KR20060049669A - Content combination providing system and method thereof - Google Patents

Abstract

The present invention relates to a multi-content providing system and a method thereof.

Different usage rights are set according to conditions for a combination of several digital contents, and partial encryption is performed on the contents. In addition, the encrypted partial position of the content and related decryption information are represented by metadata, and the use authority is represented by metadata, and these metadata are provided together when providing the content. Accordingly, by enabling flexible use of content and fast decryption of encrypted content, it is possible to more effectively protect, manage, and control multiple content.

Multi-Content, Metadata, Encryption, Permissions, Copyright

Description

Multi content providing system and method thereof

1 is a diagram illustrating a structure of a multi-content providing system according to an exemplary embodiment of the present invention.

FIG. 2 is a detailed structural diagram of a content processor shown in FIG. 1.

3 is a detailed structural diagram of a content encryption unit shown in FIG. 1.

4 is a structural diagram of a user terminal according to an exemplary embodiment of the present invention.

5 is a flowchart illustrating a process of generating copyright and usage rights metadata according to an embodiment of the present invention.

6A and 6B illustrate an example of using multiple contents in which a usage order condition is set according to an exemplary embodiment of the present invention.

7A and 7B are exemplary views illustrating the structure of copyright and usage rights metadata according to an embodiment of the present invention based on the conditions illustrated in FIGS. 6A and 6B.

8 is a flowchart illustrating a content encryption process according to an embodiment of the present invention.

9 is an exemplary view showing cryptographic metadata according to an embodiment of the present invention.

10 is a flowchart illustrating a multi-content providing method according to an exemplary embodiment of the present invention.

The present invention relates to a system for providing multiple contents, and more particularly, to a system and a method for providing a user terminal while protecting and managing the multiple contents efficiently.

Recently, with the development of network technology, various types of contents are spread through a network. However, since the content provided through the network has a feature that can be easily copied and propagated, it is difficult to protect the copyright of such content. In order to protect the copyright, a watermarking technique that allows users to insert an unrecognizable image into the content to determine the authenticity of the content, and delivers the decryption key only to authorized users while encrypting and distributing the content. The method which makes it possible to use is used.

In particular, the use rights are displayed for the contents delivered through the network so that only authorized users can use the contents. As the method of expressing the usage rights of such contents, the method of expressing the fragmentary authority individually for each content is mainly used. Has been. For example, if you have multiple content that combines content A (e.g., a one-minute advertising video clip) and content B (one-hour movie video), you can express usage rights individually for each piece of content, or It expresses comprehensive usage rights.

However, there is a problem in that such a permission method cannot properly express various contexts of multiple contents. For example, if you send multiple content combinations of content A and content B, if you consume content A and then consume content B, if content B is free, you can either consume only content B or consume content B and In the case of consuming the content B, if there is a different context depending on the combination of consumption order for one multi-content, as in the case of paying the content B, this cannot be properly expressed. In this context, context is a concept that includes a relationship between an environment in which an object is located or elements of the background.

As described above, since the usage rights according to the combination of the order of consumption of contents cannot be expressed differently, there is a problem that the copyright expression method is not flexible.

On the other hand, in the case of encrypting and transmitting the content to protect the provided content, by encrypting the entire content, there is a problem that the encryption processing operation is complicated and the encryption time is increased, and thus there is a lot of problems in decrypting the encrypted content It takes time.

Accordingly, the technical problem to be achieved by the present invention is to solve the conventional problems, and to easily display different usage rights according to a predetermined condition on multiple contents in which several digital contents are combined. In particular, the copyright is given differently according to the conditions for the multi-content so that the flexible use rights can be granted.

In addition, another technical problem to be achieved by the present invention is to enable the fast decryption of encrypted content by partially encrypting the multi-content and processing the information related thereto as meta data.

In addition, the technical problem to be achieved by the present invention is to ensure efficient content protection and management by expressing rights and partial encryption according to multiple content combinations.

According to an aspect of the present invention, a multi-content providing system according to an aspect of the present invention, in a multi-content providing system for providing multiple contents to a user terminal, selectively encrypts and stores the contents, manages and encrypts the contents. A content encryption unit generating, storing, and managing first metadata according to the first metadata; A content processor configured to generate, store, and manage second metadata representing content and copyright information of the content; A user interface unit receiving content service request data transmitted from the user terminal; Content provided from the content encryption unit and capable of transmitting encrypted content corresponding to the content service request data and first metadata related to the content, and second metadata related to the encrypted content provided from the content processing unit. A content transmission unit for processing the information and transmitting the information to the user terminal, wherein the first metadata includes at least one of an encryption scheme used, information on an encrypted region in the content, and decryption information necessary to solve the used encryption. The second metadata includes usage right information that is differently set according to a condition of a usage order of each content with respect to multiple content in which at least one or more contents are combined.

According to another aspect of the present invention, there is provided a multi-content providing method of a system for providing multi-content to a user terminal, the method comprising: a) the system selectively partially encrypts content and encrypts the content; Generating first metadata based on the information; b) the second metadata based on the copyright and usage rights information for the content, the second metadata being different depending on the conditions of the order of use of each content for the multiple contents in which at least one or more contents are combined; Generating set permission information; c) selecting, by the system, encrypted content corresponding to the content service request data transmitted from the user terminal; d) acquiring, by the system, first and second metadata related to the selected encrypted content; And e) processing the encrypted content and the first and second metadata as transmittable content information and transmitting the same to the user terminal.

Hereinafter, exemplary embodiments of the present disclosure will be described in detail with reference to the accompanying drawings so that those skilled in the art may easily implement the present disclosure. As those skilled in the art would realize, the described embodiments may be modified in various different ways, all without departing from the spirit or scope of the present invention.

According to the exemplary embodiment of the present invention, unlike the conventional method of expressing the same usage rights for each of the contents or for all of the plurality of multiple contents in the method of expressing the user rights for the digital contents, Provide different usage rights expression methods according to the order of use of content. In other words, when providing multiple contents consisting of several contents, when a user uses a specific content first and then consumes other contents, and wants to set a permission to consume the contents free of charge, use of the given contents It expresses the usage rights according to the order condition, and controls the consumption of the content by monitoring the user's actual order of using the content from the user terminal.

Therefore, various content providing services are enabled by allowing flexible user authority setting on content use.

In addition, by partially encrypting the contents using various encryption tools, and providing information on the details of the ciphers to the user, the contents can be provided more securely and used more conveniently and quickly.

In addition, performing encryption on the entire digital content to protect the digital content takes a lot of processing time and causes a large amount of decryption (decryption) time in the user terminal. In order to overcome this disadvantage, the encryption / decryption time can be shortened by partially encrypting the content instead of encrypting the entire content. When performing partial encryption, information about cryptographic tools (algorithms), parameters used for encryption, encryption keys, key lengths, locations within encrypted content, etc. are expressed in metadata and the user is encrypted with the encrypted content (password). By delivering to the terminal enables secure content distribution. In addition, by allowing the use of a plurality of encryption algorithms in one content, it is possible to more secure content protection when partial coding.

1 illustrates a structure of a multi-content providing system according to an exemplary embodiment of the present invention for implementing such content providing.

The multi-content providing system 100 according to an embodiment of the present invention, as shown in the accompanying Figure 1, through a plurality of networks (including all wired and wireless networks, such as the Internet, wireless communication network, future network, connection lines between devices) 200 Is connected to the user terminal (310, ... 30N, the following "300" for convenience).

System 100 according to an embodiment of the present invention for providing content to the user terminal 300, as shown in Figure 1, largely, to provide a content storage unit 110, a plurality of contents to be stored, to provide The content processing unit 120 for displaying the use rights to the content to be displayed, the content encryption unit 130 for encrypting the processed content, the content transmission unit 140 for providing the encrypted content to the user terminal 300 through the network 200 ), An authentication unit 150 that performs user authentication, a service manager 160, and an administrator interface unit 170.

The content storage unit 110 stores contents provided through various paths, such as contents produced by the system 100 or contents provided from another system on a network, contents provided by users, and the like. For convenience of management, the content may be classified and stored and managed according to a predetermined field.

The service manager 160 analyzes the content service request data transmitted from the user terminal 300 connected through the network 200 and transmits the predetermined content according to the analysis result. The content processor 120 and the content encryptor ( 130 and the content transmission unit 140 is operated.

The authenticator 150 performs an authentication process to determine whether the user who requested the content is a user who can receive the content through the system. To this end, the authentication unit 150 may include a user database 151 in which user related information is stored. The user database 151 stores information about users registered in the content providing system 100 according to an exemplary embodiment of the present invention. For example, propensity information such as gender, age, occupation, hobbies, etc. may be stored along with an ID and a password, corresponding to an identification number assigned to a user.

The manager interface 170 allows the administrator of the system according to an embodiment of the present invention to set copyright and usage rights or to set encryption parameters for contents serviced by the administrator.

The content processor 120 generates metadata about copyright and usage right information about the content. In particular, the metadata is generated and managed according to copyrights and usage rights made through the administrator interface 170.

2 illustrates a structure of a content processor according to an exemplary embodiment of the present invention.

The content processing unit 120 determines a content determination module 121 for determining whether the content is multiple contents, a usage condition determination module 122 for determining a usage order condition set in the case of multiple contents, and determines copyright information assigned to the content. The copyright determination module 123 to determine the overall usage rights granted to the content and the usage rights determination module 124 to determine individual usage rights, and a metadata generation module to generate copyright and permission metadata based on the determined result ( 125).

Meanwhile, FIG. 3 shows a detailed structure of the content encryption unit 130 shown in FIG. 1.

The content encryption unit 130 generates the content encryption module 131 for encrypting the content, the encrypted content management module 132 for storing and managing the encrypted content, and encryption information (parameters) used for content encryption as metadata. The encryption metadata generation module 133, the metadata management module 134 for storing and managing the generated metadata, the encryption content retrieval module 135, and the metadata management module for retrieving predetermined encrypted content from the encryption content management module. And a metadata retrieval module 136 for retrieving metadata related to the retrieved cryptographic content from. The encrypted content extracted from the encrypted content retrieval module 135 and the metadata management module 136 and metadata related thereto are delivered to the content transmission unit 140 and provided to the user terminal 300.

On the other hand, the user terminal 300 connected through the network is a communication device for supporting content provided from the system 100 having the structure as described above, specifically, can be connected to the network 200 by wire It may be a wired terminal including a computer, a TV capable of accessing the Internet, or a wireless terminal including a cellular phone, a PCS, a PDA, an IMT-2000, a PDA phone, a smart phone, and the like, which can be connected to the network 200 wirelessly.

4 shows the structure of a user terminal 300 according to an embodiment of the present invention. As shown in FIG. 4, the user terminal 300 according to an embodiment of the present invention includes a user interface 31, a user terminal manager 32, an encrypted content and metadata receiver 33, metadata parsing and The rendering control unit 34, the encrypted content decryption unit 35, and the content rendering unit 36.

The user interface unit 31 is a means for allowing a user to request various contents and making the requested contents available to the user. For example, the user interface unit 31 may include input means such as a keypad and a mouse and various output means such as a monitor and an LCD. Include.

The user terminal manager 32 generates a corresponding content service request data according to a user's content request from the user interface unit and transmits the corresponding content service request data to the system 100.

The encrypted content and metadata receiving unit 33 receives information transmitted from the system 100 according to the content service request data, and determines and separates encrypted content, encrypted metadata, copyright, and usage rights metadata from the received information. do.

The metadata parsing and rendering control unit 34 checks the copyright and the usage rights of the user after parsing the copyright and the usage rights metadata. If the user (or user terminal) is given the use right, the password metadata is parsed.

The encrypted content decryption unit 35 decrypts the encrypted content based on the parsing result of the encryption metadata, and the content rendering unit 36 processes the decrypted content and uses the decrypted content or can be confirmed by the user through the user interface unit 31. Make sure On the other hand, the metadata parsing and rendering control unit 34 controls the content rendering unit 36 to use the right to use the content under conditions specified in the copyright.

Next, a method of providing a user with multiple contents according to an embodiment of the present invention will be described based on the structure.

First, a description will be given of a method for generating metadata about content provided.

In an embodiment of the present invention, the content processing unit 120 generates metadata including content of copyright information and information on usage rights of content for contents to be provided through a network. That is, in the case of multiple contents consisting of a plurality of contents, information on usage rights or individual usage rights for the whole and usage rights according to the conditions of the use order is generated as metadata. The right of use describes the protected (encrypted) content, whether it can be stored, modified, copied, the total number of times played, the device (device), the expiration date, copyright information, cost, etc. It can be represented using XML, XML schema, or XML format. The metadata may also be expressed using XML or XML schema, or may be expressed in text form. Such metadata (such as copyright and permissions metadata, password metadata, etc.) may be subject to encryption.

5 illustrates a process of generating copyright and usage rights metadata according to an embodiment of the present invention.

When the content is provided from a plurality of clients (not shown) or the content generated by itself is provided, as shown in FIG. 5, the content determination module 121 of the content processing unit 120 first includes two or more contents having different contents from each other. It is determined whether the multiple content is combined (S10).

In the case of multiple contents, the use condition determination module 122 determines whether the use order condition is set (S15 to S20). Here, the usage order condition indicates that when two or more different contents are combined, a condition of using the corresponding multiple contents is changed according to which content is used first or only what content is used. The present invention is not limited thereto, and may include those in which a condition given to the content usage state is changed.

6A and 6B illustrate an example of using multiple contents in which a usage order condition is set according to an exemplary embodiment of the present invention.

When multiple contents are provided, the order of use conditions may be set differently according to whether only some contents or all contents are used.

For example, in the case of multi-content consisting of video and audio, as shown in FIG. 6A, a usage order condition for free use when the user consumes video content or audio content separately, or both video and audio simultaneously. When it is desired to consume (reproduce), a usage order condition may be set which is paid and pays a predetermined cost.

In addition, when multiple contents are provided, usage order conditions may be set differently depending on which content is consumed first.

For example, in the case of multi-content consisting of one hour of drama video content and one minute of advertisement video content, as shown in FIG. 6B, when a user only watches (consumes) the video, the user pays a predetermined fee. Usage order condition to pay, if you watch the advertising video first to watch the drama video, then the usage order condition to be able to watch the drama video for free may be set. In such a case, paid or free usage is decided according to which content is consumed first, so the user who receives the content must check the order of use of the content and use the content for free or paid through the usage rights charged separately. shall.

As such, the use order condition may be set differently according to whether the content is used or the content use order. Therefore, the use condition determination module 122 of the content processing unit 120 determines whether the use order condition applied to the multi-content is used or not. Therefore, it is determined whether it is set as the first use order condition or as the second use order condition according to the content use order. Of course, in this case, both the first and second usage order conditions may be set for the multi-content. In addition, the use condition determination module 122 transmits the information on the determined use order condition (in particular, the use right information according to the use order condition) to the metadata generating module 125.

Meanwhile, the copyright determination module 123 determines copyright information set for the content and transmits the copyright information to the metadata generation module 125 (S25). The usage right determination module 124 also checks the use rights of the entire content or The individual use right is determined and the information is transmitted to the metadata generating module 125 (S30).

As described above, the metadata generating module 125 may use the usage order condition information transmitted from each of the determination modules 121 to 124, that is, the usage right information, copyright information, and individual or total usage rights information according to the usage order conditions. Based on the present invention, copyright and usage rights metadata are generated according to an embodiment of the present invention. In particular, when the use order condition is set when the metadata is generated and the first use order condition is set according to whether the content is used, it indicates which use right is granted when using what content based on the first indicator, and the second If the usage order condition is set, it indicates which usage rights are granted based on which content is used first based on the second indicator (S35 to S40). Of course, if both of the first and second usage order conditions are set, the above conditions are indicated based on the first and second indicators (S45 to S50).

7A and 7B illustrate the structure of copyright and usage rights metadata according to an embodiment of the present invention. FIG. 7A illustrates metadata according to the first use order condition illustrated in FIG. 6A, and FIG. 7B illustrates metadata according to the second use order condition illustrated in FIG. 6B.

In FIG. 7A, the condition of consuming both video and audio content at the same time is represented by the <r: and> tag, and if this "and" condition is met, the information that one dollar is charged as paid content is <sx: feePerUse Expressed by tech. Thus <r: and> <sx: feePerUse> is used as the first indicator.

In FIG. 7B, the consumption order of the drama video content and the advertisement video content is represented by a <r: implication> tag, and when the "implication" condition is true, the consumption can be consumed as free content, but false. ), Information indicating that a predetermined fee is charged as euro content is represented by <sx: feePerUse> tech. Thus <r: implication> and <sx: feePerUse> are used as the second indicator.

Meta data including these usage order conditions is written in the XML (eXtensible Markup Language) schema language. However, it can be expressed in any language.

By generating copyright and usage rights metadata, flexible usage rights setting for contents is achieved.

In addition, the embodiment of the present invention performs partial encryption on the content and generates metadata about the encryption.

8 illustrates a content encryption process according to an embodiment of the present invention.

As shown in FIG. 8, the content encryption module 131 of the content encryption unit 130 analyzes the previously set encryption parameters and performs content encryption based on the result (S100). The encryption parameter may be an encryption parameter set by an administrator through the manager interface 170 or an encryption parameter automatically set by a program.

An encryption parameter refers to a condition used to decrypt or encrypt content using an encryption method (or algorithm) used. For example, key value, key length, encryption format, initialization vector value, operation mode (mode information for mixing encrypted data blocks), padding method, starting position of encrypted content, encryption of content Last position and the like. The type of such encryption parameter may vary depending on the encryption scheme used.

Encryption methods include Data Encryption Standard (DES), Triple-DES, Rivest-Shamir-Adleman (RSA), and Advanced AES (based on symmetric or asymmetric keys) for compressed bit stream data. Either symmetric or asymmetric encryption techniques, including Encryption Standard, Digital Signature Standard (DSS), MD5, SHA, elliptic curve encryption, and prime factorization-based encryption, can be used to transform the original data. In addition, other encryption methods usable in the art may be used.

In particular, when the partial encryption is set by the encryption parameter, the content encryption module 131 of the content encryption unit 130 according to an embodiment of the present invention only the portion corresponding to the predetermined area according to the encryption parameter in the content to be encrypted. After extraction, the extracted portion is encrypted according to a set encryption scheme (S110 to S130). In addition, information including the performed encryption technique and the position value of the region of the encrypted content is transmitted to the encryption metadata generation module 133.

The cryptographic metadata generation module 133 generates cryptographic metadata based on the transmitted information. In particular, the cryptographic metadata generating module 133 generates information about the cryptographic metadata used, the value of the cryptographic parameter used, the operation mode, the data padding method, and the encrypted content area in the content. In operation S140, meta data including at least one of decryption information (key, key length, etc.) necessary to solve the used cipher is generated.

9 illustrates an example of encryption metadata according to an encryption parameter according to an embodiment of the present invention. Here, DES is used as the encryption algorithm. The key value required for decryption is "nfEoH / 5M + yDLaxaJ + XpJ5Q ==", the key length is "64" bits, and the operation mode of the DES algorithm applied for encryption is "ECB", the padding scheme used is "PCK # 5", and the initialization vector value is "asBefes".

Meanwhile, different encryption techniques may be applied to one content. That is, encryption may be performed by applying different encryption techniques to each region constituting the content. In this case, the encryption metadata generation module 133 may have encryption techniques, decryption information, and the like for each content for each region. Meta data that is assigned differently can be created.

When encrypting the entire content according to the encryption parameter, the content encryption module 131 encrypts the entire content using a set method, and the encryption metadata generation module 133 uses the encryption method used, the parameter value used, and the operation. Meta data including at least one of a mode, a data padding scheme, and decryption information necessary to solve the used cipher is generated (S150 to S160).

The meta data generated as described above is stored and managed corresponding to each content by the metadata management module 134, and the selected metadata is fetched and used by the metadata retrieval module 136 when the content is provided through the network. .

According to an embodiment of the present invention, as partial encryption of content is performed, an efficient encryption method can be provided as compared to a rigid encryption method in which encryption is applied to the entire content. Accordingly, more secure content protection and management is possible. Become.

Next, a description will be given of providing multiple contents to a user terminal.

10 illustrates a method of providing multiple contents according to an embodiment of the present invention sequentially.

Here, as described above, the contents are provided on the assumption that the contents according to the embodiment of the present invention are encrypted and stored, and the encryption-related metadata and the copyright-related metadata related to the contents are generated and stored. do. However, the present invention is not limited thereto, and the content may be provided based on the content encryption and metadata generation as described above according to the user's content request.

As shown in FIG. 10, when a user requests to receive a predetermined content through the interface unit 31 on the terminal 300, the user terminal manager 32 generates content service request data according to the request. Transfer to the system 100 (S300). The content service request data may include at least one of a display size, color depth, encoder / decoder characteristics, battery life, an operating system, a program execution environment, and an encrypted content decryptor (an encrypted content reverse encryption processing module) of the terminal.

When the content service request data is transmitted through the network 200, the authenticator 150 of the system 100 first checks whether the user can receive the content. For example, when a user inputs an ID, a password, etc. at the request of the authentication unit 150, the authentication unit 150 determines whether the input ID and password are stored in the user database 151, the input ID and the like. The user authentication is performed based on whether or not the password is matched with the stored password (S310).

If the user of the terminal 300 providing the request data is authenticated as a legitimate user who can receive the content, the authenticator 150 transmits the authentication result to the user terminal 300 and the content processing unit 120 and the content encryption. The unit 130 processes the requested content and delivers it to the transmission unit 140.

In detail, the service manager 160 analyzes the content service request data transmitted through the network 200 to check what content is requested by the user, and the result is the content encryptor 130 and the content processor 120. Transfer to (S320).

The cryptographic content retrieval module 135 of the content encryption unit 130 retrieves the requested content from the cryptographic content management module 132 and transmits it to the transmission unit 140, and the metadata retrieval module 136 manages the cryptographic metadata. The encryption metadata corresponding to the encrypted contents is extracted from the module 134 and transmitted to the transmission unit 140. In addition, the copyright and usage rights metadata retrieval module 136 retrieves the metadata according to the copyright and usage rights set for the encrypted content and transmits the metadata to the transmission unit 140 (S330 to S340).

Next, the content transmission unit 140 encodes (modulates) the encrypted content, the encrypted metadata, the copyright, and the permission metadata according to the transmission format, and then transmits the encrypted content, the encrypted metadata, to the user terminal 300 through the network 200 ( S350). At this time, the content transmission unit 140, the terminal display size, color depth, encoder / decoder characteristics, battery life, operating system, program execution environment, to process the content information according to the content service request data for efficient content processing of the terminal, In consideration of at least one of the encrypted content decryptor, the appropriate encrypted content, the encrypted metadata, the copyright and the usage metadata may be obtained from the content encryption unit 130, processed, and transmitted to the user terminal 300. Hereinafter, for convenience of description, the modulated and transmitted cryptographic content, cryptographic metadata, copyright, and permission metadata are referred to as "content information."

In response, the encrypted content and metadata receiving unit 33 of the user terminal 300 decodes (demodulates) the transmitted content information and separates the encrypted content into encrypted content, encrypted metadata, copyright, and authority metadata, respectively. To the encrypted content decryption unit 35 and the metadata parsing and rendering control unit 34 (S360).

The metadata parsing and rendering control unit 34 first checks the copyright and the usage right of the user by parsing the copyright and the usage right metadata (S370). The copyright and usage rights metadata may include content use conditions such as time, date, designated terminal, designated user, playback count, and designated content. Also, the use rights according to the content use combination, that is, the use rights according to the order of using the content. This may be included. Accordingly, if the user (or user terminal) has been given permission to use the metadata parsing and rendering controller 34, the metadata parsing and rendering controller 34 parses the encrypted metadata and transmits the result to the encrypted content decryption unit 35.

The cipher content decrypting unit 35 decrypts the cipher content delivered from the metadata parsing and rendering control unit 34 using the input cipher metadata and transmits the result to the content rendering unit 36 (S380 to S390). .

Meanwhile, although the above embodiment describes the structure and operation of a multi-content providing system according to an exemplary embodiment of the present invention based on providing multiple contents to a user terminal, particularly on-line through a network, according to the present invention. The multi-content providing system is not limited thereto, and may provide multi-content to a user terminal through a separate recording medium or the like offline.

In addition, various modifications are possible without departing from the scope of the present invention. For example, the above-described encryption process and content providing method may be implemented in the form of a program stored in a computer-readable recording medium. The recording medium may include any kind of recording device that stores data that can be read by a computer. For example, a CD-ROM, a magnetic tape, a floppy disk, and the like may be used. Included is implemented in the form of).

In the above description, the present invention has been described with reference to preferred embodiments, but the present invention is not necessarily limited thereto, and one of ordinary skill in the art to which the present invention pertains may have various modifications without departing from the technical spirit of the present invention. It will be readily appreciated that branch substitutions, modifications and variations are possible.

As described above, according to an exemplary embodiment of the present disclosure, different usage rights may be easily displayed according to a predetermined condition with respect to multiple contents in which several digital contents are combined. Accordingly, the copyright can be given differently according to the conditions for the multi-content so that the flexible use rights can be granted.

In addition, by partially encrypting the multi-content and processing the related information as metadata, it is possible to quickly decrypt the encrypted content. In particular, on the user side, the content is partially encrypted and information about the encrypted portion and related decryption information are provided as metadata, thereby enabling rapid decryption of the encrypted content. As a result, the protection, management and control of the multimedia contents can be realized more effectively.

Claims (13)

In a system for providing multiple contents to a user terminal, A content encryption unit for selectively storing and managing contents by partially encrypting the contents, and generating and storing and managing first metadata according to the encryption; A content processor configured to generate, store, and manage second metadata representing content and copyright information of the content; A user interface unit receiving content service request data transmitted from the user terminal; Content provided from the content encryption unit and capable of transmitting encrypted content corresponding to the content service request data and first metadata related to the content, and second metadata related to the encrypted content provided from the content processing unit. Content transmission unit for processing the information and transmitting to the user terminal Including, The first metadata includes at least one of an encryption scheme used, information about an encrypted region in the content, and decryption information required to solve the used encryption, and the second metadata includes at least one content combined. A multi-contents provision system including permission information set differently according to a usage order condition of each content with respect to the multi-contents. The method of claim 1 The content processing unit A content determination module for determining whether the content is multi-content; A use condition determination module for determining a use order condition set in the case of multiple contents; A copyright determination module for determining copyright information given to the contents; A permissions determination module for determining total permissions and individual permissions granted to the contents; And A metadata generation module configured to generate second metadata including at least one of copyright information, individual or overall usage rights information, and usage rights information according to a use order condition based on the determined result; Multiple content providing system comprising a. The method according to claim 1 or 2 The content encryption unit A content encryption module for encrypting content; An encrypted content management module for storing and managing encrypted content; An encryption metadata generation module for generating encryption information used for content encryption as first metadata; A metadata management module for storing and managing the generated first metadata; An encrypted content retrieval module for extracting predetermined encrypted content from the encrypted content management module and transferring the predetermined encrypted content to the content transmission unit; A metadata retrieval module for retrieving second metadata related to the retrieved encrypted content from the metadata management module and delivering the second metadata to the content transmission unit Multiple content providing system comprising a. The method of claim 3, The user terminal A user interface unit; A user terminal manager configured to generate content service request data according to a user request input through the user interface and transmit the generated content service request data to the system; An encrypted content and metadata receiving unit for receiving content information transmitted from the system and separating encrypted content, first metadata, and second metadata from the received information; A metadata parsing and rendering control unit for parsing the second metadata to confirm a use right for the content and parsing the first metadata if available; An encrypted content decryption unit that decrypts the encrypted content based on the first metadata parsing result; And Content rendering unit for processing the decrypted content Including, The metadata parsing and rendering controller controls the content rendering unit based on the second metadata parsing result. The method of claim 4, wherein The second metadata further includes at least one of a content use condition, a time, a date, a designated terminal, a designated user, a play count, and designated content. The metadata parsing and rendering control unit controls the content usage of the content rendering unit according to the content use condition. The method of claim 4, wherein The content service request data includes at least one of a display size of a terminal, color depth, encoder / decoder characteristics, battery life, an operating system, a program execution environment, and an encrypted content decryptor (an encrypted content reverse encryption processing module). The method of claim 6, The content transmission unit considers at least one of a display size, color depth, encoder / decoder characteristics, battery life, an operating system, a program execution environment, and an encrypted content decrypter (cryptographic content reverse encryption processing module) of the terminal based on the content service request data. And receiving the content encrypted by the content encryption unit, the first metadata related to the content, and the second metadata from the content processing unit, processing the second metadata, and transmitting the received content to the user terminal. In the multiple content providing method of a system for providing multiple content to a user terminal, a) selectively partial encrypting content by the system and generating first metadata based on encryption information used in the encryption; b) the second metadata based on the copyright and usage rights information for the content, the second metadata being different depending on the conditions of the order of use of each content for the multiple contents in which at least one or more contents are combined; Generating set permission information; c) selecting, by the system, encrypted content corresponding to the content service request data transmitted from the user terminal; d) acquiring, by the system, first and second metadata related to the selected encrypted content; And e) processing the encrypted content and the first and second metadata as transmittable content information and transmitting the encrypted content to the user terminal; Multiple content providing method comprising a. The method of claim 8 Step a) a-1) analyzing the set encryption parameter; a-2) when partial encryption is set as a result of the analysis, extracting only a portion corresponding to a predetermined region from the content to be encrypted according to an encryption parameter, and then encrypting the extracted portion according to a set encryption scheme; a-3) generating first metadata including at least one of an encryption scheme used in step a-2), information on an encrypted region in the content, and decryption information necessary to solve the used encryption; a-4) if the entire encryption is set as a result of the analysis, encrypting the entire content to be encrypted using one set technique; And a-5) generating first metadata including at least one of the encryption technique used in step a-4) and the decryption information necessary to solve the used cipher Multiple content providing method comprising a. The method of claim 9 In step a-2), encryption is performed by applying different encryption schemes to each area constituting the content, and the first metadata generated in step a-3) is encrypted for each area for one content. Multi-content providing method with different techniques and decoding information. The method of claim 8 Separating, by the user terminal receiving the content information, encrypted content, first metadata, and second metadata from the received information; Parsing, by the user terminal, second metadata and checking usage rights for the content, and parsing the first metadata if available; Decrypting, by the user terminal, the encrypted content based on a first metadata parsing result; And Using the decrypted content by the user terminal based on the second metadata parsing result The multi-content providing method further comprising. The method of claim 8 And c) performing user authentication on the user terminal that has transmitted the content service request data and then selecting encrypted content corresponding to the authenticated user only. A computer-readable recording medium storing a program for executing the method according to any one of claims 8 to 12.

Images