CN101339592A - All-purpose digital copyright protection technology frame - Google Patents
All-purpose digital copyright protection technology frame Download PDFInfo
- Publication number
- CN101339592A CN101339592A CNA2008101410347A CN200810141034A CN101339592A CN 101339592 A CN101339592 A CN 101339592A CN A2008101410347 A CNA2008101410347 A CN A2008101410347A CN 200810141034 A CN200810141034 A CN 200810141034A CN 101339592 A CN101339592 A CN 101339592A
- Authority
- CN
- China
- Prior art keywords
- digitized content
- content
- digitized
- equipment
- user
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Abstract
The invention is applied in the field of digital copyright protection technology and discloses a general digital copyright protection technology framework for effectively protecting the right of the circulated digitalization content and legally spreading the circulated digitalization content; the framework adopts a novel encrypted authorization system as a basic technology support; according to the different personalized requirements of the content provider, the content issuer and the content user, the framework retrenches the popular three elements of the digital privilege management to two most basic elements of an encrypted authorization operation---an equipment for encrypting authorized digitalization content and decrypting the digitalization content; according to the privilege scale of the applicants and due to simple technical means, the digitalization content is authorized for issue and controlled with fine-granularity; the terminal users use the hard disk equipment or software equipment provided with a fixed mark; according to the applied privilege scale, the digitalization content is legally used and the illegal persons can not tort for being not breaking through the equipment forbiddance. The technical framework is suitable for the fields such as the issuing of OPTV, electronic books and movies and televisions content where the digitalization content is needed to be controlled in privilege.
Description
Technical field
(digital right management, DRM) technical field are specifically related to a kind of general digital copyright protection technology frame to the invention belongs to digital copyright protecting.
Background technology
Digital copyright protecting (digital right management, DRM) technology claims the digital copyright management technology again, this technology is protected the copyright of digitized content by encrypting, authorizing, form three key elements of digital copyright protecting: the content of encryption, legal mandate and content key, all terminal users have only and obtain this three key elements simultaneously, according to the content of the scope use content key enabling decryption of encrypted of authorizing, could normally use this digitized content; According to such principle; company or alliances of company numerous in the world wide throw huge fund research one after another, formulate digital copyright protection technology and standard; the digital copyright protection technology standard and the system standard of letting a hundred schools contend have been produced; typical technical manual such as HDCP, DTCP, CPRM/CSS/AACS, CAS, DMP, SVP etc., typical technical standard such as the OMA DRM of Open Mobile Alliance, the ISMA DRM of internet stream media alliance etc.But all present DRM technology all also are in the test exploratory stage, and the distance maturation also has considerable time, more lack DRM standard unified, effectively can be general and put into effect, and cause the reason of this present situation as follows:
1, basic technology does not have important breakthrough, because all DRM technology all are combination and integrated support the with encryption technology, authentication techniques, digital watermark technology and basic technologies such as tamper resistant hardware or smart card, and these basic technologies in actual use, loaded down with trivial details complexity, security performance and operational efficiency do not have too big breakthrough yet, therefore, there is not the above the ordinary generally acknowledged DRM standard of industry that can access to be born at all.
2, technology is of a great variety, and good and bad difficult the branch, standard and equipment interoperability, consistance are poor, cause overlapping development and overlapping investment, not only for the user has increased puzzlement, also are difficult to communication between the operator.
Summary of the invention
The objective of the invention is: provide a kind of can be general, simple and direct efficiently, open DRM technological frame, various application and business are set up, dispose and managed to permission safely and effectively in the environment of multiple digital content provider, digitized content publisher; Make various application and business realize interconnection on each Terminal Type worldwide, allow the user can be between different market, digitized content publisher and terminal, select to use interoperable multiple digital service, enjoy colourful digitized content service and high-quality audio/video program content service.
Digital signature and authority systematic function, be applicable to all digitized content suppliers and digitized content publisher, the difference of it and general POD module is, this master control POD module can the line balance converter class, discern different classes of POD module user's subscription request, generate the encryption authorization digitized content that this classification POD module user can normally use, common POD module then can only be discerned similar POD module.
The authority sign: show that with four 16 system numerical tables the authority sign can expand to eight, the kind of preceding two 16 system bit representation digitized contents, latter two 16 system bit representation is to the disposal authority of this kind digitized content.For example 0101 expression of authority sign has the right of reading to digital document, but can't bootlegging, printing, 0302 expression of authority sign has the right of listening to 2 times to certain music, 0000 expression can be used and the digitized content that can not propagate again etc.
Digitized content distribution format: Ben Geshi is applicable to the distribution of all digitized contents, be the form of the unique approval of all devices, once complete digitized content distribution is called a content frame, for the king-sized digitized content of content, allow to divide the frame distribution, every content frame comprises two parts:
Frame head: comprise publisher's sign and equipment class, subscriber's Equipment Serial Number, publisher's Equipment Serial Number and encryption distribution model selection word, this key material, authority sign, divide flag of frame, money item and frame head verification and.Wherein dividing flag of frame is two 16 system numerals, and 00 is masked as independent frame.The mode that non-independent frame successively decreases with numeral is complete zero until arriving.
Frame: the digitized content of high strength encrypting, comprise digital relay key, digitized content and a frame verification and.
The present technique framework is very simple to the mandate of digitized content, at first give equipment with right---with user's Equipment Serial Number application-specific vector secret key encryption digitized content, again the authority sign is placed on the extent of competence that the ciphertext frame head limits this enciphered digital content, after subscriber equipment is received this frame of digital content, take out target device sequence number and the comparison of oneself from frame head, if the identical right that has just obtained to decipher this digitized content, then according to the feature of the authority of head sign opertaing device, make digitized content after the deciphering in legal use within the scope of authority.For the existing licensing scheme of compatibility, the invention provides the support of the authorisation document that the XML digital publishing rights descriptive language that meets the ODRL technical manual is formed.
The digitized content issuing mechanism of this framework also comprises following apparatus or system:
The subscribed services platform: comprise EPG module and authority management module two parts, wherein the EPG module is used for providing the current authority of digitized content or the rendition list, digitized content brief or promotional video and explicit user and the balance of funding, receiving station to sow to the digitized content user and carries and subscription request; Authority management module is used to respond the digitized content user's that the EPG module passes over program request download request and subscription request, and for subscription request, directly generate to order and store in the rights management data storehouse after authorization message is encrypted,
All can duplicate the digitized content of encrypting, scribe, be recorded to device or software on other medium; As the medium of CD writer, computing machine and storage digitized content such as disk, CD, USB flash disk, streaming tape drive etc.
Described support technology is the authentication mechanism for encrypting that a kind of novel encryption and decryption process of passing through realizes sourcesink discriminating, authentication, digital signature and digital watermarking function automatically.
Aforesaid all devices all is the common apparatus that is equipped with the POD module; POD module and equipment can be that two discrete parts also can be integrated parts; after common common apparatus is plugged the POD module; just become the specialized equipment that possesses digital copyright protection function; the POD module of every equipment all have one globally unique; unmodifiable; determine the sequence numbering and the device class numbering of this equipment encryption and decryption key space scope; the POD module of different sequence numberings has distinct key space; this numbering is the main body of granted rights; form by 16 16 system numerals, uniquely the identity of indication equipment.The complete circuit module or the software module of novel encrypting and authenticating cryptographic system that this POD module has been integrated, the inner symmetric key that uses 1408BIT has high-intensity encryption feature; When hardware was realized, it can be PC card, smart card and special digital chip, and interface specification can be USB, 1394, IEEE, PCI, induction interface etc.; When software is realized, be embedded in software equipment inside.
The POD module adopts the novel encrypting and authenticating technology based on equipment identities (but detailed encrypting and authenticating principle referenced patent 200810140647.9) and authority sign and control technology, realize encrypting no encryption key distribution and transmission, correctly decipher nature and realize authorizing and authentication; As long as requesting users has corresponding authority, publisher just directly sends to this user with digitized content with the equipment POD serial number encryption of this user's registration, and guarantees to have only that this user is unique can decipher and use intra vires.
In order to realize that to the mandate distribution of multiple digitized content with in use within the scope of authority the present technique framework has defined device class numbering, two kinds of POD modules and corresponding authority and identified and general digitized content distribution format:
Device class: in order to adapt to the different demands of different digital content publisher, this framework is divided into the POD module of all devices the equipment class of 256 kinds of different encryption features with two 16 system numbers, different classes of equipment POD module can't be compatible without the mandate of master control POD module; Be divided into two kinds of general common POD module and special-purpose master control POD modules in each equipment class.
General common POD module, this POD module has authority recognition, encrypt/decrypt, authentication, digital signature and authority systematic function, be applicable to that all terminal users are the digitized content user, in the scope of authorizing, use various portable terminals neatly, present the digitized content that obtains.
Special-purpose master control POD module, this POD module have authority recognition, encrypt/decrypt, authentication,
Technical scheme:
To achieve these goals; the present invention adopts disclosed encrypted authentication system in " a kind of novel authentication mechanism for encrypting " patent (number of patent application 200810140647.9); support technology as the basis; cooperate leading design concept and aim open, versatility, design a kind of general, open digital copyright protection technology frame.The present technique framework is applicable to internet network, IPTV, DMB, audio/video on-demand system, digital publishing, music content distribution, movie and television contents distribution making, computer software and fields such as application program distribution, figure, image and writing, digital library and 3G communication; Support the direct encryption authorization of digitized content of existing all forms, need not carry out format conversion.
A kind of general digital copyright protection technology frame comprises entity, digitized content, equipment and support technology four parts;
Described entity comprises:
Digitized content supplier: can have this digitized content copyright or proprietorial entity or a nature person to what public users or publisher provided digitized content.As the author of figure, image and written historical materials, the organizer of the wright of video display, music program, computer software, application program etc.
Digitized content publisher: the entity or the nature person that propagate or sell the digitized content of authorizing by the form of wired, wireless or other medium through the digitized content supplier.As Virtual network operator, digital-TV operator, digital publication publishing house and all kinds of digitized content dealer, website etc.
Digitized content user: obtain usufructuary entity of digitized content or nature person by buying.
Described digitized content comprises: different all the elements of form that software program, figure, image, written historical materials, book and periodical, audio frequency, video, film, video etc. occur with the digitizing form.
Described equipment comprises: computing machine, mobile communication equipment and
All can be reduced into figure, image and written historical materials device or the software for user's direct viewing and use with the digitized content of encrypting; As graphic image browser, e-book browser, written historical materials editing machine, graphic image edit tool.
All can be reduced into device or the software that audio stream is directly listened to the digitized content of encrypting; As MP3, MP4, digital audio tape, CD player and software player etc.
All can be reduced into the digitized content of encrypting device or the software that video format or other media formats supply user's direct viewing or watch by other display device or software; As VCD, DVD, digital video, set-top box, palm PAD, DV, software player, display device etc.
All can be encrypted digitized content packing and give the device and the software of certain authority; As hardware encipher machine, software cryptography program etc.
For the program request download request, then in the rights management data storehouse, check the corresponding authority clauses and subclauses, the program request download request that meets authorising conditional, generate corresponding digital content mandate distribution instruction and send into the distribution formation, and connection is redirected to the distribution services platform, by the time after the distribution services platform is responded the successful information of issue, from the distribution formation, remove respective entries, and from the authority management database, deduct this service fee.
Distribution services platform: be used to accept the program request download request of having authorized that the subscribed services platform passes over, connection is transferred to corresponding digital content repository or streaming media server respectively according to program request or download then in the definite position of search digitized content from registration table.
Digitized content warehouse: be used for digitized content storage and transmission, can accept content provider's digitized content uploads, the user ID that provides according to the distribution services platform and the digitized content of mandate, provide the download of digitized content encryption authorization to transmit, streaming media server is listed in the one-level user in digitized content warehouse.
Streaming media server: be used for instant online streaming video and transmit, the user ID that provides according to the distribution services platform and the programme content of mandate, provide online request and broadcast service from digitized content warehouse program downloading, this server has a master control service management module and a plurality of media play engine.
The present technique framework adopts the issuing mechanism of two key elements to digitized content, the equipment of the digitized content of encryption authorization and deciphering digitized content; Specific explanations is: specific equipment has been authorized and be limited to digitized content when encrypting, more particularly be limited to a unique POD module; The digitized content user only obtains the digitized content of encryption authorization and has the equipment that can decipher this encryption authorization digitized content, could in the scope of authorizing, correctly decipher, use this digitized content, first sign of authorizing here is a digitized content publisher enciphered digital content, whether used encrypting key uses requestor's Equipment Serial Number application to generate, if just formed the first element---the digitized content of encryption authorization, as for how managing this mandate, then be that the authority identifier word that is placed in the frame head embodies.The digitized content user is after just the requestor obtains the digitized content of this encryption authorization, what at first will do is the sequence number comparison of taking out target device sequence number and own system equipment from frame head, if the identical frame head follow-up data of just deciphering, according to the frame head verification and correct finally determine, oneself has obtained the use authority of this digitized content, then the key material that carries with the Equipment Serial Number and the frame head of publisher is regenerated to the POD of own equipment module application decryption key, and with the decryption key deciphering frame of regeneration, determine by the frame verification with digital relay key whether oneself has been fooled then, obtain the digitized content oneself ordered at last, form second key element---the equipment of deciphering digitized content of digitized content distribution; As for how using this digitized content, because equipment has obtained the authority identifier word, then can only legal use in the scope of authority identifier word control.
The digitized content issuing mechanism of this framework is terminal user's the overall process from the digitized content supplier to digitized content publisher to the digitized content user, digitized content only just can be reduced reproduction in all devices inside, provide the approach of use authority digitized content flexibly in order to ensure the safety of last centimetre of digitized content with for the digitized content user, all intermediate equipments allow users to adjust the sequence numbering that lower floor's equipment is set within the scope of authority, the digitized content that all intermediate equipments are exported all be at a certain devices encrypt of lower floor can not audiovisual.For example set-top box, digital video, DVD, VCD, condition receiving system CAS etc., the user can be set to the sequence number of digital television or display device in these intermediate equipments.Then allow to select different memory devices or copying equipment to export the digitized content that to propagate again for literal, graphic image equipment.Computer software and application program then allow the user to select arbitrarily to back up but can't reduce use in other equipment.
The present technique framework provides the protection mechanism of multiple issuing mechanism and raw digitized content to the distribution of digitized content, and these mechanism are:
Program request issuing mechanism: all authorize making specially from all the elements of digitized content publisher equipment distribution under this mechanism at a certain equipment user, have only also that legal authorized user device is unique can and used the digitized content decryption restoration of this encryption within the scope of authority, no matter other unauthorized device passes through much effort, all can't decryption restoration.
The multicast issuing mechanism: all the elements from the equipment distribution of digitized content publisher under this mechanism all customize at one group of equipment user, this group user has identical authority and possesses the Equipment Serial Number of group characteristic, also have only the unique decryption restoration of digitized content that this group user's equipment could will encrypt and using within the scope of authority, no matter other non-this group subscriber equipment passes through much effort, all can't decryption restoration.
The multicast issuing mechanism: all the elements from the equipment distribution of digitized content publisher under this mechanism all customize at a multicast group equipment user, this multicast group user has identical authority and possesses the Equipment Serial Number of multicast group characteristic, also have only the digitized content decryption restoration that this multicast group user's equipment could will encrypt and using within the scope of authority, no matter other non-this multicast group subscriber equipment passes through much effort, all can't decryption restoration.
Broadcast distribution mechanism: all the elements from the equipment distribution of digitized content publisher under this mechanism are all effective at same category of device, such equipment user can decipher this digitized content simultaneously, watch or listen to but authority is only limited to, and non-same category of device user can't decipher.
Foreign lands' issuing mechanism: in order to solve the interconnection between different publishers and distinct device class user, this framework is provided with foreign lands' issuing mechanism, digitized content publisher can make the mandate digitized content that can be accepted by the disparate devices user at the customer group of other digitized content publisher, and prerequisite is that the disparate devices user needs to order.
Original contents protection mechanism: in order to guarantee that digitized content copyright that digitized content supplier, publisher have is not invaded and the data security of stealing and rights database; the original contents protection mechanism can implement to encrypt storage to these original digitized contents; in case broken away from the facility environment of original encryption; no matter pass through much effort, all can't become the raw digitized content by decryption restoration.
It is very simple adopting the process of technological frame distribution digitized content of the present invention, at first digitized content supplier and digitized content publisher the digitized content tabulation that oneself can provide are provided and introduce data accordingly, represent by the EPG module on the public ordering platform, the user who has a relevant device is by landing the EPG platform and browse and trying, select the part or all of digitized content oneself liked, send subscription request to digitized content supplier or digitized content publisher, and pay rights fees by online bank of network or off-line bank, after digitized content supplier or the response of digitized content issuer system, the authorization entries that the subscribing voucher that provides according to bank generates subscribed users is stored in the authorization message database of subscribed services platform, and these clauses and subclauses mainly comprise subscriber's Equipment Serial Number, the authority sign of ordering, the spendable amount of money etc.Then enter digitized content distribution authorization stages, the digitized content that the subscribed services platform is selected the user, subscriber's Equipment Serial Number and this authorization flag generate the distribution instruction, link is turned to the distribution services platform, the distribution services platform is searched for the definite position of number digitized content from registration table, then connection is transferred to corresponding word content repository or streaming media server, distribution equipment is encrypted to the application of POD module with this instruction, Equipment Serial Number with the requestor after the POD module responds generates encrypting key, then will be by the digitized content title of distribution, after the digitized content encryption is taken out in the position, forming the distribution frame together with frame head sends, by the time after overtime, notice subscribed services platform is deducted this issuing expenses.After subscriber system is received the digitized content of encryption, take out legal target device sequence number and the comparison of oneself from frame head, if identical Equipment Serial Number, random key material and the mandate field of then deciphering frame head and taking out publisher from frame head, decipher to the application of POD module, after the POD module responds, with Equipment Serial Number, of the digitized content deciphering of random key material generating solution decryption key of the publisher that obtains, under the control of authorizing field, reproduce digitized content and can show this expense and the balance of funding encrypting.For special demand for security, after finishing, deciphering also to check frame verification and and the correctness of digital relay key.
The present invention compares with administrative skill with existing digital copyright protecting, be simplified to two key elements by three key elements with digital copyright protecting, not only make the technological means of digital copyright protecting simpler and more direct efficient, and abolished the unsafe factor that loaded down with trivial details authentication process and digital certificate and content key transmission bring and influence network efficiency, make the user can enjoy the digitized content service of smoothness more; The no key encryption authorization of digitized content makes digitized content supplier, publisher and user three parts's legitimate rights and interests obtain safeguarding that illegal piracy person may obtain not having the digitized content of mandate hardly with the binding of both sides' equipment identities.
Adopt the present technique framework to make up the DRM system platform in addition, almost need not carry out large-scale structure of modification or reconstruction to existing various digitized content publishing systems, as long as make the equipment and the POD module standard that conform to the actual situation, begin penetration and promotion from user side, and existing operator, publisher are as long as adopt this technical manual just can adapt to new DRM technological frame immediately.
Description of drawings:
Fig. 1 is a framework hierarchy chart of the present invention
Fig. 2 is general digitized content frame head form,
Fig. 3 is a master control POD module mandate encryption flow of the present invention
Fig. 4 is a general POD module mandate deciphering flow process of the present invention
Fig. 5 is a general digitized content distribution flow process of the present invention
Fig. 6 is foreign lands' digitized content distribution flow process of the present invention
Fig. 7 is one of the present invention and authorizes the workflow of publishing the video display CD
Fig. 8 is the workflow of a DVD Play System of the present invention
Fig. 9 is the internal digital contents processing flow process of a Digital Television of the present invention
Embodiment:
Below in conjunction with accompanying drawing and exemplifying embodiment digital copyright protection technology frame of the present invention is done further more detailed description.
Describe, in general terms: referring to Fig. 1, Fig. 2, Fig. 3, Fig. 4, the present invention has defined general, open, simple and direct a digital copyright protecting and a rights management framework, this framework comprise " (see figure 1) digitized content supplier, digitized content publisher and digitized content user three class entities and digitized content and ensure the digitized content safe transmission not by the support technology of bootlegging and use, the technical measures of this guarantee realize by equipment; The equipment here is a kind of general term, it comprises hardware and software, support technology is to be connected with interface by embedding with equipment with the form of POD module, make the equipment of digitized content publisher handle and transmit in the process of digitized content, to digitizing content-encrypt and mandate, digitized content user's equipment is then by obtaining the deciphering authority, the digitized content of correct enabling decryption of encrypted mandate, and in the scope of authorization privilege restriction this digitized content of legal use, thereby guarantee between digitized content publisher and digitized content user, to transmit safely and license, with the commercial interest of safeguarding publisher and user's legitimate rights and interests.
In order to realize that restriction is encrypted and used in the mandate of digitized content, this framework has defined general digitized content frame head referring to Fig. 2, characteristics according to support technology, frame head adopts publisher's sign and equipment class 1 expressly, subscriber's Equipment Serial Number 2 and publisher's Equipment Serial Number 3, as direct identifier and authorization flag, because both sides' Equipment Serial Number is and encryption key, the decruption key binding, any one sequence number of illegal modifications all will cause follow-up frame to decipher, unique sequence number that is identified by the Equipment Serial Number and the frame head of subscriber system coincide, and equals to authorize the subscriber to decipher; Then frame head provides the follow-up field of frame head with the form of encrypting, distribution model selection word 4, this encrypted secret key material 5, the authority sign 6 of this distribution, divide flag of frame 7, money item 8 and frame head verification and 9, for the correct decrypt subsequent frame of subscriber provides enough parameters and has deciphered the disposal authority of back to digitized content, what distribution model selection word 4 had provided this transmission is to order or broadcast mode, encrypted secret key material 5 generates the used random key material of encrypting key when being publisher's encryption, guarantee that deciphering person system uses this encrypted secret key material can generate the decruption key the same with the encipherer, the authority sign 6 of distribution has been stipulated the service condition and the mode of the digitized content of this distribution with the form of numeral, effective when dividing flag of frame 7 to have only big digitized content distribution, it has provided divides the quantity of frame and current frame number, money item 8 is options, be used to point out the remaining sum of the current order of user, frame head verification and 9 is the key parameters that ensure the frame head data integrality, because being modified, what data of frame head all will cause final deciphering failure, so, if frame head bad checksum, can finish this distribution early, and return error message to publisher.Above-mentioned frame head information is the ciphertext with requestor's relay secret key encryption last time except that both sides' Equipment Serial Number.
Fig. 3 has provided the data flow of digitized content publisher encryption authorization, this flow process is the treatment scheme of the distribution equipment (the distribution platform or the streaming media service platform in digitized content warehouse) of digitized content publisher, user's request is the solicited message by the mandate of distribution services platform among the figure, it comprises user's Equipment Serial Number, the digitized content details, authority sign and other information, if use digital relay key, the relay key that also comprises the user, distribution equipment at first takes out the content of request from the digitized content warehouse, need the then segmentation of segmentation, that uses the relay key then is placed on the digitized content beginning with user's relay key, use request user's Equipment Serial Number to POD module application encryption key then, finish preliminary mandate to requester device, then to the digitizing content-encrypt, with the key material that obtains, the subscriber equipment sequence number, this machine sequence number, the distribution pattern, authority signs etc. are formed frame head, with sending with the frame ciphertext after the relay secret key encryption, by the time after overtime, notice subscribed services platform is deducted these issuing expenses and is finished a digitized content distribution, and the relay key of this generation is placed in the database of subscribed services platform.
Fig. 4 has provided the workflow that the digitized content user authorizes deciphering, among the figure, the ciphertext that obtains is exactly the digitized content of the final encryption that sends of Fig. 3, subscriber equipment is at first isolated frame head, the Equipment Serial Number of legal mandate compares with the Equipment Serial Number of oneself in taking out expressly, confirm that the equipment of authorizing is exactly oneself, use the follow-up frame head of digital relay secret key decryption then, if frame head verification and correct, just with the Equipment Serial Number of publisher with decipher distribution pattern-word and the random key material that obtains, to POD module application decryption key frame is deciphered, the digitized content that obtains asking, if be necessary, also to check the frame verification and and the correctness of digital relay key, in authority sign restricted portion, reproduce at last or use digitized content.
Fig. 5 is the content distribution flow process of a general digitized content distribution platform of the present invention, comprise digitized content supplier 1, digitized content publisher 2 and digitized content user 3 among the figure, A, B, C, D then are the equipment that is equipped with the POD module, wherein 1A, 3B are general category equipment, and 2A, 2B, 2C, 2D then are respectively streaming media service platform, digitized content warehouse, distribution services platform and subscribed services platform.Under the original state, digitized content publisher 2 obtains the distribution authority of digitized content by following step:
Then enter the digitized content distribution phase:
After the requestor receives the ciphertext frame head of preparing to play, confirm to authorize the Equipment Serial Number of playing identical with own POD module serial number, just obtained authorization, take out the POD sequence number and the random key material of publisher behind the deciphering frame head, to POD module application decruption key and the installation of oneself, after ready,, wait for receiving the digitized content of encrypting to the equipment ready for sending OK of publisher information.
After the media play engine of streaming media server obtained the ready OK information of requester device, notice subscribed services platform was deducted this expense, and the enciphered digital content sends to user side frame by frame then, enters instant online streaming media playing service until finishing playing.
User side is deciphered the digitized content that receives frame by frame, watches this digitized content intra vires.
IPTV system digits Rights Management System under embodiment 2, the multi-operator environment
Fig. 6 is the IPTV system digits Rights Management System under the multi-operator environment of the present invention, 1 and 2 is two Web TV operators that have the different digital content among the figure, the 3rd, the digitized content user, the step line that thickness is different among the figure represents that digitized content user 3 both can accept the digitized content service of operator 1, can accept the digitized content service of inhomogeneity operator 2 again, thereby be embodied in the network environment of multi-operator, digitized content user 3 can select the digitized content that oneself needs neatly and needn't repeat procuring equipment, operator also can be under the situation that does not increase equipment investment, shared network resource and user resources enlarge oneself service range.Relevant detailed digitized content distribution process step is identical with embodiment 1, uniquely different be, when digitized content user 3 lands the EPG module that belongs to atypical digitized content publisher 1, the master control POD module of this module solicited message that can discriminating digit content user 3 is also mutual with it, finally reach the authorization service purpose, this could produce download request 102 and order request 106, thereby realizes that foreign lands' digitized content is shared flexibly.
The publication of embodiment 3, digitized content and mandate distribution
Fig. 7 is one of the present invention and authorizes the workflow of publishing the video display CD, also is a typical application system of present embodiment.Among the figure, digitized content publisher (publisher) obtains the mandate that digitized content publishes and distributes from the digitized content supplier, respectively the digitized content that will issue is carried out encryption according to the difference of distribution pattern then, copy in the blank CD by the digitized content of recording device at last encryption authorization, externally distribution, Fa Hang digitized content CD can't duplicate again in this way.Be described in detail manufacturing process below.
Digitized content publisher (publisher) is through handling in earlier stage the digitized content of authorizing, add copyright information and distribution of information after, enter the publication stage, enter respectively according to the pattern of this distribution:
The broadcast mode distribution; the digitized content CD of this pattern distribution is the general optic disc that can correctly play in all playback equipments; in order to prevent bootlegging and imprinting; the broadcast mode distribution process at first reads the unique disc ID that waits to carve CD; the sequence number and the broadcast flag co-applications encryption key that cooperate distribution equipment; to the digitizing content-encrypt; make digitized content after the encryption include the information of publisher and disc ID; the digitized content of this encryption is engraved on the disc of corresponding ID; become the digitized content that unique portion is encrypted; because disc ID scribes in that manufacturing plant is disposable; so even if illegal person has blank optical disk; the digitized content of the encryption of bootlegging also can't use; thereby effectively prevent bootlegging and sell that protection digitized content publisher and digitized content supplier's legitimate rights and interests are inviolable.
The distribution of order pattern, this distribution pattern is fairly simple, the digitized content that digitized content publisher (publisher) provides according to order, user's Equipment Serial Number, to POD module application encryption key, the digitized content that will issue is encrypted, the digitized content imprinting that directly will encrypt then can be issued to the user on disc, because the digitized content disc of this encryption is specially at a unique device customizing, if the subscriber does not insert miscellaneous equipment with the POD module of oneself, also can't play even if this CD is placed on other same category of device.
Fig. 8 is the workflow of a DVD Play System of the present invention, when the digitized content user puts into the DVD playback equipment with the DVD CD of buying, after entering playing program, equipment at first reads the frame head of digitized content from disc, take out the authorisation device sequence number, judge whether to authorize this machine sowing limit of delegating power, and according to this authority differentiation distribution pattern, if the authorisation device sequence number is identical with this machine, then take out publisher's Equipment Serial Number and key material to the POD of this machine module application decryption key and installation, also install with the sequence number application encryption key of display device simultaneously, and frame head information sent to lower floor's display device, by the time after receiving the display device ready signal, from the disc order or indicate the digitized content deciphering of reading encrypted according to the user after, after DVD inter-process processing of circuit, become compound video signal, output to display device after encrypting by parallel crypto process again.If the authorisation device sequence number of frame head is complete zero, then think the broadcast distribution pattern, read the digital ID of disc to the assigned address of disc, use this ID then, the key material that the Equipment Serial Number of publisher and frame head carry, the POD module application decruption key of Xiang Benji is also installed, also install with the sequence number application encryption key of display device simultaneously, and frame head information sent to lower floor's display device, after receiving the ready OK signal of display device, from the disc order or indicate the digitized content deciphering of reading encrypted according to the user after, after DVD inter-process processing of circuit, become compound video signal, output to display device after encrypting by parallel crypto process again.
Fig. 9 is the internal digital contents processing flow process of a Digital Television of the present invention, after the enciphered digital content frame head input by DVD equipment or condition receiving equipment or set-top box device input, the processing enter of equipment is also installed to POD module application decryption key from sequence number and key material that frame head takes out upper layer device, ready back sends the OK signal to upper layer device, the digitized content of waiting for follow-up encryption arrives, send into the video matrix after the deciphering and handle back output R, G, B and luminance signal, finish the reproduction of digitized content to screen.
Claims (10)
1, a kind of general digital copyright protection technology frame, its major technique is characterised in that: this framework comprises entity, digitized content, equipment and support technology four parts;
Described entity comprises: digitized content supplier, digitized content publisher and digitized content user;
Described digitized content comprises: the digitizing form content of software program, figure, image, written historical materials, book and periodical, audio frequency, video, film, video etc.;
Described equipment comprises: computing machine, mobile communication equipment and all can be reduced into figure, image and written historical materials device or the software for user's direct viewing and use with the digitized content of encrypting; All can be reduced into device or the software that audio stream is directly listened to the digitized content of encrypting; All can be reduced into the digitized content of encrypting device or the software that video format or other media formats supply user's direct viewing or watch by other display device or software; All can be encrypted digitized content packing and give the device and the software of certain authority; All can duplicate the digitized content of encrypting, scribe, be recorded to device or software on other medium;
Described support technology is the authentication mechanism for encrypting that a kind of novel encryption and decryption process of passing through realizes sourcesink discriminating, authentication, digital signature and digital watermarking function automatically.
2, equipment as claimed in claim 1, its major technique is characterised in that, all devices all is general, the equipment that the machine card can separate that is equipped with the POD module, the complete circuit module or the software module of novel encrypting and authenticating cryptographic system that described POD module has been integrated, each POD module all has globally unique, unmodifiable, as to determine this equipment encryption and decryption key space scope a sequence numbering and a device class numbering, the POD module of different sequence numberings has distinct key space, and this sequence numbering is the main body of granted rights.
3, the device class of POD module as claimed in claim 2 numbering, its major technique is characterised in that: this POD module is according to the difference of using the key space scope, be divided into the class with 256 different encryption features with two 16 system numbers, each class is divided into two kinds of general common POD module and special-purpose master control POD modules again;
General common POD module, this POD module has authority recognition, encrypt/decrypt, authentication, digital signature and authority systematic function, be applicable to that all terminal users are the digitized content user, in the scope of authorizing, use various portable terminals neatly, present the digitized content that obtains; All devices is divided into the equipment class of 256 kinds of different encryption features with two 16 system numbers, and different classes of equipment POD module can't be compatible without the mandate of master control POD module;
Special-purpose master control POD module, this POD module has authority recognition, encrypt/decrypt, authentication, digital signature and authority systematic function, be applicable to all digitized content suppliers and digitized content publisher, the difference of it and general POD module is, this master control POD module can the line balance converter class, discern different classes of POD module user's subscription request, generate the encryption authorization digitized content that this classification POD module user can normally use, common POD module then can only be discerned similar POD module.
4, a kind of general digital copyright protection technology frame as claimed in claim 1, its major technique is characterised in that: encryption authorization realizes encrypting no encryption key distribution, no independent authority transmission, and correctly the content of decoding request realizes authorizing and authentication naturally; As long as requesting users has corresponding authority, publisher just directly sends to this user with digitized content with the equipment POD serial number encryption of this user's registration, and guarantees to have only that this user is unique can decipher and use intra vires.
5, a kind of general digital copyright protection technology frame as claimed in claim 1, its major technique feature also is: the digitized content issuing mechanism of this framework also comprises following apparatus and system:
Subscribed services platform: comprise authority management module and EPG module, be used for providing digitized content or programme, digitized content promotional video, receiving station to sow and carry and subscription request, and the program request download request is transferred to the distribution services platform to authorized user.For subscription request, to order and equipment ordering is handled respectively according to digitized content, digitized content orders directly that the generation ordering information is sent to Distributor, and equipment ordering waits until that user's fund issues the user by logistics or network with equipment behind account;
Distribution services platform: program request download or the subscription request of accepting the mandate that the subscribed services platform passes over, the digitized content that authorize enquiring digital content registration table location, generate complete mandate diffuse instructions, and instruction is sent to corresponding digital content repository or streaming media server;
Digitized content warehouse: be used for the storage of digitized content and authorize transmission, can accept the digitized content of content provider's mandate uploads, the user ID that provides according to the distribution services platform and the digitized content of mandate, provide digitized content to download and transmit, streaming media server is listed in the one-level user in digitized content warehouse;
Streaming media server: comprise service management module and a plurality of media play engine, being used for instant online streaming video transmits, the user ID that provides according to the distribution services platform and the programme content of mandate provide online request and broadcast service from the media station program downloading.
6, a kind of general digital copyright protection technology frame as claimed in claim 1, its major technique is characterised in that: the present technique framework adopts the issuing mechanism of two key elements to digitized content, the equipment of the digitized content of encryption authorization and deciphering digitized content; The mandate distribution process of digitized content is divided the decrypt authorized of paired particular device and to the use of digitized content restriction two parts; Using restriction to identify with authority limits, the authority sign is one four 16 system numbers, the kind of preceding two 16 system bit representation digitized contents, latter two 16 system bit representation is to the disposal authority of this kind digitized content, and all devices also supports to meet the authorization file of ODRL standard XML form simultaneously.
7, a kind of general digital copyright protection technology frame as claimed in claim 1; its major technique is characterised in that: defined the digitized content distribution format of encrypting; this form is applicable to the distribution of all digitized contents; it is the form of the unique approval of all devices; once complete digitized content distribution is called a content frame; for the king-sized digitized content of content, allow to divide the frame distribution, every content frame comprises two parts:
Frame head: comprise publisher's sign and equipment class, subscriber's Equipment Serial Number, publisher's Equipment Serial Number and encryption distribution model selection word, this key material, authority sign, divide flag of frame, money item and frame head verification and;
Frame: the frame of high strength encrypting, comprise digital relay key, digitized content and a frame verification and.
8, a kind of general digital copyright protection technology frame as claimed in claim 1; its major technique feature also is: the digitized content issuing mechanism of this framework is terminal user's the overall process from the digitized content supplier to digitized content publisher to the digitized content user; digitized content only just can be reduced reproduction in all devices inside, from the digitized content of all devices output all be at a certain devices encrypt can not audiovisual.
9, a kind of general digital copyright protection technology frame as claimed in claim 1; its major technique feature also is: this framework provides digitized content issuing mechanism flexibly, and these mechanism comprise order/program request issuing mechanism, multicast issuing mechanism, multicast issuing mechanism, live/broadcast distribution mechanism, foreign lands' issuing mechanism and master content protecting mechanism.
10, a kind of general digital copyright protection technology frame as claimed in claim 1, its major technique feature also is: the digitized content distribution that this framework is complete comprises the steps:
Step 1, digitized content supplier authorize the digitized content of digitized content publisher distribution oneself or directly oneself issue;
Step 2, digitized content publisher make up digitized content distribution system, set up ordering platform and login interface EPG;
Step 3, digitized content user buy general equipment and POD module, and order the right to use of digitized content by the ordering platform of digitized content publisher; After the subscribed services platform power administration module response of digitized content publisher, the permission item that generates the requestor deposits in the database after encrypting;
Step 4, digitized content user any time, by the ordering platform EPG module of login digitized content publisher, select to be fit to own digitized content, ask digitized content publisher to license;
The EPG module responds distribution request of step 5, digitized content publisher, revise user side login interface user waiting prompt, notify authority management module to prepare to authorize distribution simultaneously, authority management module is according to the requester device sequence number, requestor's identity and authority in deciphering examination database, then generate the mandate distribution instruction that comprises requester device sequence number, digitized content title and authority sign at least after eligible, connection is redirected to the distribution services platform;
Behind step 6, the distribution services platform response, according to the digitized content name query digitized content registration table in the distribution instruction, determine the definite deposit position of this content, revise distribution instruction notification corresponding digital content repository or streaming media server then and prepare digitized content, and corresponding digital content repository or streaming media server are transferred in user's connection;
If step 7A streaming media server is received the distribution instruction, service management module is according to the Name ﹠ Location of digitized content in the distribution instruction, download this digitized content to the corresponding digital content repository, specify a media play engine to respond this distribution request simultaneously;
After the media play engine response of step 8A, appointment, from the distribution instruction, take out requestor's Equipment Serial Number, to POD module application mandate encryption key and installation, generate the ciphertext frame head that comprises this authority sign and random key material then and send to user side, finish decrypt authorized, wait for the ready OK information of user requester device;
After step 9A, waiting user side are received the ciphertext frame head of preparing to play, confirm to authorize the Equipment Serial Number of playing identical with own POD module serial number, just obtained authorization, take out the POD sequence number and the random key material of publisher behind the deciphering frame head, to POD module application decruption key and the installation of oneself, after ready,, wait for receiving the digitized content of encrypting to the equipment ready for sending OK of publisher information;
After the media play engine of step 10, streaming media server obtains the ready OK information of requester device, notice subscribed services platform is deducted this expense, the enciphered digital content sends to user side frame by frame then, enters instant online streaming media playing service until finishing playing;
Step 11, user side are deciphered the digitized content that receives frame by frame, watch this digitized content intra vires;
If step 7B download request, after the response of corresponding digital content repository, take out the digitized content that to download from the warehouse, Equipment Serial Number with the requestor is encrypted this digitized content to the application of POD module, use requestor's digital relay Secret Key Cipher frame head then, the digitized content that generates encryption authorization sends to the requestor, and notifies the subscribed services platform to deduct this expense, finishes a download content distribution;
After step 9B, waiting user side are received the ciphertext frame, isolate the ciphertext frame head, confirm that the Equipment Serial Number of authorizing is identical with own POD module serial number, just obtain understanding close authorization, with the POD sequence number and the random key material that take out publisher behind the relay secret key decryption frame head of oneself last time, to the POD module application decruption key deciphering frame of oneself, authorized digitized content and legal use in authority sign restricted portion.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CNA2008101410347A CN101339592A (en) | 2008-08-14 | 2008-08-14 | All-purpose digital copyright protection technology frame |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CNA2008101410347A CN101339592A (en) | 2008-08-14 | 2008-08-14 | All-purpose digital copyright protection technology frame |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN101339592A true CN101339592A (en) | 2009-01-07 |
Family
ID=40213658
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CNA2008101410347A Pending CN101339592A (en) | 2008-08-14 | 2008-08-14 | All-purpose digital copyright protection technology frame |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN101339592A (en) |
Cited By (14)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101996386A (en) * | 2009-08-14 | 2011-03-30 | 北大方正集团有限公司 | Method, device and system for lending digital books |
| CN102455894A (en) * | 2010-10-26 | 2012-05-16 | 镇江精英软件科技有限公司 | Framework for rapidly constructing information system software |
| CN103180859A (en) * | 2010-10-19 | 2013-06-26 | 苹果公司 | Application usage policy enforcement |
| CN103297397A (en) * | 2012-02-29 | 2013-09-11 | 华为技术有限公司 | Digital information sending method and receiving method, digital information sending device and receiving device and digital information distribution system |
| CN103348356A (en) * | 2011-12-06 | 2013-10-09 | Txtr有限责任公司 | Method for displaying readable contents on mobile reading device in location-restricted manner |
| CN103425920A (en) * | 2013-08-26 | 2013-12-04 | 江苏物联网研究发展中心 | Audio information-based database security access control method of digital watermark |
| CN103795694A (en) * | 2012-10-31 | 2014-05-14 | 中国电信股份有限公司 | License control method and license control system |
| CN104573418A (en) * | 2013-10-25 | 2015-04-29 | 国际商业机器公司 | Method and system used for authorizing a change within a computer system |
| CN104871509A (en) * | 2012-10-23 | 2015-08-26 | 诺基亚技术有限公司 | Method and apparatus for managing access rights |
| CN106126983A (en) * | 2016-08-30 | 2016-11-16 | 珠海金山网络游戏科技有限公司 | A kind of digital fingerprint system taking precautions against pre-issue game piracy and method |
| CN107609355A (en) * | 2016-07-12 | 2018-01-19 | 厦门简帛信息科技有限公司 | It is a kind of to realize the polynary system and method sold of digital resource |
| CN109274644A (en) * | 2018-08-21 | 2019-01-25 | 华为技术有限公司 | A kind of data processing method, terminal and watermark server |
| CN110679130A (en) * | 2017-05-26 | 2020-01-10 | 真视野股份有限公司 | System and method for managing privileges |
| CN112883400A (en) * | 2021-03-11 | 2021-06-01 | 杭州网易云音乐科技有限公司 | Business resource service method, device, electronic equipment and storage medium |
-
2008
- 2008-08-14 CN CNA2008101410347A patent/CN101339592A/en active Pending
Cited By (21)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101996386A (en) * | 2009-08-14 | 2011-03-30 | 北大方正集团有限公司 | Method, device and system for lending digital books |
| CN103180859B (en) * | 2010-10-19 | 2015-11-25 | 苹果公司 | Application uses strategy to enforce |
| CN103180859A (en) * | 2010-10-19 | 2013-06-26 | 苹果公司 | Application usage policy enforcement |
| US11475106B2 (en) | 2010-10-19 | 2022-10-18 | Apple Inc. | Application usage policy enforcement |
| CN102455894A (en) * | 2010-10-26 | 2012-05-16 | 镇江精英软件科技有限公司 | Framework for rapidly constructing information system software |
| CN103348356A (en) * | 2011-12-06 | 2013-10-09 | Txtr有限责任公司 | Method for displaying readable contents on mobile reading device in location-restricted manner |
| CN103297397A (en) * | 2012-02-29 | 2013-09-11 | 华为技术有限公司 | Digital information sending method and receiving method, digital information sending device and receiving device and digital information distribution system |
| CN104871509A (en) * | 2012-10-23 | 2015-08-26 | 诺基亚技术有限公司 | Method and apparatus for managing access rights |
| CN103795694A (en) * | 2012-10-31 | 2014-05-14 | 中国电信股份有限公司 | License control method and license control system |
| CN103425920A (en) * | 2013-08-26 | 2013-12-04 | 江苏物联网研究发展中心 | Audio information-based database security access control method of digital watermark |
| CN104573418A (en) * | 2013-10-25 | 2015-04-29 | 国际商业机器公司 | Method and system used for authorizing a change within a computer system |
| CN104573418B (en) * | 2013-10-25 | 2017-07-14 | 国际商业机器公司 | Method and system for the change in authorization computer system |
| CN107609355A (en) * | 2016-07-12 | 2018-01-19 | 厦门简帛信息科技有限公司 | It is a kind of to realize the polynary system and method sold of digital resource |
| CN107609355B (en) * | 2016-07-12 | 2020-11-10 | 厦门润丰投资有限公司 | System and method for realizing multi-element sale of digital resources |
| CN106126983A (en) * | 2016-08-30 | 2016-11-16 | 珠海金山网络游戏科技有限公司 | A kind of digital fingerprint system taking precautions against pre-issue game piracy and method |
| CN106126983B (en) * | 2016-08-30 | 2019-05-03 | 珠海金山网络游戏科技有限公司 | A kind of digital fingerprint system and method for the pre- publication game piracy of prevention |
| CN110679130A (en) * | 2017-05-26 | 2020-01-10 | 真视野股份有限公司 | System and method for managing privileges |
| CN110679130B (en) * | 2017-05-26 | 2022-05-06 | 真视野股份有限公司 | System and method for managing privileges |
| CN109274644B (en) * | 2018-08-21 | 2020-12-25 | 华为技术有限公司 | Data processing method, terminal and watermark server |
| CN109274644A (en) * | 2018-08-21 | 2019-01-25 | 华为技术有限公司 | A kind of data processing method, terminal and watermark server |
| CN112883400A (en) * | 2021-03-11 | 2021-06-01 | 杭州网易云音乐科技有限公司 | Business resource service method, device, electronic equipment and storage medium |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN101339592A (en) | All-purpose digital copyright protection technology frame | |
| CN100389563C (en) | Data processing device, system and method | |
| KR100781532B1 (en) | System and Method for providing DRM license | |
| Eskicioglu et al. | Security of digital entertainment content from creation to consumption | |
| JP5113299B2 (en) | DRM providing apparatus, system and method thereof | |
| US20060277122A1 (en) | Cryptographic methods, apparatus and systems for storage media electronic rights management in closed and connected appliances | |
| JP6294745B2 (en) | Interoperable key storage box | |
| Eskicloglu | Protecting intellectual property in digital multimedia networks | |
| CN102687157B (en) | Digital content management and sending | |
| CN103942470A (en) | Electronic audio-visual product copyright management method with source tracing function | |
| TW200910891A (en) | System, method, and service for performing unified broadcast encryption and traitor tracing for digital content | |
| CN105743903A (en) | Audio digital rights management method and system, intelligent terminal and authentication server | |
| US20070260551A1 (en) | Media Burning Terminal and System for Providing Digital Content | |
| US20140380063A1 (en) | Information processing device, information storage device, information processing system, information processing method, and program | |
| US7827113B2 (en) | Method and system for providing a content subscription service | |
| CN106416172A (en) | Content management | |
| CN107506619A (en) | DRM Q digital literary property protection methods and system | |
| CN101366088A (en) | Method for providing, distributing and engraving digital data and associated distribution server | |
| CN101123105B (en) | Device and system for host | |
| CN102543131A (en) | Information processing apparatus, information processing method, and program | |
| Smith | Digital rights management & protecting the digital media value chain | |
| JP4959796B2 (en) | Method and system for providing content subscription service | |
| CN101645289B (en) | Method for securely distributing video compact disks | |
| Lin et al. | A metadata-based interoperable digital rights management system architecture | |
| CN102144402A (en) | Method and apparatus for managing digital rights management module |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C02 | Deemed withdrawal of patent application after publication (patent law 2001) | ||
| WD01 | Invention patent application deemed withdrawn after publication |
Open date: 20090107 |