparatus determines at least one of a purchase mode and usage mode of distributed content data based on usage control policy data and transmits log data indicating a log of at least said determined purchase mode and usage mode and

said management apparatus performs profit distribution processing for distributing profit obtained accompanied with said purchase and said usage of said content data in said data processing apparatus to related parties of said data providing apparatus based on said received log data.

5. A data providing system as set forth in claim 1, wherein said data providing apparatus generates its own signature data for at least one of said content key data and said usage control policy and distributes said module storing said generated signature data to said data processing apparatus.

6. A data providing system as set forth in claim 5, wherein said data providing apparatus generates said signature data using its own secret key data and distributes said module storing public key data corresponding to said secret key data to said data processing apparatus.

7. A data providing system as set forth in claim 6,

wherein said management apparatus prepares public key certificate data certifying the legitimacy of said public key data, wherein

said data providing apparatus distributes said module storing said public key certificate data to said data processing apparatus.

8. A data providing system as set forth in claim 1, wherein said data providing apparatus distributes

a first file storing said content data and

a second file storing said content key data and said usage control policy

to said data processing apparatus.

9. A data providing system as set forth in claim 8, wherein said data providing apparatus generates signature data using its own secret key data for the first file and the second file and distributes said module storing said generated signature data to said data processing apparatus.

10. A data providing system as set forth in claim 9, wherein said data processing apparatus distributes said module storing public key data corresponding to said secret key data to said data processing apparatus.

11. A data providing system as set forth in claim 10, wherein said data processing apparatus verifies the legitimacy of signature data stored in said module using public key data stored in said module.

12. A data providing system as set forth in claim 1, wherein said data providing apparatus generates a storage medium storing said module.

13. A data providing system as set forth in claim 1, wherein said data processing apparatus determines at least one of a purchase mode and usage mode of said content data based on said usage control policy.

14. A data providing system as set forth in claim 1, wherein said data processing apparatus outputs said decrypted content key data and said encrypted content data to a decryption apparatus.

15. A data providing system as set forth in claim 1, wherein said data processing apparatus is comprised of a module making it difficult for the processing content, predetermined data stored in an internal memory, and data being processed from being monitored and tampered with from the outside.

16. A data providing system comprising:

a data providing apparatus that provides a first module storing content data encrypted by using content key data, encrypted content key data, and encrypted usage control policy data indicating the handling of said content data to said data distribution apparatus,

a data distribution apparatus that distributes a second module storing said encrypted content data, content key data, and usage control policy data stored in said provided first module to said data processing apparatus,

a data processing apparatus that decrypts said content key data and said usage control policy data stored in said distributed second module and determines the handling of said content data based on the related decrypted usage control policy data, and

a management apparatus that manages said data providing apparatus and said data processing apparatus,

wherein said data distribution apparatus performs mutual authentication with said data processing apparatus, encrypts said second module using session key data obtained by said mutual authentication, and transmits said encrypted second module to said data processing apparatus,

wherein said data providing apparatus sends said usage control policy data and requests to said management apparatus to certify legitimacy of said usage control policy data, and wherein said management apparatus registers and serves said usage control policy data from said data providing apparatus, and certifies the legitimacy of said usage control policy data in response to a request from said data providing apparatus.

17. A data providing system as set forth in claim 16, wherein said data distribution apparatus distributes a module storing price data showing a price of said content data to said data processing apparatus.

18. A data providing system as set forth in claim 17, wherein said data distribution apparatus generates signature data using its own secret key data for said price data and stores said signature data in said second module.

19. A data providing system as set forth in claim 18, wherein said data providing apparatus provides said second module storing public key data corresponding to its own secret key data to said data processing apparatus.

20. A data providing system as set forth in claim 19, wherein said data processing apparatus verifies the legitimacy of signature data stored in said second module using public key data stored in said second module.

21. A data providing system as set forth in claim 16, wherein:

said data providing apparatus provides said first module storing said content key data and said usage control policy data encrypted using distribution key data to said data distribution apparatus and

said data processing apparatus decrypts said content key data and said usage control policy data stored in said distributed second module using said distribution key data.

22. A data providing system as set forth in claim 21, wherein

said data providing apparatus generates its own signature data for at least one of said content key data and said usage control policy and provides said first module storing said generated signature data and storing a third module encrypted using said distribution key data to said data distribution apparatus and

said data distribution apparatus stores said provided third module in said second module and distributes it to said data processing apparatus.

23. A data providing system as set forth in claim 22, wherein said data providing apparatus generates said signature data using its own secret key data and provides said third module storing public key data corresponding to said secret key data to said data distribution apparatus.

24. A data providing system as set forth in claim 23,

wherein said management apparatus prepares public key certificate data certifying the legitimacy of said public key data, wherein

said data providing apparatus provides said first module storing said third module storing said public key certificate data to said data distribution apparatus.

25. A data providing system as set forth in claim 21, wherein said management apparatus manages said distribution key data and distributes said distribution key data to said data providing apparatus and said data processing apparatus.

26. A data providing system as set forth in claim 25, wherein:

said data processing apparatus determines at least one of a purchase mode and usage mode of distributed content data based on usage control policy data and transmits log data indicating a log of at least said determined purchase mode and usage mode and

said management apparatus performs profit distribution processing for distributing profit obtained accompanied with said purchase and said usage of said content data in said data processing apparatus to related parties of said data providing apparatus based on said received log data.

27. A data providing system as set forth in claim 16, wherein said data providing apparatus provides

a first file storing said content data and

a second file storing said content key data and said usage control policy

to said data distribution apparatus.

28. A data providing system as set forth in claim 27, wherein said data providing apparatus generates signature data using its own secret key data for the first file and the second file and provides said first module storing said generated signature data to said data distribution apparatus.

29. A data providing system as set forth in claim 28, wherein said data distribution apparatus verifies the signature data of said first file and said second file using public key data of said data providing apparatus.

30. A data providing system as set forth in claim 27, wherein said data providing apparatus provides said first module storing link data showing a linkage of said first file and said second file to said data distribution apparatus.

31. A data providing system as set forth in claim 27, wherein said data processing apparatus provides said first module storing public key data corresponding to said secret key data to said data distribution apparatus.

32. A data providing system as set forth in claim 16, wherein said data providing apparatus generates a storage medium storing said module.

33. A data providing system as set forth in claim 16, wherein said data processing apparatus determines at least one of a purchase mode and usage mode of said content data based on said usage control policy.

34. A data providing system as set forth in claim 16, wherein said data processing apparatus outputs said decrypted content key data and said encrypted content data to a decryption apparatus.

35. A data providing system as set forth in claim 16, wherein said data processing apparatus is comprised of a module making it difficult for the processing content, predetermined data stored in an internal memory, and data being processed from being monitored and tampered with from the outside.

36. A data providing system comprising:

a data providing apparatus that provides a first module storing content data encrypted by using content key data, encrypted content key data, and encrypted usage control policy data indicating the handling of said content data to said plurality of data distribution apparatuses,

a first data distribution apparatus that distributes the second module storing said encrypted content data, content key data, and usage control policy data stored in said provided first module to said data processing apparatus,

a second data distribution apparatus that distributes a third module storing said encrypted content data, content key data, and usage control policy data stored in said provided first module to said data processing apparatus,

a data processing apparatus that decrypts said content key data and said usage control policy data stored in said distributed second module and said third module and determines the handling of said content data based on the related decrypted usage control policy data, and

a management apparatus that manages said data providing apparatus and said data processing apparatus,

wherein said data distribution apparatus performs mutual authentication with said data processing apparatus, encrypts said second module using session key data obtained by said mutual authentication, and transmits said encrypted second module to said data processing apparatus,

wherein said data providing apparatus sends said usage control policy data and requests to said management apparatus to certify legitimacy of said usage control policy data, and wherein said management apparatus registers and serves said usage control policy data from said data providing apparatus, and certifies the legitimacy of said usage control policy data in response to a request from said data providing apparatus.

37. A data providing system comprising:

a first data providing apparatus that provides a first module storing first content data encrypted by using first content key data, encrypted first content key data, and encrypted first usage control policy data indicating the handling of said first content data to said data distribution apparatus,

a second data providing apparatus that provides a second module storing second content data encrypted by using second content key data, encrypted second content key data, and encrypted second usage control policy data indicating the handling of said second content data to said data distribution apparatus,

a data distribution apparatus that distributes a third module storing said encrypted first content data, said first content key data, and said first usage control policy data stored in said provided first module and said encrypted second content data, said second content key data, and said second usage control policy data stored in said provided second module to said data processing apparatus,

a data processing apparatus that decrypts said first content key data and said first usage control policy data stored in said distributed third module, determines the handling of said first content data based on the related decrypted first usage control policy data, decrypts said second content key data and said second usage control policy data stored in said distributed third module, and determines the handling of said second content data based on the related decrypted second usage control policy data, and

a management apparatus that manages said first data providing apparatus and said data processing apparatus,

wherein said data distribution apparatus performs mutual authentication with said data processing apparatus, encrypts said second module using session key data obtained by said mutual authentication, and transmits said encrypted second module to said data processing apparatus,

wherein said first data providing apparatus sends said first usage control policy data and requests to said management apparatus to certify legitimacy of said first usage control policy data, and wherein said management apparatus registers and serves said first usage control policy data from said first data providing apparatus, and certifies the legitimacy of said first usage control policy data in response to a request from said first data providing apparatus.

38. A data providing system comprising:

a data providing apparatus that distributes content data and usage control policy data indicating the handling of the related content data to said data processing apparatus,

a data processing apparatus that determines at least one of a purchase mode and a usage mode of said distributed content data based on said distributed usage control policy data and transmits log data indicating the log of at least one of the related determined purchase mode and usage mode to said management apparatus, and

a management apparatus that manages said data providing apparatus and said data processing apparatus and performs profit distribution processing for distributing the profit obtained accompanied with said purchase and said usage of said content data in said data processing apparatus to related parties of said data providing apparatus based on received log data,

wherein said data providing apparatus performs mutual authentication with said data processing apparatus, encrypts said module using session key data obtained by said mutual authentication, and transmits said encrypted module to said data processing apparatus,

wherein said data providing apparatus sends said usage control policy data and requests to said management apparatus to certify legitimacy of said usage control policy data, and wherein said management apparatus registers and serves said usage control policy data from said data providing apparatus, and certifies the legitimacy of said usage control policy data in response to a request from said data providing apparatus.

39. A data providing system as set forth in claim 38, wherein

said data providing apparatus encrypts said content data using predetermined key data and distributes it to said data processing apparatus,

said data processing apparatus decrypts said received content data using said key data, and

said management apparatus manages said key data.

40. A data providing system as set forth in claim 39, wherein said data providing apparatus encrypts said key data and distributes a module storing said encrypted key data, encrypted content data, and said usage control policy data to said data processing apparatus.

41. A data providing system as set forth in claim 40, wherein

said management apparatus manages distribution key data and distributes said distribution key data to said data providing apparatus and said data processing apparatus,

said data providing apparatus encrypts said key data and said usage control policy data using said distributed distribution key data, and

said data processing apparatus decrypts said key data and said usage control policy data using said distributed distribution key data.

42. A data providing system as set forth in claim 41, wherein said management apparatus distributes a plurality of distribution key data having predetermined terms of validity to said data providing apparatus and said data processing apparatus for exactly a predetermined period.

43. A data providing system as set forth in claim 39, wherein said management apparatus authenticates the legitimacy of at least one of said usage control policy data and said key data.

44. A data providing system as set forth in claim 40, wherein

said data providing apparatus generates signature data for at least one of said encrypted content data and usage control policy data using its own secret key data and distributes a module storing said encrypted content data, said encrypted key data, said encrypted usage control policy data, and said signature data to said data processing apparatus,

said data processing apparatus verifies said signature data stored in said distributed module using public key data corresponding to said secret key data, and

said management apparatus manages said public key data.

45. A data providing system as set forth in claim 44, wherein said data providing apparatus distributes said module storing public key data corresponding to its own secret key data to said data processing apparatus.

46. A data providing system as set forth in claim 44, wherein said management apparatus distributes said module storing public key data corresponding to said secret key data of said data providing apparatus to said data processing apparatus.

47. A data providing system as set forth in claim 38, wherein

said data providing apparatus generates predetermined key data and registers said generated key data to said management apparatus,

said management apparatus manages said registered key data and transmits corresponding key data to said data processing apparatus when processing for purchasing of content data is performed in said data processing apparatus, and

said data processing apparatus decrypts said received content data using said received key data.

48. A data providing system as set forth in claim 38, wherein

said management apparatus distributes distribution key data to said data providing apparatus and said data processing apparatus,

said data providing apparatus encrypts said usage control policy using said distribution key data and distributes it to said data processing apparatus, and

said data processing apparatus decrypts said received usage control policy data using said distribution key data.

49. A data providing system as set forth in claim 38, wherein said management apparatus generates settlement claim data used when claiming settlement processing in accordance with said profit distribution processing, adds signature data based on its own secret key data to said settlement claim data, and transmits it to an apparatus performing said settlement processing or said data providing apparatus.

50. A data providing system as set forth in claim 38, wherein said management apparatus performs processing for registration of said data processing apparatus, manages said registered data processing apparatus, and performs profit distribution processing based on said log data received from said registered data processing apparatus.

51. A data providing system as set forth in claim 38, wherein said data processing apparatus determines a purchase mode of said distributed content data based on said usage control policy data, generates usage control status data in accordance with said determined purchase mode, and controls usage of said distributed content data based on said usage control status data.

52. A data providing system as set forth in claim 38, wherein said data processing apparatus is comprised of a module making it difficult for the processing content, predetermined data stored in an internal memory, and data being processed from being monitored and tampered with from the outside.

53. A data providing system comprising:

a data providing apparatus that provides content data and usage control policy data indicating the handling of the related content data to said data distribution apparatus,

a data distribution apparatus that distributes said provided content data and said usage control policy data to said data processing apparatus,

a data processing apparatus that has a first module for communicating with said data distribution apparatus and a second module for determining at least one of a purchase mode and usage mode of said distributed content data based on said distributed usage control policy data and transmitting log data indicating the log of the related determined purchase mode and usage mode to said management apparatus, and

a management apparatus that manages the data providing apparatus, data distribution apparatus, and data processing apparatus and performs profit distribution processing for distributing the profit obtained accompanied with said data processing apparatus receiving said distribution of said content data and purchasing and using said content data to related parties of said data providing apparatus and said data distribution apparatus based on said log data received from said second module,

wherein said data providing apparatus performs mutual authentication with said data processing apparatus, encrypts said module using session key data obtained by said mutual authentication, and transmits said encrypted module to said data processing apparatus,

wherein said data providing apparatus sends said usage control policy data and requests to said management apparatus to certify legitimacy of said usage control policy data, and wherein said management apparatus registers and serves said usage control policy data from said data providing apparatus, and certifies the legitimacy of said usage control policy data in response to a request from said data providing apparatus.

54. A data providing system as set forth in claim 53, wherein said data providing apparatus encrypts said content data using content key data and provides it to said data distribution apparatus.

55. A data providing system as set forth in claim 53, wherein said data distribution apparatus generates price data showing the price of said distributed content data and distributes said price data to said data processing apparatus.

56. A data providing system as set forth in claim 53, wherein

said data providing apparatus encrypts said content key data and said usage control policy by using distribution key data and provides it to said data distribution apparatus,

said data processing apparatus decrypts said content key data and said usage control policy using said distribution key data, and

said management apparatus manages said distribution key data and distributes said distribution key data to said data providing apparatus and said data processing apparatus.

57. A data providing system as set forth in claim 54, wherein

said data providing apparatus generates first signature data for at least one of said encrypted content data, said encrypted content key data, and said encrypted usage control policy data using its own first secret key data and provides a first module storing said encrypted content data, said encrypted key data, said encrypted usage control policy data, and said first signature data to said data distribution apparatus,

said data distribution apparatus verifies said first signature data using first public key data corresponding to said first secret key data, then stores second signature data generated using its own second secret key data in said first module to generate a second module and distributes said second module to said data processing apparatus,

said data processing apparatus verifies said first signature data stored in said distributed second module using said first public key data and verifies said second signature data stored in said distributed second module using second public key data corresponding to said second secret key data, and

said management apparatus manages said first public key data and said second public key data.

58. A data providing system as set forth in claim 57, wherein

said data providing apparatus provides said first module storing said first public key data to said data distribution apparatus and

said data distribution apparatus distributes said second module storing said first public key data and said second public key data to said data processing apparatus.

59. A data providing system as set forth in claim 57, wherein said management apparatus distributes said first public key data and said second public key data to said data processing apparatus.

60. A data providing system as set forth in claim 53, wherein

said data distribution apparatus distributes price data showing the price of said distributed content data to said data processing apparatus and

said management apparatus authenticates the legitimacy of the data of at least one of key data used when encrypting said content data and said price data.

61. A data providing system as set forth in claim 53, wherein said data distribution apparatus distributes to said data processing apparatus a module storing said provided encrypted content data, said provided usage control policy data, said key data encrypting said content data, and price data showing the price of said distributed content data.

62. A data providing system as set forth in claim 53, wherein said management apparatus performs profit distribution processing for distributing profit obtained accompanied with said data processing apparatus receiving distribution of said content data and purchasing and using said content data to related parties of said data providing apparatus and said data distribution apparatus, generates settlement claim data to be used when claiming settlement, add its own signature data to said settlement claim data, and transmits this to an apparatus for performing said settlement processing.

63. A data providing system as set forth in claim 62, wherein said management apparatus transmits settlement report data showing the results of said profit distribution processing to at least one of said data providing apparatus and said data distribution apparatus.

64. A data providing system as set forth in claim 53, wherein said management apparatus performs profit distribution processing for distributing profit obtained accompanied with said data processing apparatus receiving distribution of said content data and purchasing and using said content data to related parties of said data providing apparatus and said data distribution apparatus, generates settlement claim data to be used when claiming settlement, adds its own signature data to said settlement claim data, and transmits this to at least one of said data providing apparatus and said service providing apparatus.

65. A data providing system as set forth in claim 53, wherein said management apparatus performs processing for registration of said data processing apparatus, manages said registered data processing apparatus, and performs said profit distribution processing based on said log data received from said registered data processing apparatus.

66. A data providing system as set forth in claim 53, wherein said data processing apparatus determines at least one of a purchase mode and usage mode of said distributed content data based on said usage control policy data, generates usage control status data in accordance with said determined purchase mode and usage mode, and controls usage of said distributed content data based on said usage control status data.

67. A data providing system as set forth in claim 53, wherein said second module of said data processing apparatus is a module making it difficult for the processing content, predetermined data stored in an internal memory, and data being processed from being monitored and tampered with from the outside.

68. A data providing system comprising:

a data providing apparatus that provides content data and usage control policy data indicating the handling of the related content data to said data distribution apparatus,

a data distribution apparatus that distributes said provided content data and said usage control policy data to said data processing apparatus and performs charge processing concerning the distribution of said content data based on a data distribution apparatus use purchase log data received from said data processing apparatus,

a data processing apparatus that has a first module for creating the data distribution apparatus use purchase log data indicating the log of the purchase of said content data distributed from said data distribution apparatus and transmitting the same to said data distribution apparatus and a second module for determining at least one of the purchase mode and the usage mode of said distributed content data based on said distributed usage control policy data and transmitting a management apparatus use log data indicating the log of the related determined purchase mode and usage mode to said management apparatus, and

a management apparatus that performs profit distribution processing for distributing the profit obtained accompanied with said purchase and said usage of said content data in said data processing apparatus to related parties of said data providing apparatus and said data distribution apparatus based on said management apparatus use log data,

wherein said data providing apparatus performs mutual authentication with said data processing apparatus, encrypts said module using session key data obtained by said mutual authentication, and transmits said encrypted module to said data processing apparatus,

wherein said data providing apparatus sends said usage control policy data and requests to said management apparatus to certify legitimacy of said usage control policy data, and wherein said management apparatus registers and serves said usage control policy data from said data providing apparatus, and certifies the legitimacy of said usage control policy data in response to a request from said data providing apparatus.

69. A data processing apparatus for receiving the distribution of content data and usage control policy data indicating the handling of the related content data from a data providing apparatus via a data distribution apparatus and transmitting said log data to a management apparatus for performing profit distribution processing for distributing the profit obtained accompanied with the purchase and usage of the related distributed content data to related parties of said data providing apparatus and said data distribution apparatus based on said management apparatus use log data, said data processing apparatus comprising,

a first module for creating data distribution apparatus use purchase log data indicating the log of the purchase of said content data distributed from said data distribution apparatus and transmitting the same to said data distribution apparatus and

a second module for determining at least one of a purchase mode and usage mode of said distributed content data based on said distributed usage control policy data and transmitting said management apparatus use log data indicating the log of the related determined purchase mode and usage mode to said management apparatus,

wherein said data providing apparatus performs mutual authentication with said data processing apparatus, encrypts said module using session key data obtained by said mutual authentication, and transmits said encrypted module to said data processing apparatus,

wherein said data providing apparatus sends said usage control policy data and requests to said management apparatus to certify legitimacy of said usage control policy data, and wherein said management apparatus registers and serves said usage control policy data from said data providing apparatus, and certifies the legitimacy of said usage control policy data in response to a request from said data providing apparatus.

70. A data providing system comprising a data providing apparatus, data distribution apparatus, data processing apparatus, and management apparatus, wherein

said data providing apparatus provides content data to said data distribution apparatus,

said data distribution apparatus distributes said provided content data to said data processing apparatus,

said data processing apparatus uses said distributed content data, and

said management apparatus manages the operation of a data providing service by said data providing apparatus, said data distribution apparatus, and said data processing apparatus, generates signature data indicating that the related data is generated by itself by using its own secret key data when each of said data providing apparatus, said data distribution apparatus, and said data processing apparatus supplies the data to another apparatus, generates and manages public key certificate data of public key data corresponding to secret key data of said data providing apparatus, said data distribution apparatus, and said data processing apparatus when the legitimacy of the signature data corresponding to the data is verified by using the public key data of the related other apparatus when receiving the supply of the related data from the other apparatus, registers and serves usage control policy data indicating the handling of the related content data from said data providing apparatus, and certifies the legitimacy of said usage control policy data in response to a request from said data providing apparatus, and wherein

said data providing apparatus, said data distribution apparatus, and said data processing apparatus acquire said their own public key certificate data from said management apparatus before communicating with the other apparatus and transmit the related acquired public key certificate data to said other apparatus

wherein said data providing apparatus performs mutual authentication with said data processing apparatus, encrypts said module using session key data obtained by said mutual authentication, and transmits said encrypted module to said data processing apparatus.

71. A data providing system comprising a data providing apparatus, data distribution apparatus, data processing apparatus, and management apparatus, wherein

said data providing apparatus provides content data to said data distribution apparatus,

said data distribution apparatus distributes said provided content data to said data processing apparatus,

said data processing apparatus uses said distributed content data, and

said management apparatus manages the operation of a data providing service by said data providing apparatus, said data distribution apparatus, and said data processing apparatus, generates the signature data indicating that the related data is generated by itself by using its own secret key data when each of said data providing apparatus, said data distribution apparatus, and said data processing apparatus supplies data to another apparatus, generates and manages public key certificate data of public key data corresponding to secret key data of said data providing apparatus, said data distribution apparatus, and said data processing apparatus when the legitimacy of the signature data corresponding to the data is verified by using the public key data of the related other apparatus when receiving the supply of the related data from the other apparatus, registers and serves usage control policy data indicating the handling of the related content data from said data providing apparatus, and certifies the legitimacy of said usage control policy data in response to a request from said data providing apparatus,

wherein said data providing apparatus performs mutual authentication with said data processing apparatus, encrypts said module using session key data obtained by said mutual authentication, and transmits said encrypted module to said data processing apparatus, and wherein

said data providing apparatus, said data distribution apparatus, and said data processing apparatus acquire their own public key certificate data from said management apparatus before communicating with the other apparatus and transmit the related acquired public key certificate data to said other apparatus at said communication.

72. A data providing system comprising a data providing apparatus, data distribution apparatus, data processing apparatus, and management apparatus, wherein:

said data providing apparatus provides content data to said data distribution apparatus,

said data distribution apparatus distributes said provided content data to said data processing apparatus,

said data processing apparatus uses said distributed content data, and

said management apparatus manages the operation of a data providing service by said data providing apparatus, said data distribution apparatus, and said data processing apparatus, generates signature data indicating that the related data is generated by itself by using its own secret key data when each of said data providing apparatus, said data distribution apparatus, and said data processing apparatus supplies data to another apparatus, generates and manages public key certificate data of public key data corresponding to secret key data of said data providing apparatus, said data distribution apparatus, and said data processing apparatus when the legitimacy of the signature data corresponding to the data is verified by using the public key data of the related other apparatus when receiving the supply of the related data from the other apparatus, generates public key certificate revocation list for specifying public key certificate data to be invalidated among said generated public key certificate data and thereby to restrict said communication or said distribution using public key certificate data specified by said public key certificate revocation list by said data providing apparatus, said data distribution apparatus, and said data processing apparatus, registers and serves usage control policy data indicating the handling of the related content data from said data providing apparatus, and certifies the legitimacy of said usage control policy data in response to a request from said data providing apparatus

wherein said data providing apparatus performs mutual authentication with said data processing apparatus, encrypts said module using session key data obtained by said mutual authentication, and transmits said encrypted module to said data processing apparatus.

73. A data providing system as set forth in claim 72, wherein said management apparatus generates public key certificate revocation list specifying public key certificate data corresponding to said data providing apparatus, said data distribution apparatus, and said data processing apparatus used for illegal actions.

74. A data providing system comprising a data providing apparatus, data distribution apparatus, data processing apparatus, and management apparatus, wherein:

said data providing apparatus provides content data to said data distribution apparatus,

said data distribution apparatus distributes said provided content data to said data processing apparatus,

said management apparatus manages the operation of a data providing service by said data providing apparatus, said data distribution apparatus, and said data processing apparatus, generates signature data indicating that the related data is generated by an apparatus itself by using its own secret key data when said data providing apparatus supplies data to another apparatus, generates and manages public key certificate data of public key data corresponding to secret key data of said data providing apparatus for when another apparatus verifies the legitimacy of the related signature data by using the public key data corresponding to said secret key data, generates public key certificate revocation list for specifying public key certificate data to be invalidated among said generated public key certificate data, distributes the related public key certificate revocation list to said data processing apparatus, registers and serves usage control policy data indicating the handling of the related content data from said data providing apparatus, and certifies the legitimacy of said usage control policy data in response to a request from said data providing apparatus, and

said data processing apparatus verifies whether or not public key certificate data of said data providing apparatus providing said distributed content data is invalid based on said public key certificate revocation list distributed from said management apparatus and controls the usage of said distributed content data based on the result of the related verification

wherein said data providing apparatus performs mutual authentication with said data processing apparatus, encrypts said module using session key data obtained by said mutual authentication, and transmits said encrypted module to said data processing apparatus.

75. A data providing system as set forth in claim 74, wherein said management apparatus directly distributes said public key certificate revocation list to said data processing apparatus.

76. A data providing system as set forth in claim 74, wherein said management apparatus distributes said public key certificate revocation list to said data processing apparatus through said data distribution apparatus, by broadcasting, or by an on-demand system.

77. A data providing system comprising a data providing apparatus, data distribution apparatus, data processing apparatus, and management apparatus, wherein:

said management apparatus manages the operation of a data providing service by said data providing apparatus, said data distribution apparatus, and said data processing apparatus, generates signature data indicating that the related data is generated by an apparatus itself by using its own secret key data when said data providing apparatus supplies data to another apparatus, generates and manages public key certificate data of public key data corresponding to secret key data of said data providing apparatus for when another apparatus verifies the legitimacy of the related signature data by using the public key data corresponding to said secret key data, generates public key certificate revocation list for specifying public key certificate data to be invalidated among said generated public key certificate data, distributes the related public key certificate revocation list to said data distribution apparatus, registers and serves usage control policy data indicating the handling of the related content data from said data providing apparatus, and certifies the legitimacy of said usage control policy data in response to a request from said data providing apparatus, and

said data distribution apparatus verifies whether or not public key certificate data of said data providing apparatus providing said provided content data is invalid based on said public key certificate revocation list distributed from said management apparatus, and controls the distribution of said provided content data to said data processing apparatus based on the result of the related verification

wherein said data providing apparatus performs mutual authentication with said data processing apparatus, encrypts said module using session key data obtained by said mutual authentication, and transmits said encrypted module to said data processing apparatus.

78. A data providing system comprising a data providing apparatus, data distribution apparatus, data processing apparatus, and management apparatus, wherein:

said management apparatus manages the operation of a data providing service by said data providing apparatus, said data distribution apparatus, and said data processing apparatus, generates signature data indicating that the related data is generated by an apparatus itself by using its own secret key data when said data distribution apparatus supplies data to another apparatus, generates and manages public key certificate data of public key data corresponding to secret key data of said data distribution apparatus for when another apparatus verifies the legitimacy of the related signature data by using the public key data corresponding to said secret key data, generates public key certificate revocation list for specifying public key certificate data to be invalidated among said generated public key certificate data, distributes the related public key certificate revocation list to said data providing apparatus, registers and serves usage control policy data indicating the handling of the related content data from said data providing apparatus, and certifies the legitimacy of said usage control policy data in response to a request from said data providing apparatus,

said data providing apparatus verifies whether or not public key certificate data of the data distribution apparatus of the destination of provision of the content data is invalid and controls the provision of said content data to said data distribution apparatus based on the result of the related verification,

said data distribution apparatus distributes said provided content data to said data processing apparatus, and

said data processing apparatus uses said distributed content data

wherein said data providing apparatus performs mutual authentication with said data processing apparatus, encrypts said module using session key data obtained by said mutual authentication, and transmits said encrypted module to said data processing apparatus.

79. A data providing system comprising a data providing apparatus, data distribution apparatus, data processing apparatus, and management apparatus, wherein:

said management apparatus manages the operation of a data providing service by said data providing apparatus, said data distribution apparatus, and said data processing apparatus, generates signature data indicating that the related data is generated by an apparatus itself by using its own secret key data when said data distribution apparatus supplies data to another apparatus, generates and manages public key certificate data of public key data corresponding to secret key data of said data distribution apparatus for when another apparatus verifies the legitimacy of the related signature data by using the public key data corresponding to said secret key data, generates public key certificate revocation list for specifying public key certificate data to be invalidated among said generated public key certificate data, distributes the related public key certificate revocation list to said data distribution apparatus, registers and serves usage control policy data indicating the handling of the related content data from said data providing apparatus, and certifies the legitimacy of said usage control policy data in response to a request from said data providing apparatus,

said data providing apparatus provides content data to said data distribution apparatus,

said data distribution apparatus distributes said provided content data and said distributed public key certificate revocation list to said data processing apparatus, and

said data processing apparatus verifies whether or not public key certificate data of said data distribution apparatus distributing said distributed content data is invalid based on said distributed public key certificate revocation list and controls the usage of said distributed content data based on the result of the related verification

wherein said data providing apparatus performs mutual authentication with said data processing apparatus, encrypts said module using session key data obtained by said mutual authentication, and transmits said encrypted module to said data processing apparatus.

80. A data providing system as set forth in claim 79, wherein said data distribution apparatus has a configuration which makes it difficult to tamper with said public key certificate revocation list distributed from said management apparatus.

81. A data providing system as set forth in claim 79, wherein

said management apparatus encrypts said public key certificate revocation list using distribution key data and distributes it to said data distribution apparatus and distributes said distribution key data to said data processing apparatus and

said data processing apparatus decrypts said distributed public key certificate revocation list using said distribution key data.

82. A data providing system as set forth in claim 79, wherein said data distribution apparatus distributes said public key certificate revocation list to said data processing apparatus by broadcasting or by an on-demand system.

83. A data providing method as set forth in claim 79, wherein said data distribution apparatus distributes said public key certificate revocation list to said data processing apparatus by broadcasting or by an on-demand system.

84. A data providing system comprising a data providing apparatus, data distribution apparatus, data processing apparatus, and management apparatus, wherein:

said management apparatus manages the operation of a data providing service by said data providing apparatus, said data distribution apparatus, and said data processing apparatus, generates signature data indicating that the related data is generated by an apparatus itself by using its own secret key data when said data distribution apparatus supplies data to another apparatus, generates and manages public key certificate data of public key data corresponding to secret key data of said data distribution apparatus for when another apparatus verifies the legitimacy of the related signature data by using public key data corresponding to said secret key data, generates public key certificate revocation list for specifying public key certificate data to be invalidated among said generated public key certificate data, distributes the related public key certificate revocation list to said data processing apparatus, registers and serves usage control policy data indicating the handling of the related content data from said data providing apparatus, and certifies the legitimacy of said usage control policy data in response to a request from said data providing apparatus,

said data providing apparatus provides content data to said data distribution apparatus,

said data distribution apparatus distributes said provided content data to said data processing apparatus, and

said data processing apparatus verifies whether or not public key certificate data of said data distribution apparatus distributing said distributed content data is invalid based on said distributed public key certificate revocation list and controls the usage of said distributed content data based on the result of the related verification

wherein said data providing apparatus performs mutual authentication with said data processing apparatus, encrypts said module using session key data obtained by said mutual authentication, and transmits said encrypted module to said data processing apparatus.

85. A data providing system comprising a data providing apparatus, data distribution apparatus, data processing apparatus, and management apparatus, wherein:

said management apparatus manages the operation of a data providing service by said data providing apparatus, said data distribution apparatus, and said data processing apparatus, generates signature data indicating that the related data is generated by an apparatus itself by using its own secret key data when said data distribution apparatus supplies data to another apparatus, generates and manages public key certificate data of public key data corresponding to secret key data of said data distribution apparatus for when another apparatus verifies the legitimacy of the related signature data by using public key data corresponding to said secret key data, generates public key certificate revocation list for specifying public key certificate data to be invalidated among said generated public key certificate data, distributes the related public key certificate revocation list to said data providing apparatus, registers and serves usage control policy data indicating the handling of the related content data from said data providing apparatus, and certifies the legitimacy of said usage control policy data in response to a request from said data providing apparatus,

said data providing apparatus provides content data and said public key certificate revocation list to said data distribution apparatus,

said data distribution apparatus distributes said provided content data and public key certificate revocation list to said data processing apparatus

said data providing apparatus performs mutual authentication with said data processing apparatus, encrypts said module using session key data obtained by said mutual authentication, and transmits said encrypted module to said data processing apparatus, and

said data processing apparatus verifies whether or not public key certificate data of said data distribution apparatus distributing said distributed content data is invalid based on said distributed public key certificate revocation list and controls the usage of said distributed content data based on the result of the related verification.

86. A data providing system comprising a data providing apparatus, data distribution apparatus, a plurality of data processing apparatuses, and a management apparatus, wherein:

said management apparatus manages the operation of a data providing service by said data providing apparatus, said data distribution apparatus, and said data processing apparatuses, generates signature data indicating that the related data is generated by an apparatus itself by using its own secret key data when a data processing apparatus supplies data to another apparatus, generates and manages public key certificate data of public key data corresponding to secret key data of said data processing apparatuses for when another apparatus verifies the legitimacy of the related signature data by using the public key data corresponding to said secret key data, generates public key certificate revocation list for specifying public key certificate data to be invalidated among said generated public key certificate data, distributes the related public key certificate revocation list to said data providing apparatus, registers and serves usage control policy data indicating the handling of the related content data from said data providing apparatus, and certifies the legitimacy of said usage control policy data in response to a request from said data providing apparatus,

said data providing apparatus provides content data and said public key certificate revocation list to said data distribution apparatus,

said data providing apparatus performs mutual authentication with said data processing apparatus, encrypts said module using session key data obtained by said mutual authentication, and transmits said encrypted module to said data processing apparatus,

said data distribution apparatus distributes said provided content data and public key certificate revocation list to said data processing apparatuses, and

said data processing apparatuses verify whether or not public key certificate data of said other data processing apparatuses are invalid based on the public key certificate revocation list distributed from said data distribution apparatus and control the communication with other data processing apparatuses based on the result of the related verification.

87. A data providing system as set forth in claim 86, wherein said data distribution apparatus has a configuration which makes it difficult to tamper with said public key certificate revocation list distributed from said management apparatus.

88. A data providing system as set forth in claim 86, wherein

said management apparatus encrypts said public key certificate revocation list using distribution key data and distributes it to said data distribution apparatus and distributes said distribution key data to said data processing apparatus and

said data processing apparatus decrypts said distributed public key certificate revocation list using said distribution key data.

89. A data providing system comprising a data providing apparatus, data distribution apparatus, a plurality of data processing apparatuses, and a management apparatus, wherein:

said management apparatus manages the operation of a data providing service by said data providing apparatus, said data distribution apparatus, and said data processing apparatuses, generates signature data indicating that the related data is generated by an apparatus itself by using its own secret key data when a data processing apparatus supplies data to another apparatus, generates and manages public key certificate data of public key data corresponding to secret key data of said data processing apparatuses for when another apparatus verifies the legitimacy of the related signature data by using the public key data corresponding to said secret key data, generates public key certificate revocation list for specifying public key certificate data to be invalidated among said generated public key certificate data, distributes the related public key certificate revocation list to said data providing apparatus, registers and serves usage control policy data indicating the handling of the related content data from said data providing apparatus, and certifies the legitimacy of said usage control policy data in response to a request from said data providing apparatus,

said data providing apparatus provides content data to said data distribution apparatus,

said data providing apparatus performs mutual authentication with said data processing apparatus, encrypts said module using session key data obtained by said mutual authentication, and transmits said encrypted module to said data processing apparatus,

said data distribution apparatus distributes said provided content data and said distributed public key certificate revocation list to said data processing apparatuses, and

said data processing apparatuses verify whether or not public key certificate data of other data processing apparatuses are invalid based on the public key certificate revocation list distributed from said data distribution apparatus, and control the communication with other data processing apparatuses based on the result of the related verification.

90. A data providing system as set forth in claim 89, wherein said data distribution apparatus has a configuration which makes it difficult to tamper with said public key certificate revocation list distributed from said management apparatus.

91. A data providing system as set forth in claim 89, wherein

said management apparatus encrypts said public key certificate revocation list using distribution key data and distributes it to said data distribution apparatus and distributes said distribution key data to said data processing apparatus and

said data processing apparatus decrypts said distributed public key certificate revocation list using said distribution key data.

92. A data providing system comprising a data providing apparatus, data distribution apparatus, a plurality of data processing apparatuses, and a management apparatus, wherein:

a data processing apparatus supplies registration data, indicating an already registered data processing apparatus connected in a predetermined network to which is connected, to said management apparatus, refers to a revocation flag in registration data supplied from said management apparatus and restricts communication with another data processing apparatus having public key certificate data indicated as invalid by the revocation flag,

said management apparatus manages the operation of a data providing service by said data providing apparatus, said data distribution apparatus, and said data processing apparatuses, generates and manages public key certificate data of public key data corresponding to secret key data for when a data processing apparatus generates signature data indicating legitimacy of data using its own secret key data when supplying data to another apparatus, generates public key certificate revocation list for specifying public key certificate data to be invalidated among said generated public key certificate data, stores the related public key certificate revocation list, generates new registration data by setting said revocation flag in said registration data supplied from data processing apparatuses based on the related public key certificate revocation list, distributes the related generated registration data to said data processing apparatuses, registers and serves usage control policy data indicating the handling of the related content data from said data providing apparatus, and certifies the legitimacy of said usage control policy data in response to a request from said data providing apparatus,

said data providing apparatus provides content data to said data distribution apparatus,

said data providing apparatus performs mutual authentication with said data processing apparatus, encrypts said module using session key data obtained by said mutual authentication, and transmits said encrypted module to said data processing apparatus, and

said data distribution apparatus distributes said provided content data to said data processing apparatuses.

93. A data providing system comprising a data providing apparatus, data distribution apparatus, a plurality of data processing apparatuses, and a management apparatus, wherein:

said management apparatus manages the operation of a data providing service by said data providing apparatus, said data distribution apparatus, and said data processing apparatuses, generates and manages public key certificate data of public key data corresponding to said secret key data for when a data processing apparatus generates signature data indicating the legitimacy of data by using its own secret key data when supplying the related data to another apparatus, generates public key certificate revocation list for specifying public key certificate data to be invalidated among said generated public key certificate data, distributes the related public key certificate revocation list to said data providing apparatus, registers and serves usage control policy data indicating the handling of the related content data from said data providing apparatus, and certifies the legitimacy of said usage control policy data in response to a request from said data providing apparatus,

said data providing apparatus provides content data and said public key certificate revocation list to said data distribution apparatus,

said data distribution apparatus distributes said provided content data and said public key certificate revocation list to said data processing apparatuses,

said data providing apparatus performs mutual authentication with said data processing apparatus, encrypts said module using session key data obtained by said mutual authentication, and transmits said encrypted module to said data processing apparatus, and

a data processing apparatus sets a revocation flag in registration data indicating an already registered data processing apparatus connected in a predetermined network to which it is connected based on said distributed public key certificate revocation list and restricts communication with another data processing apparatus having public key certificate data indicated as invalid by the related revocation flag.

94. A data providing system comprising a data providing apparatus, data distribution apparatus, a plurality of data processing apparatuses, and a management apparatus, wherein:

said management apparatus manages the operation of a data providing service by said data providing apparatus, said data distribution apparatus, and said data processing apparatuses, generates and manages public key certificate data of public key data corresponding to secret key data for when a data processing apparatus generates signature data indicating the legitimacy of the data by using its own secret key data when supplying the related data to another apparatus, generates public key certificate revocation list for specifying public key certificate data to be invalidated among said generated public key certificate data, distributes the related public key certificate revocation list to said data distribution apparatus, registers and serves usage control policy data indicating the handling of the related content data from said data providing apparatus, and certifies the legitimacy of said usage control policy data in response to a request from said data providing apparatus,

said data providing apparatus provides content data to said data distribution apparatus,

said data distribution apparatus distributes said provided content data and said public key certificate revocation list to said data processing apparatuses,

said data providing apparatus performs mutual authentication with said data processing apparatus, encrypts said module using session key data obtained by said mutual authentication, and transmits said encrypted module to said data processing apparatus, and

a data processing apparatus sets a revocation flag in registration data indicating an already registered data processing apparatus connected in a predetermined network to which it is connected based on said distributed public key certificate revocation list and restricts communication with another data processing apparatus having public key certificate data indicated as invalid by the related revocation flag.

95. A data providing system comprising:

a data providing apparatus that provides content data and usage control policy data indicating the handling of the related content data to said data distribution apparatus,

a data distribution apparatus that distributes said provided content data and said usage control policy data to said data processing apparatus,

a data processing apparatus that has a first module for communicating with said data distribution apparatus and a second module for determining at least one of a purchase mode and usage mode of said distributed content data based on said distributed usage control policy data and transmitting log data indicating the log of the related determined purchase mode and usage mode to said management apparatus,

a management apparatus that manages the data providing apparatus, data distribution apparatus, and data processing apparatus and

has a settlement function for performing profit distribution processing for distributing the profit obtained accompanied with said data processing apparatus receiving distribution of said content data and purchasing and using said content data to related parties of said data providing apparatus and said data distribution apparatus based on said log data received from said second module and performing settlement based on the result of the related profit distribution processing and a right management function for registering said usage control policy data,

wherein said data providing apparatus sends said usage control policy data and requests to said management apparatus to certify legitimacy of said usage control policy data, and wherein said management apparatus registers and serves said usage control policy data from said data providing apparatus, and certifies the legitimacy of said usage control policy data in response to a request from said data providing apparatus

wherein said data providing apparatus performs mutual authentication with said data processing apparatus, encrypts said module using session key data obtained by said mutual authentication, and transmits said encrypted module to said data processing apparatus.

96. A data providing system as set forth in claim 95, wherein said management apparatus has

a first management apparatus having a settlement function and

a second management apparatus having a right management function.

97. A data providing system as set forth in claim 95, wherein said settlement is electronic settlement.

98. A data providing system comprising:

a data providing apparatus that provides content data and usage control, policy data indicating the handling of the related content data to said data distribution apparatus,

a data distribution apparatus that has a charging function for performing settlement processing by using settlement claim data distributed from said management apparatus and distributes said provided content data and said usage control policy data to said data processing apparatus,

a data processing apparatus that has a first module for communicating with said data distribution apparatus and a second module for determining at least one of a purchase mode and usage mode of said distributed content data based on said distributed usage control policy data and transmitting log data indicating the log of the related determined purchase mode and usage mode to said management apparatus,

a management apparatus that manages the data providing apparatus, data distribution apparatus, and data processing apparatus and

has a settlement claim data creation function for performing profit distribution processing for distributing the profit obtained accompanied with said data processing apparatus receiving distribution of said content data and purchasing and using said content data to related parties of said data providing apparatus and said data distribution apparatus based on said log data received from said second module, creating settlement claim data used when performing settlement based on the result of the related profit distribution processing, and supplying the same to said data distribution apparatus and a right management function for registering said usage control policy data,

wherein said data providing apparatus performs mutual authentication with said data processing apparatus, encrypts said module using session key data obtained by said mutual authentication, and transmits said encrypted module to said data processing apparatus,

wherein said data providing apparatus sends said usage control policy data and requests to said management apparatus to certify legitimacy of said usage control policy data, and wherein said management apparatus registers and serves said usage control policy data from said data providing apparatus, and certifies the legitimacy of said usage control policy data in response to a request from said data providing apparatus.

99. A data providing system comprising:

a data providing apparatus that has a charging function for performing settlement processing by using settlement claim data distributed from said management apparatus and provides content data and usage control policy data indicating the handling of the related content data to said data distribution apparatus,

a data distribution apparatus that distributes said provided content data and said usage control policy data to said data processing apparatus,

a data processing apparatus that has a first module for communicating with said data distribution apparatus and a second module for determining at least one of a purchase mode and usage mode of said distributed content data based on said distributed usage control policy data and transmitting log data indicating the log of the related determined purchase mode and usage mode to said management apparatus,

a management apparatus that manages the data providing apparatus, data distribution apparatus, and data processing apparatus and

has a settlement claim data creation function for performing profit distribution processing for distributing the profit obtained accompanied with said data processing apparatus receiving said distribution of said content data and purchasing and using said content data to related parties of said data providing apparatus and said data distribution apparatus based on said log data received from said second module, creating settlement claim data used when performing settlement based on the result of the related profit distribution processing, and distributing the same to said data providing apparatus and a right management function for registering said usage control policy data,

wherein said data providing apparatus performs mutual authentication with said data processing apparatus, encrypts said module using session key data obtained by said mutual authentication, and transmits said encrypted module to said data processing apparatus

wherein said data providing apparatus sends said usage control policy data and requests to said management apparatus to certify legitimacy of said usage control policy data, and wherein said management apparatus registers and serves said usage control policy data from said data providing apparatus, and certifies the legitimacy of said usage control policy data in response to a request from said data providing apparatus.

100. A data providing method using a data providing apparatus, data distribution apparatus, data processing apparatus, and management apparatus comprising the steps of:

providing content data and usage control policy data indicating the handling of the related content data from said data providing apparatus to said data distribution apparatus,

performing mutual authentication with said data processing apparatus, encrypting said module using session key data obtained by said mutual authentication, and transmitting said encrypted module to said data processing apparatus,

distributing said content data and said usage control policy data provided from said data distribution apparatus to said data processing apparatus to said data processing apparatus,

generating data distribution apparatus use purchase log data indicating the log of the purchase of said content data distributed from said data distribution apparatus and transmitting the same to said data distribution apparatus, determining at least one of a purchase mode and usage mode of said distributed content data based on said distributed usage control policy data, and transmitting management apparatus use log data indicating the log of the related determined purchase mode and usage mode to said management apparatus at said data processing apparatus,

distributing the profit obtained accompanied with said purchase and said usage of said content data in said data processing apparatus to related parties of said data providing apparatus and said data distribution apparatus based on said management apparatus use log data at said management apparatus,

registering and serving said usage control policy data from said data providing apparatus,

certifies the legitimacy of said usage control policy data in response to a request from said data providing apparatus, and

performing charging processing concerning the distribution of said content data based on the data distribution apparatus use purchase log data received from said data processing apparatus at said data distribution apparatus.

101. A data providing method using a data providing apparatus, data distribution apparatus, data processing apparatus, and management apparatus to provide content data, wherein

said data providing apparatus provides content data to said data distribution apparatus,

said data distribution apparatus distributes said provided content data to said data processing apparatus,

said data providing apparatus performs mutual authentication with said data processing apparatus, encrypts said module using session key data obtained by said mutual authentication, and transmits said encrypted module to said data processing apparatus, and

said data processing apparatus manages the operation of a data provision service by said data providing apparatus, data distribution apparatus, and data processing apparatus, and

said management apparatus manages operation of a data providing service by said data providing apparatus, said data distribution apparatus, and said data processing apparatus, registers and serves usage control policy data indicating the handling of the related content data from said data providing apparatus, and certifies the legitimacy of said usage control policy data in response to a request from said data providing apparatus, and wherein

the transmission of data among said data providing apparatus, said data distribution apparatus, said data processing apparatus, and said management apparatus is carried out by using mutual authentication using a public key encryption method, signature creation, signature verification, and encryption of data by a common key encryption method.

102. A data providing method using a data providing apparatus, data distribution apparatus, data processing apparatus, and management apparatus to provide content data, wherein

said data providing apparatus provides content data to said data distribution apparatus,

said data providing apparatus performs mutual authentication with said data processing apparatus, encrypts said module using session key data obtained by said mutual authentication, and transmits said encrypted module to said data processing apparatus,

said data distribution apparatus distributes said provided content data to said data processing apparatus,

said data processing apparatus uses said distributed content data, and

said management apparatus manages the operation of a data providing service by said data providing apparatus, said data distribution apparatus, and said data processing apparatus, generates signature data indicating that the related data is generated by itself by using its own secret key data when each of said data providing apparatus, said data distribution apparatus, and said data processing apparatus supplies the data to another apparatus, generates and manages public key certificate data of public key data corresponding to secret key data of said data providing apparatus, said data distribution apparatus, and said data processing apparatus when the legitimacy of the signature data corresponding to the data is verified by using the public key data of the related other apparatus when receiving the supply of the related data from the other apparatus, registers and serves usage control policy data indicating the handling of the related content data from said data providing apparatus, and certifies the legitimacy of said usage control policy data in response to a request from said data providing apparatus, and wherein

said data providing apparatus, said data distribution apparatus, and said data processing apparatus acquire said their own public key certificate data from said management apparatus before communicating with the other apparatus and transmit the related acquired public key certificate data to said other apparatus.

103. A data providing method using a data providing apparatus, data distribution apparatus, data processing apparatus, and management apparatus to provide content data, wherein

said data providing apparatus provides content data to said data distribution apparatus,

said data distribution apparatus distributes said provided content data to said data processing apparatus,

said data providing apparatus performs mutual authentication with said data processing apparatus, encrypts said module using session key data obtained by said mutual authentication, and transmits said encrypted module to said data processing apparatus,

said data processing apparatus uses said distributed content data, and

said management apparatus manages the operation of a data providing service by said data providing apparatus, said data distribution apparatus, and said data processing apparatus, generates the signature data indicating that the related data is generated by itself by using its own secret key data when each of said data providing apparatus, said data distribution apparatus, and said data processing apparatus supplies data to another apparatus, generates and manages public key certificate data of public key data corresponding to secret key data of said data providing apparatus, said data distribution apparatus, and said data processing apparatus when the legitimacy of the signature data corresponding to the data is verified by using the public key data of the related other apparatus when receiving the supply of the related data from the other apparatus, registers and serves usage control policy data indicating the handling of the related content data from said data providing apparatus, and certifies the legitimacy of said usage control policy data in response to a request from said data providing apparatus, and wherein

said data providing apparatus, said data distribution apparatus, and said data processing apparatus acquire their own public key certificate data from said management apparatus when communicating with the other apparatus and transmit the related acquired public key certificate data to said other apparatus at said communication.

104. A data providing method using a data providing apparatus, data distribution apparatus, data processing apparatus, and management apparatus to provide content data, wherein:

said data providing apparatus provides content data to said data distribution apparatus,

said data distribution apparatus distributes said provided content data to said data processing apparatus,

said data processing apparatus uses said distributed content data,

said data providing apparatus performs mutual authentication with said data processing apparatus, encrypts said module using session key data obtained by said mutual authentication, and transmits said encrypted module to said data processing apparatus, and

said management apparatus manages the operation of a data providing service by said data providing apparatus, said data distribution apparatus, and said data processing apparatus, generates signature data indicating that the related data is generated by itself by using its own secret key data when each of said data providing apparatus, said data distribution apparatus, and said data processing apparatus supplies data to another apparatus, generates and manages public key certificate data of public key data corresponding to secret key data of said data providing apparatus, said data distribution apparatus, and said data processing apparatus when the legitimacy of the signature data corresponding to the data is verified by using the public key data of the related other apparatus when receiving the supply of the related data from the other apparatus, generates public key certificate revocation list for specifying public key certificate data to be invalidated among said generated public key certificate data and thereby to restrict said communication or said distribution using public key certificate data specified by said public key certificate revocation list by said data providing apparatus, said data distribution apparatus, and said data processing apparatus, registers and serves usage control policy data indicating the handling of the related content data from said data providing apparatus, and certifies the legitimacy of said usage control policy data in response to a request from said data providing apparatus.

105. A data providing method as set forth in claim 104, wherein said management apparatus generates public key certificate revocation list specifying public key certificate data corresponding to said data providing apparatus, said data distribution apparatus, and said data processing apparatus used for illegal actions.

106. A data providing method using a data providing apparatus, data distribution apparatus, data processing apparatus, and management apparatus to provide content data, wherein:

said data providing apparatus provides content data to said data distribution apparatus,

said data distribution apparatus distributes said provided content data to said data processing apparatus,

said data providing apparatus performs mutual authentication with said data processing apparatus, encrypts said module using session key data obtained by said mutual authentication, and transmits said encrypted module to said data processing apparatus,

said management apparatus manages the operation of a data providing service by said data providing apparatus, said data distribution apparatus, and said data processing apparatus, generates signature data indicating that the related data is generated by an apparatus itself by using its own secret key data when said data providing apparatus supplies data to another apparatus, generates and manages public key certificate data of public key data corresponding to secret key data of said data providing apparatus for when another apparatus verifies the legitimacy of the related signature data by using the public key data corresponding to said secret key data, generates public key certificate revocation list for specifying public key certificate data to be invalidated among said generated public key certificate data, distributes the related public key certificate revocation list to said data processing apparatus, registers and serves usage control policy data indicating the handling of the related content data from said data providing apparatus, and certifies the legitimacy of said usage control policy data in response to a request from said data providing apparatus, and

said data processing apparatus verifies whether or not public key certificate data of said data providing apparatus providing said distributed content data is invalid based on said public key certificate revocation list distributed from said management apparatus and controls the usage of said distributed content data based on the result of the related verification.

107. A data providing method as set forth in claim 106, wherein said management apparatus directly distributes said public key certificate revocation list to said data processing apparatus.

108. A data providing method as set forth in claim 106, wherein said management apparatus distributes said public key certificate revocation list to said data processing apparatus through said data distribution apparatus, by broadcasting, or by an on-demand system.

109. A data providing method using a data providing apparatus, data distribution apparatus, data processing apparatus, and management apparatus to provide content data, wherein:

said management apparatus manages the operation of a data providing service by said data providing apparatus, said data distribution apparatus, and said data processing apparatus, generates signature data indicating that the related data is generated by an apparatus itself by using its own secret key data when said data providing apparatus supplies data to another apparatus, generates and manages public key certificate data of public key data corresponding to secret key data of said data providing apparatus for when another apparatus verifies the legitimacy of the related signature data by using the public key data corresponding to said secret key data, generates public key certificate revocation list for specifying public key certificate data to be invalidated among said generated public key certificate data, distributes the related public key certificate revocation list to said data distribution apparatus, registers and serves usage control policy data indicating the handling of the related content data from said data providing apparatus, and certifies the legitimacy of said usage control policy data in response to a request from said data providing apparatus,

said data providing apparatus performs mutual authentication with said data processing apparatus, encrypts said module using session key data obtained by said mutual authentication, and transmits said encrypted module to said data processing apparatus, and

said data distribution apparatus verifies whether or not public key certificate data of said data providing apparatus providing said provided content data is invalid based on said public key certificate revocation list distributed from said management apparatus, and controls the distribution of said provided content data to said data processing apparatus based on the result of the related verification.

110. A data providing method using a data providing apparatus, data distribution apparatus, data processing apparatus, and management apparatus to provide content data, wherein:

said management apparatus manages the operation of a data providing service by said data providing apparatus, said data distribution apparatus, and said data processing apparatus, generates signature data indicating that the related data is generated by an apparatus itself by using its own secret key data when said data distribution apparatus supplies data to another apparatus, generates and manages public key certificate data of public key data corresponding to secret key data of said data distribution apparatus for when another apparatus verifies the legitimacy of the related signature data by using the public key data corresponding to said secret key data, generates public key certificate revocation list for specifying public key certificate data to be invalidated among said generated public key certificate data, distributes the related public key certificate revocation list to said data providing apparatus, registers and serves usage control policy data indicating the handling of the related content data from said data providing apparatus, and certifies the legitimacy of said usage control policy data in response to a request from said data providing apparatus,

wherein said data providing apparatus performs mutual authentication with said data processing apparatus, encrypts said module using session key data obtained by said mutual authentication, and transmits said encrypted module to said data processing apparatus,

said data providing apparatus verifies whether or not public key certificate data of the data distribution apparatus of the destination of provision of the content data is invalid and controls the provision of said content data to said data distribution apparatus based on the result of the related verification,

said data distribution apparatus distributes said provided content data to said data processing apparatus, and

said data processing apparatus uses said distributed content data.

111. A data providing method using a data providing apparatus, data distribution apparatus, data processing apparatus, and management apparatus to provide content data, wherein:

said management apparatus manages the operation of a data providing service by said data providing apparatus, said data distribution apparatus, and said data processing apparatus, generates signature data indicating that the related data is generated by an apparatus itself by using its own secret key data when said data distribution apparatus supplies data to another apparatus, generates and manages public key certificate data of public key data corresponding to secret key data of said data distribution apparatus for when another apparatus verifies the legitimacy of the related signature data by using the public key data corresponding to said secret key data, generates public key certificate revocation list for specifying public key certificate data to be invalidated among said generated public key certificate data, distributes the related public key certificate revocation list to said data distribution apparatus, registers and serves usage control policy data indicating the handling of the related content data from said data providing apparatus, and certifies the legitimacy of said usage control policy data in response to a request from said data providing apparatus,

said data providing apparatus provides content data to said data distribution apparatus,

said data providing apparatus performs mutual authentication with said data processing apparatus, encrypts said module using session key data obtained by said mutual authentication, and transmits said encrypted module to said data processing apparatus,

said data distribution apparatus distributes said provided content data and said distributed public key certificate revocation list to said data processing apparatus, and

said data processing apparatus verifies whether or not public key certificate data of said data distribution apparatus distributing said distributed content data is invalid based on said distributed public key certificate revocation list and controls the usage of said distributed content data based on the result of the related verification.

112. A data providing method as set forth in claim 111, wherein said data distribution apparatus has a configuration which makes it difficult to tamper with said public key certificate revocation list distributed from said management apparatus.

113. A data providing method as set forth in claim 111, wherein

said management apparatus encrypts said public key certificate revocation list using distribution key data and distributes it to said data distribution apparatus and distributes said distribution key data to said data processing apparatus and

said data processing apparatus decrypts said distributed public key certificate revocation list using said distribution key data.

114. A data providing method using a data providing apparatus, data distribution apparatus, data processing apparatus, and management apparatus to provide content data, wherein:

said management apparatus manages the operation of a data providing service by said data providing apparatus, said data distribution apparatus, and said data processing apparatus, generates signature data indicating that the related data is generated by an apparatus itself by using its own secret key data when said data distribution apparatus supplies data to another apparatus, generates and manages public key certificate data of public key data corresponding to secret key data of said data distribution apparatus for when another apparatus verifies the legitimacy of the related signature data by using public key data corresponding to said secret key data, generates public key certificate revocation list for specifying public key certificate data to be invalidated among said generated public key certificate data, distributes the related public key certificate revocation list to said data processing apparatus, registers and serves usage control policy data indicating the handling of the related content data from said data providing apparatus, and certifies the legitimacy of said usage control policy data in response to a request from said data providing apparatus,

said data providing apparatus provides content data to said data distribution apparatus,

said data providing apparatus performs mutual authentication with said data processing apparatus, encrypts said module using session key data obtained by said mutual authentication, and transmits said encrypted module to said data processing apparatus,

said data distribution apparatus distributes said provided content data to said data processing apparatus, and

said data processing apparatus verifies whether or not public key certificate data of said data distribution apparatus distributing said distributed content data is invalid based on said distributed public key certificate revocation list and controls the usage of said distributed content data based on the result of the related verification.

115. A data providing method using a data providing apparatus, data distribution apparatus, data processing apparatus, and management apparatus to provide content data, wherein:

said management apparatus manages the operation of a data providing service by said data providing apparatus, said data distribution apparatus, and said data processing apparatus, generates signature data indicating that the related data is generated by an apparatus itself by using its own secret key data when said data distribution apparatus supplies data to another apparatus, generates and manages public key certificate data of public key data corresponding to secret key data of said data distribution apparatus for when another apparatus verifies the legitimacy of the related signature data by using public key data corresponding to said secret key data, generates public key certificate revocation list for specifying public key certificate data to be invalidated among said generated public key certificate data, distributes the related public key certificate revocation list to said data providing apparatus, registers and serves usage control policy data indicating the handling of the related content data from said data providing apparatus, and certifies the legitimacy of said usage control policy data in response to a request from said data providing apparatus,

said data providing apparatus performs mutual authentication with said data processing apparatus, encrypts said module using session key data obtained by said mutual authentication, and transmits said encrypted module to said data processing apparatus,

said data providing apparatus provides content data and said public key certificate revocation list to said data distribution apparatus,

said data distribution apparatus distributes said provided content data and public key certificate revocation list to said data processing apparatus, and

said data processing apparatus verifies whether or not public key certificate data of said data distribution apparatus distributing said distributed content data is invalid based on said distributed public key certificate revocation list and controls the usage of said distributed content data based on the result of the related verification.

116. A data providing method using a data providing apparatus, data distribution apparatus, a plurality of data processing apparatuses, and a management apparatus to provide content data, wherein:

said management apparatus manages the operation of a data providing service by said data providing apparatus, said data distribution apparatus, and said data processing apparatuses, generates signature data indicating that the related data is generated by an apparatus itself by using its own secret key data when a data processing apparatus supplies data to another apparatus, generates and manages public key certificate data of public key data corresponding to secret key data of said data processing apparatuses for when another apparatus verifies the legitimacy of the related signature data by using the public key data corresponding to said secret key data, generates public key certificate revocation list for specifying public key certificate data to be invalidated among said generated public key certificate data, distributes the related public key certificate revocation list to said data providing apparatus, registers and serves usage control policy data indicating the handling of the related content data from said data providing apparatus, and certifies the legitimacy of said usage control policy data in response to a request from said data providing apparatus,

said data providing apparatus performs mutual authentication with said data processing apparatus, encrypts said module using session key data obtained by said mutual authentication, and transmits said encrypted module to said data processing apparatus,

said data providing apparatus provides content data and said public key certificate revocation list to said data distribution apparatus,

said data distribution apparatus distributes said provided content data and public key certificate revocation list to said data processing apparatuses, and

said data processing apparatuses verify whether or not public key certificate data of said other data processing apparatuses are invalid based on the public key certificate revocation list distributed from said data distribution apparatus and control the communication with other data processing apparatuses based on the result of the related verification.

117. A data providing method as set forth in claim 116, wherein said data distribution apparatus has a configuration which makes it difficult to tamper with said public key certificate revocation list distributed from said management apparatus.

118. A data providing method as set forth in claim 116, wherein

said management apparatus encrypts said public key certificate revocation list using distribution key data and distributes it to said data distribution apparatus and distributes said distribution key data to said data processing apparatus and

said data processing apparatus decrypts said distributed public key certificate revocation list using said distribution key data.

119. A data providing method using a data providing apparatus, data distribution apparatus, a plurality of data processing apparatuses, and a management apparatus to provide content data, wherein:

said management apparatus manages the operation of a data providing service by said data providing apparatus, said data distribution apparatus, and said data processing apparatuses, generates signature data indicating that the related data is generated by an apparatus itself by using its own secret key data when a data processing apparatus supplies data to another apparatus, generates and manages public key certificate data of public key data corresponding to secret key data of said data processing apparatuses for when another apparatus verifies the legitimacy of the related signature data by using the public key data corresponding to said secret key data, generates public key certificate revocation list for specifying public key certificate data to be invalidated among said generated public key certificate data, distributes the related public key certificate revocation list to said data providing apparatus, registers and serves usage control policy data indicating the handling of the related content data from said data providing apparatus, and certifies the legitimacy of said usage control policy data in response to a request from said data providing apparatus,

said data providing apparatus performs mutual authentication with said data processing apparatus, encrypts said module using session key data obtained by said mutual authentication, and transmits said encrypted module to said data processing apparatus,

said data providing apparatus provides content data to said data distribution apparatus,

said data distribution apparatus distributes said provided content data and said distributed public key certificate revocation list to said data processing apparatuses, and

said data processing apparatuses verify whether or not public key certificate data of other data processing apparatuses are invalid based on the public key certificate revocation list distributed from said data distribution apparatus, and control the communication with other data processing apparatuses based on the result of the related verification.

120. A data providing method as set forth in claim 119, wherein said data distribution apparatus has a configuration which makes it difficult to tamper with said public key certificate revocation list distributed from said management apparatus.

121. A data providing method as set forth in claim 119, wherein

said management apparatus encrypts said public key certificate revocation list using distribution key data and distributes it to said data distribution apparatus and distributes said distribution key data to said data processing apparatus and

said data processing apparatus decrypts said distributed public key certificate revocation list using said distribution key data.

122. A data providing method using a data providing apparatus, data distribution apparatus, a plurality of data processing apparatuses, and a management apparatus to provide content data, wherein:

a data processing apparatus supplies registration data, indicating an already registered data processing apparatus connected in a predetermined network to which is connected, to said management apparatus, refers to a revocation flag in registration data supplied from said management apparatus and restricts communication with another data processing apparatus having public key certificate data indicated as invalid by the revocation flag,

said management apparatus manages the operation of a data providing service by said data providing apparatus, said data distribution apparatus, and said data processing apparatuses, generates and manages public key certificate data of public key data corresponding to secret key data for when a data processing apparatus generates signature data indicating legitimacy of data using its own secret key data when supplying data to another apparatus, generates public key certificate revocation list for specifying public key certificate data to be invalidated among said generated public key certificate data, stores the related public key certificate revocation list, generates new registration data by setting said revocation flag in said registration data supplied from data processing apparatuses based on the related public key certificate revocation list, distributes the related generated registration data to said data processing apparatuses, registers and serves usage control policy data indicating the handling of the related content data from said data providing apparatus, and certifies the legitimacy of said usage control policy data in response to a request from said data providing apparatus,

said data providing apparatus provides content data to said data distribution apparatus,

said data providing apparatus performs mutual authentication with said data processing apparatus, encrypts said module using session key data obtained by said mutual authentication, and transmits said encrypted module to said data processing apparatus, and

said data distribution apparatus distributes said provided content data to said data processing apparatuses.

123. A data providing method using a data providing apparatus, data distribution apparatus, a plurality of data processing apparatuses, and a management apparatus to provide content data, wherein:

said management apparatus manages the operation of a data providing service by said data providing apparatus, said data distribution apparatus, and said data processing apparatuses, generates and manages public key certificate data of public key data corresponding to said secret key data for when a data processing apparatus generates signature data indicating the legitimacy of data by using its own secret key data when supplying the related data to another apparatus, generates public key certificate revocation list for specifying public key certificate data to be invalidated among said generated public key certificate data, distributes the related public key certificate revocation list to said data providing apparatus, registers and serves usage control policy data indicating the handling of the related content data from said data providing apparatus, and certifies the legitimacy of said usage control policy data in response to a request from said data providing apparatus,

said data providing apparatus performs mutual authentication with said data processing apparatus, encrypts said module using session key data obtained by said mutual authentication, and transmits said encrypted module to said data processing apparatus,

said data providing apparatus provides content data and said public key certificate revocation list to said data distribution apparatus,

said data distribution apparatus distributes said provided content data and said public key certificate revocation list to said data processing apparatuses, and

a data processing apparatus sets a revocation flag in registration data indicating an already registered data processing apparatus connected in a predetermined network to which it is connected based on said distributed public key certificate revocation list and restricts communication with another data processing apparatus having public key certificate data indicated as invalid by the related revocation flag.

124. A data providing method using a data providing apparatus, data distribution apparatus, a plurality of data processing apparatuses, and a management apparatus to provide content data, wherein:

said management apparatus manages the operation of a data providing service by said data providing apparatus, said data distribution apparatus, and said data processing apparatuses, generates and manages public key certificate data of public key data corresponding to secret key data for when a data processing apparatus generates signature data indicating the legitimacy of the data by using its own secret key data when supplying the related data to another apparatus, generates public key certificate revocation list for specifying public key certificate data to be invalidated among said generated public key certificate data, distributes the related public key certificate revocation list to said data distribution apparatus, registers and serves usage control policy data indicating the handling of the related content data from said data providing apparatus, and certifies the legitimacy of said usage control policy data in response to a request from said data providing apparatus,

said data providing apparatus performs mutual authentication with said data processing apparatus, encrypts said module using session key data obtained by said mutual authentication, and transmits said encrypted module to said data processing apparatus,

said data providing apparatus provides content data to said data distribution apparatus,

said data distribution apparatus distributes said provided content data and said public key certificate revocation list to said data processing apparatuses, and

a data processing apparatus sets a revocation flag in registration data indicating an already registered data processing apparatus connected in a predetermined network to which it is connected based on said distributed public key certificate revocation list and restricts communication with another data processing apparatus having public key certificate data indicated as invalid by the related revocation flag.

125. A data providing method using a data providing apparatus, data distribution apparatus, data processing apparatus, and management apparatus to provide content data, wherein:

said data providing apparatus provides content data and usage control policy data indicating the handling of the related content data to said data distribution apparatus,

said data providing apparatus performs mutual authentication with said data processing apparatus, encrypts said module using session key data obtained by said mutual authentication, and transmits said encrypted module to said data processing apparatus,

said data distribution apparatus distributes said provided content data and said usage control policy data to said data processing apparatus,

said data processing apparatus has a first module for communicating with said data distribution apparatus and a second module for determining at least one of a purchase mode and usage mode of said distributed content data based on said distributed usage control policy data and transmitting log data indicating the log of the related determined purchase mode and usage mode to said management apparatus,

said management apparatus manages the data providing apparatus, data distribution apparatus, and data processing apparatus, registers and serves usage control policy data indicating the handling of the related content data from said data providing apparatus, and certifies the legitimacy of said usage control policy data in response to a request from said data providing apparatus, and

has a settlement function for performing profit distribution processing for distributing the profit obtained accompanied with said data processing apparatus receiving distribution of said content data and purchasing and using said content data to related parties of said data providing apparatus and said data distribution apparatus based on said log data received from said second module and performing settlement based on the result of the related profit distribution processing and a right management function for registering said usage control policy data.