KR20050059347A - United p2p method for digital cartoon contents - Google Patents

Abstract

In the present invention, in the digital content protection and distribution method using P2P network method and DRM integrated, the author or buyer downloads the client program from the main server, installs on the author server or buyer server, respectively, and installs the personal information after the installation, the main Receiving a certificate from the CA of the main server by transmitting to the server, the main server stores the information of the author or buyer in the user DB and transmits to the payment server to create a virtual account; The author of the DRM registration request step of producing the content to sell, and transmits information on the product price, options, etc. for publishing the content to the main server to the client program provided for DRM in the main server; The main server encrypts using a random key as a DOI based on the transmitted information, and encrypts the encryption key again using a server public key to generate a content to which a DRM is applied to which an encryption key is assigned. A content registration step that is registered in the content registration DB of and receives a CID and is automatically posted to a search list; The purchaser searches for the desired content in a P2P manner using a client program, downloads it, makes a purchase application, selects a payment method, and pays. The paid content information is transmitted to the main server, and the main server is the P server of the payment server. / G requests the payment and the requested information is processed and the result is sent back to the main server.The main server encrypts the encrypted key of the content with the buyer's public key and sends it to the buyer server in the form of a license file. It provides an integrated P2P implementation method for protecting and distributing digital cartoon content, which is composed of a licensing phase for content.

Description

Unified P2P METHOD FOR DIGITAL CARTOON CONTENTS for protecting and distributing digital cartoon content

The present invention relates to a method of protecting and distributing digital contents by integrating P2P network system and DRM technology, and in particular, implements various forms of paid contents distribution such as B2C or C2C, and copyright information for digital contents distributed. By inserting and applying to effectively prevent piracy, and the trading partners can use the content legally, and a reliable distribution environment that can secure a profit can be implemented.

Digital Rights Management (DRM) is a technology and service that protects the interests and rights of copyright holders by preventing unauthorized use of digital content. It protects the rights and interests of digital content providers and prevents illegal copying. It is a technology that supports the creation, distribution, and management of contents such as charge of fees and payment settlement. The DRM is supported by DOI (Digital Object Identifier), a content identifier, an index for recording data required for electronic commerce, and a watermarking technology for illegal copying and tampering. Marking is a technology that can identify who is the digital copyright holder when a copyright dispute occurs after hiding confidential information in digital data. Therefore, if the content is equipped with a security authentication system for each content does not pay a certain fee, you cannot use the content.

Specifically, the method of assigning additional information, such as copyright, to content can be divided according to its insertion position. One is a watermarking technology for inserting information into the content itself. However, even if other users arbitrarily modify the watermarked content, the inserted information may be extracted later. The watermarked content can be viewed using a general viewer, but a separate program must be operated to recognize and extract the inserted information. The other is a method of packaging by encrypting the header information of the content. The packaged content is frequently used in DRM because the header information is encrypted even without unauthorized copying, so that it cannot be played without receiving a decryption key through a license.

Peer-to-peer (P2P) is a network technique that can receive information directly from all networked personal terminals, search, and even download, unlike the network-to-server method. According to the P2P method, all clients can be servers in the network regardless of system overload, server capacity, and server quality due to bottlenecks caused by numerous conventional clients connecting to one server. And the server also has the advantage of being a client.

The P2P scheme can also be distinguished from its specific form, one of which is a pure P2P scheme in which no server exists. The other is the centralized method, which stores only the location and index information of each client's content. After retrieving the location of the client through the server during retrieval, the actual transmission and reception of the content is not done via the server. It is a rising form. The other is a combination of the two approaches, where several small servers exist and they are hierarchically connected.

As such, the P2P method cannot be prepared at all for problems such as illegal copying due to the biggest feature that a client terminal can be a server (it is difficult to limit public interest by a third party).

Therefore, a method for implementing a PRM-based DRM system while preventing illegal copying of digital content has been requested, and various methods have been proposed. In particular, Korean Patent Laid-Open Publication No. 2002-14631, wherein the user accesses a P2P service site; Downloading and installing a shared program from a server and creating a shared directory; Registering for a commercial file; Confirming whether the user who applied for registration is the copyright holder; Registering the commercial file in a shared directory; Transmitting registration information of a commercial file to a server and storing the registration information in a file DB; Connecting another user to the user's computer through a shared program; Another user downloading the commercial file from the user's computer; When the download is complete, the downloaded information of the other user) is delivered to the server through the shared program and stored in the down DB and the payment DB; Accessing another user's computer by another user through a shared program; Another user downloading the commercial file from another user's computer; When the download is completed, the downloaded information of the other user (C) is transferred to the server through the shared program and stored in the down DB and the payment DB; Each predetermined period of time, the payment program has a step of calculating and notifying the amount to be paid by each user based on the contents registered in the down DB and the payment DB.

The above method allows a user who downloads a file from the copyright holder in a P2P service based on an open network such as the Internet to resell the file to another user, and pays the copyright holder a part of the resale price. You will be able to get a full reward for this and you will be able to resell the file to other users, offsetting the price you paid for downloading the commercial file, thus allowing you to use the commercial file for free or at a lower cost. . And if there are a lot of other users who have resold, they can make money. This protects the copyrights of commercial digital files that can be copied indefinitely, while providing users with the opportunity to relieve economic burdens or earn income, thereby offsetting the benefits that users can gain from piracy. There is a feature that can lead to avoid.

However, the method is positive in that it is systematically allowed to be reproduced by allowing copying, but the effectiveness thereof is extremely insignificant in that it depends on the personal will of human beings. It is impossible to trace the distribution in circulation, and even if the indicator of copyright is inserted in the data, it is virtually impossible to track the original distributor after entering the final illegal distribution stage and proceeding with a large number of copies. Can not.

In order to solve the above problems, an object of the present invention is not limited to the existing server-client method when distributing digital content, but can distribute and sell the content in a P2P manner. The present invention provides a method for commercializing content by providing a DRM system that can be produced and sold.

Still another object of the present invention is to provide a method for blocking the illegal distribution of provided content, inspiring the creativity of the content provider, and providing a differentiated service according to the credit provider's credibility.

In addition, another object of the present invention is to provide a method for previewing content downloaded by a content user before payment and refunding under certain conditions even after payment.

In order to achieve the above object, the present invention provides a digital content protection and distribution method in which P2P network method and DRM are integrated, and a client program is downloaded from a main server by an author or a buyer and installed on an author server or a buyer server, respectively. After receiving personal information and sending it to the main server, it receives a certificate from the CA of the main server. The main server stores the author or buyer's information in the user DB and transmits it to the settlement server to create a virtual account. step; The author of the DRM registration request step of producing the content to sell, and transmits information on the product price, options, etc. for publishing the content to the main server to the client program provided for DRM in the main server; The main server encrypts using a random key as a DOI based on the transmitted information, and encrypts the encryption key again using a server public key to generate a content to which a DRM is applied to which an encryption key is assigned. A content registration step that is registered in the content registration DB of and receives a CID and is automatically posted to a search list; The purchaser searches for the desired content in a P2P manner using a client program, downloads it, makes a purchase application, selects a payment method, and pays. The paid content information is transmitted to the main server, and the main server is the P server of the payment server. / G requests the payment and the requested information is processed and the result is sent back to the main server.The main server encrypts the encrypted key of the content with the buyer's public key and sends it to the buyer server in the form of a license file. It provides an integrated P2P implementation method for protecting and distributing digital cartoon content, which is composed of a licensing phase for content.

In the present invention, in the step of granting the content, the memory location in which the encrypted content is decrypted by the DRM client and contains the decrypted data block is delivered to an external viewer through a plug-in, and an event occurring in the viewer is detected by the FSFD. Therefore, when an event related to the DRM policy occurs, the FSFD checks the DRM client whether there is a license related to the event and operates only when there is no problem with the license.

In addition, the present invention is characterized in that in the pre-authentication step, the author must apply for the seller registration at the same time the certificate is granted and the grade is given according to a predetermined policy, which can be adjusted at a certain time and also to the buyer Provides a method characterized by fluctuations in the evaluation.

In addition, in the present invention, when a second buyer who searches for and downloads content from the buyer server occurs (super distribution), the author server, the main server, and the second buyer server are operated in the same manner as the license granting step performed by the buyer. It provides a method characterized in that only interworking.

In addition, the present invention, if the purchaser withdraws the payment under a certain withdrawal conditions in the license granting step, the main server withholds the payment request and finally the content verification step is made when the buyer can not withdraw the withdrawal It further provides a method characterized by including.

In another aspect, the present invention provides a method characterized in that the withdrawal condition is within a predetermined time or the number of pages after operating the content through the viewer.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. First of all, it should be noted that in the drawings, the same components or parts denote the same reference numerals as much as possible. In describing the present invention, detailed descriptions of related well-known functions or configurations are omitted in order not to obscure the subject matter of the present invention.

The present invention basically consists of a main server, an author server, a purchaser server, and a payment server including a DRM. First of all, the author prepares the contents to be sold and sets the product price and options for the contents publishing with the client program provided for DRM in the main server, and then requests the publication to the main server. Thereafter, a product number is obtained from the main server and a content to which the DRM to which an encryption key is assigned is applied is generated. The generated content is registered in the P2P shared folder (content registration DB) of the author server (which may be a computer), receives a CID (content identifier), and is automatically posted to a search list. The published content may search for content that a buyer wants to purchase through a P2P search engine pre-installed in the author server. When the content to be purchased is selected, the content file is downloaded, the content to be purchased is selected through a preview file, etc., and then the approval is approved. Authorized payment information can be paid through the author's preset bank virtual account system through the payment server, and a certain amount can be paid to the operator who operates the main server. In other words, when a purchaser purchases content, the balance in the purchaser's account is transferred to the transaction guarantee system (escrow). When the purchaser confirms the content and selects the purchase completion, the purchaser can automatically enter the seller's account. If the payment is approved, the information is transferred to the main server and the content can be viewed with an authorized license on the main server. In addition, after the content can be viewed with the authorized use right, the settlement amount may be paid to the author in real time on the main server. 1 schematically illustrates this series of processes.

The concepts described above will now be described in detail.

Author or buyer should install P2P client program on their server. The program may include a messenger function for forming a community, a search system for easily and quickly searching, an automatic PR transmitter for promoting an asset, and the like to enable a basic network for distribution. In order for the author and the buyer to use the method according to the present invention, a general member registration procedure is performed and a certificate is granted through CA (Certificate Authentication) of the main server, and the main server stores the author or buyer's information in the user DB and pays the bill. Send to the server to create a virtual account. After logging in, you are recognized as a full user. In the present invention, the CA is responsible for issuing certificates, distributing public keys according to user requests, and managing certificate revocation.

The author must apply for seller registration with the certificate, and receive a grade according to a predetermined policy. In a preferred embodiment of the present invention, the pay can be divided into six levels. For example, it can be classified into rookie, junior, senior, semi-pro, pro, and major, and the grades available for sale and the number of publications can be differentially applied. The evaluation procedure assigns a grade to the qualification requirements after automatic calculation of scores based on the number of sales and seller credit for the last three months. However, in the case of a major, a grade may be granted only when the upgrade request is made directly to the operator after the evaluation requirement is achieved. An example of calculating the author's rating criteria based on the number of sales and seller credit is shown in the following table.

division Sales in the last 3 months Credit rating in the last 3 months Sales amount per case (KRW) The number of monthly publications Remarks major 500 80 2,000,000 or less No limit Separate examination Pro 100 70 500,000 or less 1,000 Semi-pro 50 60 30,000 or less 100 senior 40 60 10,000 or less 30 junior 30 60 3,000 or less 20 Rookie - - 1,000 or less 10 New registration

* Only when 2 items are achieved simultaneously

* Number of sales: Only when the purchaser downloads the contents registered by the author to his server and selects the contents view and pays the bill.

The evaluation period may be graded on a specific day of each month and the grade can be moved only one step. In addition, buyers can be penalized by requests for use, content purchase satisfaction, and credit rating.

Authors can now publish content, where content publishing refers to the process of inserting and encrypting meta data such as watermarking and content authoring information in the original content. Specifically, the author can first select the original content to be published and set sales options such as preview file creation and file usage count. In addition, product attribute definitions can be defined that define prices, classifications, and sales policies. After that, the defined content requests DRM registration to the main server, and the main server encrypts using a random key that expresses a DOI, and encrypts the encryption key again using a server public key. The DRM information requested by the main server is stored in the DOI DB, and the author server always stores a list of DRM contents generated. The DOI plays a role of registration management of author information, content DOI grant (unique identification number and key assignment), content distribution statistics, access payment processing and result notification to P / G when requesting payment.

On the other hand, when explaining the flow of the buyer, the encrypted content key is decrypted using the buyer's private key given from the DRM of the main server, and the actual encrypted content is mixed using the decrypted content key. As described above, the purchaser has already installed the client program on the purchaser server and the necessary authentication has been formed.

The buyer first searches for a product (content) to purchase as a P2P search tool generated by the client program. After searching, it is determined whether to purchase through the sales policy and preview file of the content to be purchased, and then downloads the content that is intention of purchase. After completing the download, make a purchase request (specifically, it may be the same as clicking the purchase button), and then select and pay the desired payment method. The information of the paid content is transferred to the main server, and the main server requests payment approval from the payment server (P / G), and the requested information is processed (transmitted to the virtual account of the operator and author) and then the result is returned to the main server. Is sent. Grant the right to use the content. When issuing a key to the buyer, it encrypts the key whose content is encrypted with the buyer's public key and sends it to the buyer in the form of a license file. 5 schematically illustrates the process.

FIG. 6 schematically illustrates a process in which the content is decrypted. First, the encrypted content is decrypted in the DRM client, and the memory location where the decrypted data block is placed is transmitted to an external viewer through a plug-in. Events (actions) occurring in the viewer are monitored by the File System Filter Driver (FSFD), and when an event (action) related to the DRM policy occurs, the FSFD checks the DRM client to see if there is a license related to the event. An action can only be played if there is no.

Meanwhile, in the content DRM registration step, the author implements the encryption compression method according to the present invention. The principle of creating an encrypted compressed file is as follows. First select a folder to encrypt and extract to extract all the content files in that folder. A content key for encrypting each of the corresponding content files is randomly generated with a predetermined byte size, and this is referred to as an encryption random key. In the present invention, the content key is preferably 64 bytes. Encrypt the content file in blocks by using the browfish encryption algorithm, which is a symmetric key algorithm, using the encryption random key generated as an encryption key again. The 'folder name' then encrypts all content files within the selected folder in the same manner and selects all encrypted content using, for example, a 'ZIP' compression algorithm. zip 'to the same file. At this time, header information for identifying each content is inserted at the beginning of the file. The header is preferably 4096 bytes. Finally, the random key encrypting the content is encrypted and stored using the RSA private key of the main server using an asymmetric key algorithm.

On the other hand, the encrypted compressed file is subjected to a decryption process for play on the purchaser server by the purchaser's selection (download). In the present invention, the decryption of the encrypted compressed file is proposed as a preferred embodiment in which the key encrypting the content is managed using the PKI method. Specifically, the purchaser server requests the main server to decrypt the encryption compressed file. At this time, the requested buyer's RSA public key is transmitted to the main server, and the main server decrypts the encryption key of the corresponding content using the author's RSA private key. When delivering to the requested buyer, the content encryption key is encrypted by using the buyer's RSA public key for communication security. The purchaser server extracts the content encryption key received from the main server using its RSA private key and checks the validity of the content encryption key using the encrypted compressed content. In this case, if it is determined to be a valid key, the encrypted compressed content is decompressed and stored in a directory corresponding to the content name, and when the encrypted content file in the directory is executed, the encrypted content is decrypted using the extracted content encryption key.

The directory created at this time is automatically deleted at the end of the viewer, and the encryption is applied to each file, thereby preventing the possibility of illegal copying.

Example

Referring to an embodiment according to a preferred embodiment of the present invention, first, a publishing wizard for generating DRM content is provided as follows.

Thereafter, information on the published content may be input to set a price according to the DRM policy.

Check the following publication.

Finally, when the publication is completed, the following window is formed.

In the content distribution method according to the present invention, when a buyer occurs in two stages, that is, when a second buyer occurs (super distribution), the prior art blocks the original payment or pays a predetermined fee to the first buyer, who is the buyer immediately. The scheme was proposed. However, as described above, since the fear of illegal copying cannot be prevented as described above, in the present invention, it is preferable that even the second purchaser purchases and operates the content in the same manner as the first purchaser performed. However, the target to which the second buyer can download the content will be the DB of the first buyer server.

In addition, as a preferred embodiment of the present invention, the payment request from the main server to the payment server through the payment application of the buyer, but if the purchaser's intention changes (return), the main server withholds the payment request and finally When the condition is satisfied may include a content confirmation step of making a payment. Specifically, the condition may be limited within a predetermined time or the number of pages after operating the content through the viewer, which may be changed according to the operator's policy.

As described above, the method according to the embodiment of the present invention is not limited to the existing server-client method when distributing the digital content, but can distribute and sell the content in a P2P manner so that anyone can easily produce and sell the digital content. Since the content can be commercialized by providing a DRM system, authors can easily browse their creations in the public, and buyers can easily search for contents with various fields and information.

In addition, by blocking the illegal distribution of content, it is possible to inspire the creative will of the content provider and provide a differentiated service according to the credit provider's credibility.

In addition, content downloaded by content buyers can be previewed before payment and refunded under certain conditions even after payment, enabling consumer-oriented operation.

The present invention described above is not limited to the above-described embodiment and the accompanying drawings, and various substitutions, modifications, and changes are possible within the scope without departing from the technical spirit of the present invention. It will be evident to those who have knowledge of.

1 is a schematic diagram showing an entire distribution path according to an embodiment of the present invention.

2 is a schematic diagram showing an overall information movement system according to an embodiment of the present invention.

Figure 3 is a schematic diagram showing a pre-authentication step according to an embodiment of the present invention.

Figure 4 is a schematic diagram showing a DRM registration request and content registration step according to an embodiment of the present invention.

Figure 5 is a schematic diagram showing a licensing step according to an embodiment of the present invention.

Figure 6 is a schematic diagram showing a license decryption process according to an embodiment of the present invention.

Claims (6)

In the digital content protection and distribution method that integrates P2P network method and DRM, The author or the buyer downloads the client program from the main server, installs it on the author server or the buyer server, respectively, installs the personal information and transmits it to the main server to receive a certificate from the CA of the main server, and the main server is the author. Or pre-authentication step of storing the information of the buyer in the user DB and transmitting to the payment server to create a virtual account; The author of the DRM registration request step of producing the content to sell, and transmits information on the product price, options, etc. for publishing the content to the main server to the client program provided for DRM in the main server; The main server encrypts using a random key as a DOI based on the transmitted information, and encrypts the encryption key again using a server public key to generate a content to which a DRM is applied to which an encryption key is assigned. A content registration step that is registered in the content registration DB of and receives a CID and is automatically posted to a search list; The purchaser searches for the desired content in a P2P manner using a client program, downloads it, makes a purchase application, selects a payment method, and pays. The paid content information is transmitted to the main server, and the main server is the P server of the payment server. / G requests the payment and the requested information is processed and the result is sent back to the main server.The main server encrypts the encrypted key of the content with the buyer's public key and sends it to the buyer server in the form of a license file. Integrated implementation of P2P for the protection and distribution of digital cartoon content, characterized in that the license phase for the content. The method of claim 1, wherein the content licensing step includes a memory location containing an encrypted data block decrypted by a DRM client and a decrypted data block is transmitted to an external viewer through a plug-in, and an event generated in the viewer is sent to an FSFD. When an event related to the DRM policy is detected by the DRM policy, the FSFD checks the DRM client whether there is a license related to the event and operates only when there is no problem with the license. The method according to claim 1 or 2, In the pre-certification step, the author must apply for the seller registration at the same time as the author receives the certificate, and the grade is assigned according to a predetermined policy, which can be adjusted at a certain time and also changes according to the evaluation by the buyer. Characterized in that the method. The method according to claim 1 or 2, When a second buyer who searches for and downloads content from the buyer server is generated (super distribution), only the author server, the main server, and the second buyer server are linked in the same manner as the license granting step performed by the buyer. How to. The method according to claim 1 or 2, If the purchaser withdraws the payment under a predetermined withdrawal condition in the license granting step, the main server further includes a content checking step in which the payment is made when the purchaser cannot finally withdraw the payment. How to feature. The method of claim 5, wherein the withdrawal condition is within a predetermined time or number of pages after operating the content through the viewer.