Permission information management system, and permission information management method
A user terminal generates a first key pair and a second key pair, transmits a permission request including a public encryption key of the second key pair after electronically signing the permission request with a secret encryption key, and acquires, from permission information transmitted from a right-holder terminal, a content decryption key by using a secret decryption key of the second key pair and uses the content. The right-holder terminal stores a third key pair and the content decryption key, verifies the permission request received, and encrypts the content decryption key by using the public encryption key of the second key pair included in the permission request and transmits the permission information including the encrypted content decryption key after electronically signing the permission information with a secret encryption key of the third key pair. The permission request and the permission information are transmitted and received via a blockchain.
1. A permission information management system comprising a user terminal of a user of a content and a right-holder terminal of a right holder of the content, wherein
the user terminal comprises:
a key generation unit that generates a first key pair for an electronic signature including a user secret encryption key and a user public decryption key and a second key pair for acquiring a content decryption key, the second key pair includes a secret decryption key and a public encryption key;
a permission request unit that transmits a permission request including the public encryption key of the second key pair after electronically signing the permission request with the user secret encryption key of the first key pair; and
a content use unit that acquires, from permission information transmitted from the right-holder terminal, the content decryption key by using the secret decryption key of the second key pair, and uses the content by using the content decryption key,
the right-holder terminal comprises:
a key management unit that stores therein a third key pair for an electronic signature including a right-holder secret encryption key and a right-holder public decryption key, and the content decryption key for decryption of the content;
a permission verification unit that verifies whether the permission request satisfies a permission condition for the content; and
a permission issuance unit that, when the permission request satisfies the permission condition, encrypts the content decryption key by using the public encryption key of the second key pair included in the permission request and transmits the permission information, wherein the permission information includes the encrypted content decryption key after electronically signing the permission information with the right-holder secret encryption key of the third key pair, and
the permission request and the permission information are transmitted and received via a blockchain.
2. The permission information management system according to claim 1 , wherein
the permission verification unit determines whether a price for the content is properly paid by an amount of digital virtual currency included in the blockchain by which the permission request has been transmitted and received.
3. The permission information management system according to claim 1 , wherein
the user terminal comprises a first blockchain control unit that transmits the permission request to the right-holder terminal by broadcasting the permission request to a network, and
the right-holder terminal comprises a second blockchain control unit that transmits the permission information to the user terminal by broadcasting the permission information to the network.
4. A permission information management method performed by a permission information management system including a user terminal of a user of a content and a right-holder terminal of a right holder of the content, the method comprising:
causing the user terminal to
generate a first key pair for an electronic signature including a user secret encryption key and a user public decryption key and a second key pair for acquiring a content decryption key, the second key pair includes a secret decryption key and a public encryption key,
transmit a permission request including the public encryption key of the second key pair after electronically signing the permission request with the user secret encryption key of the first key pair, and
acquire, from permission information transmitted from the right-holder terminal, a content decryption key by using the secret decryption key of the second key pair, and use the content by using the content decryption key; and
causing the right-holder terminal, which comprises a key management unit that stores therein a third key pair for an electronic signature including a right-holder secret encryption key and a right-holder public decryption key and the content decryption key for decryption of the content, to
verify whether the permission request satisfies a permission condition for the content, and
when the permission request satisfies the permission condition, encrypt the content decryption key by using the public encryption key of the second key pair included in the permission request and transmit the permission information, wherein the permission information includes the encrypted content decryption key after electronically signing the permission information with the right-holder secret encryption key of the third key pair, wherein
the permission request and the permission information are transmitted and received via a blockchain.