Abstract: Provided is a content protection system, in which: a user terminal judges, when a content is to be reproduced or executed, whether or not the user terminal has a usage right of the content, and makes, if it is judged that the user terminal does not have the usage right of the content, a request to a license management apparatus to acquire the usage right of the content; the license management apparatus generates, when the request to acquire the usage right is received from the user terminal, license information containing information on an expiration date that is set based on a timing when the request is received, and transmits the generated license information to the user terminal; and the user terminal judges that the user terminal has the usage right of the content until the expiration date indicated by the license information received from the license management apparatus arrives.

Abstract: A receiver is configured to receive, from a mobile device of a first type adapted to read a content from a recording medium and run the content, a first device identifier identifying the mobile device of the first type and a recording medium identifier identifying a recording medium loaded in the mobile device of the first type, along with a digital signature generated in the mobile device of the first type using an encryption key secretly stored in the mobile device of the first type. A signature verification unit is configured to verify the authenticity of the digital signature. A voucher issuance unit is configured to issue a voucher to a mobile device of a second type adapted to acquire a content by downloading the content and to run the content accordingly and mapped into the mobile device of the first type, so that the mobile device of the second type is capable of downloading a content.

Abstract: A game recording medium records game files each containing at least a game program and configuration information with which to identify a data file usable by the game program. A recording medium records data files. An acquisition unit acquires the configuration information from the game recording medium, and a search unit searches the recording medium for the data file usable by the game program, based on the acquired configuration information. When a data file is detected, a copying unit copies the detected data file to the game recording medium.

Abstract: Managing the use of an optical disc drive by a program at high security. An OS of a host apparatus 100 sends one user certificate incorporating the policy information defining the use contents permissible for the optical disc drive 200 and a user key to the optical disc drive 200 under a secure environment (S3). On the other hand, the program running on the OS is authorized, and the user key is passed to the authorized program (S6). The optical disc drive 200 authorizes the program using the user key within the user certificate and the user key for the program and specifies the policy information corresponding to the user key (S7). Thereafter, the optical disc drive 200 permits the application program to gain access to the self-resource within the limits of the contents defined in the policy information (S8).

Abstract: A log collecting/analyzing system has a log collection terminal device as a client terminal device which collects logs and transmits the collected logs to a log server via a network. The log server receives the transmitted logs and stores the received logs for analysis. According to this configuration, it is possible to obtain useful information, such as information about what play modes are popular in the case of games and so forth, or information about what characters are popular in the case of selecting a character for a game. Therefore, it is possible to make use of the result of log analysis to develop the game.

Abstract: Provided is a content protection system, in which: a user terminal judges, when a content is to be reproduced or executed, whether or not the user terminal has a usage right of the content, and makes, if it is judged that the user terminal does not have the usage right of the content, a request to a license management apparatus to acquire the usage right of the content; the license management apparatus generates, when the request to acquire the usage right is received from the user terminal, license information containing information on an expiration date that is set based on a timing when the request is received, and transmits the generated license information to the user terminal; and the user terminal judges that the user terminal has the usage right of the content until the expiration date indicated by the license information received from the license management apparatus arrives.

Abstract: A firmware verification section verifies whether a firmware for controlling the activating of contents has been falsified or not, prior to the activating of the contents; a decoding key setting section sets a key to the firmware; the key is used to decode an encrypted activation program for activating the contents, when the firmware has not been falsified; and an activation program decoding section decodes the encrypted activation program by using the firmware with the key set to the firmware.

Abstract: A receiver is configured to receive, from a mobile device of a first type adapted to read a content from a recording medium and run the content, a first device identifier identifying the mobile device of the first type and a recording medium identifier identifying a recording medium loaded in the mobile device of the first type, along with a digital signature generated in the mobile device of the first type using an encryption key secretly stored in the mobile device of the first type. A signature verification unit is configured to verify the authenticity of the digital signature. A voucher issuance unit is configured to issue a voucher to a mobile device of a second type adapted to acquire a content by downloading the content and to run the content accordingly and mapped into the mobile device of the first type, so that the mobile device of the second type is capable of downloading a content.

Abstract: Methods and apparatus in accordance with the present invention are operable to carry out certain functions including: receiving an encrypted program at a processing apparatus; transmitting a machine ID over a network to an administrator; receiving registration data over the network from the administrator in response to the machine ID; transmitting the registration data over the network to a distributor; receiving an encrypted decryption key and an encrypted virtual ID at the processing apparatus over the network from the distributor in response to the registration data; decrypting the encrypted decryption key using the virtual ID, and decrypting the encrypted program using the decryption key; re-encrypting the program using the virtual ID; and storing the encrypted virtual ID and the re-encrypted program in a first storage device.

Abstract: To provide a recording medium on which an entire piece of decryption information that is required to be highly secure is recorded while being kept secure even when it is larger in data size than the storage capacity of an area originally intended for recording it. A recording medium in which encrypted content that has been encrypted and decryption information for the decryption of the encrypted content are recorded in two areas of different security levels. Decryption information B which is a portion of the decryption information is recorded in an area L of a relatively higher security level. The encrypted content and decryption information C which is the remainder of the decryption information that has been encrypted are recorded in an area D of a relatively lower security level. The decryption information B recorded in the area L includes information indicating the location where the decryption information C is recorded and information for the decryption of the remainder.

Abstract: A log collecting/analyzing system has a log collection terminal device as a client terminal device which collects logs and transmits the collected logs to a log server via a network. The log server receives the transmitted logs and stores the received logs for analysis. According to this configuration, it is possible to obtain useful information, such as information about what play modes are popular in the case of games and so forth, or information about what characters are popular in the case of selecting a character for a game.

Abstract: A log collecting/analyzing system has a log collection terminal device as a client terminal device which collects logs and transmits the collected logs to a log server via a network. The log server receives the transmitted logs and stores the received logs for analysis. According to this configuration, it is possible to obtain useful information, such as information about what play modes are popular in the case of games and so forth, or information about what characters are popular in the case of selecting a character for a game. Therefore, it is possible to make use of the result of log analysis to develop the game.

Abstract: Methods and apparatus in accordance with the present invention are operable to carry out certain functions including: receiving an encrypted program at a processing apparatus; transmitting at least some identification information related to the processing apparatus over a network to an administrator; receiving an encrypted decryption key at the processing apparatus over the network from the administrator in response to the at least some identification information; decrypting the encrypted decryption key; decrypting the encrypted program using the decryption key; re-encrypting the program using at least some of the identification information ; and storing the identification information and the re-encrypted program in a first storage device.

Abstract: To provide a recording medium on which an entire piece of decryption information that is required to be highly secure is recorded while being kept secure even when it is larger in data size than the storage capacity of an area originally intended for recording it. A recording medium in which encrypted content that has been encrypted and decryption information for the decryption of the encrypted content are recorded in two areas of different security levels. Decryption information B which is a portion of the decryption information is recorded in an area L of a relatively higher security level. The encrypted content and decryption information C which is the remainder of the decryption information that has been encrypted are recorded in an area D of a relatively lower security level. The decryption information B recorded in the area L includes information indicating the location where the decryption information C is recorded and information for the decryption of the remainder.

Abstract: A management server receives first user identification information and designation information for designating a service which are sent from a user terminal; detects specific information corresponding to a service provider which provides the desired service from a database containing specific information uniquely assigned to each service provider; generates second user identification information based on the detected specific information and the first user identification information; and then transmits the second user identification information to the user terminal. Using the second user identification information, the user terminal accesses the server of the service provider providing the desiring service. This prevents important information such as device IDs from being used when a user receives a service through a network from a service provider other than device manufacturers, and relieves the burden on such service provider upon providing a service.

Abstract: Managing the use of an optical disc drive by a program at high security. An OS of a host apparatus 100 sends one user certificate incorporating the policy information defining the use contents permissible for the optical disc drive 200 and a user key to the optical disc drive 200 under a secure environment (S3). On the other hand, the program running on the OS is authorized, and the user key is passed to the authorized program (S6). The optical disc drive 200 authorizes the program using the user key within the user certificate and the user key for the program and specifies the policy information corresponding to the user key (S7). Thereafter, the optical disc drive 200 permits the application program to gain access to the self-resource within the limits of the contents defined in the policy information (S8).

Abstract: Methods and apparatus in accordance with the present invention are operable to carry out certain functions including: receiving an encrypted program at a processing apparatus; transmitting at least some identification information related to the processing apparatus over a network to an administrator; receiving an encrypted decryption key at the processing apparatus over the network from the administrator in response to the at least some identification information; decrypting the encrypted decryption key; decrypting the encrypted program using the decryption key; re-encrypting the program using at least some of the identification information; and storing the identification information and the re-encrypted program in a first storage device.

Abstract: Methods and apparatus in accordance with the present invention are operable to carry out certain functions including: receiving an encrypted program at a processing apparatus; transmitting a machine ID over a network to an administrator; receiving registration data over the network from the administrator in response to the machine ID; transmitting the registration data over the network to a distributor; receiving an encrypted decryption key and an encrypted virtual ID at the processing apparatus over the network from the distributor in response to the registration data; decrypting the encrypted decryption key using the virtual ID, and decrypting the encrypted program using the decryption key; re-encrypting the program using the virtual ID; and storing the encrypted virtual ID and the re-encrypted program in a first storage device.

Abstract: A management server receives first user identification information and designation information for designating a service which are sent from a user terminal; detects specific information corresponding to a service provider which provides the desired service from a database containing specific information uniquely assigned to each service provider; generates second user identification information based on the detected specific information and the first user identification information; and then transmits the second user identification information to the user terminal. Using the second user identification information, the user terminal accesses the server of the service provider providing the desiring service. This prevents important information such as device IDs from being used when a user receives a service through a network from a service provider other than device manufacturers, and relieves the burden on such service provider upon providing a service.

Abstract: A client terminal device at a user side transmits a plurality of IDs in an arbitrary arrangement order to an authentication server machine on a network on the basis of a device environment of the user when a license authentication for software is performed. The authentication server machine performs the license authentication using an authentication program and ID issue program corresponding to the software for which the license authentication is applied, and issues an ID in the ID form corresponding to the software.