CN101196971A - Method and system for implementing authorization management of digital contents - Google Patents

Method and system for implementing authorization management of digital contents Download PDF

Info

Publication number
CN101196971A
CN101196971A CNA2007101797872A CN200710179787A CN101196971A CN 101196971 A CN101196971 A CN 101196971A CN A2007101797872 A CNA2007101797872 A CN A2007101797872A CN 200710179787 A CN200710179787 A CN 200710179787A CN 101196971 A CN101196971 A CN 101196971A
Authority
CN
China
Prior art keywords
section
ticket
authorization file
digital content
digital document
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CNA2007101797872A
Other languages
Chinese (zh)
Other versions
CN101196971B (en
Inventor
汤帜
高飞
洪献文
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
New Founder Holdings Development Co ltd
Peking University
Founder Apabi Technology Ltd
Original Assignee
Peking University
Peking University Founder Group Co Ltd
Beijing Founder Apabi Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Peking University, Peking University Founder Group Co Ltd, Beijing Founder Apabi Technology Co Ltd filed Critical Peking University
Priority to CN2007101797872A priority Critical patent/CN101196971B/en
Publication of CN101196971A publication Critical patent/CN101196971A/en
Application granted granted Critical
Publication of CN101196971B publication Critical patent/CN101196971B/en
Expired - Fee Related legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Landscapes

  • Storage Device Security (AREA)

Abstract

The present invention discloses a method and system for realizing authorization management to digital contents, which is applied to the digital rights management technical field. The method comprises that: a file is segmented and added with index marks of segments by utilizing corresponding making tools according to different formats of the file. In an authorization license file, authorization control is performed to the segments according to business requirements. When a user uses reading/video software to perform operation, the software first examines whether the user has corresponding authority or not in the authorization license file according to the segment number of an operation object to be acquired; if the user has corresponding authority, the user is allowed to continue finishing the operation and use the digital contents of the segment; if the user does not have corresponding authority, the present invention stops the operation to the segment and prompts the user.

Description

A kind of implementation method and system that digital content is carried out empowerment management
Technical field
(digital right management, DRM) field refer to a kind of implementation method and system that digital content is carried out empowerment management especially to the present invention relates to the Digital Right Management technology.
Background technology
In digital content, along with the further abundant and development of using, the increasing requirement carried out different empowerment management strategies to the digital content different piece, preceding 20 pages of contents such as e-book can freely be browsed, perhaps to certain the pictures attaching print authority in the no print right books, perhaps certain section in the audio-video document is controlled or the like, these new business demands all require us more accurate control to be arranged to delegated strategy.And at present for the Streaming Media in the digital content, the strategy of taking then is direct controls playing time range in right expression, for the strategy that print media adopted then be: will need the partial content of special control to take passages into an independent file, to carry out corresponding authorization control, promptly Kong Zhi granularity all is on the basis of whole file.Take passages and to mean that then reprocessing makes file, in case and professionally change then need to make again file, dirigibility is lower, and this influences business development on efficient, and the while fractionation combination meeting of a plurality of files causes certain use obstacle to the user.
Summary of the invention
The embodiment of the invention provides a kind of digital content is carried out the implementation method and the system of empowerment management, and digital content can be operated at section in licensing process, has realized the more fine-grained control of digital content.
A kind of digital content is carried out the implementation method of empowerment management, comprising:
To the digital content segmentation, generate digital document; And the constraint of the operating right of the section of carrying out, generate corresponding ticket for authorization file;
When carrying out described digital document,, each section operated by its corresponding operating right constraint according to described ticket for authorization file.
According to said method of the present invention, described to the digital content segmentation, specifically comprise:
In digital content, add concordance list, memory paragraph identifies and indicates every section digital content that is comprised in every record of described concordance list.
According to said method of the present invention, describedly indicate every section digital content that is comprised, specifically comprise:
Utilize the reference position and the end position of the digital content that the object number section of expression in the digital content comprised; Perhaps
In concordance list, list each section object number pointed; Perhaps
Use side-play amount with respect to file beginning position to indicate the reference position and the end position of the digital content that each section comprise.
According to said method of the present invention, the digital content that each section comprised is all different, or part is identical.
According to said method of the present invention, the constraint of the operating right of the described section of carrying out generates corresponding ticket for authorization file, is specially:
The action type that section is allowed to is described, with and corresponding permission number of operations and/or allow time period of operation, generate described authorization file.
According to said method of the present invention, described generation digital document and corresponding ticket for authorization file also comprise:
In digital document, add the memory location sign of ticket for authorization file.
According to said method of the present invention, after the ticket for authorization file of described generation digital document and correspondence, also comprise:
Issue digital document and corresponding ticket for authorization file.
According to said method of the present invention, during the described digital document of described execution,, each section operated by its corresponding operating right constraint according to described ticket for authorization file, comprising:
By user software the section in the described digital document is operated, and determine according to described ticket for authorization file whether present segment has corresponding operating right, if then continue to finish operation this section; If not, then stop this section operation and prompting user.
According to said method of the present invention, described by user software in the described digital document the section operate, specifically comprise:
By user software first section, operate by each section of ordered pair from described digital document; Perhaps
By any one section beginning that user software is authorized to from described digital document, each section that is authorized to is operated.
According to said method of the present invention, describedly determine that according to the ticket for authorization file whether present segment has corresponding operating right, comprising:
Determine whether present segment is authorized in the described ticket for authorization file; And
Whether the operation of determining present segment has surpassed the allowed band of operating right constraint, comprises whether number of operations has surpassed the permission number of operations and/or the running time of authorizing and whether surpassed the permission running time of authorizing.
According to said method of the present invention, described by user software in the described digital document the section operate before, also comprise:
Judge whether described digital document is the file of Digital Right Management technology DRM protection, if then obtain described ticket for authorization file, and according to described ticket for authorization file each section carried out operating right and determine; If not, directly described each section of digital document operated.
According to said method of the present invention, describedly digital document is operated by user software, comprising: store the client login described digital document of issue of described user software and the issue end of ticket for authorization file and carry out on-line operation; Perhaps
The client that stores described user software is operated after earlier described digital document and ticket for authorization file being downloaded to this locality again.
According to said method of the present invention, described digital content comprises Streaming Media and print media.
A kind of digital content issue end comprises: make module and release module;
Described making module is used for the digital content segmentation, and the constraint of the operating right of the section of carrying out, and generates digital document and corresponding ticket for authorization file;
Described release module is used to issue described digital document and corresponding ticket for authorization file.
Above-mentioned digital content issue end of the present invention, described making module comprises:
First makes submodule, is used to generate concordance list, and memory paragraph identifies and indicate every section digital content that is comprised in every record of described concordance list;
Second makes submodule, is used to describe action type and the corresponding permission number of operations thereof that each section is allowed to;
The 3rd makes submodule, be used for making the output that submodule and second is made submodule according to digital content to be released and first, make digital document and corresponding ticket for authorization file, and in the digital document of making, add the memory location sign of ticket for authorization file.
A kind of digital content receiving end comprises judge module and operational module;
Described judge module is used for determining according to the ticket for authorization file whether the section of digital document has operating right;
Described operational module is used for the section of described digital document is operated by its corresponding operating right constraint.
Above-mentioned digital content receiving end of the present invention, described judge module comprise that first judges the submodule and the second judgement submodule;
Described first judges submodule, is used to judge whether present segment has the requested operation type; If then be notified to described second and judge submodule; Otherwise, notify described operational module to the present segment shut-down operation;
Described second judges submodule, is used to judge whether the operation of present segment surpasses the allowed band of operating right constraint, if then notify described operational module to the present segment shut-down operation; Otherwise, notify described operational module that present segment is carried out respective operations.
A kind of authentication management system comprises: issue end and receiving end;
Described issue end is used for the digital content segmentation, and the constraint of the operating right of the section of carrying out, and generates digital document and corresponding ticket for authorization file cocurrent cloth;
Described receiving end is used to carry out the described digital document of described issue end issue, and according to described ticket for authorization file, each section is operated by its corresponding operating right constraint.
It is a kind of to the more fine-grained method and system of protecting of digital content that the embodiment of the invention provides, promptly to the division of digital content (no matter being Streaming Media or the print media) section of carrying out, with the section is that unit is numbered, adds concordance list, carry out corresponding authorization control at section, avoided the fractionation and the combination of file effectively; And because the content of section can be divided according to service needed, its scope also can intersect and repeat, and has realized operational flexible demands has been satisfied in the control of appearance more flexibly in the numeral, has improved the efficient of business processing; The simultaneously this method that empowerment management is carried out in the digital content segmentation can be suitable for the existing file form, and the different-format file is had good versatility.
Description of drawings
Fig. 1 is the process flow diagram of digital content segmentation authorization management method in the embodiment of the invention one;
Fig. 2 is the process flow diagram of digital content segmentation authorization management method in the embodiment of the invention two;
Fig. 3 is the structural representation of digital content issue end in the embodiment of the invention;
Fig. 4 is the structural representation of digital content receiving end in the embodiment of the invention.
Embodiment
Utilize corresponding digital content (comprising print media and Streaming Media) tools, processing power and service needed according to file layout, to digital content is that unit carries out control of authority with the section, the user operates accordingly according to the rights of using in the ticket for authorization file when using this digital content.
Embodiment one:
The flow process of the digital content segmentation authorization management method that the embodiment of the invention one provides may further comprise the steps as shown in Figure 1:
Step S101: make digital document.
Digital content is carried out staging treating, in digital document, add concordance list, comprise the content of segment number and every section sensing.
For the digital content that is subjected to the DRM protection, also need in digital document, add the memory location sign of ticket for authorization file.
When digital content is carried out segmentation, can carry out multi-form division as required, for example:
(1) for existing format file with object number, as the CEB document, directly use the object number of the page number to carry out segmentation, for example, first page object number is that 01, the second page object number is that 10, the three pages object number is 11 ....; Accordingly with first page as first section, second page as second section, the 3rd page as the 3rd section ....; Then concordance list is shown in following table 1:
Table 1
Segment number Reference position End position
1 01 01
2 10 10
3 11 11
....... ....... .......
Especially, can not insert concordance list for above-mentioned existing document with object number, when user software is operated this existing document directly with the page number or object number as segment number (segment identification).
General by in user software, adding the corresponding instruction code, when the indication user software does not have concordance list in finding file, directly the page number or object number are carried out corresponding operating as segment number.
(2) for the existing format file of being mentioned in (1), the method representation that the content that each section comprised also can be as shown in table 2, its scope can intersect or repeat.
Table 2
Segment number The object that points to
1 01、10
2 10
3 10、11
....... .......
(3) for the digital content that does not have object number, to use with respect to the side-play amount of file beginning position and come segmentation, its concordance list is as shown in table 3:
Table 3
Segment number Reference position (use with respect to the side-play amount of file beginning position and represent) End position (use with respect to the side-play amount of file beginning position and represent)
1 0x0000 0x1000
2 0x1000 0x2000
3 0x2000 0x3000
....... ....... .......
(4) for the digital content that does not have object number, the content that each section comprised also can intersect and repeat.
Step S102: carry out authorization control at section.Be specially: to digital content is that unit is authorized with the section, makes corresponding ticket for authorization file; According to business demand, in the ticket for authorization file, add the constraint explanation of section, and indicate the number of times (or time) that relates to segment identification (being segment number), scope and mandate.
Especially, when there is a plurality of mandate in the content of a section, to authorize being as the criterion of least number of times.
Can also comprise: the content to each segmentation is encrypted, thereby further guarantees the security of its segmentation mandate.
Step S103: issue digital document and and corresponding ticket for authorization file.
Step S104: user software is operated digital document.
When user software is operated digital document, can onlinely read or play, also digital document and ticket for authorization file can be downloaded to this locality together and read again or play.
Step S105: user software identification file layout, judge whether digital document is the file that protected by DRM, if, execution in step S107 then, if not, execution in step S106 then.
Step S106: user software can continue digital document is operated.
Step S107: user software is identified to appointed positions according to the memory location of stored authorized license file in the digital document and searches the ticket for authorization file.
Step S108: user software resolves the ticket for authorization file, the segment number that obtains being authorized to, scope and the number of times that is authorized to.
Step S109: user software judges since first section executable operations whether present segment (promptly first section) has been awarded corresponding rights of using, if, execution in step S110 then, if not, execution in step S111 then.
Step S110: user software judges whether the number of times that this section is used has reached the maximum times that this section permission is used (or not surpassed the time that this section permission is used), if not, access times record that then will this section adds 1, goes to step S112, if, execution in step S111 then.
Step S111: user software stops that operation of this section and prompting user are not had the corresponding rights of using of this piece of digital content, execution in step S113 then.
Step S112: user software continues to finish the operation to this section, uses this piece of digital content; Execution in step 113 then.
Step S113: user software continues next section is operated, and repeats above decision operation process, and the operation of all sections all is finished in file.
Illustrate below:
Example 1: realize in certain existing format file the 2nd~5 page the authority of checking.
When utilizing tools to make digital document; each page or leaf that directly will have format file (as: CEB document) now is made digital document as one section; because this file is protected by DRM, during making, add the memory location sign of ticket for authorization file in ending place of file simultaneously.
Owing to there is in the CEB document page number to exist, and each page or leaf is all corresponding an object number, and for example, first page object number is that 01, the second page object number is that 10, the three pages object number is 11 ....; Then be that unit carries out segmentation with the page or leaf, for example: with first page as first section, second page as second section, the 3rd page as the 3rd section ....; Then concordance list is shown in following table 4:
Table 4
Segment number Reference position End position
1 01 01
2 10 10
3 11 11
....... ....... .......
Realize that this CEB document can check for the 2nd to 5 page, then utilize the mandate instrument in the ticket for authorization file of this CEB document, add following code:
<view>
<constraint>
<segment seg=2>-1</segment>
<segment seg=5>0</segment>
</constraint>
</view>
Wherein: label view shows that reading authority, label constraint show constraint, the mandate of the label segment section of showing, its attribute seg has shown the initial segment number of concrete mandate, and its value has shown the mandate number of times, and 0 for there not being mandate, and-1 is unlimited mandate.
The above-mentioned code section of showing 2 of the interpolation in the ticket for authorization file has the unlimited authority of browsing later, stops when section 5.
Issue holds the digital document of the CEB document that will make and its ticket for authorization file to send by media such as networks.
When the user used ocr software to open this CEB document, user software judged at first whether this CEB document protected by DRM, if not, then can continue operation, used this CEB document; If then the ticket for authorization file is searched by user software.
User software resolves the ticket for authorization file, and determining the segment limit that allows to use is the 2-5 section, and the number of times that allows to consult is not limit.
User software is operated the 1st section (promptly the 1st page) of this CEB document, analysis result according to the ticket for authorization file, because the 1st section (promptly the 1st page) is not awarded corresponding operating right, then continue the 2nd section (promptly the 2nd page) operated, because the 2nd section (promptly the 2nd page) has corresponding rights of using, then shows the user with the 2nd page, continues then the 3rd page is operated, ..., after showing the user with the 2nd~5 page.After the 5th page of demonstration finished, continue the 6th section, because the 6th section (promptly the 6th page) extremely finishes not within the scope of authority, ocr software will carry out corresponding prompt to the user, and no longer show the corresponding contents of this CEB document.
Example 2: the 20th minute to 30 minutes contents of realization video file can not be watched, and remainder is not limit.
Utilize tools that video content is made into a video file, the flow of the digital content in each minute broadcast scope is made digital document as section, add the memory location sign of ticket for authorization file simultaneously in ending place of file.
Because this video file does not have utilizable ready-made signs such as object number, then use with respect to the side-play amount of file beginning position and come segmentation, for example: the content flow that this video file was play in each minute is 1M, and its concordance list is as shown in table 5:
Table 5
Segment number Reference position (use with respect to the side-play amount of file beginning position and represent) End position (use with respect to the side-play amount of file beginning position and represent)
1 0x00000000 0x10000000
2 0x10000000 0x20000000
3 0x20000000 0x30000000
....... ....... .......
Realize that the 20th minute to 30 minutes scopes of this video content can not watch, then utilize the mandate instrument in the ticket for authorization file of this video content, to add following code:
<display>
<constraint>
<segment seg=0>-1</segment>
<segment seg=20>0</segment>
<segment seg=30>-1</segment>
</constraint>
</display>
Wherein: label display shows the broadcast authority, and all the other are identical with example 1.
The above-mentioned code section of showing 0~20 of adding in the ticket for authorization file has unlimited right of broadcasting, and section 20~30 does not have the authority of broadcast, has unlimited right of broadcasting after the section 30 yet.
The issue end sends video file and the corresponding ticket for authorization file of making by media such as networks.
When the user used playout software to play this video file, user software judged at first whether this video file protected by DRM, if not, then can continue operation, used this video file; If then the ticket for authorization file is searched by user software.
User software resolves the ticket for authorization file, and determining the segment limit that does not allow in the video file to use is the 20-30 section, and other sections can be play, and broadcasting time is not limit.
When the user uses playout software to play this video file,, can play to the content of the 19th minute (promptly the 1st section to the 19th section) since the 1st minute.When being played to the second ten minutes, because this section does not have the authority of broadcast, then this section content can not be used by the user, and the system prompt user does not have rights of using, continues then to carry out next section, up to executing the 30th section, when carrying out the 31st section, just can play.
Embodiment two:
When user software is operated digital document, can only operate the section that is authorized to, its flow process as shown in Figure 2, concrete execution in step is as follows:
Step S201: make digital document.
Digital content is carried out staging treating, in digital document, add concordance list, comprise the content of segment number and every section sensing.Described as embodiment one, to the division of paragraph a variety of forms can be arranged, do not repeat them here.
For the digital content that is subjected to the DRM protection, also need in digital document, add the memory location sign of ticket for authorization file.
Step S202: carry out authorization control at section.Be specially: to digital content is that unit is authorized with the section, makes corresponding ticket for authorization file; According to business demand, in the ticket for authorization file, add the constraint explanation of section, and indicate the scope that relates to the segment number or the section of relating to and the number of times of this section mandate.
Especially, when there is a plurality of mandate in the content of a section, to authorize being as the criterion of least number of times.
Also comprise the content of each segmentation is encrypted, thereby further guarantee the security of its segmentation mandate.
Step S203: issue digital document and and corresponding ticket for authorization file.
Step S204: user software is operated digital document.
When user software is operated digital document, can onlinely read or play, also digital document and ticket for authorization file can be downloaded to this locality together and read again or play.
Step S205: user software identification file layout, judge that digital document is the file that is subjected to the DRM protection, if, execution in step S207 then, if not, execution in step S206 then.
Step S206: user software can continue digital document is operated.
Step S207: user software is identified to appointed positions according to the memory location of stored authorized license file in the digital document and searches the ticket for authorization file.
Step S208: user software resolves the ticket for authorization file, the segment number that obtains being authorized to, scope and the number of times that is authorized to.
Step S209: user software judges from any one section beginning executable operations that is authorized to whether the number of times that this section is used has reached the maximum times that this section permission is used, if, execution in step S210 then, if not, access times record that then will this section adds 1, execution in step S211.
Step 210: user software stops the operation of this section and points out the user no longer to have the rights of using of this piece of digital content, and execution in step 212 then.
Step 211: user software continues to finish to this operation, uses this piece of digital content; Execution in step 212 then.
Step S212: user software continues the section that the next one is authorized to is operated, and repeats above decision operation process, and the operation of the section that all are authorized in to file all is finished.
Illustrate below:
Example 3: realize that the chapter 1 in certain e-book freely browses 10 times
Utilize tools that the content production of e-book is become an electronic book documentary, as one section, add concordance list and ticket for authorization file storage location sign with one page of e-book.
Realize that this e-book chapter 1 freely browses 10 times, and known this e-book chapter 1 comprises 5~20 sections, utilizes the mandate instrument in the ticket for authorization file of this e-book, add following code:
<view>
<constraint>
<segment seg=5>10</segment>
<segment seg=20>0</segment>
</constraint>
</view>
The above-mentioned code section of showing 5 beginnings of the interpolation in the ticket for authorization file can be browsed 10 times up to the part that section 20 stops.
The issue end sends electronic book documentary and the corresponding ticket for authorization file of making by media such as networks.
When the user used ocr software to open this electronic book documentary, user software judged at first whether this e-book protected by DRM, if not, then can continue operation, used this electronic book documentary; If then the ticket for authorization file is searched by user software.
User software resolves the ticket for authorization file, and determining the segment limit that allows in the electronic book documentary to use is the 5-20 section, and the number of times that allows to browse is 10 times.
Then user software is directly operated the 5th section of this e-book, judge that whether number of times that this section browsed is greater than the number of times 10 that allows to browse, if then ticket for authorization does not allow user software that this e-book is proceeded operation, reminds the user no longer to have the right to use of this e-book simultaneously; If not, content revealing that then will this section is given the user.User software continues the 6th section is operated then, by that analogy, stops when carrying out the 20th section.And the prompting user no longer has the rights of using of other parts.
Example 4: realize that picture can be derived in certain electronics newspaper.
Utilizing tools is an electronic messaging spare with the content production of electronics newspaper.The electronics newspaper is carried out staging treating, wherein can adopt the sign of the object number of picture, add concordance list and ticket for authorization file storage location sign as segmentation for picture.
Realize that the picture (as picture 1) in this electronics newspaper can be derived, and known picture 1 is the 3rd section, then utilizes the mandate instrument in the ticket for authorization file of this electronics newspaper, add following code:
<export>
<constraint>
<segment seg=3>-1</segment>
<segment seg=4>0</segment>
</constraint>
</export>
Annotate: label export shows the derivation authority, and all the other are with the explanation of example 1.
The above-mentioned code section of showing 3 of the interpolation in the ticket for authorization file (being picture 1) can unlimitedly derive.
Electronic messaging spare that issue end will be made and its ticket for authorization file send by media such as networks.
Open this electronic messaging spare when the user uses ocr software, see picture 1, when wanting to derive operation, user software judges at first whether this electronics newspaper protected by DRM, if not, then can continue operation, uses this electronic messaging spare; If then the ticket for authorization file is searched by user software.
User software resolves the ticket for authorization file, find to allow in the ticket for authorization file section 3 at this picture place to derive operation, and the number of times that allows to derive is not limit.
Then the user can continue this operation, and the picture of section 3 is derived.
According to above-mentioned digital content segmentation authorization management method of the present invention, can make up a kind of digital content segmentation authentication management system, this system comprises issue end 30 and receiving end 40.
Wherein, issue end 30 is used for the digital content segmentation, and the constraint of the operating right of the section of carrying out, and generates digital document and corresponding ticket for authorization file cocurrent cloth; Its structure comprises as shown in Figure 3: make module 301 and release module 302.
Making module 301 is used for digital content (comprising Streaming Media and print media) is made into digital document.Specifically comprise digital document is carried out segmentation, add concordance list, the scope of the section of indicating; The operating right of the section of carrying out constraint in the ticket for authorization file; And the memory location sign of in the digital document that is made into, adding the ticket for authorization file.
Release module 302 is used to issue digital document and the corresponding ticket for authorization file that making module 301 is made.
Preferable, described making module 301 can also further be divided into: first makes submodule 3011, second makes submodule 3012 and the 3rd making submodule 3013.
First makes submodule 3011, is used to generate concordance list, and memory paragraph identifies and indicate every section digital content that is comprised in every record of described concordance list.
Second makes submodule 3012, is used to describe action type and the corresponding permission number of operations thereof that each section is allowed to.
The 3rd makes submodule 3013, be used for making the output that submodule 3011 and second is made submodule 3012 according to digital content to be released and first, make digital document and corresponding ticket for authorization file, and in the digital document of making, add the memory location sign of ticket for authorization file.
Wherein, receiving end 40 is used to carry out the described digital document of described issue end issue, and according to described ticket for authorization file, each section is operated by its corresponding operating right constraint; Its structure comprises as shown in Figure 4: judge module 401 and operational module 402.
Judge module 401 is used to judge whether digital content protected by DRM, if, seek corresponding ticket for authorization file, determine according to the ticket for authorization file whether the section in the digital document has operating right.If then notifying operation module 402 continues to finish this operation; If not, notifying described operational module 401 to continue next piece of digital content handles.
Operational module 402 is used for the section of issuing the digital document of holding issue is operated by its corresponding operating right constraint, comprises reading electronic documents, picture derivation and playing video file etc.
Preferable, judge module 401 can also further be divided into: first judges the submodule 4011 and the second judgement submodule 4012;
First judges submodule 4011, is used to judge whether present segment has the requested operation type; If then be notified to second and judge submodule 4012; Otherwise, 402 pairs of present segment shut-down operations of notifying operation module;
Second judges submodule 4012, is used to judge whether the operation of present segment has surpassed the scope that the operating right constraint allows, if, then 402 pairs of present segment shut-down operations of notifying operation module; Otherwise 402 pairs of present segments of notifying operation module are carried out respective operations.
In sum, the method and system of the digital content segmentation empowerment management that the embodiment of the invention provides are when carrying out empowerment management to digital content, by digital content is carried out segmentation, carry out corresponding authorization control at section again, realized the flexible control of digital content empowerment management; The trouble that need split and make up when having avoided effectively in the prior art that digital content carried out empowerment management.And, thereby make more flexible to the control of digital content owing to the scope that section is comprised can intersect and repeat.Simultaneously can be according to the division of the object number section of carrying out that exists in the existing file form, make that empowerment management is simple, fragment position search convenience, the different-format file is had good versatility.
The above; only be the preferable embodiment of the present invention; but protection scope of the present invention is not limited thereto; anyly be familiar with those skilled in the art in the technical scope that the present invention discloses; the variation that can expect easily, replace or be applied to other similar systems, all should be encompassed within protection scope of the present invention.Therefore, protection scope of the present invention should be as the criterion with the protection domain of claims.

Claims (19)

1. one kind is carried out the implementation method of empowerment management to digital content, it is characterized in that, comprising:
To the digital content segmentation, generate digital document; And the constraint of the operating right of the section of carrying out, generate corresponding ticket for authorization file;
When carrying out described digital document,, each section operated by its corresponding operating right constraint according to described ticket for authorization file.
2. method according to claim 1 is characterized in that, and is described to the digital content segmentation, specifically comprises:
In digital content, add concordance list, memory paragraph identifies and indicates every section digital content that is comprised in every record of described concordance list.
3. method as claimed in claim 2 is characterized in that, describedly indicates every section digital content that is comprised, and specifically comprises:
Utilize the reference position and the end position of the digital content that the object number section of expression in the digital content comprised; Perhaps
In concordance list, list each section object number pointed; Perhaps
Use side-play amount with respect to file beginning position to indicate the reference position and the end position of the digital content that each section comprise.
4. method as claimed in claim 2 is characterized in that, the digital content that each section comprised is all different, or part is identical.
5. the method for claim 1 is characterized in that, the operating right constraint of the described section of carrying out generates corresponding ticket for authorization file, is specially:
The action type that section is allowed to is described, with and corresponding permission number of operations and/or allow time period of operation, generate described authorization file.
6. the method for claim 1 is characterized in that, described generation digital document and corresponding ticket for authorization file also comprise:
In digital document, add the memory location sign of ticket for authorization file.
7. method according to claim 1 is characterized in that, after described generation digital document and the corresponding ticket for authorization file, also comprises:
Issue digital document and corresponding ticket for authorization file.
8. the method for claim 1 is characterized in that, during the described digital document of described execution, according to described ticket for authorization file, each section is operated by its corresponding operating right constraint, comprising:
By user software the section in the described digital document is operated, and determine according to described ticket for authorization file whether present segment has corresponding operating right, if then continue to finish operation this section; If not, then stop this section operation and prompting user.
9. the method for claim 1 is characterized in that, described user software is operated the section in the described digital document, comprising:
According to concordance list section is operated, memory paragraph identifies and indicates every section digital content that is comprised in every record of described concordance list; Perhaps
Directly with the page number that comprises in the digital content or object number as segment identification, the page number or object number digital content pointed are operated as section.
10. method as claimed in claim 9 is characterized in that, described by user software in the described digital document the section operate, specifically comprise:
By user software first section, operate by each section of ordered pair from described digital document; Perhaps
By any one section beginning that user software is authorized to from described digital document, each section that is authorized to is operated.
11. method as claimed in claim 8 is characterized in that, describedly determines that according to the ticket for authorization file whether present segment has corresponding operating right, comprising:
Determine whether present segment is authorized in the described ticket for authorization file; And
Whether the operation of determining present segment has surpassed the allowed band of operating right constraint, comprises whether number of operations has surpassed the permission number of operations and/or the running time of authorizing and whether surpassed the permission running time of authorizing.
12. method as claimed in claim 8 is characterized in that, described by user software in the described digital document the section operate before, also comprise:
Judge whether described digital document is the file of Digital Right Management technical protection, if then obtain described ticket for authorization file, and according to described ticket for authorization file each section carried out operating right and determine; If not, directly described each section of digital document operated.
13. method as claimed in claim 8 is characterized in that, describedly by user software digital document is operated, and comprising: store the client login described digital document of issue of described user software and the issue end of ticket for authorization file and carry out on-line operation; Perhaps
The client that stores described user software is operated after earlier described digital document and ticket for authorization file being downloaded to this locality again.
14., it is characterized in that described digital content comprises Streaming Media and print media as the arbitrary described method of claim 1-13.
15. a digital content issue end is characterized in that, comprising: make module and release module;
Described making module is used for the digital content segmentation, and the constraint of the operating right of the section of carrying out, and generates digital document and corresponding ticket for authorization file;
Described release module is used to issue described digital document and corresponding ticket for authorization file.
16. digital content issue end as claimed in claim 15 is characterized in that described making module comprises:
First makes submodule, is used to generate concordance list, and memory paragraph identifies and indicate every section digital content that is comprised in every record of described concordance list;
Second makes submodule, is used to describe action type and the corresponding permission operational constraints thereof that each section is allowed to;
The 3rd makes submodule, be used for making the output that submodule and second is made submodule according to digital content to be released and first, make digital document and corresponding ticket for authorization file, and in the digital document of making, add the memory location sign of ticket for authorization file.
17. a digital content receiving end is characterized in that, comprises judge module and operational module;
Described judge module is used for determining according to the ticket for authorization file whether the section of digital document has operating right;
Described operational module is used for the section of described digital document is operated by its corresponding operating right constraint.
18. digital content receiving end as claimed in claim 17 is characterized in that, described judge module comprises that first judges that giving module and second judges submodule;
Described first judges submodule, is used to judge whether present segment has the requested operation type; If then be notified to described second and judge submodule; Otherwise, notify described operational module to the present segment shut-down operation;
Described second judges submodule, is used to judge whether the operation of present segment has surpassed the allowed band of operating right constraint, if then notify described operational module to the present segment shut-down operation; Otherwise, notify described operational module that present segment is carried out respective operations.
19. an authentication management system is characterized in that, comprising: issue end and receiving end;
Described issue end is used for the digital content segmentation, and the constraint of the operating right of the section of carrying out, and generates digital document and corresponding ticket for authorization file cocurrent cloth;
Described receiving end is used to carry out the described digital document of described issue end issue, and according to described ticket for authorization file, each section is operated by its corresponding operating right constraint.
CN2007101797872A 2007-12-18 2007-12-18 Method and system for implementing authorization management of digital contents Expired - Fee Related CN101196971B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN2007101797872A CN101196971B (en) 2007-12-18 2007-12-18 Method and system for implementing authorization management of digital contents

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN2007101797872A CN101196971B (en) 2007-12-18 2007-12-18 Method and system for implementing authorization management of digital contents

Publications (2)

Publication Number Publication Date
CN101196971A true CN101196971A (en) 2008-06-11
CN101196971B CN101196971B (en) 2011-01-05

Family

ID=39547368

Family Applications (1)

Application Number Title Priority Date Filing Date
CN2007101797872A Expired - Fee Related CN101196971B (en) 2007-12-18 2007-12-18 Method and system for implementing authorization management of digital contents

Country Status (1)

Country Link
CN (1) CN101196971B (en)

Cited By (21)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102073805A (en) * 2009-11-25 2011-05-25 株式会社日立制作所 Computer system and content management method
WO2011072607A1 (en) * 2009-12-18 2011-06-23 华为终端有限公司 File segmented protection method, apparatus and system
CN102236750A (en) * 2010-04-29 2011-11-09 国际商业机器公司 Right control method and device for cloud computing system
CN102314567A (en) * 2010-07-09 2012-01-11 中国移动通信有限公司 Digital content use and control method and client-side equipment
CN102682236A (en) * 2011-02-10 2012-09-19 汤姆森特许公司 Method and device for excerpt licensing
CN102780556A (en) * 2011-05-09 2012-11-14 北大方正集团有限公司 Method and device for encrypting and decrypting digital content section by section
CN102819704A (en) * 2012-07-20 2012-12-12 北京亿赛通科技发展有限责任公司 Document copyright protection method for intelligent terminal
CN102930183A (en) * 2011-08-08 2013-02-13 财团法人工业技术研究院 digital rights management device and digital rights management method
CN103093126A (en) * 2013-01-18 2013-05-08 上海大唐移动通信设备有限公司 Software licensing method and software licensing system
CN103248474A (en) * 2012-02-01 2013-08-14 华为技术有限公司 Encryption and decryption method and device for streaming media
CN103294935A (en) * 2012-02-29 2013-09-11 北大方正集团有限公司 Method, device and system for controlling digital content read right
CN103377173A (en) * 2012-04-27 2013-10-30 工业和信息化部电信传输研究所 Method and system for multiparty cooperation checking of controllable document
CN103544168A (en) * 2012-07-12 2014-01-29 北京颐达合创科技有限公司 Device and method for controlling file downloading
CN103577723A (en) * 2012-08-09 2014-02-12 福州福昕软件开发有限公司北京分公司 Control method for online page preview of electronic book
CN104182659A (en) * 2013-05-21 2014-12-03 北大方正集团有限公司 Server, system and digital right combining method
WO2016058522A1 (en) * 2014-10-13 2016-04-21 Alibaba Group Holding Limited Method and apparatus for controlling data permissions
CN105657470A (en) * 2015-12-31 2016-06-08 深圳市海云天科技股份有限公司 Bitmap type video browsing recording method and system
CN106485156A (en) * 2016-09-22 2017-03-08 中广核工程有限公司 A kind of apparatus and method for files in batch mandate
EP2645663B1 (en) 2011-03-22 2017-05-31 Huawei Technologies Co., Ltd. Media data processing method and device thereof
CN106960162A (en) * 2017-03-24 2017-07-18 北京深思数盾科技股份有限公司 A kind of data sharing method, apparatus and system
CN107430648A (en) * 2014-11-03 2017-12-01 意锐泽私人有限公司 System for monitoring copyrighted-material

Cited By (38)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102073805A (en) * 2009-11-25 2011-05-25 株式会社日立制作所 Computer system and content management method
WO2011072607A1 (en) * 2009-12-18 2011-06-23 华为终端有限公司 File segmented protection method, apparatus and system
US9507539B2 (en) 2010-04-29 2016-11-29 International Business Machines Corporation Performing authorization control in a cloud storage system
US9134912B2 (en) 2010-04-29 2015-09-15 International Business Machines Corporation Performing authorization control in a cloud storage system
CN102236750A (en) * 2010-04-29 2011-11-09 国际商业机器公司 Right control method and device for cloud computing system
CN102236750B (en) * 2010-04-29 2016-03-30 国际商业机器公司 The method and apparatus of control of authority is carried out in cloud storage system
US9158465B2 (en) 2010-04-29 2015-10-13 International Business Machines Corporation Performing authorization control in a cloud storage system
CN102314567A (en) * 2010-07-09 2012-01-11 中国移动通信有限公司 Digital content use and control method and client-side equipment
CN102682236A (en) * 2011-02-10 2012-09-19 汤姆森特许公司 Method and device for excerpt licensing
EP2645663B1 (en) 2011-03-22 2017-05-31 Huawei Technologies Co., Ltd. Media data processing method and device thereof
CN102780556A (en) * 2011-05-09 2012-11-14 北大方正集团有限公司 Method and device for encrypting and decrypting digital content section by section
CN102780556B (en) * 2011-05-09 2015-03-18 北大方正集团有限公司 Method and device for encrypting and decrypting digital content section by section
US9135411B2 (en) 2011-08-08 2015-09-15 Industrial Technology Research Institute Digital rights management apparatus and method
CN102930183A (en) * 2011-08-08 2013-02-13 财团法人工业技术研究院 digital rights management device and digital rights management method
CN102930183B (en) * 2011-08-08 2015-11-18 财团法人工业技术研究院 digital rights management device and digital rights management method
CN103248474B (en) * 2012-02-01 2016-08-10 华为技术有限公司 A kind of encryption and decryption method and device of Streaming Media
CN103248474A (en) * 2012-02-01 2013-08-14 华为技术有限公司 Encryption and decryption method and device for streaming media
CN103294935B (en) * 2012-02-29 2016-03-09 北大方正集团有限公司 A kind of control method of digital content read right, Apparatus and system
CN103294935A (en) * 2012-02-29 2013-09-11 北大方正集团有限公司 Method, device and system for controlling digital content read right
CN103377173B (en) * 2012-04-27 2017-03-15 工业和信息化部电信传输研究所 The method and system that a kind of multiparty collaboration to controllable document is audited
CN103377173A (en) * 2012-04-27 2013-10-30 工业和信息化部电信传输研究所 Method and system for multiparty cooperation checking of controllable document
CN103544168A (en) * 2012-07-12 2014-01-29 北京颐达合创科技有限公司 Device and method for controlling file downloading
CN102819704B (en) * 2012-07-20 2015-09-09 北京亿赛通科技发展有限责任公司 The document copyright protection method of intelligent terminal
CN102819704A (en) * 2012-07-20 2012-12-12 北京亿赛通科技发展有限责任公司 Document copyright protection method for intelligent terminal
CN103577723B (en) * 2012-08-09 2016-12-21 福建福昕软件开发股份有限公司 The control method of online page preview of electronic book
CN103577723A (en) * 2012-08-09 2014-02-12 福州福昕软件开发有限公司北京分公司 Control method for online page preview of electronic book
WO2014023077A1 (en) * 2012-08-09 2014-02-13 福州福昕软件开发有限公司北京分公司 Method for controlling online previewing of e-book page
CN103093126A (en) * 2013-01-18 2013-05-08 上海大唐移动通信设备有限公司 Software licensing method and software licensing system
CN104182659A (en) * 2013-05-21 2014-12-03 北大方正集团有限公司 Server, system and digital right combining method
CN104182659B (en) * 2013-05-21 2018-01-26 北大方正集团有限公司 Server, system and digital right merging method
WO2016058522A1 (en) * 2014-10-13 2016-04-21 Alibaba Group Holding Limited Method and apparatus for controlling data permissions
US9866565B2 (en) 2014-10-13 2018-01-09 Alibaba Group Holding Limited Method and apparatus for controlling data permissions
CN107430648B (en) * 2014-11-03 2021-01-08 意锐泽私人有限公司 System for monitoring copyrighted material
CN107430648A (en) * 2014-11-03 2017-12-01 意锐泽私人有限公司 System for monitoring copyrighted-material
CN105657470B (en) * 2015-12-31 2018-09-28 深圳市海云天科技股份有限公司 A kind of recording method of bit map type video tour and system
CN105657470A (en) * 2015-12-31 2016-06-08 深圳市海云天科技股份有限公司 Bitmap type video browsing recording method and system
CN106485156A (en) * 2016-09-22 2017-03-08 中广核工程有限公司 A kind of apparatus and method for files in batch mandate
CN106960162A (en) * 2017-03-24 2017-07-18 北京深思数盾科技股份有限公司 A kind of data sharing method, apparatus and system

Also Published As

Publication number Publication date
CN101196971B (en) 2011-01-05

Similar Documents

Publication Publication Date Title
CN101196971B (en) Method and system for implementing authorization management of digital contents
JP2009048667A (en) Method of granting license for drm technology for supporting multiple devices
US20150026456A1 (en) Apparatus and method for managing digital copyright on epub-based content, and apparatus and method for providing epub-based content according to user&#39;s right
JP2007207087A (en) System and method for managing issue of electronic ticket, issuing side system, and program
EP2035968A1 (en) Method and apparatus for searching rights object and mapping method and mapping apparatus for the same
BR0206146A (en) Apparatus and method of reproduction of recording medium, recording medium and, program executed by a computer
CN101968834A (en) Encryption method and device for anti-copy plate of electronic product
CN109033789A (en) A kind of generation method, the device and system of true warrant book
CN101681409A (en) Method and device for exchanging digital content licenses
CN109857769A (en) Drive slip control method, system, equipment and storage medium based on block chain
CN102203793B (en) Storage device and method for dynamic content tracing
KR100506530B1 (en) Method for DRM license supporting plural devices
CN103548030A (en) Information processing device, information processing method and program
JP2011113167A (en) Computer system and content management method
ITMI20111223A1 (en) A METHOD OF PROTECTION OF A SOLID STATE MEMORY
US20100070416A1 (en) Digital rights management license identification
CN114417392B (en) Multi-auditing system for block chain editing permission
Masue et al. Transfer acceleration of content usage control information by using base-values reference method
Jiménez et al. TCN (Train Communication Network) gateway for simulation
JP2006319861A (en) Key information distribution method, system, program and medium
CN118233102A (en) Method and system for rapidly verifying whether certificate is revoked
CN109829295A (en) A kind of information system detection method
Castledine Tighter controls of student mentors may be problematic
Watanabe et al. Infinite graphs with finite diameters
Yasudo et al. Theoretical Model of Interconnection Networks Consisting of Hosts and Switches

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C14 Grant of patent or utility model
GR01 Patent grant
TR01 Transfer of patent right

Effective date of registration: 20220623

Address after: 100871 No. 5, the Summer Palace Road, Beijing, Haidian District

Patentee after: Peking University

Patentee after: New founder holdings development Co.,Ltd.

Patentee after: FOUNDER APABI TECHNOLOGY Ltd.

Address before: 100871 No. 5, the Summer Palace Road, Beijing, Haidian District

Patentee before: Peking University

Patentee before: PEKING UNIVERSITY FOUNDER GROUP Co.,Ltd.

Patentee before: FOUNDER APABI TECHNOLOGY Ltd.

TR01 Transfer of patent right
CF01 Termination of patent right due to non-payment of annual fee

Granted publication date: 20110105

CF01 Termination of patent right due to non-payment of annual fee