WO2002089394A2

WO2002089394A2 - Billing method for the use of digital data and corresponding components

Info

Publication number: WO2002089394A2
Application number: PCT/DE2002/001505
Authority: WO
Inventors: Guido Heidt; Wernhard Markwitz
Original assignee: Siemens Aktiengesellschaft
Priority date: 2001-04-25
Filing date: 2002-04-24
Publication date: 2002-11-07
Also published as: WO2002089394A3; DE10120288A1

Abstract

The invention relates to a method, wherein digital useful data is stored in a useful data storage unit (14). The use of useful data is highlighted with the aid of a billing date (AW). Said billing date (AW) is stored in a storage unit (20) that is protected against unauthorized access. A billing procedure is carried out involving the use of a data transmission network (12) depending on the value of the billing date (AW).

Description

description

Process for accounting for the use of digital data and associated components

The invention relates to a method for accounting for the use of digital data. The digital user data are stored in a user data storage unit which is, for example, part of a playback device or part of a data processing system.

In the entertainment industry and in the software industry in particular, there are several variants for accounting for the use of digital data. A common type of billing is one-off billing when the digital data is handed over to the user, for example when selling a program CD or a music CD. Another type of billing for the use of digital data is the regular payment of a monthly basic fee, e.g. with digital radio or digital television. Another type of billing is to charge a flat fee on the data storage media that have not yet stored any data, e.g. in Germany a so-called GEMA fee (society for musical performance rights).

The types of billing used up to now are relatively easy to bypass. There is therefore a need for more effective billing types on the part of the providers of the programs or of the music pieces. However, the previous types of billing are also disadvantageous for the users in several respects, for example in that billing is carried out at a flat rate without taking actual use into account.

It is an object of the invention to provide a simple method for billing the use of digital data, which on the one hand ensures the billing of the use and on the other hand the user not excessively disadvantaged in billing. In addition, an associated device for using user data, an associated program and an associated use of a chip card are to be specified.

The object related to the method is achieved by the method steps specified in claim 1. Further developments are specified in the subclaims.

In the method according to the invention, the use of the user data is noted with the aid of at least one billing date. The billing date is stored in a storage unit secured against unauthorized access. The storage unit is preferably secured by electronic means, for example special access protocols or the use of chip cards. Constructional measures can additionally or alternatively also be used, for example cast components or units secured in another way against mechanical access. Depending on the value of the billing date, use is permitted up to a predetermined value and / or, with the involvement of a data transmission network, a billing process for billing the use of the user data is carried out.

Using a secured storage unit makes manipulation on the billing date more difficult. Noteing the use with the help of the billing date or performing the billing process depending on the value of the billing date makes it possible to bill only immediately before use, e.g. only a few seconds, at the beginning of use or only after use. This makes it possible to bill for usage. A user-related billing increases the acceptance of the billing process on the user side considerably.

In a development of the method according to the invention, the value of the billing date is encrypted and / or written over the data transmission network. Misuse of the billing process is made considerably more difficult.

In one embodiment of the method according to the invention, the value of the billing date is increased or decreased by the same amount each time it is used, for example by the amount 1. The billing date is thus increased or decreased in the manner of a counter.

In another development of the method according to the invention, the value of the billing date is changed several times between two successive billing processes, depending on the use of the user data. This procedure allows the number of transmissions via the data transmission network to be considerably reduced. In this way, costs for using the data transmission network can be reduced. If it is not possible to establish a connection via the data transmission network, the use of the user data is still released in one configuration, the billing date is changed immediately, but its value is transferred later.

In another development of the method according to the invention, the billing process is carried out when a predetermined value or certain predetermined values of the billing date are reached. For example, the billing process can be carried out each time the value ten is reached if the value of the billing date is reset after the transmission over the data transmission network. However, the billing process can also be carried out, for example, for all values divisible by 10, for example for values 10, 20, 30, etc. It is not necessary to reset the value of the billing date in this case. In a next embodiment of the method according to the invention, the billing process is basically started each time it is used. For example, the value of the billing date is transmitted to the billing unit each time it is used. In this case, measures to monitor the value of the settlement date are not necessary. If no connection can be established, the use can still be released. The billing date value is changed and the changed value is transferred later.

In a next development of the method according to the invention, the billing process is started automatically. The user of the user data therefore does not have to carry out any additional operations. The billing process is either started from the side of a terminal device that contains the user data storage unit, or from the side of a unit for executing the billing process.

In another development, the value of the billing date is only increased but not decreased. Alternatively, the value of the billing date is only reduced but not increased. These measures make it even more difficult to manipulate the value.

If the billing date is reset to a predetermined starting value after its value has been transmitted to the billing unit, fewer bit positions are required to store the value of the billing date, for example only one bit position, two bit positions or three bit positions.

In a further development of the method according to the invention, the secured storage unit is a chip card in which the billing date is stored in a processor or in which the billing date is stored in a storage unit which can only be accessed by a processor contained in the chip card. Access without bypassing the processor is not possible. Chip cards serve

co 0 3 KS CD ^ ω D g! CD t) rt IQ CQ rt <! P ¹ LI Hi P • i] <P. Hi tu CD LJ- CQ Φ CD <Pi 0 o CD CP ⁾ H- ii Ω P CD CD CD CD P ⁾ CD CD φ Φ PO φ μ 0 PJ Pi φ Φ Φ j μ- μ- μ- Φ μ- Φ pr lJ H- rt P Ω CD P ^J rt P μ- P rt tr HH μ- μ H r. Φ a rt 0- μ- μ- p. 2 P Ω Ω t PH rt CD H- P ^J H- H "ISI CD μ- PP ⁴ J rt Pi μ- P ⁴ φ H 0 o φ pr 'CQ 3 CD

0 = P. CD Ω> d CD iQ P = Pi ^ CD <! μ- μ- P α = Φ> CQ ⁾ P Φ Φ Ω S * i 3 p Φ Ω φ co H- HP ^J P li P> CO P ⁾ H- CD μ- CD PP = σ μ PP ⁾ p 0 μ - pr P> Φ ι-i pr μ-

CD CQ CD rt tr CO rt H μ- P m 0 ⁾ tr Φ P CQ tr p. CQ 0 ι-i 3 μ- Φ α r

CD H- PP = PJ CD CD CD P. P CD CD CD CD CO φ HP tQ φ Φ O φ P ⁾ rt 0 rr P = Φ CD

H ¹ rt CO rr P CD P P- H 0 P ι-i OH • Ö CQ φ φ 0 tr • Ö ι-i P Φ tr Φ> CQ H,

PJ co CD H- H- µ- 3 rr 3 µ. CQ μ- μ Ω μ- P CD N

H- t- ¹ o CD 0 CQ P P. £ P P. ⁾ O P. 0 = μ- P = P rt P μ- Φ P = 0 pr -. M rt Φ μ- P co CD pr PJ tr H- CD μ- P • Ö μ- tQ PJ rt Hi P PJ 0 ^* CD μ- Hi P ⁾ = CQ φ Φ ^j P ü rt PP CD CD DHH P. CD Pi CD CD I- ¹ P rt P P. Φ rt P rt Ω Φ PP μ- PP

0 "P H- H- CD Pi CD CD H μ- CΛ Φ P rt μ- • Φ pr μ- tr PPP P. H σ g ω p. Ω r - CD SS HH 3 Ω Φ -> CQ α = P rt Φ CQ P CD MN Pi CQ Φ Pi fD PD CD P ⁾ t • rt PP CD rt PP ^* μ. rt tr P> CQ μ- rt φ Ω PP CD φ

H- rt CD H P CD IQ rt P rt rt - S Φ IQ Φ Φ P φ μ P. m 2! 1 P m CD CD α α CD <CD N Pi N Φ μ- H μ- rt CD φ 0 2; μ- CQ φ Φ O rt

"d H CD g N CD P ⁾ P 0 CD P. 2! μ- P P. 3 ISI μ Ό CQ P Φ μ- H tr Φ rt μ- PP ⁴ μ-

H- CD P P H- N rt H H- PJ CD CD P μ- • Pi H Ω φ H Ω ^ i 2! 3 Φ H ISI CD P μ- Hi

0) Ω rt ra PPD Ω rt μ- tQ CD P. öd P = 0 ^J 0 P ⁴ μ Φ 1 μ P ⁾ = φ Φ Pi • d μ-

P ^J CD l Ω tr Ω P. p- CD rt * τ \ μ- • P. Hi ω J Φ Φ μ- ^ rt P pr ISI

CD HH P- tr CD = ^> P ^J CD CD P CD H P. • x] φ Φ P μ- φ rt H μ- rt PJ H ISI PJ μ-

3 H- CD PJ H- H- H H CD CD H flj H P φ μ μ- rt CQ Φ t Φ P P li φ

CD lh O rt H- rt 4 P = rt <J tr μ- H CD [= P CQ t> Φ <! Φ P ⁾ t rt Φ μ- α 3 rt rt H

H- rt P ^* CD CD P. CD a CD CD μ- iQ μ- po rt Ω tr tr Φ PP μ- Φ Φ P ω P i / o N CD PPH PJ ≥J IQ P- 0 Φ p 0 CQ φ μ- rr φ Φ <H. P α><0 = CD P P. CD rt CO p. σ PP ⁾ φ μ- P. μ- Pi rt Pi * ϋ φ. -. μ- CO Φ CD Φ CQ

CD CD CD PH CD N CQ Ω P CD rt tr H φ φ P μ- μ- Φ Φ μ- Pi 21 rt O li Ω 0 rj HO CD - • rt P * d PP CD tsi CD P φ φ CQ H μ - PP μ-; 3 pr H pr rt P ui

CD CD CD I- ¹ «τl P CD H ¹ IQ μ- P. CD P n P ⁾ DP Ω 0- PHO μ- μ- li 0 ^J P

CD CD tr I- ¹ H IQ H- P = PP ⁾ μ- IQ PP tu PN pr Φ CQ φ S tr WP μ- P ⁾ P. rr P ^J P m {_.- CD H- tr Ω ω P. 'rt P μ- CQ φ CQ P Φ H- h- ¹ 0 μ- r CQ Hi

SU CD rt CD H- tQ CD 3 P- CQ CD CD CD P ¹ P. Ό P. φ ι-i Q CD rt Pi φ i PJ Φ rt rr PJ

PPP CD IQ H- H- F- CD CD CQ μ- P CD Φ ^ r μ- pr φ tJ PJ = Φ Φ CD P Hl μ. Q Φ P p. • P s ^» r J rt CD rt HH ¹ rt μ- CO P ⁾ Φ φ Ω i rt μ- <! CQ CD P rt P <! 0 Pi rt P H- tr P ⁾ • ö CD rt CD rt μ μ- t P = ISl P 0 Φ P Φ Φ Φ φ

CD α CD CQ CD H- ffi H- • H p. H s rt IQ 3 rt Hi p μ Φ H μ μ

F- CD CQ Pi H- CD CD CD H- P Hi μ- CD tr Φ Φ N μ- P μ- φ H Pi. P μ- 0 Hi fτj Φ

H CD CD Ω H- I- ¹ p- M μ- CD rt CD tr. CO PQP Ω μ- P. Hi Φ Φ co P P> H 11

CQ H. tr P CQ CD Hl CD μ- P H- P μ- 0- P IQ P ^J rt φ μ- PO rt rt pr 0 CD

CD 3 CD P ^J Ω ϊ. CD H- P Pi S CD Ω α Ω P ⁾ P i P rr μ- I 3 μ N Φ

H- CD tr 3 Pi CD tr CD r PP μ- • ö pr μ- P ^J CQ P ⁾ ≤ μ- Pi μ- φ Φ tr P ⁾ Φ Φ μ-

P H- CD H- CD H- H- P. Pi P rt P o P φ Φ rt CD P μ- P fej P Hi CD Φ P P CQ rr

CD rt P rt H r 0 = CQ CD tQ μ- IQ N CD P ü Φ TJ w HP 0 μ- n μ- μ- CQ CD ii CD CD CD CD CO CD CQ CO P * ü μ- tQ * τl rt P ü CQ Pi Pi rt CQ Ω φ Q • ö PJ 0 li P ffi CQ P = CD CD μ- IQ P μ. rt CO ι-i Φ P. P = Φ Φ ti CQ PJ μ- μ- TS PP li PJ to CD Hl H- Ω tr CD P- P. V rt CD IQ P = μ- Pi φ Φ Hl Hl P- 3 P CQ r * ϋ P μ- H Hl

OJP ¹ CD P M- CD P ⁾ 3 Hi <J PJ μ- CQ PPP = P 0 φ μ-? φ φ PJ CQ O

CQ & H ¹ Hl HH CQ H- PJ = Pi CD Φ rt CQ * Ö P P- H CQ 3 0 P ⁾ rt Φ Φ

CD H- CD P = rt <! Ω H- Ω CD CΛ CD K P P PJ φ o CQ H Ω P <_: P H CD D μ- μ- CD Q

P CQ CD CQ H 0 P ^J rt P ^J iS CD r. IQ 3 tr μ- ort t PP LΛ rt 0 $, OP rr * d

SU H- CD CQ P ⁾ P PJ CD P CD> τ) CO Φ Ω Pi P. • CQ Φ Φ 3 Φ tQ φ P Hl P ⁾ φ

3 rt 3 H- CD CQ P <l Ω SS tr H • Φ W φ μ- Pi Φ H 0 O φ μ- CD PJ rt μ-

P PJ H- P CD P. H- CD rt Ω <PPP = μ- Φ CQ φ cα μ- ι-5 i WP CD 3 Ω rt Ω rt rt CD P CD CD P • CD rt μ- Hl 2! PH Φ φ P. 3 <P PJ p ⁾ φ 0 = pr Φ tr

CD CD CD ISI • s li N CD Φ φ ⁴ Φ φ> μ- rt P Φ PP CQ Φ rt φ

P CD μ μ- Φ μ- μ- P rt μ Φ P P μ- 1 11

H- 3 IQ α P = Hi Pi μ- CQ P ⁾ PJ P 1 1 μ- PP 1 Φ ISI 1 rr 0 P Φ 1 ϊ 3 CD CD 1 ⁴ 1 CD rt 1 μ- 1 Φ P CQ Φ

1 1 1 P. 1

c 0 ω t ISJ H μ>

UI o cπ o LΠ o LΠ

Hi

PJ tr μ

Φ

0

CD

3

Φ n

pi

Φ

0

N

P

Pi φ

H

CQ

Φ

CD μ-

Ω tr

Φ l-i σ> rt

Φ

P

C ^Q

* d

Φ μ-

Ω tr

Φ n

Φ μ-

P tr φ μ- rt

3 μ-

Φ μ-

P φ

3

encrypted and / or signed digital data are transmitted using further methods. Additionally or alternatively, the secured storage unit also outputs encrypted and / or signed data using a further method. This makes it difficult to analyze and manipulate the incoming data or the sent data.

In a next development, the authorization of the billing unit for billing is checked before the transmission of data for starting the billing process. Billing data cannot be read out by unauthorized persons.

Through the complete use of encryption and / or signature procedures in combination with constructive measures, it can be achieved that the accounting to be carried out by the procedure can no longer be avoided or can only be avoided with considerable effort. The constructive measures consist, for example, in arranging the units of the terminal involved in the method as far as possible in an integrated circuit. If necessary, only the secured storage unit is exempted, for example if it is located on an exchangeable chip card. Exchangeable chip cards allow different users to use one device.

The useful data are, for example, voice data, music data, image data, multimedia data or program data. In particular, voice data or music data can be output by decrypting only the data currently being output. As a result, there is never a completely unencrypted version of this data in the device. This also makes it difficult to copy the data.

In another development, the user data storage unit is part of the secured storage unit. Access to the user data is thus doubly secured when using encrypted user data. In a next development of the method according to the invention, electronic letters, so-called eMails or SMS messages (Short Message Service) are transmitted via the data transmission network to carry out the billing process. Standard and widespread transmission protocols, which can also be used for other services, are therefore used between the terminal for using the user data and a unit for executing the billing process for the transmission of messages. In one embodiment, the sending of the emails or SMS messages is carried out together with the registration process of a terminal on the data transmission network.

The invention also relates to a device for using the user data. The device contains a user data storage unit for storing the user data, a secured memory unit for storing the billing date and a network connection unit for connection to the data transmission network. The device is constructed in such a way that the method according to the invention or one of its developments is carried out during its operation.

In addition, the invention relates to a program with an instruction sequence, when executed by at least one processor the method according to the invention or one of its developments is carried out. Furthermore, the use of a chip card in the method according to the invention or in one of its developments is protected. The technical effects mentioned above also apply to the device, the program and the use of the chip card.

Exemplary embodiments of the invention are explained below with reference to the accompanying drawing. In it show:

Figure 1 functional units of a player, and LO ω tw μ>

Lπ o LΠ o LΠ o LΠ

• xj * l μ- μ-

LQ LQ

P P

H il μ ¹ NJ

ISI φ μ- TJ Q P rt P pr

• l rt

P μ-

0 o pr P rt CD μ- Φ

O μ-

0 P

CQ tr

Φ φ μ- μ-

0 rt tr Φ φ 0 μ- rt Φ o

Φ μ-

0 0

Φ

Φ CD μ-

0 φ φ

CD Ω tr

& Φ

CD 11

• d CD μ- • φ

LQ

Φ

11

PJ = rt

Φ

CD μ> o

N

0

3

can send and receive. A data transmission link 30 can be used between the connection unit 22 and the Internet 12 with the help of an Internet service provider for the transmission of data.

A billing computer 32 and a music database 34 are connected to the network 12. The billing computer 32 is used to bill the use of the music data stored in the music database 34. The billing process is explained in more detail below.

The music database 34 contains music data from the music publisher in a compressed form. For example, the audio compression method MP3 is used. However, other compression methods can also be used.

With the help of the terminal 10, the user A sets up a connection to the music database 34 for loading music data. Before the access to the music database 34 is released, it is checked whether the smart card 20 is valid, ie whether an expiration date has not yet been reached and whether the smart card 20 has actually been issued by the music publisher. For checking purposes, the certificate Z (EA) is transmitted to a computer which enables access to the music database 34. At the same time, the public key EA of the user A reaches the music database 34. The public key EM of the music publisher is used to check the certificate Z (EA) and thus also to check the public key EA. If the certificate is genuine, user A may select a piece of music from the music database 34. After this selection, the selected music data are encrypted with a random key S1 newly determined with each selection in accordance with a symmetrical encryption method, for example in accordance with the DES method (data description standard). The encrypted music data are transmitted to the terminal 10 via the network 12 and stored there in the smart media card 14. The random key Sl is generated using the public key EA of user A encrypted and transmitted from the music database 34 to the terminal 10 and stored on the smart media card 14. The connection via the network 12 is then ended.

If user A wants to hear the music data, the following method steps are carried out:

The release unit 16 generates a request signal for the transmission of the certificate Z (EA) for the smart card 20, for example a specific message, see arrow 40.

The smart card 20 transmits the certificate Z (EA) together with the public key EA of the user A to the release unit 16, see arrow 42.

The release unit 16 checks the certificate Z (EA) using the public key EM of the music publisher. It is assumed that the certificate Z (EA) is real.

The release unit 16 generates a random key S2 according to a random method. The random key S2 is encrypted by the release unit 16 using the public key EA and transmitted from the release unit 16 to the smart card 20, see arrow 43.

A decryption process is carried out in the smart card 20 with the help of the private key DA in order to decrypt the random key S2. This transfer of the key S2 enables a secure connection to be established between the release unit 16 and the smart card 20.

- The release unit 16 then reads out the initial part of the music data from the Smart Media Card 14, see arrow 44. public key EA encrypted random key Sl.

The release unit 16 encrypts the already encrypted key S1 with the random key S2, so that the key S1 is now double-encrypted. The double-encrypted key S1 is then transmitted from the release unit 16 to the smart card 20.

The release unit 16 then sends a command to decrypt the key S1 to the smart card 20.

The smart card 20 decrypts the key S1 first using the random key S2 and then using the private key DA of user A.

The smart card 20 then encrypts the random key S1 with the aid of the random key S2 and sends the once encrypted key S1 to the release unit 16, see arrow 46.

The release unit 16 decrypts the random key S1 received from the smart card 20 with the aid of the random key S2.

With the help of the random key S1, the release unit 16 is able to decrypt the encrypted music data.

The decrypted music data are played back by the use unit 18.

In the smart card 20, the billing value AW is increased by the value 1 each time the private key DA is used. Then a connection is automatically established over the network 12 to the accounting computer 32. The billing computer 32 uses the certificate Z (EA) transmitted by the smart card 20, using the public key EM of the music publisher, to determine whether a valid smart card is involved in the billing process. It is assumed that the certificate Z (EA) is real. In addition, the public key EA is transmitted to the billing computer 32 together with the certificate Z (EA). The accounting computer 32 assigns the accounting process to the user A on the basis of the public key EA.

The smart card 20 encrypts the current billing value AW using the private key DA and initiates the transmission of the encrypted and signed billing value AW over the network 12 to the billing computer

32, see arrow 50. In the accounting computer 32, the accounting value AW is decrypted using the public key EA. The accounting value AW is noted for user A. For example, at the end of the month, user A is billed for the use of the music data in the billing computer 32, depending on the billing value.

FIG. 2 shows functional units of a computer 60 which belongs to a user B. The computer 10 is, for example, a so-called PDA (Personal Digital Assistant), which is the size of a palm and is therefore also referred to as a palm top. Such computers 60 are also known under the name Organizer. The computer 60 contains a non-volatile memory unit 62, a release unit 64, a use unit 66, a smart card 68 and a connection unit 70.

The storage unit 62 serves to store program data, even when the computer 60 is switched off. The storage unit 62 is, for example, a so-called flash memory. The program data are stored in encrypted form in the storage unit 62. The functions of the release unit 64 are performed when a program is executed by a main processor (not shown) of the computer 60. These functions are explained in more detail below.

The usage unit 66 contains a working memory 72, e.g. RAM (Random Access Memory). Unencrypted program data is stored in the working memory 72 for execution by the main processor. The usage unit 66 also contains an input unit 74 and a display unit 76. The input unit 74 is, for example, a keyboard and / or an input pen. For example, an LCD unit (Liquid Cristal Display) is used as the display unit 76.

The smart card 68 is constructed like the smart card 20 and contains a microprocessor 78 and a storage unit 80. The storage unit 80 serves to store a certificate Z (EB) issued by a software manufacturer for the public key EB of the user B. In the storage unit 80 the private key DB of user B is also stored. Furthermore, a billing date with a billing value AW2 is stored in the storage unit 80.

The connection unit 70 has the same structure as that

Connection unit 22 and enables the establishment of a connection 80 for data transmission via the network 12. A billing computer 82 and a program database 84 of the software manufacturer are connected to the network 12.

In the same way that user A was able to select music data from the music database 34 above, the user B selects a program from the program database 84 that he would like to use, for example a diary program or an auxiliary program, for example a virus scanner. Before selecting, it is checked whether the Smart Card 68 is valid. The certificate Z (EB) is transferred to the program database 84 and there

> Ω co α LQ CD ü PP 0 tr td CQ CQ rt CQ P CD o Cß LQ P. LQ TJ 2! Ω ISI C ^Q LQ μ- co 0 «

11 0- Φ μ- PJ 2! φ Φ Φ Φ φ Φ Φ φ UI Ω n Ω Φ Ω Φ 3 t Φ H μ- tr P Ω Φ 0 Ω tr tr Φ <Φ m to P 11 3 0 μ- μ- pr PJ tr 0 tr -> PJ J 3 Φ 0 Φ 3 tr ^ tr Φ

Φ 11 rr rt CD <! rt 3 S ¹ LQ ¹ Φ CD 11 3 μ- LQ μ P ⁾ = Pi n μ- rt φ Φ £, __ P. Φ μ- 0 = P 0 = σ 0 rt 3 Ω 11 Φ f 0 => d rr Φ 0 11 rt μ- α Er 0 = tr μ-

CQ μ-il! P μ CQ P CQ PJ Cß P. & tr J P. μ- Φ CD ¹ φ o

CD 0 φ H μ- tu n CD Φ tr o PJ = α co LQ CD rr Pi ui Ω P ⁾ co Φ 3 φ P Ω CD rt CD 0 = co CQ μ- P. φ Φ * d μ- Ω Φ Φ φ Φ PJ rt * d P 3 ti tr tr Φ Φ o Φ Hl

"d α Ω LQ tr <Ω H- LQ IS) pr M i 0 11 CQ i Φ μ- φ PH 0 • d H rt φ P> tr J μ- φ Φ tr Φ Pi 0 CD Φ CD φ μ- P . 0 Φ Cß 0 ≥i μ- φ CD Φ CQ • μ- rt tr 3 μ 0 φ 0 3 rt μ 11 CQ <!> ^Χ j 0 μ- Ω P 0 rt μ. ^F ϋ μ-

Ω Φ 0 = φ ^► 0 CD 0 LQ μ- 0 Φ α cn 0 H Pi cn φ tr rt rt CO H Ω (xJ tr 0 CD φ s Hi Ω 0 Φ Ω LQ ≥i 0 cd α n φ 00 σ 0 11 N ISI cn cn LΠ O tr td & φ CQ μ- Φ tr LQ i tr Φ & PJ <! Μ- P. - μ- μ- Φ Φ ISJ o LQ φ CD

H P Φ H μ- CD PJ = Φ N rt <H N rt 0 2 LQ 0 φ p. rt 0 H <J M n φ Ω

0 tr φ P = 3 rt 0 PN Φ Φ 0 Φ 0 PJ p ⁾ H 0 Φ rt LQ 0 = φ PJ Φ μ- tr

Pi CD Φ Ω O Φ 3 H Ω tl P 0 tr Ω 0 Cß H Φ td φ er n 3 μ- 0 μ-

ISJ μ- tr H CQ 11 μ> <H tr tr Pi μ- Φ tr P. Ω CD CD Φ CD 3 0 μ-

CD CQ rt 0 o Φ rt o 0 ISJ μ- 0 txj <! Φ • d Φ tr 2 PJ 0 Pi "d Ω Pi tr ISI φ

LQ ^► 0 LΠ 0 o H & 0 P 0 Φ il 0 μ- TJ ISI

, rt n 0 P PJ φ rt tr P ⁾ Φ 0 (>

Φ φ cn 0 P LQ tl ^ Pi P rt H 0 Hi P μ- O CD 3 CD μ- μ "rt μ- Hl φ

CQ μ- P. Φ »LQ 2! P PJ = Φ μ- P CQ CD ^ »xj P ⁾ tr Φ 3 rt μ- Hi 0 Ω P) P = Φ rt PJ = P

"d Ω μ- CQ P tSO P. 0 Ω HP CD Ω Φ 11 rt Φ μ- rt pr P = co μ- tr LQ CD 0 P. φ tr Φ Φ μ & P LQ tr Pi LQ s3 tr P φ μ - μ- M Φ P. tr CD 0 φ Φ CD cn μ- φ P Φ tr Pi s Pi Φ 0 CD φ P. μ- 0 rt φ P PJ μ 0 Φ $. ISJ μ- 3

Ω H μ- r Ω PJ = μ- Φ 0 P. JHP = Φ iQ 0 rt ISJ rt Φ ISI Pi rt μ "Φ LQ μ- tr rt 0 CD tr 0 ISJ H 3 S 0 0 P rt CD rt PJ φ cn M3 CD P Φ 0 0 Φ. 0 rt H 0 = Φ μ φ Ω 0 Q 0 Pi μ- LQ μ Hl CQ. σ 0 (^ Ω 3 0 <! il 0 P. tr H p. il CQ P. tr Φ μ- 3 μ- φ 11 LQ 3 e φ CD Ω tr> Φ Φ 0- € OI α 0 Φ Φ rt H 0 PJ 2! cd Φ IS 0 0 c! = t_I. μ- H Cß 0 0 H CSS

Φ Φ tl P = μ- μ tr Φ P ISO P φ μ- 0 0 0 0 = tr Φ φ • d i i 3 Ω 3 μ-

0 CQ 00 <& rt Φ Φ Ω Pi P μ- 0 i Pi CO Φ PP Φ 0 3 μ- tr rt μ- CQ CD ISJ 0 11 Ω μ- ET Φ 3 P LQ tr co CQ n O P. μ- μ- 11 P ⁾ μ- rr

• 3> d Φ 3 Φ ffi tr 3 0 0 μ- 3 P. φ Ω Pi LO Φ • d Ω μ- φ Ω rt 0 rt ΓT 0 = W ti Φ Φ Ω μ- 0 Φ rr i φ μ- tr Φ t H pr φ tr CD φ CQ μ- o> μ- rr μ- 2) tr H "0 <11 Pd i Φ n rt 0 = H 0 0 => ^χ l Φ <Ω K CD

LQ il Ω 0 Φ P Hl 0 φ Φ K Φ CD rt J Hl 0 • xj H il Φ tr μ- rt Φ Hl

11 tr tr 3 11 0 Φ LQ 11 co Ω μ- P td cn ISI Cß 0 Pi Φ P il Φ φ H • φ

P ⁾ Φ φ μ- X rt P CD tr t tr ¹ rsj Φ! L Φ 3 LQ φ 0 P Φ μ- μ- CD μ- Hi

3 μ- H rt o LQ i 11 μ- 0 Hi 2! P P 0 PJ φ CD μ- LQ 0 Ω Φ φ α CO P.

3 rt Φ 0 CD φ φ 0 P> Φ φ Φ Hi P φ 11 i P. tr LQ J tr pr CΛ μ- LΠ φ

Pi CQ μ- W rt Φ H CD Ω P. 0 H H PJ = rt il rt Φ ISJ Φ Φ PJ tr Φ Φ P. Φ CD

PJ CD P μ- O CQ Φ tr 0 Hi rt "ISJ N 3 P 0 μ ISJ tr φ μ- 0 = 0 φ <i rt" d tr M Ω • d 0 0 LQ σι Φ M 0 Φ μ- Ω rr Hl 0 Φ φ rt CO i CD <! Φ 0 =

Φ φ Φ Hl Pi e tr μ Φ LQ Φ o μ LxJ μ- 0 0 H P> Φ PJ = Ω LQ Φ μ- CQ O Hl

0 μ- μ- φ Φ 0 μ- 11 CD tr μ- LQ LQ Q Pi 11 rt 0 = Φ μ- 0 cn Φ 0 = tS3 3 CD Hl

Ω rt CQ t Φ <l PJ J PJ <P Φ rt P. • P 0 tr iso tr 0 Ω Φ ¹ tr P. φ 11 PJ LO 0 0 0 Φ co P P. Φ μ- rt tr φ rt Φ Hl ≥i tr P

P ⁾ Φ cn φ ≥; Ω rt w Hi rt rt n Φ P μ- σ LQ μ- J φ μ- IQ H PJ = 0 rt

CD H ISJ CD P tr 00 Φ tr • 0 tr φ CQ CQ P co 3 φ tQ P μ- rt φ μ- I- ¹ rt 0 = »

CD rt 0 ISJ JP ⁾ 3 μ- 1 Ω P. 0 pr Hi rt CD 0 Pi μ> ISl CQ μ-

Φ l LQ Φ N 0 0 0 α PJ P 0- tr * d. N 0 = Pi Φ cn ^> d P ⁾ μ- Φ CD Ω

0 M Φ 0 Φ 0 0 = CQ CQ J rt i 0 = μ N P tr μ- Cß μ- i cn rf ^ φ Pi CO LQ H Φ tr

• co rt μ LQ tr Ω LQ N tr μ- P pr P = μ- P Hl φ φ Ω rt μ- o μ- Φ Φ M φ

CD> d D CD CQ Φ tr Φ s; Φ co P rt CD <! H PJ = HP ⁴ φ Pi Ω tl ≥! 0 Cd rt 0 μ- ö φ Ω 3 il Hi μ- μ- Ω LQ • CO P ⁾ rt ISI P. <1 μ- tr Φ

Ω μ- μ- tr cd Φ rt P-- 0 = D r CD Φ rt c? H 3 0 = φ ^ Ü O φ Φ co et PJ 0 tr Φ 1 H H, 11 CQ tr Ω aä Φ Φ μ- J μ- CD H il H 11 • d N 0 0

0 = tr rt PJ I μ tr φ φ μ- CQ 0 Φ LQ CQ 1 1 0 rt Φ CQ Pi μ- CD Φ Φ 1 rr Φ μ- P H Φ Φ 1 Φ μ- H 1

3 1 1 CD • 0 1 1 1 1 H 1 1 to

by the main processor of computer 60. For example, a diary program is run.

In other exemplary embodiments, constructive measures are taken in addition or as an alternative to the symmetrical encryption method with the aid of the symmetrical keys S1, S2, S5 and S6 in order to rule out manipulation.

In a next exemplary embodiment, a symmetrical encryption method is also used between the smart media card 14 and the release unit 16 or between the storage unit 62 and the release unit 64.

Symmetric encryption methods often work faster than asymmetrical encryption methods. With sufficiently fast computing technology, however, the more secure asymmetrical encryption methods can be used instead of the symmetrical encryption methods.

In another exemplary embodiment, only a circuit arrangement without a processor for executing a program is used to carry out the method.

Furthermore, in one exemplary embodiment, the key S1 or S5 is not encrypted again when it is transmitted from the release unit 16 or 64 to the smart card 20 or 68.

The exemplary embodiments are also combined.

Claims

claims

1. procedure for billing the use of digital data,

in which digital user data are stored in a user data storage unit (14, 62),

where the use of the user data is noted with the help of at least one billing date (AW, AW2),

in which the billing date (AW, AW2) is stored in a storage unit (20, 68) secured against unauthorized access,

and in which, depending on the value of the billing date (AW, AW2), use up to a predetermined value is permitted and / or with the involvement of a data transmission network (12), a billing process for billing the use of the user data is carried out.

2. The method according to claim 1, characterized in that the value of the billing date (AW) is encrypted and / or signed and transmitted via the data transmission network (12), preferably automatically when a terminal device (10, 60) containing the useful data storage unit logs on to the data transmission network ( 12).

3. The method according to claim 1 or 2, characterized g e - indicates that between two billing processes the value of the billing date (AW) is changed several times depending on the use of the user data.

4. The method according to claim 3, characterized in that the billing process is carried out when at least one predetermined value of the billing date (AW) is reached.

5. The method according to claim 1 or 2, characterized in that the billing process is started with each use or that every attempt is made to start the billing process.

6. The method according to any one of the preceding claims, characterized in that the billing process is started automatically from the side of a terminal (10, 60) which contains the user data memory, or from the side of a unit (32, 82) for executing the billing process ,

7. The method according to any one of the preceding claims, d a - characterized in that the value of the billing date (AW) can only be increased but not reduced or only reduced but not increased.

8. The method according to any one of the preceding claims, characterized in that the secured storage unit (28, 80) is contained in a chip card (20, 68) in which the billing date is stored in a processor or in which the billing date (AW ) is stored in a memory unit (28, 80) which can only be accessed by a processor (26, 78) contained in the chip card (20, 68).

9. The method according to any one of the preceding claims, characterized in that a release unit (16, 64) checks before use of the user data whether a secure storage unit (20, 68) is present,

and / or that an authorization check is carried out,

and / or that the authorization check includes the request and check of a code to be kept secret, that the release unit (16, 64) causes the debit date (AW) to be changed,

and that the release unit (16, 64) enables or blocks the use of the user data depending on the test result or on the test results.

10. The method according to any one of the preceding claims, characterized in that the user data are stored in encrypted form in the user data storage unit (14, 62),

that a digital key (DA, DB) is stored in the secured storage unit (20),

and that the user data are decrypted before use, the digital key (DA, DB) being used directly to decrypt the user data or to decrypt another key (S1) used to decrypt the user data.

11. The method according to any one of the preceding claims, characterized in that the user data are encrypted according to a symmetrical encryption method,

that a symmetrical key (Sl) for decrypting the user data is encrypted using an asymmetrical encryption method,

and that the asymmetrical key (DA) for decrypting the symmetrical key is stored in the secured storage unit (20).

12. The method according to any one of the preceding claims, characterized in that in the transmission of data from the secured storage unit (20) and / or a further encryption method and / or signature method is used for the secured storage unit (20), in particular for the transmission of an encrypted key (Sl) and the same key (Sl) after executing a decryption method for this key (Sl) with the aid of an encrypted one Storage unit (20) stored key (45, 46).

13. The method as claimed in one of the preceding claims, characterized in that the authorization of the accounting unit (32, 82) for accounting is checked before the transmission of data for carrying out the accounting process.

14. The method according to any one of the preceding claims, characterized in that the useful data contain voice data or music data or image data or multimedia data or program data.

15. The method according to any one of the preceding claims, characterized in that the user data storage unit is part of the secured storage unit (20, 68).

16. The method according to any one of the preceding claims, characterized in that e-mails or SMS messages for carrying out the billing process are transmitted via the data transmission network (12) and 7 or that the billing process with the registration of a terminal (10), 60) in the data transmission network (12 ) is performed.

17. Device (10, 60) for using user data,

with a user data storage unit (14, 62) for storing user data, with a storage unit (20, 68) secured against unauthorized access for storing a billing date (AW, AW2),

and with a network connection unit (22, 70) for connection to a data transmission network (12),

characterized in that the device (10, 60) is constructed such that a method according to one of the preceding claims is carried out during its operation.

18. Program with an instruction sequence, when executed by at least one microprocessor, a method according to one of claims 1 to 16 is carried out.

19. Use of a chip card (20, 68) in a method according to one of claims 1 to 16.