Information processing apparatus, program and method for transmitting content in security scheme according to license policy

An information processing apparatus is connectable to a user device over a network. The apparatus includes a processor. The processor transmits, in response to reception of a request for a particular item of content, an identification of a security scheme which is applicable to transmission of the particular item of content in accordance with a license policy. When the item of content can be received by the user device in the security scheme, the processor transmits the item of content in the security scheme.

FIELD OF THE INVENTION

The present invention relates to secure transmission of content, and more particularly to secure delivery of content to a user apparatus in accordance with the license policy of a content provider.

BACKGROUND OF THE INVENTION

Pay digital content, such as audio and video files for example, is transmitted from a server to a client over a network, such as the Internet. In such a case, a client user is first authenticated to the server and the content is then transmitted in accordance with a protocol, such as FTP, HTTP and SSL.

Transmission of content, however, involves such security problems as unauthorized interception, tampering, masquerading, denial of a concluded transaction, redistribution and the like. To prevent such problems, it is proposed that a digital watermark be embedded in the content to restrict its ownership, or that the content be encrypted so that it cannot be replayed without a proper decryption key which can be obtained for value.

However, content encrypted in a particular encryption method can not necessarily be decrypted by any client or electronic apparatus. In addition, the content provider does not always desire to protect all kinds of items of content in the same security scheme. For example, the provider may want to transmit content of higher value in a higher security scheme, and to transmit content of lower value, or content such as advertisement content which is required to be distributed widely, in a lower security scheme without encryption.

In Japanese Unexamined Patent Publication 2001-325177 (A) published on Nov. 22, 2001, Miyazaki discloses a content application server. When the server receives apparatus specification environment information and a request for a content application from a client, the server converts a corresponding source content application to a content application which conforms to the apparatus specification environment information, and supplies the converted content application to the client.

In Japanese Unexamined Patent Publication 2001-202307 (A) published on Jul. 27, 2001, Kawamoto et al. discloses a method of communication between terminals over a network. In this method, one terminal distinguishes a communication application which can be used by another terminal, and transmits information to the other terminal by using that application.

In Japanese Unexamined Patent Publication 2001-175757 (A) published on Jun. 29, 2001, Yamanaka et al. disclose a system for delivering digital content over a network. In this system, a buyer transmits information describing desired content and a transfer condition to a seller. The seller delivers the described content to the buyer in accordance with the transfer condition.

In Japanese Unexamined Patent Publication HEI 11-341040 (A) published on Dec. 10, 1999, Saito et al. disclose a communication apparatus connected between two networks. The communications apparatus collects attribute information from a server on the first network, presents the server's attribute information to a terminal on the second network in accordance with the protocol of the second network, transmits to the server a request for the service selected in accordance with the attribute information, and provides the service from the server to the terminal, if necessary, by converting a format.

In Japanese Unexamined Patent Publication 2001-256162 (A) published on Sep. 21, 2001, Asai et al. discloses a portable terminal which acquires content from a server via a gateway. The content includes a file and an identifier indicating the type of a file, such as video, audio and the like. The terminal transmits the content file to a peripheral device corresponding to an identifier.

The inventors have recognized the need for selection of a security scheme for the transmission of content in accordance with a license policy of a content provider. The inventors have also recognized the need for the transmission or delivery of content from a server to a client in a security scheme available on the client.

An object of the present invention is to provide secure transmission of content to a buyer in accordance with a license policy of a content provider.

Another object of the present invention is to transmit content in an available secure transmission scheme to a user.

SUMMARY OF THE INVENTION

In accordance with an aspect of the present invention, an information processing apparatus is connectable to a user device over a network. The apparatus includes a processor. The processor transmits, in response to reception of a request for a particular item of content, an identification of a security scheme which is applicable to transmission of the particular item of content in accordance with a license policy. When the item of content can be received by the user device in the security scheme, the processor transmits the item of content in the security scheme.

In accordance with a further aspect of the invention, an information processing apparatus is connectable to a user device over a network. The apparatus includes a processor. The processor is adapted to receive a request for a particular item of content from the user device. The processor is adapted to receive an identification of an available security scheme from the user device. When the requested item of content can be transmitted in the security scheme in accordance with a license policy, the processor transmits the requested item of content in the security scheme.

In accordance with a still further aspect of the invention, an information processing apparatus is connectable to a user device over a network. The apparatus includes a processor. The processor is adapted to receive an identification of an available security scheme from the user device. The processor transmits, in response to reception of a request for a content list, a list of items of content that can be transmitted in the available security scheme in accordance with a license policy.

In accordance with a still further aspect of the invention, an information processing apparatus is connectable to a content source over a network. The apparatus includes a processor. The processor transmits a request for a particular item of content. The processor transmits an identification of a security scheme available for reception and reproduction of the particular item of content. The processor receives the particular item of content transmitted in the security scheme in accordance with a license policy.

In accordance with a still further aspect of the invention, an information processing apparatus is connectable to a content source over a network. The apparatus includes a processor. The processor transmits a request for a particular item of content. The processor receives an identification of a security scheme which is applicable to transmission of the particular item of content in accordance with a license policy. When the security scheme is available, the processor transmits the identification of the security scheme.

In accordance with a still further aspect of the invention, an information processing apparatus is connectable to a content source over a network. The apparatus includes a processor. The processor transmits an identification of a security scheme available for reception and reproduction of content. The processor transmits a request for a content list. The processor receives a list of items of content which can be transmitted in the security scheme in accordance with a license policy.

In accordance with a still further aspect of the invention, a program (which may be stored on a storage medium) is for use in an information processing apparatus connectable to a user device over a network. The program is operable to effect the step of transmitting, in response to reception of a request for a particular item of content, an identification of a security scheme which is applicable to transmission of the particular item of content in accordance with a license policy; and the step of transmitting the item of content in the security scheme, when the item of content can be received by the user device in the security scheme.

In accordance with a still further aspect of the invention, a program (which may be stored on a storage medium) is for use in an information processing apparatus connectable to a user device over a network. The program is operable to effect the step of receiving a request for a particular item of content; the step of receiving an identification of an available security scheme; and the step of transmitting the requested item of content in the security scheme, when the requested item of content can be transmitted in the security scheme in accordance with a license policy.

In accordance with a still further aspect of the invention, a method is provided for transmitting an item of content in an information processing apparatus connectable to a user device over a network. The method comprises the step of transmitting, in response to reception of a request for a particular item of content, an identification of a security scheme which is applicable to transmission of the particular item of content in accordance with a license policy; and the step of transmitting the particular item of content in the security scheme, when the particular item of content can be received by the user device in the security scheme.

In accordance with a still further aspect of the invention, a method is provided for transmitting an item of content in an information processing apparatus connectable to a user device over a network. The method comprises the step of receiving, from the user device, a request for a particular item of content; and the step of transmitting the requested particular item of content in the security scheme, when the requested particular item of content can be transmitted in the security scheme in accordance with a license policy.

According to the invention, content can be transmitted in a secure transmission scheme available to a user.

Throughout the drawings, similar symbols and numerals indicate similar items and functions.

DESCRIPTION OF THE PREFERRED EMBODIMENTS

FIG. 1shows the configuration of a content server10and a residential gateway server20interconnected via a network5such as the Internet, in accordance with an embodiment of the present invention. The gateway server20is also connected to user devices, such as a television receiver (TV)320and an audio apparatus330.

The content server10includes a processor102having a CPU, a ROM and a RAM, a program memory or storage device104, a memory or storage device120, such as a hard disk unit, for storing a content database, user information and the like, and a network interface (NW I/F)130connected to the network5such as the Internet, all of which are interconnected via an internal bus.

The storage device104stores application programs for the content server10. The processor102operates in accordance with the application programs. Alternatively, such applications may be implemented in the form of hardware, such as an integrated circuit, in the processor102.

The term “content” herein should be broadly interpreted to include digital content in its narrow sense, such as a motion picture program, a music program, a picture and a dictionary in the form of audio and/or video files or a document file, as well as other copyrighted digital products or software in its broader sense, which is suitable for delivery on the Web, such as an application file. The content may be of the kind which is updated periodically, such as audio and video files of different news, advertisements and weather forecasts, for example. Each item of such content is associated with at least one applicable security scheme for distribution in accordance with the license policy of an administrator of the content server10, for example in accordance with the type and value of the content, the intended user class, the term of validity of the content, and the like.

FIG. 6shows an example of a set of security schemes, which are applicable to a certain item of content, and which are determined in accordance with the license policy. Ones of these security schemes may be assigned different priorities, and ones of them may be assigned the same priority. InFIG. 6, for the certain item of content, the first security scheme uses the DES as an encryption method, the digital signature as an authentication method, and the MD-5 as a hash method. The second security scheme uses the AES as an encryption method, but uses neither authentication nor a hash method. The third security scheme uses the triple DES as an encryption method, but uses neither an authentication method nor a hash method. The security scheme may include provisions to restrict the network used for the transmission of an item of content to a network of high security. An advertisement video file, for example, may be transmitted in a lowest security scheme which uses neither an encryption method, an authentication method nor a hash method.

The residential gateway server20includes a processor202having a CPU, a ROM and a RAM, a content reproducing module204, a security module206, a memory or storage device220, such as a hard disk unit, for storing application programs, a received file and the like, an input device240including a keyboard and a mouse, a display device250, an audio device260including a microphone and a speaker, an external network interface (NW I/F)230, and a device interface (I/F)270, all of which are interconnected via an internal bus. The device interface270is connected to user devices, such as a television receiver (TV)320and an audio apparatus330, via an IEEE 1394 bus or a USB cable.

The memory device220stores application programs for the residential gateway server20. The processor202operates in accordance with the application programs. Alternatively, such applications may be implemented in the form of hardware, such as an integrated circuit, in the processor202.

The reproducing module204is used for decoding and reproducing an audio and/or video stream. The reproducing module204may perform decryption in accordance with a predetermined encryption method. The security module206processes the received content in accordance with a predetermined authentication method, a predetermined hash method, and/or a predetermined encryption method. The reproducing module204and the security module206are implemented in the form of hardware or software. When they are implemented in software programs, the processor202operates in accordance with the programs.

FIG. 2shows the configuration of the content server10and another residential gateway server30interconnected via the network5such as the Internet, in accordance with another embodiment of the invention. The gateway server30is also connected to user devices, such as a personal computer (PC)310, the television receiver (TV)320, and the audio apparatus330. Further, the gateway server30communicates with a mobile telephone360and/or a PDA (Personal Digital Assistant)370over a network7, such as a public switched telephone network (PSTN) or a mobile telephone network. The content server10has the same configuration as the one shown inFIG. 1, and hence is not described again.

The residential gateway server30includes a processor302having a CPU, a ROM and a RAM, the security module206, the memory device220such as a hard disk unit, the external network interface (NW I/F)230, a network interface (NW I/F)332connected to the network7, and the device interface270, all of which are interconnected via an internal bus.

The memory device220stores application programs for the residential gateway server30. The processor302operates in accordance with the application programs. Alternatively, such applications may be implemented in the form of hardware, such as an integrated circuit, in the processor302.

The device interface270is connected to user devices, such as the personal computer (PC)310, the television receiver (TV)320, and the audio apparatus330, via an IEEE 1394 bus or a USB cable. Each of the user devices, including the mobile telephone360and the PDA370as well as the devices310,320and330, includes a reproducing module similar to the reproducing module204shown inFIG. 1, and each device may further have a security module similar to the security module206. Preferably, the gateway server30collects beforehand the information on the content types, coding methods and security schemes (for example, identifications of encryption schemes) available in the user device, such as the devices310,320and330, the mobile telephone360and the PDA370, and stores the information in the memory device220together with the security schemes (for example, identifications of authentication schemes) available in the gateway server30. Such information may be entered manually by the user to store in the memory device220.

FIG. 3shows a process for transmitting and receiving the content performed by the content server10and the gateway server20or30, in accordance with the invention.

Now, the operations of the content server10and the gateway server20are described below with reference toFIGS. 1 and 3.

At Step301, the user operates the input device240while viewing the display device250of the gateway server20, to operatively connect the gateway server20to the content server10over the network5and request a desired item of content. The content request may involve purchasing an item of pay content.

At Step303, in response to the content request, the gateway server20(more specifically, the processor202) requests the content server10to transmit the requested item of content. At Step323, the content server10receives the request for transmission of the item of content.

At Step325, the content server10(more specifically, the processor102) looks up a table of content security schemes in the content database120, retrieves the identifications (IDs) of the security schemes which are applicable to the transmission of the item of content in accordance with the license policy of the content, and transmits a list of the identifications of the applicable security schemes to the gateway server20. The applicable security schemes may be the ones as shown inFIG. 6, for example. At Step305, the gateway server20receives the presented list of the identifications of the applicable security schemes.

At Step307, the gateway server20looks up a table of identifications of the security schemes stored in the memory device220and available in the gateway server20and compares the presented security schemes with the available security schemes to determine whether the item of content to be transmitted in any ones of the presented security schemes can be received, decoded and reproduced. The security schemes available in the gateway server20mean the ones which are available in the reproducing module204and the security module206of the gateway server20, and may include the security schemes which can be available in the user devices320and330connected to the gateway server20or other user devices (not shown) not connected to the gateway server20.

If it is determined that the item of content can be received, decoded and reproduced, then the gateway server20at Step309selects or designates a security scheme of the highest priority from among the applicable security schemes that match with the available security schemes, and transmits an identification of the selected security scheme to the server10. At Step329, the content server10receives the identification of the selected security scheme.

At Step331, the content server10retrieves the requested item of content from the database120, processes the item of content in accordance with the selected security scheme, and transmits the thus processed item of content to the gateway server20in accordance with the selected security scheme. Such an item of content may be processed beforehand in accordance with parts of the applicable security schemes and stored in the database120. At Step311, the gateway server20receives the item of content, stores it in the memory device220, and produces a display on the display device250indicating that the item of content has been received. The item of content thus becomes ready for use by the user.

If it is determined at Step307that the item of content cannot be received, then the gateway server20at Step313sends a request for canceling the content transmission request to the server10, and produces a display on the display device250indicating that the requested item of content is not available. At Step333, the server10receives the request for canceling the content transmission request, and the procedure exits the routine for content transmission ofFIG. 3.

FIG. 4shows another process for transmitting and receiving the content performed by the content server10and the gateway server20or30, in accordance with the invention.

Now, the operations of the content server10and the gateway server20are described below with reference toFIGS. 1 and 4.

At Step401, the user operates the input device240, while viewing the display device250of the gateway server20, to operatively connect the gateway server20to the content server10over the network5and request a desired item of content.

At Step403, in response to the content request, the gateway server20(more specifically, the processor202) requests the content server10to transmit the requested item of content, looks up the table of the identifications of the security schemes stored in the memory device220and available in the gateway server20, and transmits the identifications of the available security schemes. At Step423, the content server10(more specifically, the processor102) receives the request for transmission of the item of content together with the identifications of the available security schemes.

At Step425, the content server10compares the security schemes available in the gateway server20with the security schemes stored in a memory device120of the content server10and applicable to the requested item of content, and determines whether the requested item of content can be transmitted in any ones of the available security schemes.

If it is determined that the item of content can be transmitted in any ones of the available security schemes, then the content server10at Step427selects a security scheme of the highest priority from among the applicable security schemes that match the available security schemes, retrieves the requested item of content from the database120, processes the item of content in accordance with the selected security scheme, and transmits the thus processed item of content to the gateway server20in accordance with the selected security scheme. Such an item of content may be processed beforehand in accordance with parts of the applicable security schemes and stored in the database120. The gateway server20receives the item of content at Step407.

If it is determined that the item of content cannot be transmitted in any one of the available security schemes, then the gateway server20at Step429sends a notification of rejecting content transmission to the gateway server20. At Step409, the server10receives the notification of rejecting content transmission, and produces a display on the display device250indicating that the requested item of content is not available.

FIG. 5shows a further process for transmitting and receiving the content performed by the content server10and the gateway server20or30, in accordance with the invention.

Now, the operations of the content server10and the gateway server20are described below with reference toFIGS. 1 and 5.

At Step501, the user operates the input device240, while viewing the display device250of the gateway server20, to operatively connect the gateway server20to the content server10over the network5and request a list of available items of content from the gateway server20.

At Step502, the gateway server20(more specifically, the processor202) determines whether the identifications of the security schemes available in the gateway server20for the type of content have already been reported to the content server10. For this purpose, the gateway server20may send, to the content server10, a query as to whether the identifications of the available security schemes have already been reported. If it is determined that they have already been reported, then the gateway server20at Step505requests transmission of a list of available items of content. On the other hand, if it is determined that they have not been reported yet, then the gateway server20at Step503retrieves the identifications of the available security schemes stored in the memory device220, transmits the identifications to the content server10and, at Step505, requests transmission of a list of available items of content.

At Step523, the content server10(more specifically, the processor102) receives the identifications of the available security schemes, and stores them as user information in the memory device120. The content server10, at Step525, receives the request for transmission of a content list, and, at Step527, retrieves the identifications of the security schemes available in the gateway server20from the memory device120.

At Step529, the content server10compares the security schemes available in the gateway server20with the security schemes and applicable to items of content which can be provided by the content server10, produces a list of available items of content which can be transmitted in the available security schemes, and transmits the list to the gateway server20. The list may include attributes of each item of content, such as a type of content (for example, identification of the type, such as an audio and/or video file, a text file, and the like), a title or identification of an item of content, license policy, a price, and the term of validity.

At Step509, the gateway server20displays the content list on the display device250. At Step511, the user operates the input device240, while viewing the display device250of the gateway server20, selects one or more items of content and requests the selected one or more items of content. In response to the request, the gateway server20requests the content server10to transmit the selected one or more items of content.

At Step531, the content server10receives the request for content transmission, selects a security scheme of the highest priority from among the applicable security schemes that match the available security schemes for each item of content, retrieves the requested each item of content from the database120, processes each item of content in accordance with the selected security scheme, and transmits the thus processed one or more items of content to the gateway server20in accordance with the respective selected security schemes. Such items of content may be processed beforehand in accordance with parts of the applicable security schemes and stored in the database120. At Step513, the gateway server20receives the one or more items of content and stores them in the memory device220. The items of content thus become ready for use by the user.

Now, the operations of the content server10and the gateway server30are described below with reference toFIGS. 2 and 3.

At Step301, the user operates the keys on the mobile telephone360or the PDA370while viewing the display thereof, to connect the mobile telephone360or the PDA370to the gateway server30over the network7, and requests a desired item of content from the gateway server30. In this case, when the item of content is to be used on the mobile telephone360or the PDA370, the mobile telephone360or the PDA370may also transmit, to the gateway server30, the identifications of the security schemes available in the mobile telephone360or the PDA370. The gateway server30then stores the identifications of the available security schemes in the memory device220. The content request may involve purchasing an item of pay content.

The operations of the content server10and the gateway server30at Steps303to305and Steps323to325are the same as those of the content server10and the gateway server20shown inFIG. 1, and hence are not described again.

At Step307, the gateway server30(more specifically, the processor302) looks up a table of the identifications of the security schemes stored in the memory device220and available for a combination of the gateway server30and the user devices310,320,330,360and370, compares the available security schemes with the security schemes presented by the content server10, and determines whether the item of content to be transmitted in any ones of the presented security schemes can be received, decoded and reproduced.

The operations of the content server10and the gateway server30at Steps309and329to333are the same as those of the content server10and the gateway server20shown inFIG. 1, and hence are not described again.

At Step311, the gateway server30receives the item of content transmitted in the selected security scheme, stores the received item of content in the memory device220, and sends a notification of the reception of the item of content to the mobile telephone360or the PDA370for display. On the other hand, at Step313, the gateway server30transmits a request for canceling the content transmission request to the server10and, at the same time, sends the notification of the cancellation to the mobile telephone360or the PDA370for display.

Now, the operations of the content server10and the gateway server30are described below with reference toFIGS. 2 and 4.

At Step401, the user operates the keys on the mobile telephone360or the PDA370while viewing the display thereof, to connect the mobile telephone360or the PDA370to the gateway server30over the network7, and requests a desired item of content from the gateway server30. In this case, when the item of content is to be used on the mobile telephone360or the PDA370, the mobile telephone360or the PDA370may also transmit, to the gateway server30, the identifications of the security schemes available in the mobile telephone360or the PDA370. The gateway server30then stores the identifications of the available security schemes in the memory device220.

At Step403, in response to the content request received from the user, the gateway server30(more specifically, the processor302) requests the content server10to transmit the item of content and, at the same time, looks up a table of the identifications of the security schemes stored in the memory device220and available for a combination of the gateway server30and the user devices310,320,330,360and370, and transmits the identifications of the available security schemes to the content server10.

The operations of the content server10and the gateway server30at Steps423to429are the same as those of the content server10and the gateway server20shown inFIG. 1, and hence are not described again.

At Step407, the gateway server30receives the item of content, stores the received item of content in the memory device220, and sends a notification of the reception of the item of content to the mobile telephone360or the PDA370for display. On the other hand, at Step409, the gateway server30receives, from the server10, a notification of rejecting the content transmission request, and passes the notification to the mobile telephone360or the PDA370for display.

Now, the operations of the content server10and the gateway server30are described below with reference toFIGS. 2 and 5.

At Step501, the user operates the keys on the mobile telephone360or the PDA370while viewing the display thereof, connects the mobile telephone360or the PDA370to the gateway server30over the network7, and requests a list of items of content from the gateway server30. In this case, the mobile telephone360or the PDA370may also transmit, to the gateway server30, the identifications of the security schemes available in the mobile telephone360or the PDA370. The gateway server30then stores the identifications of the available security schemes in the memory device220.

At Step502, in response to the request, the gateway server30(more specifically, the processor302) determines whether the identifications of the security schemes stored in the memory device220and available for a combination of the gateway server30and the user devices310,320,330,360and370have already been reported to the content server10. For this purpose, the gateway server30may send a query as to whether the identifications of the available security schemes have already been reported to the content server10. If it is determined that they have already been reported, then the gateway server30at Step505requests the content server10to transmit a list of available items of content. On the other hand, if it is determined that they have not been reported yet, then at Step503the gateway server30transmits the identifications of the available security schemes to the content server10and, at Step505, requests the transmission of a list of available items of content.

The operations of the content server10and the gateway server30at Steps523to533are the same as those of the content server10and the gateway server20shown inFIG. 1, and hence are not described again.

At Step509, the gateway server30transmits the content list to the mobile telephone360or the PDA370for display on its display device. At Step511, the user operates the keys on the mobile telephone360or the PDA370while viewing the list of available items of content, selects one or more items of content, and requests the selected one or more items of content from the gateway server30. In response to the request, the gateway server30requests the content server10to transmit the selected one or more items of content.

At Step513, the gateway server30receives the items of content, stores the received items of content in the memory device220, and sends a notification of the reception of the items of content to the mobile telephone360or the PDA370for display.

The above-described embodiments are only typical examples, and their modifications and variations are apparent to those skilled in the art. It should be noted that those skilled in the art can make various modifications to the above-described embodiments without departing from the principle of the invention and the accompanying claims.