KR20000072848A - System for protecting copy of digital contents - Google Patents

Abstract

PURPOSE: A system for preventing a digital contents piracy is provided to make all systems connected to users generate many keys to share the keys to each other and to download or upload digital contents by using a secret channel formed between devices performing reciprocal communication, so as to prevent the digital contents from being pirated. CONSTITUTION: An authorization unit(10) supplies coded digital contents or generates/delivers a manufacture key or manufacture key information, and codes/delivers an authentication certifying key and authentication certifying key information. A portable terminal supplier(20) delivers a registration requesting signal to the authorization unit, and receives the manufacture key and the manufacture key information. Contents suppliers(30) receive one pair of keys and information on the pair of the keys generated from the authorization unit, to deliver the registration requesting signal to the authorization unit and to authorize supply of the coded digital contents. Internet appliances(40) receive the digital contents to deliver the registration requesting signal to the contents suppliers, and receive the coded pair of the keys and the information on the keys, to receive a public key and public information generated by the registration requesting signal.

Description

System for protecting copy of digital contents

The present invention relates to a digital content unauthorized copy protection system.

More specifically, in order to prevent unauthorized copying of encrypted digital content downloaded by a user, all systems connected to the user generate and share a plurality of keys that can be shared with each other, and perform mutual communication. A digital content unauthorized copy protection system for downloading or uploading digital content using a secret channel formed between devices.

Recently, the communication environment has developed rapidly, each individual has an Internet appliance (Internet appliance) equipped with communication equipment, it is possible to access a variety of information.

The above-mentioned Internet appliances include PC phones, PDAs, web phones, mobile phones, and the like.

Therefore, there are digital content providers who want to provide more digital information to the above-mentioned Internet appliances. The above-mentioned digital content includes not only audio information and video information compressed according to the MP3, AAC, and G2 methods, but also character information such as a music lyrics and a movie subtitle.

The above-mentioned digital content can be downloaded and played back to the portable terminal as well as the Internet appliance. And it can be downloaded from a portable storage medium and mounted on another portable terminal to play.

At this time, the portable storage medium can copy the contents of one storage medium as it is, according to the method of dead copy, there is a problem that can be illegally copied digital content.

Accordingly, it is an object of the present invention to solve the above-mentioned problems and to prevent unauthorized copying of encrypted digital content downloaded by a user for reproduction, a plurality of keys that can be shared with each other by all systems connected to the user. The present invention provides a digital content unauthorized copy protection system that downloads or uploads digital content using a secret channel formed between devices that generate, share, and communicate with each other.

1 is a schematic diagram for explaining a digital content unauthorized copy protection system of the present invention;

2 to 5 are views for briefly explaining a case in which each block applied to FIG. 1 attempts to reproduce a registration request or digital content.

6 is a diagram illustrating an example of a file format supported by the present invention;

7 illustrates an output source that may be additionally connected to the present invention;

FIG. 8 is a diagram illustrating an input control block diagram for supporting the output source of FIG. 7.

* Description of Signs of Main Parts of Drawings *

10: Authorization means

20: portable terminal supply means

30: content supply means

40: Internet Appliance

50: portable terminal

60: storage medium

In order to achieve the above object, the present invention provides an authentication entitlement key that can generate, transmit, and provide a manufacturing key and manufacturing key information so that encrypted digital content can be supplied, received, reproduced, and output. And an authorization means for encrypting and transmitting the key information, a portable terminal supply means for transmitting a registration request signal to the authorization means, and receiving a manufacturing key and manufacturing key information generated by the registration request signal, and authorization means. A content supply means for transmitting a registration request signal to the mobile terminal, and receiving a pair of keys generated by the authorization means and the key information to authorize to provide the encrypted digital content generated by the registration request signal; Sends a registration request signal to the content supply means to receive, reproduce and output digital content supplied from the content supply means And a pair of keys encrypted to receive the public key, the public key information, and the digital content generated by the registration request signal, and the Internet appliance receiving the key information.

In addition, the present invention for achieving the above object is to provide a first key having a manufacturing key, a manufacturing key information and the manufacturing key and manufacturing key information to supply, or receive and reproduce encrypted digital content. A pair of authentication authentication keys and authentication authentication keys to form an ID of the portable terminal, information encrypting the token with a manufacturing key, a second table having a token, and to supply digital content to the portable terminal in pairs with the table. Authorization means for generating and sending the information, Sending the registration request signal to the authorization means, and a portable terminal supply means for receiving the manufacturing key and manufacturing key information generated by the registration request signal, Registration request to the authorization means A pair of licensed persons capable of transmitting a signal and providing encrypted digital content generated by the registration request signal A content supply means for receiving a key and key information, receiving a second table of the authorization means, and digital content supplied from the content supply means for transmitting and reproducing a registration request signal to the content supply means for reproduction and output. And receiving the public key and the public key information generated by the registration request signal, bypassing the manufacturing key information from the content supply means, and detecting and encrypting the table information corresponding to the manufacturing key information from the second table. After receiving and storing the Internet appliance to transmit, and the manufacturing key and manufacturing key information transmitted from the authorization means, and transmits the manufacturing key information to the content supply means through the Internet appliance, corresponding to the one transmitted from the Internet appliance It includes a portable terminal for receiving the manufacturing key information of the encrypted second table The.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a schematic diagram for explaining a digital content unauthorized copy protection system according to the present invention. As shown in FIG.

The authorization means 10 forms a first table having a manufacturing key, manufacturing key information, and the manufacturing key and manufacturing key information so as to supply, or receive and reproduce encrypted digital content. Form a pair of ID of the portable terminal, information encrypted with the token with the manufacturing key, a second table having the token, and generates and sends a pair of authentication key and authentication key information for supplying digital content to the mobile terminal. .

The portable terminal supply means 20 sends a registration request signal to the authorization means 10 described above, and receives the manufacturing key and manufacturing key information generated by the registration request signal.

The content supply unit 30 transmits a registration request signal to the authorization means 10 described above, and provides a pair of keys and key information that are entitled to provide encrypted digital content generated by the registration request signal. And the second table of the above-mentioned authorization means 10 is received.

The Internet appliance 40 transmits a registration request signal to the content supply means 30 to receive, reproduce, and output digital content supplied from the content supply means 30, and the public key generated by the registration request signal. Public key information is received, the manufacturing key information of the portable terminal 50 is bypassed to the content supply means 30, and only the table information corresponding to the manufacturing key information is detected from the second table, and then transmitted.

The portable terminal 50 receives and stores the manufacturing key and the manufacturing key information transmitted from the authorization means 10, and transmits the manufacturing key information to the content supply means 30 through the Internet appliance 40. The Internet appliance 40 receives and stores the manufacturing key information of the encrypted second table corresponding to itself.

The operation of the digital content unauthorized copy protection system according to the present invention configured as described above will be described in more detail with reference to the accompanying drawings.

2 to 5 are diagrams for explaining a key and key information flow for each block applied to FIG. 1 when the user wants to reproduce a registration request or digital content.

2 to 5 are diagrams illustrating specific embodiments of the present invention, wherein the authorization means 10, which is a term used in the present invention, is a CA (Certificate Authority), and each device can receive digital content. The mobile terminal supply means 20 is a MA (Manufacture), a company that manufactures and supplies a mobile terminal, and the content supply means 30 is an Internet service provider (ISP). The device for supplying the content, the Internet appliance 40 is a licensed SDMI Compliant Module (LCM) that can be used by a user, such as a general PC, the portable terminal 50 is represented by a PD, the storage medium 60 Is expressed in PM.

First, the portable terminal supply means 20 transmits a registration request signal for registering the portable terminal 50 manufactured by the authorization means 10.

Then, the authorization means 10 generates a manufacturing key (MK _pd ) and manufacturing key information (Cert _CA (ID _MK )) that each portable terminal 50 can have uniquely to the portable terminal supply means 20. send.

Therefore, the portable terminal supply means 20 transmits the manufacturing key and the manufacturing key information granted from the authorization means 10 in the process of manufacturing the portable terminal 50 to a temper resistant area of the portable terminal 50. Save it so that other users cannot know it.

Meanwhile, the authorizing means 10 generates a manufacturing key and manufacturing key information to be provided to the portable terminal supply means 20 as described above, and generates a token at random.

That is, the authorizing means 10 has two tables. The first table is a table owned by the authorizing means 10, and has a table with the above-described manufacturing key and manufacturing key information.

On the other hand, the second table is a Manufacture Key Information Table transmitted by the authorizing means 10 to the content supply means 30, the ID (Identifier) of the portable terminal 50, the manufacturing key Token encrypted by the table, information about the token (see Figure 3 attached).

In this way, the portable terminal 50 supplied from the portable terminal supply means 20 described above is authorized to download and reproduce the encrypted digital content to the authorization means 10.

In addition, the content supply means 30, like the portable terminal supply means 20, should be authorized by the authorization means 10, in order to do so, the content supply means 30 is a registration request signal to the authorization means 10. Send the.

Then, a key and key information are generated between the authorization means 10 and the content supply means 30 as shown in FIG. 2.

That is, when the registration request signal is input from the content supply means 30, the authorization means 10 generates PrvKey _eph and PubKey _eph which are Private Keys and Public Keys.

Then, a pair of keys and {PrvKey _ISP , PubKey _ISP, Cert _CA (PubKey _isp )} _, which are semi-permanently remaining in the content supply means 20, are generated and two tables are generated according to the manufacturing key. Is generated.

In addition, the above-mentioned authorization means 10 and the content supply means 20 share a key generated by EC_DH (CA, ISP) with each other as a channel key, and the channels are securely formed by the shared channel keys. Illegal users cannot download any information from the channels mentioned above.

Meanwhile, the authorizing means 10 encrypts the key and the key information generated through the channel described above with a shared key and transmits the same to the content supply means 50. Then, by decrypting the transmitted information using the key shared with the authorization means 10, and stored in the storage means provided in the content supply means 50, the authorization means 10 and the content supply means 30 The setup between) ends.

After the above process is performed, the Internet appliance 40 sends a registration request signal to download the encrypted digital content from the content supply means 30. Then, the content supply means 30 transmits its public key and public key information PubKey _ISP, Cert _CA (PubKey _ISP ) to the Internet appliance 40, the Internet appliance 40 stores.

The key generated by the EC_DH (ISP, LCM) is a channel key shared by the content supply means 30 and the Internet appliance 40, and forms a channel between the content supply means 20 and the Internet appliance 40. And securely receive digital content on this channel.

In addition, a pair of permanent private key and public key of the Internet appliance 40 from the content supply means 30 is securely supplied through the channel, thereby securely providing digital content between the content supply means 30 and the Internet appliance 40. A downloadable system is implemented.

At this time, when a registration request signal is input from the portable terminal 50 to the Internet appliance 40, the portable terminal 50 encrypts the manufacturing key information provided from the authorization means 10 with the public key of the content supply means 30. After the transmission to the content supply means 30 through the Internet appliance 40.

Then, the content supply means 30 decrypts the transmitted encrypted information, and compares the decrypted result with the information that the second table has, and if there is matching information, the content supply means 30 encrypts the contents of the table. After the transmission to the Internet appliance 40, and decrypted in the Internet appliance 40 to obtain a token.

At this time, the channel key CK _PD-LCM is randomly generated in the Internet appliance 40, and the channel key is generated to be kept secret. At this time, the above-mentioned channel key is encrypted using the token decrypted by the Internet appliance 40 and then transmitted to the portable terminal 50.

Then, the portable terminal 50 reads the token value from the information read from the second table of the content supply means 30 of the transmitted information using the stored manufacturing key.

In addition, the channel key is shared with the Internet appliance 40 by decrypting the encrypted information using the token value read as described above to obtain and store the channel key. As a result, the registration process of the portable terminal 50 is completed.

In this way, the entire system is given all the rights to receive encrypted digital content with each other.

Finally, the Internet appliance 40 has a database in order to prevent unauthorized copying in downloading the digital content provided from the content supply means 30 to the portable terminal 50. This database is named RMS-DB, as shown in FIG.

The database described above is applied to digital content processing performed between the Internet appliance 40 and the portable terminal 50. Here, the area constituting the database is composed of a title or title ID area of the digital content, an update token information (UTD) area, an information area on the current status of the digital content, and a playback control information area.

The database described above is stored in the Internet appliance 40 in an encrypted form by a secret key () possessed by the Internet Appliance 40. Among the above, the most important characteristic of the update token is the downloading of arbitrary digital content to the portable terminal 50 between the Internet appliance 40 and the portable terminal 50, or from the portable terminal 50 to the Internet appliance 40. When uploading any digital content to), a change occurs. At this time, the changed update token is transmitted to the Internet appliance 40 again through the portable terminal 50 to update the update token stored in the Internet appliance 40.

Each time the Internet appliance 40 initially plays digital content, information in the content file format is newly registered on the above-mentioned database. In this way, the content registered in the database should check its legitimacy with reference to the database every time a playback operation is performed.

In addition, when downloading or uploading digital content between the Internet appliance 40 and the portable terminal 50, the digital content is copied to the counterpart by checking an information area on the status of the digital content, which is the third area of the database. Whether it is sent in the form or the content itself is sent.

In addition, by checking the check in / out, it is possible to know the transmission status of the digital content. In other words, if it is checked, it indicates that the digital content has not been downloaded from the Internet appliance 40 to the portable terminal 50. If it is checked out, the digital content is downloaded from the Internet appliance 20 to the portable terminal 50. Or the downloaded digital content is uploaded to the Internet appliance 40 again.

In addition, the last area is a reproduction control information area, and includes information on the number of times of reproduction, expiration period of digital content reproduction, and information on the slope period of digital content.

That is, as described above, it is a numerical value set when the digital content is provided from the content supply means 30, and the number of playbacks is controlled by counting down one by one for each download.

The digital content playback expiration period does not control the playback and output status of digital content by the number of playbacks, but checks the playback expiration period already set at the time of download and makes the digital content available only during that period. Irrelevant

Finally, as the pardon period of the digital content, the content supply means 30 downloads the above-mentioned digital content from the content supply means 30 as the content supply means 30 does not have a play count or a use period for the digital content of low value. It can receive and play indefinitely.

On the other hand, when the content supply means 30 accepts the content download request of the Internet appliance 40, first confirms the ID of the Internet appliance 40, and then downloads the content having a predetermined file format to the Internet appliance 40 do.

An example of the above-described file format will be described with reference to FIG. 6 as follows.

The file format supported by the present invention includes a content description field having information such as title ID field, composer, singer, record label of digital content, algorithm identification field having algorithm identification information such as ECC, SNAKE, CODEC, device ID, ISP_ID, etc. Is composed of a SOI field indicating a source output means from which current information such as LSP_ID and PD_ID is output, a COPYRIGHT HOLER INFORMATION (CHI) field indicating a copy owner information, a light management field, and a content encryption key field. .

Here, ISP_ID in the SOI field is the content supply means 30 of the present invention, LSP_ID is the Internet appliance 40, and PD_ID is the portable terminal 50.

When downloading and playing the digital content having the above-described format, the Internet appliance 40 first finds out an encryption algorithm from the AIF field or the PH field, and uses the found encryption algorithm to determine the private key of the Internet appliance 40 from the SH field. Restore

Then, the ID of the Internet appliance 40 and the ID in the DEVICE-ID field are compared and checked, and the copy control state, the reproduction control state, and the transmission control state are checked from the RMF information, and the Internet appliance 40 carries them. Register in existing database

Then, the CBK field is used to recover the digital content encryption key and return the digital content to play back.

If the Internet appliance 40 does not violate any of the above, the content supply means 30 downloads the digital content to the Internet appliance 40.

In particular, in the case of changing the reproduction control state in the RMF field, the Internet appliance 40 must replace the reproduction control state information in both the database and the file format with information to be changed.

As described above, when the digital content downloaded from the Internet appliance 40 is to be downloaded and played back to the portable terminal 50, the following procedure should be performed.

First, the Internet appliance 40 requests the portable terminal 50 to the portable terminal ID and the UTD information of the portable terminal 50.

The portable terminal 50 then encrypts the UTD with the channel key (CK _PD-LCM ) of the internet appliance 40 and transmits the UTD to the internet appliance 40 together with the portable terminal ID. At this time, the Internet appliance 40 checks the information transmitted from the portable terminal 50 and then returns the portable terminal ID and compares the UTD and SH fields with the portable terminal ID on the database.

If the above-described UTD is correct, but the RMF is changed, the Internet appliance 40 must update both the database and the file format with the RMF digital content.

The Internet appliance 40 updates the database with the newly created UTD, and the newly generated UTD is encrypted by the channel key CK _PD-LCM and then transmitted to the portable terminal 50.

If the transmission control state is 'Transfer' state, the digital content is transferred to the portable terminal 50 and then replaced by 'Transferred'. At this time, the above-described transmission control status field does not exist in a file format in the database of the Internet appliance 40. That is, the transmission control status field has three types such as 'Transfer', 'Transferred', and 'Transfer-non'.

The copy control state, on the other hand, is initially referred to as Check-in and is replaced by Check-out on the database and file format of the Internet Appliance 40 after the digital content has been transmitted.

If the copy control status field is referred to as 'copy-never', the digital content of the Internet appliance 40 is not downloaded to the portable terminal 50.

If any of the above procedures are not violated, the digital content is downloaded to the portable terminal 50.

In the system, a method of processing digital content from the portable terminal 50, which can be regarded as the last step, to the storage medium 60 will be briefly described as follows.

First, if there is a unique ID in each portable storage medium 60, in order to record the digital content on the storage medium 60 in the portable terminal 50, only the content is recorded on the storage medium 60, The recorded digital content is returned to the Secret Header, and the digital content is re-encrypted using the unique ID of the storage medium existing on the storage medium 60 as an encryption key.

Second, if there is no unique ID for each storage medium 60, the portable terminal 50 only records the content on the storage medium 60 to record the digital content on the storage medium 60. The recorded digital content is returned to the secret header and encrypted again using a randomly generated key.

Herein, a randomly generated key T is encrypted by S, which is a general secret key. At this time, the general secret key S is preset by the manufacturer of the portable terminal.

The encrypted T is recorded in the hidden area of the storage medium 60.

As described above, in the first case, all the digital content in the storage medium 60 can be played in all the portable terminals 50. However, in the second case all the content in the storage medium 60 can only be played back by the portable terminal produced by the manufacturer adopted in this system.

The digital content referred to in the present invention can be uploaded to any Internet appliance as well as any portable terminal.

The present invention has a transmission control status field in both the database and file format that the Internet Appliance 40 has. The present invention supports not only downloading digital content from the Internet appliance 40 to the mobile terminal 50 but also uploading the digital content from the mobile terminal 50 to the Internet appliance 40.

If 'transfer' is indicated in the field of the digital content, the digital content is downloaded to the portable terminal 50, and the relevant field of the database of the Internet appliance 40 is replaced with the 'transferred' mark in the 'transfer'. The downloaded information is downloaded to the portable terminal 50.

The digital content downloaded to the portable terminal 50 cannot be reproduced on the internet appliance 40 until it is uploaded to the internet appliance 40 again. However, the digital content downloaded from the storage medium 60 can be played on any portable terminal 50. The portable terminal 50 may in some cases be uploaded to another Internet appliance 40.

In addition, a variety of input devices may be additionally connected to the Internet appliance 40 or the portable terminal 50 to which the present invention is applied. As shown in FIG. 7, the Internet appliance 40 and the portable terminal ( Additional inputs to 50) include RedBook CD, Audio CD, Super Audio CD, DVD Disk and Analog Devices.

FIG. 8 is a diagram for explaining input control of the output source illustrated in FIG. 7 described above.

As shown, the API (Application Program Interface) is responsible for identifying whether the input is legally authenticated to the system supported by the present invention, and also extracting the information necessary to convert the input into a file format supported by the present invention. Do it.

The authentication confirmation of the above-described input is that if the information of the input device has a watermark, the above-described API should be able to detect it. In addition, when the information of the input device has an encrypted form, the above-described API should not only extract an encryption key and an encryption algorithm, but if the information of the input device has an encrypted form, the API includes information of the input device. The storage medium should be checked for authenticity of the recording format.

Information required for the above-described API to be delivered to the import control layer includes information on the type of storage medium, for example, audio CD and DVD audio. In addition, information on digital content, that is, information on an initial form of input digital content, for example, a title, a player, a singer, and the like.

In addition, in the input control of the portable terminal, the information on the encryption key, which is information on the encryption algorithm, is input by the input control layer and receives a certain amount of information from the authenticated input API. Rebuild to match file format.

Copy control status, i.e. 'not copyable', or 'check in / checkout (optional)', playback control status, i.e. 'playback = infinite or number (optional)', transmission control status, i. Indication, 'LCM_ID' is indicated by the SOI field and the device ID field of the secret header.

If the input digital content is not encrypted, a key is randomly generated and encrypted by the key. That is, when the input digital content has a form encrypted by a different encryption algorithm from the portable terminal, this layer trans-encrypts the content played back on the portable terminal.

The secret header part is encrypted with the public key according to the public key of the Internet appliance.

In addition, the interface layer of the portable terminal applied to the present invention authenticates the connected portable terminal by checking whether the portable terminal has the correct ID and the secret channel key.

On the other hand, the analog input input to the above-described portable terminal, the input control layer in the PDFM to create the compressed digital content supported by the present invention from the analog input according to the rules listed below.

That is, as soon as each frame of analog input is received, the input control layer first encodes the frame and then encrypts the encoded frame using a randomly generated key. If all frames are encrypted, follow these steps.

Copy control status, ie 'not copyable', or 'check in / check out' (optional), playback control status, ie 'playback = infinite or number (optional)', transmission control status, i. Indication, PD_ID is indicated by the SOI field and the device-ID of the secret header.

The above-described portable terminal encrypts the secret header by its channel key. That is, if the digital content supported by the present invention has an SOI field of the secret header indicated by "PD-ID" when converted from the analog input, the unique ID of the storage medium is not used when recording the digital content on the storage medium. Do not. This means that the analog input to the portable terminal is not portable.

Finally, one of the output source devices is a kiosk that can be viewed as a machine or store that makes and sells the digital content supported by the present invention transmitted from CD-ripping to a storage medium.

Here, we consider a kiosk machine as a special Internet appliance with an interface to a storage medium. In this case, the storage medium interface can be used only by the copyright holder and the digital content supply means through a special contract.

Therefore, as described above, the present invention allows the illegal user to take digital content by interchanging channel keys and forming a secure channel with each other, through which the whole system communicates with each other. In addition to the digital contents, which are legally downloaded by a legitimate user, the portable terminal also has the above-described configuration, thereby providing an effect of preventing unauthorized duplication between each other.

Claims (16)

Claims [1] A digital content copy protection system capable of receiving, decrypting, playing and outputting digital content encrypted by an encryption algorithm. Authority to generate and transmit manufacturing key and manufacturing key information so that the encrypted digital content can be supplied or received, reproduced, and output, and an encryption credential key capable of providing digital content and the key information are encrypted and transmitted. Grant means; A portable terminal supply means for transmitting a registration request signal to the authorization means and receiving a manufacturing key and manufacturing key information generated by the registration request signal; A pair of keys generated by the granting means and the contents of the key information to transmit a registration request signal to the granting means, and to entitle to provide the encrypted digital content generated by the registration request signal. Supply means; And To receive, reproduce and output the digital content supplied from the content supply means, to send a registration request signal to the content supply means, and to receive the public key and public key information and digital content generated by the registration request signal An unauthorized copy protection system for digital content, comprising a pair of encrypted keys and an Internet appliance receiving the key information. 2. The apparatus of claim 1, wherein the authorization means and the content supply means generate a first shared key for forming a secret channel, and the key and key information supplied from the authorization means to the content supply means are shared with the first share. And an unauthorized copy protection system for digital content which is encrypted by a key and then transmitted to a content supply means. The digital content unauthorized means according to claim 1, wherein the content supply means decrypts and stores the key and key information transmitted from the authorization means by using the first shared key which has the same value as the authorization means. Copy protection system. The method of claim 1, wherein the content supply means and the Internet appliance form a second shared key to form a secret channel, and the content supply means encrypts the key and key information transmitted to the Internet appliance using the second shared key. And the Internet appliance decrypts and stores the key and the key information using the second shared key shared with the content supply means. Claims [1] A digital content copy protection system capable of receiving, decrypting, playing and outputting digital content encrypted by an encryption algorithm. A first table having a manufacturing key, manufacturing key information, and the manufacturing key and manufacturing key information for supplying, receiving, and outputting the encrypted digital content, and pairing the table with the ID of the portable terminal Authorization means for forming a second table having the information, the token encrypted with the manufacturing key, the token, and generating and sending a pair of authentication authentication key and authentication authentication key information for supplying digital content to the portable terminal; A portable terminal supply means for transmitting a registration request signal to the authorization means and receiving a manufacturing key and manufacturing key information generated by the registration request signal; Sending a registration request signal to the authorization means, receiving a pair of keys entitled to provide the encrypted digital content generated by the registration request signal and the key information thereof, and receiving the second key of the authorization means. Content supply means for receiving the table; To receive, reproduce, and output digital content supplied from the content supply means, a registration request signal is sent to the content supply means, the public key and public key information generated by the registration request signal are received, and manufacturing key information is received. An internet appliance which bypasses a content supply means and detects, encrypts and transmits table information corresponding to the manufacturing key information from a second table; And Receives and stores the manufacturing key and the manufacturing key information transmitted from the authorization means, and transmits the manufacturing key information to the content supply means through the Internet appliance, the encrypted second table corresponding to itself transmitted from the Internet appliance Digital content unauthorized copy prevention system, characterized in that consisting of a portable terminal receiving the manufacturing key information. 6. The system of claim 5, further comprising a storage medium mounted on the portable terminal and receiving and storing digital content supplied from a content supply unit through the portable terminal. The method according to claim 5, wherein the authorizing means and the content supplying means generate a first shared key for forming a secret channel, and the key and key information supplied from the authorization means to the content supplying means are shared with the first sharing key. And an unauthorized copy protection system for digital content which is encrypted by a key and then transmitted to a content supply means. 6. The unauthorized content of a digital content as claimed in claim 5, wherein the content supply means decrypts and stores the key and key information transmitted from the authorization means by using the first shared key that is the same as the authorization means. Copy protection system. The method of claim 5, wherein the content supply means and the Internet appliance form a second shared key to form a secret channel, and the content supply means encrypts the key and key information transmitted to the Internet appliance using the second shared key. And the Internet appliance decrypts and stores the key and the key information by using the second shared key shared with the content supply means. 6. The system of claim 5, wherein the token is randomly generated by an authorization means. 8. The Internet appliance of claim 7, wherein the Internet appliance randomly generates and encrypts a channel key to form a secret channel with the portable terminal, and transmits the encrypted channel key to the portable terminal, and the portable terminal decrypts the channel key transmitted from the internet appliance. And copy protection system for storing digital content for sharing. 12. The method of claim 7 or 11, wherein the second table encrypted in the portable terminal is decrypted using a manufacturing key stored in the portable terminal to find a token, the channel key shared with the Internet appliance using the token. Digital content unauthorized copy protection system, characterized in that the decrypted and stored. In a digital content copy protection system that downloads digital content from an Internet appliance to a portable terminal, or uploads digital content from a portable terminal to an internet appliance, The internet appliance has a database having information necessary to check the legitimacy of the digital content to prevent unauthorized copying of the digital content, the database being encrypted by a channel key randomly generated by the internet appliance, Decrypt the encrypted information and compare the information with the database to determine whether unauthorized copying of digital content, The portable terminal decrypts the encrypted information transmitted from the internet appliance using a channel key shared with the internet appliance, updates the token, and encrypts the updated token and transmits the updated token to the internet appliance. Digital Content Unauthorized Copy Protection System. 15. The system of claim 13, wherein the database is divided into a title ID of the digital content, an update token information area, an information area on the current status of the digital content, and a reproduction control information area. 15. The system of claim 14, wherein the information area on the phenomenon of digital content is configured to copy, transmit, and download or upload digital content. 15. The system of claim 14, wherein the digital content reproduction control information area comprises information on the number of times of reproduction, information on an expiration period of digital content reproduction, and information about a slope period of digital content.