Summary of the invention
The embodiment of the invention provides a kind of digital content is carried out the implementation method and the system of empowerment management, and digital content can be operated at section in licensing process, has realized the more fine-grained control of digital content.
A kind of digital content is carried out the implementation method of empowerment management, comprising:
To the digital content segmentation, generate digital document; And the constraint of the operating right of the section of carrying out, generate corresponding ticket for authorization file;
When carrying out described digital document,, each section operated by its corresponding operating right constraint according to described ticket for authorization file.
According to said method of the present invention, described to the digital content segmentation, specifically comprise:
In digital content, add concordance list, memory paragraph identifies and indicates every section digital content that is comprised in every record of described concordance list.
According to said method of the present invention, describedly indicate every section digital content that is comprised, specifically comprise:
Utilize the reference position and the end position of the digital content that the object number section of expression in the digital content comprised; Perhaps
In concordance list, list each section object number pointed; Perhaps
Use side-play amount with respect to file beginning position to indicate the reference position and the end position of the digital content that each section comprise.
According to said method of the present invention, the digital content that each section comprised is all different, or part is identical.
According to said method of the present invention, the constraint of the operating right of the described section of carrying out generates corresponding ticket for authorization file, is specially:
The action type that section is allowed to is described, with and corresponding permission number of operations and/or allow time period of operation, generate described authorization file.
According to said method of the present invention, described generation digital document and corresponding ticket for authorization file also comprise:
In digital document, add the memory location sign of ticket for authorization file.
According to said method of the present invention, after the ticket for authorization file of described generation digital document and correspondence, also comprise:
Issue digital document and corresponding ticket for authorization file.
According to said method of the present invention, during the described digital document of described execution,, each section operated by its corresponding operating right constraint according to described ticket for authorization file, comprising:
By user software the section in the described digital document is operated, and determine according to described ticket for authorization file whether present segment has corresponding operating right, if then continue to finish operation this section; If not, then stop this section operation and prompting user.
According to said method of the present invention, described by user software in the described digital document the section operate, specifically comprise:
By user software first section, operate by each section of ordered pair from described digital document; Perhaps
By any one section beginning that user software is authorized to from described digital document, each section that is authorized to is operated.
According to said method of the present invention, describedly determine that according to the ticket for authorization file whether present segment has corresponding operating right, comprising:
Determine whether present segment is authorized in the described ticket for authorization file; And
Whether the operation of determining present segment has surpassed the allowed band of operating right constraint, comprises whether number of operations has surpassed the permission number of operations and/or the running time of authorizing and whether surpassed the permission running time of authorizing.
According to said method of the present invention, described by user software in the described digital document the section operate before, also comprise:
Judge whether described digital document is the file of Digital Right Management technology DRM protection, if then obtain described ticket for authorization file, and according to described ticket for authorization file each section carried out operating right and determine; If not, directly described each section of digital document operated.
According to said method of the present invention, describedly digital document is operated by user software, comprising: store the client login described digital document of issue of described user software and the issue end of ticket for authorization file and carry out on-line operation; Perhaps
The client that stores described user software is operated after earlier described digital document and ticket for authorization file being downloaded to this locality again.
According to said method of the present invention, described digital content comprises Streaming Media and print media.
A kind of digital content issue end comprises: make module and release module;
Described making module is used for the digital content segmentation, and the constraint of the operating right of the section of carrying out, and generates digital document and corresponding ticket for authorization file;
Described release module is used to issue described digital document and corresponding ticket for authorization file.
Above-mentioned digital content issue end of the present invention, described making module comprises:
First makes submodule, is used to generate concordance list, and memory paragraph identifies and indicate every section digital content that is comprised in every record of described concordance list;
Second makes submodule, is used to describe action type and the corresponding permission number of operations thereof that each section is allowed to;
The 3rd makes submodule, be used for making the output that submodule and second is made submodule according to digital content to be released and first, make digital document and corresponding ticket for authorization file, and in the digital document of making, add the memory location sign of ticket for authorization file.
A kind of digital content receiving end comprises judge module and operational module;
Described judge module is used for determining according to the ticket for authorization file whether the section of digital document has operating right;
Described operational module is used for the section of described digital document is operated by its corresponding operating right constraint.
Above-mentioned digital content receiving end of the present invention, described judge module comprise that first judges the submodule and the second judgement submodule;
Described first judges submodule, is used to judge whether present segment has the requested operation type; If then be notified to described second and judge submodule; Otherwise, notify described operational module to the present segment shut-down operation;
Described second judges submodule, is used to judge whether the operation of present segment surpasses the allowed band of operating right constraint, if then notify described operational module to the present segment shut-down operation; Otherwise, notify described operational module that present segment is carried out respective operations.
A kind of authentication management system comprises: issue end and receiving end;
Described issue end is used for the digital content segmentation, and the constraint of the operating right of the section of carrying out, and generates digital document and corresponding ticket for authorization file cocurrent cloth;
Described receiving end is used to carry out the described digital document of described issue end issue, and according to described ticket for authorization file, each section is operated by its corresponding operating right constraint.
It is a kind of to the more fine-grained method and system of protecting of digital content that the embodiment of the invention provides, promptly to the division of digital content (no matter being Streaming Media or the print media) section of carrying out, with the section is that unit is numbered, adds concordance list, carry out corresponding authorization control at section, avoided the fractionation and the combination of file effectively; And because the content of section can be divided according to service needed, its scope also can intersect and repeat, and has realized operational flexible demands has been satisfied in the control of appearance more flexibly in the numeral, has improved the efficient of business processing; The simultaneously this method that empowerment management is carried out in the digital content segmentation can be suitable for the existing file form, and the different-format file is had good versatility.
Embodiment
Utilize corresponding digital content (comprising print media and Streaming Media) tools, processing power and service needed according to file layout, to digital content is that unit carries out control of authority with the section, the user operates accordingly according to the rights of using in the ticket for authorization file when using this digital content.
Embodiment one:
The flow process of the digital content segmentation authorization management method that the embodiment of the invention one provides may further comprise the steps as shown in Figure 1:
Step S101: make digital document.
Digital content is carried out staging treating, in digital document, add concordance list, comprise the content of segment number and every section sensing.
For the digital content that is subjected to the DRM protection, also need in digital document, add the memory location sign of ticket for authorization file.
When digital content is carried out segmentation, can carry out multi-form division as required, for example:
(1) for existing format file with object number, as the CEB document, directly use the object number of the page number to carry out segmentation, for example, first page object number is that 01, the second page object number is that 10, the three pages object number is 11 ....; Accordingly with first page as first section, second page as second section, the 3rd page as the 3rd section ....; Then concordance list is shown in following table 1:
Table 1
Segment number |
Reference position |
End position |
1 |
01 |
01 |
2 |
10 |
10 |
3 |
11 |
11 |
....... |
....... |
....... |
Especially, can not insert concordance list for above-mentioned existing document with object number, when user software is operated this existing document directly with the page number or object number as segment number (segment identification).
General by in user software, adding the corresponding instruction code, when the indication user software does not have concordance list in finding file, directly the page number or object number are carried out corresponding operating as segment number.
(2) for the existing format file of being mentioned in (1), the method representation that the content that each section comprised also can be as shown in table 2, its scope can intersect or repeat.
Table 2
Segment number |
The object that points to |
1 |
01、10 |
2 |
10 |
3 |
10、11 |
....... |
....... |
(3) for the digital content that does not have object number, to use with respect to the side-play amount of file beginning position and come segmentation, its concordance list is as shown in table 3:
Table 3
Segment number |
Reference position (use with respect to the side-play amount of file beginning position and represent) |
End position (use with respect to the side-play amount of file beginning position and represent) |
1 |
0x0000 |
0x1000 |
2 |
0x1000 |
0x2000 |
3 |
0x2000 |
0x3000 |
....... |
....... |
....... |
(4) for the digital content that does not have object number, the content that each section comprised also can intersect and repeat.
Step S102: carry out authorization control at section.Be specially: to digital content is that unit is authorized with the section, makes corresponding ticket for authorization file; According to business demand, in the ticket for authorization file, add the constraint explanation of section, and indicate the number of times (or time) that relates to segment identification (being segment number), scope and mandate.
Especially, when there is a plurality of mandate in the content of a section, to authorize being as the criterion of least number of times.
Can also comprise: the content to each segmentation is encrypted, thereby further guarantees the security of its segmentation mandate.
Step S103: issue digital document and and corresponding ticket for authorization file.
Step S104: user software is operated digital document.
When user software is operated digital document, can onlinely read or play, also digital document and ticket for authorization file can be downloaded to this locality together and read again or play.
Step S105: user software identification file layout, judge whether digital document is the file that protected by DRM, if, execution in step S107 then, if not, execution in step S106 then.
Step S106: user software can continue digital document is operated.
Step S107: user software is identified to appointed positions according to the memory location of stored authorized license file in the digital document and searches the ticket for authorization file.
Step S108: user software resolves the ticket for authorization file, the segment number that obtains being authorized to, scope and the number of times that is authorized to.
Step S109: user software judges since first section executable operations whether present segment (promptly first section) has been awarded corresponding rights of using, if, execution in step S110 then, if not, execution in step S111 then.
Step S110: user software judges whether the number of times that this section is used has reached the maximum times that this section permission is used (or not surpassed the time that this section permission is used), if not, access times record that then will this section adds 1, goes to step S112, if, execution in step S111 then.
Step S111: user software stops that operation of this section and prompting user are not had the corresponding rights of using of this piece of digital content, execution in step S113 then.
Step S112: user software continues to finish the operation to this section, uses this piece of digital content; Execution in step 113 then.
Step S113: user software continues next section is operated, and repeats above decision operation process, and the operation of all sections all is finished in file.
Illustrate below:
Example 1: realize in certain existing format file the 2nd~5 page the authority of checking.
When utilizing tools to make digital document; each page or leaf that directly will have format file (as: CEB document) now is made digital document as one section; because this file is protected by DRM, during making, add the memory location sign of ticket for authorization file in ending place of file simultaneously.
Owing to there is in the CEB document page number to exist, and each page or leaf is all corresponding an object number, and for example, first page object number is that 01, the second page object number is that 10, the three pages object number is 11 ....; Then be that unit carries out segmentation with the page or leaf, for example: with first page as first section, second page as second section, the 3rd page as the 3rd section ....; Then concordance list is shown in following table 4:
Table 4
Segment number |
Reference position |
End position |
1 |
01 |
01 |
2 |
10 |
10 |
3 |
11 |
11 |
....... |
....... |
....... |
Realize that this CEB document can check for the 2nd to 5 page, then utilize the mandate instrument in the ticket for authorization file of this CEB document, add following code:
<view>
<constraint>
<segment seg=2>-1</segment>
<segment seg=5>0</segment>
</constraint>
</view>
Wherein: label view shows that reading authority, label constraint show constraint, the mandate of the label segment section of showing, its attribute seg has shown the initial segment number of concrete mandate, and its value has shown the mandate number of times, and 0 for there not being mandate, and-1 is unlimited mandate.
The above-mentioned code section of showing 2 of the interpolation in the ticket for authorization file has the unlimited authority of browsing later, stops when section 5.
Issue holds the digital document of the CEB document that will make and its ticket for authorization file to send by media such as networks.
When the user used ocr software to open this CEB document, user software judged at first whether this CEB document protected by DRM, if not, then can continue operation, used this CEB document; If then the ticket for authorization file is searched by user software.
User software resolves the ticket for authorization file, and determining the segment limit that allows to use is the 2-5 section, and the number of times that allows to consult is not limit.
User software is operated the 1st section (promptly the 1st page) of this CEB document, analysis result according to the ticket for authorization file, because the 1st section (promptly the 1st page) is not awarded corresponding operating right, then continue the 2nd section (promptly the 2nd page) operated, because the 2nd section (promptly the 2nd page) has corresponding rights of using, then shows the user with the 2nd page, continues then the 3rd page is operated, ..., after showing the user with the 2nd~5 page.After the 5th page of demonstration finished, continue the 6th section, because the 6th section (promptly the 6th page) extremely finishes not within the scope of authority, ocr software will carry out corresponding prompt to the user, and no longer show the corresponding contents of this CEB document.
Example 2: the 20th minute to 30 minutes contents of realization video file can not be watched, and remainder is not limit.
Utilize tools that video content is made into a video file, the flow of the digital content in each minute broadcast scope is made digital document as section, add the memory location sign of ticket for authorization file simultaneously in ending place of file.
Because this video file does not have utilizable ready-made signs such as object number, then use with respect to the side-play amount of file beginning position and come segmentation, for example: the content flow that this video file was play in each minute is 1M, and its concordance list is as shown in table 5:
Table 5
Segment number |
Reference position (use with respect to the side-play amount of file beginning position and represent) |
End position (use with respect to the side-play amount of file beginning position and represent) |
1 |
0x00000000 |
0x10000000 |
2 |
0x10000000 |
0x20000000 |
3 |
0x20000000 |
0x30000000 |
....... |
....... |
....... |
Realize that the 20th minute to 30 minutes scopes of this video content can not watch, then utilize the mandate instrument in the ticket for authorization file of this video content, to add following code:
<display>
<constraint>
<segment seg=0>-1</segment>
<segment seg=20>0</segment>
<segment seg=30>-1</segment>
</constraint>
</display>
Wherein: label display shows the broadcast authority, and all the other are identical with example 1.
The above-mentioned code section of showing 0~20 of adding in the ticket for authorization file has unlimited right of broadcasting, and section 20~30 does not have the authority of broadcast, has unlimited right of broadcasting after the section 30 yet.
The issue end sends video file and the corresponding ticket for authorization file of making by media such as networks.
When the user used playout software to play this video file, user software judged at first whether this video file protected by DRM, if not, then can continue operation, used this video file; If then the ticket for authorization file is searched by user software.
User software resolves the ticket for authorization file, and determining the segment limit that does not allow in the video file to use is the 20-30 section, and other sections can be play, and broadcasting time is not limit.
When the user uses playout software to play this video file,, can play to the content of the 19th minute (promptly the 1st section to the 19th section) since the 1st minute.When being played to the second ten minutes, because this section does not have the authority of broadcast, then this section content can not be used by the user, and the system prompt user does not have rights of using, continues then to carry out next section, up to executing the 30th section, when carrying out the 31st section, just can play.
Embodiment two:
When user software is operated digital document, can only operate the section that is authorized to, its flow process as shown in Figure 2, concrete execution in step is as follows:
Step S201: make digital document.
Digital content is carried out staging treating, in digital document, add concordance list, comprise the content of segment number and every section sensing.Described as embodiment one, to the division of paragraph a variety of forms can be arranged, do not repeat them here.
For the digital content that is subjected to the DRM protection, also need in digital document, add the memory location sign of ticket for authorization file.
Step S202: carry out authorization control at section.Be specially: to digital content is that unit is authorized with the section, makes corresponding ticket for authorization file; According to business demand, in the ticket for authorization file, add the constraint explanation of section, and indicate the scope that relates to the segment number or the section of relating to and the number of times of this section mandate.
Especially, when there is a plurality of mandate in the content of a section, to authorize being as the criterion of least number of times.
Also comprise the content of each segmentation is encrypted, thereby further guarantee the security of its segmentation mandate.
Step S203: issue digital document and and corresponding ticket for authorization file.
Step S204: user software is operated digital document.
When user software is operated digital document, can onlinely read or play, also digital document and ticket for authorization file can be downloaded to this locality together and read again or play.
Step S205: user software identification file layout, judge that digital document is the file that is subjected to the DRM protection, if, execution in step S207 then, if not, execution in step S206 then.
Step S206: user software can continue digital document is operated.
Step S207: user software is identified to appointed positions according to the memory location of stored authorized license file in the digital document and searches the ticket for authorization file.
Step S208: user software resolves the ticket for authorization file, the segment number that obtains being authorized to, scope and the number of times that is authorized to.
Step S209: user software judges from any one section beginning executable operations that is authorized to whether the number of times that this section is used has reached the maximum times that this section permission is used, if, execution in step S210 then, if not, access times record that then will this section adds 1, execution in step S211.
Step 210: user software stops the operation of this section and points out the user no longer to have the rights of using of this piece of digital content, and execution in step 212 then.
Step 211: user software continues to finish to this operation, uses this piece of digital content; Execution in step 212 then.
Step S212: user software continues the section that the next one is authorized to is operated, and repeats above decision operation process, and the operation of the section that all are authorized in to file all is finished.
Illustrate below:
Example 3: realize that the chapter 1 in certain e-book freely browses 10 times
Utilize tools that the content production of e-book is become an electronic book documentary, as one section, add concordance list and ticket for authorization file storage location sign with one page of e-book.
Realize that this e-book chapter 1 freely browses 10 times, and known this e-book chapter 1 comprises 5~20 sections, utilizes the mandate instrument in the ticket for authorization file of this e-book, add following code:
<view>
<constraint>
<segment seg=5>10</segment>
<segment seg=20>0</segment>
</constraint>
</view>
The above-mentioned code section of showing 5 beginnings of the interpolation in the ticket for authorization file can be browsed 10 times up to the part that section 20 stops.
The issue end sends electronic book documentary and the corresponding ticket for authorization file of making by media such as networks.
When the user used ocr software to open this electronic book documentary, user software judged at first whether this e-book protected by DRM, if not, then can continue operation, used this electronic book documentary; If then the ticket for authorization file is searched by user software.
User software resolves the ticket for authorization file, and determining the segment limit that allows in the electronic book documentary to use is the 5-20 section, and the number of times that allows to browse is 10 times.
Then user software is directly operated the 5th section of this e-book, judge that whether number of times that this section browsed is greater than the number of times 10 that allows to browse, if then ticket for authorization does not allow user software that this e-book is proceeded operation, reminds the user no longer to have the right to use of this e-book simultaneously; If not, content revealing that then will this section is given the user.User software continues the 6th section is operated then, by that analogy, stops when carrying out the 20th section.And the prompting user no longer has the rights of using of other parts.
Example 4: realize that picture can be derived in certain electronics newspaper.
Utilizing tools is an electronic messaging spare with the content production of electronics newspaper.The electronics newspaper is carried out staging treating, wherein can adopt the sign of the object number of picture, add concordance list and ticket for authorization file storage location sign as segmentation for picture.
Realize that the picture (as picture 1) in this electronics newspaper can be derived, and known picture 1 is the 3rd section, then utilizes the mandate instrument in the ticket for authorization file of this electronics newspaper, add following code:
<export>
<constraint>
<segment seg=3>-1</segment>
<segment seg=4>0</segment>
</constraint>
</export>
Annotate: label export shows the derivation authority, and all the other are with the explanation of example 1.
The above-mentioned code section of showing 3 of the interpolation in the ticket for authorization file (being picture 1) can unlimitedly derive.
Electronic messaging spare that issue end will be made and its ticket for authorization file send by media such as networks.
Open this electronic messaging spare when the user uses ocr software, see picture 1, when wanting to derive operation, user software judges at first whether this electronics newspaper protected by DRM, if not, then can continue operation, uses this electronic messaging spare; If then the ticket for authorization file is searched by user software.
User software resolves the ticket for authorization file, find to allow in the ticket for authorization file section 3 at this picture place to derive operation, and the number of times that allows to derive is not limit.
Then the user can continue this operation, and the picture of section 3 is derived.
According to above-mentioned digital content segmentation authorization management method of the present invention, can make up a kind of digital content segmentation authentication management system, this system comprises issue end 30 and receiving end 40.
Wherein, issue end 30 is used for the digital content segmentation, and the constraint of the operating right of the section of carrying out, and generates digital document and corresponding ticket for authorization file cocurrent cloth; Its structure comprises as shown in Figure 3: make module 301 and release module 302.
Making module 301 is used for digital content (comprising Streaming Media and print media) is made into digital document.Specifically comprise digital document is carried out segmentation, add concordance list, the scope of the section of indicating; The operating right of the section of carrying out constraint in the ticket for authorization file; And the memory location sign of in the digital document that is made into, adding the ticket for authorization file.
Release module 302 is used to issue digital document and the corresponding ticket for authorization file that making module 301 is made.
Preferable, described making module 301 can also further be divided into: first makes submodule 3011, second makes submodule 3012 and the 3rd making submodule 3013.
First makes submodule 3011, is used to generate concordance list, and memory paragraph identifies and indicate every section digital content that is comprised in every record of described concordance list.
Second makes submodule 3012, is used to describe action type and the corresponding permission number of operations thereof that each section is allowed to.
The 3rd makes submodule 3013, be used for making the output that submodule 3011 and second is made submodule 3012 according to digital content to be released and first, make digital document and corresponding ticket for authorization file, and in the digital document of making, add the memory location sign of ticket for authorization file.
Wherein, receiving end 40 is used to carry out the described digital document of described issue end issue, and according to described ticket for authorization file, each section is operated by its corresponding operating right constraint; Its structure comprises as shown in Figure 4: judge module 401 and operational module 402.
Judge module 401 is used to judge whether digital content protected by DRM, if, seek corresponding ticket for authorization file, determine according to the ticket for authorization file whether the section in the digital document has operating right.If then notifying operation module 402 continues to finish this operation; If not, notifying described operational module 401 to continue next piece of digital content handles.
Operational module 402 is used for the section of issuing the digital document of holding issue is operated by its corresponding operating right constraint, comprises reading electronic documents, picture derivation and playing video file etc.
Preferable, judge module 401 can also further be divided into: first judges the submodule 4011 and the second judgement submodule 4012;
First judges submodule 4011, is used to judge whether present segment has the requested operation type; If then be notified to second and judge submodule 4012; Otherwise, 402 pairs of present segment shut-down operations of notifying operation module;
Second judges submodule 4012, is used to judge whether the operation of present segment has surpassed the scope that the operating right constraint allows, if, then 402 pairs of present segment shut-down operations of notifying operation module; Otherwise 402 pairs of present segments of notifying operation module are carried out respective operations.
In sum, the method and system of the digital content segmentation empowerment management that the embodiment of the invention provides are when carrying out empowerment management to digital content, by digital content is carried out segmentation, carry out corresponding authorization control at section again, realized the flexible control of digital content empowerment management; The trouble that need split and make up when having avoided effectively in the prior art that digital content carried out empowerment management.And, thereby make more flexible to the control of digital content owing to the scope that section is comprised can intersect and repeat.Simultaneously can be according to the division of the object number section of carrying out that exists in the existing file form, make that empowerment management is simple, fragment position search convenience, the different-format file is had good versatility.
The above; only be the preferable embodiment of the present invention; but protection scope of the present invention is not limited thereto; anyly be familiar with those skilled in the art in the technical scope that the present invention discloses; the variation that can expect easily, replace or be applied to other similar systems, all should be encompassed within protection scope of the present invention.Therefore, protection scope of the present invention should be as the criterion with the protection domain of claims.