KR100608849B1 - Security method for digital contents of network device - Google Patents

Abstract

The present invention relates to a security method of digital content, and registers information of a network terminal in a content providing server, and if there is a request for content transmission in the network terminal, confirms that the network terminal has no restriction on transmission and By transmitting contents and authentication file, it is possible to download new contents immediately through communication network only in case of authorized terminal network terminal, satisfying user's needs, and restricting the use of contents that have not been paid. It is effective in increasing profitability by making it possible.

Description

SECURITY METHOD FOR DIGITAL CONTENTS OF NETWORK DEVICE

1 is a block diagram showing the configuration of a network terminal network according to the present invention;

Fig. 2 is a flowchart showing the processing of the server when the information of the network terminal is changed according to the present invention.

3 is a flowchart for explaining a schematic process until downloading and playing content in a network terminal according to the present invention;

4 is a block diagram showing a schematic configuration of an authentication database created in each network terminal according to the present invention;

The present invention relates to a network terminal, and in particular, it is possible to download new content only in the case of an authorized network terminal of a licensed business, and content for a terminal that has not been paid for the content or changes hardware without authorization. By restricting downloads, the present invention relates to a method of securing digital content that prevents the use by the stolen terminal and increases the profitability of the content provider.

Singing a song is a device that allows only accompaniment without a song, and this song was first invented in the early 1970s, when it was made possible to sing songs with cassette melodies.

This was replaced by CDs with video and music in the 1980s, and laser discs since 1984.

Since then, the song cycle has evolved, and since 1988, small groups of people have been able to enter and sing in small rooms (karaoke rooms), and because of the advantage that there is no great burden for different generations and families. It is still popular.

In addition, this karaoke culture has changed the popular music and music industry, forming a huge market by half-cycle and song content sales.

In other words, when a new song is released, the song contents provider embeds the newly arranged hit song on a chip (IC) or CD-ROM every 1-2 months and supplies it to each karaoke store through a distributor. This is because the number of units reaches tens of thousands, and the profit from the sale is beyond imagination.

However, there is a problem that the operation method and profit structure are not strong or reflect the current situation compared to the industry.

For example, the recent young generation wants to sing new songs quickly, but as described above, the karaoke store has to wait at least two months for the LD or fairy tale CD from which the latest song is edited.

In addition, song contents stored in a medium (IC, CD-ROM, etc.) are in a form that is easy to copy, and the medium can be used for any half-period of the song, resulting in illegal copying by a non-authorized distributor. There was a problem that could hinder the development of the karaoke industry due to the reduced profitability of the relevant licensed companies.

In addition, the karaoke store should pay the fee as soon as the agency receives the contents in the form of IC or CD-ROM, but in reality, the karaoke store operates the store with the contents first, and irregularly pays or fails to pay the fees. For this reason, they could not continue to provide content without sanctioning the unpaid fees or urging fees.

In other words, since the karaoke shop is to receive the contents and pay the fee the next month, there is no effective way to sanction it when the fee is not paid.

Accordingly, the present invention has been created to solve the above-mentioned conventional problems, and only allows the download of new content when the authorized network terminal of the licensed business is established, and the fee has not been paid for the content or the hardware is used. The purpose of the present invention is to provide a security method of digital content that prevents the use of the stolen terminal and increases the profitability of the content provider by limiting the download of contents to unauthorized terminals.

In order to achieve the above object, the present invention registers information of a network terminal (single-half cycle) in a content providing server, and when there is a request for delivery of content in the network terminal, the content providing server provides a network with no restriction in transmission. It is characterized in that the terminal is configured to transmit the requested content and the authentication file.

Hereinafter, an embodiment according to the present invention will be described in detail with reference to the accompanying drawings.

Fig. 1 is a block diagram showing the structure of a network terminal network according to the present invention. The network terminals IK1 to IKn installed in each karaoke establishment (business A through establishment C) are agents (agent A, agency B) that manage the establishment. ) Is registered with a content provider's server (hereinafter referred to as server) by a management tool (for example, a management program).

In this case, the information registered in the server includes a unique ID of each main body of each of the network terminals IK1 to IKn, and a serial number of the unique ID and a data storage device (for example, a hard disk). SN), the Machine Key (MK) generated by the network address (Network IP) of the player, and each karaoke store code.

Fig. 2 is a flow chart showing the server process when the information of the network terminal is changed according to the present invention. When the storage device is replaced, the machine key is registered when the ID of the main body of the network terminal is registered. Changes are possible, but if the ID is not registered, it is difficult to change the machine key. In this case, the ID must be registered first to change the machine key.

In addition, when replacing the motherboard, because the ID is changed, it is the same as registering a new device, so you need to register a new ID through your dealer.

Therefore, if the device (network terminal) of the registered karaoke shop is stolen or tampered with the hardware of the device, the user cannot download the content because the authentication process does not pass when the server is accessed for content download.

In addition, when the content is downloaded, an authentication file for downloading the content is downloaded according to whether or not the fee of the content being downloaded and used is downloaded. According to the content of the authentication file, a terminal-specific authentication database in the network terminal storage device is downloaded. Is updated. Through this authentication database, it is possible to disable the reproduction of the contents when the contents are duplicated and the fee is overdue.

Hereinafter, a process for downloading content from a network terminal will be described in more detail.

Once produced, the network terminal registers the business code, the ID of the main body of the device, the machine key (MK), etc. in the content providing server through the agency managing the business when it is sold to each karaoke store.

At this time, the contents input to the network terminal is processed by receiving the initial authentication file through the agency.

In this case, the initial authentication recognizes that a fee has been paid for the contents up to the time of purchase of the network terminal, and collectively authenticates all contents up to the date registered with the server.

Next, when the network terminal registration and initial authentication process through the dealership as described above, the karaoke store can be frequently connected to the server (from the karaoke store from the next month) to download the content and authentication files, if direct access is not possible The distributor will be able to download the content.

Of course, you must go through the normal authentication procedure.

In this case, normal authentication means that when the content download request is requested, the newly generated normal authentication file is downloaded together with the billing information of the corresponding business, and the permanent authentication of the paid content is allowed only if the registered device of the relevant business is used. .

In other words, the normal authentication is applied on a monthly basis whenever the content fee is paid. For example, when the June fee is normally paid in July, billing information is input to the server, and the normal authentication file for the content in June This can be generated and sent automatically when connecting to the server or through an agency.

In the process of processing the normal authentication file, the authentication date is recorded in a memory (EEPROM: a ROM capable of modifying and additionally recording the contents) of the device itself. The previous content may be determined to have been paid for so that a free service (recovery authentication) may be received. Also, if the half-cycle information in the certification file and the half-cycle information of the corresponding company are matched at the beginning of the processing, the authentication database is not updated because the authentication process is not performed.

If the normal authentication process is correctly completed, the normal authentication date and the authentication file (authentication database) are updated in memory (not shown) in the network terminal, and the server is notified that normal authentication has been applied. If the server does not confirm successful processing of normal authentication, it sends a normal authentication file every time until successful processing is confirmed.

Therefore, if the unique ID and machine key (MK) of the network terminal is changed by the replacement of the network terminal main body and the storage device, normal authentication is not processed.

At this time, the change information should be registered in the server. When the server is connected to the server after the recovery authentication based on the change information, the normal authentication file including the modified information is automatically downloaded.

Here, the recovery authentication is an authentication applied when the network terminal information of the business is changed or the authentication database is damaged. The recovery authentication is permanent-license of songs up to the billing month (the last month in which the fee is paid).

In the above description of the initial authentication, normal authentication, recovery authentication, this authentication is to assign a license number (License Number) for each song content in order to limit security and charge overdue.

For example, temporary payment is granted until payment of the downloaded contents is confirmed and normal authentication is processed. If the fee is overdue for a predetermined period (more than 2 months), temporary-certification was held. All contents are changed to expiration-license and cannot be played. If the normal authentication is processed by paying a fee, the contents are granted permanent-authentication so that they can be played.

3 is a flowchart illustrating a schematic process of downloading and playing content in a network terminal according to the present invention. When the user boots the terminal (single cycle), an initialization process is performed.

In the initialization process, it checks the database, checks slave status (if it is a master), and waits for communication with the master (if it is a slave).

At this time, the master is a network terminal that communicates with a server or agency of a content provider, and another network terminal (slave) is dependent on the master.

Next, after the initialization process is completed, the content is downloaded from the server of the content provider.

Of course, in this case, the content and the authentication file are transmitted together with the server, and the network terminal receives the content and updates the authentication database.

When the authentication database is cleaned as described above, the master transmits the content and the authentication file received from the server to each slave, and the slave itself generates each authentication database.

Here, the authentication database generated in the network terminal encrypts the authentication type assigned to the song number according to whether or not the fee is paid by random seed (code that encrypts the ID and machine key of the cycle) and an XOR operation, and then encrypts several times. In the embodiment of the present invention, the encryption is generated using an RSA (Rivest, Shamir, Adleman) algorithm.

FIG. 4 is a block diagram showing a schematic configuration of an authentication database generated in each network terminal according to the present invention. The header portion 4a includes contents and a version indicating the authentication database, and a final authentication processing date 4c. ) Is information for limiting late payments and records the month of last payment.

Next, the lowest 100,000-byte authentication area 4e is encrypted and stored with random seed, song number, and song number for each byte, and each block is compressed into 32 bytes by RSA encryption processing. Will form.

Again, 100 32-byte blocks 4d are compressed back into the comprehensive message digester 4b via RSA encryption with the final authentication date.

As such, since each block is connected by RSA encryption, if any one of the blocks is changed, it can be determined whether the authentication database is damaged by the change in the decoding process, and a unique random seed is generated for each terminal (song half cycle). If it is copied to another network terminal, it cannot be decoded and cannot be used.

As described above, the security method of the digital content of the present invention enables the download and playback of new content only in the case of an authorized network terminal of an authorized store, and the fee is not paid for the content or the hardware is changed without permission. By restricting the download and playback of content for one terminal, it is possible to prevent the use of the stolen terminal and increase the profitability of the content provider.

Claims (15)

Receiving desired digital content and authentication information for determining whether the digital content can be reproduced through a communication network; And, Transmitting the received digital content and authentication information to a first device that receives the content from a digital content server through the communication networking and to a second device that does not support the communication network function registered in the same domain with the server. And securing the digital content. The method of claim 1, wherein the authentication information, Security method of digital content, characterized in that provided as a separate file that is separate from the digital content. The method of claim 1, wherein the authentication information, And authentication information of the content and authentication information of a device that reproduces the content. The method of claim 1 or 3, wherein the authentication information for the device, And an initial authentication by grouping an ID of the main body of the device, a machine key (MK), and the like into the same domain and registering the same in a content providing server. The method of claim 4, further comprising registering a grouping code for initial authentication of the devices. 6. The method of claim 4, wherein the initial authentication, And recognizing that a fee has been paid for all the contents up to the date of registration of the devices, and collectively authenticating all contents up to the date registered with the server. The method of claim 4, wherein the initially authenticated device, A method of securing digital content, characterized in that the device (representative device) that supports the communication network function of the device, to download the content and the authentication file of each device from the content server. The method of claim 4, wherein when a part of the configuration of the initially authenticated device is changed, And re-register the changed information in the content server. The method of claim 7, wherein when re-registering the information of the changed device, A method of security of digital content, characterized in that by performing the restoration authentication of the corresponding device by the changed information, the normal authentication file for the previously downloaded content can be downloaded and played back normally. The method of claim 1, wherein the authentication information, And digital information about the encryption code. The method of claim 9, wherein the encryption code, And encrypting an authentication type assigned to each digital content by a random seed and an exclusive OR operation, and then generating a predetermined number of encryptions by a predetermined encryption algorithm. The method of claim 10, wherein the random seed, A method for encrypting digital content, characterized in that the code encrypts the ID and machine key of the device playing the digital content. The method of claim 10, wherein the encryption algorithm, RSA (Rivest, Shamir, Adleman) algorithm, characterized in that the security method of digital content. The method of claim 11, wherein the machine key, And a serial number and a network address of a data storage device of the playback device. The method according to claim 11 or 13, wherein when the information of the content player is changed, Only when the ID of the main body of the reproducing apparatus is registered, the machine key can be changed by changing the constituent means.

Images