Information usage control system and information usage control device

An information usage control device, comprising:

• a registration unit that registers, in response to a registration request from a user managed by its own information usage control device, usage control information for controlling use of control target information in a memory so as to be associated with the control target information;
• a providing unit that provides, upon receipt of an issuance request for usage information concerning the control target information from the user managed by its own information usage control device, the user with the usage information for using the control target information, based on the usage control information registered in the memory so as to be associated with the control target information;
• and
• an information processing unit that provides, in response to the request from the user managed by its own information usage control device, the user with a list of the usage control information for users managed by another information usage control device, then receives selection of the usage control information from the list, and sends the selected usage control information to the other information usage control device so as to be associated with the control target information to which the usage control information is applied, wherein the information usage control device and the other information usage control device manage different set of users, and wherein the other information usage control device, in response to a registration request from a user managed by its own information usage control device, registers the usage control information for controlling use of the control target information in a memory of its own information usage control device so as to be associated with the control target information, and upon receipt of an issuance request for usage information concerning the control target information from the user managed by its own information usage control device, provides the user with the usage information for using the control target information, based on the usage control information registered in the memory of its own information usage control device so as to be associated with the control target information.

An information usage control device, comprising:

• a registration unit that registers, in response to a registration request from a user managed by its own information usage control device, usage control information for controlling use of control target information in a memory so as to be associated with the control target information;
• a providing unit that provides, upon receipt of an issuance request for usage information concerning the control target information from the user managed by its own information usage control device, the user with the usage information for using the control target information, based on the usage control information registered in the memory so as to be associated with the control target information;
• and
• an information processing unit that receives, from another information usage control device that registers, in response to a registration request from a user managed by its own information usage control device, usage control information for controlling use of control target information in a memory of its own information usage control device so as to be associated with the control target information, and upon receipt of an issuance request for usage information concerning the control target information from the user managed by its own information usage control device, provides the user with the usage information for using the control target information, based on the usage control information registered in the memory of its own information usage control device so as to be associated with the control target information, the usage control information associated with the control target information and selected by the user managed by the other information usage control device, and registers the usage control information in the memory of its own information usage control device so as to be associated with the control target information, wherein the information usage control device and the other information usage control device manage different set of users.

An information usage control system, comprising:

• a first license issuance server;
• and
• a second license issuance server that communicates with the first license issuance server via a network;
• said first license issuance server including,
• a first user management unit that manages a first user,
• a first policy management unit that manages a first policy information defining a range for permitting use of a first content by the first user,
• a first policy memory unit that stores information related to the first content and the first policy in correlation with each other, and
• a first license providing unit that provides a first license information related to use of the first content by the first user based on the first policy information set with respect to the first content by a policy setting unit;
• said second license issuance server including,
• a second user management unit that manages a second user,
• a second policy management unit that manages a second policy information defining a range for permitting use of a second content by the second user,
• a second policy memory unit that stores information related to the second content and the second policy in correlation with each other, and
• a second license providing unit that provides a second license information related to use of the second content by the second user based on the second policy information set with respect to the second content by a second policy setting unit;
• said second user being not registered in the first user management unit;
• said second license issuance server providing the second policy information to the first license issuance server;
• said first license issuance server storing the second policy information provided from said second license issuance server into a first trust relationship management unit;
• said first license issuance server providing the second policy information stored in the first trust relationship management unit to the first user;
• said first license issuance server receiving selection of the second policy information by the first user;
• said first license issuance server generating a first public key and a first decryption key for encrypting and decrypting the first content;
• said first license issuance server additionally storing, into the first policy memory unit, a third policy information defining a range for permitting use of the first content based on the selected second policy information, in correlation with the information related to the first content and the first decryption key;
• said first license issuance server transmitting, to the second license issuance server, the information related to the first content and the third policy information;
• and
• said first license issuance server requesting the second license issuance server to issue a second public key;
• said second license issuance server generating a second public key and a second decryption key for encrypting and decrypting the first content received from the first license issuance server;
• said second license issuance server additionally storing, into the second policy memory unit, the information related to the first content, the third policy information, and the second decryption key in correlation with each other;
• and
• said second license issuance server transmitting the second public key to the first license issuance server;
• said first license issuance server transmitting the first public key and the second public key to the first user;
• said first license providing unit issuing a license to the first user based on the third policy information and the first decryption key stored within the first policy memory unit when said first license providing unit receives, from the first user, a license issuance request for the first content encrypted by the first public key;
• said second license providing unit issuing a license to the second user based on the third policy information and the second decryption key stored within the second policy memory unit when said second license providing unit receives, from the second user, a license issuance request for the first content encrypted by the second public key.