Systems and methods for content distribution using one or more distribution keys

[0001] The present invention relates to an information sending system, an information sending apparatus and its method, an information receiving apparatus and its method, a recording and reproducing system, a recording and reproducing apparatus and its method, a reproducing apparatus and its method, a data storage apparatus and its method, a data management system, a management apparatus, a data management method, a data management and migration method, an information provision system, an information regulating apparatus and its method, a data utilization method, an information provision apparatus and its method, an information recording apparatus, a list sending apparatus and its method and a program storage medium, and suitably applies, for instance, to an information sending system wherein a contents holder or seller can safely distribute the contents to contents users.

[0002] Conventionally, there is a system wherein information (contents) such as music is encrypted and sent to an information processing apparatus of a user having executed a predetermined agreement so that the user may decrypt and utilize the contents on the information processing apparatus.

[0003] For instance, as shown in FIG. 116, a case where two contents sending apparatuses and one contents receiving apparatus are provided will be described.

[0004] First contents sending apparatus 600 comprises data encryption section 601, data encryption section 602, content key generation section 603 and tamper resistant memory 604. Moreover, the tamper resistant memory referred to here may be any such memory as will not have its data easily read by a third party, and no hardware-wise limitation is required in particular (for instance, it may be a hard disk placed in an entry-controlled room or a hard disk of a password-controlled personal computer). Tamper resistant memory 604 stores distribution key K_d necessary to encrypt content key K_co supplied in advance from an electronic distribution service center (not illustrated).

[0005] In order to generate data to be delivered to contents receiving apparatus 620, first contents sending apparatus 600 generates content key K_co1 by using content key generation section 603, and encrypts contents by using this key at data encryption section 601. Also, content key K_co1 is encrypted by using distribution key K_d at data encryption section 602. These encrypted contents and content key K_co1 are sent to contents receiving apparatus 620.

[0006] Incidentally, like contents sending apparatus 600, second contents sending apparatus 610 comprises data encryption section 611, data encryption section 612, content key generation section 613 and tamper resistant memory 614, and generates content key K_co2 at content key generation section 613, and encrypts contents by using this key at data encryption section 611. Also, data encryption section 612 encrypts content key K_co2 by using distribution key K_d supplied from the electronic distribution service center (not illustrated). Thus, second contents sending apparatus 610 sends the encrypted contents and encrypted content key K_co2 to contents receiving apparatus 620.

[0007] Contents receiving apparatus 620 comprises sending and receiving section 621, upper controller 622, encryption processing section 623, memory 624, data decryption section 625, data decryption section 626 and tamper resistant memory 627. Moreover, as there are such an indefinite number of contents users that it cannot be grasped how they will handle the apparatuses, the tamper resistant memory referred to here requires its internal data to be protected hardware-wise, and thus encryption processing section 623 is a semiconductor chip of a structure difficult to access from outside and has a multilayered structure wherein the tamper resistant memory inside it has characteristics making it difficult to illicitly read data from outside such as being sandwiched between dummy layers like aluminum layers and having a narrow range of operating voltage or frequency. And tamper resistant memory 627 stores distribution key K_d supplied in advance from the electronic distribution service center (not illustrated).

[0008] Incidentally, while tamper resistant memories 604, 614 of first and second contents sending apparatuses 600 and 610 are the memories accessible from outside, methods of accessing them are limited. It may be password or entry control. On the other hand, as for tamper resistant memory 627 of contents receiving apparatus 620, the memory itself has a structure not to be illicitly accessed from outside, and there is limited or no method of reading its internal data from outside by formal means for access. Moreover, while it is impossible to read internal data of tamper resistant memory 627 from outside, there may be a method of access only capable of changing data from outside if former key data or the like is used. Also, in encryption processing section 623, it is possible to access a memory and read predetermined data, but it is impossible to read internal memory from outside.

[0009] Contents and content keys K_co1 and K_co2 sent from first or second contents sender 600 or 610 are received by sending and receiving section 621 and delivered to upper controller 622. Upper controller 622 stores such data in memory 624 once, and in the case of utilizing the contents, it delivers content key K_co and the contents to encryption processing section 623. On receiving them, encryption processing section 623 decrypts them by using distribution key K_d stored in tamper resistant memory 627 in advance in data decryption section 625, and then decrypts them by using content key K_co in data decryption section 626, and utilizes the contents. At this time, there are cases where it involves accounting.

[0010] Incidentally, in an information processing system shown in FIG. 116, there was a problem that a method had yet to be established for preventing the contents from being illicitly utilized such as providing illegal contents to the system or illicitly benefiting a third party due to accounting involved in use of contents.

[0011] Also, in such an information provision system, there are cases where recording and reproducing apparatus 630 shown in FIG. 117 is provided, and such recording and reproducing apparatus 630 has, for instance, record medium 640 consisting of MD (Mini Disk: a trademark) provided in a removable manner.

[0012] In this case, recording and reproducing apparatus 630 comprises sending and receiving section 631, control section 632, encryption processing section 633, expansion section 634 and external memory control section 635, and it stores distribution key K_d for decrypting content key K_co supplied in advance from an electronic distribution service center (not illustrated) to encryption processing section 633 and also holds save key K_save unique to encryption processing section 633.

[0013] And recording and reproducing apparatus 630 has encrypted contents and content key K_co sent from first or second contents sending apparatus 600 or 610 received by sending and receiving section 631, and sends out the received encrypted contents and content key K_co to control section 632. Control section 632 holds the encrypted contents in record medium 640 via external memory control section 635, and sends out encrypted content key K_co to encryption processing section 633.

[0014] Thus, encryption processing section 633 decrypts encrypted content key K_co by using distribution key K_d, and then decrypts content key K_co by using save key K_save and sends out content key K_co encrypted by the save key K_save to control section 632. Thus, control section 632 has content key K_co encrypted by save key K_save held by record medium 640 via external memory control section 635.

[0015] Moreover, in the case of utilizing contents, in recording and reproducing apparatus 630, control section 322 reads encrypted contents and content key K_co from record medium 640 so as to send out the encrypted contents to expansion section 634 and also send out encrypted content key K_co to encryption processing section 633. Thus, encryption processing section 633 decrypts encrypted content key K_co by the save key K_save and sends out acquired content key K_co to expansion section 634. Thus, expansion section 634 decrypts encrypted contents by using content key K_co and is accordingly capable of using the contents.

[0016] In such recording and reproducing apparatus 630, however, even if record medium 640 is loaded, for instance, on a recording and reproducing apparatus other than recording and reproducing apparatus other than recording and reproducing apparatus 630 used for recording contents by holding content key K_co encrypted by save key K_save unique to encryption processing section 633 on record medium 640 and having the save key K_save held by encryption processing section 633, the contents recorded on record medium 640 cannot be reproduced on the other recording and reproducing apparatus since it does not hold the save key K_save used for recording the content key K_co.

[0017] Therefore, such record medium 640 had a problem that its versatility is remarkably low in spite of being provided in a removable manner to recording and reproducing apparatus 630.

[0018] In addition to this, recording and reproducing apparatus 630 had a problem that, even if a user wanted to utilize the contents recorded on the record medium by recording them on another apparatus or another record medium, they could not be easily utilized since the record medium was provided in a removable manner.

[0019] Furthermore, the information processing system had a problem that, even in contents receiving apparatus 620, a method had yet to be established for preventing received contents from being illicitly utilized.

[0020] Moreover, contents receiving apparatus 620 to be connected to first and second contents sending apparatuses 600 and 610 had a problem that, as it is assumed to be owned by a user, contents cannot be easily provided for anyone else not in possession of the contents receiving apparatus 620.

[0021] In addition, the information processing system had a problem that, in the case where a user uses contents receiving apparatus 620 to record a plurality of favorite contents on a predetermined record medium and creates an album, the favorite contents had to be read and recorded one by one in the record medium by using contents receiving apparatus 620, which recording work was complicated.

[0022] Furthermore, the information provision system had a problem that, in the case where any contents of which transmission was stopped due to occurrence of a defect (occurrence of an error in data), for instance, was sent by mistake from first and second contents sending apparatuses 600 and 610 to contents receiving apparatus 620, it was difficult to prevent utilization of the contents on the contents receiving apparatus 620.

[0023] The present invention is implemented in consideration of the above points, and proposes an information sending system, an information sending apparatus, an information receiving apparatus, an information sending method, an information receiving method and a program storage medium to prevent contents data from being illicitly utilized.

[0024] To find a solution to such a challenge, the present invention provides, in an information sending system for sending predetermined contents data from an information sending apparatus to an information receiving apparatus, the means for holding identification information to identify an information sending apparatus encrypted by a distribution key unique to the information receiving apparatus, adding identification information to contents data in order to make a comparison with identification information encrypted by a distribution key, and sending identification information encrypted by a distribution key together with contents data with identification information added in an information sending apparatus, and provides the means for holding a distribution key, receiving contents data with identification information added and identification information encrypted by a distribution key, decrypting by a distribution key identification information encrypted by the distribution key, and comparing identification information added to contents data with decrypted identification information in an information receiving apparatus.

[0025] Thus, it is possible to easily and securely determine whether or not the contents data can be properly utilized from results of comparing identification information added to contents data with decrypted identification information, and an information sending system can be implemented, which is capable of preventing the contents data from being illicitly utilized.

[0026] Also, the present invention provides, in an information sending apparatus sending predetermined contents data to an information receiving apparatus, the means for holding identification information to identify an information sending apparatus encrypted by a distribution key unique to the information receiving apparatus, adding identification information to contents data in order to make a comparison with identification information encrypted by a distribution key, and sending identification information encrypted by a distribution key together with contents data with identification information added.

[0027] Therefore, it is possible to provide a transmission subject with identification information added to contents data and encrypted identification information to be compared in order to determine whether or not the contents data can be properly utilized, and thus an information sending apparatus and a program storage medium capable of preventing the contents data from being illicitly utilized can be implemented.

[0028] Furthermore, the present invention provides, in an information receiving apparatus for receiving predetermined contents data sent from an information sending apparatus, the means for holding a predetermined distribution key unique to the information receiving apparatus, receiving contents data sent from an information sending apparatus with identification information added to identify the information sending apparatus and identification information encrypted by a distribution key, decrypting by a distribution key the identification information encrypted by the distribution key, and comparing the identification information added to the contents data with the decrypted identification information.

[0029] Thus, it is possible to easily and securely determine whether or not the contents data can be properly utilized from results of comparing identification information added to contents data with decrypted identification information, and accordingly an information receiving system, an information receiving method and a program storage medium capable of preventing the contents data from being illicitly utilized can be implemented.

[0030] In addition, the present invention provides, in an information sending system for sending predetermined contents data from an information sending apparatus to an information receiving apparatus, the means for sending, together with contents data, data of the maximum number of times of possible resending predefined to the contents data in an information sending apparatus, and provides the means for receiving, together with contents data, data of maximum number of times, generating data of the remaining number of times of possible resending of contents data based on data of the maximum number of times, and resending, that is, sending together with contents data, data of the remaining number of times in an information receiving apparatus.

[0031] Thus, it is possible to prevent contents data from being resent more often than the predefined maximum number of times of possible resending, and accordingly an information sending system capable of preventing the contents data from being illicitly utilized can be implemented.

[0032] Moreover, the present invention provides, in an information sending apparatus for sending predetermined contents data to an information receiving apparatus, the means for sending to an information receiving apparatus, together with contents data, data of the maximum number of times of possible resending predefined to the contents data.

[0033] Therefore, it is possible to notify a transmission subject of the predefined maximum number of times of possible resending for contents data, and accordingly an information sending apparatus capable of preventing the contents data from being illicitly utilized can be implemented.

[0034] Furthermore, the present invention provides, in an information receiving apparatus for receiving predetermined contents data sent from an information sending apparatus, the means for receiving contents data and data of maximum number of times of possible resending predefined to the contents data sent from the information sending apparatus, generating data of the remaining number of times of possible resending of contents data based on data of the maximum number of times, and resending, that is, sending together with contents data, data of the remaining number of times.

[0035] Thus, it is possible to prevent contents data from being resent more often than the predefined maximum number of times of possible resending, and accordingly an information receiving apparatus, an information receiving method and a program storage medium capable of preventing the contents data from being illicitly utilized can be implemented.

[0036] Moreover, the present invention provides, in an information sending method for sending predetermined contents data from an information sending apparatus to an information receiving apparatus, the steps of adding identification information to identify the information sending apparatus to contents data by the information sending apparatus, sending contents data with identification information added and identification information to identify the information sending apparatus encrypted by a distribution key unique to the information receiving apparatus by the information sending apparatus, receiving contents data with identification information added and identification information encrypted by a distribution key by the information receiving apparatus, decrypting by a distribution key identification information encrypted by the distribution key by the information receiving apparatus, and comparing identification information added to contents data with decrypted identification information by the information receiving apparatus.

[0037] Thus, it is possible to easily and securely determine whether or not the contents data can be properly utilized from results of comparing identification information added to contents data with decrypted identification information, and accordingly an information sending method capable of preventing the contents data from being illicitly utilized can be implemented.

[0038] Moreover, the present invention provides, in an information sending method for sending predetermined contents data from an information sending apparatus to an information receiving apparatus, the steps of sending, together with contents data, data of the predefined maximum number of times of possible resending to the contents data by the information sending apparatus, receiving, together with contents data, data of maximum number of times by the information receiving apparatus, generating data of the remaining number of times of possible resending of contents data based on data of the maximum number of times by the information receiving apparatus, and resending, that is, sending together with contents data, data of the remaining number of times by the information receiving apparatus.

[0039] Thus, it is possible to prevent contents data from being resent more often than the predefined maximum number of times of possible resending, and accordingly an information sending method and a program storage medium capable of preventing the contents data from being illicitly utilized can be implemented.

[0040] Moreover, the present invention is implemented in consideration of the above points, and is intended to propose a recording and reproducing system, a recording and reproducing apparatus, a reproducing apparatus, a data storage apparatus, a recording and reproducing method, a reproducing method and a program storage medium capable of markedly improving versatility of data storage apparatuses.

[0041] To find a solution to such a challenge, the present invention provides, in a recording and reproducing system for recording and reproducing predetermined contents data sent from an information sending apparatus on a removable data storage apparatus by a recording and reproducing apparatus, the means for encrypting contents data by a predetermined content key, and sending a content key and the contents data encrypted by the content key in an information sending apparatus, and provides, in the recording and reproducing apparatus, the means for receiving a content key and the contents data encrypted by the content key sent from the information sending apparatus, sending out the received content key and the contents data encrypted by the content key to a data storage apparatus and having them recorded thereby or having the content key and the contents data encrypted by the content key reproduced from the data storage apparatus to read them, and provides, in the data storage apparatus, the means for holding a predetermined record medium and a predetermined save key, encrypting a content key by a save key, recording a content key encrypted by a save key and the contents data encrypted by the content key on a record medium or reproducing a content key encrypted by a save key and the contents data encrypted by the content key from the record medium, and decrypting the content key encrypted by a save key by the save key.

[0042] Thus, to the extent that it is not necessary to hold a save key on the recording and reproducing apparatus side, contents data can be reproduced from a data storage apparatus by a recording and reproducing apparatus other than one recording contents data on the data storage apparatus, and thus a recording and reproducing system capable of markedly improving versatility of data storage apparatuses can be implemented.

[0043] Also, the present invention provides, in a recording and reproducing apparatus for which a data storage apparatus having a predetermined record medium is provided in a removable manner, the means for controlling recording and reproducing for sending out contents data encrypted by a predetermined content key and the content key to a data storage apparatus, encrypting the content key by using a predetermined save key unique to the data storage apparatus, having the content key encrypted by the save key and the contents data encrypted by content key recorded on a record medium, and also having the content key encrypted by the save key and the contents data encrypted by content key reproduced from the record medium, decrypting the content key encrypted by a save key by using the save key, and reading the acquired content key and the contents data encrypted by the content key from the data storage apparatus.

[0044] Thus, to the extent that it is not necessary to hold a save key, the contents data can be reproduced from a data storage apparatus recording contents data on another recording and reproducing apparatus, and thus a recording and reproducing apparatus, a recording and reproducing method and a program storage medium capable of markedly improving versatility of data storage apparatuses can be implemented.

[0045] In addition, the present invention provides, in a reproducing apparatus for which a data storage apparatus having a predetermined record medium is provided in a removable manner, the means for controlling reproducing for having contents data encrypted by a predetermined content key recorded in advance on a record medium of the data storage apparatus and a content key encrypted by a predetermined save key unique to the data storage apparatus reproduced, decrypting the content key encrypted by a save key by using the save key, and reading the acquired content key and the contents data encrypted by the content key from the data storage apparatus.

[0046] Thus, to the extent that it is not necessary to hold a save key, the contents data can be reproduced from a data storage apparatus on any recording and reproducing apparatus, and thus a reproducing apparatus, a reproducing method and a program storage medium capable of markedly improving versatility of data storage apparatuses can be implemented.

[0047] Moreover, the present invention provides, in a data storage apparatus provided in a removable manner on a recording and/or reproducing apparatus for recording and/or reproducing predetermined data under control of the recording and/or reproducing apparatus, the means for holding a predetermined record medium and a predetermined save key, communicating, that is, sending and receiving predetermined contents data encrypted by a predetermined content key and the content key between itself and a recording and/or reproducing apparatus, encrypting a content key by a save key under control of the recording and/or reproducing apparatus, recording the content key encrypted by a save key and contents data encrypted by the content key on a record medium or reproducing the content key encrypted by a save key and contents data encrypted by the content key from the record medium under control of the recording and/or reproducing apparatus, and decrypting the content key encrypted by a save key by using the save key under control of the recording and/or reproducing apparatus.

[0048] Thus, even if a recording and reproducing apparatus does not hold a save key, the contents data can be recorded or reproduced, and thus a data storage apparatus and a program storage medium capable of markedly improving versatility can be implemented.

[0049] Furthermore, the present invention is implemented in consideration of the above points, and is intended to propose a data management system, a management apparatus, a data storage apparatus and a data management method, a data management and migration method and a program storage medium, which allow contents data recorded on a data storage apparatus to be easily utilized by various apparatuses.

[0050] To find a solution to such a challenge, the present invention provides, in a data management system, a predetermined data storage apparatus, a recording apparatus for recording predetermined contents data on a data storage apparatus, a management apparatus for capturing contents data stored in a data storage apparatus and managing movement of the captured contents data to various apparatuses in place of the data storage apparatus to be connected to various apparatuses.

[0051] Therefore, it is possible to easily move the contents data recorded on a data storage apparatus to various apparatuses under management of a management apparatus, and thus a data management system that allow contents data recorded on a data storage apparatus to be easily utilized by various apparatuses can be implemented.

[0052] Also, the present invention captures predetermined contents data recorded in a data storage apparatus, and manages movement of the captured contents data to various apparatuses in place of the data storage apparatus in a management apparatus connecting various apparatuses with a predetermined data storage apparatus.

[0053] Thus, it is possible to manage contents data recorded in a data storage apparatus in place of the data storage apparatus and easily move the contents data to various apparatuses, and thus a management apparatus, a data management method and a program storage medium that allow contents data recorded on a data storage apparatus to be easily utilized by various apparatuses can be implemented.

[0054] Furthermore, the present invention manages, under control of a predetermined recording apparatus, movement of contents data to various apparatuses in a data storage apparatus for recording predetermined contents data, and when the various apparatuses are connected to a predetermined management apparatus to be connected to, it moves contents data to the management apparatus.

[0055] Therefore, it is possible to rely on a management apparatus for management of recorded contents data and easily move the contents data to various apparatuses via the management apparatus, and thus a data storage apparatus, a data management and migration method and a program storage medium that allow contents data recorded on a data storage apparatus to be easily utilized by various apparatuses can be implemented.

[0056] Moreover, the present invention provides, in a data management method, the steps of recording predetermined contents data on a predetermined data storage apparatus by a predetermined recording apparatus, and managing, that is, capturing contents data stored in a data storage apparatus and managing movement of the captured contents data to various apparatuses in place of the data storage apparatus by a management apparatus to be connected to various apparatuses.

[0057] Thus, it is possible to easily move the contents data recorded on a data storage apparatus to various apparatuses under management of a management apparatus, and thus a data management method that allows contents data recorded on a data storage apparatus to be easily utilized by various apparatuses can be implemented.

[0058] Furthermore, the present invention is implemented in consideration of the above points, and is intended to propose an information provision system, an information regulating apparatus, an information receiving apparatus, an information provision method, an information regulating method, a data utilization method and a program storage medium capable of preventing contents data from being illicitly utilized.

[0059] To find a solution to such a challenge, the present invention provides, in an information provision system, an information receiving apparatus for receiving predetermined contents data that is sent and adding a signature to and sending utilization permission data showing the received contents data, an information regulating apparatus for verifying a signature on utilization permission data to determine whether the utilization permission data is illegal data and if determined so, prohibiting the information receiving apparatus from utilizing the contents data.

[0060] Thus, an information provision system can be implemented, which is capable of determining by an information regulating apparatus in advance whether the contents data received by an information receiving apparatus will be illicitly utilized and preventing the contents data from being illicitly utilized.

[0061] Also, in the present invention, an information regulating apparatus connected online to a predetermined information receiving apparatus shows predetermined contents data received from the information receiving apparatus and has utilization permission data with a signature added sent so as to verify the signature on the utilization permission data and determine whether the utilization permission data is illegal data and if determined so, the information receiving apparatus is prohibited from utilizing the contents data.

[0062] Thus, an information regulating apparatus, an information regulating method and a program storage medium capable of, by determining in advance whether the contents data received by the information receiving apparatus will be illicitly used, preventing the contents data from being illicitly utilized can be implemented.

[0063] Moreover, in the present invention, an information receiving apparatus connected online to a predetermined information regulating apparatus receives predetermined contents data that is sent and adds to utilization permission data showing the received contents data a signature capable of determining whether the contents data shown by the utilization permission data is tampered to other contents data and then sends it to the information regulating apparatus.

[0064] Thus, an information receiving apparatus, a data utilization method and a program storage medium capable of, by having an information regulating apparatus determine in advance whether received contents data will be illicitly utilized, preventing the contents data from being illicitly utilized can be implemented.

[0065] Furthermore, the present invention provides, in an information provision method, the steps of sending, that is, receiving predetermined contents data and adding a signature to and sending utilization permission data showing the received contents data by an information receiving apparatus, and prohibiting utilization, that is, verifying a signature on utilization permission data to determine whether the utilization permission data is illegal data and if determined so, prohibiting the information receiving apparatus from utilizing the contents data by information regulating apparatus.

[0066] Thus, an information provision method can be implemented, which is capable of determining by an information regulating apparatus in advance whether the contents data received by an information receiving apparatus will be illicitly utilized and preventing the contents data from being illicitly utilized.

[0067] In addition, the present invention is implemented in consideration of the above points, and is intended to propose an information provision system, an information provision apparatus, a data storage apparatus, an information provision method, a data store method and a program storage medium capable of easily providing contents data.

[0068] To find a solution to such a challenge, the present invention provides, in an information provision system providing an information provision apparatus with predetermined contents data sent from an information sending apparatus, the means for encrypting contents data by a predetermined content key, and sending a content key and contents data encrypted by the content key in the information sending apparatus, and provides the means for receiving the content key and contents data encrypted by the content key sent from the information sending apparatus, decrypting by the content key the contents data encrypted by the content key, inserting a digital watermark, that is, inserting by a digital watermark predetermined information into the contents data decrypted by the content key, and recording the contents data with the information inserted on a removable record medium in the information provision apparatus.

[0069] Thus, it is possible, even if an information user does not have a contents data receiving apparatus, to record contents data on a record medium of the information user with ensured security, and accordingly an information provision system capable of easily providing contents data can be implemented.

[0070] Moreover, the present invention provides, in an information provision apparatus providing predetermined contents data sent from an information sending apparatus, the means for receiving contents data encrypted by a predetermined content key and the content key sent from the information sending apparatus, decrypting by the content key the contents data encrypted by the content key, inserting a digital watermark, that is, inserting by a digital watermark predetermined information into the contents data decrypted by the content key, and recording the contents data with the information inserted on a removable record medium.

[0071] Thus, it is possible, even if an information user does not have a contents data receiving apparatus, to record contents data on a record medium of the information user with ensured security, and accordingly an information provision apparatus, an information provision method and a program storage medium capable of easily providing contents data can be implemented.

[0072] Furthermore, the present invention provides, in an information provision apparatus providing predetermined contents data sent from an information sending apparatus, the means for creating license conditions information prescribing conditions for using contents data based on handling policies prescribing conditions for use of a content key sent from the information sending apparatus together with a content key and the contents data encrypted by the content key, and storing, that is, sending the handling policies and the license conditions information together with the content key and the contents data encrypted by the content key to a predetermined removable data storage apparatus and storing them thereon.

[0073] Thus, it is possible, even if an information user does not have a contents data receiving apparatus, to record contents data on a data storage apparatus of the information user with ensured security, and accordingly an information provision apparatus, an information provision method and a program storage medium capable of easily providing contents data can be implemented.

[0074] In addition, the present invention provides, in an data storage apparatus storing predetermined contents data sent from an information provision apparatus, the means for receiving a content key and contents data encrypted by the content key, handling policies prescribing conditions for using the content key, and license conditions information prescribing conditions for using the contents data created as necessary based on the handling policies sent from a predetermined record medium and an information provision apparatus, and recording the content key, the contents data encrypted by the content key, the handling policies and the license conditions information on a record medium.

[0075] Thus, it is possible, even if an information user does not have a contents data receiving apparatus, to record contents data with ensured security, and accordingly a data storage apparatus, a data storage method and a program storage medium capable of easily providing contents data can be implemented.

[0076] Furthermore, the present invention is implemented in consideration of the above points, and implements an information recording apparatus, a data storage apparatus, a data store method and a program storage medium capable of easily recording a plurality of favorite contents data.

[0077] To find a solution to such a challenge, the present invention provides, in an information recording apparatus storing predetermined contents data on a predetermined data storage apparatus, the means for selecting, that is, categorizing and managing a contents server holding a plurality of contents data and the contents data held on the contents server, and if a desired category and a number of contents are specified, arbitrarily selecting a plurality of contents data equivalent to the specified number of contents among the contents data belonging to the specified category, and storing, that is, reading the selected contents data from the contents server and storing it on the data storage apparatus.

[0078] Thus, it is possible to easily select and store on a data storage apparatus a plurality of a user's favorite contents data, and accordingly an information recording apparatus, a data store method and a program storage medium capable of easily recording a plurality of favorite contents data can be implemented.

[0079] Moreover, the present invention provides, in a data storage apparatus on which predetermined contents data is stored by an information recording apparatus, the means for receiving a plurality of contents data belonging to a desired category among a plurality of categorized contents data and equivalent to a desired number of contents sent from a predetermined record medium and the information recording apparatus, and recording the contents data collectively on the record medium.

[0080] Thus, a data storage apparatus, a data store method and a program storage medium capable of recording a plurality of favorite contents data sent from an information recording apparatus can be implemented.

[0081] Furthermore, the present invention is implemented in consideration of the above points, and is intended to propose an information provision system, a list sending apparatus, an information receiving apparatus, an information provision method, an information receiving method, a list sending method and a program storage medium capable of almost certainly preventing contents data of which provision is prohibited from being utilized.

[0082] To find a solution to such a challenge, the present invention provides, in an information provision system, an information sending apparatus for sending predetermined contents data, a list sending apparatus for creating a provision prohibition list showing contents data designated as provision-prohibited and sending the created prohibition list, and an information receiving apparatus for determining whether contents data sent from the information sending apparatus is provision-prohibited based on the provision prohibition list, and if determined so, stopping capture of the contents data.

[0083] Thus, in an information receiving apparatus, an information provision system can be implemented, which is capable of almost certainly preventing provision-prohibited contents and contents sent from a utilization-prohibited information sending apparatus from being bought and accordingly capable of almost certainly preventing provision-prohibited contents data from being utilized.

[0084] Also, the present invention provides, in a list sending apparatus for sending a predetermined list to an information receiving apparatus receiving predetermined contents data sent from an information sending apparatus, the means for creating a list, that is, creating a provision prohibition list showing contents data designated as provision-prohibited, and sending a provision prohibition list to the information receiving apparatus.

[0085] Thus, in an information receiving apparatus, a list sending apparatus, a list sending method and a program storage medium capable of, based on a provision prohibition list, almost certainly preventing provision-prohibited contents and contents sent from a utilization-prohibited information sending apparatus from being bought and accordingly capable of almost certainly preventing provision-prohibited contents data from being utilized can be implemented.

[0086] Moreover, the present invention provides, in an information receiving apparatus receiving predetermined contents data sent from an information sending apparatus and a predetermined list sent from a list sending apparatus, the means for holding a list, that is, holding a provision prohibition list showing contents data designated as provision-prohibited sent from the list sending apparatus, and stopping capture, that is, determining whether contents data sent from an information sending apparatus is provision-prohibited, and if determined so, stopping capture of the contents data.

[0087] Thus, an information receiving apparatus, an information receiving method and a program storage medium capable of almost certainly preventing provision-prohibited contents and contents sent from a utilization-prohibited information sending apparatus from being bought and accordingly capable of almost certainly preventing provision-prohibited contents data from being utilized can be implemented.

[0088] Moreover, the present invention provides, in an information providing method, the steps of sending a list, that is, creating a provision prohibition list showing contents data designated as provision-prohibited and sending the created provision prohibition list by a list sending apparatus, sending predetermined contents data by an information sending apparatus, and stopping capture, that is, determining by an information receiving apparatus whether contents data sent from an information sending apparatus is provision-prohibited based on the provision prohibition list, and if determined so, stopping capture of the contents data.

[0089] Thus, in an information receiving apparatus, an information provision method can be implemented, which is capable of almost certainly preventing provision-prohibited contents and contents sent from a utilization-prohibited information sending apparatus from being bought and accordingly capable of almost certainly preventing provision-prohibited contents data from being utilized.

[0090] Incidentally, in online equipment and offline equipment of an information receiving apparatus, when sending contents data between the online equipment and the offline equipment, history information is created according to identification information of the contents data and identification information of the equipment of the source, and on receipt of a provision prohibition list, the history information is searched, and if contents data that newly became provision-prohibited is sent, a current provision prohibition list held by the equipment is sent to the source of the contents data so as to prevent any illegal contents data from diffusing from the source equipment to any other equipment.

[0208] An embodiment of the present invention will be hereinafter described in detail with reference to the drawings.

[0209] (1) Information Distribution System

[0210] FIG. 1 is a diagram illustrating an EMD (Electronic Music Distribution) system 10 to which the present invention is applied. Contents to be distributed to a user by this system are digital data in which digital data itself has value and, in this example, a piece of contents corresponds to music data for one tune. Contents are provided to a user with a piece of contents as one unit (single) or a plurality of pieces of contents as one unit (album). The user purchases the contents (in fact, purchases a right to utilize a content key K_co) and utilizes the contents to be provided (in fact, decodes the contents using the content key K_co to utilize the contents). Further, it goes without saying that the system is applicable not only to music data but also to all purchases of contents such as video, games programs and the like.

[0211] An electronic service center (END service center) 1 transmits an individual key K_i and a public key certificate of a content provider 2 to the content provider 2, transmits a public key certificate of a service provider 3 to the service provider 3, transmits a delivery key K_d and registration information to a user home network 5, receives charge information or the like and registration information corresponding to use of contents from the user home network 5, settles an account of utilization fees based on the charge information, and performs processing for distributing profits to the content provider 2, the service provider 3 and the electronic distribution service center 1 itself.

[0212] The content provider 2 has digitized contents, inserts an electronic watermark in the contents in order to prove that the contents is its own, compresses and encrypts the contents, generates a handling policy of the contents, and transmits the contents to the service provider 3 with signature data added.

[0213] The service provider 3 adds price information to the contents supplied by the content provider 2 via a network 4 composed of a dedicated cable network, the Internet or satellite communication, and transmits the contents to the user home network 5 with signature data added.

[0214] The user home network 5 obtains the contents sent by the service provider 3 with the price information added, purchases a content utilization right and executes purchase processing. The purchased utilization right may be, for example, a reproduction utilization right or a right to copy. Then, charge information generated by the purchase processing is stored in an tamper resistant memory in an encryption processing section, and is transmitted to the electronic distribution service center 1 when the user home network 5 obtains the delivery key K_d from the electronic distribution service center 1.

[0215] FIG. 2 is a block diagram showing functions of the electronic distribution service center 1. A service provider management section 11 supplies the public key certificate of the service provider 3 and information on profit distribution to the service provider 3, and at the same time, receives information (price information) to be attached to the contents, if necessary. A content provider management section 12 transmits an individual key K_i, the individual key K_i encrypted by the delivery key K_d, and the public key certificate of the content provider 2, and at the same time, supplies the information on profit distribution, and receives information (a handling policy) to be attached to the contents, if necessary. A copying right management section 13 transmits information indicating results of content utilization of the user home network 5 to an organization managing copying rights, e.g., JASRAC (Japanese Society for Rights of Authors, Composers and Publishers). A key server 14 performs generation, maintenance, management of keys used for the entire system, and the individual key K_l different for each content provider is generated and the individual key K_l encrypted by the delivery key K_d is generated together, which are supplied to the content provider 2 via the content provider management section 12, the individual key K_i encrypted by the delivery key K_d is supplied to an authentication station 22, if necessary, and the delivery key K_d is supplied to the user home network 5 via a user management section 18. In addition, a public key and a secret key of the electronic distribution center 1 as well as a public key and a secret key peculiar to equipment maintained by the user are all generated and managed, the public keys are transmitted to the authentication station 22 to be utilized for preparing a public key certificate. Further, in some cases, a save key K_save corresponding to an ID for each apparatus peculiar to an encryption processing section 92 to be described later is generated and maintained.

[0216] An example of periodic transmission of a key from the electronic distribution service center 1 to the content provider 2 and a home server 51 (to be described later) forming the user home network 5 will be described with reference to FIGS. 3 through 6. FIG. 3 shows the delivery key K_d held by the electronic distribution service center 1, the individual key K_i, the individual key K_i held by the content provider 2, and the delivery key K_d held by the home server 51 in January 2000 when the content provider starts provision of contents and the home server 51 forming the user home network 5 starts utilization of the contents. Further, although further description is omitted, the content provider 2 also maintains the individual key K_i encrypted by the delivery key K_d corresponding to the individual key K_i.

[0217] In the example of FIG. 3, the delivery key K_d and the individual key K_l are usable from the first day of a calendar month and the last day of the month, and for example, the delivery key K_d being a version 1 having a value of “aaaaaaaa” that is a random number of a predetermined number of bits, and the individual key K_i being a version 1 having a value “zzzzzzzz” are usable from Jan. 1, 2000 until Jan. 31, 2000 (i.e., the content key K_co for encrypting contents that the service provider 3 delivers to the user home network 5 in a period from Jan. 1, 2000 until Jan. 31, 2000 is encrypted by the individual key K_i being the version 1, and the individual key K_i being the version 1 is encrypted by the delivery key K_d being the version 1), the delivery key K_d being a version 2 having a value of “bbbbbbbb” that is a random number of a predetermined number of bits and the individual key K_i being a version 2 having a value of “yyyyyyyy” are usable from Feb. 1, 2000 until Feb. 29, 2000 (i.e., the content key K_co for encrypting contents that the service provider 3 delivers to the user home network 5 during the period is encrypted by the individual key K_i being the version 2, and the individual key K_i being the version 2 is encrypted by the delivery key K_d being the version 2). Similarly, the delivery key K_d and the individual key K_i being a version 3 is usable in March 2000, the delivery key K_d and the individual key K_l being a version 4 is usable in April 2000, the delivery key K_d and the individual key K_l being a version 5 is usable in May 2000, the delivery key K_d and the individual key K_i being a version 6 is usable in June 2000.

[0218] Prior to the content provider 2 starting to provide contents, the electronic delivery service center 1 transmits six individual keys K_i of the versions 1 through 6 that are usable from January until June 2000 and the individual keys each encrypted by the delivery key K_d of the identical versions to the content provider 2, and the content provider 2 receives and stores the six individual keys K_i and the individual keys K_i encrypted by the delivery keys K_d. The contents provider 2 stores the individual keys K_i for six months ad the individual keys K_i encrypted by the delivery keys K_d because a predetermined period is needed for the content provider 2 to prepare for encryption and the like of the contents and the content key K_co before providing the contents.

[0219] In addition, prior to the home server 51 starting to utilize the contents, the electronic distribution service center 1 transmits three delivery keys K_d being the versions 1 through 3 that are usable from January until March 2000 to the home server 51, and the home server 51 receives and stores the three delivery keys K_d. The home server 51 stores the delivery keys K_d for three months in order to avoid such a situation in which contents cannot be purchased despite a contract term during which the contents can be purchased due to such a trouble that the home server 51 cannot connect to the electronic distribution service center 1 arising out of congestion f lines or the like, and in order to reduce load of the electronic distribution service center 1 by decreasing the frequency of connection to the electronic distribution service center 1 and controlling simultaneous accesses of respective apparatuses to the electronic distribution service center 1.

[0220] During the period from Jan. 1, 2000 until Jan. 31, 2000, the delivery key K_d and the individual key K_i being the version 1 are utilized in the home server 51 forming the electronic distribution service center 1, the content provider 2 and the user home network 5.

[0221] Transmission of the delivery key K_d and the individual key K_i of the electronic distribution service center 1 to the content provider 2 and the home server 51 on Feb. 1, 2000 will be described with reference to FIG. 4. The electronic distribution service center 1 transmits six individual keys K_i of the versions 2 through 7 that are usable from February 2000 until July 2000 and the individual keys each encrypted by the delivery keys K_d of the identical versions to the content provider 2, and the content provider 2 receives the six individual keys K_i and the individual keys K_i encrypted by the delivery keys K_d, overwrites the individual keys K_i and the individual keys K_i encrypted by the delivery keys K_d that are stored before the receipt with the received keys, and stores the new individual keys K_i and the individual keys K_i encrypted by the delivery keys K_d. The electronic distribution service center 1 transmits three delivery keys K_d being the versions 2 through 4 that are usable from February 2000 until April 2000 to the home server 51, and the home server 51 receives the three delivery keys K_d, overwrites the delivery keys K_d that are stored before receipt with the received keys, and stores the new delivery keys K_d. The electronic distribution service center 1 stores the delivery keys K_d being the versions 1 through 7 and the individual keys K_i as they are. This is for the purpose of making the delivery keys K_d utilized in the past to be available when an unexpected trouble occurs, or an illegality occurs or is found.

[0222] During the period from Feb. 1, 2000 until Feb. 29, 2000, the delivery key K_d and the individual key K_i being the version 2 are utilized in the home server 51 forming the electronic distribution service center 1, the content provider 2, and the user home network 5.

[0223] Transmission of the delivery key K_d and the individual key K_i of the electronic distribution service center 1 to the content provider 2 and the home server 51 on Mar. 1, 2000 will be described with reference to FIG. 5. The electronic distribution service center 1 transmits six individual keys K_i of the versions 3 through 8 that are usable from March 2000 until August 2000 and the individual keys each encrypted by the delivery keys K_d of the identical versions to the content provider 2, and the content provider 2 receives the six individual keys K_i and the individual keys K_i encrypted by the delivery keys K_d, overwrites the individual keys K_i and the individual keys K_i encrypted by the delivery keys K_d that are stored before the receipt with the received keys, and stores the new individual keys K_i and the individual keys K_i encrypted by the delivery keys K_d. The electronic distribution service center 1 transmits three delivery keys K_d being the versions 3 through 5 that are usable from March 2000 until May 2000 to the home server 51, and the home server 51 receives the three delivery keys K_d, overwrites the delivery keys K_d that are stored before the receipt with the received keys, and stores the new delivery keys K_d. The electronic distribution service center 1 stores the delivery keys K_d being the versions 1 through 8 and the individual keys K_l as they are. This is for the purpose of making the delivery keys K_d utilized in the past to be available when an unexpected trouble occurs, or an illegality occurs or is found.

[0224] During the period from Mar. 1, 2000 until Mar. 31, 2000, the delivery key K_d and the individual key K_i being the version 3 are utilized in the home server 51 forming the electronic distribution service center 1, the content provider 2, and the user home network 5.

[0225] Transmission of the delivery key K_d and the individual key K_l of the electronic distribution service center 1 to the content provider 2 and the home server 51 on Apr. 1, 2000 will be described with reference to FIG. 6. The electronic distribution service center 1 transmits six individual keys K_i of the versions 4 through 9 that are usable from April 2000 until September 2000 and the individual keys each encrypted by the delivery keys K_d of the identical versions to the content provider 2, and the content provider 2 receives the six individual keys K_i and the individual keys K_i encrypted by the delivery keys K_d, overwrites the individual keys K_i and the individual keys K_i encrypted by the delivery keys K_d that are stored before the receipt with the received keys, and stores the new individual keys K_i and the individual keys K_i encrypted by the delivery keys K_d. The electronic distribution service center 1 transmits three delivery keys K_d being the versions 4 through 6 that are usable from April 2000 until June 2000 to the home server 51, and the home server 51 receives the three delivery keys K_d, overwrites the delivery keys K_d that are stored before the receipt with the received keys, and stores the new delivery keys K_d. The electronic distribution service center 1 stores the delivery keys K_d being the versions 1 through 9 and the individual keys K_l as they are. This is for the purpose of making the delivery keys K_d utilized in the past to be available when an unexpected trouble occurs, or an illegality occurs or is found.

[0226] During the period from Apr. 1, 2000 until Apr. 30, 2000, the delivery key K_d and the individual key K_i being the version 4 are utilized in the home server 51 forming the electronic distribution service center 1, the content provider 2, and the user home network 5.

[0227] In this way, by distributing the delivery keys K_d and the individual keys K_l of the future months in advance, even if a user does not access the center at all for one or two months, the user can purchase contents for the time being, and can received the keys by accessing the center in a timely manner.

[0228] History data management section 15 (FIG. 2) of the electronic distribution service center 1 maintains and manages charge information that is information indicating results of utilization of the contents collected by the user management section 18, price information (any one or both of information sent from the service provider 3 and information added to the charge information and sent by the user) corresponding to the contents, if necessary, and a handling policy (any one or both of information sent from the content provider 2 and information added to the charge information and sent by the user) corresponding to the contents, if necessary, and outputs data when the service provider management section 11, the content provider management section 12 or the like utilizes the charge information, the utilization history or the like. Further, the price information and the handling policy may not be sent from the service provider 3 or the content provider 2, if necessary data is written in the charge information. Profit distribution section 16 calculates profits of the electronic distribution service center 1, the content provider 2 and the service provider 3 based on the charge information, the price information, if necessary, and the handling policy supplied from the history data management section 15. The information is supplied to receipt and disbursement section 20, and in some cases, profit distribution is performed via the receipt and disbursement section 20, or in other cases, payment distribution is not performed and only the information is transmitted to the service provider management section 11, the content provider management section 12, and the copying right management section 13, sales itself is paid to the service provider, and the service provider 3 distributes the profit to each beneficiary. Mutual authentication section 17 executes mutual authentication to be described later with predetermined apparatuses in the content provider 2, the service provider 3 and the user home network 5.

[0229] The user management section 18 has a user registration database, and when receiving a request for registration from an apparatus of the user home network 5, retrieves through the user registration database, and prepares registration information to the effect that the apparatus is to be registered or to be rejected registration or the like depending on the recorded contents. When the user home network 5 is composed of a plurality of apparatuses having a function capable of connecting to the electronic distribution service center 1, the user management section 18 provides for an apparatus to be settled in the registration information, registers a settlement ID, and further provides for a scope of apparatuses forming the user home network, provides for information such as suspension of trade, and transmits the information to a predetermined apparatus (an apparatus that can be settled) of the user home network 5.

[0230] An example of the user registration database shown in FIG. 7 illustrates a registration state for each network group established in the user home network 5, and a group ID indicating a group, an ID peculiar to an apparatus forming the home network 5, and information corresponding to the ID such as whether or not connection is possible with the electronic distribution service center 1, whether or not settlement processing is possible, whether or not contents can be purchased, which apparatus performs the settlement processing, which apparatus requests purchase of the contents, whether or not registration is possible, or the like are recorded in each group.

[0231] The group ID recorded in the user registration database is allocated to each user home network, and settlement and update of information are performed by this group unit. Therefore, in principle, a representative apparatus in the group collectively performs communication, settlement processing and information update with the electronic distribution service center 1, and other apparatuses in the group do not directly communicate with the electronic distribution service center 1. The ID recorded in the user registration database is the ID allocated to each apparatus separately and is used for identifying an apparatus.

[0232] Information on whether or not connection with the electronic distribution service center 1 recorded in the user registration database is possible indicates whether or not it possible to physically connect with the electronic service center 1, and even an apparatus recorded as capable of connecting, other than an apparatus recorded as capable of performing settlement processing, cannot be connected to the electronic distribution service center 1 in principle. (However, if a representative apparatus in a group does not perform settlement processing operation due to some reason, an apparatus can be temporarily connected to the electronic distribution service center 1 as a proxy.) In addition, an apparatus recorded as not capable of connecting outputs charge information or the like to the electronic distribution service center 1 via an apparatus capable of performing settlement processing of the user home network 5.

[0233] Information on whether or not the settlement processing recorded in the user registration database is possible indicates whether or not the apparatus can make a settlement. When the user home network 5 is composed of a plurality of apparatuses that are capable of performing purchase or the like of utilization right of contents, one apparatus that can perform settlement processing among the apparatuses transmits charge information, price information, if necessary, and a handling policy of all the apparatuses registered in the electronic distribution service center 1 of the user home network 5 to the electronic distribution service center 1, and receives the delivery key K_d and the registration information from the electronic distribution service center 1 according to the completion of the settlement processing. In this way, processing of the electronic distribution service center 1 is reduced compared with performing processing for each apparatus.

[0234] Information on whether or not purchase processing recorded in the user registration database indicates whether or not the apparatus can purchase the utilization right of contents. An apparatus that is incapable of purchasing obtains the utilization right of the contents by performing proxy purchase (this means that another apparatus purchases the right and all the right is assigned. No right remains in the supplier side) of the utilization right from another apparatus capable of purchasing, re-distribution (this means a method in which the utilization right of contents already purchased is purchased again with identical contents of the utilization right or different contents of the utilization right and supplied to another apparatus. In this case, no right remains in the supplier side. Main purpose of re-distribution is to make a discount. The privilege of discount is granted on condition that an apparatus belongs to a group that uses an identical settlement ID. This is because processing burden of the electronic distribution service center 1 is reduced in processing within the group using the identical settlement ID, and therefore a discount is granted in return), or management transfer (although a content reproduction right, particularly an indefinite reproduction right can be transferred, which apparatus is a reproduction right receiver is managed in a reproduction right transmitter, and when the reproduction right is not returned, the management transfer cannot be performed at all again, and the reproduction right can only be returned to the reproduction right transmitter that gave the reproduction right).

[0235] Here, a utilization method/a utilization right and purchase method of contents will be briefly described. As a utilization method of contents, there are two methods, namely a method in which a user itself manages and maintains the utilization right of contents, a method in which a user executes the utilization right held by another apparatus and utilizes the right in the user's own apparatus. As the utilization right of contents, there are an unlimited reproduction right (a right without any limit on a period and the number of times of reproduction of contents; if the contents is music contents, the reproduction is sound reproduction, and if the contents is a game program or the like, the reproduction is execution), a reproduction right with limited number of times (a right with the number contents can be reproduced is limited), an unlimited copying right (a right without any limit on a period and the number of times of copying contents), a copying right with limited number of times (a right with limit on the number of times of copying contents) (as a copying right, there are a copying right without copy management information, a copying right with copy management information (SCMS), other copying rights for special purpose media, and the like) (in addition, in some cases, there is a copying right with a limit of time), and a management transfer right. As a method of purchasing the utilization right, there are utilization right content change for changing contents of the utilization right already purchased to other contents, re-distribution for separately purchasing the utilization right based on the right already purchased by another apparatus, proxy purchase for having another apparatus to purchase the utilization right on behalf of the user's apparatus, album purchase for collectively purchasing and managing a plurality of contents utilization rights, and the like in addition to ordinary purchase for directly purchasing the abovementioned utilization rights.

[0236] Information written in a proxy settler recorded in the user registration database indicates an ID of an apparatus which is made to transmit charge information generated when the utilization right of contents is purchased to the electronic distribution service center 1 on behalf of the user's apparatus.

[0237] In formation written in a proxy purchaser recorded in the user registration database indicates an ID of an apparatus which performs purchase of the utilization right on behalf of an apparatus that is incapable of purchasing the utilization right of contents. However, if all the apparatuses within the group that can perform purchase processing are appointed as proxy purchasers, it is not specifically necessary to make a record.

[0238] Information on whether or not a registration recorded in the user registration database is possible is updated based on information on outstanding charge, illegal processing or the like supplied from a settlement organization (e.g., a bank) or a credit card company. In response to a request for registration of an apparatus having an ID that is recorded as registration unavailable, the user management section 18 rejects its registration, and the apparatus rejected registration not only cannot purchase contents of this system but also cannot transmit or receive data between other apparatuses within the user home network 5 thereafter. In addition, in some cases, utilization of purchased contents is also limited. (However, an apparatus may be registered again after it is brought in the electronic distribution service center 1 or the like and completed inspection.) In addition, a state such as “settlement unprocessed,” “temporary suspension” or the like may exist in addition to “registration available” and “registration unavailable.”

[0239] In addition, the user management section 18 is supplied charge information, registration information, price information, if necessary, and a handling policy from an apparatus in the user home network 5, an outputs the charge information, price information and the handling policy to the history data management section 15 and supplies the delivery key K_d and the registration information to the apparatus in the user home network 5. Timing for supplying will be described later.

[0240] Here, the registration information will be described with reference to FIG. 8. Registration information of FIG. 8 is added a settlement ID and a signature in addition to information in the user registration database, and only includes information of an identical settlement group. The settlement ID indicates an ID of a user within the user information database (e.g., a bank account number and a credit card number) that charge billing section 19 and the receipt and disbursement section 20 use when performing settlement. Generation of a signature will be described later.

[0241] Returning to FIG. 2, the charge billing section 19 calculates a charge to a user based on the charge information, the price information, if necessary, and the handling policy supplied from the history data management section 15, and supplies the results to the receipt and disbursement section 20. In addition, the charge billing section 19 supplies settlement information to the user via the user management section 18, if necessary. The receipt and disbursement section 20 communicates with an external bank or the like (not shown) based on the amounts of disbursements and utilization fees to be collected to and from the user, the content provider 2 and the service provider 3, and executes settlement processing. Further, in some cases, the receipt and disbursement section 20 sends all the sales to the service provider 3, and the service provider 3 distributes profits based on distribution money information transmitted via the profit distribution section 16. An audit section 21 audits justification of the charge information, the price information and the handling policy supplied from the apparatus in the user home network 5 in view of the handling policy supplied from the content provider 2 and the price information supplied from the service provider 3.

[0242] In addition, as the processing of the audit section 21, there are processing for auditing matching of an amount inputted from the user home network 5 and a total amount of distributed profits or an amount sent to the service provider 3, and processing for auditing whether or not, for example, a content provider ID and a service provider ID that could not exist or a share, a price or the like that are improbable exist in data within the charge information supplied from the apparatus in the user home network 5.

[0243] The authentication station 22 generates a certificate of the public key supplied from the key server 14, supplies the certificate to the content provider 2 and the service provider 3, and also generates a public key certificate to be stored in a mass storage section 68 (to be described later) of the home server 51 and in small storage section 75 (to be described later) of a fixed apparatus 52 when a user apparatus is manufactured. If the content provider 2 does not perform authoring of contents, as an alternative method, there are a content server 23 for holding the contents and a content authoring 24.

[0244] FIG. 9 is a block diagram showing a configuration of functions of the content provider 2. The content server 31 stores contents to be supplied to a user, and supplies the contents to an electronic watermark adding section 32. The electronic watermark adding section 32 inserts a content provider ID in the contents supplied from the content server 31 in the form of an electronic watermark indicating the contents are properties of the user, and supplies the contents to a compression section 33. The compression section 33 compresses the contents supplied from the electronic watermark adding section 32 by the method of ATRAC (Adaptive Transform Acoustic Coding) (trademark) or the like, and supplies the contents to a content encryption section 34 that is content encryption means. Incidentally, a method such as MP3, AAC or the like can be used as a compression method instead of ATRAC. The content encryption section 34 encrypts the contents compressed by the compression section 33 by a common key encryption method such as DES (Data Encryption Standard) using a key supplied from a content key generation section 35 (the key is hereinafter referred to as a content key K_co 9), and outputs the results to a signature generation section 38 that is transmission means.

[0245] The content key generation section 35 generates random numbers of a predetermined number of bits to be the content key K_co, and supplies the random numbers from which bit rows inappropriate for encryption called a weak key (e.g., K_co=1E1E1E0E0E0E0E, 1EE01EE00EF00EF0 or the like) are removed to the content encryption section 34 and the content key encryption section 36. When an encryption algorithm without such an inappropriate bit row is used, processing for removing an inappropriate bit row is unnecessary. The content key encryption section 36 encrypts the content key K_co by a common key encryption method such as DES using the individual key K_i supplied from the electronic distribution service center 1, and outputs the results to the signature generation section 38. Incidentally, the encryption method is not limited to DES, and a public key encryption method such as RSA (Rivest, Shamir, Adleman) may be used.

[0246] DES is the encryption method for processing with 64 bits of plain text as one block using a common key of 56 bits. Processing of DES consists of a part for agitating a plain text to convert it to an encryption text (a data agitation section) and a part for generating a key (enlarged key) to be used in the data agitation section from the common key (a key processing section). Since al the algorithms of DES are made public, only basic processing of the data agitation section will be briefly described.

[0247] First, the plain text 64 bits are divided into H0 of the upper 32 bits and L0 of the lower 32 bits. An output of an F function that is the agitated L0 of the lower 32 bits with the enlarged key K1 of 48 bits supplied from the key processing section and L0 of the lower 32 bits as inputs. The F function consists of two types of basic conversions of “letter replacement” for replacing a numeral value with a predetermined rule and “permutation” for changing a bit position with a predetermined rule. Then, H0 of the upper 32 bits and the output of the F function are exclusively logically summed, and the results are designated as L1. L0 is designated as H1.

[0248] Based on H0 of the upper 32 bits and L0 of the lower 32 bits, the above-mentioned processing is repeated sixteen times, and the resulted H16 of the upper 32 bits and L16 of the lower 32 bits are outputted as an encrypted text. Decryption is realized by tracing the above-mentioned procedures conversely using the common key used for encryption.

[0249] Further, although DES is shown as a common key encryption in this embodiment, either FEAL (Fast Encryption Algorithm), IDEA (International Data Encryption Algorithm), or E2 proposed by NTT (trademark) or AES (Advanced Encryption Standard) that is the next encryption standard of the United States may be used.

[0250] A handling policy generation section 37 generates a handling policy of contents and outputs the handling policy to the signature generation section 38 corresponding to contents to be encrypted. Further, in some cases, the handling policy generation section 37 supplies the generated a handling policy to the electronic distribution service center 1 via communicating means (not shown), and the data is maintained and managed. The signature generation section 38 adds an electronic signature to the encrypted content key K_co, the encrypted individual key K_i and the handling policy, and transmits them to the service provider 3 together with a certificate C_cp of the content provider 2. (The encrypted contents, the encrypted content key K_co, the encrypted individual key K_i and the handling policy to each of which the electronic signature is added using a secret key of the content provider 3 are hereinafter referred to as a content provider secure container.) Further, one signature may be added to entire data instead of adding a signature separately to respective data.

[0251] A mutual authentication section 39 mutually authenticates with the electronic distribution service center 1, and mutually authenticate with the service provider 3 prior to transmitting the content provider secure container to the service provider 3, if necessary. Since a memory 40A holds the individual key K_l that the content provider 2 must hold secretly, a tamper resistant memory that is not easily read by a third party is desired, but no specific hardware limitation is necessary. (For example, the memory may be a hard disk existing in a room to which entry is managed, a hard disk of a personal computer that is managed by a password, or the like.) In addition, since a memory 40B only stores the individual key K_i that is encrypted by the delivery key K_d and the public key certificate of the content provider 2, the memory may be any ordinary storage device or the like since it is information made public, there is no need to keep it secret). Further, the memories 40A and 40B may be united.

[0252] The signature, which is attached to data or a certificate to be described later, is data for checking tamper and authenticating a person preparing the certificate, and is prepared by finding a hash value by a hash function based on data that is desired to be transmitted and using a secret key of a public key encryption.

[0253] The hash function and the signature will be described. The hash function is a function for obtaining predetermined data that is desired to be transmitted, compressing the data into data with a predetermined bit length, and outputting the data as a hash value. The hash function has a characteristic that is difficult to estimate an input from the hash value (output), and when one bit of the data inputted in the hash function changes, many bits of the hash value change, and it is difficult to find out input data having the identical hash value. As the hash function, MD (Message Digest) 4, MD 5, SHA (Secure Hash Algorithm)-1 and the like are used.

[0254] The signature generation section 38 of a transmission apparatus (the content provider 2) for transmitting data and a signature, for example, generates a signature using an elliptical curve encryption that is a public key encryption method. The processing will be described with reference to FIG. 10 (EC-DSA (Elliptic Curve Digital Signature Algorithm), IEEE P1363/D3). In step S1, M is a message, p is a characteristic, a and b are coefficients of an elliptic curve (elliptic curve: y²=x³+ax+b), G is a base point on the elliptic curve, r is a digit of G, and K_s is a secret key (0<K_s<r). In step S2, a random number u is generated by the random number generation unit such that 0<u<r. In step S3, coordinates where the base point is multiplied by u are calculated. Further, an addition on the elliptic curve and a two times multiplication are defined as follows:

[0255] When P=(X₀, Y₀), Q=(X₁, Y₁) R=(X₂, Y₂)=P+Q, and P≠Q,
X₂=λ²−X₀−X₁
Y₂=λ(X₀−X₂)−Y₀
λ=(Y₁−Y₀)/(X₁−X₀)

[0256] When P=Q,
X₂=λ²−2X₀
Y₂=λ(X₀−X₂)−Y₀
λ=(3X₀²+a)/2Y₀
and u times the point G is calculated using the above equations (Most understandable though slow operation method is as follows: calculate G, 2G, 4G . . . , and add to where there is 1 by binary number developing u corresponding (2¹)×G (i is a bit position when counted from LSB of u)). In step S4, c=X_v mod r is calculated, in step S5, it is determined if the value is 0, and if it is not 0, the processing proceeds to step S6, where the hash value of the message M is calculated, and f=SHA-1 (M) Then, in step S7, d=[(f+cK_s)/u] mod r is calculated, and in step S8, it is determined if d is 0. If d is not 0, c and will be signature data. Assuming that r has the length of 160 bits, the signature data has 320 bit length.

[0257] In step S5, if c is 0, the processing returns to step S2 and a new random number is generated. If d is 0 in step S8, the processing also returns to step S2 and another random number is generated.

[0258] A receiving apparatus (the user home network 5) having received the signature and the data, for example, verifies the signature using the elliptic curve encryption that is a public key encryption method. The processing will be described with reference to FIG. 11. In step S10, M is a message, p is a characteristic, a and b are coefficients of the elliptic curve (elliptic curve: y²=x³+ax+b), G is a base point on the elliptic curve, r is a digit of G, G and K_sG are public keys (0<K_s<r). In step S11, it is inspected if the signature data c and d satisfy 0<c, d<r. If the signature data satisfy this, in step S12, the hash value of the message M is calculated, and f=SHA-1 (M). Then, in step S13, h=1/d mod r is calculated, and in step S14 h₁=fh, h₂=ch mod r is calculated. In step S15, P=(X_p, Y_p)=h₁G+h₂K_sG is calculated using already calculated h₁ and h₂. Since a verifier of the signature knows the public keys G and K_sG, calculation can be made as in step S3. Then, in step S16, it is determined if P is an infinite apoastron, and if it is not an infinite apoastron, the processing proceeds to step S17 (in fact, the determination of the infinite apoastron is completed in step S15. That is, when an addition of P=(X, Y), Q=(X, −Y) is performed, it has been found that the aforementioned X cannot be calculated, and R is the infinite apoastron. In step S17, X_p mod r is calculated, and the result is compared with the signature data c. If both the values match, the processing proceeds to step S18, and it is determined that the signature is correct.

[0259] If the signature is determined to be correct, it is seen that the received data is not tampered, and is the data transmitted from the transmission apparatus holding the secret key corresponding to the public key.

[0260] In step S11, if the signature data c and d do not satisfy 0<c, d<r, the processing proceeds to step S19. In addition, in step S16, if P is the infinite apoastron, the processing also proceeds to step S19. Moreover, in step S17, if the value of X_p mod r does not match the signature data c, the processing also proceeds to step S19. In step S19, it is determined that the signature is not correct.

[0261] If it is determined that the signature is not correct, it is seen that the received data is tampered or is not data transmitted from the transmission apparatus holding the secret key corresponding to the public key.

[0262] Further, although SHA-1 is used as the hash function in this embodiment, any function such as MD4, MD 5 and the like may be used. In addition, generation and verification of a signature may be performed using an RSA encryption (ANSI X9.31-1).

[0263] Encryption and decryption of the public key encryption method will now be described. Contrary to the common key encryption method using an identical key (common key) in encryption and decryption, the public key encryption method uses different keys to be used for encryption and decryption respectively. If the public key encryption method is used, even if one key is made public, the other key can be kept secret, and the key that may be made public is called a public key and the other key that should be kept secret is called a secret key.

[0264] The elliptic curve encryption method that is representative of the public key encryption method will be described. In FIG. 12, in step S20, M_x and M_y are messages, p is a characteristic, a and b are coefficients of an elliptic curve (elliptic curve: y²=x³+ax+b), G is a base point on the elliptic curve, r is a digit of G, G and K_sG are public keys (0<K_s<r). In step S21, a random number u is generated such that 0<u<r. In step S22, coordinates V that are u times the public key K_sG. Further, since scalar times on the elliptic curve is identical with the method described in the signature generation, description is omitted here. In step S23, the X coordinates of V are multiplied by M_x to find a balance by p, which is X₀. In step S24, the Y of V is multiplied by M_y to find a balance by p, which is Y₀. Further, if the length of the message is smaller than the number of bits of p, M_y uses a random number, and My is cancelled in the decryption section. In step S25, uG is calculated, and in step S26, a cryptogram uG, (X₀, Y₀) is found.

[0265] Decryption of the public key encryption method will now be described with reference to FIG. 13. In step S30, uG, (X₀, Y₀) is cryptogram data, p is a characteristic, a and b are coefficient of an elliptic curve (elliptic curve: y²=x³+ax+b), G is a base point on the elliptic curve, r is a digit of G, and K_s is a secret key (0<K_s<r). In step S31, the encryption data uG is multiplied by the secret key K_s. In step S32, the X coordinates of (X₀, Y₀) among the encryption data is taken out, and X₁=X₀/X_v mod p is calculated. In step S33, Y₁=Y₀/Y_v mod p is calculated. Then, in step S34, X₁ is M_x and Y₁ is M_y to take out the message. Then, if M_y is not the message, Y₁ is cancelled.

[0266] In this way, in the public key encryption method, with the secret key being K_s and the public keys being G, K_sG, a key to be used for encryption and a key to be used for decryption may be different keys.

[0267] In addition, as another example of the public key encryption method, the RSA encryption (Rivest, Shamir, Adleman) is known.

[0268] FIG. 14 is a block diagram showing a configuration of the service provider 3. A content sever 41 stores the public key certificate and the encrypted contents of the content provider 2 that are supplied from the content provider 2. The public key certificate of the content provider 2 is verified a signature on the certificate by the public key of the authentication station 22 in a certificate inspection section 42, and if the verification is successful, the public key of the content provider 2 is supplied to the signature verification section 43. In the signature verification section 43, the signature of the content provider 2 with respect to the handling policy stored in the content server 41 is verified using the public key of the content provider 2 that is verified before, and if the verification is successful, the handling policy are supplied to a pricing section 44. In the pricing section 44, price information is prepared from the handling policy and supplied to a signature generation section 45. In the signature generation section 45, a signature with respect to the price information is generated using the secret key of the service provider 3 held in a tamper resistant memory (not shown) (as in 40A of the content provider 2) (the content provider secure container and the price information with an electronic signature added using the secret key of he service provider 3 are hereinafter referred to as a service provider secure container). Further, one signature may be generated for the entire content provider secure container and price information instead of adding a signature to the price information. Then, the service provider secure container, the public key certificate of the content provider 2 and the public key certificate of the service provider 3 are supplied to the user home network 5 via the network 4 (FIG. 1). A mutual authentication section 46 mutually authenticates with the electronic distribution service center, and if possible, mutually authenticates with the user home network 5 via the content provide, the Internet, cable communication or the like, if necessary.

[0269] FIG. 15 is a block diagram showing a configuration of the user home network 5. A home server 51 receives a secure container containing contents from the service provider 3 via the network 4, purchases the utilization right of the contents, and performs decryption, extension, reproduction and copying of the contents by executing the right.

[0270] The communication section 61 communicates with the service provider 3 or the electronic distribution service center 1 via the network 4, and receives or transmits predetermined information. An upper controller 62 receives a signal from inputting means 63, displays a predetermined message or the like on displaying means 64, performing utilization right purchase processing or the like by utilizing an encryption processing section 65, supplies encrypted contents read out from mass storage section 68 to an extension section 66, and stores the encrypted contents in the mass storage section 68. The inputting means 63 transmits a signal from a remote controller or input data from an input button to the upper controller 62. The displaying means 64 is composed of a display device such as a liquid crystal display, and sends an instruction to a user and displays information. The inputting means 63 and the displaying means 64 become a touch panel liquid crystal display or the like, if necessary, ad may be united as one means. The encryption processing section 65 mutually authenticates with the service provider 3, the electronic distribution service center 1 or encryption processing sections of other apparatuses, purchases the content utilization right, and at the same time, performs encryption/decryption of predetermined data, manages an external memory that holds the content key K_co and licensing conditions information, and further stores the delivery key K_d, the charge information or the like. The extension section 66 mutually authenticates with the encryption processing section 65 to receive the content key K_co, decrypts the encrypted contents supplied from the upper controller 62 using the content key K_co, extends the contents by a predetermined method such as ATRAC, and further inserts a predetermined electronic watermark in the contents. The external memory 67 is composed of a nonvolatile memory such as a flash memory or a nonvolatile memory with a back-up power source, and stores the content key K_co decrypted by the save key K_save and the license conditions information. The mass storage section 68 is a storage device such as an HDD or an optical disk, which stores the content provider secure container and the service provider secure container (the encrypted contents, the content key K_co encrypted by the individual key K_i, the individual key K_i encrypted by the delivery key K_d, the handling policy, the price information and the signatures on them), the public key certificate, the registration information or the like.

[0271] The encryption processing section 65 for mutually authenticating with the electronic distribution service center 1, purchasing the content utilization right and, at the same time, generating the charge information, performing decryption/encryption of predetermined data, managing an external memory holding the content key K_co and the license conditions information, and further storing the delivery key K_d, the charge information or the like is composed of a control section 91, a storage module 92, a registration information inspection module 93, a purchase processing module 94, a mutual authentication module 95, an encryption/decryption module 96, and an external memory control section 97. The encryption processing section 65 is composed of a single chip IC exclusively for encryption processing, has a multi-layered structure, and has characteristics for making it difficult to read out data illegally from outside (tamper resistant feature) in that a memory cell inside is sandwiched by dummy layers such as aluminum layers and a width of voltage or frequency of operation is narrow.

[0272] The control section 91 controls each module according to a command from the upper controller 62, and at the same time, returns a result from each module to the upper controller 62. The storage module 92 stores data such as the charge information supplied from the purchase processing module 94 and the delivery key K_d, and supplies data such as the delivery key K_d when other function blocks execute predetermined processing. The registration information inspection module 93 inspects the registration information supplied from the upper controller 62, and determined whether or not to mutually authenticate with other apparatuses in the user home network 5, whether or not to accept the charge information, whether or not to perform re-distribution or the like of the contents. The purchase processing module 94 generates license conditions information anew from the handling policy and the price information (as well as already holding license conditions information depending on a case) included in the secure container received from the service provider 3 to output to the external memory control section 97 or the control section 91, and generates charge information to output to the storage module 92. The mutual authentication module 95 executes mutual authentication with the electronic distribution service center 1, the encryption processing sections of other apparatuses in the home network 5 and the extension section 66, and generates a temporary key K_temp (a session key), if necessary to supply to the encryption/decryption module 96.

[0273] The encryption/decryption module 96 is composed of a decryption unit 111, an encryption unit 112, a random number generation unit 113, a signature generation unit 114, and a signature verification unit 115. The decryption unit 111 decrypts the individual key K_i encrypted by the delivery key K_d, decrypts the content key K_co encrypted by the individual key K_i, and decrypts various kinds of data encrypted by the temporary key K_temp. The encryption unit 112 encrypts the decrypted content key K_co by the save key K_save held in the storage module 92 to output to the external memory control section 97 via the control section 91, and encrypts various kinds of data by the temporary key K_temp. The random number generation unit 113 generates a random number of a predetermined number of figures, and supplies the random number to the mutual authentication module 95 or the signature generation unit 114. The signature generation unit 114 calculates the hash value of the message supplied from the control section 91, and generates signature data using the random number supplied from the random number generation unit 113 to output to the control section 91. The signature verification unit 115 determines whether or not the signature is correct from the message and the signature data supplied from the control section, and output the results to the control section 91. Further, the generation/verification method of the signature is the same as the case described above with reference to FIGS. 10 and 11.

[0274] The external memory control section 97 reads and writes data by controlling the external memory 67, and performs data verification to find if the data in the external memory has been tampered. FIG. 16 is a block diagram illustrating operations of the external memory control section 97. In FIG. 16, N hash values for preventing tampering (integrity Check Value) are stored in the storage module 92. The external memory 67 is divided into N blocks of data regions, and each data region is made such that M sets of content key K_co and the license conditions information can be written. In addition, other regions that can be used freely are also prepared in the external memory 67. The hash value ICV for preventing tampering has a hash value for all the data in the external memory 67 corresponding to the hash value ICV. Reading procedures and writing procedures of the external memory will be described later using a flowchart.

[0275] The extension section 66 (FIG. 15) for decrypting and extending contents and adding a predetermined electronic watermark is composed of a mutual authentication module 101, a key decryption module 102, a decryption module 103, an extension module 104, an electronic addition module 105 and a storage module 106. The mutual authentication module 101 mutually authenticates with the encryption processing section 65, and outputs the temporary key K_temp to the key decryption module 102. The key decryption module 102 decrypts by the temporary key K_temp the content key K_co read out from the external memory 67 and encrypted by the temporary key K_temp to output to the decryption module 103. The decryption module 103 decrypts the contents recorded in the mass storage section 68 by the content key K_co to output to the extension module 104. The extension module 104 further extends the decrypted contents with a method such as ATRAC to output to the electronic watermark addition module 105. The electronic watermark addition module 105 inserts to the contents the individual ID of the encryption processing section to which the purchase processing has been applied using the electronic watermark technology to output to other apparatuses or a speaker (not shown), and reproduces music.

[0276] Key data required for the mutual authentication with the encryption processing section 65 is stored in the storage module 106. Further, the extension section 66 is desirably provided with the tamper resistant feature.

[0277] The external memory 67 stores the license conditions information generated when the right is purchased in the purchase processing module 94 and the content key K_co encrypted by the save key K_save. The mass storage section 68 records the secure container, the public key certificate, the registration information or the like supplied from the service provider 3.

[0278] The fixed apparatus 52 for recording the contents supplied from the service provider 3 in an inserted recording medium 80 such as an optical disk and a semiconductor memory and reproducing the recording media is composed of a communication section 71, an upper controller 72, an encryption processing section 73, an extension section 74, a small storage section 75, a record reproduction section 76, inputting means 77, displaying means 78, an external memory 79 and a recording medium 80. Since the communication section 71 has the same function as the communication section 61, its description is omitted. Since the upper controller 72 has the same function as the upper controller 62, its description is omitted. Since the encryption processing section 73 has the same function as the encryption processing section 65, its description is omitted. Since the extension section 74 has the same function as the extension section 66, its description is omitted. Although the small storage section 75 has the same function as the mass storage section 68, contents themselves are not stored and only the public key certificate, the registration information or the like are stored. The record reproduction section 76 has the recording medium 80 such as an optical disk and a semiconductor memory inserted therein, records contents in the recording medium 80 and output the read out contents to the extension section. Since the inputting means 77 has the same function as the inputting means 63, its description is omitted. Since the displaying means 78 has the same function as the displaying means 64, its description is omitted. Since the external memory 79 has the same function as the external memory 67, its description is omitted. The recording medium 80 is, for example, an MD (Mini Disk: trademark) or a storage medium exclusively used for electronic distribution (Memory Stick using a semiconductor memory: trademark).

[0279] A portable apparatus 53 that is carries by a user to reproduce and enjoy music is composed of a communication section 81, an upper controller 82, an encryption processing section 83, an extension section 84 and an external memory 85. Since the communication section 81 has the same function as the communication section 61, its description is omitted. Since the upper controller 82 has the same function as the upper controller 62, its description is omitted. Since the encryption processing section 83 has the same function as the encryption processing section 65, its description is omitted. Since the extension section 84 has the same function as the extension section 66, its description is omitted. Since the external memory 85 has the same function as the external memory 67, its description is omitted. However, these memories are not limited to a semiconductor memory, and may be any memory such as an HDD and a rewritable optical disk.

[0280] FIG. 17 illustrates a configuration of the recording media exclusively for electronic distribution. A recording medium 120 for storing electronically distributed contents is composed of a communication section 121, the encryption processing section 122, and the external memory 123. The communication section 121 performs transmission and reception of data with the record reproduction section 76 of the fixed apparatus 52 (FIG. 15). Since the encryption processing section 122 for mutually authenticating with the fixed apparatus 52, being assigned the content utilization right, performing decryption/encryption of predetermined data, managing the external memory holding the content key K_co, the license conditions information and the like, and storing the save key K_save or the like has a configuration having the same function as the encryption processing section 65, its description is omitted. The external memory 123 stores the content key K_co encrypted by the save key K_save, contents encrypted by the content key K_co, the license condition information providing conditions for use of the contents, a handling policy, if necessary, and price information.

[0281] The recording media exclusively for electronic distribution 120 has a method of using different from the recording medium described for the fixed apparatus 52. While the ordinary recording medium 80 is a substitute for the mass storage section 68, the recording medium exclusively for electronic distribution 120 is not different from a portable apparatus that does not have the extension section. Therefore, although an apparatus such as the fixed apparatus 52 having the extension section 74 is necessary when reproducing contents, the recording medium exclusively for electronic distribution 120 can perform processing similar to that of the home server 51 or the portable apparatus 53 concerning the function for managing the contents or the like. Due to these differences, while contents recorded in the ordinary recording medium 80 cannot be reproduced by an apparatus other than the one that has recorded the same, contents recorded in the recording medium exclusively for electronic distribution 120 can be reproduced by an apparatus other than the one that has recorded the same. That is, since the ordinary recording medium 80 only has contents encrypted by the content key K_co, the contents cannot be reproduced by an apparatus other than the one that has (has recorded) the content key K_co. On the other hand, since the recording medium exclusively for electronic distribution 120 retains not only the contents encrypted by the content key K_co but also the content key K_co encrypted by the save key K_save peculiar to the recording medium exclusively for electronic distribution, the contents can be reproduced by other apparatuses.

[0282] That is, after performing mutual authentication between the mutual authentication module 128 of the encryption processing section 122 and the mutual authentication module (not shown) of the encryption processing section 73, the recording medium exclusively for electronic distribution 120 decrypts the content key K_co by the save key K_save3, encrypts the content key K_co by the shared temporary key K_temp to transmit to the encryption processing section 73 for reproducing.

[0283] FIG. 18 is a block diagram illustrating a data recording state in each apparatus. In the home server 51, an individual ID for specifying an apparatus (identical with the one for specifying the encryption processing section), an ID for settlement to be used for charge processing (which can be substituted by the individual ID, if necessary, or may be unnecessary because it is in the registration information), a secret key different for each apparatus, the save key K_save, the public key of the electronic distribution service center 1 to be used when mutually authenticating with the electronic distribution service center 1 (unnecessary if there is the public key certificate of the electronic distribution service center 1), the public key of the authentication station 22 for verifying the public key certificate, and the common key to be used when mutually authenticating with the extension section 66 are stored in the storage module 92 in the encryption processing section 65. These data are data that are stored in advance when an apparatus is manufactured. On the other hand, the delivery key K_d to be periodically distributed from the electronic distribution service center 1, the charge information to be written upon the purchase processing, the content key K_co held in the external memory 67, and the hash value for tamper checking of the license conditions information are data that are stored after starting use an apparatus, and are also stored in the storage module 92. The individual ID for specifying the extension section and the common key to be used when mutually authenticating with the encryption processing section 65 are stored in the storage module 106 in the extension section 66 in advance when an apparatus is manufactured. Further, since the encryption processing section 65 and the extension section 66 are associated one to one, IDs of each section may be held by respective storage modules (since the mutual authentication is performed by the common key, as a result, communication can only be made between the corresponding encryption processing section and the extension section associated with each other. However, processing may be the mutual authentication of the public key encryption method. In this case, a stored key is not the common key, but the secret key peculiar to the extension section 66.)

[0284] The content key K_co that is encrypted by the save key K_save to be used when contents are decrypted, and the license conditions information indicating conditions for utilizing the content key K_co are stored in the external memory 67. In addition, the certificate (the public key certificate of an apparatus) of the public key corresponding to the secret key for each apparatus in the storage module 92, the registration information, the content provider secure container (contents encrypted by the content key K_co and its signature, the content key K_co encrypted by the individual key K_i and its signature, the individual key K_i encrypted by the delivery key K_d and its signature, and the handling policy and its signature), the service provider secure container (the price information and its signature), the public key certificate of the content provider 2, and the public key certificate of the service provider 3 are stored in the mass storage section 68.

[0285] The encryption processing section 83 that is identical with the encryption processing section 65 held by the home server 51 and the external memory 85 that is identical with the external memory 67 are provided in the portable apparatus 53 (the one having the identical internal data is omitted, e.g., the extension section). However, data to be stored inside these memories is slightly different as shown in the figure. As the data retained by the storage module in the encryption processing section 83, the individual ID for specifying an apparatus, the secret key that is different for each apparatus, the save key K_save, the public key of the electronic distribution service center 1 to be used when mutually authenticating with the electronic distribution service center 1 (however, it is not necessary to have the home server 51 to perform all the procedures with the electronic distribution service center 1 on its behalf), the public key of the authentication station 22 for verifying the public key certificate, and the common key to be used when mutually authenticating with the extension section 84 are stored. These data are data that are stored in advance when an apparatus is manufactured. In addition, the hash value for checking tamper of the content key K_co and the license conditions information to be retained in the external memory 85, the ID for settlement, if necessary, the delivery key K_d, and (a part of) the registration information (if the purchase processing is not performed, the ID for settlement and the delivery key K_d are not necessary) are data to be stored after starting an apparatus, which are also stored (if the purchase processing is performed, the charge information is stored as well.) The certificate of the public key corresponding to the secret key for each apparatus in the encryption processing section 83, the contents encrypted by the content key K_co and its signature (in addition, in some cases, the content key K_co encrypted by the individual key K_i and its signature, if necessary, the individual key K_i encrypted by the delivery key K_d and its signature, the handling policy and its signature, if necessary, and the price information and its signature are also stored), the content key K_co encrypted by the save key K_save to be used for decrypting the contents, the license conditions information indicating conditions for utilizing the contents are stored in the external memory 85. A public key certificate for the content provider 2 and the public key certificate for the service provider 3 are also stored, if necessary.

[0286] The recording medium 80 is provided in the fixed apparatus 52 in addition to the configuration of the home server 51. The recording medium 80 may be an ordinary MD or CD-R, or may be a storage medium exclusively for electronic distribution. In the former case, although data to be stored is decrypted contents with a copy prohibit signal added, encrypted contents may be naturally included (the content key K_co encrypted by the save key K_save may be stored together. Then, only an apparatus that stores the contents can reproduce the contents. This is because the save key K_save is different for each apparatus.)

[0287] In addition, as the storage medium, FIG. 19 is possible. In the storage medium exclusively for electronic distribution 120, the individual ID of the recording medium, the secret key different for each recording medium, the public key certificate corresponding to the secret key (which may be recorded in the external memory 123), the save key K_save to be used for encrypting the content key K_co (which are generally different for each storage medium), the public key of the electronic distribution service center 1 (which is not required if there is not communication with the center or if the public key certificate of the electronic distribution service center 1 exists in the external memory 123), the public key of the authentication station, the hash value for inspecting tamper of the external memory 123, and (a part of) the registration information are stored in a storage module 125 in the encryption processing section 122. The contents encrypted by the content key K_co (and its signature), and the content key K_co and the license conditions information encrypted by the save key K_save are stored in the external memory 123, and the handling policy (and its signature), the price information (and its signature), the public key certificate of the content provider 2, and the public key certificate of the service provider 3 are also stored, if necessary.

[0288] FIGS. 20 and 21 are drawings for illustrating information to be transmitted and received among the electronic distribution service center 1, the content provider 2, the service provider 3, and the user home network 5. The content provider 2 adds the public key certificate (whose details will be described later) of the content provider 2 to the content provider secure container (whose details will be described later) and sends it to the service provider 3. In addition, the content provider 2 transmits the handling policy and its signature, and the certificate of the content provider 2 to the electronic distribution service center 1, if necessary.

[0289] The service provider 3 verifies the public key certificate of the content provider 2, obtains the public key of the content provider 2, and verifies the signature of the received content provider secure container (in some cases, verifies only the handling policy). After successfully verifying the signature, the service provider 3 takes out the handling policy from the content provider secure container, and generates the price information based on the handing policy, and makes it the service provider secure container by adding the signature to the price information (details will be described later). The content provider secure container, the service provider secure container, the public key certificate of the content provider 2, and the public key certificate of the service provider 3 (whose details will be described later) are transmitted to the user home network 5. In addition, the service provider 3 transmits the price information and its signature, and the public key certificate of the service provider 3 to the electronic distribution service center 1, if necessary.

[0290] After verifying the received secure containers, the user home network 5 performs the purchase processing based on the handling policy and the price information included in the secure containers, generates the charge information to store in the storage module in the encryption processing section, generates the license conditions information, decrypts the content key K_co and re-encrypts the same by the save key K_save, and stores the license conditions information and the re-encrypted content key K_co in the external memory 67. Then, the user home network 5 decodes the content key K_co by the save key K_save along the license conditions information, and decrypts the contents by the key to utilize. The charge information is encrypted by the temporary key K_temp at a predetermined timing, added a signature, and transmitted to the electronic distribution service center 1 together with the handling policy and the price information, if necessary.

[0291] The electronic distribution service center 1 calculates usage fees based on the charge information and the price information, and calculates profits of each of the electronic distribution service center 1, the content provider 2 and the service provider 3. The electronic distribution service center 1 further compares the handling policy received from the content provider 2, the price information and the handling policy, if necessary, received from the service provider 3, and the handling policy and the price information received from the user home network 5, and monitors whether or not illegality such as tampering of the handling policy or illegal addition of prices has occurred in the service provider 3 or the user home network 5.

[0292] Moreover, the electronic distribution service center 1 transmits the public key certificate of the content provider to the content provider 2, and transmits the public key certificate of the service provider to the served provider 3. In addition, since the public key certificate prepared according to each apparatus is embedded in each apparatus when the apparatus is shipped from a factory, the electronic distribution service center 1 transfers the data concerning the public key certificate of each apparatus to the factory.

[0293] FIG. 22 illustrates the content provider secure container. The content provider secure container 1A includes the contents encrypted by the content key K_co and its signature, the content key K_co encrypted by the individual key K_i and its signature, the individual key K_i encrypted by the delivery key K_d and its signature, and the handling policy and its signature. The signature is data generated by applying the secret key K_scp of the content provider 2 to a hash value generated by applying the hash function to each piece of data. Further, although a signature is generated separately for each of the key data (the content key K_co encrypted by the individual key K_l and the individual key K_i encrypted by the delivery key K_d) and added in the case of FIG. 22, each piece of key data (the content key K_co encrypted by the individual key K_l and the individual key K_i encrypted by the delivery key K_d) may be consolidated into one, and one signature may be generated for the consolidated data and added. By consolidating the key data to be always used together into one and adding a signature to the consolidated data, one verification of the signature is sufficient.

[0294] FIG. 23 illustrates another example of the content provider secure container. The content provider secure container 1B includes the contents encrypted by the content key K_co and its signature, the content key K_co encrypted by the individual key K_i and its signature, and a handling policy and its signature.

[0295] FIG. 24 illustrates another example of the content provider secure container. The content provide secure container IC includes the contents encrypted by the content key K_co, the content key K_co encrypted by the individual key K_i, the individual key K_i encrypted by the delivery key K_d, a handling policy and signatures. The signature is data generated by applying the secret key K_scp of the content provider 2 to a hash value generated by applying a hash function to the contents encrypted by the content key K_co, the content key K_co encrypted by the individual key K_i, the individual key K_i encrypted by the delivery key K_d, and a handling policy.

[0296] FIG. 25 illustrates another example of the content provider secure container. The content provider secure container ID includes the contents encrypted by the content key K_co, the content key K_co encrypted by the individual key K_i, a handling policy and signatures. The signature is data generated by applying the secret key K_scp of the content provider 2 to a hash value generated by applying a hash function to the contents encrypted by the content key K_co, the content key K_co encrypted by the individual key K_i, and a handling policy.

[0297] FIG. 26 illustrates the public key certificate of the content provider 2. The public key certificate 2A of the content provider 2 includes a version number of the public key certificate, a serial number of the public key certificate to be allocated to the content provider 2 by the authentication station, an algorithm and a parameter used for the signature, a name of the authentication station, an effective period of the public key certificate, a name of the content provider 2, the public key K_pcp of the content provider 2, and signatures. The signature is data generated by applying the secret key K_sca of the authentication station to a hash value generated by applying a hash function to the version number of the public key certificate, a serial number of the public key certificate to be allocated to the content provider 2 by the authentication station, an algorithm and a parameter used for the signature, a name of the authentication station, an effective period of the public key certificate, and a name of the content provider 2, the public key K_pcp of the content provider 2.

[0298] FIG. 27 illustrates another example of the public key certificate of the content provider 2. The public key certificate 2B of the content provider 2 includes a version number of the public key certificate, a serial number of the public key certificate to be allocated to the content provider 2 by the authentication station, an algorithm and a parameter used for the signature, a name of the authentication station, an effective period of the public key certificate, a name of the content provider 2, the public key K_pcp of the content provider 2, the individual key K_i encrypted by the delivery key K_d, and signatures. The signature is data generated by applying the secret key K_sca of the authentication station to a hash value generated by applying a hash function to a version number of the public key certificate, a serial number of the public key certificate to be allocated to the content provider 2 by the authentication station, an algorithm and a parameter used for the signature, a name of the authentication station, an effective period of the public key certificate, a name of the content provider 2, the public key K_pcp of the content provider 2, and the individual key K_i encrypted by the delivery key K_d.

[0299] FIG. 28 illustrates yet another example of the public key certificate of the content provider 2. The public key certificate 2B of the content provider 2 includes a version number of the public key certificate, a serial number of the public key certificate to be allocated to the content provider 2 by the authentication station, an algorithm and a parameter used for the signature, a name of the authentication station, an effective period of the public key certificate, a name of the content provider 2, the public key K_pcp of the content provider 2, a predetermined type of data that is a part of the individual key K_i encrypted by the delivery key K_d, and signatures. The signature is data generated by applying the secret key K_sca of the authentication station to a hash value generated by applying a hash function to a version number of the public key certificate, a serial number of the public key certificate to be allocated to the content provider 2 by the authentication station, an algorithm and an parameter used for the signature, a name of the authentication station, an effective period of the public key certificate, a name of the content provider 2, the public key K_pcp of the content provider 2, and a predetermined type of data that is a part of the individual key K_i encrypted by the delivery key K_d.

[0300] FIG. 29 illustrates the service provider secure container. The service provider secure container 3A is comprised of price information and signatures. The signature is data generated by applying the secret key K_ssp of the service provider 3 to a hash value generated by applying a hash function to price information, if necessary.

[0301] FIG. 30 illustrates another example of the service provider secure container. The service provider secure container 3B includes the content provider secure container, price information and signatures. The signature is data generated by applying the secret key K_ssp of the service provider 3 to a hash value generated by applying a hash function to the content provider secure container and the price information.

[0302] FIG. 31 illustrates the public key certificate of the service provider 3. The public key certificate 4A of the service provider 3 includes a version number of the public key certificate, a serial number of the public key certificate to be allocated to the content provider 3 by the authentication station, an algorithm and a parameter used for the signature, a name of the authentication station, an effective period of the public key certificate, a name of the service provider 3, the public key K_pcp of the service provider 3, and signatures. The signature is data generated by applying the secret key K_sca of the authentication station to a hash value generated by applying a hash function to a version number of the public key certificate, a serial number of the public key certificate to be allocated to the service provider 3 by the authentication station, an algorithm and a parameter used for the signature, a name of the authentication station, an effective period of the public key certificate, and a name of the service provider 3, the public key K_pcp of the service provider 3.

[0303] FIG. 32 illustrates the public key certificate of the user apparatus. The public key certificate 5A of the user apparatus includes a version number of the public key certificate, a serial number of the public key certificate to be allocated to the user apparatus (more precisely the encryption processing section (a exclusive use ticket)) by the authentication station, an algorithm and a parameter used for the signature, a name of the authentication station, an effective period of the public key certificate, a name of the user apparatus, the public key K_pu of the user apparatus, and the signatures. The signature is data generated by applying the secret key K_sca of the authentication station to a hash value generated by applying a hash function to the version number of the public key certificate, a serial number of the public key certificate to be allocated to the user apparatus by the authentication station, an algorithm and a parameter used for the signature, a name of the authentication station, an effective period of the public key certificate, and a name of the user apparatus, the public key K_pu of the user apparatus.

[0304] FIGS. 33 and 34 shows a data format of a handling policy that is generated for each single content or album content by the content provider 2 and shows contents of a utilization right purchasable by the user home network 5.

[0305] In the data of the handling policy for the single content (FIG. 33), a type of the data, a type of the handling policy, an effective period of the handling policy, an ID of the contents, an ID of the content provider, an ID of the handling policy, aversion of the handling policy, a regional code, usable apparatus conditions, usable user conditions, an ID of the service provider, generation management information, the number of rules including the purchasable utilization right indicated by the handling policy, address information indicating the storage position of the rules, the rules stored in the position indicated by the address information, the public key certificate and signatures.

[0306] The rule is composed of a rule number given as a serial number for each utilization right, a utilization right content number indicating the utilization right contents, its parameter, a minimum sales price, a profit amount of the content provider, a profit ratio of the content provider, a data size, and transmission information.

[0307] In addition, data of a handling policy for the album contents (FIG. 34), a type of data, a type of the handling policy, an effective period of the handling policy, an ID of the album, a version of the handling policy, an ID of the contents, an ID of the content provider, an ID of the handling policy, aversion of the handling policy, a regional code, usable apparatus conditions, usable user conditions, an ID of the service provider, the number of a handling policy of single contents forming the album, address information indicating a storing position of the handling policy of the single content, a data packet of the handling policy of the single content stored in the position indicated by the address information, generation management information, the number of rules including the purchasable utilization right indicated by the handling policy, address information indicating the storage position of the rules, the rules stored in the position indicated by the address information, the public key certificate and signatures.

[0308] Further, similar to the rule of the handling policy of the single content, the rules is composed of a rule number given as a serial number for each utilization right, a utilization right content number indicating the utilization right contents, its parameter, a minimum sales price, a profit amount of the content provider, a profit ratio of the content provider, a data size, and transmission information.

[0309] In these a handling policy, a type of data indicates that the data is the data of a handling policy, and a type of the handling policy indicates which of single or album contents the handling policy is. The effective period of the handling policy indicates a usage period of the handling policy by a date on which the period expires, or by the number of days from a date to be a basis when the use has started to a data when the period expires. An ID of the contents and an ID of the album indicates the purchasable single contents or album contents indicated by the handling policy, an ID of the content provider indicates the ID of the content provider 2 that has provided for the handling policy.

[0310] In addition, an ID of the handling policy is for identifying the handling policy, and is used, for example, for identifying the handling policy in the case in which a plurality of a handling policy are set for identical contents. A version of the handling policy indicates revision information of a policy that is revised according to a use period. Therefore, the handling policy is managed by the ID of the handling policy and the version of the handling policy.

[0311] A regional code indicates a region where a handling policy is usable by coding the region, and can assign a code indicating a specific region limiting regions where the handling policy is usable and a code that can make the handling policy usable in all the regions to the regional code. Usable apparatus conditions indicate conditions of an apparatus that can utilize the handling policy, and usable user conditions indicate conditions of a user who can utilize the handling policy.

[0312] An ID of a service provider indicates an ID of a service provider 3 that utilizes a handling policy, and the ID of the service provider includes an ID of a specific service provider 3 limiting a service provider 3 that can use the handling policy and an ID that makes the handling policy usable for a plurality of (all) the service providers.

[0313] Moreover, generation management information indicates a maximum number of times contents can be re-purchased. A signature is affixed to the entirety ranging from a type of data to a public key certificate excluding the signature from a handling policy. An algorithm and a parameter used in preparing the signature and a key to be used for verification of the signature are included in the public key certificate. In addition, in rules, a utilization right content number is a number added for each utilization right content, and a parameter indicates a parameter of right contents. A minimum sales price indicates a minimum sales price in selling single or album contents according to the utilization right contents, a profit amount and a profit ratio of a content provider indicates an amount of a profit that a content provider 2 can obtain when the single contents and the album contents are purchased, and a profit ratio to the sales price. A data size indicates data size of transmission information, and the transmission information consists of a point to be added to a user through a purchase of the utilization right set by the content provider 2, mileage information made up of a discount amount of the utilization right according to the point, and various kinds of information set by the content provider 2, if necessary.

[0314] Here, in the handling policy of the album contents, a plurality of rules indicate a purchase form of the album. In addition, in a handling policy of a plurality of single contents stored in the handling policy of the album contents, rules stored in the handling policy indicate a purchase form of the single contents in the album such as a form in which respective corresponding single contents can be independently purchased as a single tune out of the album, or a form in which respective corresponding single contents can be purchased as an album tune only (that is, can only be purchased together with other single contents as an album).

[0315] Therefore, in a handling policy of album contents, it is defined such that either of album contents or single contents that can be soled as a single tune can be selected to be purchased in the manner in which the album contents are purchased based on rules of the handling policy and the single contents are purchased as a single tune.

[0316] In addition, in a handling policy of album contents, with the addition of a signature to the entire album contents, tamper or the like can be checked for a handling policy of each single content as well together with the handling policy of the album contents simply by verifying the signature without respectively verifying the handling policy of the single contents stored in the handling policy, hence, the verification of a signature can be thereby simplified.

[0317] Incidentally, in a handling policy of single and album contents, presence or absence of a verification of a signature can be stored, if necessary, which indicates whether or not the verification of a signature is executed to the contents. This is because the verification of a signature takes time, and, if information on presence or absence of the verification of a signature with respect to a handling policy is stored, makes the verification of a signature of contents to be executed or not to be executed according to the information.

[0318] In addition, in a handling policy of album contents, although it stores a handling policy of a plurality of single contents forming the album, it may not store a handling policy of the plurality of single contents.

[0319] Moreover, in a handling policy of single and album contents, since a profit amount and a profit ratio of a content provider can be managed altogether by the electronic distribution service center 1, the handling policy can be formed excluding the profit amount and the profit ratio of the content provider.

[0320] FIGS. 37 and 38 illustrate a data format of price information, and the price information is generated for each a handling policy of single contents to be given by a content provider 2 and for each a handling policy of album contents in a service provider 3, and indicates a price of the single contents and the album contents.

[0321] In the data of the handling policy for the single content (FIG. 37), a type of the data, a type of the price information, an effective period of the price information, an ID of the contents, an ID of the service provider, an ID of the price information, a version of the price information, a regional code, usable apparatus conditions, usable user conditions, an ID of the content provider, an ID of the handling policy to which the price information is added, the number of rules including the purchasable utilization right indicated by the price information, address information indicating the storage position of the rules, the rules stored in the position indicated by the address information, the public key certificate and signatures.

[0322] The rule is composed of a rule number given as a serial number for each utilization right, a profit amount of the service provider, a profit ratio of the service provider, a price, a data size, and transmission information.

[0323] In addition, in the data of the handling policy for the single content (FIG. 38), a type of the data, a type of the price information, an effective period of the price information, an ID of the album, an ID of the service provider, an ID of the price information, a version of the price information, a regional code, usable apparatus conditions, usable user conditions, an ID of the content provider, an ID of the handling policy to which the price information is added, the number of pieces of price information of single contents forming the album, address information indicating a storage position of the price information of the single contents, a data packet of the price information of the single contents stored in the position indicated by the address information, the number of rules including the purchasable utilization right indicated by the price information, address information indicating the storage position of the rules, the rules stored in the position indicated by the address information, the public key certificate and signatures.

[0324] Similar to the rule of the price information for the single contents, the rule is composed of a rule number given as a serial number for each utilization right, a profit amount of the service provider, a profit ratio of the service provider, a price, a data size, and transmission information.

[0325] In the above-mentioned price information, a type of data indicates that the data is the data of price information, and a type of the price information indicates which of single or album contents the price information is. The effective period of the price information indicates a usage period of the price information by a date on which the period expires, or by the number of days from a date to be a basis when the use has started to a data when the period expires. An ID of the contents and an ID of the album indicates the purchasable single contents or album contents indicated by the price information, an ID of the service provider indicates the ID of the service provider 3 that has prepared the price information.

[0326] In addition, an ID of the price information is for identifying the price information, and is used, for example, for identifying the price information in the case in which a plurality of pieces of price information are set for identical contents. A version of the price information indicates revision information of price information that is revised according to a use period. Therefore, the price information is managed by the ID of the price information and the version of the price information.

[0327] A regional code indicates a region where price information is usable by coding the region, and can assign a code indicating a specific region limiting regions where the price information is usable and a code that can make the price information usable in all the regions to the regional code. Usable apparatus conditions indicate conditions of an apparatus that can utilize the price information, and usable user conditions indicate conditions of a user who can utilize the price information. An ID of a content provide indicates an ID of a content provider 2 that has provided for a handling policy to which the price information is added. An ID of the handling policy is for identifying the handling policy to which the price information is added.

[0328] Moreover, a signature is affixed to the entirety ranging from a type of data to a public key certificate excluding the signature from price information. An algorithm and a parameter used in preparing the signature and a key to be used for verification of the signature are included in the public key certificate.

[0329] In addition, in rules, a rule number uses a rule number of a rule indicated by a corresponding a handling policy as it is. A profit amount and a profit ratio of a service provider indicates an amount of profit that a service provider 3 can obtain when single contents and album contents are purchased and a profit ration to a price, and the price indicates a sales price of the single contents and the album contents that are set by the service provider 3 based on utilization right contents and a corresponding minimum sales price. A data size indicates data size of transmission information, and the transmission information consists of a point to be added to a user through a purchase of the utilization right set by the service provider 3, mileage information made up of a discount amount of the utilization right according to the point, and various kinds of information set by the service provider 3, if necessary.

[0330] Here, when generating price information, the service provider 3 can set all the purchasable utilization right indicated by a corresponding a handling policy as a purchasable right indicated by the price information, and at the same time, can set a utilization right arbitrary selected out of all the purchasable utilization right indicated by the handling policy, thus, can select a utilization right provided for by the content provider 2.

[0331] In addition, in price information of album contents, a plurality of rules provides for a sales price corresponding to a purchase form of an album. Further, in price information of a plurality of single contents stored in the price information of the album contents, rules of price information of single contents that can be soled as a single tune provides for a sales price of single contents that can be sold as the single tune.

[0332] Therefore, in price information of album contents, the price information is made such that a sales price of an album and a sales price of single contents that can be sold as a single tune can be recognized by one piece of the price information.

[0333] In addition, in price information of album contents, with the addition of a signature to the entire album contents, tamper or the like can be checked for price information of each single content as well together with the price information of the album contents simply by verifying the signature without respectively verifying the signature of price information of the single contents stored in the price information, hence, the verification of a signature can be thereby simplified.

[0334] Incidentally, in price information of a single and an album, presence or absence of a verification of a signature with respect to contents as in the above-mentioned a handling policy concerning FIGS. 33 and 34. In addition, in price information of album contents, although it stores price information of a plurality of single contents forming the album, it may not store price information of the plurality of single contents.

[0335] Moreover, in price information of single and album contents, since a profit amount and a profit ratio of a service provider can be managed altogether by the electronic distribution service center 1, the price information may be formed excluding the profit amount and the profit ratio of the service provider.

[0336] FIG. 41 illustrates a data format of license conditions information, and the license conditions information is prepared, when a user purchases contents, based on a handling policy of the purchased contents in an apparatus in the user home network 5, and indicates utilization right contents selected by the user among utilization right contents indicated by the handling policy.

[0337] In data of license conditions information, a type of data, a type of license conditions information, an effective period of the license conditions information, an ID of contents, an ID of an album, an ID of an encryption processing section, an ID of a user, an ID of a content provider, an ID of a handling policy, version of the handling policy, an ID of a service provider, an ID of price information, a version of price information, an ID of license conditions information, a rule number attached to a reproduction right (utilization right) as a serial number, a utilization right content number, a remaining number of time of reproduction, an effective period of the reproduction right, a rule number attached to a copying right (utilization right) as a serial number, a utilization right content number, a remaining number of times of copying, generation management information, and an ID of an encryption section having a reproduction right are stored.

[0338] In license conditions information, a type of data indicates that the data is data of the license conditions information, a type of license conditions information indicates whether the license conditions information is license conditions information of single contents or album contents. An effective period of license conditions information indicates a usage period of the license conditions information by a data when the period expires, the number of days from a day to be a basis of start using until a data when the period expires.

[0339] An ID indicating purchased single contents is described in an ID of contents, and an ID indicating an album is described in an ID of an album only when the album is purchased. In fact, if contents are purchased as a single, the ID indicating the purchased single contents is described in an ID of the contents, and if contents are purchased as an album, IDs of all the single contents forming the album are described in the ID of contents and an ID indicating the purchased album is described in the ID of an album. Therefore, just looking at the ID of an album, whether purchased contents are a single or an album can be easily determined.

[0340] An ID of an encryption processing section indicates an encryption processing section of an apparatus in the user home network 5 that performed purchase processing of contents. When an apparatus in the user home network 5 that purchased contents is shared by a plurality of users, an ID of a user indicates a plurality of users sharing an apparatus.

[0341] In addition, an ID of a content provider indicates an ID of a content provider 2 that has provider for a handling policy used for preparing license conditions information, and an ID of a handling policy indicates a handling policy used for preparing the license conditions information. An version of a handling policy indicates revision information of a handling policy used for preparing license conditions information. An ID of a service provider indicates an ID of a service provider 3 that has prepared price information used for preparing license conditions information, and an ID of price information indicates price information used for preparing the license conditions information. A version of price information indicates revision information of a handling policy used for preparing license conditions information. Therefore, a content provider 2 or a service provider 3 that has provided contents purchased by a user can be found by the ID of a content provider, the ID of a handling policy, the version of a handling policy, the ID of a service provider, the ID of price information and the version of price information.

[0342] An ID of license conditions information is attached by an encryption processing section of an apparatus in a user home network 5 that has purchased contents, and is used for identifying the license conditions information. A rule number of a reproduction right indicates a serial number attached to a reproduction right among a utilization right, and uses a rule number of a rule indicated by a corresponding handling policy or price information as it is. Utilization right contents indicate contents of a reproduction right to be described later. A remaining number of times of reproduction indicates a remaining number of times of reproduction among a number of times of reproduction set in advance to contents, and an effective period of a reproduction right indicates a corresponding reproduction available period of purchased contents by a date and time when the period expires.

[0343] In addition, a rule number of a copying right indicates a serial number attached to a copying right among a utilization right, and uses a rule number of a rule indicated by a corresponding handling policy and price information as it is. Utilization right contents indicate contents of a copying right to be described later. A remaining number of times of copying indicates a remaining number of times of copying among a number of times of copying set in advance to purchased contents.

[0344] Moreover, generation management information indicates, when contents are re-purchased, a remaining number of times the contents can be re-purchased. An ID of an encryption processing section having a reproduction right indicates an encryption processing section having a reproduction right at the current time, and when management is shifted, an ID of an encryption processing section having a reproduction right is changed.

[0345] Incidentally, in license conditions information, an effective period may be provided for with respect to a copying right, and when the effective period is provided for, a period for purchased contents in which copying is available is indicated by a date and time when the period expires, or the like.

[0346] FIG. 42 indicates charge information, and the charge information is generated, when contents are purchased, by an apparatus in the user home network 5 based on a handling policy and price information corresponding to the contents.

[0347] In data of charge information, a type of data, an ID of an encryption processing section, an ID of a user, an ID of contents, an ID of a content provider, an ID of a handling policy, a version of a handling policy, an ID of a service provider, an ID of price information, a version of price information, an ID of license conditions information, a rule number, a profit amount and a profit ratio of a content provider 2, a profit amount and a profit ratio of a service provider, generation management information, a data size of transmission information set by a content provider, the transmission information set by the content provider, a data size of transmission information set by a service provider, transmission information set by the service provider, and an ID of a supplier.

[0348] In charge information, a type of data indicates that the data is charge information, and an ID executes purchase processing of contents and indicates an encryption processing section of an apparatus that has generated the charge information. When a plurality of users share an apparatus in a user home network 5 that has purchased the contents, an ID of a user indicates a plurality of users who share the apparatus, and ID of contents indicates the purchased contents (single contents and album contents).

[0349] In addition, an ID of a content provider indicates an ID of a content provider 2 that has provided for a handling policy used for a purchase processing (an ID of a content provider included in the handling policy), and an ID of a handling policy indicates a handling policy used for the purchase processing. A version of a handling policy indicates revision information of a handling policy used for purchase processing. An ID of a service provider indicates an ID of a service provider 3 that has prepared price information used for purchase processing (an ID of a service provider included in the price information), and an ID of price information indicates price information used for the purchase processing. A version of price information indicates revision information of price information used for purchase processing.

[0350] An ID of license conditions information indicates an ID of license conditions information that has been prepared upon purchase processing, and a rule number indicates a rule number attached to a purchased utilization right as a serial number. A profit amount and a profit ratio of a content provider indicate an amount of dividend that is distributed to a content provider 2 through purchase of contents and its ratio to sales, and a profit amount and a profit ratio of a service provider indicate an amount of dividend that is distributed to a service provider 3 through purchase of contents and its ratio to sales.

[0351] Moreover, generation management information indicates a generation of purchased contents. In addition, a data size indicating a handling policy used for purchase processing and transmission information are stored as they are in a data size of transmission information set by a content provider and the transmission information set by the content provider, and a data size indicating price information used for purchase processing and transmission information are stored as they are in a data size of transmission information set by a service provider and the transmission information set by the service provider. An ID of a supplier indicates an apparatus of a supplier that has applied purchase processing, and the ID is accumulated every time re-purchase of contents is conducted.

[0352] Incidentally, in charge information, since a profit amount and a profit ratio of a content provider and a profit amount and a profit ratio of a service provider may be managed altogether by the electronic distribution service center 1, the charge information may be formed excluding the profit amount and the profit ratio of the content provider as shown in FIG. 43.

[0353] FIG. 44 shows contents of a purchasable utilization right, and as the utilization right, there are roughly a reproduction right, a copying right, a right content changing right, a re-purchase right, an additional purchase right, and a management transfer right.

[0354] The reproduction right includes an unlimited reproduction right that does not have limitations on a period or the number of times of reproduction, a reproduction right with a period limitation that limits a reproduction period, a reproduction right with a cumulating time limitation that limits cumulating time of reproduction, and a reproduction right with a number of times limitation that limits the number of times of reproduction. The copying right includes an unlimited copying right without a period limitation, a number of times limitation and copy management information (e.g., the serial copy management: SCMS), a copying right with a number of times limitation and without copy management information that limits the number of times of copying but does not have copy management information, a copying right with copy management information that does not have a period limitation and a number of times limitation but adds and provides copy management information, and a copying right with a number of times limitation and copy management information that limits the number of times of copying, and adds and provides copy management information. Incidentally, in addition to the above, as a copying right, there are a copying right with a period limitation that limits a copy available period (including the one that adds copy management information and the one that does not add the copy management information), and a copying right with a cumulating time limitation that limits a cumulating time of copying (i.e., a cumulating time required for reproduction of copied contents) (including the one that adds copy management information and the one that does not add the copy management information), and the like.

[0355] In addition, the right contents changing right is a right for changing contents of a right already purchased to other contents, and the re-purchase right is a right for separately purchasing a utilization right based on a right purchased by other apparatuses as described above. The additional purchase right is a right for purchasing and adding to independently purchased contents other contents of an album including the contents, and the management transfer right is a right for transferring a purchased right to change an owner.

[0356] An specific example of utilization right contents shown in FIG. 33, etc. will now be described. In fact, as shown in FIG. 45A, as data of the unlimited reproduction right, information on an effective period of a reproduction right that indicates an effective period of a reproduction right by a date on which the period expires, or the number of days from a date to be a basis of starting an effective period until a date on which the period expires, or the like is stored in a region of utilization right contents. As shown in FIG. 45B, as data of the reproduction right with a period limitation, information on an effective period of the reproduction right that indicates an effective period of a reproduction right by a date on which the period expires, or the number of days from a date to be a basis of starting an effective period until a date on which the period expires, or the like is stored in a region of utilization right contents.

[0357] As shown in FIG. 45C, as data of the reproduction right with a cumulating limitation, information on an effective period of the reproduction right that indicates an effective period of a reproduction right by a date on which the period expires, or the number of days from a date to be a basis of starting an effective period until a date on which the period expires, or the like, and information on the number of days and time indicating a limitation of accumulating time contents can be reproduced are stored in a region of utilization right contents. As shown in FIG. 45D, as data of the reproduction right with a number of times limitation, information on an effective period of the reproduction right that indicates an effective period of a reproduction right by a date on which the period expires, or the number of days from a date to be a basis of starting an effective period until a date on which the period expires, or the like, and information on the number of times of reproduction indicating the number of times contents can be reproduced are stored in a region of utilization right contents.

[0358] In addition, as shown in FIG. 45E, as data of the unlimited copying right without copy management information, information on an effective period of the copying right that indicates an effective period of a copying right by a date on which the period expires, or the number of days from a date to be a basis of starting an effective period until a date on which the period expires, or the like is stored in a region of utilization right contents. As shown in FIG. 45F, as data of the copying right with a number of times limitation and without copy management information, information on an effective period of the copying right that indicates an effective period of a copying right by a date on which the period expires, or the number of days from a date to be a basis of starting an effective period until a date on which the period expires, or the like, and information on the number of times of copying that indicates the number of times contents can be copied are stored in a region of utilization right contents.

[0359] In addition, as shown in FIG. 45G, as data of the copying right with copy management information, information on an effective period of the copying right that indicates an effective period of a copying right by a date on which the period expires, or the number of days from a date to be a basis of starting an effective period until a date on which the period expires, or the like is stored in a region of utilization right contents. As shown in FIG. 45H, as data of the copying right with a number of times limitation and copy management information, information on an effective period of the copying right that indicates an effective period of a copying right by a date on which the period expires, or the number of days from a date to be a basis of starting an effective period until a date on which the period expires, or the like, and information on the number of times of copying that indicates the number of times contents can be copied are stored in a region of utilization right contents.

[0360] Moreover, as shown in FIG. 45I, as data of the right contents changing right, information on an effective period of the right contents changing right that indicates an effective period of a right content changing right by a date on which the period expires, or the number of days from a date to be a basis of starting an effective period until a date on which the period expires, or the like, an old rule number for retrieving utilization right contents before change, and a new rule number for retrieving utilization right contents after change are stored in a region of utilization right contents. Incidentally, as utilization right contents, a plurality of kinds of contents exist for each utilization right content in one reproduction right with period limitation as a plurality kinds of reproduction right with period limitation exist by setting the period. Therefore, since it is difficult to manage utilization right contents only by a utilization right contents number, in the right contents changing right, utilization right contents are managed by a rule number attached for each of a plurality of contents for each of these utility right contents.

[0361] As shown in FIG. 45J, as data of the repurchase right, information on an effective period of the repurchase right that indicates an effective period of a repurchase right by a date on which the period expires, or the number of days from a date to be a basis of starting an effective period until a date on which the period expires, or the like, an old rule number for retrieving utilization right contents before repurchase, and a new rule number for retrieving utilization right contents after repurchase, and maximum distribution generation information that indicates the maximum number of times contents can be repurchased are stored in a region of utilization right contents.

[0362] As shown in FIG. 45K, as data of the additional purchase right, information on an effective period of the additional purchase right that indicates an effective period of an additional purchase right by a date on which the period expires, or the number of days from a date to be a basis of starting an effective period until a date on which the period expires, or the like, and a minimum holding contents number and a maximum holding contents number indicating single contents already purchased among a plurality of single contents forming album contents are stored in a region of utilization right contents.

[0363] As shown in FIG. 45L, as data of the management transfer right, information on an effective period of the management transfer right that indicates an effective period of a management transfer right by a date on which the period expires, or the number of days from a date to be a basis of starting an effective period until a date on which the period expires, or the like is stored in a region of utilization right contents.

[0364] Incidentally, as such utilization right contents, for example, when data of a game is divided into a plurality of contents, a contents purchase right for purchasing the contents in accordance with a predetermined order may be provided for. Further, as shown in FIG. 45M, as data of the contents purchase right, information on an effective period of the contents purchase right that indicates an effective period of a contents purchase right by a date on which the period expires, or the number of days from a date to be a basis of starting an effective period until a date on which the period expires, or the like, an ID of contents already purchased, an old rule number for retrieving utilization right contents already purchased, and a new rule number for retrieving utilization right contents to be purchased anew are stored in a region of utilization right contents. In this way, a game program having a series of stories is made to be purchased, and contents (game) themselves can be upgraded.

[0365] FIG. 46 shows a data format of single contents, and in data of the single contents, a type of data, a type of contents, an effective period of contents, a category of contents, an ID of contents, an ID of a content provider, an encryption method of contents, a data length of encrypted contents, the encrypted contents, a public key certificates and a signature are stored.

[0366] In the single contents, the type of data indicates that the data is data of the contents, and the type of contents indicates that the contents are a single. The effective period of contents indicates a distribution period of the contents by a data on which the period expires, the number of days from a data to be a basis when distribution is started until the period expires, or the like. The category of contents indicates whether the contents are music data, program data, video data, or the like, and the ID of contents is for identifying the single contents.

[0367] The ID of a content provider indicates an ID of a content provider 2 having the single contents. The encryption method of contents indicates an encryption method used for encryption of the contents (e.g., DES). The signature is attached to the entirety from the type of data to the public key certificate excluding the signature from data of the single contents. An algorithm and a parameter used in preparing the signature as well as a key to be used for verification of the signature are included in the public key certificate.

[0368] In addition, FIG. 47 indicates a data format of album contents, and in data of the album contents, a type of data, a type of contents, an effective period of contents, an ID of an album, an ID of a content provider, the number of single contents, address information of single contents, single contents, a public key certificates and a signature are stored.

[0369] In the album contents, the type of data indicates that the data is data of the contents, and the type of contents indicates that the contents are an album. The effective period of contents indicates a distribution period of the contents by a data on which the period expires, the number of days from a data to be a basis when distribution is started until the period expires, or the like, and the ID of an album is for identifying the album contents.

[0370] The ID of a content provider indicates an ID of a content provider 2 having the album contents. The number of single contents indicates the number of single contents forming an album, the address information indicates a storage position of single contents forming the album, and is a data packet of a plurality of single contents forming the album that are actually stored in a position indicated by the address information. In addition, the signature is attached to the entirety from the type of data to the public key certificate excluding the signature from data of the single contents. An algorithm and a parameter used in preparing the signature as well as a key to be used for verification of the signature are included in the public key certificate.

[0371] In addition, in album contents, with the addition of a signature to the entire album contents, tamper or the like can be checked for each single content as well together with the album contents simply by verifying the signature without respectively verifying the single contents stored in the album contents, hence, the verification of a signature can be thereby simplified.

[0372] FIG. 48 shows a data format of a key for single contents, and in key data for the single contents, a type of data, a type of key data, an effective period of a key, an ID of contents, an ID of a content provider, a version of a key, an encryption method of a content key K_co, an encrypted content key K_co, an encryption method of an individual key K_l, an encrypted individual key K_i, a public key certificated and a signature are stored.

[0373] In the key data for single contents, the type of data indicate that the data is data of a key, the type of key data indicates the key data is for single contents. The effective data of a key indicates a usage period of a key (a content key K_co and an individual key K_i) shown in the key data by a data on which the period expires, the number of days from a data to be a basis when use is started until the period expires, or the like, and the ID of contents indicates single contents to be encrypted by the content key K_co. The ID of a content provider holds contents and indicates an ID of a content provider 2 that has generated the content key K_co.

[0374] The version of a key indicates revision information of a key (a content key K_co and an individual key K_i) that has been revised according to a usage period. The encryption method of contents key K_co indicates an encryption method (e.g., DES) used for encryption of the content key K_co using an individual key K_i, and the encrypted content key K_co indicates a content key K_co that has been encrypted using the individual key K_l by the encryption method. The encryption method of an individual key K_l indicates an encryption method (e.g., Triple-DES-CBC) for encrypting an individual key K_i using a delivery key K_d, and the encrypted individual key K_i indicates an individual key K_i that has been encrypted using a delivery key K_d by the encryption method. The signature is attached to the entirety from the type of data to the public key certificate excluding the signature from data of the single contents. An algorithm and a parameter used in preparing the signature as well as a key to be used for verification of the signature are included in the public key certificate.

[0375] Here, the delivery key K_d and the individual key K_i are delivered from a content provider 2, always united by key data for single contents. Then, in the key data for single contents, one signature is added to the entire data. Therefore, in an apparatus having received the key data for single contents, it is not necessary to separately verify signatures with respect to an encrypted content key K_co and an encrypted key K_i, the signatures are deemed to be verified with respected to the encrypted content key K_co and the encrypted individual key K_i simply by verifying one signature of the key data for single contents, hence, the verification of a signature with respect to the encrypted content key K_co and the encrypted individual key K_i can be thereby simplified.

[0376] Incidentally, an individual key K_co is encrypted with an ID of a content provider that encrypts a content key K_i using the individual key K_i. A method for encrypting an individual key K_i together with an ID of a content provider by an encryption method called the CBC of a triple DES will be described with reference to FIG. 49. That is, with such an encryption method, after connecting a predetermined initial value and an individual key K_i (64 bits), the individual key K_i is encrypted by an encryption method by the CBC mode of triple DES, and after connecting a first value of a resulting 64 bits with an ID (64 bits) of a content provider, the individual key K_i is encrypted by an encryption method by the CBC mode of triple DES using the delivery key K_d again, thereby obtaining a second value of 64 bits. In such an encryption method, data of 16 bites connecting the first value and the second value becomes the encrypted individual key K_i that is stored in key data for single contents (in this case, the first value corresponds to first 64 bit data of the encrypted individual key K_i to be stored in the key data for single contents, and the second value becomes 64 bit data following the first value among the encrypted individual key K_i to be stored in the key data for single contents.)

[0377] In addition, FIG. 50 shows key data for album contents, and in the key data for album contents, a type of data, a type of key data, an effective period of a key, an ID of an album, an ID of a content provider, a version of a key, the number of key data for single contents to be used for encrypting single contents forming an album, address information indicating a storage position of the key data, a key data packet stored in a position indicated by the address information, a public key certificate and a signature are stored.

[0378] In the key data for album contents, the type of data indicate that the data is data of a key, the type of key data indicates the key data is for album contents. The effective data of a key indicates a usage period of a key (a content key K_co) shown in the key data by a data on which the period expires, the number of days from a data to be a basis when use is started until the period expires, or the like, and the ID of an album indicates album contents consisting of single contents to be encrypted by the content key. K_co. The ID of a content provider indicates an ID of a content provider 2 that encrypts album contents.

[0379] The version of a key indicates revision information of a key (a content key K_co) revised according to a usage period. The signature is attached to the entirety from the type of data to the public key certificate excluding the signature from data of the single contents. An algorithm and a parameter used in preparing the signature as well as a key to be used for verification of the signature are included in the public key certificate.

[0380] In addition, in key data for album contents, with the addition of a signature to the entire album contents, tamper or the like can be checked for key data of each single content as well together with key data of the album contents simply by verifying the signature without respectively verifying key data for a plurality of single contents stored in key data for the album contents, hence, the verification of a signature can be thereby simplified.

[0381] FIG. 51 illustrates operations of mutual authentication of an encryption processing section 65 and an extension section 66, in which one common key uses DES that is a common key encryption. In FIG. 51, given that A is an extension section 66 and B is an encryption processing section 65, the encryption processing section 65 generates a random number R_B of 64 bits, and transmits R_B and ID_B that is its own ID to the extension section 66 via an upper controller 62. The extension section 66 having received the transmission generates a random number R_A anew, encrypts R_A, R_B and ID_B using a key K_AB in a CBC mode of DES, and returns them to the encryption processing section 65 via the upper controller 62.

[0382] The CBC mode of DES is a method for applying exclusive OR to immediately preceding output and input and encrypting them when conducting encryption. In this example,

[0383] X=DES (K_AB, R_A+IV) IV=initial value, +: exclusive OR

[0384] Y=DES (K_AB, R_B+X)

[0385] Z=DES (K_AB, ID_B+Y)

[0386] and outputs are X, Y, Z. In these equations, DES (K_AB, R_A+IV) represents encrypting data R_A+IV with DES using a key K_AB, Y=DES (K_AB, R_B+X) represents encrypting data R_B+X with DES using the key K_AB, and Z=DES (K_AB, ID_B+Y) represents encrypting data ID_B+Y with DES using the key K_AB.

[0387] The encryption processing section 65 having received the data decrypts the received data with the key K_AB, and inspects whether R_B and ID_B match transmitted data. When the data passes the inspection, the extension section 66 is authenticated as a legal one. Subsequently, a session key (i.e., a temporary key K_temp, which is generated by a random number) SK_AB, R_B, R_A and SK_AB are encrypted using the key K_AB in a CBC mode of DES and transmitted to the extension section 66 via the upper controller 62. The extension section 66 having received the transmission decrypts the received data with the key K_AB, and inspects whether R_B and R_A match the one transmitted by the extension section 66. When the data passes the inspection, the encryption processing section 65 is authenticated as a legal one, and the data SK_AB is used for subsequent communications as a session key. Further, in examining the received data, if illegality or mismatching is found, mutual authentication is deemed failed and the processing is terminated.

[0388] FIG. 52 illustrates operation of mutual authentication between a mutual authentication module 95 in an encryption processing section 65 of a home server 51 and a mutual authentication module (not shown) in an encryption processing section 73 of a fixed apparatus 52 using an elliptical curve encryption of 160 bit length that is a public key encryption. In FIG. 52, given that A is an encryption processing section 73 and B is an encryption processing section 65, the encryption processing section 65 generates a random number R_B of 64 bits, and transmits it to a fixed apparatus 52 via an upper controller 62 and a transmission section 61. The fixed apparatus 52 having received the random number generates a random number R_A of 64 bits anew and a random number A_K smaller than a sample number p in the encryption processing section 73. Then, the fixed apparatus 52 finds a point A_V that is a base point G multiplied by A_K, connects R_A, R_B, A_V (x coordinates and Y coordinates) (64 bits+64 bits+160 bits+160 bits=448 bits), and generates signature data A.Sig with a secret key held by itself with respect to the data. Further, since scalar times of a base point is the same as the method described in the generation of a signature of FIG. 10, its description is omitted. Connection of data is such data of 32 bits which, when data A of 16 bits and data B of 16 bits are connected, data of upper 16 bits is A and data of lower 16 bits is B. Since generation of a signature is the same as the method described in the generation of a signature of FIG. 10, its description is omitted.

[0389] Then, the encryption processing section 73 transfers R_A, R_B and A_V as well as the signature data A.Sig to the upper controller 72, and the upper controller 72 adds a public key certificate for the fixed apparatus 52 (stored in a small storage section 75), and transmits them to a home server 51 via a communication section 71. Since the public key certificate is illustrated in FIG. 32, its detailed description is omitted. The home server 51 having received this verifies a signature of the public key certificate of the fixed apparatus 52 in the encryption processing section 65. Since the verification of the signature is the same as the method described in the verification of the signature of FIG. 11, its description is omitted. Then, the encryption processing section 73 inspects whether the random number R_B among the transmitted data is identical with the one transmitted by the encryption processing section 65, and if it is identical, verifies the signature data A.Sig. When the verification is successful, the encryption processing section 65 authenticates the encryption processing section 73. Further, since the verification of the signature is the same as the method described in the verification of the signature of FIG. 11, its description is omitted. Then, the encryption processing section 65 generates a random number B_K smaller than the sample number p, finds a point B_V that is the base point G times B_K, connects R_B, R_A and B_V (x coordinates and Y coordinates), and generates signature data B.Sig with a secret key held by itself with respect to the data. Finally, the encryption processing section 65 transfers R_B, R_A and B_V as well as the signature data B.Sig to the upper controller 62, and the upper controller 62 adds a public key certificate for the home server 51 (stored in a mass storage section 68) and transmits them to the fixed apparatus 52 via the communication section 61.

[0390] The fixed apparatus 52 having received this verifies the signature of the public key certificate of the home server 51 in the encryption processing section 73. Then, the fixed apparatus 52 inspects whether the random number R_A among the transmitted data is identical with the one transmitted by the encryption processing section 73, and if it is identical, verifies the signature data B.Sig. When the verification is successful, the encryption processing section 73 authenticates the encryption processing section 65.

[0391] When both the data was successful in verification, the encryption processing section 65 calculates B_K A_V (although B_K is a random number, since A_V is a point on an elliptic curve, scalar times calculation of a point on an elliptic curve is necessary), the encryption processing section 73 calculates A_K B_V, and the lower 64 bits of X coordinates of these points are used for subsequent communications as a session key (a temporary key K_temp) (if the common key encryption is the common key encryption of the 64 bit key length). Incidentally, the session key to be used for communication is not limited to the lower 64 bit of the X coordinates, but the lower 64 bits of the Y coordinates may be used. Further, in secret communication after mutual authentication, data is not only encrypted with the temporary key K_temp, but also a signature may be added to the encrypted transmission data.

[0392] In verifying a signature and received data, if illegality or mismatching is found, mutual authentication is deemed failed and the processing is terminated.

[0393] FIG. 53 illustrates operations when a settlement available apparatus in the user home network 5 transmits charge information to the electronic distribution service center 1. The settlement available apparatus in the user home network 5 retrieves an object apparatus that it should settle on behalf of the network from registration information, conducts mutual authentication, and has the charge information encrypted with the shared temporary key K_temp (which is different for each mutual authentication) sharing the charge information and sent (a signature is attached to the data then). After finishing processing for all the apparatuses, the settlement available apparatus mutually authenticates with the electronic distribution service center 1, encrypts all the charge information with the shared temporary key, attaches signature data to these, and transmits them to the electronic distribution service center 1 together with a handling policy and price information, if necessary. Further, since an ID of a handling policy, an ID of price information and the like that are necessary for distribution of an amount are included in the charge information to be transmitted to the electronic service center 1 from the user home network 5, a handling policy or price information with large information amount is not necessarily transmitted. The user management section 18 receives this. The user management section 18 verifies signature data with respect to the received charge information, registration information, handling policy and price information. Since the verification of a signature is the same as the method described in FIG. 11, details are omitted. Then, the user management section 18 decrypts the charge information with the temporary key K_temp that is shared for mutual authentication, and transmits the charge information to the history data management section 15 together with the handling policy and the price information.

[0394] Incidentally, in this embodiment, data to be transmitted after mutual authentication is encrypted with the temporary key K_temp, if necessary. For example, since, if contents of a content key K_co and a handling key K_d are seen, data is illegally utilized, it is necessary to encrypt them with the temporary key K_temp and makes them invisible from outside. On the other hand, since, even if contents of charge information and license conditions information are seen, data cannot be illegally utilized, it is not always necessary to encrypt them with the temporary key K_temp, but damages to parties relating to receipt of an amount are generated if, for example, an amount of charge information is tampered or usage conditions of license conditions information is tampered to be loose. Therefore, tamper is prevented by attaching a signature to the charge information or the license conditions information. However, a signature may be attached if a content key K_co or a delivery key K_d is transmitted.

[0395] Then, a transmitting side generates a signature to data to be transmitted or data that is the data encrypted by the temporary key K_temp, and transmits the data and the signature. The receiving side obtains data by verifying the signature if the transmitted data is not encrypted by the temporary key K_temp, or obtains data by decrypting the data with the temporary key K_temp after verifying the signature if the transmitted data is encrypted by the temporary key K_temp. In this embodiment, data to be transmitted after mutual authentication may be applied encryption by a signature or a temporary key K_temp, if necessary.

[0396] The user management section 18 receives a delivery key K_d from the key server 14, encrypts it with a shared temporary key K_temp to add signature data, prepares registration information from the user registration database, and transmits the delivery key K_d, the signature data and the registration information encrypted by the temporary key K_temp to a settlement available apparatus in the user home network 5. Since a method of preparing registration information is just as described in FIG. 8, its detailed description is omitted here.

[0397] When executing settlement, the chart billing section 19 receives charge information, a handling policy, if necessary, and price information from the history data management section 15, calculates a charge amount billed to a user, and transmits billing information to the user. The receipt and disbursement section 20 communicates with a bank, or the like, and executes settlement processing. On that occasion, if there is information such as outstanding fees or the like of the user, the information is transmitted to the charge billing section 19 and the user management section 18 in the form of a settlement report, reflected on the user registration database, and referred to upon subsequent user registration processing or settlement processing.

[0398] The settlement available in the user home network 5 having received the delivery key K_d, the signature data and the registration data encrypted by the temporary key K_temp updates stored registration information, at the same time, inspects the registration information, and if registration is made, encrypts the delivery key K_d with the temporary key K_temp after verifying the signature data, updates a delivery key K_d stored in the storage module in the encryption processing section, and deletes charge information in the storage module. Subsequently, the settlement available apparatus retrieves an object apparatus that it should settle on behalf of the network from the registration information, conducts mutual authentication for each apparatus found by the retrieval, encrypts the delivery key K_d read out from the storage module of the encryption processing section with a temporary key K_temp that is different for each apparatus found by the retrieval, and attaches a signature for each apparatus to send it to each apparatus together with the registration information. The processing ends when all the object apparatuses that the apparatus should settle on behalf of the network are finishes.

[0399] The object apparatus having received the data inspects the registration information as the settlement available apparatus did, decrypts the delivery key K_d with the temporary key K_temp after verifying the signature data, updates the delivery key K_d in the storage module, and deletes charge information.

[0400] Further, for an apparatus marked “registration unavailable” in the registration item of the registration information, since fee is not charged, update of the delivery key K_d and deletion of the charge information are not conducted (contents of the registration items may be various cases that are not described such as stoppage of every actions including use, stoppage of purchase processing, state in which processing was conducted normally).

[0401] FIG. 54 illustrates operations of profit distribution processing of the electronic distribution service center 1. The history data management section 15 maintains and manages charge information transmitted from the user management section 18, a handling policy, if necessary, and price information. The profit distribution section 16 calculates profit for each of the content provider 2, the service provider 3 and the electronic distribution service center 1 from the charge information, the handling policy, if necessary, and the price information transmitted from the history data management section 15, and transmits the results to the service provider management section 11, the content provider management section 12 and the receipt and disbursement section 20. The receipt and disbursement section 20 communicates with a bank or the like, and conducts settlement. The service provider management section 11 transmits distribution information received from the profit distribution section 16 to the service provider 2. The content provider management section 12 transmits the distribution information received from the profit distribution section 16 to the content provider 3.

[0402] The audit section 21 receives charge information, a handling policy and price information from the history data management section 15, and audits if there is any inconsistency in data. For example, the audit section 21 audit if a price in the charge information coincides with data of the price information, if a distribution ratio is coincides, or the like, and audits if the handling policy and the price information coincide each other. In addition, as processing of the audit section 21, there are processing for auditing the coincidence between an amount received from the user home network 5 and a total amount of a distributed profit or an amount transferred to the service provider 3, and processing for auditing whether or not, for example, a content ID or a service provider ID that could not exist or an impossible share, price or the like is included in data in the charge information supplied from an apparatus in the user home network 5.

[0403] FIG. 55 illustrates operations of processing in the electronic distribution service center 1 for transmitting utilization results of contents to JASRAC. The history data management section 15 transmits charge information indicating utilization results of contents by a user to the copyright management section 13 and the profit distribution section 16. The profit distribution section 16 calculates a billing amount to JASRAC and a payment amount from the charge information, and transmits payment information to the receipt and disbursement section 20. The receipt and disbursement section 20 communicates with a bank or the like, and executes settlement processing. The copyright management section 13 transmits the utilization results of contents by the user to JASRAC.

[0404] Processing of the EMD system will now be described. FIG. 56 is a flow chart illustrating processing of distribution and reproduction of contents of this system. In step S40, the content provider management section 12 of the electronic distribution service center 1 transmits an individual key K_i encrypted by a delivery key K_d and a public key certificate of the content provider 2 to the content provider 2, and the content provider 2 receives this. Details of the processing will be described later with reference to a flow chart of FIG. 57. In step S41, a user operates an apparatus (e.g., the home server 51 of FIG. 15) of the user home network 5, and registers the apparatus of the user home network 5 in the user management section 18 of the electronic distribution service center 1. Details of this registration processing will be described later with reference to a flow chart of FIG. 59. In step S42, the user management section 18 of the electronic service center 1, after mutually authenticating with the user home network 5 as described above with reference to FIG. 52, transmits the delivery key K_d to the apparatus of the user home network 5. The user home network 5 receives the key. Details of this processing will be described with reference to a flow chart of FIG. 62.

[0405] In step S43, the signature generation section 38 of the content provider 2 generates a content provider secure container, and transmits it to the service provider 3. Details of this processing will be described later with reference to a flow chart of FIG. 65. In step S44, the signature generation section 45 of the service provider 3 generates a service provider secure container, and transmits it to the user home network 5 via the network 4. Details of this transmission processing will be described later with reference to a flow chart of FIG. 66. In step S45, the purchase module 94 of the user home network 5 executes purchase processing. Details of the purchase processing will be described later with reference to a flow chart of FIG. 67. In step S46, a user reproduces contents in an apparatus of the user home network 5. Details of the reproduction processing will be described later with reference to a flow chart of FIG. 72.

[0406] FIG. 57 is a flow chart illustrating details of processing, which corresponds to S40 of FIG. 56, in which the electronic distribution service center 1 transmits an individual key K_l, an individual key K_l encrypted by a delivery key K_d and a public key certificate to the content provider 2, and the content provider 2 receives these. In step S50, the mutual authentication section 17 of the electronic distribution service center 1 mutually authenticates with the mutual authentication section 39 of the content provider 2. Since the mutual authentication processing was described in FIG. 52, its details are omitted. When it is confirmed that the content provider 2 is a legal provider with the mutual authentication, in step S51, the content provider 2 receives the individual key K_i, the individual key K_i encrypted by the delivery key K_d and the certificate transmitted from the content provider management section 12 of the electronic distribution service center 1. In step S52, the content provider 2 stores the received individual key K_i in the tamper resistant memory 40A, and stores the individual key K_l encrypted by the delivery key K_d and the certificate in the memory 40B.

[0407] In this way, the content provider 2 receives an individual key K_i, an individual key K_l encrypted by a delivery key K_d and a certificated from the electronic distribution service center 1. Similarly, in an example in which processing of the flow chart shown in FIG. 56 is conducted, the service provider 3, in addition to the content provider 2, receives an individual key K_i (which is different from the individual key K_l of the content provider 2), an individual key K_i encrypted by a delivery key K_d and a certificate from the electronic distribution service center 1 with similar processing as that in FIG. 57.

[0408] Further, the memory 40A is desirably a tamper resistant memory whose data is not read out by a third party because it maintains an individual key K_l that should be maintained secretly by the content provider 2, but hardware limitation is not necessary (e.g., a hard disk in a room to which entry is controlled, a hard disk of a personal computer whose password is controlled, or the like may suffice). In addition, the memory 40B may be any apparatus such as an ordinary storage apparatus or the like because it only stores an individual key K_i encrypted by a delivery key K_d and a certificate of the content provider 2 (does not need to be kept secret). Further, the memories 40A and 40B may be united.

[0409] FIG. 58 is a flow chart illustrating processing in which the home server 51 registers settlement information in the user management section 18 of the electronic distribution service center 1. In step S60, the home server 51 mutually authenticates a public key certificate stored in the mass storage section 68 with the mutual authentication section 17 of the electronic distribution service center 1 in the mutual authentication module 95 of the encryption processing section 65. Since this authentication processing is similar to that described with reference to FIG. 52, description is omitted here. A certificate that the home server 51 transmits to the user management section 18 of the electronic distribution service center 1 in step S60 includes data (a public key certificate of a user apparatus) shown in FIG. 32.

[0410] In step S61, the home server decides whether or not a registration of an individual's settlement information (such as a user's credit card number, a settlement organization's account number, or the like) is a new registration, and if it is decided that it is a new registration, the processing proceeds to step S62. In step S62, a user input the individual's settlement information using the inputting means 63. The data is encrypted in the encryption unit 112 using a temporary key K_temp, and is transmitted to the user management section 18 of the electronic distribution service center 1 via the communication section 61.

[0411] In step S63, the user management section 18 of the electronic distribution service center 1 takes out an ID of an apparatus from the received certificate, and retrieves through the user registration database shown in FIG. 7 based on the ID of an apparatus. In step S64, the user management section 18 of the electronic distribution service center 1 decides whether or not registration of an apparatus having the received ID is possible, and if it is decided that the registration of an apparatus having the received ID is possible, the processing proceeds to step S65, and the user management section 18 decides whether or not the apparatus having the received ID is a new registration. In step S65, if it is decided that the apparatus having the received ID is a new registration, the processing proceeds to step S66.

[0412] In step S66, the user management section 18 of the electronic distribution service center 1 issues a settlement ID anew, and at the same time, decrypts the settlement information encrypted by the temporary key, registers the settlement ID and settlement information by associating them with an ID of the apparatus in the settlement information database that stores an apparatus ID, a settlement ID, settlement information (an account number, a credit card number or the like), transaction suspension information, and the like, and registers a settlement ID in the user registration database. In step S67, the user management section 18 prepares registration information based on data registered in the user registration database. Since this registration information is described in FIG. 8, its details are omitted.

[0413] In step S68, the user management section 18 of the electronic distribution service center 1 transmits the prepared registration information to the home server 51. In step S69, the upper controller 62 of the home server 51 stores the received registration information in the mass storage section 68.

[0414] In step S61, if it is decided that the registration of the settlement information is an updated registration, the processing proceeds to step S70, and the user inputs the individual's settlement information using the inputting means 63. The data is encrypted in the encryption unit 112 using a temporary key K_temp, and transmitted to the user management section 18 of the electronic distribution service center 1 via the communication section 61 together with the registration information already issued upon settlement registration.

[0415] In step S64, if it is decided that registration of an apparatus having a received ID is indispensable, the processing proceeds to step S71, where the user management section 18 of the electronic distribution service center 1 prepares registration information of registration rejection, and the processing proceeds to step S68.

[0416] In step S65, if it is determined that the apparatus having the received ID is not a new registration, the processing proceeds to step S72, where the user management section 18 of the electronic distribution service center 1 decrypts the settlement information encrypted by the temporary key, and updates and registers it in the settlement information registration database by associating it with the ID of the apparatus, and the processing proceeds to step S67.

[0417] In this way, the home server 51 is registered in the electronic distribution service center 1.

[0418] FIG. 59 is a flow chart illustrating processing for registering an ID of an apparatus in registration information anew. Since mutual authentication processing in step S80 is similar to the processing described in FIG. 52, details are omitted. Since step S81 is the same as step S63 of FIG. 58, its description is omitted. Since step S82 is the same as step S64 of FIG. 58, its description is omitted. In step S83, the user management section 18 of the electronic distribution service center 1 sets a registration item corresponding to an apparatus ID in the user registration database as “registration,” and registers the apparatus ID. In step S84, the user management section 18 of the electronic distribution service center 1 prepares registration information as shown in FIG. 8 based on the user registration database. Since step S85 is the same as step S68 of FIG. 58, its description is omitted. Since step S86 is the same as the step S69 of FIG. 58, its description is omitted.

[0419] In step S82, if it is decided that registration of an apparatus having a received ID is indispensable, the processing proceeds to step S87, where the user management section 18 of the electronic distribution service center 1 prepares registration information of registration rejection, and the processing proceeds to step S85.

[0420] In this way, the home server 51 is registered in the electronic distribution service center 1.

[0421] FIG. 60 is a flow chart illustrating processing in additionally registering another apparatus via an already registered apparatus. Here, an example in which the home server 51 is already registered and the fixed apparatus 52 is registered therein will be described. In step S90, the home server 51 mutually authenticates with the fixed apparatus 52. Since mutual authentication processing is similar to the processing described in FIG. 52, its description is omitted. In step S91, the home server 51 mutually authenticates with the electronic distribution service center 1. In step S92, the home server 51 transmits the registration information read out from the mass storage section 68 and the certificate of the fixed apparatus 52 obtain when mutually authenticating with the fixed apparatus 52 in step S90 to the electronic distribution service center 1. Since step S93 is the same as step S81 of FIG. 59, its description is omitted. Since step S94 is the same as step S82 of FIG. 59, its description is omitted. Since step S95 is the same as step S83 of FIG. 59, its description is omitted. In step S96, the user management section 18 of the electronic distribution service center 1 prepares registration information anew with information of the fixed apparatus 52 added in addition to the registration information received from the home server 51. Since step S97 is the same as step S85 of FIG. 59, its description is omitted. Since step S98 is the same as step S86 of FIG. 59, its description is omitted.

[0422] Then, in step S99A, the home server 51 transmits the received registration information to the fixed apparatus 52, and in step S99B, the fixed apparatus 52 stores the received registration information in the small storage section 75.

[0423] In step S94, if it is decided that registration of an apparatus having a received ID is indispensable, the processing proceeds to step S99, where the user management section 18 of the electronic distribution service center 1 prepares registration information indicating that only the fixed apparatus 52 is rejected registration (therefore, the home server 51 stays registered), and the processing proceeds to step S97 (the fact that the home server 51 has succeeded in mutual authentication with the electronic distribution service center 1 means that the home server 51 is registrable.)

[0424] In this way, the fixed apparatus 52 is additionally registered in the electronic distribution service center 1 by the processing procedures indicated in FIG. 60.

[0425] Timing for a registered apparatus to conduct update of a registration (update of registered information) will now be described. FIG. 61 illustrates processing procedures for determining whether or not to conduct update of registered information based on various conditions, and in step S600, the home server 51 determines whether or not a predetermined period that is decided in advance has passed since obtaining a delivery key K_d, registration information or charge information by a clock (not shown) and a determination section (not shown). If a positive result is obtained here, this means that the predetermined period has passed since obtaining a delivery key K_d, registration information or charge information, then, the processing proceeds to step S607, where the home server 51 executes update processing of registration information. This processing will be described later in FIG. 62.

[0426] On the other hand, if a negative result is obtained in step S600, this means that a predetermined period has not passed since obtaining a delivery key or charge information, that is updating conditions of registration information with respect to passage of a period has not been met, and then, the processing proceeds to step S601.

[0427] In step S601, the home server 51 determines whether or not the number of times of purchasing contents has reached a prescribed number of times. If a positive result is obtained here, the processing moves to step S607, where the home server 51 executes registration information updating processing, whereas, if a negative result is obtained in step S601, this means that updating conditions of registration information has not been met with respect to the number of times of purchasing contents, thus, the processing proceeds to step S602.

[0428] In step S602, the home server 51 determines whether or not a purchase amount of contents has reached a prescribed amount. If a positive result is obtained here, the processing moves to step S607, where the home server 51 execute registration information updating processing, whereas, if a negative result is obtained in step S602, this means that updating conditions of registration information has not been met with respect to a purchase amount of contents, the processing proceeds to the following step S603.

[0429] In step S603, the home server 51 determines whether or not an effective period of a delivery key K_d has expired. As means for determining whether or not an effective period of a delivery key K_d has expired, whether or not a version of a delivery key K_d of distributed data coincides with a version of any of three versions of delivery keys K_d stored in the storage module 92, or whether or not a version of a delivery key K_d of distributed data is older than a version of the latest delivery key K_d. If the versions does not coincide or if the version of the delivery key is older than the version of the latest delivery key K_d, this means that the effective period of the delivery key K_d in the storage module 92 has expired, and the home server 51 obtains a positive result in step S603, thus the processing proceeds to step S603, where the home server 51 executes updating processing of registration information. On the other hand, if a negative result is obtained in step S603, this means that the updating conditions of registration information has not been met with respect to an effective period of a delivery key K_d, then the processing proceeds to the following step S604.

[0430] In step S604, the home server 51 determines if there is a change in a network configuration, such as whether or not another apparatus has been connected to the home server 51 anew, or whether or not another apparatus connected to the home server 51 has been disconnected. If a positive result is obtained here, this means that there has been a change in the network configuration, and then, the processing proceeds to step S607, where the home server 51 executes the updating processing of registration information. On the other hand, if a negative result is obtained in step S604, this means that the updating conditions of registration information is not met with respect to a network configuration, and the processing proceeds to the following step S605.

[0431] In step S605, the home server 51 determines whether or not there has been a registration information updating request from a user, and if there has been a registration information updating request, the processing proceeds to step S607, where the home server 51 executes the updating processing of registration information, and if there has been no registration information updating request, the processing proceeds to step S606.

[0432] In step S606, the home server 51 conducts the update determination in the above-mentioned steps S600 through S605 with respect to other apparatuses connected to the home server 51, if a determination result indicating that updating should be made is obtained, the processing proceeds to step S607, where the home server 51 executes the updating processing of registration information, whereas, if a determination result indicating that updating should be made is not obtained, the home server 51 repeats similar processing from the above-mentioned step S600. Thus, the home server 51 can obtain timing for executing the updating processing of registration information. Further, another apparatus may check its own update starting conditions and send a request to the home server 51 by itself instead of the home server 51 checking update starting conditions of another apparatus.

[0433] FIG. 62 is a flow chart illustrating operations for a registered apparatus updating a registration (update of registered information), executing settlement processing, and receiving re-distribution of a delivery key K_d. Since mutual authentication processing in step S100 is similar to the processing described in FIG. 52, its description is committed. In step S101, the home server 51 encrypts charge information stored in the storage module 92 using a temporary key K_temp in the encryption unit 112 of the encryption processing section 96, generates a signature by the signature generation unit 114, and adds a signature. Then, the home server 51 transmits the encrypted charge information and its signature to the electronic distribution service center 1 together with a handling policy, price information and registration information stored in the mass storage section 68. Further, at this moment, the handling policy and the price information may not be sent by a model. This is because, in some cases, the content provider 2 and the service provider 3 have transmitted them to the electronic distribution service center 1 in advance, or necessary information among the handling policy and the price information is included in the charge information.

[0434] Since step S102 is the same as step S81 of FIG. 59, its description is omitted. Since step S103 is the same as step S82 of FIG. 59, its description is omitted. In step S104, the user management section 18 of the electronic distribution service center 1 verifies a signature by the signature verification unit 115, decrypts received charge information by a temporary key K_temp (if an electronic signature is attached to the received data, it is verified by the signature verification unit 115), and (if received) transmits the charge information to the history data management section 15 together with the handling policy and the price information. The history data management section 15 having received this maintains and manages the received data.

[0435] In step S105, the user management section 18 of the electronic distribution service center 1 verifies a registration item corresponding to an apparatus ID in the user registration database, and at the same time, updates data. For example, the data is such data as a registration date or a charge status (not shown). Since step S106 is the same as step S84 of FIG. 59, its description is omitted. In step S107, the user management section of the electronic distribution service center 1 encrypts a delivery key K_d supplied from the key server 14 by a temporary key K_temp, and transmits the delivery key K_d to the home server 51 together with registration information.

[0436] In step S108, the home server 51 stores the received registration information in the mass storage section 68. In step S109, the home server 51 inputs the received registration information in the encryption processing section 65, where the home server 51 verifies an electronic signature included in the registration information by the signature verification unit 115, and at the same time, causes the unit to confirm if an apparatus ID of the home server 51 is registered, and when the verification is successful and it is confirmed that the charge processing is completed, the processing proceeds to step S110. In step S110, the home server 51 input the received delivery key K_d to the encryption processing section 65. In the encryption processing section 65, the home server 51 decrypts the received delivery key K_d using a temporary key K_temp by the decryption unit 111 of the encryption/decryption module 96, stores (updates) the delivery key K_d in the storage module 92, and deletes charge information held in the storage module 92 (this makes settlement completed).

[0437] In step S103, if it is decided that registration of an apparatus having the received ID is impossible, the processing proceeds to step S111, where the user management section 18 of the electronic distribution service center 1 prepares registration information indicating that registration is rejected, and the processing proceeds to step S112. In step S112, which is different from step S107, only registration information is transmitted to the home server 51.

[0438] In step S109, if verification of a signature included in the registration information is failed, or if “registration possible” is not written in an item of “registration” (e.g., charge processing failed—purchase processing not available, registration rejected—functions of the encryption processing section including processing such as reproduction stopped, transaction temporarily stopped—charge processing successful, but purchase is stopped due to some reason, etc. are possible) included in the registration information, the processing proceeds to step S113, and a predetermined error processing is performed.

[0439] In this way, the home server 51 updates registration information, at the same time, transmits charge information to the electronic distribution service center 1, and receives supply of a delivery key K_d in return.

[0440] FIGS. 63 and 64 illustrate flow charts describing processing for settlement, update of registration information, and update of a delivery key K_d. In step S120, the mutual authentication module 94 of the home server 51 and a mutual authentication module (not shown) of a fixed apparatus mutually authenticate. Since mutual authentication processing is the same as the processing described in FIG. 52, its description is omitted. Further, as described in the mutual authentication processing, since the home server 51 and the fixed apparatus 52 mutually exchange certificates, it is assumed that they know their IDs each other. In step S121, the upper controller 62 of the home server 51 reads out registration information of the mass storage section 68, and causes the encryption processing section 65 to inspect the information. The encryption processing section 65 having received the registration information from the upper controller 62 verifies a signature in the registration information, decides if the ID of the fixed apparatus exists, and if the ID of the fixed apparatus exists in the registration information, the processing proceed to step S122.

[0441] In step S122, the encryption processing section 65 decides whether or not the ID of the fixed apparatus 52 is registered in the registration information, and if the ID of the fixed apparatus 52 is registered, the processing proceeds to step S123. In step S123, the encryption processing section 73 of the fixed apparatus 52 reads out charge information stored in the storage module, and encrypts the information in the encryption unit using a temporary key K_temp. In addition, the encryption processing section 73 generates a signature corresponding to the charge information in the signature generation unit. Since the generation of an signature was described in FIG. 10, its description is omitted. The upper controller 72 having received the charge information encrypted by the temporary key K_temp and its signature reads out a corresponding handling policy and price information from the small storage section 75, if necessary, and transmits the charge information encrypted by the temporary key K_temp and its signature as well as the handling policy and the price information corresponding to the charge information, if necessary, to the home server 51.

[0442] The home server 51 having received the data stores the handling policy and the price information, if received, in the mass storage section 68, and at the same time, inputs the charge information encrypted by the temporary key K_temp and its signature in the encryption processing section 65. The encryption processing section 65 having received the charge information encrypted by the temporary key K_temp and its signature verifies the signature for the charge information encrypted by the temporary key K_temp by the signature verification unit 115 of the encryption/decryption module 96. Since the verification of a signature is the same as the processing described in FIG. 11, its details are omitted. Then, the decryption unit 111 of the encryption/decryption module 96 decrypts the charge information encrypted by the temporary key K_temp.

[0443] In step S124, the home server 51 mutually authenticates with the mutual authentication section 17 of the electronic distribution service center 1, and shares a temporary key K_temp2. In step S125, the home server 51 encrypts the charge information transmitted from the fixed apparatus 52 by the encryption unit 112 of the encryption/decryption module 96 using the temporary key K_tepm2. At this moment, the home server 51 may encrypts the charge information of the home server 51 as well. In addition, the home server 51 generates a signature corresponding to the charge information encrypted by the temporary key K_tepm2 by the signature generation unit 114 of the encryption/decryption module 96. The upper controller 62 having received the charge information encrypted by the temporary key K_tepm2 and its signature reads out a handling policy, price information and registration information from the mass storage section 68, if necessary, and transmits the charge information encrypted by the temporary key K_tepm2 and its signature, as well as the handling policy, the price information and the registration information, if necessary, to the user management section 18 of the electronic distribution service center 1.

[0444] In step S126, the user management section 18 of the electronic distribution service center 1 retrieves through the user registration database. In step S127, the user management section 18 decides whether or not the home server 51 and the fixed apparatus 52 are registered as registrable in the item “registration” in the user registration database, and if it is decided that they are registered, the processing proceeds to step S128. In step S128, the user management section 18 of the electronic distribution service center 1 verifies a signature for the charge information encrypted by the temporary key K_temp2, and decrypts the charge information by the temporary key K_temp2. Then, the user management section 18 transmits the charge information as well as the handling policy and the price information, if received, to the history data management section 15. The history data management section 15 having received the charge information as well as the handling policy and the price information, if received, manages and stores the data.

[0445] In step S129, the user management section 18 of the electronic distribution service center 1 updates the user registration database (charge data receipt data and time, issued data and time of registration information, date and time of a delivery key, etc.). In step S130, the user management section 18 of the electronic distribution service center 1 prepares registration information (e.g., an example of FIG. 8). In step S131, the user management section 18 of the electronic distribution service center 1 encrypts the delivery key K_d received from the key server 14 of the electronic distribution service center 1 by the temporary key K_temp2, and generates a signature for the delivery key K_d encrypted by the temporary key K_temp2. Then, the user management section 18 transmits the delivery key K_d encrypted by the temporary key K_temp2 and the signature for the delivery key K_d encrypted by the temporary key K_temp2.

[0446] In step S132, the home server 51 receives the registration information, the delivery key K_d encrypted by the temporary key K_temp2 and the signature for the delivery key K_d encrypted by the temporary key K_temp2. The upper controller 62 of the home server 51 inputs the delivery key K_d encrypted by the temporary key K_temp2 and the signature for the delivery key K_d encrypted by the temporary key K_temp2 in the encryption processing section 65. In the encryption processing section 65, the signature verification unit 115 of the encryption/decryption module 96 verifies the signature for the delivery key K_d encrypted by the temporary key K_temp2, the decryption unit 111 of the encryption/decryption module 96 decrypts the delivery key K_d using the temporary key K_temp2, and the encryption unit 112 of the encryption/decryption module 96 re-encrypts the encrypted delivery key K_d using the temporary key K_temp shared with the fixed apparatus 52. Finally, the signature generation unit 114 of the encryption/decryption module 96 generates a signature corresponding to the delivery key K_d encrypted using the temporary key K_temp, and returns the delivery key K_d encrypted by the temporary key K_temp, and the signature for the delivery key K_d encrypted by the temporary key K_temp. The upper controller 62 having received the delivery key K_d encrypted by the temporary key K_temp and the signature for the delivery key K_d encrypted by the temporary key K_temp, transmits them to the fixed apparatus 52 together with the registration information transmitted from the electronic distribution service center 1.

[0447] In step S133, the upper controller 72 of the fixed apparatus 52 overwrites and stores the received registration information in the small storage section 75. In step S134, the encryption processing section 73 of the fixed apparatus 52 verifies a signature of the received registration information, decides whether or not the item with respect to “registration” in the ID of the fixed apparatus 52 is marked “registration possible,” and if it is marked “registration possible,” the processing proceeds to step S135. In step S135, the upper controller of the fixed apparatus 52 inputs the delivery key K_d encrypted by the temporary key K_temp and the signature for the delivery key K_d encrypted by the temporary key K_temp in the encryption processing section 73. The encryption processing section 73 verifies the signature for the delivery key K_d encrypted by the temporary key K_temp, decrypts the delivery key K_d using the temporary key K_temp, updates the delivery key K_d in the storage module of the encryption processing section 73, and at the same time, deletes the charge information (further, in some case, the charge information is not deleted, but is attached a mark indicating it is settled).

[0448] In step S121, if the ID of the fixed apparatus 52 is not included in the registration information, the processing proceeds to step S136, the registration information addition processing described in FIG. 60 is started, and the processing proceeds to step S123.

[0449] In step S127, if the ID of the home server 51 and the ID of the fixed apparatus 52 are not marked “registration possible” with respect to the item “registration” in the user registration database, the processing proceeds to step S137. Since the step S137 is the same as step S130, its details are omitted. In step S138, the user management section 18 of the electronic distribution service center 1 transmits the registration information to the home server 51. In step S139, the home server 51 transmits the registration information to the fixed apparatus 52.

[0450] In step S122, the item “registration” with respect to the ID of the fixed apparatus 52 in the registration information is not marked “registration possible,” or in step S134, the item “registration” with respect to the ID of the fixed apparatus 52 in the registration information is not marked “registration possible,” the processing ends.

[0451] Further, processing on behalf of the network according to this system is described as only for processing of the fixed apparatus 52, all pieces of charge information of all the apparatuses connected to the home server 51 and the home server 51 itself may be collected and processed altogether. Then, registration information and delivery keys K_d of all the apparatuses are updated. (In this embodiment, received registration information and a delivery key K_d are not checked at all in the home server 51. If processing of the home server 51 itself is performed altogether, they should be checked and updated.)

[0452] Processing in which the content provider 2 transmits a content provider secure container to the service provider 3, which corresponds to step S43 of FIG. 56, will be described with reference to a flow chart of FIG. 65. In step S140, the electronic watermark adding section 32 of the content provider 2 inserts predetermined data indicating the content provider 2, for example, a content provider ID, in the contents read out from the content server 31 in the form of an electronic watermark, and supplies it to the compression section 33. In step S141, the compression section 33 of the content provider 2 compresses the contents in which the electronic watermark is inserted by a predetermined method such as ATRAC, and supplies to the content encryption section 34. In step S142, the content key generation section 35 generates a key to be used as a content key K_co, and supplies it to the content encryption section 34 and the content key encryption section 36. In step S143, the content encryption section 34 of the content provider 2 encrypts the compressed contents in which the electronic watermark is inserted by a predetermined method such as DES using the content key K_co.

[0453] In step S144, the content key encryption section 36 encrypts the content key K_co with the individual key K_i supplied from the electronic distribution service center 1 by the processing of step S40 of FIG. 56 by a predetermined method such as DES. In step S145, the handling policy generation section 37 provides for a handling policy of the contents, and generates a handling policy indicated in FIGS. 33 and 34. In step S146, the signature generation section 38 of the content provider 2 generates signatures for the encrypted contents, the encrypted content key K_co, the encrypted individual key K_i, and the handling policy supplied from the handling policy generation section 37. Since the generation of a signature was described with reference to FIG. 10, its description is omitted here. In step S147, the content provider 2 transmits the encrypted contents and its signature, the encrypted content key K_co and its signature, the encrypted individual key K_i and its signature, the handling policy and its signature (these four data with signatures will be hereinafter referred to as a content provider secure container), the certificate of the content provider 2 obtained from the authentication station in advance to the service provider 3 using a transmission section (not shown).

[0454] As described above, the content provider 2 transmits the content provider secure container to the service provider 3.

[0455] Processing in which the service provider 3 transmits a service provider secure container to the home server 51 will now be described with reference to a flow chart of FIG. 66. Further, description is made assuming that the service provider 3 stores the data transmitted from the content provider 2 in the content server 41 in advance. In step S150, the certificate verification section 42 of the service provider 3 reads out the certificate of the content provider 2 from the content server 41, and verifies the signature in the certificate. Since the verification of a signature is the same as the method described with reference to FIG. 11, its details are omitted. If there is no tamper in the certificate, the public key K_pcp of the content provider 2 is taken out.

[0456] In step S151, the signature verification section 43 of the service provider 3 verifies the signature of the content provider secure container transmitted from the transmission section of the content provider 2 with the public key K_pcp of the content provider 2. (In some cases, only the signature of the handling policy is verified.) If the verification of the signature is failed and tamper is found, the processing is terminated. Further, since the verification of a signature is the same as the method described with reference to FIG. 11, its details are omitted.

[0457] If there is no tamper in the content provider secure container, in step S152, the pricing section 44 of the service provider 3 prepares price information described in FIGS. 37 and 38 based on the handling policy. In step S153, the signature generation section 45 of the service provider 3 generates a signature corresponding to the price information, and prepares a service provider secure container by combining the content provider secure container, the price information and the signature of the price information.

[0458] In step S154, the transmission section (not shown) of the service provider 3 transmits the certificate of the service provider 3, the certificate of the content provider 2 and the service provider secure container to the transmission section 61 of the home server 51, and completes the processing.

[0459] In this way, the service provider 3 transmits the service provider secure container to the home server 51.

[0460] Details of the purchase processing of the home server 51 after receiving the proper service provider secure container corresponding to step S45 of FIG. 56 will be described with reference to the flow chart of FIG. 67. After the home server executes the registration information update processing described above with reference to FIGS. 61 and 62 in step S161, in step S162, the upper controller 62 of the home server 51 inputs the registration information read out from the mass storage section 68 of the home server 51 in the encryption processing section 65 of the home server 51. After verifying the signature of the registration information by the signature verification unit 115 of the encryption/decryption module 96, the encryption processing section 65 having received the registration information decides if the item “purchase processing” for the ID of the home server 51 is marked “purchase possible,” and at the same time, inspects if the item of registration is marked “registration possible,” and in case of “purchase possible” and “registration possible,” the processing proceeds to step S163. Further, the signature verification and inspection of “registration possible” and “purchase possible” may be performed in the registration information inspection module 93. In step S163, the upper controller 62 of the home server 51 inputs the public key certificate of the content provider 2 read out from the mass storage section 68 of the home server 51 in the encryption processing section 65 of the home server 51.

[0461] After verifying the signature of the certificate of the content provider 2 by the signature verification unit 115 of the encryption/decryption module 96, the encryption processing section 65 having received the public key certificate of the content provider 2 takes out the public key of the content provider 2 from the public key certificate. If it is confirmed that there is not tamper as a result of the verification of the signature, the processing proceeds to step S164. In step S164, the upper controller 62 of the home server 51 inputs the contents read out from the mass storage section 68 of the home server 51 in the encryption processing section 65 of the home server 51. The encryption processing section 65 having received the contents verifies the signature of the contents by the signature verification unit 115 of the encryption/decryption module 96, and if it is confirmed that no tamper is made, the processing proceeds to step S165. In step S165, the upper controller 62 of the home server 51 inputs the content key K_co read out from the mass storage section 68 of the home server 51 in the encryption processing section 65 of the home server 51.

[0462] The encryption processing section 65 having received the content key K_co verifies the signature of the content key K_co by the signature verification unit 115 of the encryption/decryption module 96, and if it is confirmed that tamper is not made, the processing proceeds to step S166. In step S166, the upper controller 62 of the home server 51 inputs the individual key K_l read out from the mass storage section 68 of the home server 51 in the encryption processing section 65 of the home server 51. The encryption processing section 65 having received the individual key K_l verifies the signature of the individual key K_l by the signature verification unit 115 of the encryption/decryption module 96, and if it is confirmed that tamper is not made, the processing proceeds to step S167.

[0463] In step S167, the upper controller 62 of the home server 51 inputs the handling policy read out from the mass storage section 68 of the home server 51 in the encryption processing section 65 of the home server 51. The encryption processing section 65 having received the handling policy verifies the signature of the handling policy by the signature verification unit 115 of the encryption/decryption module 96, and if it is confirmed that tamper is not made, the processing proceeds to step S168. In step S168, the upper controller 62 of the home server 51 inputs the public key certificate of the service provider 3 read out from the mass storage section 68 of the home server 51 in the encryption processing section 65 of the home server 51.

[0464] After verifying the signature of the certificate of the service provider 3 by the signature verification unit 115 of the encryption/decryption module 96, the encryption processing section 65 having received the public key certificate of the service provider 3 takes out the public key of the service provider 3 from the public key certificate. If it is confirmed that tamper is not made as a result of the verification of the signature, the processing proceeds to step S169. In step S169, the upper controller 62 of the home server 51 inputs the price information read out from the mass storage section 68 of the home server 51 in the encryption processing section 65 of the home server 51. The encryption processing section 65 having received the price information verifies the signature of the price information by the signature verification unit 115 of the encryption/decryption module 96, and if it is confirmed that tamper is not made, the processing proceeds to step S170.

[0465] In step S170, the upper controller 62 of the home server 51 displays information of purchasable contents (e.g., a purchasable utilization form, a price, or the like) using the displaying means 64, and a user selects a purchase item using the inputting means 63. A signal inputted from the inputting means 63 is transmitted to the upper controller 62 of the home server 51, and the upper controller 62 generates a purchase command based on the signal and inputs the purchase command in the encryption processing section 65 of the home server 51. Further, the input processing may be performed upon starting the purchase processing. The encryption processing section 65 having received this generates charge information and license conditions information from the handling policy inputted in step S167 and the price information inputted in step S169. Since the charge was described in FIG. 42, its details are omitted. Since the license conditions information was described in FIG. 41, its details are omitted.

[0466] In step S171, the control section 91 of the encryption processing section 65 stores the charge information generated in step S170 in the storage module 92. In step S172, the control section 91 of the encryption processing section 65 transmits the license conditions information generated in step S170 to the external memory control section 97 of the encryption processing section 65. After checking tamper of the external memory 67, the external memory control section 97 having received the license conditions information writes the license conditions information in the external memory 67. Tamper check in writing the license conditions information will be described latter with reference to FIG. 69. In step S173, the control section 91 of the encryption processing section 65 decrypts the individual key K_i inputted in step S166 by the decryption unit 111 of the encryption/decryption module 96 using the delivery key K_d supplied from the storage module 92. Then, the control section 91 of the encryption processing section 65 decrypts the content key K_co inputted in step S165 by the decryption unit 111 of the encryption/decryption module 96 using the previously decrypted individual key K_i. Finally, the control section 91 of the encryption processing section 65 decrypts the content key K_co by the decryption unit 112 of the encryption/decryption module 96 using the save key K_save supplied from the storage module 92. In step S174, the content key K_co encrypted by the save key K_save is stored in the external memory 67 via the external memory control section 97 of the encryption processing section 65.

[0467] If it is determined that the home server 51 is an apparatus that cannot perform purchase processing in step S162, if it is determined that the signature of the public key certificate of the content provider 2 is not correct in step S163, if it is determined that the signature of the contents encrypted by the content key K_co is not correct in step S164, if it is determined that the signature of the individual key K_l encrypted by the delivery key K_d is not correct, if it is determined that the signature of the handling policy is not correct in step S167, if it is determined that the signature of the certificate of the service provider 3 is not correct in step S168, or if it is determined that the signature of the price information is not correct in step S169, the processing proceeds to step S176, where the home server 51 performs error processing. Further, only a signature for the content key K_co and the individual key K_i may be verified by uniting the processing of step S165 and step S166.

[0468] As described above, the home server 51 stores the charge information in the storage module 92, and at the same time, after decrypting the content key K_co by the individual key K_i, encrypts the content key K_co by the save key K_save and causes the external memory 67 to store it.

[0469] The fixed apparatus 52 also stores the charge information in the storage module of the encryption processing section 73 by the similar processing, and at the same time, decrypts the content key K_co by the individual key K_l, encrypts the content key K_co by the save key K_save2 (which is different from the key of the home sever 51), and causes the external memory 79 to store it.

[0470] FIG. 68 is a flow chart describing a method of tamper check that the external memory control section 97 of the encryption processing section 65 performs when reading out data from the external memory 67. In step S180 of FIG. 68, the external memory control section 97 of the encryption processing section 65 retrieves a position of data to be read out from the external memory 67 (e.g., first data of the first block of FIG. 16). In step S181, the external memory section 97 of the encryption processing section 65 calculates a hash value (a hash value of the entire first block of FIG. 16) with respect to all data in an identical block including data that is planned to be read out in the external memory 67. At this moment, data other than the data that is planned to be read out (e.g., a content key 1 and license conditions information 1) is destroyed after used for the hash value calculation. In step S182, the hash value calculated in step S181 and a hash value (ICV₁) stored in the storage module 92 of the encryption processing section 65 are compared. If the hash values coincide, the memory control section 97 transits the data read out in step S181 to the control section 91 via the external memory control section 97, and if the hash values do not coincide, the processing proceeds to step S183, where the external memory control section 97 prohibits writing thereafter assuming that the memory block is tampered (wrong block). For example, given that the external memory is a flash memory of 4 MB, it is assumed that the memory is divided into 64 blocks. Therefore, 64 hash values are stored in the storage module. In case of reading out data, a location where the data is first retrieved, and a hash value with respect to all data in an identical block including the data is calculated. Tamper is checked by determining whether or not the hash value coincides with the hash value corresponding to the block in the storage module (see FIG. 16).

[0471] In this way, the external memory control section 97 of the encryption processing section 65 performs tamper check of the external memory 67, and reads out data.

[0472] FIG. 69 is a flow chart describing a method of tamper check that the external memory control section 97 of the encryption processing section 65 performs when writing data in the external memory 67. In step S190A of FIG. 69, the external memory control section 97 of the encryption processing section 65 retrieves a location in the external memory 67 in which data can be written. In step S191A, the external memory control section 97 of the encryption processing section 65 determines whether or not there is a vacant area in the external memory 67, and if it is determined that there is a vacant area, the processing proceeds to step S192A. In step S193A, the external memory control section 97 compares the hash value calculated in step S192A and the hash value stored in the storage module 92 of the encryption processing section 65, and if the hash values coincide, the processing proceeds to step S194A. In step S194A, the external memory control section 97 writes data in a region in which data is planned to be written. In step S195A, the external memory control section 97 of the encryption processing section 65 recalculates a hash value with respect to all data in the data block in which the data is written. In step S196A, the control section 91 updates the hash value in the storage module 92 of the encryption processing section 65 to the hash value calculated in step S195A.

[0473] In step S193A, if the calculated hash value is different from the hash value in the storage module 92, the control section 91 regards the memory block as a wrong block (e.g., changes the hash value to a value indicating a wrong block), and the processing proceeds to step S190A.

[0474] If it is determined that there is no vacant area in the external memory 67 in step S191A, the processing proceeds to step S198A, and in step S198A, the external memory control section 97 returns a writing error to the control section 91, and terminates the processing.

[0475] In a method for renewing (updating) the external memory control section 97 to the external memory 67, as shown in FIG. 70, the external memory control section 97 of the encryption processing section 65 retrieves a location to which data n the external memory 67 is to be renewed. In step S192B, the external memory control section 97 of the encryption processing section 65 calculates a hash value with respect to all data in a data block that is planned to be renewed. In step S193B, the external memory control section 97 compares the hash value calculated in step S192B and the hash value stored in the storage module 92 of the encryption processing section 65, and if the hash values coincide, the processing proceeds to step S194B. In step S194B, the external memory control section 97 renews data in a region that is planned to be renewed. In step S195B, the external memory control section 97 of the encryption processing section 65 calculates a hash value with respect to all data in the data block to which the data is written. In step S196B, the control section 91 updates the hash value in the storage module 92 of the encryption processing section 65 to the hash value calculated in step S195B.

[0476] In step S193B, if he calculated hash value is different from the hash value in the storage module 92, the control section 91 regards the memory block as a wrong block (e.g., changes the hash value to a value indicating a wrong block), and considers that the renewal is failed.

[0477] Method for deleting data of the external memory 79 will be described with reference to FIG. 71. In step S190C, the external memory control section of the encryption processing section 73 retrieves a location in which data of the external memory 79 will be deleted. In step S192C, the external memory control section of the encryption processing section 73 calculates a hash value with respect to all data in a data block that is planned to be deleted. In step S193C, the external memory control section compares the hash value calculated in step S192C and the hash value stored in the storage module (not shown) of the encryption processing section 73, and if the hash values coincides, the processing proceeds to step S194C. In step S194C, the external memory control section deletes data that is planned to be deleted in the region that is planned to be deleted. In step S195C, the external memory control section of the encryption processing section 73 recalculates a hash value with respect to all the data in the data block in which the data that is planned to be deleted is deleted. In step S196C, the encryption processing section 73 updates the hash value in the storage module to the hash value calculated in step S195C.

[0478] In step S193C, if the calculated hash value is different from the hash value in the storage module, the encryption processing section 73 regards the memory block as a wrong block (e.g., changes the hash value to a value indicating a wrong block), and considers that the deletion is failed.

[0479] Details of processing in which the homes server 51 reproduces contents corresponding to step S46 of FIG. 56 will be described with reference to flow charts of FIGS. 72 and 73. In step S200, the upper controller 62 of the home server 51 inputs an ID corresponding to contents that the upper controller 62 is instructed by the inputting means 63 of the home server 51 to reproduce in the encryption processing section 65 of the home server 51. In step S201, the control section 91 of the encryption processing section 65 that has received the ID of the contents to be reproduced transmits the content ID to the external memory control section 97 of the encryption processing section 65, and causes the external memory control section 97 to retrieve a content key K_co and license conditions information corresponding to the content ID. At this moment, the control section 91 confirms that the license conditions information is a right that can be reproduced. In step S202, the external memory control section 97 of the encryption processing section 65 calculates a hash value of a data block including the content key K_co and the license conditions information, and transmits the hash value to the control section 91 of the encryption processing section 65. In step S203, the control section 91 of the encryption processing section 65 determines whether or not the hash value stored in the storage module 92 of the encryption processing section 65 and the hash value received in step S202 coincide, and if the hash values coincide, the processing proceeds to step S204.

[0480] In step S204, the control section 91 of the encryption processing section 65 updates license conditions information, if necessary. For example, if a utilization right in the license conditions information is a commutation ticket, the control section 91 performs processing such as for subtracting the number of times. Therefore, in case of a buy only right or the like that does not need to be updated, the processing jumps to step S208 (not shown). In step S205, the external memory control section 97 rewrites the updated license conditions information transmitted from the control section 91 to the external memory 67 and updates it. In step S206, the external memory control section 97 recalculates a hash value with respect to all the data in the rewritten data block, and transmits it to the control section 91 of the encryption processing section 65. In step S207, the control section 91 of the encryption processing section 65 rewrites the hash value stored in the storage module 92 of the encryption processing section 65 to the hash value calculated in step S206.

[0481] In step S208, the encryption processing section 65 and the extension section 66 mutually authenticates, and shares the temporary key K_temp. Since the mutual authentication processing was described with reference to FIG. 51, its details are omitted. In step S209, the decryption unit 111 of the encryption/decryption module 96 decrypts the content key K_co read out from the external memory 97 by the save key K_save supplied form the storage module 92. In step S210, the encryption unit 112 of the encryption/decryption module 96 re-encrypts the content key K_co by the temporary key K_temp previously shared with the extension section 66. In step S211, the control section 91 of the encryption processing section 65 transmits the content key K_co encrypted by the temporary key K_temp to the extension section 66 via the upper controller 62.

[0482] In step S212, the key decryption module 102 of the extension section 66 decrypts the content key K_co by the temporary key K_temp supplied from the mutual authentication module 101. In step S213, the upper controller 62 reads out contents from the mass storage section 68, and supplies them to the extension section 66. The encryption module 103 of the extension section 66 having received the contents decrypts the contents using the content key K_co supplied from the key decryption module 102. In step S214, the extension module 104 of the extension section 66 extends the contents with a predetermined method, for example, such a method as ATRAC. In step S215, the electronic watermark addition module 105 inserts the data instructed by the encryption processing section 65 in the contents in the form of a watermark (the data handed to the extension section from the encryption processing section is not limited to the content key K_co, but includes reproduction conditions (an analogue output, a digital output, an output with copy control signal (SCMS)), an apparatus ID that purchased the content utilization right and the like. Data to be inserted is an ID of an apparatus that purchased the content utilization right (i.e., an apparatus ID in the license conditions information) or the like. In step S216, the extension section 66 reproduces music via a speaker (not shown).

[0483] In this way, the home server 51 reproduces contents.

[0484] FIG. 74 is a flow chart illustrating details of processing in which the home server 51 purchases a content utilization right on behalf of the fixed apparatus 52. In step S220, the home server 51 and the fixed apparatus 52 mutually authenticates. Since the mutual authentication processing is similar to the processing described in FIG. 52, its description is omitted. In step S221, the upper controller 62 of the home server 51 causes the encryption processing section 65 of the home server 51 to inspect registration information read out from the mass storage section 68 of the home server 51. The encryption processing section 65 having received the registration information from the upper controller 62 causes the signature verification unit 115 of the encryption/decryption module 96 to verify a signature attached to the registration information by a public key of the electronic distribution service center 1 supplied form the storage module 92 of the encryption processing section 65. After successful verification of the signature, the control section 91 of the encryption processing section 65 decides if an ID of the fixed apparatus is registered in the registration information and the items of “registration” and “purchase” are marked “registration possible” and “purchase possible,” and if it is decided that the item is marked “registration possible,” the processing proceeds to step S222 (Further, the fixed apparatus 52 also inspects the registration information and decides that the home server is “registration possible.”) Since steps S225 to S227 are similar to steps S160 to S171 of FIG. 67, their details are omitted.

[0485] In step S228, the control section 91 of the encryption processing section 65 decrypts the individual key K_i encrypted by the delivery key K_d inputted in step S225 by the decryption unit 111 of the encryption/decryption module 96 using the delivery key K_d supplied from the storage module 92. Then, the control section 91 of the encryption processing section 65 decrypts the content key K_co encrypted by the individual key K_i inputted in step S225 by the decryption unit 111 of the encryption/decryption module 96 using the individual key K_i. Then, the control section 91 of the encryption processing section 65 re-encrypts the content key K_co by the encryption unit 112 of the encryption/decryption module 96 using the temporary key K_temp that was shared with the fixed apparatus 52 at the time of the mutual authentication of step S220. In step S229, the control section 91 of the encryption processing section 65 generates signatures using the signature generation unit 114 of the encryption/decryption module 96 with respect to the content key K_co encrypted by the temporary key K_temp and the license conditions information generated in step S226, and transmits them to the upper controller 62. The upper controller 62 of the homes server 51 having received the content key K_co encrypted by the temporary key K_temp, the license conditions information and their signatures reads out the contents (including a signature; hereinafter the same) encrypted by the content key K_co from the mass storage section 68, and transmits the content key K_co encrypted by the temporary key K_temp, the license conditions information, their signatures and the contents encrypted by the content key K_co to the fixed apparatus 52.

[0486] In step S230, the fixed apparatus 52 having received the content key K_co encrypted by the temporary key K_temp, the license conditions information, their signatures and the contents encrypted by the content key K_co outputs the contents encrypted by the contents key K_co to the record reproduction section 76 after verifying the signature. The record reproduction section 76 of the fixed apparatus 52 having received the contents encrypted by the content key K_co stores the contents encrypted by the content key K_co in the recording medium 80.

[0487] In step S231, the encryption processing section 73 of the fixed apparatus 52 decrypts the content key K_co encrypted by the temporary key K_temp by the decryption unit of the encryption/decryption module using the temporary key K_temp that was shared with the homes server 51 at the time of the mutual authentication in step S220. Then, the control section of the encryption processing section 73 re-encrypts the content key K_co by the encryption unit of the encryption/decryption module using the save key K_save2 supplied from the storage module of the encryption processing section 73.

[0488] In step S232, the encryption processing section 73 of the fixed apparatus 52 transmits the content key K_co encrypted by the save key K_save2 and the license conditions information received in step S230 to the external memory control section of the encryption processing section 73, and causes the external memory 79 to save them. Since processing in which the external memory control section writes data in the external memory was described in FIG. 69, details are omitted.

[0489] In this way, the home sever 51 purchases a content utilization right, charge information is stored in the home server 51 side, and a utilization right is transferred to the fixed apparatus 52.

[0490] FIG. 75 is a flow chart illustrating processing for changing a purchased content utilization right to another utilization form to purchase it. Since steps S240 to S245 are similar to the processing described in FIG. 67, its description is omitted. In step S246, the encryption processing section 65 of the home server 51 causes the external memory control section 97 of the encryption processing section 65 to read out license conditions information of contents whose utilization right is changed. Since reading out of data from the external memory 67 was described with reference to FIG. 68, its details are omitted. If the license conditions information is correctly read out in step S246, the processing proceeds to step S247.

[0491] In step S247, the upper controller 62 of the home server 51 displays information of content whose utilization right contents can be changed (e.g., a utilization form or a price whose utilization right contents can be changed) using the display means 64, and a user selects utilization right contents update conditions using the inputting means 63. The signal inputted from the inputting means 63 is transmitted to the upper controller 62 of the home server 51, and the upper controller 62 generates a utilization right content change command based on the signal and inputs the utilization right contents change command in the encryption processing section 65 of the home server 51. The encryption processing section 65 having received this generates charge information and new license conditions information from the handling policy received in step S243, the price information received in step S245 and the license conditions information read out in step S247.

[0492] Since step S248 is similar to step S171 of FIG. 67, its detailed description is omitted. In step S249, the control section 91 of the encryption processing section 65 outputs the license conditions information generated in step S247 to the external memory control section 97 of the encryption processing section 65. The external memory control section 97 overwrites the received license conditions information in the external memory 67 and updates it. Since the method of rewriting (updating) method to the external memory 67 of the external memory control section 97 was described in FIG. 70, its details are omitted.

[0493] In step S246, if license conditions information corresponding to the content ID attached to the right contents change command was not found in the external memory 67, or if tamper was found in a storage block of the external memory in which the license conditions information is stored (which has been described with reference to FIG. 68), the processing proceeds to step S251, and predetermined error processing is performed.

[0494] In this way, the home server 51 can purchase a new right using an already purchased right (described in the license conditions information), a handling policy and price information, and change utilization right contents.

[0495] FIGS. 76 and 77 illustrate concrete examples of a rule portion of a handling policy and price information. In FIG. 76, the handling policy is composed of a rule number attached to each utilization right as a serial number, a utilization contents number indicating utilization right contents, its parameter, a minimum sales price, and a profit ratio of a content provider, in which, for example, five rules are written. Since a rule 1 has a utilization right contents number 1 as a right item, it is seen from FIG. 44 that the right is a right without a reproduction right, time and number of times limitations. In addition, it is seen that there is no specific description in the item of a parameter. The minimum sales price is ¥350, and a share of the content provider 2 is 30% of the price. Since a rule 2 has a utilization right contents number 2 as the right item, it is seen from FIG. 44 that the right is a right with a reproduction right and time limitation and without number of times limitation. In addition, it is seen from the item of a parameter that a utilization possible period is one hour. The minimum sales price is ¥100, and the share of the content provider 2 is 30% of the price. Since a rule 3 has a utilization right contents number 6 as the right item, it is seen from FIG. 44 that the right is a right without a reproduction right (without a copy control signal), without time limitation and with number of times limitation. In addition, it is seen from the item of a parameter that the utilization possible number of times is one. The minimum sales price is ¥30, and the share of the content provider 2 is 30% of the price.

[0496] Since a rule 4 has a utilization right contents number 13 as the right item, it is seen from FIG. 44 that the right is utilization contents change. It is seen from the item of a parameter that a changeable rule number from #2 (with a reproduction right, with time limitation and without number of times limitation) to #1 (without a reproduction right, time and number of times limitation). The minimum price is ¥200, and the share of the content provider 2 is 20% of the price. The minimum sales price is presented lower than that of the rule 1 because it is considered that an already purchased right it traded in and repurchased, and the share of the content provider 2 is presented lower than that of the rules 1 in order to increase the share of the electronic distribution service center 1 that performs actual work (since the content provider 2 has no work at the time of right contents change).

[0497] Since a rule 5 has a utilization right contents number 14 as the right item, it is seen from FIG. 44 that the right is redistribution.

[0498] It is seen from the item of a parameter that redistribution possible conditions is that an apparatus having the rule number #1 (without a reproduction right, time and number of times limitation) purchases and redistribute the rules number #1 (without a reproduction right, time and number of times limitation). The minimum sales price is ¥250, and the share of the content provider 2 is 20% of the price. The minimum sales price is lower than that of the rule 1 because it is considered that an apparatus having an already purchased right repurchases identical contents, and the share of the content provider 2 is presented lower than that of the rule 1 in order to increase the share of the electronic distribution service center 1 that performs actual work (since the content provider 2 does not have work at the time of redistribution).

[0499] In FIG. 77, the price information is composes of a rule number attached to each utilization right as a serial number, a parameter and price information. Five rules are also described in this price information. A rule 1 is price information corresponding to the rule #1 of the handling policy, and indicates that a price is ¥500 and a share of the service provider 3 is 30% when the utilization contents number #1 is purchased. Therefore, out of ¥500 paid by a user, the content provider 2 takes ¥150, the service provider 3 takes ¥150, and the electronic distribution service center 1 takes ¥200. Since rules 2 to 5 are similar, their details are omitted.

[0500] Further, in rules 4 and 5, the share of the service provider 2 is fewer than that of the rule 1 because a user apparatus performs distribution work on behalf of the service provider 2, and the electronic distribution service center 1 performs collection of prices.

[0501] In addition, although the rule numbers are serial numbers from #1 to #5 in this example, this is not necessarily the case. Since a person preparing price information sets a utilization contents number and a number for each rule number, and arranges ones extracted from the numbers, the rule numbers are not generally serial numbers.

[0502] FIG. 78 illustrates a specific example when the right contents change described in FIG. 75 is performed. The handling policy is composed of a rule number attached to each utilization right as a serial number, a utilization contents number indicating utilization right contents, it parameter, a minimum sales price, and a profit ratio of a content provider, the price information is composes of a rule number attached to each utilization right as a serial number, a parameter and price information, and the license conditions information is composed of a rule number attached to each utilization right as a serial number, a utilization right contents number indicating utilization right contents, and its parameter. The home server 51 has already purchased a right with a reproduction right with the rule number #2 and time limitation, and the rule number #2 is described in the license conditions information indicating right contents, which indicates that remaining utilization possible time is thirty minutes, and accumulated two hours of purchase has been performed so far. If it is tried to change the right from with time limitation to without time limitation now, it is seen from a rule 3 of the handling policy, a rule 3 of the price information and the license conditions information that the right can be changed to without a reproduction right, time and number of times limitation with ¥200, and the license conditions information changes to without a reproduction right, time and number of times limitation of the rule number #1 and the utilization right contents number (a parameter in case of the utilization right contents number #1 will be described later. In addition, in this example, changing the right contents once after buying a right with time limitation is cheaper than directly buying a right without a reproduction right, time and number of times limitation. Thus, it is better to put a discount considering accumulated utilization time.

[0503] FIG. 79 is a flow chart illustrating details of processing in which the home server 51 purchases a content utilization right for the fixed apparatus 52 and redistributes the utilization right. Since steps S260 to S264 are similar to steps S220 to S225 of FIG. 74, their detailed description is omitted. In step S265, the encryption processing section 65 of the home server 51 causes the external memory control section 97 of the encryption processing section 65 to read out from the external memory 67 license conditions information and the content key K_co encrypted by the save key K_save corresponding to contents that is tried to be redistributed. Since a method of reading out from the external memory 67 by the external memory control section 97 was described in FIG. 68, its details are omitted. If successfully read out, the processing proceeds to step S266.

[0504] In step S266, the upper controller 62 of the home server 51 displays information whose contents can be redistributed (e.g., a utilization form or a price whose contents can be redistributed) using the display means 64, and a user selects redistribution contents conditions using the inputting means 63. Further, this selection processing may be performed at the time of starting the redistribution processing in advance. The signal inputted from the inputting means 63 is transmitted to the upper controller 62 of the home server 51, and the upper controller 62 generates a redistribution command based on the signal and inputs the redistribution command in the encryption processing section 65 of the home server 51. The encryption processing section 65 having received this generates charge information and new license conditions information from the handling policy and the price information received in step S264, and the license conditions information read out in step S265.

[0505] Since step S267 is similar to step S171 of FIG. 67, its detailed description is omitted. In step S268, the control section 91 of the encryption processing section 65 decrypts the content key K_co encrypted by the save key K_save read out in step S265 by the decryption unit 111 of the encryption/decryption module 96 using the save key K_save supplied from the storage module 92. Then, the control section 91 of the encryption processing section 65 re-encrypts the content key K_co by the encryption unit 112 of the encryption/decryption module 96 using the temporary key K_temp that was shared with at the time of mutual authentication in step S260. Finally, the signature generation unit 114 of the encryption/decryption module 96 generates signatures corresponding to the content key K_co encrypted by the temporary key K_temp and the new license conditions information generated in step S266, and returns it to the control section 91 of the encryption processing section 65.

[0506] Since processing of steps S269 to S272 is similar to steps S229 to S232 of FIG. 74, its details are omitted.

[0507] In this way, the home server 51 can perform redistribution of contents by creating new license conditions information from a utilization right (license conditions information) it owns and a handling policy, price information, and transmitting the information to the fixed apparatus 52 together with the content key K_co and contents it owns.

[0508] FIG. 80 is a flow chart illustrating details of processing in which the home server 51 transmits license conditions information and content key K_co to the fixed apparatus 52 and the fixed apparatus 52 purchases a content utilization right. In step S280, the encryption processing section 73 of the fixed apparatus 52 decides whether or not a total of charges of charge information stored in the storage module of the encryption processing section 73 has reached an upper limit, and if it has not reached the upper limit, the processing proceeds to step S281 (Further, the decision may be made by an upper limit of the number of charge processing instead of the upper limit of charges).

[0509] In step S281, the upper controller 72 of the fixed apparatus 52 inputs the registration information read out from the small storage section 75 of the fixed apparatus 52 in the encryption processing section 73 of the fixed apparatus 52. The encryption processing section 73 having received the registration information decides if the item of “purchase processing” for the ID of the fixed apparatus 52 is marked “purchase possible” after verifying a signature of the registration information by a signature verification unit of an encryption/decryption module (not shown), and if it is “purchase possible,” the processing proceeds to step S282.

[0510] Since step S282 is similar to step S220 of FIG. 74, its details are omitted. Since step S283 is similar to step S221 of FIG. 74, its details are omitted (the home server 51 decides whether or not the fixed apparatus 52 is registered, and the fixed apparatus 52 decides whether or not the home server 51 is registered). Since step S284 is similar to step S265 of FIG. 79, its details are omitted. Since step S285 is similar to step S268 of FIG. 79, its details are omitted. In step S286, the control section 91 of the encryption processing section 65 generates signatures with respect to the content key K_co encrypted by the temporary key K_temp and the license conditions information read out in step S284 using the signature generation unit 114 of the encryption/decryption module 96, and transmits them to the upper controller 62. The upper controller 62 of the home server 51 having received the content key K_co encrypted by the temporary key K_temp and the license conditions information and their signatures reads out the contents encrypted by the content key K_co, the handling policy and its signature, if necessary, and the price information and its signature from the mass storage section 68, and transmits the content key K_co encrypted by the temporary key K_temp and the license conditions information, the contents encrypted by the content key K_co, the handling policy and its signature, and the price information and its signature to the fixed apparatus 52.

[0511] Since step S287 is similar to step S230 of FIG. 74, its details are omitted. Since step S288 is similar to step S225 of FIG. 74, its details are omitted. In step S289, the upper controller 72 of the fixed apparatus 52 displays information whose contents can be redistributed (e.g., a utilization form or a price whose contents can be redistributed) using the display means 78, and a user selects redistribution contents conditions using the inputting means 77. Further, this selection processing may be performed at the time of starting the redistribution processing in advance. The signal inputted from the inputting means 77 is transmitted to the upper controller 72 of the fixed apparatus 52, and the upper controller 72 generates a redistribution command based on the signal and inputs the redistribution command in the encryption processing section 73 of the fixed apparatus 52. The encryption processing section 73 having received this generates charge information and new license conditions information from the handling policy, the price information and the license conditions information received in step S286.

[0512] In step S290, the encryption processing section 73 of the fixed apparatus 52 stores the charge information generated in step S289 in a storage module (not shown) of the encryption processing section 73. In step S291, the encryption processing section 73 of the fixed apparatus 52 decrypts the content key K_co encrypted by the temporary key K_temp received in step S286 by a decryption unit (not shown) of the encryption processing section 73 using the temporary key K_temp shared in step S282. Then, the encryption processing section 73 of the fixed apparatus 52 encrypts the content key K_co by an encryption unit (not shown) of the encryption processing section 73 using the save key K_save2 supplied form a storage module (not shown) of the encryption processing section 73.

[0513] In step S292, the encryption processing section 73 of the fixed apparatus 52 transmits the license conditions information generated in step S289 and the content key K_co encrypted by the save key K_save2 generated in step S291 to an external memory control section (not shown) of the encryption processing section 73. The external memory control section having received the license conditions information and the content key K_co encrypted by the save key K_save2 writes the license conditions information and the content key K_co encrypted by the save key K_save2 in the external memory 79. Since the tamper check in writing was described with reference to FIG. 69, its details are omitted.

[0514] In this way, the fixed apparatus 52 can receive redistribution of contents by receiving a utilization right (license conditions information) owned by the home server 51, a handling policy, price information, a content key K_co, and contents from the home server 51, and creating new license conditions information in the fixed apparatus 52.

[0515] FIG. 81 illustrates a managed transfer right. Managed transfer means an operation capable of transferring a reproduction right from an apparatus 1 to an apparatus 2, which is the same as normal transfer in that the right is transferred from the apparatus 1 to the apparatus 2, but is different from normal transfer in that the apparatus 2 cannot retransfer the received reproduction right (the apparatus 1 after transferring a reproduction right cannot retransfer the reproduction right as in the normal transfer). The apparatus 2 having received the reproduction right by the managed transfer can return the reproduction right to the apparatus 1, and after returning the reproduction right, the apparatus 1 can transfer the reproduction right again and the apparatus 2 cannot continue to transfer the reproduction right. In order to realize these, a purchaser of the managed transfer right and a current holder of the managed transfer right are managed in the license conditions information (here, it is assumed that the managed transfer can only be performed if the utilization content number #1 is held, but this can be extended to the utilization right content number #2).

[0516] In FIG. 81, since the rule 1 of the handling policy was described in FIG. 78, its details are omitted. Since a right item of the rule 2 is the utilization right content number 16, it is seen from FIG. 44 that the right is the managed transfer right. In addition, it is seen that there is no specific description in the item of a parameter. The minimum sales price is ¥100, and the share of the content provider 2 is 50% of the price. The share of the content provide 2 is presented higher than that of the rule 1 because, since the service provider 3 does not perform actual work at all, its share is transferred to the share of the content provider 2.

[0517] In FIG. 81, since the rule 1 of price information was described in FIG. 78, its details are omitted. The rule 2 is price information of the rule #2 of a handling policy, and indicates that the price is ¥100 and the share of the service provider 3 is 0% when the utilization right content number #16 is purchased. Therefore, out of ¥100 paid by a user, the content provider 2 takes ¥50, the service provider 3 takes ¥0, and the electronic distribution service center 1 takes ¥50.

[0518] In FIG. 81, the user first purchases the rule number #1 (without a reproduction right, time and number of times limitation). However, the user does not have the managed transfer right then (the state of a in FIG. 81). Then, the user purchases the managed transfer right (since these operations happens in an instance, it looks as if the user purchased all at a time). Concerning the rule number of the license conditions, an ID of an encryption processing section indicating a purchase (hereinafter referred to as a purchaser) is ID1 (e.g., an ID of the home server 51), and an ID of an encryption processing section holding the reproduction right (hereinafter referred to as a holder) is ID2 (the state of b in FIG. 81). If this is transferred to the fixed apparatus 52 by performing the managed transfer, in the rule section of the license conditions information held by the home server 51, the purchase is still ID1, but the holder is changed to ID2. In addition, in the rule section of the license conditions information held by the fixed apparatus 52 having received the reproduction right by the managed transfer, the purchase is ID1 and the holder is ID2, which is the same as the license conditions information of the home server 51.

[0519] FIG. 82 is a flow chart illustrating details of the transfer processing of the managed transfer right. In FIG. 82, since step S300 is similar to step S220 of FIG. 74, its details are omitted. In addition, since step S301 is similar to step S221 of FIG. 74, its details are omitted. Since step S302 is similar to step S246 of FIG. 75, its details are omitted. In step S303, the encryption processing section 65 of the home server 51 inspects the rule section of the read out license conditions information, and decides if the use right is without the reproduction right, time and number of times limitation and with the managed transfer right. If it is decided that there is the managed transfer right, the processing proceeds to step S304.

[0520] In step S304, the control section 91 of the encryption processing section 65 decides if both the purchaser and the holder of the managed transfer right are the ID of the home server 51. If it is decided that both the purchase and the holder of the managed transfer right is the ID of the home server 51, the processing proceeds to step S305. In step S305, the control section 91 of the encryption processing section 65 rewrites the holder of the managed transfer right of the license conditions information to the ID of the fixed apparatus 52. In step S306, the control section 91 of the encryption processing section 65 outputs the license conditions information rewritten in step S305 to the external memory control section 97 of the encryption processing section 65. The external memory control section 97 of the encryption processing section 65 having received the license conditions information overwrites the license conditions information on the external memory 67. Since the method of rewriting and storing data of the external memory 67 was described in FIG. 70, their details are omitted. Since steps S307 to S311 are similar to steps S268 to S272 of FIG. 79, their details are omitted.

[0521] If the managed transfer right was not included in the license conditions information in step S303, or if the purchase or the holder of the managed transfer right was not the home server 51 in step S304, the processing is terminated.

[0522] In this way, the right for reproducing contents from the home server 51 to the fixed apparatus 52 can be transferred.

[0523] FIG. 83 is a flow chart illustrating processing for returning the managed transfer right from the fixed apparatus 52 currently holding the managed transfer right to the home server 51 that is the purchaser of the managed transfer right. In FIG. 83, since step S320 is similar to step S220 of FIG. 74, its details are omitted. Since step S321 is similar to step S221 of FIG. 74, its details are omitted, but it is inspected if the other's ID is registered in each of the home server 51 and the fixed apparatus 52. If it is decided that the IDs are registered, the processing proceeds to step S322. Since step S322 is similar to step S246 of FIG. 75, its details are omitted, but data of an identical content ID is read out in both the home server 51 and the fixed apparatus 52. If data is correctly read from the external memory, the processing proceeds to step S323. Since step S323 is similar to step S303 of FIG. 82, its details are omitted, but it is decided that both the home server 51 and the fixed apparatus 52 have the managed transfer right. If it is decided that there is the managed transfer right, the processing proceeds to step S324.

[0524] In step S324, the encryption processing section 65 of the home server 51 decides if the purchaser of the managed transfer right is the ID of the homes server 51 and the holder is the ID of the fixed apparatus 52. If it is decided that the purchaser of the managed transfer right is the ID of the home server 51 and the holder is the ID of the fixed apparatus 52, the processing proceeds to step S325. Similarly, the encryption processing section 73 of the fixed apparatus 52 decides if the purchaser of the managed transfer right is the ID of the home server 51 and the holder is the ID of the fixed apparatus 52. If it is decided that the purchaser of the managed transfer right is the ID of the home server 51 and the holder is the ID of the fixed apparatus 52, the processing proceeds to step S325.

[0525] In step S325, the record reproduction section 76 of the fixed apparatus 52 deletes contents from the recording medium 80 (however, since encrypted data simply remains, the contents needs not be deleted by force). In step S326, the encryption processing section 73 of the fixed apparatus 52 causes an external memory control section (not shown) of the encryption processing section 73 to delete the content key K_co encrypted by the save key K_save2 stored in the external memory 79 and the license conditions information. Since the deletion method of data of the external memory 79 was described in FIG. 71, its details are omitted.

[0526] In step S327, the control section 91 of the encryption processing section 65 generates license conditions information in which the holder of the managed transfer right of the license conditions information to the ID of the home server 51. In step S328, the control section 91 of the encryption processing section 65 outputs the license conditions information generated in step S327 to the external memory control section 97 of the encryption processing section 65. The external memory control section 97 of the encryption processing section 65 having received the license conditions information overwrites and stores the license conditions information in the external memory 67. Since the method for rewriting and storing in the external memory 67 was described in FIG. 70, its details are omitted.

[0527] If the registration information was tampered or the ID of the other apparatus was not registered in the homes server 51 or the fixed apparatus 52 in step S321, or if the content key or the license conditions information with respect to predetermined contents was not found in the external memory or the memory block including these was tampered in the home server 51 or the fixed apparatus 52 in step S322, the processing proceeds to step S329 and error processing is performed.

[0528] If the managed transfer right did not exist in the license conditions information in the home server 51 or the fixed apparatus 52 in step S323, or if the purchase was the home server 51 and the holder was not the fixed apparatus 52 in the home server 51 or the fixed apparatus 52 in step S324, the processing is terminated.

[0529] In this way, a right for reproducing contents can be returned from the fixed apparatus 52 to the home server 51.

[0530] Further, although contents and the content key K_co or the like are described as one, these may exist in plural if necessary.

[0531] In addition, although the content provider 2 and the service provider 3 is handled separately, they may be united as one. Moreover, the method of the content provider 2 may be applied to the service provider 3 as it is.

[0532] (2) Encryption Processing by Using an Individual key

[0533] The content provider 2 encrypts contents a content key that the content provider 2 itself prepared as described above with reference to FIG. 9. In addition, the content provider 2 receives an individual key peculiar to a content provider from the electronic distribution service center 1 and an individual key encrypted by a delivery key, and encrypts the content key by the individual key. Thus, the content provider 2 supplies the contents encrypted by the content key, the content key encrypted by the individual key, and the individual key encrypted by the delivery key to the user home network 5 via the service provider 3.

[0534] The user home network 5 decrypts the individual key peculiar to a content provider using the delivery key received from the electronic distribution service center 1. Thus, the user home network 5 can decrypts the content key that is encrypted by the individual key peculiar to a content provider and supplied from the content provider 2. The user home network 5 having obtained the content key can decrypt contents by the content key.

[0535] Here, while an individual key is peculiar to each content server, a delivery key is only one kind. Therefore, the user home network 5 can decrypt an individual key from each content provider if it has one kind of delivery key. Accordingly, the user home network 5 does not need to have an individual key peculiar to each content provider, and can purchase contents of all content providers simply by having a delivery key.

[0536] In addition, each content provider cannot decrypt individual keys (encrypted by a delivery key) peculiar to other content providers by not having a delivery key. Thus, stealing of contents among content providers can be prevented.

[0537] Here, in order to clarify the above-mentioned configurations of the embodiments and each means of the inventions described in the claims, characteristics of the present invention will be described as follows by adding the embodiment (only one example) corresponding to each means in parenthesis following each means. However, this description does not mean that each means is limited to the described examples of course.

[0538] That is, in the information transmission system of the present invention is provided with a memory for saving individual key (e.g., a tamper resistant memory 201 of FIG. 84) held by a content provider or a content seller transmitting information such as contents (e.g., a content transmission apparatus 200 of FIG. 84), means for encrypting a content key K_co by an individual key K_i (e.g., a data encryption section 203 of FIG. 84), means for generating a handling policy in which use conditions or the like of the content key K_co are described (e.g., a handling policy generation section 206 of FIG. 84), means for generating a digital signature with respect to various kinds of data (e.g., a signature generation section 207 of FIG. 84), means for verifying signature data generated with respect to various kinds of data (e.g., a signature verification section 222 of FIG. 84) held by a user purchasing contents (e.g., a content receiving apparatus 210 of FIG. 84), means for comparing an ID indicating a generator of the content key K_co and an ID of a generator of the handling policy (e.g., a comparator 226 of FIG. 84), and means for saving a delivery key (e.g., a tamper resistant memory 221 of FIG. 84).

[0539] In addition, the information transmission system of the present invention is provided with a memory for saving an individual key (e.g., a tamper resistant memory 201 of FIG. 85) held by a content provider or a content seller transmitting information such as contents (e.g., a content transmission apparatus 200 of FIG. 85), a memory for saving a key certificate (e.g., a memory 202 of FIG. 85), means for encryption a content key K_co by an individual key K_i (e.g., a data encryption section 203 of FIG. 85), means for verifying signature data generated with respect to various kinds of data (e.g., a signature verification section 222 of FIG. 85) held by a user purchasing contents (e.g., a content receiving apparatus 210 of FIG. 85), and means for saving a delivery key (e.g., a tamper resistant 221 of FIG. 85).

[0540] (3) Remote Reproduction Processing

[0541] Remote reproduction processing for receiving a reproduction command from an apparatus holding contents (e.g., the homes server 51) by an apparatus that does not hold a reproduction right of contents (e.g., the fixed apparatus 52) and reproducing the contents will be described.

[0542] FIG. 86 shows remote reproduction processing procedures, and first, in step S401, the home server 51 and the fixed apparatus 52 mutually authenticate after a content ID of contents that are to be remotely reproduced by an input operation of a user is inputted in the upper controller 62. Since the mutual authentication processing is similar to the processing described in FIG. 52, its description is omitted. In step S402, the upper controller 62 of the home server 51 causes the encryption processing section 65 of the home server 51 to inspect registration information read out from the mass storage section 68 of the home server 51. The encryption processing section 65 having received the registration information from the upper controller 62 causes the signature verification unit 115 of the encryption/decryption module 96 to verify a signature attached to the registration information by a public key of the authentication station 22 supplied form the storage module 92 of the encryption processing section 65. After successful verification of the signature, the encryption processing section 65 decides if the item of “registration” is marked “registration possible,” and if it is decided that the item is marked “registration possible,” the processing proceeds to step S403. Further, the fixed apparatus 52 side also inspects the registration information, and decides that the home server 51 is marked “registration possible.” In step S403, the upper controller 62 generates a reproduction command including a content ID of contents to be remotely reproduced, and in subsequent step S404, the encryption processing section 65 of the home server 51 causes the external memory control section 97 of the encryption processing section 65 to read out a content key K_co encrypted by a save key K_save and license conditions information corresponding to the contents to be remotely reproduced from the external memory 67. Since a method for reading out data from the external memory 67 by the external memory control section 97 is as described in FIG. 68, its details are omitted. If succeeded in reading out, the processing proceeds to step S405.

[0543] In step S405, the decryption unit 111 of the encryption/decryption module 96 decrypts the content key K_co read out from the external memory 67 by the save key K_save supplied from the storage module 92. After encrypting the content key K_co by the temporary key K_temp in step S406, the encryption unit 112 of the encryption/decryption module 96 encrypts the reproduction command by the temporary key K_temp in step S407.

[0544] In the subsequent step S408, the home server 51 reads out the contents (encrypted by the content key K_co) to be remotely reproduced from the mass storage section 68, and transmits the contents to the fixed apparatus 52 together with the content key and the reproduction command encrypted by the temporary key K_temp in the above-mentioned steps S406 and S407.

[0545] In step S409, the fixed apparatus 52 decrypts the content key and the reproduction command received from the home server 51 by the temporary key K_temp, and in step S410, the encryption processing section 73 and the extension section 74 mutually authenticate and share the temporary key K_temp2. Then, in step S411, the encryption processing section 73 encrypts the content key K_co and the reproduction command by the temporary key K_temp2 shared with the extension section 74 in the above-mentioned step S410. In step S412, the encryption processing section 73 transmits the content key K_co and the reproduction command encrypted by the temporary key K_temp2 to the extension section 74, and in step S413, the extension section 74 decrypts the content key K_co and the reproduction command by the temporary key K_temp2.

[0546] In step S414, the extension section 74 decrypts the contents received from the home server 51 in the above-mentioned step S408 by the content key K_co decrypted in the above-mentioned step S413 in accordance with the reproduction command decrypted in the above-mentioned step S413. Then, in step S415, the extension section 74 extends the decrypted contents by a predetermined method such as the ATRAC. In step S416, the upper controller 72 inserts data instructed by the encryption processing section 73 in the contents in the form of an electronic watermark. Incidentally, the data handed from the encryption processing section 73 to the extension section 74 is not limited to the content key K_co and the reproduction command, but includes reproduction conditions (an analog output, a digital output, an output with copy control signal (SCMS)), an ID of an apparatus that has purchased a content utilization right, or the like. The data to be inserted is the ID of the apparatus that has purchased the content utilization right, i.e., an ID of an apparatus in the license conditions information. In step S417, the extension section 74 reproduces music via a speaker (not shown).

[0547] In the above-described configuration, since the home server 51 transmits the contents and the reproduction command of the contents as well as the content key K_co to the fixed apparatus 52, the fixed apparatus 52 that does not hold the reproduction right of the contents can reproduce the contents using the reproduction command and the content key K_co. Therefore, according to the above-described configuration, the contents can be reproduced in a plurality of apparatuses (a fixed apparatus, etc) connected to an apparatus holding the contents (an apparatus having the reproduction right of the contents).

[0548] (4) Reservation Purchase Processing

[0549] Reservation purchase processing for performing a purchase reservation of contents by performing key conversion of the contents in advance before an effective period of a delivery key is expired will be described. In step S451 of reservation purchase processing procedures indicated in FIG. 87, the home server 51 performs registration information update decision processing, and the processing proceeds to step S452. Since the registration information update decision processing is as described in FIGS. 61 and 62, its detailed description is omitted. However, in the reservation purchase processing, decision of a registration information update timing based on a number of purchase and a purchase price described in steps S601 and S602 of FIG. 61 may not be performed.

[0550] In step S452, the upper controller 62 of the home server 51 inputs the registration information read out from the mass storage section 68 of the home server 51 in the encryption processing section 65 of the home server 51. After verifying a signature of the registration information by the signature verification unit 115 of the encryption/decryption module 96, the encryption processing section 65 having received the registration information decides whether or not the items of “purchase processing” and “registration” with respect to the ID of the home server 51 are marked “purchase possible” and “registration possible,” and if they are marked “purchase possible” and “registration possible,” the processing proceeds to step S453. In step S453, the upper controller 62 of the home server 51 inputs the public key certificate of the content provider 2 read out from the mass storage section 68 of the home server 51 in the encryption processing section 65 of the home server 51. After verifying a signature of the public key certificate of the content provider 2 by the signature verification unit 115 of the encryption/decryption module 96, the encryption processing section 65 having received the public key certificate of the content provider 2 takes out a public key of the content provider 2 from the public key certificate. If it is confirmed that no tamper is made as a result of the verification of the signature, the upper controller 62 proceeds to step S454.

[0551] In step S454, the upper controller 62 of the home server 51 inputs the content key K_co read out from the mass storage section 68 of the home server 51 in the encryption processing section 65 of the home server 51. The encryption processing section 65 having received the content key K_co verifies a signature of the content key K_co by the signature verification unit 115 of the encryption/decryption module 96, and if it is confirmed that no tamper is made, the processing proceeds to step S455.

[0552] In step S455, the upper controller 62 of the home server 51 inputs the individual key K_i read out from the mass storage 68 of the home server 51 in the encryption processing section 65 of the home server 51. The encryption processing section 65 having received the individual key K_i verifies a signature of the individual key K_i by the signature verification unit 115 of the encryption/decryption module 96, and if it is confirmed that no tamper is made, the processing proceeds to step S456.

[0553] Here, if one signature is attached to the entirety of the content key K_co encrypted by the individual key K_i and the individual key K_l encrypted by the delivery key K_d, steps S454 and S455 can be united and the signature verification processing can be simplified.

[0554] In step S456, the control section 91 of the encryption processing section 65 decrypts the individual key K_i inputted in step S455 by the decryption unit 111 of the encryption/decryption module 96 using the delivery key K_d supplied from the storage module 92. Then, the control section 91 of the encryption processing section 65 decrypts the content key K_co inputted in step S454 using the individual key K_i previously decrypted. Finally, the control section 91 of the encryption processing section 65 encrypts the content key K_co by the encryption unit 112 of the encryption/decryption module 96 using the save key K_save supplied from the storage module 92.

[0555] In step S457, the content key K_co encrypted by the save key K_save is saved in the external memory 67 via the external memory control section 97 of the encryption processing section 65.

[0556] In addition, if it is decided in step S452 that the home server 51 is an apparatus that cannot perform purchase processing, or it is decided in step S453 that the signature of the public key certificate of the content provider 2 is not correct, or if it is decided in step S454 that the signature of the content key K_co encrypted by the individual key K_i is not correct, or if its is decided in step S455 that the signature of the individual key K_i encrypted by the delivery key K_d is not correct, the processing proceeds to step S458, where the home server 51 performs error processing.

[0557] As described above, after decrypting the content key K_co by the individual key K_l, the home server 51 re-encrypts the content key K_co by the save key K_save, and causes the external memory 67 to store it. Since this reservation purchase processing does not actually purchase contents, among the purchase processing described above with reference to FIG. 67, processing for charge information in the registration information update determination processing of step S161, processing for purchased contents corresponding to step S164, processing for a handling policy corresponding to step S167, processing for public key verification of a service provider corresponding to step S168, processing for signature verification of price information corresponding to step S169, and save processing of charge information and license conditions information corresponding to steps S170 through S172 may not be performed.

[0558] Incidentally, in the case of the reservation purchase processing of FIG. 87, although the home server 51 did not prepare license conditions information, the home server 51 may prepare license conditions information and set its utilization right content number (i.e., a right item) in a state without a right such as an initial value (e.g., #0 that does not exist), or the like.

[0559] In this way, in the reservation purchase processing, by saving the content key K_co in the external memory 67 before an effective period of the delivery key K_d expires, the home server 51 can purchase contents encrypted by the saved content key K_co regardless of a period of the delivery key K_d.

[0560] Here, the purchase processing of contents for which purchase reservation is made by saving the content key K_co in the external memory 67 in the home server 51 will be described. In step S471 of the purchase processing procedures shown in FIG. 88, the home server 51 performs the registration information update determination processing, and the processing proceeds to step S472. Since the registration information update determination processing is as described in FIGS. 61 and 62, its details are omitted. However, in the purchase processing, determination of a registration information update timing based on the delivery key K_d described in step S603 of FIG. 61 may no be performed.

[0561] In step S472, the upper controller 62 of the home server 51 inputs the registration information read out from the mass storage section 68 of the home server 51 in the encryption processing section 65 of the home server 51. After verifying a signature of the registration information by the signature verification unit 115 of the encryption/decryption module 96, the encryption processing section 65 having received the registration information decides if the items of “purchase processing” and “registration” are marked “purchase possible” and “registration possible,” if they are marked “purchase possible” and “registration possible,” the processing proceeds to step S473. In step S473, the upper controller 62 of the home server 51 inputs the public key certificate of the content provider 2 read out from the mass storage section 68 of the home server 51 in the encryption processing section 65 of the home server 51. After verifying a signature of the public key certificate of the public key certificate of the content provider 2 by the signature verification unit 115 of the encryption/decryption module 96, the encryption processing section 65 having received the public key certificate of the content provider 2 takes out a public key of the content provider 2 from the public key certificate. If it is confirmed that no tamper is made as a result of the verification of the signature, the processing proceeds to step S474.

[0562] In step S474, the upper controller 62 of the home server 51 inputs the contents read out from the mass storage section 68 of the home server 51 in the encryption processing section 65 of the home server 51. The encryption processing section 65 having received the contents verifies a signature of the contents by the signature verification unit 115 of the encryption/decryption module 96, and if it is confirmed that no tamper is made, the processing proceeds to step S475.

[0563] In step S475, the upper controller 62 of the home server 51 inputs the handling policy read out from the mass storage section 68 of the home server 51 in the encryption processing section 65 of the home server 51. The encryption processing section 65 having received the handling policy verifies a signature of the handling policy by the signature verification unit 115 of the encryption/decryption module 96, and if it is confirmed that no tamper is made, the processing proceeds to step S476. In step S476, the upper controller 62 of the home server 51 inputs the public key certificate of the service provider 3 read out from the mass storage section 68 of the home server 51 in the encryption processing section 65 of the home server 51. After verifying a signature of the public key certificate of the service provider 3 by the signature verification unit 115 of the encryption/decryption module 96, the encryption processing section 65 having received the public key certificate of the service provider 3 takes out a public key of the service provider 3 from the public key certificate. If it is confirmed that no tamper is made as a result of the verification of the signature, the processing proceeds to step S477.

[0564] In step S477, the upper controller 62 of the home server 51 inputs the price information read out from the mass storage section 68 of the home server 51 in the encryption processing section 65 of the home server 51. The encryption processing section 65 having received the price information verifies a signature of the price information by the signature verification unit 115 of the encryption/decryption module 96, and if it is confirmed that no tamper is made, the processing proceeds to step S478.

[0565] In step S478, the upper controller 62 of the home server 51 displays information of purchasable contents (e.g., a purchasable utilization form, a price or the like) using the display means 64, and a user selects a purchase item using the inputting means 63. Further, selection processing of a purchase item may be performed prior to the purchase processing. A signal inputted from the inputting means 63 transmitted to the upper controller 62 of the home server 51, and the upper controller 62 generates a purchase command based on the signal and inputs the purchase command in the encryption processing section 65 of the home server 51. The encryption processing section 65 having received this generates charge information and license conditions information from the handling policy inputted in step S475 and the price information inputted in step S477. Since the charge information is as descried in FIG. 42, its details are omitted. In addition, since the license conditions information is as described in FIG. 41, its details are omitted.

[0566] In step S479, the control section 91 of the encryption processing section 65 saves the charge information generated in step S478 in the storage module 92. Then, in step S480, the control section 91 of the encryption processing section 65 transmits the license conditions information generated in step S478 to the external memory control section 97 of the encryption processing section 65. After checking tamper of the external memory 67, the external memory control section 97 having received the license conditions information writes the license conditions information in the external memory 67. Since the tamper check in writing is as described in FIG. 69, its detailed description is omitted. (Further, if license conditions information without a right is already written, the license conditions information is rewritten and updated by the rewriting processing described in FIG. 70.)

[0567] Incidentally, if it is decided in step 472 that the home server 51 is an apparatus that cannot perform purchase processing or is not registered, or if it is decided in step S473 that a signature of the public key certificate is not correct, or if it is decided in step S474 that a signature of the contents encrypted by the content key K_co is not correct, or if it is decided in step S475 that a signature of the handling policy is not correct, or if it is decided in step S476 that a signature of the price information is not correct, the processing proceeds to step S481, where the home server 51 performs error processing.

[0568] As described above, the home server 51 completes the purchase processing of contents by storing the charge information of the contents that a user selected to purchase in the storage module 92 and, at the same time, storing the license conditions information in the external memory 67. In the purchase processing, the signature verification of the content key K_co (step S454) and the signature verification of the individual key K_l (step S455) as well as the substitute processing of the content key K_co that have already been performed in the purchase processing described with reference to FIG. 87 are not performed.

[0569] With the above-described configuration, as the home server 51 saves the content key K_co in the external memory 67 by the reservation purchase processing before the delivery key K_d is updated, even if the delivery key K_d required when decrypting the content key K_co is updated, the contents can be purchased when an effective period of the delivery key K_d is expired because the content key K_co is already saved in the external memory 67.

[0570] (5) Proxy Purchase Processing

[0571] Proxy purchase processing for giving and receiving contents between apparatuses having different registration information, i.e., apparatuses belonging to different groups will be described. In this proxy purchase processing, when contents are given and received between the home server 51 and a portable apparatus or the like that is an apparatus external to a group of the home server 51, the case in which the home server 51 side is charged and the case in which the apparatus external to a group is charged will be respectively described. In this case, the fixed apparatus 52 described with reference to FIG. 15 will be described as the apparatus external to a group.

[0572] FIG. 89 shows processing procedures in which the home server 51 passes contents to an apparatus external to a group and performs charge processing, and in step S501, the home server 51 and the apparatus external to a group mutually authenticate. In step S502, the home server 51 and the apparatus external to a group exchange registration information each other, and inspects the other's registration information in the subsequent step S503.

[0573] That is, the home server 51 causes the encryption processing section 65 to inspect the registration information received from the apparatus external to a group. The encryption processing section 65 having received the registration information from the apparatus external to a group causes the signature verification unit 115 of the encryption/decryption module 96 to inspect a signature attached to the registration information by a public key supplied from the storage module 92 of the encryption processing section 65. After successful verification of the signature, the control section 91 of the encryption processing section 65 decides whether or not an ID of the apparatus external to a group is registered in the registration information and the items of “purchase processing” and “registration” is marked “purchase possible” and “registration possible.” In addition, the apparatus external to a group having received the registration information of the home server 51 also decides in the similar manner whether or not an ID of the home server 51 is registered in the registration information of the home server 51, and the item of “registration” is marked “registration possible.” Then, when each confirms that the other apparatus is registered, the processing proceeds to step S504.

[0574] Since steps S504 to S510 are the processing similar to that of steps S161 to S171 of FIG. 67, its details are omitted.

[0575] In step S511, the control section 91 of the encryption processing section 65 decrypts the individual key K_i encrypted by the delivery key K_d inputted in step S508 by the decryption unit 111 of the encryption/decryption module 96 using the delivery key K_d supplied from the storage module 92. Then, the control section 91 of the encryption processing section 65 decrypts the content key K_co encrypted by the individual key K_i inputted in step S508 by the decryption unit 111 of the encryption/decryption module 96 using the previously decrypted individual key K_l. Then, the control section 91 of the encryption processing section 65 re-encrypts the content key K_co by the encryption unit 112 of the encryption/decryption module 96 using the temporary key K_temp that was shared by the apparatus external to a group at the time of mutual authentication of step S501. In step S512, the control section 91 of the encryption processing section 65 generates signatures for the content key K_co encrypted by the temporary key K_temp and the license conditions information generated in step S509 using the signature generation unit 114 of the encryption/decryption module 96, and transmits them to the upper controller 62. The upper controller 62 of the home server 51 having received the content key K_co encrypted by the temporary Key K_temp, the license conditions information and their signatures reads out the contents encrypted by the content key K_co from the mass storage section 68, and transmits the content key K_co encrypted by the temporary key K_temp, the license conditions information, their signatures and the contents encrypted by the content key K_co to the apparatus external to a group.

[0576] In step S513, the apparatus external to a group having received the content key K_co encrypted by the temporary key K_temp, the license conditions information, their signatures and the contents encrypted by the content key K_co outputs the contents encrypted by the content key K_co to the record reproduction section 76 of the apparatus external to a group. The record reproduction section 76 of the apparatus external to a group having received the contents encrypted by the content key K_co saves the contents encrypted by the content key K_co in the recording medium 80.

[0577] In step S514, the encryption processing section 73 of the apparatus external to a group verifies the signature received from the home server 51 in the above-mentioned step S512, and at the same time, decrypts content key K_co encrypted by the temporary key K_temp decrypts by the decryption unit of the encryption/decryption module using the temporary key K_temp that was shared with the home server 51 at the time of authentication of step S501. Then, the control section of the encryption processing section 73 re-encrypts the content key K_co by the encryption unit of the encryption/decryption module using the save key K_save2 supplied from the storage module of the encryption processing section 73.

[0578] In step S515, the encryption processing section 73 of the apparatus external to a group transmits the content key K_co encrypted by the save key K_save2 and the license conditions information received in step S513 to the external memory control section of the encryption processing section 73, and causes the external memory 79 to save them. Since the processing in which the external memory control section writes data in the external memory was described in FIG. 69, its details are omitted.

[0579] In this way, the home server 51 purchases a content utilization right, charge information is saved in the home server 51 side, and a utilization right is transferred to the apparatus external to a group. Thus, the home server 51 makes payment for the content utilization right transferred to the apparatus external to a group.

[0580] FIG. 90 shows processing procedures in which the home server 51 passes contents to the apparatus external to a group and the apparatus external to a group performs charge processing, and in step S551, the apparatus external to a group decides whether or not a total of charges of the charge information stored in the encryption processing section 73 (FIG. 15) has reached an upper limit, and if it has not reached the upper limit, the processing proceeds to step S552. (Further, decision may be made by an upper limit of the number of charge processing rather than the upper limit of the total charges.)

[0581] In step S552, the upper controller 72 of the apparatus external to a group inputs the registration information read out from the external memory 79 in the encryption processing section 73. After verifying a signature of the registration information by the signature verification unit of the encryption/decryption module provided it inside, the encryption processing section 73 having received the registration information decides whether or not the item of “purchase processing” for an ID of the apparatus external to a group (the fixed apparatus 52) is marked “purchase possible,” and if it is marked “purchase possible,” the processing proceeds to step S553.

[0582] In step S553, the home server 51 and the apparatus external to a group mutually authenticates. Since the mutual authentication processing is similar to the processing described in FIG. 52, its description is omitted. In step S554, the home server 51 and the apparatus external to a group exchange information each other, and inspect the other's registration information each other in the subsequent step S555.

[0583] That is, the home server 51 causes the encryption processing section 65 to inspect the registration information received from the apparatus external to a group. The encryption processing section 65 having received the registration information from the apparatus external to a group causes the signature verification unit 115 of the encryption/decryption module 96 to verify a signature attached to the registration information by the public key supplied from the storage module 92 of the encryption processing section 65. After successful verification of the signature, the control section 91 of the encryption processing section 65 decides whether or not the ID of the apparatus external to a group is registered in the registration information, and the item of “registration” is marked “registration possible.” In addition, the apparatus external to a group having received the registration information of the home server 51 also decides in the similar manner whether or not the ID of the home server 51 is registered in the registration information of the home server 51, and the item of “registration” is marked “registration possible.” Further, similar processing is performed by the apparatus external to a group as well. Then, when each apparatus has confirmed that the other's apparatus is registered, the processing proceeds to step S556.

[0584] In step S556, the control section 91 of the home server 51 reads out the already purchased content key from the external memory 67 via the external memory control section 97, decrypts the content key K_co by the save key K_save in the subsequent step S557, and at the same time, re-encrypts it by the temporary key K_temp to generates signatures for them.

[0585] In step S558, the home server 51 transmits the content key encrypted by the save key K_temp generated in step S557, and the contents, the handling policy and the price information read out from the mass storage section 68 to the apparatus external to a group. In step S559, the apparatus external to a group saves the contents received from the home server 51 in the recording medium 80.

[0586] After the apparatus external to a group (the fixed apparatus 52) verifies the signatures of the handling policy, the price information and the like in step S560, in step S561, the upper controller 72 of the apparatus external to a group displays information of purchasable contents (e.g., a purchasable utilization form, a price or the like) using the displaying means 78, and a user selects a purchase item using the inputting means 77. Further, selection processing of a purchase item may be performed prior to the proxy purchase processing. The signal inputted from the inputting means 77 is transmitted to the upper controller 72, and the upper controller 72 generates a purchase command based on the signal and inputs the purchase command in the encryption processing section 73. The encryption processing section 73 having received this generates charge information and license conditions information from the handling policy and the price information inputted in step S560. Since the charge information was described in FIG. 42, its details are omitted. Since the license conditions information was described in FIG. 41, its details are omitted.

[0587] In step S562, the encryption processing section 73 saves the charge information generated in step S561 in the storage module in the encryption processing section 73. In step S563, with respect to the content key encrypted in step S557, the encryption processing section 73 verifies a signature, and at the same time, decrypts the signature by the temporary key K_temp, and re-encrypts it by the save key K_save2. Then, in step S564, the content key K_co encrypted by the save key K_save2 is saved in the external memory 79 from the encryption processing section 73.

[0588] In this way, since the home server 51 transfers the already purchased content utilization right to the apparatus external to a group and the apparatus external to a group saves the charge information, the apparatus external to a group makes payment for the content utilization right transferred from the home server 51.

[0589] In the above-described configuration, by exchanging the registration information each other between the apparatuses having different registration information as described in the above-mentioned steps S502 and S554, contents held by one apparatus can be transferred to the other apparatus after confirming that the other apparatus is a registered apparatus. Therefore, according to the above-described configuration, contents can be given and received between apparatuses belonging to different groups.

[0590] Further, although a signature of contents was verified in performing purchase processing in the above-mentioned embodiment, the processing is sometimes omitted because it takes time. In addition, whether or not verification is sometimes necessary is described in a handling policy or price information, and operations are performed in accordance with it.

[0591] (6) Data Format of Various Kinds of Data

[0592] The electronic distribution service center 1 adds an ID of the content provider 2 in an individual key K_l for each content provider 2, encrypts the entirety of the individual key K_i and the ID of the content provider 2 using the delivery key K_d, and delivers the obtained data to a corresponding content provider 2 as the encrypted individual key K_i.

[0593] The content provider 2 stores the encrypted individual key K_i given by the electronic distribution service center 1 in this way in key data for single contents as it is, and delivers it to an apparatus in the user home network 5 via the service provider 3. Then, in the electronic music distribution system 10, the deliver key K_d for decrypting the encrypted individual key K_i included in the key data is held only by the apparatus in the user home network 5, thereby substantially certainly preventing the ID of the content provider 2 that is encrypted together with the individual key K_i to be tampered between the content provider 2 and the apparatus in the user home network 5 that purchases the contents.

[0594] Therefore, the apparatus in the user home network 5 can easily and certainly check whether or not single contents and album contents as well as a handling policy are legal data by comparing an ID of the content provider 2 included in the single contents and album contents as well as a handling policy and an ID of the content provider 2 that is included in the key data and encrypted together with the individual key K_l, even if signatures of single contents and album contents are tampered during delivery and illegal contents are supplied, or a signature of a handling policy of the like is tampered during delivery.

[0595] Thus, in the electronic music distribution system 10, for example, purchase processing of illegal contents or generation of charge information for distributing profit illegally to a third party based on an illegal handling policy can be substantially certainly prevented, thereby preventing content data to be illegally utilized.

[0596] Incidentally, in such an electronic music distribution system 10, an ID of the service provider 3 may be encrypted and delivered in the same manner as an ID of the content provider 2, in which case, for example, even if an ID of the service provider 3 included in charge information is tampered (i.e., a signature of price information is tampered) to illegally obtain profit, this can be easily and certainly prevented.

[0597] In addition, FIG. 91 shows generation management by transfer processing of a managed transfer right. As described above with reference to FIGS. 33 and 34, how many generations of reproduction rights can be transferred at the most is stored in a handling policy as generation management information. Therefore, when the handling policy is given to a predetermined first apparatus in the user home network 5 from the content provider 2 via the service provider 3 and purchase processing is executed in the encryption processing section in the first apparatus, the encryption processing section detects generation management information included in the handling policy, and detects a maximum number of time the contents indicated by the generation management information can be repurchased.

[0598] Then, when purchase processing of contents to which the handling policy is attached according to the detected maximum number of times contents can be repurchased, the encryption processing section prepares license conditions information based on the handling policy, stores the ID of the encryption processing section in the license conditions information, and at the same time, stores a number of times found by deducting one from the maximum number of times contents can be repurchased (i.e., a remaining number of time contents can be repurchased) as generation management information.

[0599] In addition, when the purchased contents are supplied from a content provider 2 in which the encryption processing section is not provided, although the encryption processing section prepares charge information based on a handling policy, the encryption processing section stores a predetermined value set in advance that indicates neither encryption processing section as an ID of a supplier in the charge information.

[0600] Then, when the contents to which purchase processing was applied can be redistributed by the generation management information included in the license conditions information, a first apparatus redelivers the contents from the first apparatus to a second apparatus in the user home network 5 together with the license conditions information, if necessary. In the second apparatus, when executing purchase processing to the redelivered contents, the encryption processing section inside the second apparatus prepares the license conditions information attached to the contents again, stores the ID of the encryption processing section in the license conditions information prepared again, and at the same time, stores a number of times found by deducting one from the remaining number of times content can be repurchased stored in the first apparatus (i.e., a new remaining number of times contents can be repurchased) as generation management information. In addition, the encryption processing section stores the ID of the encryption processing section in the first apparatus as an ID of a supplier in the charge information prepared along the purchase processing.

[0601] Then, thereafter, if the contents to which the purchase processing is applied by the generation management information included in the license conditions information has been repurchased for the maximum number of times the purchase processing is possible set in advance, the second apparatus determines that redelivery is impossible and does not redeliver the contents.

[0602] Thus, in the electronic music distribution system 10, by providing for the maximum number of times contents can be repurchased in the handling policy in advance by the generation management information as described above, and managing a remaining number of times the contents can be repurchased in the license conditions information for each purchase processing of the contents, illegal repurchase can be prevented.

[0603] In addition, in the electronic music distribution system 10, by accumulating and storing an ID of a supplier of the contents by charge information upon repurchasing the contents, a supply route of the contents can be specified from the ID of the supplier of the charge information, if necessary, and, when illegal contents flows into the system, a supplier of the illegal contents can be retrieved and eliminated.

[0604] Incidentally, in the electronic music distribution system 10, since an apparatus in the user home network 5 provides the contents on behalf of the content provider 2 or the service provider 3 upon repurchasing the contents, for example, in the electronic distribution service center 1, profits can be returned to the apparatus by adding a discount point that can be used upon purchasing contents to a user having the apparatus of a supplier of repurchase of the contents based on an ID of the supplier included in the charge information.

[0605] In above-described configuration, in the electronic music distribution system 10, in the case in which contents is provided to an apparatus in the user home network 5 via from the content provider 2 via the service provider 3, the content provider 2 generates single contents and album contents in which the contents encrypted by the content key K_co and the ID of the content provider 2 are stored, and at the same time, generates handling policies of the single contents and the album contents in which the ID of the content provider 2 is stored, and also generates key data for the single contents and the album contents in which the content key K_co encrypted by the individual key K_i, the individual key K_i encrypted by the delivery key K_d or the like are stored.

[0606] Then, the content provider 2 transmits the single contents and the album contents, the handling policies of the single contents and the album contents, and the key data for the single contents and the album contents as a content provider secure container.

[0607] Here, the content provider 2 then uses the individual key K_i supplied from the electronic distribution service center 1 as an individual key K_i encrypted by the delivery key K_d, whereas the electronic distribution service center 1 adds an ID of the content provider 2 to the individual key K_i and encrypts the entirety of these using the delivery key K_d. Then, the delivery key K_d used for this encryption is held only by an apparatus in the user home network 5 other than the electronic distribution service center 1.

[0608] Therefore, in the electronic music distribution system 10, the individual key K_i encrypted by the delivery key K_d can be provided from the content provider 2 to an apparatus in the user home network 5 via the service provider 3 while preventing tampering, thus, in the apparatus, by comparing the ID of the content provider 2 obtained by decrypting the individual key K_l encrypted by the delivery key K_d and the IDs of the content provider 2 included in the single contents and the album contents as well as the handling policies of the single contents and the album contents respectively, whether or not signatures of the handling policies of the single contents and the album contents as well as the handling policies of the single contents and the album contents can be easily and certainly detected.

[0609] As a result, in the electronic music distribution system 10, provision of illegal contents to a user or generation of charge information for a third party to illegally obtain profit using a handling policy can be prevented, thus, illegal utilization of contents by a third party can be prevented.

[0610] In addition, in the electronic music distribution system 10, a maximum number of times contents can be repurchased is stored in a handling policy provided from the content provider 2, and at the same time, a remaining number of times contents can be repurchased is stored in the license conditions information in the apparatus each time the contents are repurchased between apparatuses in the user home network 5.

[0611] Therefore, in the electronic music distribution system 10, an apparatus in the user home network 5 can manage a remaining number of times contents can be repurchased by the license conditions information, thus, illegal repurchase exceeding the maximum number of times contents can be repurchased can be prevented.

[0612] According to the above-described configuration, by directly attaching an ID of the content provider 2 to contents encrypted from the content provider 2 (i.e., storing an ID of the content provider 2 in data of single contents and album contents) or indirectly attaching it (i.e., attaching a handling policy in which an ID of the content provider 2 is stored), providing an ID of the content provider 2 encrypted together with the individual key K_i using the delivery key K_d together with the content to which the ID of the content provider 2 is attached to an apparatus in the user home network 5, decrypting the encrypted ID of the content provider 2 in the apparatus, and comparing the obtained ID of the content provider 2 and the ID of the content provider 2 attached to the contents, whether or not the contents can be legally utilized can be easily and certainly determined, thus, an electronic music distribution system that can prevent contents from illegally utilized.

[0613] In addition, by storing a maximum number of times contents can be repurchased in a handling policy provided form the content provider 2, and at the same time, storing a remaining number of times the contents can be repurchased in the license conditions information in the apparatus to manage the number of times the contents can be repurchased, illegal repurchase exceeding the maximum number of times the contents can be repurchased can be prevented.

[0614] (7) Configuration of a Record Reproduction Apparatus

[0615] In the electronic music distribution system 10, a record reproduction apparatus 250 shown in FIG. 92 is provided as an apparatus in the user home network 5. In the record reproduction apparatus 250, an electronic distribution only recording medium 251 that is a data storage apparatus is detachably provided.

[0616] The record reproduction apparatus 250 can record contents electronically distributed from the service provider 3 via the network 4 in the electronic distribution only recording medium 251 and reproduce the contents from the electronic distribution only recording medium 251.

[0617] Actually, the record reproduction apparatus 250 is composed of a communication section 260 that is receiving means, an upper controller 261 that is record reproduction controlling means, an encryption processing section 262, an extension section 263 that is content decrypting means, inputting means 264, displaying means 265, and a mass storage section 266. The communication section 260 communicates with the electronic distribution service center 1, and at the same time, communicates with the service provider 3 via the network 4.

[0618] The upper controller 261 once hold a content provider secure container and a service provider secure container received by the communication section 260 in the mass storage section 266 by controlling the record reproduction apparatus 250 and the electronic distribution only recording medium 251 based on an operation instruction inputted via the inputting means 264 at the time of purchase processing.

[0619] Then, the upper controller 261 causes the electronic distribution only recording medium 251 to execute purchase processing, thereby reads out contents encrypted by a corresponding content key K_co, a content key K_co encrypted by an individual key K_i, and an individual key K_i encrypted by a delivery key K_d from the mass storage section 266, decrypts the individual key K_l encrypted by the delivery key K_d by a delivery key K_d read out from the storage module 311 of the encryption processing section 301 in the electronic distribution only recording medium 251, decrypts the content key K_co encrypted by the individual key K_i by the decrypted individual key K_i, encrypts the obtained content key K_co by a save key K_save read out from the storage module 311 of the encryption processing section 301, and records the contents encrypted by the read out content key K_co and the content key K_co encrypted by the save key K_save in the electronic distribution only recording medium 251.

[0620] In addition, the upper controller 261 reads out a content key K_co encrypted by a temporary key K_temp1 (shared by the encryption processing section 262 and the encryption processing section 301 by mutual authentication) from the electronic distribution only recording medium 251, and supplies a content key K_co encrypted by a temporary key K_temp2 (shared by the encryption processing section 262 and the extension section 263 by mutual authentication) and contents encrypted by the content key K_co to the extension section 263 to decrypt the contents encrypted by the content key K_co using the content key K_co by controlling the record reproduction apparatus 250 and the electronic distribution only recording medium 251 based on an operation instruction inputted via the inputting means 264 at the time of reproduction processing.

[0621] Incidentally, since the inputting means 264 and the displaying means 265 have functions similar to those of the inputting means 63 and the displaying means 64 respectively, their descriptions are omitted.

[0622] The encryption processing section 262 is composed of a control section 270, a storage module 271, a registration information inspection module 272, a purchase processing module 273, a mutual authentication module 274, and an encryption/decryption module 275. Incidentally, the encryption processing section 262 is composed of an encryption processing only IC of a single chip in the same manner as the encryption processing section 65, and has a characteristic that illegally reading out data from outside is difficult (tamper resistant feature).

[0623] In the encryption processing section 262, since the control section 270, the storage module 271, the registration information inspection module 272, the purchase processing module 273, and the encryption/decryption module 275 have functions similar to those of the control section 91, the storage module 92, the registration information inspection module 93, the purchase processing module 94, and the encryption/decryption module 96 of the homes server 51, their descriptions are omitted.

[0624] In addition, the mutual authentication module 274 executes mutual authentication with the extension section 263 and the electronic distribution only recording medium 251, and generates a temporary key K_temp (session key) to be shared with the extension section 263 and the electronic distribution only recording medium 251, if necessary.

[0625] The encryption/decryption module 275 is composed of a decryption unit 280, an encryption unit 281, a random number generation unit 282, a signature generation unit 283, and a signature verification unit 284. Since the decryption unit 280, the encryption unit 281, the random number generation unit 282, the signature generation unit 283, and the signature verification unit 284 have functions similar to those of the decryption unit 111, the encryption unit 112, the random number generation unit 113, the signature generation unit 114, and the signature verification unit 115 of the home server 51 respectively, their descriptions are omitted.

[0626] The extension section 263 is composed of a mutual authentication module 290, a key encryption module 291, a decryption module 292, an extension module 293, an electronic watermark addition module 294, and a storage module 295. Since the mutual authentication module 290, the key decryption module 291, the decryption module 292, the extension module 293, the electronic watermark addition module 294, and the storage module 295 have functions similar to those of the mutual authentication module 101, the key decryption module 102, the decryption module 103, the extension module 104, the electronic watermark addition module 105, and the storage module 106 of the home server 51 respectively, their descriptions are omitted.

[0627] In addition, the electronic distribution only recording medium 251 is made to execute purchase processing to prepare charge information, and hold the prepared charge information, and is composed of a communication section 300 that is communicating means, an encryption processing section 301 that is content key encryption means and content key decryption means, an external memory control section 302 that is record reproducing means, and an external memory 303 that is recording medium.

[0628] The communication section 300 transmits and receives data between the upper controller 261 of the record reproduction apparatus 250. The encryption processing section 301 is made up of a circuit configuration similar to the encryption processing section 65 of the home server 51, and has a characteristic that illegal read out of data from outside is difficult (tamper resistant feature). In addition, the encryption processing section 301 is composed of a control section 310, a storage module 311 that is save key holding means, a registration information inspection module 312, a purchase processing module 313, a mutual authentication module 314, and an encryption/decryption module 315.

[0629] Since the control section 310, the storage module 311, the registration information inspection module 312, the purchase processing module 313, the mutual authentication module 314, and the encryption/decryption module 315 have functions similar to those of the control section 91, the storage module 92, the registration information inspection module 93, the purchase processing module 94, the mutual authentication module 95, and the encryption/decryption module 96 of the home server 51 respectively, their descriptions are omitted. Incidentally, the encryption/decryption module 315 is composed of a decryption unit 320, an encryption unit 321, a random number generation unit 322, a signature generation unit 323, and a signature verification unit 324.

[0630] The external memory control section 302 performs tamper check, if necessary, in addition to reading and writing data in and from the external memory 303. Various kinds of recording media such as a writable optical disk, a hard disk, or a semiconductor memory can be applied as the external memory 303. Therefore, a structure that can read out data from these recording media is necessary as the external memory control section 302, which performs reading and writing by adding a recording medium control section (not shown), if necessary. Further, since details of the tamper check processing were described in FIGS. 68 to 71, their descriptions are omitted.

[0631] Here, in such an electronic distribution only recording medium 251, a save key K_save peculiar to the electronic distribution only recording medium 251 is held by the storage module 311 of the encryption processing section 301. In the electronic distribution only recording medium 251, when the content key K_co is recorded in the external memory 303, the content key K_co is encrypted by the save key K_save, and when the encrypted content key K_co is reproduced from the external memory 303, the content key K_co is decrypted by the storage key K_save and transmitted to the record reproduction apparatus 250.

[0632] Therefore, contents recorded in a recording medium by a conventional record reproduction apparatus cannot be reproduced by an apparatus (i.e., an apparatus holding a save key K_save different from a save key K_save that has encrypted the contents) other than an apparatus that has recorded the contents in the recording medium (i.e., an apparatus holding a save key K_save peculiar to an encryption processing section that has encrypted a content key K_co to be recorded in the recording medium), whereas the contents recorded in the electronic distribution only recording medium 251 can be reproduced by any apparatus as far as it has a configuration similar to that of the above-mentioned record reproduction apparatus 250 even if it does not hold a save key K_save

[0633] Incidentally, in such a record reproduction apparatus 250, since contents are recorded in the electronic distribution only recording medium 251 together with the content key K_co by executing purchase processing, the record reproduction apparatus 250 can be configured without using the encryption processing section 262 and the extension section 263 for the purpose of only recording the contents.

[0634] In addition, in such a record reproduction apparatus 250, since the electronic distribution only recording medium 251 is detachably provided, and contents can be reproduced from the electronic distribution only recording medium 251 that has recorded the contents and the content key K_co in another apparatus, the record reproduction apparatus 250 can be used without connecting to the electronic distribution service center 1 and the network 4 by having a reproduction function only.

[0635] However, in the user home network 5, when contents and a content key K_co are recorded in the electronic distribution recording medium 251 in the record reproduction apparatus 250 connected to the network 4 as described above, and the electronic distribution only recording medium 251 is used for reproducing the contents in a record reproduction not connected to the electronic distribution service center 1 or the network 4, it is possible that collection of charge information held by the electronic distribution only recording medium 251 is difficult in the electronic distribution service center 1.

[0636] Thus, in the electronic distribution only recording medium 251, for example, charge information in the storage module 311 is periodically retrieved from the control section 310 in the encryption processing section 301, and if there is uncollected charge information in the electronic distribution service center 1, contents can only be reproduced only one from purchase processing until the charge information is collected by applying reproduction limitation to corresponding contents, and at the same time, managed transfer of the contents is not performed as well.

[0637] In this way, in the electronic music distribution system 10, a user owning the electronic distribution only recording medium 251 is prevented from reproducing contents illegally. Incidentally, as a reproduction limitation due to uncollected charge information, for example, by setting a number of times contents can be reproduced from purchase processing until charge information is collected in advance, counting the number of times of reproducing contents from the point of the purchase processing, and when the system detects that the charge information is uncollected, the reproduction limitation can be effectively functioned. That is, when it is detected that the charge information is uncollected, the number of times corresponding contents have already been reproduced at this point and the number of times of the reproduction limitation set in advance, and when the number of times the contents have already been reproduced has reached the set number of times of reproduction limitation, the contents cannot be reproduced.

[0638] In addition, as such a reproduction limitation, a period (time) may be used. That is, by setting time during which contents can be reproduced, if charge information is uncollected after the set time has passed since purchase processing, the contents cannot be reproduced. Further, in the electronic distribution only recording medium 251, limitation contents of the reproduction limitation may be held by associating it with charge information in the storage module 311 of the encryption processing section 301, or may be held by associating it with the license conditions information in the external memory 303. In addition, by storing reproduction limitation (the number of times or a period) in a handling policy and/or price information, at the time of purchase processing, the electronic distribution only recording medium 251 may take out information of the reproduction limitation from the handling policy and/or the price information, prepare license conditions information including this, and hold the prepared license conditions information in the external memory 303.

[0639] Here, purchase processing executed in the record reproduction apparatus 250 will be described using a flow chart shown in FIG. 93. In step S700, in the state in which a content provide secure container and a service provider secure container distributed from the service provider 3 via the network 4 are once held in the mass storage section 266, the upper controller 261 in the record reproduction apparatus 250 decides an effective period (version) of a delivery key K_d stored in the storage module 311 in the encryption processing section 301 via the control section 310 of the encryption processing section 301 in the electronic distribution only recording medium 251, and if the delivery key K_d is effective, the processing proceeds to step S701.

[0640] In step S701, the upper controller 261 determines whether or not a total of charges of charge information stored in the storage module 311 in the encryption processing section 301 via the control section 310 of the encryption processing section 301 in the electronic distribution only recording medium 251 has reached an upper limit set in advance, and if the total of the charges has not reached the upper limit, the processing proceeds to step S702. Incidentally, in step S701, instead of determining whether or not the total of charges has reached the upper limit, for example, the upper controller 261 may determine whether or not there is any room the a storage area of charge information in the storage module 311, and if there is room in the storage area, the processing may proceed to step S702. In addition, in step S701, the upper controller 261 may determine whether or not a number of charge information (i.e., a number of times of purchases) stored in the storage module 311 has reached a number (of upper limit) set in advance.

[0641] In step S702, the upper controller 261 reads out a public key certificate of the content provider 2 included in the content provider secure container in the mass storage section 266, and transmits the read out public key certificate of the content provider 2 to the encryption processing section 301 in the electronic distribution only recording medium 251. Thus, in the encryption processing section 301 in the electronic distribution only recording medium 251, the control section 310 verifies a signature of the public key certificate of the content provider 2 in the signature verification unit 324 in the encryption/decryption module 315, and if it is confirmed that not tamper is made to the public key certificate as a result of the verification of the signature, takes out a public key of the content provider 2 included in the public key certificate, and the processing proceeds to step S703.

[0642] In step S703, the upper controller 261 reads out key data of the contents included in the content provider secure container in the mass storage section 266, and transmits the read out key data to the encryption processing section 301 in the electronic distribution only recording medium 251. Thus, in the encryption processing section 301 in the electronic distribution only recording medium 251, the upper controller 261 verifies a signature of the key data in the signature verification unit 324 in the encryption/decryption module 315, and if it is confirmed that no tamper is made to the key data as a result of the verification of the signature, the processing proceeds to step S704.

[0643] In step S704, the upper controller 261 read out a handling policy of the contents included in the content provider secure container in the mass storage section 266, and transmits the read out handling policy to the encryption processing section 301 in the electronic distribution only recording medium 251. Thus, in the encryption processing section 301 in the electronic distribution only recording medium 251, the control section 310 verifies a signature of the handling policy in the signature verification unit 324 in the encryption/decryption module 315, and if it is confirmed that no tamper is made to the handling policy as a result of the verification of the signature, the processing proceeds to step S705.

[0644] In step S705, the upper controller 261 reads out a public key certificate of the service provider 3 included in the service provider secure container in the mass storage section 266, and forwards the read out public key certificate of the service provider 3 to the encryption processing section 301 in the electronic distribution only recording medium 251. Thus, in the encryption processing section 301 in the electronic distribution only recording medium 251, the control section 310 verifies a signature of the public key certificate of the service provider 3 in the signature verification unit 324 in the encryption/decryption module 315, and if it is confirmed that no tamper is made to the key data as a result of the verification of the signature, the processing proceeds to step S706.

[0645] In step S706, the upper controller 261 reads out price information of the contents included in the service provider secure container in the mass storage section 266, and transmits the read out price information to the encryption processing section 301 in the electronic distribution only recording medium 251. Thus, in the encryption processing section 301 in the electronic distribution only recording medium 251, the control section 310 verifies a signature of the price information in the signature verification unit 324 in the encryption/decryption module 315, and if it is confirmed that no tamper is made to the handling policy as a result of the verification of the signature, the processing proceeds to step S707.

[0646] In step S707, the upper controller 261 displays information of purchasable contents in the displaying means 265, and when a user selects and designates desired contents via the inputting means 264, generates a purchase command corresponding to the selected and designated contents, and sends it to the encryption processing section 301 in the electronic distribution only recording medium 251. Thus, the control section 310 of the encryption processing section 301 generates charge information and license conditions information based on the handling policy (the handling policy whose signature was verified in step S704) and the price information (the price information whose signature was verified in step S706) in the purchase processing module 313, and the processing proceeds to step S708. Incidentally, selection and designation of desired contents by a user via the inputting means 264 may be performed in advance prior to the purchase processing.

[0647] In step S708, the control section 310 in the encryption processing section in the electronic distribution only recording medium 251 saves the charge information (the charge information generated in step S707) in the storage module 311, and in the subsequent step S709, forwards the license conditions information (the license conditions information generated in step S707) to the external memory 303 via the external memory control section 302, thereby writing the license conditions information in the external memory 303. In addition, the license conditions information may be written in a tamper prevention region (as in the external memory of FIG. 16) in the same manner as writing the data described above in FIG. 69. Incidentally, the license conditions information may be saved in the storage module 311 of the encryption processing section 301 in the electronic distribution only recording medium 251.

[0648] In step S710, the control section 310 of the encryption processing section 301 in the electronic distribution only recording medium 251 decrypts the encrypted individual key K_i included in the key data (the key data whose signature ware verified in the above-mentioned step S703) using the delivery key K_d (the delivery key K_d that was confirmed effective in the above-mentioned step S700) in the decryption unit 320 of the encryption/decryption module 315.

[0649] Then, in the decryption unit 320, the control section 310 decrypts the encrypted content key K_co included in the key data using the individual key K_i that was previously decrypted. Subsequently, the control section 310 gives the decrypted content key K_co and the save key K_save stored in the storage module 311 to the encryption unit 321, and encrypts the content key K_co using the save key K_save in the encryption unit 321.

[0650] In step S711, the control section 310 of the encryption processing section 301 in the electronic distribution only recording medium 251 forwards the content key K_co encrypted by the save key K_save in step S710 to the external memory 303 via the external memory control section 302, and saves the encrypted content key K_co in the external memory 303, and the processing proceeds to step S712. In addition, the content key K_co encrypted by the save key K_save may be written in a tamper prevention region (as in the external memory of FIG. 16) in the similar manner as at the time of writing data described above in FIG. 69). Incidentally, the content key K_co encrypted by the save key K_save may be saved in the storage module 311 of the encryption processing section 301 in the electronic distribution only recording medium 251.

[0651] In step S712, the upper controller 261 in the record reproduction apparatus 250 reads out the encrypted contents included in the content provider secure container in the mass storage section 266, and forwards the read out encrypted contents to the electronic distribution only recording medium 251, thereby storing the encrypted contents in the external memory 303 in the electronic distribution only recording medium 251.

[0652] Incidentally, in the step S712, the upper controller 261 may save the handling policy whose signature was verified in corresponding step S704 and the price information whose signature was verified in step S706 in the external memory 303 together with the encrypted contents. In addition, the encrypted contents (or, the contents and the handling policy as well as the price information) may not be saved in the external memory 303 in the step S712, and may be saved in the external memory 303 in a step prior to the step S712.

[0653] In such purchase processing, if an effective period of the delivery key K_d is expired in step S700, if the total of charges of the charge information has reached the upper limit in step S701, if it is decided in step S702 that the public key certificate of the content provider 2 is not correct, if it is decided in step S703 that the signature of the key data is not correct, if it is decided in step S704 that the signature of the handling policy is not correct, if it is decided in step S705 that the public key certificate of the service provider 3 is not correct, and if it is decided in step S706 that the signature of the price information is not correct, the processing proceeds to step S713 in each case, where error processing is executed. Incidentally, in such purchase processing, although a case in which a signature of contents is not verified is shown, the signature of the contents may be verified in any of the steps prior to saving the contents in the external memory 303.

[0654] Incidentally, if data is transmitted and received between the record reproduction apparatus 250 and the electronic distribution only recording medium 251, a signature is attached to the data on the transmission side, and the signature is verified on the receiving side.

[0655] As described above, the record reproduction apparatus 250 executes the purchase processing in the electronic distribution only recording medium 251, thereby recording the contents encrypted by the content key K_co in the external memory 303 of the electronic distribution only recording medium 251 and the content key K_co encrypted by the save key K_save peculiar to the encryption processing section 301 of the electronic distribution only recording medium 251.

[0656] In addition, reproduction processing executed in the record reproduction apparatus 250 will be described with reference to a flow chart shown in FIG. 94. In step S720, the upper controller 261 in the record reproduction apparatus 250 forwards an ID of the contents that is instructed by a user via the inputting means 264 to be reproduced to the encryption processing section 301 in the electronic distribution only recording medium 251.

[0657] In step S721, by forwarding an ID of the contents given from the upper controller 261 to the external memory control section 302, the control section 310 of the encryption processing section 301 in the electronic distribution only recording medium 251 reads out the encrypted content key K_co and license conditions information corresponding to the ID from the external memory 303 via the external memory control section 302, and forwards the read out encrypted content key K_co to the decryption unit 320 of the encryption/decryption module 315, and at the same time, forwards the license information to the control section 310. Further, the external memory control section 302 may perform tamper check in the similar manner as at the time of reading out data described above for FIG. 68 when reading out the encrypted content key K_co and license conditions information from the external memory 303. Incidentally, in the electronic distribution only recording medium 251, the encrypted content key K_co and the license conditions information may be held in the storage module 311 of the encryption processing section 301 and may be read out from the storage module 311.

[0658] In addition to this, the control section 310 of the encryption processing section 301 retrieves charge information in the storage module 311 based on an ID of the contents in step S722, and in the subsequent step S723, determines whether or not there is charge information corresponding to the ID of the contents in the storage module 311, and if the charge information corresponding to the ID has already been collected by the electronic distribution service center 1 and does not exist in the storage module 311, the processing proceeds to step S724.

[0659] In step S724, the control section 310 of the encryption processing section 301 updates the license conditions information, if necessary. That is, if utilization right contents included in the license conditions information is, for example, a number of times right, the control section 310 indicates to subtract the number of times of reproduction indicated by the number of times right. Then, the encryption processing section 301 saves the updated license conditions information in the external memory 303 via the external memory control section 302. At this point, the external memory control section 302 may perform tamper check as at the time of rewriting data described above for FIG. 70. Incidentally, the license conditions information may be updated and saves in the storage module 311 of the encryption processing section 301.

[0660] Subsequently, in step S725, the control section 310 of the encryption processing section 301 in the electronic distribution only recording medium 251 performs mutual authentication with the encryption processing section 262 of the record reproduction apparatus 250 using each other's mutual authentication modules 314 and 274, and shares the temporary key K_temp1, and the processing proceeds to step S726. Incidentally, since the mutual authentication processing procedures were described above for FIG. 51, their detailed description are omitted.

[0661] In step S726, the control section 310 of the encryption processing section 301 in the electronic distribution only recording medium 251 decrypts the encrypted content key K_co by the save key K_save stored in the storage module 311 in the decryption unit 320, and forwards the decrypted content key K_co to the encryption unit 321. Then, the control section 310 encrypts the content key K_co in the encryption unit 321 using the temporary key K_temp1 shared with the mutual authentication module 274 in step S625, and the processing proceeds to step S727.

[0662] In step S727, the control section 310 of the encryption processing section 301 in the electronic distribution only recording media 251 transmits the content key K_co encrypted by the temporary key K_temp1 to the encryption processing section 262 of the record reproduction apparatus 250.

[0663] In step S728, the control section 270 of the encryption processing section 262 in the record reproduction apparatus 250 takes the encrypted content key K_co transmitted from the electronic distribution only recording medium 251 in the decryption processing unit 280 of the encryption/decryption module 275, in step S725, decrypts the encrypted content key K_co using the temporary key K_temp1 shared with the mutual authentication module 314 in the decryption unit 280, and forwards the decrypted content key K_co to the encryption unit 281.

[0664] Then, in step S729, the control section 270 of the encryption processing section 262 in the record reproduction apparatus 250 performs mutual authentication with the extension section 263 using each other's mutual authentication modules 274 and 290, and shares the temporary key K_temp2. Incidentally, since the mutual authentication processing procedures was described above for FIG. 51, their detailed description is omitted.

[0665] Thus, in step S730, the control section 270 of the encryption processing section 262 in the record reproduction apparatus 250 encrypts the content key K_co using the temporary key K_temp2 shared with the extension section 263 by the encryption unit 281, thereby forwarding the encrypted content key K_co to the extension section 263 in the subsequent step S731.

[0666] In step S732, the key decryption module 291 of the extension section 263 takes in the encrypted content key K_co given by the encryption processing section 262, decrypts the encrypted content key K_co using the temporary key K_temp2 shared with the encryption processing section 262, and forwards the decrypted content key K_co to the decryption module 292.

[0667] In step S733, the decryption module 292 of the extension section 263 is at this point given the encrypted contents read out from the external memory 303 in the electronic distribution only recording medium 251 by the upper controller 261, decrypts the encrypted contents using the content key K_co given by the key decryption module 291, and forwards the decrypted contents to the extension module 293.

[0668] In step S734, the extension module 293 of the extension section 263 extends the contents given by the decryption module 292 by a predetermined method such as ATRAC, and forwards the extended contents to the electronic watermark addition module 294. In step S735, the electronic watermark module 294 of the extension section 263 inserts predetermined data such as an ID of the encryption processing section 301 of the electronic distribution only recording medium 251 instructed by the control section 270 of the encryption processing section 262 in the form of an electronic watermark in the extended contents given by the extension module 293.

[0669] Then, in step S736, by forwarding the contents obtained in the extension section 263 to, for example, a speaker (not shown), the upper controller 261 of the record reproduction apparatus 250 generates music based on the contents via the speaker. Thus, the record reproduction apparatus 250 can reproduce contents in this way.

[0670] Here, if charge information corresponding to the ID of the contents is stored in the storage module 311 in step S723, the control section 310 of the encryption processing section 301 in the electronic distribution only recording medium 251 refers to the reproduction limitation at the time when charge information is uncollected in step S737, and determines whether or not the contents whose charge information is uncollected satisfy reproduction available conditions.

[0671] Then, if the contents do not satisfy the reproduction available conditions (i.e., if the contents have already been reproduced for the number of times defined in the reproduction limitation, or if a reproduction available period has lapsed), the control section 310 of the encryption processing section 301 terminates this reproduction processing. On the other hand, if the contents satisfy the reproduction available conditions (i.e., if the number of times of reproduction of the contents is less than the number of times defined by the reproduction limitation), the processing proceeds to step S724, where the control section 310 updates the license conditions information, if necessary. Incidentally, the reproduction limitation to be used when chare information is uncollected may be held in the storage module 311 of the encryption processing section 301 in the electronic distribution only recording medium 251 or the external memory 303, or may be stored in data of a handling policy or price information, or the like.

[0672] Incidentally, the electronic distribution only recording medium 251 may be provided in the home server 51 described above for FIG. 15 or the fixed apparatus 52.

[0673] As described above, although, in the record reproduction apparatus 250, the contents encrypted by the content key K_co and the content key K_co can be generated from the electronic distribution only recording medium 251 and the contents encrypted by the content key K_co can be decrypted by the content key K_co, until charge information is collected, the content can be utilized in accordance with the reproduction limitation set in advance, and after the charge information is collected, the content can be utilized in accordance with utilization right contents purchased by the purchase processing.

[0674] In the above-mentioned configuration, the electronic music distribution system 10 is provided with the record reproduction apparatus 250 to which the electronic distribution only recording medium 251 is detachably inserted as an apparatus in the user home network 5, and when the contents encrypted by the content key K_co, the content key K_co encrypted by the individual key K_i and the individual key K_i encrypted by the delivery key K_d (i.e., a content provider secure container and a service provider secure container) are transmitted from the service provider 3, controls the electronic distribution only recording medium 251 by the record reproduction apparatus 250 to execute purchase processing, records the contents encrypted by the content key K_co in the electronic distribution only recording medium 251 in the external memory 303, and at the same time, decrypts the individual key K_i encrypted by the delivery key K_d by the delivery key K_d, decrypts the content key K_co encrypted by the individual key K_i by the individual key K_i, and encrypts the decrypted content key K_co by the save key K_save peculiar to the electronic distribution only recording medium 251 to record in the external memory 303. Incidentally, in the electronic distribution only recording medium 251, the save key K_save is saved in the storage module 311 of the encryption processing section 301 having tamper resistant feature in the electronic distribution only recording medium 251.

[0675] In addition, by controlling the electronic distribution only recording medium 251 at the time of reproduction processing, the record reproduction apparatus 250 reads out the contents encrypted by the contents key K_co and the content key K_co encrypted by the save key K_save from external memory 303, decrypts the content key K_co encrypted by the save key K_save by the save key K_save, thereby taking out the contents encrypted by the content key K_co and the decrypted content key K_co in the electronic distribution only recording medium 251. Then, the record reproduction apparatus 250 decrypts the contents encrypted by the content key K_co using the content key K_co using the encryption processing section 262 and the extension section 263.

[0676] Therefore, in the electronic music distribution system 10, although the contents encrypted by the content key K_co and the content key K_co encrypted by the save key K_save are recorded in the external memory 303 by the record reproduction apparatus 250 in the electronic distribution only recording medium 251, since the contents encrypted by the content key K_co and the decrypted content key K_co are read out from the electronic distribution only recording medium 251, it is not necessary to save a save key peculiar to the encryption processing section 262 in the record reproduction apparatus 250. Thus, in the electronic music distribution system 10, since other apparatuses different from the record reproduction apparatus 250 in which the electronic distribution only recording medium 251 records contents can reproduce the contents using the electronic distribution only recording medium 251 if the apparatuses have the encryption processing section 262 and the extension section 263 similar to those of the record reproduction apparatus 250, generality of the electronic distribution only recording medium 251 can be dramatically improved.

[0677] In addition, in the electronic distribution only recording medium 251, even if contents or a content key K_co is illegally read out from the external memory 303, by holding the save key K_save used in encrypting the content key K_co for decrypting contents in the storage module 311 in the encryption processing section 301 having tamper resistant feature, the save key K_save can be prevented from being illegally read out, thereby enabling to prevent the contents from being illegally utilized.

[0678] Moreover, in the electronic music distribution system 10, due to the increased generality of the electronic distribution only recording medium 251, until charge information for contents recorded in the electronic distribution only recording medium 251, by limiting utilization of the contents (limiting a number of times and a period of reproduction and copying), illegal utilization of the contents can be prevented while the charge information is uncollected.

[0679] According to the above-mentioned configuration, a save key K_save peculiar to the electronic distribution only recording medium 251 detachably inserted in the record reproduction apparatus 250 is held in the electronic distribution only recording medium 251, the record reproduction apparatus 250 transmits the contents encrypted by the content key K_co, the content key K_co encrypted by the individual key K_i, and the individual key K_l encrypted by the delivery key K_d to the electronic distribution only recording medium 251 at the time of purchase processing, and in the electronic distribution only recording medium 251, after recording the contents encrypted by the content key K_co in the external memory 303 and decrypting the encrypted individual key K_i by the delivery key K_d, decrypts the encrypted content key K_co by the individual key K_i, encrypts the obtained content key K_co by the save key K_save to record in the external memory 303, and takes out the contents encrypted by the content key K_co and the content key K_co decrypted by the save key K_save from the electronic distribution only recording medium 251 at the time of reproduction processing to decrypt the contents, thereby enabling reproduction of the contents from the electronic distribution only recording medium 251 even if the electronic distribution only recording medium 251 is inserted in another record reproduction apparatus 250 different from the record reproduction apparatus 250 used for recording the contents, thus an electronic music distribution system that can dramatically increase generality of the electronic distribution only recording medium 251 can be realized.

[0680] Incidentally, in such an electronic music distribution system 10, the delivery key K_d is not held in the electronic distribution only recording medium 251, or the delivery key K_d is not used even if it is held, and after decrypting the content key K_co encrypted by the individual key K_l by the individual key K_i at the time of recording contents by the record reproduction apparatus 250, the content key K_co may be encrypted using the temporary key K_temp mutually authentication and shared with the electronic distribution only recording medium 251, and the content key K_co encrypted by the temporary key K_temp may be transmitted to the electronic distribution only recording medium 251 together with the contents encrypted by the content key K_co.

[0681] In addition, although the content provider 2 is applied as an information transmission apparatus in the present invention, the content provider 2 and the service provider 3 may be applied as the information transmission apparatus.

[0682] (8) Proxy Processing of Charge Information and Managed Transfer Processing of a Utilization Right

[0683] The electronic distribution only recording medium 251 described above for FIG. 92, for example, when inserted in the home server 51 that is a management apparatus in the user home network 5 that is the data management system described above for FIG. 15 as an apparatus to be connected to the electronic distribution service center 1, can transmit charge information held in the storage module 311 of the encryption processing section 301 to the home server 5, thus can cause the electronic distribution service center 1 to collect the charge information from the home server 51.

[0684] Thus, in the electronic distribution only recording medium 251, although, when holding charge information, for preventing illegal utilization of contents, a utilization right of the contents (a right for reproducing the contents) cannot be transferred to another apparatus (transfer with limitation, managed transfer) together with the contents, or deleted (deletion cannot be executed unless the charge processing is completed), when transmitting the charge information to the homes server 51 in this way, the utilization right of the contents can be transferred to another apparatus (transfer with limitation, managed transfer) together with the contents corresponding to the charge information in accordance with the transfer processing procedures of the managed transfer right described above for FIG. 82.

[0685] Incidentally, when a utilization right of contents is transferred to another apparatus together with the contents from the electronic distribution only recording medium 251, an apparatus having obtained the contents and their utilization right can return the contents and their utilization right only to the electronic distribution only recording medium 251, if necessary. However, since the electronic distribution only recording medium 251 can be carried freely, it is sometimes difficult to easily return the contents and their utilization right from another apparatus.

[0686] Therefore, for example, the home server 51 (FIG. 15) as an apparatus in the user home network 5 connected to the electronic distribution service center 1, when taking in charge information held in the electronic distribution only recording medium 251, takes in corresponding contents and their utilization right altogether from the electronic distribution only recording medium 251, and manages the taken in contents and their utilization right on behalf of the electronic distribution only recording medium 251.

[0687] Actually, proxy processing of charge information executed in the home server 51 and transfer (transfer with limitation, managed transfer) of a right (utilization right) for reproducing contents will be described with reference to a flow chart shown in FIG. 95. In step S740, the electronic distribution only recording medium 251 is inserted in the home server 51, and when a user inputs an execution instruction of proxy processing of charge information and transfer processing of a utilization right via the inputting means 63 in this state, with the upper controller 62 controlling the home server 51 and the electronic distribution only recording medium 251, the control section 91 of the encryption processing section 65 in the home server 51 mutually authenticates with the encryption processing section 301 in the electronic distribution only recording medium 251 using each other's mutual authentication modules 95 and 314 and shares the temporary key K_temp.

[0688] Then, in step S741, the control section 310 of the encryption processing section 301 in the electronic distribution only recording medium 251 forward the charge information held in the storage module 311 to the encryption unit 321 in the encryption/decryption module 315, encrypts the charge information by the temporary key K_temp in the encryption unit 321, and forwards the encrypted charge information to the signature generation unit 323.

[0689] In addition, the control section 310 of the encryption processing 301 reads out in ID of a content provider, an ID of a handling policy and a handling policy corresponding to a version of the handling policy included in the charge information, and an ID of a service provider, an ID of price information and price information corresponding to a version of the price information from the external memory 303 via the external memory control section 302, and forwards the read out handling policy and price information to the signature generation unit 323. Thus, the control section 310 of the encryption processing section 301 attach signatures to the charge information and the handling policy encrypted by the temporary K_temp as well as the entire price information (or individually) in the signature generation unit 323, and transmits the charge information and the handling policy as well as the price information to which the signatures are attached to the upper controller 62 of the home server 51 via the communication section 300.

[0690] Incidentally, in the electronic distribution only recording medium 251, since a third party illegal obtains profit if charge information is tampered during transmission, a signature is always attached to the charge information and whether or not tamper is made is checked. In addition, since there is no specific hindrance even if contents of the charge information are seen, the charge information may be sent without encryption. In the home server 51, proxy processing of charge information and transfer processing of a utilization right can be executed without using a handling policy and price information. Therefore, in the electronic distribution only recording medium 251, the handling policy and the price information may be transmitted to the home server 51, if necessary.

[0691] In step S742, the upper controller 62 of the home server 51 forwards the charge information and the handling policy as well as the price information transmitted from the electronic distribution only recording medium 251 to the control section 91 of the encryption processing section 65. Thus, the control section 91 verifies the signatures attached to the charge information and the handling policy as well as the price information in the signature verification unit 115 in the encryption/decryption module 96, and if these are not tampered, decrypts the charge information encrypted by the temporary key K_temp by the temporary key K_temp.

[0692] Then, in step S743, the control section 310 of the encryption processing section 301 in the electronic distribution only recording medium 251 retrieves an ID of contents indicated by the charge information (the charge information transmitted to the home server 51 in step S741, which remains as it is unless deleted in the storage module 311) held in the storage module 311 at this point in step S742, and reads out all corresponding license conditions information and contents encrypted by the content key K_co from the external memory 303 via the external memory control section 302 based on the retrieved ID of the contents.

[0693] By forwarding the read out content key K_co to the decryption unit 320 of the encryption/decryption module 315, the control section 310 of the encryption processing section 301 decrypts the content key K_co encrypted by the wave key K_save by the save key K_save held in the storage module 311 in the decryption unit 320, and then encrypts the decrypted content key K_co by the temporary key K_temp in the encryption unit 321. Then, after attaching signatures to the content key K_co together with the license conditions information and the encrypted contents read out from the external memory 303 in the signature generation unit 323, the control section 310 transmits them to the homes server 51 via the communication section 300. Incidentally, signatures may be attached to the license conditions information, the contents and the content key K_co individually, or may be attached to the entirety of the license conditions information, the contents and the content key K_co. Moreover, a signature may be attached to contents.

[0694] Subsequently, in step S744, the control section 91 of the encryption processing section 65 in the home server 51 takes in the license conditions information and the encrypted contents transmitted form the electronic distribution only recording medium 251 as well as the content key K_co encrypted by the temporary key K_temp via the upper controller 62, and after verifying the signatures attached to the license conditions information and the encrypted contents as well as the content key K_co encrypted by the temporary key K_temp in the signature verification unit 115, if these are not tampered, decrypts the content key K_co encrypted by the temporary key K_temp by the temporary key K_temp.

[0695] Thus, in step S745, the upper controller 62 in the home server 51 saves in the mass storage section 68 the contents encrypted by the content key K_co obtained from the encryption processing section 65 (the contents whose signature was verified in step S744) and the handling policy and the price information obtained if necessary (the handling policy and the price information whose signatures were verified in step S742). Incidentally, in step S745, recording processing in the mass storage section 68 to be executed may be executed immediately after data is transmitted in steps S741 and S743.

[0696] In addition, in step S746, the control section 91 of the encryption processing section 65 in the home server 51 saves the charge information (the charge information whose signature was verified in step S742) in the storage module 92, and at the same time, changes the ID of the encryption section (the ID of the encryption section of the apparatus that applied purchase processing to the contents) stored in the license conditions information (the license conditions information whose signature was verified in step S744) to its own ID (i.e., the ID of the encryption processing section 65 in the home server 51) to update the license conditions information.

[0697] Then, in step S747, the control section 91 of the encryption processing section 65 in the home server 51 encrypts the content key K_co (the content key K_co decrypted in step S744) by the save key K_save held in the storage module 92 in the encryption unit 112 in the encryption/decryption module 96, and saves the license conditions information (the license conditions information updated in step S746) in the external memory 67 together with the encrypted content key K_co via the external memory control section 97. Incidentally, since the tamper check upon writing data in the external memory 67 is executed in the similar manner as in the processing procedures described above for FIG. 69, its description is omitted.

[0698] Then, in step S748, the control section 91 of the encryption processing section 65 in the home server 51 saves the chare information, the encrypted contents, the content key K_co, the license conditions information, the handling policy and the price information transmitted form the electronic distribution only recording medium 251 respectively in this way, and transmits processing completion data indicating that the proxy processing of the charge information and the transfer of the utilization right have been completed to the electronic distribution only recording medium 251 via the upper controller 62.

[0699] Thus, in step S749, when receiving the processing completion data transmitted from the home server 51, the control section 310 of the encryption processing section 301 in the electronic distribution only recording medium 251 deletes the contents encrypted by the content key K_co, the content key K_co encrypted by the save key K_save, the license conditions information (i.e., the license conditions information transmitted to the home server 51 in step S743), and the handling policy and the price information (i.e., those transmitted to the home server 51 in step S742), if necessary, in the external memory 303 respectively via the external memory control section 302. Incidentally, since the tamper check at the time of deleting data in the external memory 303 is executed in the similar manner as in the processing procedures described above for FIG. 71, its description is omitted.

[0700] In addition to this, in step S750, the control section 310 of the encryption processing section 301 in the electronic distribution only recording medium 251 deletes the charge information (i.e., the charge information transmitted to the home server 51 in step S741) in the storage module 311, thereby completing the processing procedures.

[0701] As described above, in the electronic distribution only recording medium 251, by transmitting the charge information held in the storage module 311 in the encryption processing section 301 to the home server 51 together with the corresponding contents and the content key K_co, as well as the license conditions information to the home server 51, and at this point, deleting the charge information, the contents, the content key K_co and the license conditions information transmitted to the home server 51 from the inside storage module 311 and the external memory 303, the contents are managed by the home server 51.

[0702] Then, in the home server 51, when the contents were taken in from the electronic distribution only recording medium 251, since the ID of the encryption processing section of the license conditions information taken in together with the contents was changed and the home server 51 itself was made an owner of the contents, the contents can be transferred to another apparatus in accordance with the transfer processing procedures of the managed transfer right described above for FIG. 82, and the contents returned from each apparatus can be taken in accordance with the return processing procedures of the managed transfer right described above for FIG. 83.

[0703] In the above-mentioned configuration, the electronic music distribution system 10 caused the electronic distribution only recording medium 251 to execute purchase processing using the record reproduction apparatus 250 that is a recording apparatus, and causes the electronic distribution only recording medium 251 to hold a right for reproducing contents, license conditions information and charge information together with the contents. Then, in order to cause the electronic distribution service center 1 to collect the charge information held by the electronic distribution only recording medium 251, when the electronic distribution only recording medium 251 is inserted in the home server 51 in the user home network 5, the home server 51 takes in the charge information held in the electronic distribution only recording medium 251 together with the corresponding contents, utilization right and license conditions information to manage the contents in stead of the electronic distribution only recording medium 251.

[0704] Therefore, in the electronic music distribution system 10, contents of which the home server 51 takes up management from the electronic distribution only recording medium 251 in the user home network 5 and its utilization right can be managed and transferred to another apparatus, recording medium or electronic distribution recording medium 251, and the same time, these apparatuses, recording medium and electronic distribution only recording medium 251 can return the contents to the home server 51, thus the contents obtained by purchase processing in the electronic distribution only recording medium 251 can be easily utilized for another apparatus, recording medium and the electronic distribution only recording medium 251 in the user home network 5 under the management of the home server 51.

[0705] In addition, in the electronic distribution only recording medium 251, since limitation is attached to a purchased utilization right if charge information is held, the charge information needs to be collected by the home server 51 connected to the electronic distribution service center 1. Then, in the electronic distribution only recording medium 251, if management of the corresponding contents is transferred to the home server 51, free regions is easily secured in the external memory 302, thus unnecessary deletion of already held contents can be prevented in the purchase processing of contents.

[0706] Moreover, in the user home network 5, since the contents that is applied purchase processing and obtained in the electronic distribution only recording medium 251 is stored and managed in this way by the home server 51, contents more than the volume that can be held in the electronic distribution only recording medium 251 (i.e., depending on a storage volume of the external memory 303) can be easily owned.

[0707] According to the above-mentioned configuration, by moving the contents that is applied purchase processing and held in the electronic distribution only recording medium 251 using the record reproduction apparatus to the home server 51 in the user home network 5 together with their charge information, and managing and concurrently storing the contents in the home server 51, the contents whose management is taken up from the electronic distribution only recording medium 251 can be managed and transferred to another apparatus, recording medium or electronic distribution only recording medium 251 in the user home network 5, thus an electronic music distribution system in which the contents recorded in the electronic distribution only recording medium 251 can be easily utilized by various kinds of apparatuses such as another apparatus and recording medium in the user home network 5 can be realized.

[0708] (9) Online Charge Purchase Processing

[0709] In such an electronic music distribution system 10, a system can be constructed by connecting online the electronic distribution service center 1 that is an information control apparatus and the service provider 3 that is an information transmission apparatus via a network, and at the same time, connecting online the service provider 3 and the home network 5 (actually, the home server 51 that is an information receiving apparatus).

[0710] A flow of data through the entire electronic music distribution system 10, when constructed, is shown in FIG. 96. Since the transmission of data from the content provider 2 to the service provider 3, and the transmission of data from the service provider 3 to the user home network 5 are similar to the data flow described above for FIG. 20, their detailed descriptions are omitted.

[0711] The user home network 5 (the home server 51) encrypts charge information, attaches a signature to the encrypted charge information, and transmits it to the electronic distribution service center 1 via the service provider 3. Incidentally, although information required in the electronic distribution service center 1 such as information required for settlement is included in the handling policy and the price information used for purchase processing, since such various kinds of information is also included in the charge information, the user home network 5 (the home server 51) is made not to transmit handling policy and price information to the electronic distribution service center 1 at the time of purchase processing.

[0712] In addition, update of a delivery key K_d and registration information (not shown) is also performed between the electronic distribution service center 1 and the user home network 5 via the service provider 3. Thus, the user home network 5 does not need to switch a communication route to be used in communicating data with the service provider 3 and the electronic distribution service center 1 and can reduce processing of a communication section compared with the example of an establishment of a system described for FIG. 1.

[0713] Incidentally, in the case in which transmission and reception of data are performed between the user home network 5 (the home server 51) and the electronic distribution service center 1, the service provider 3 is used as a communication route between the user home network 5 (the home server 51) and the electronic distribution service center 1, and the data cannot be tampered.

[0714] Here, in the home server 51 in the user home network 5, in some case, charge information generated by purchase processing is saved in the storage module 92 in the encryption processing section 65 and the saved charge information (which may be plurality of pieces) are transmitted to the electronic distribution service center 1 altogether at a predetermined timing, and in other cases, the generated charge information is transmitted to the electronic distribution service center 1 while performing purchase processing. Incidentally, in some cases, in online charge purchase processing for transmitting the generated charge information to the electronic distribution service center 1 while performing purchase processing, whether or not to execute the online charge purchase processing is described in the handling policy or the price information.

[0715] The online charge purchase processing to be executed in the home server 51 will be described with reference to a flow chart shown in FIG. 97. In step S760, the control section 91 of the encryption processing section 65 in the home server 51 decides an effective period (version) of the delivery key K_d stored in the storage module 92 under the control of the upper controller 62, and if the delivery key K_d is effective, the processing proceeds to step S761.

[0716] In step S761, the control section 91 of the encryption processing section 65 determines whether or not a total of charges of the charge information stored in the storage module 92 has reached an upper limit set in advance, and if the total of the charges has not reached the upper limit, the processing proceeds to step S762. Incidentally, since the charge information is not saved in the storage module 92 if the charge information generated at this point is transmitted to the electronic distribution service center 1 while performing purchase processing, the control section 91 of the encryption processing section 65 does not execute the processing of step S761, and the processing proceeds to step S762.

[0717] Since steps S762 through S766 execute processing similar to steps S162 through S169 described above for FIG. 67, respectively, their detailed descriptions are omitted. In step S767, the upper controller 62 of the home server 51 displays information (e.g., a purchasable utilization form, price or the like) of purchasable contents using the displaying means 64, thus, a user can select a purchase item using the inputting means 63. Then, a signal inputted from the inputting means 63 is forwarded to the upper controller 62 of the home server 51, and the upper controller 62 generates a purchase command based on the signal and forwards the purchase command to the control section 91 of the encryption processing section 65. Incidentally, such input processing may be performed at the start of online charge purchase processing.

[0718] When the purchase command is given by the upper controller 62, the control section 91 of the encryption processing section 65 generates charge information and license conditions information based on the handling policy whose signature was verified in step S764 and the price information whose signature was verified in step S766. Incidentally, at this point, the control section 91 generates charge information and license conditions information using an RAM (Random Access Memory) for executing data processing provided in the encryption processing section 65, and holds the generated charge information and the license conditions information in the RAM as they are.

[0719] Then, in step S768, the control section 91 of the encryption processing section 65 in the home server 51 mutually authenticates with the mutual authentication section 17 of the electronic distribution service center 1 using the mutual authentication module 95, and shares the temporary key K_temp with the electronic distribution service center 1.

[0720] Subsequently, in step S769, after encrypting the charge information by the temporary key K_temp using the encryption unit 112 of the encryption/decryption module 96, the control section 91 of the encryption processing section 65 in the home server 51 attaches a signature using the signature generation unit 114, and transmits the charge information to the electronic distribution service center 1 via the service provider 3. Incidentally, the home server 51 encrypts the charge information by the temporary key K_temp prior to the transmission to the electronic distribution service center 1. This is for the purpose of protecting privacy of a user purchasing the contents. In addition, the home server 51 sometimes transmits unencrypted charge information to the electronic distribution service center 1 with a signature attached.

[0721] In step S770, when receiving the charge information encrypted by the temporary key K_temp transmitted from the home server 51, the electronic distribution service center 1 verifies a signature attached to the charge information, and if no tamper is made, decrypts the charge information encrypted by the temporary key K_temp using the temporary key K_temp shared with the home server 51, thereby storing the decrypted charge information in the history data management section 15.

[0722] Then, in step S771, upon saving the charge information in this way, the electronic distribution service center 1 generates receipt data indicating that the charge information is received, attaches a signature to the generated receipt data, and transmits the data to the home server 51 via the service provider 3. Thus, the control section 91 of the encryption processing section 65 in the home server 51 takes in the receipt data transmitted from the electronic distribution service center 1 sequentially via the communication section 61 and the upper controller 62, verifies a signature attached to the receipt data by the signature verification unit 115, and if the receipt data is not tampered, deletes the charge information held in the RAM, and the processing proceeds to step S772.

[0723] Since steps S772 through S774 sequentially executes processing similar to steps S172 through S174 described above for FIG. 67, their detailed description is omitted. Incidentally, steps S772 through S774 may be executed in any order. In addition, since registration information update processing executed in step S775 is similar to the registration information update processing described above for FIGS. 61 and 62, its detailed description is omitted. Moreover, since step S776 executes error processing in the similar manner as in step S176 described above for FIG. 67, its detailed description is omitted. Incidentally, in such online charge purchase processing, contents, a handling policy and price information encrypted by the content key K_co are held in the external memory 67 via the external memory control section 97 in any of the steps after signatures attached to these are verified.

[0724] Further, in step S770, when determining that illegal data exists due to tampering of charge information, or the like as a result of verifying a signature of the charge information, the electronic distribution service center 1 does not save the charge information in a history data management section. Then, in step S771, the electronic distribution service center 1 generates receipt rejection data indicating that the charge information is not received because it is illegal data, and transmits the data to the homes server 51 via the service provider 3. At this point, when the receipt rejection data transmitted from the electronic distribution service center 1 is received by the communication section 61, the upper controller 62 of the home server 51 causes the control section 91 of the encryption processing section 65 to terminate purchase processing based on the receipt rejection data, and at the same time, notifies a user via the displaying means 64 that contents the user is trying to purchase cannot be purchased.

[0725] As described above, in the online charge purchase processing executed in the home server 51, contents can be purchased only when the electronic distribution service center 1 permits purchase processing during the purchase processing. Further, although the electronic distribution service center 1 transmits receipt data and receipt rejection data as they are in this embodiment, the data may be transmitted with a signature added after the data is encrypted by the temporary key K_temp, and in the home server 51, after verifying the signature attached to the encrypted receipt data and receipt rejection data, the encrypted receipt data and receipt rejection data is decrypted by the temporary key K_temp, and whether or not the charge information has been collected may be confirmed based on the decrypted receipt data and receipt rejection data.

[0726] In the above-described configuration, in the electronic music distribution system 10, if online charge purchase processing is executed in the home server 51, the electronic distribution service center 1 receives charge information transmitted from the home server 51 during the purchase processing, determines whether or not the charge information is illegal data by verifying a signature attached to the charge information, and when it is determined that the charge information is legal data as a result (i.e., when the home server 51 receives receipt data), causes the home server 51 to execute purchase processing continuously and purchase contents.

[0727] On the other hand, in the electronic music distribution system 10, when the electronic distribution service center 1 determines that charge information is illegal data during purchase processing executed in the home server 51 (i.e., when the home server 51 receives receipt rejection data), the electronic distribution service center 1 causes the home server 51 to terminate the purchase processing and prohibits purchasing contents.

[0728] Therefore, in the electronic music distribution system 10, even if charge information transmitted from the home server 51 to the electronic distribution service center 1 is tampered (charge information is tampered outside the encryption processing section 65, or on a communication route between the home server 51 and the electronic distribution service center 1), for example, object of purchase contents are changed to other contents, or a utilization right of contents is changed to other utilization rights, these illegal contents and illegal utilization right can be prevented from being purchased.

[0729] In addition, even if charge information transmitted from the home server 51 to the electronic distribution service center 1 is tampered, or price of contents, or a distributed party of profit from purchase of contents is changed, purchasing the contents for an illegal price or a third party's gaining illegal profit can be prevented.

[0730] According to the above-described configuration, by connecting online the electronic distribution service center 1 and the user home network 5, transmitting charge information generated at this time to the electronic distribution service center 1 while the home server 51 executes purchase processing, determining whether or not the charge information is legal data by the electronic distribution service center 1, and when it is determined that the charge information is illegal data, causing the home server 51 to terminate the purchase processing to prevent the contents from buying, illegal purchase of the contents and their utilization right due to tamper of the charge information can be prevented, thus an electronic music distribution system that can prevent contents from being illegally utilized can be realized.

[0731] Incidentally, although the electronic distribution service center 1 determines whether or not to permit purchase of contents based on charge information transmitted from the home server 51, utilization permission data describing contents that a user tries to purchase or a utilization right is transmitted from the home server 51 like license conditions information, and the electronic distribution service center 1 may determine whether or not to permit purchase or utilization of the contents based on the utilization permission data.

[0732] (10) Configuration of an Information Provision Apparatus

[0733] In FIG. 98 in which parts corresponding to FIG. 1 are shown by identical symbols, the electronic music distribution system 10 with such a configuration is provided with an information provision apparatus 330. The information provision apparatus 330 is composed of a hosting server 331 holding an encrypted multiplicity of contents supplied from the content provider 2 and an information provision terminal (hereinafter referred to as a KIOSK terminal) 332 set in, for example, a simple retailing shop (i.e., KIOSK).

[0734] In the KIOSK terminal 332, a recording medium 333 that is a recording medium consisting of, for example, an MD (trademark) or an electronic distribution only recording medium 334 described above for FIG. 17 can be inserted detachably. The KIOSK terminal 332 holds price information prepared on an information provider side that manages the KIOSK terminal 332, reads out contents desired by a customer who is an information user from the hosting server 331 via a private cable or a satellite communication, and, by executing purchase processing as the home server 51 in the user home network 5 does, records the contents desired by the customer in a recording medium 333 the customer has or an electronic distribution only recording medium 334.

[0735] Incidentally, the KIOSK terminal 332 receives a public key certificate, a delivery key K_d, registration information or the like transmitted from the electronic distribution service center 1, and in return transmits charge information, license conditions information, or the like according to a utilization right of contents to the electronic distribution only recording medium 334. Thus, the electronic distribution service center 1 performs processing of profit distribution on the content provider 2, an information supplier (the service provider 3 in FIG. 1) or the like based on the charge information given by the KIOSK terminal 332. In addition, the electronic distribution only recording medium 334 sometimes performs purchase processing in the electronic distribution only recording medium 334 when purchasing a utilization right from the KIOSK terminal 332, in which case, it is necessary to transmit the charge information to the electronic distribution service center 1 via an apparatus in the user home network 5.

[0736] Here, FIG. 99 shows a configuration of the hosting server 331. The hosting server 331 is composed of a communication section 340, a control section 341 and a server 342. The communication section 340 communicates with the content provider 2 and the KIOSK terminal 332, and transmits and receives predetermined information. When a content provider secure container is transmitted from the content provider 2 by controlling the communication section 340 and the server 342, the control section 341 holds encrypted contents included in the content provider secure container in the server 342, and at the same time, transmits key data, a handling policy or the like included in the content provider secure container to the KIOSK terminal 332 via the communication section 340.

[0737] In addition, when given a read out request command from the KIOSK terminal 332, the control section 341 reads out corresponding contents from the server 342, and transmits the read out contents to the KIOSK terminal 332 via the communication section 340. Incidentally, a communication route of a read out request command of contents and a route of contents may be different.

[0738] FIG. 100 shows a configuration of the KIOSK terminal 332, and the KIOSK terminal 332 is composed of a communication section 350 that is receiving means, an upper controller 351 that is storing means for controlling the KIOSK terminal 332, an encryption processing section 352 that is license conditions information preparing means, an electronic watermark insertion section 353 that is electronic watermark inserting means, a price processing section 354, inputting means 355, displaying means 356, and a KIOSK terminal sever 357.

[0739] The communication section 350 communicates with the hosting server 331 and the electronic distribution service center 1, and transmits and receives predetermined information. Since the upper controller 351 has a function similar to that of the upper controller 62 of the home server 51, its description is omitted. The encryption processing section 352 is composed of a control section 360, a storage module 361, a registration information inspection module 362, a purchase processing module 363, a mutual authentication module 364 and an encryption/decryption module 365. Since the control section 360, the storage module 361, the registration information inspection module 362, the purchase processing module 363 and the mutual authentication module 364 have functions similar to those of the corresponding control section 91, storage module 92, registration information inspection module 93, purchase processing module 94 and mutual authentication module 95 in the home server 51 respectively, their descriptions are omitted.

[0740] The encryption/decryption module 365 is composed of a decryption unit 370, an encryption unit 371, a random number generation unit 372, a signature generation unit 373 and a signature verification unit 374. Since the decryption unit 370, the encryption unit 371, the random number generation unit 372, the signature generation unit 373 and the signature verification unit 374 have functions similar to those of the corresponding decryption unit 111, encryption unit 112, random number generation unit 113, signature generation unit 114 and signature verification unit 115 in the home server 51 respectively, their descriptions are omitted.

[0741] The electronic watermark insertion section 353 is composed of a mutual authentication module 380, a key decryption module 381, a decryption module 382, an electronic watermark addition module 383 and a storage module 384. In the electronic watermark insertion section 353, although the mutual authentication module 380, the key decryption module 381, the decryption module 382, the electronic watermark addition module 383 and the storage module 384 have functions similar to those of the corresponding mutual authentication module 101, key decryption module 102, decryption module 103, electronic watermark addition module 105 and storage module 106 in the extension section 62 of the home server 51 respectively, contents decrypted by a content key are not extended, but, for example, with an ID of a holder of the KIOSK terminal 332 inserted in the contents, are forwarded to the recording medium 333 and the electronic distribution only recording medium 334 as they are (as digital data). However, in the electronic watermark insertion section 353, in some cases, contents that are an output of the decryption module 382 are extended, if necessary, recompressed using another compression algorithm, and the output is forwarded to the electronic watermark addition module 383.