DE10318489A1 - Service license method for making a license available linked to a digital rights management system allows a service device/mobile communications device/telephone to act as a media-playing device - Google Patents

Abstract

A playing license for a medium is tied to a mobile telephone's subscriber identity module (SIM) card. A licensing inquiry for any random subjacent licensing system is sent via a mobile telephone. The licensing inquiry is personalized as a result. The licensing system requires a once-off license tied to the device from the subjacent licensing system and supplies it as a medium-playing license. Independent claims are also included for the following: (a) A service device linked to a digital rights management (DRM) system like a medium-playing device; (b) and for a mobile communications terminal/mobile telephone with a subscriber identity module (SIM) for use with a DRM system; (c) and for software for a mobile communications terminal/mobile telephone with a subscriber identity module (SIM) for use with a DRM system; (d) and for a network component in a mobile network with its mobile communications terminals to send out licensing encoding requests for service devices with a DRM system.

Description

The The invention relates to a method and devices for providing a usage license in connection with a DRM system, whereby a usage device and a mobile communication terminal that has a SIM card for Use come, in particular a player that has protected information after receiving a license key can use.

Field of the Invention:

Around digital goods such as B. digitally stored music (e.g. on CD), films, books, software etc. To make it an economical product, "copy protection" is required, since digital objects Possess property, by simple copy operations arbitrarily frequently duplicated to be able to.

On DRM system (digital rights management) fulfills the protective task by there is a license to the one to be protected Medium binds. This license includes usage rules set that determine that the medium z. B. once or two Times or in a certain period of time. The Protection is enforced through encryption of the medium and through software that ensures that Medium is decrypted for use only, if the license usage rules are met.

Problematic is that the license is again a digital object and can therefore be copied at will. To prevent the license from being copied, it is sent to a Hardware bound. The DRM software that decrypts the medium accepts the license only if use on one by the license number (GUID - global unique identifier) identifiable hardware expires.

This Binding the license to a hardware ID has several disadvantages. A user who acquires the right to play a piece of music wants this both in the house on his stereo system and in the car or on his PC. The device binding allows but playing on only one device. The problem is in the Practice (e.g. by SDC) partially solved by applying the license multiple devices alternatively binds.

On Another problem arises when the device is defective and needs to be replaced got to. On the new device the license is not valid. However, this contradicts the purchase expectation that a usage license does not go out when a player is replaced by a new one. In practice, the "license recovery" procedure is used here; the customer registers with Seller the new device and get for it granted a license. However, the method has the disadvantage that the Customer any device, also provide licenses for people who are not legitimized can. Companies therefore usually limit the number of "license recovery" operations.

On Another problem is the incompatibility of DRM systems. There are many DRM systems on the market offered, but incompatible with each other are. The systems are all tied to specific platforms. For the media provider who his media about want to distribute the internet the problem arises that he has different software for DRM systems Platforms. In particular, the scope of the possible definable Rules of use are limited in the individual systems.

State of the art:

was standing of technology for a more provider-friendly solution is a tool that can be used in media preparation (packaging) offers a tool with which the rules of use can be used regardless of DRM system can be set (From DMDsecure, product DMFfusion). These rules are then on the DRM system to be used is mapped. Disadvantage with this procedure is that you only have the smallest common subset of the rules of use can use.

A number of patents have been filed by Markus Peinado in the field of DRM systems. In particular the patent "Binding a Digital License to a Portable or the Like in a DRM System ...", which is available in the USA under US 2002013772 and has been registered in Europe under 1271279. This patent solves the problem of securing a license using a standard PKI system and transferring a license to a mobile device. This patent is about playing the medium on the mobile device and transferring the license there securely. In the present method, the medium is not played on the mobile device. Rather, the mobile phone serves to bind the license to a natural person. While in US 2002013772 a DRM system is (and must be) installed on the mobile device, this is not the case in the present method. The load that the mobile phone bears in the present method is considerably lower. It is also important in the present method that it is a mobile phone with a SIM card that is secured by a contract between the card owner and the mobile operator. In the process US 2002013772 it doesn't matter; any mobile device with no contractual Fuse protection can be used.

Object of the invention:

task the invention is to provide a simple device-independent DRM method.

Solution of the invention:

This The object is achieved by the inventions with the features of the independent claims. advantageous Further developments of the inventions are characterized in the subclaims.

The The procedure presented below offers complete independence from the rules of use of the underlying DRM system.

The The process is based on a standard DRM system. In a standard DRM system a key is generated during media preparation, the medium encrypted with it the medium thus secured is fed into a distribution system and the key stored on a license server. The player has a DRM client, which receives the key from the license server and decrypts the medium for playback.

at the preferred solution becomes such a standard DRM system used. This DRM system is built to provide protection against manipulation. It therefore represents the "enforcement layer" in architecture.

The inventive method is based on this level and implements the license management level (license management layer).

The License of the license management level is attached to the SIM card of the mobile phone bound. The implementation can take place in several variants. The Arrangement of the devices is the same in all variants. The different approaches will be shown in the detailed descriptions.

in the Individual is a method of providing one License to use in connection with a DRM system, with a usage device, in particular a player that a protected Can use information after receiving a license key. With this player it is preferably a computer system or a CD player. Other players like DVD players are also conceivable. However, it can also be MP 3 devices act.

On Another component of the invention is a mobile communication terminal that uses a SIM card has and with the usage device communicates. These devices are preferably a phone or other mobile communication device that is connected to connected to a network. The advantage of a SIM card is that the user is unique on a network determine is. Should have other unique personal identifiers are used, so it is not absolutely necessary to have a SIM card use. In this case there would be equivalents Device information read out and used or provided by the network, which allow the user to be clearly identified.

On Another component of the invention is a license server, the licenses dependent on managed by SIM card information. Other information that enable clear identification can also be used.

Under Using the above components involves a number of steps executed.

Around the information of the player to be linked with the information of the mobile device it is necessary that the mobile terminal communicates with the playback device and vice versa. This involves linking SIM card information with Information to identify the user device and the protected information Communication of the usage device with the mobile communication terminal.

Thereon becomes the license key through transmission the linked Information requested from the license server. Here, the Information through submission through the mobile device or by transmission by connecting the player to a network. For the the latter alternative it is necessary for the player to have a network connection has.

After the license server has obtained the linked information, the license key is determined by the license server on the basis of the SIM card information, the information for identifying the user device / playback device and the protected information and the licenses. The license server usually manages the information based on the SIM card information and checks in a database whether a license key can be provided for the playback device. Here, the license server checks whether license information for the SIM card information is stored, from which a license authorization for the use of the protected information can be derived logically in order to provide a license key for the player if the test is positive.

To the determination of the license key transfer this to the player. This can either be done via the mobile device can be selected or about the connection of the player with a network.

In is usually on the player installed a proxy, which preferably works transparently and which is a requirement for a license key from the player answers. The proxy takes over communication with the mobile communication terminal. in this connection the request is either forwarded or it is from the mobile terminal the SIM card information requested. In the latter case it takes over the proxy combines the information and sends the information then directly to the license server. Here are different transmission paths possible.

In the other embodiment the SIM card information either directly from the mobile device with the information of playback device or combined through a network gateway that connects to License server. Other procedures in which the mobile operator has an identifier of the mobile phone owner appends to the request before sending it to the license server forwarded are also conceivable.

In the preferred embodiment communicate the player and the mobile communication terminal wirelessly (WLAN, Bluetooth, IDRA Etc).

Farther preferably the Internet or parts of it are used as a network, Internet protocols such as http, ftp are preferably used.

In an alternative embodiment communication between license server and player and mobile Communication terminal via SMS or MMS.

to The combination of information can improve security done by signatures. Stand-alone signatures are also conceivable. The information from the SIM card is preferably used here, to create signatures.

On Another aspect to improve security is that the license server made a renewed request only for a specific one time period again, especially that the generation the license key for the Play time of the protected Information is blocked. This means that another key cannot be downloaded in parallel be loaded to several pieces to play at the same time. Rather, it ensures that the music be played at a time interval.

On Another component of the invention is a usage device with a DRM system, in particular a playback device that provides protected information Obtaining a license key can use, with means available, the license key requests via a mobile communication terminal, the above has a SIM card, conduct. In another embodiment owns this device a proxy that is able to provide the identification information from the mobile device to download and combine with the information of the player, to then independently rebroadcast. In this embodiment takes over the player the full control over the license request. In an alternative embodiment, only the information of the player to the mobile device forwarded, which then either independently or via a gateway the combination of the information as already described above in the procedure were.

On Another component of the invention is a mobile communication terminal with a SIM card, which includes a means of communication with one use device allow in connection with a DRM system, in particular a player with a DRM system, with means that request a license key of the usage device received, with SIM card information combine before they are forwarded to a license server. In the As a rule, this is software that is also based on the device is played.

On Another component of the invention is a gateway in the form of a Network component in a mobile network whose mobile communication terminals request license key requests for devices with one Send DRM system, taking license key requests with SIM card information be combined before being forwarded to a license server become.

• 1. Die verkaufte Lizenz ist nicht an eine Hardware gebunden, sondern an eine SIM-Karte, die durch einen Vertrag mit dem Mobilfunkbetreiber abgesichert ist. Der Mobilfunkbetreiber garantiert die Identität des Lizenzanfragers. Ein Verlust der SIM-Karte bereitet nicht das Problem, dass die Lizenzen verloren gegangen sind. Der Mobilfunkbetreiber stellt sicher, dass die verlorene SIM-Karte nicht mehr gültig ist und ersetzt sie durch eine neue SIM-Karte. Der Lizenzverkäufer überträgt die gekauften Lizenzen an die neue Karte.
• 2. Bei den Gebrauchsregeln bzw. unter den Bedingungen, unter denen das Medium abgespielt werden kann, hat der Betreiber des Lizenz-Servers beliebige Freiheiten, unabhängig von den Fähigkeiten des DRM-Systems auf der Durchsetzungsebene. Die Anbindung an einen Shop, an ein Bezahlsystem und somit die Kundenanbindung wird durch das Verfahren unabhängig von dem DRM-System der Durchsetzungsebene.

With this approach, the invention solves the following problems:

• 1. The license sold is not bound to hardware, but to a SIM card that is secured by a contract with the mobile operator. The mobile operator guarantees the identity of the license requester. Losing the SIM card does not cause the problem that the licenses have been lost. The mobile operator ensures that the lost SIM card is no longer valid and is replaced them with a new SIM card. The license seller transfers the purchased licenses to the new card.
• 2. The operator of the license server has any freedom in terms of usage or under the conditions under which the medium can be played, regardless of the capabilities of the DRM system at the enforcement level. The connection to a shop, a payment system and thus the customer connection is independent of the DRM system at the enforcement level.

There the SIM card a reliable one Customer identification makes, leaves themselves easily connect to a billing system. in the The invention is explained in more detail below on the basis of exemplary embodiments which: are shown schematically in the figures. Same reference numbers in the individual figures denote the same elements. In detail shows:

1 a possible configuration of the invention, wherein a player is connected to the license server via a mobile phone and the gateway;

2 a flowchart of a standard encryption procedure;

3 a flowchart of a standard decryption process;

4 a flowchart of the inventive method, in which the link to the identity information is made by the gateway;

5 a flowchart of the method according to the invention, in which the link to the identity information is made by the mobile terminal;

6 a flowchart of the method according to the invention, in which the information is exchanged by SMS and not by http;

7 a flowchart of the inventive method, in which the link to the identity information is carried out by the player;

8th a flowchart of the method according to the invention, in which the information is exchanged directly between the playback device and the license server, the mobile terminal device being accessed in the meantime.

1 shows the possibility that a customer buys a license to play a medium from a dealer. This license is assigned to the license management level. It is stored on a license server and is bound to a SIM card. For this purpose, the operator of the license server agrees with the mobile operator that HTTP requests that are made via the customer's mobile phone are signed with an ID of the customer. This enables the operator of the license server to assign the license to the customer.

To be able to play a protected medium, the system's DRM client requires a license at the enforcement level. The basic process can be done 2 and 3 remove.

In the present invention ( 4 and 5 ) the player turns to the license server - not as is usual with DRM systems. Rather, it addresses a local proxy that is installed on the playback device. This proxy sends a license request as an HTTP request to the license server at the license management level. The proxy requests the cell phone via Bluetooth to transmit the HTTP request. In one possible embodiment ( 4 ) the mobile operator gateway adds the customer identification to the message and transmits it via a secure path to the license server at the license management level. This requires the license server of the enforcement level to have a license tied to the player for one-time playback. In the HTTP response, this license is transmitted to the proxy, which forwards it to the DRM system at the enforcement level. The license is now blocked for the playing time. No more licenses can be delivered during this time.

In 5 a variant is described in which the operator of the license server installs an application on the mobile phone. This application reads out a date clearly assigned to the SIM card ID and appends it to the HTTP request. The license is linked to the SIM card ID.

If a medium is now to be played on the communication terminal, then as in 4 described, the DRM system of the player to the proxy, which in turn sends an HTTP request to the license server via the mobile phone. The application on the mobile phone extends the HTTP request with the SIM card ID. The further steps are the same as under variant 4 from.

6 shows an embodiment in which no HTTP request is made. Instead, authentication is implemented via an SMS (or MMS if the data volume of the SMS is not sufficient). As in the previous variants, the proxy in the player is connected to the mobile phone via Bluetooth. It causes the mobile phone to send a license request in the form of an SMS to the license server at the license management level. The sender address of this SMS is secured by the mobile operator and therefore reliable. The license server requests a license bound to the playback device from the license server of the enforcement level and sends it to the mobile phone via SMS / MMS. The proxy reads out this license and forwards it to the DRM client at the enforcement level. Communication between the mobile phone and the player can also take place via IrDA. There are therefore no prerequisites for the performance of mobile phones that are not already available in all devices today.

The 7 shows a variant in which a recall procedure is used. The license is linked to the SIM card of the mobile phone by sending the license to the mobile phone. The proxy sends a license request to the license server at the license management level. Among other things, it transmits the SIM card ID. If there is a license for this SIM card, the license server has registered the mobile phone for this SIM card. He sends the license to the phone with its numbers as SMS / MMS. The proxy reads the license from the phone. In this variant, it does not matter which way the license request is sent. This can be sent via the mobile phone or via the Internet. It is only essential that the license is sent to the mobile phone.

In the 8th another alternative embodiment is shown. In some systems, there is a problem with the license request being sent directly through the proxy. In these cases it is advantageous that the player communicates directly with the license server. This preferably refers to the proxy via an HTTP redirect, which then takes over the identification as in the other variants.

Claims (15)

Procedure for providing a usage license in connection with a DRM system, with a usage device, in particular a player, the one protected Can use information after receiving a license key with a mobile communication terminal, the above has a SIM card and with the usage device communicates with a license server that is dependent on licenses managed by SIM card information, with the following steps: - Linking of SIM card information with information to identify the user equipment and the protected Information by communication of the user device with the mobile communication terminal, - Requirement the license key through transmission the linked Information to the license server, - Determination of the license key by the license server based on the SIM card information, information for identification of the user device, the protected Information and licenses, - Transfer the license key to the usage device. Method according to the preceding claim, characterized marked that the request for a license key through the mobile communication terminal the mobile communication terminal has access to the license server, or that the usage device after determining the SIM card information transmits the request to the license server. Method according to one or more of the preceding Expectations, characterized in that a request for a license key from a Proxy on the player is received and forwarded by the proxy to the mobile communication terminal is or from the mobile communication terminal through the proxy SIM card information be queried. Method according to one or more of the preceding Expectations, characterized in that about a wireless connection forwards the request to the mobile communication terminal becomes. Method according to one or more of the preceding Expectations, characterized in that the mobile operator has an identifier of the mobile phone owner appends to the request before sending it to the license server is forwarded or the mobile communication terminal adds SIM card information the request and forwards it to the license server. Method according to one or more of the preceding Expectations, characterized in that the license server checks for license information for the SIM card information is stored, from which a license authorization for use the protected Information is to be derived logically in order to ensure a positive result License key for the player provide. Method according to one or more of the preceding Expectations, characterized in that the license key via the mobile communication terminal or directly transferred to the player becomes. Method according to one or more of the preceding Expectations, characterized in that the Internet or parts of it as a network are used, preferably Internet protocols such as http are used. Method according to one or more of the preceding Expectations, characterized in that the communication between license server and / or player and / or mobile communication terminal via SMS and / or MMS. Method according to one or more of the preceding Expectations, characterized in that the information is signed, in particular with SIM card information. Method according to one or more of the preceding Expectations, characterized in that the license server made another request only accepts after a certain period of time, in particular that the generation of the license key for the playing time of the protected information is blocked. use device in connection with a DRM system, in particular a playback device, the one protected Can use information after receiving a license key characterized that means are available to submit license key requests via a mobile communication terminal that has a SIM card has, direct, or that means are available which read SIM card information from a mobile communication terminal and together with information to identify the user device and the protected Combine information before transferring the information to a license server become. Mobile communication terminal with a SIM card, the Includes means related to communication with a user device allow with a DRM system, especially a player with one DRM system, characterized in that funds are available which is a license key request of the usage device received, with SIM card information combine before they are forwarded to a license server. Software for a mobile communication terminal with a SIM card that implements a function when requesting license keys of the usage device recognized and received with a DRM system, combined with SIM card information and forwarded to a license server. Network component in a mobile network, the mobile communication terminals license key requests for devices with one Send DRM system, characterized in that the license key requests with SIM card information be combined before being forwarded to a license server become.