EP1771966A1 - Method of transmitting and reproducing content processed by various drm systems - Google Patents

Method of transmitting and reproducing content processed by various drm systems

Info

Publication number
EP1771966A1
EP1771966A1 EP05774104A EP05774104A EP1771966A1 EP 1771966 A1 EP1771966 A1 EP 1771966A1 EP 05774104 A EP05774104 A EP 05774104A EP 05774104 A EP05774104 A EP 05774104A EP 1771966 A1 EP1771966 A1 EP 1771966A1
Authority
EP
European Patent Office
Prior art keywords
content
license
drm
server
ticket
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Withdrawn
Application number
EP05774104A
Other languages
German (de)
French (fr)
Inventor
Chi-Hurn 211-1604 Shinyeongtong KIM
Yang-Lim 112-2403 Kkachimaeul Sunkyung Apt. CHOI
Young-Sun 511-704 Sangrok Apt. YOON
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Samsung Electronics Co Ltd
Original Assignee
Samsung Electronics Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Priority claimed from KR1020040070795A external-priority patent/KR100636169B1/en
Application filed by Samsung Electronics Co Ltd filed Critical Samsung Electronics Co Ltd
Publication of EP1771966A1 publication Critical patent/EP1771966A1/en
Withdrawn legal-status Critical Current

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0807—Network architectures or network communication protocols for network security for authentication of entities using tickets, e.g. Kerberos
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
    • H04L9/0819—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s)
    • H04L9/083—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2209/00—Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
    • H04L2209/60—Digital content management, e.g. content distribution
    • H04L2209/603—Digital right managament [DRM]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2463/00—Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00
    • H04L2463/101—Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00 applying security measures for digital rights management

Definitions

  • the present invention relates to changing of digital rights management (DRM), and more particularly, to a method of transmitting content processed by a DRM directly to a device that uses another DRM, and a method of reproducing the content.
  • DRM digital rights management
  • Digital rights management indicates a method of managing digital contents so that only an authorized user can use them.
  • a DRM system includes a content server that provides content; a license server that gives a user a right to use the content, changes the right, or removes the right from the user; and a user device that receives the content from the content server, receives the right for the content from a license server, and uses the content.
  • a DRM server application program is installed in the license server, and a DRM client application program is installed in the user device.
  • DRM programs have been developed and used, such as SmartRight developed by Thomson, Open Conditional Content Access Management (OCCAM) suggested by Sisco, an xCP Cluster Protocol developed by IBM, and Digital Transmission Content Protection (DTCP) developed by Digital Transmission License Administrator (DTLA).
  • FlG. 1 is a schematic block diagram of a conventional DRM system. Referring to
  • a device 1 sends a content server 2 a message 4 requesting content that a user desires to receive.
  • the content server 2 transmits content 5 processed according to DRM A to the device 1. That the content 5 is processed according to the DRM A is understood that the content 5 is encrypted using an encryption key and an encryption format defined in the DRM A, and that use control information regarding the content 5, which specifies usage rules and a number of times and a period of time that the content 5 can be reproduced, for example, is recorded in a format defined by the DRM A.
  • the device 1 sends the license server 3 a message 6 requesting a license for the content 5.
  • a license is a legal document giving official permission to use pre ⁇ determined content.
  • the license includes a decryption key for decrypting the content and the use control information. If the content is processed according to the DRM A, the device 1 must acquire a license for the content defined in the DRM A, in order to use the content.
  • the license server 3 determines whether the user is an authorized user, and generates a license 7 for the content 5 and transmits the license 7 to the device 1 when the user is an authorized user.
  • the license 7 includes a decryption key and use control information specified by the DRM A.
  • the license server 3 may be combined with the content server 2 to form a DRM server 8.
  • the device 1 reproduces the content 5 using the license 7. Specifically, a DRM client program installed in the device 1 extracts the decryption key for decrypting the content 5 and the use control information from the license 7, and checks a number of times and a period of time that the content 5 can be reproduced, which is described in the extracted use control information, to determine whether use of the content 5 violates rules defined in the use control information. If the use of the content 5 does not violate the rules, the content 5 is decrypted using the decryption key and the decrypted content is reproduced.
  • FlG. 2 is a diagram illustrating a conventional method of changing DRMs.
  • DRM A Conversion of DRM A into DRM B allows a device Dev_B that uses the DRM B to receive and reproduce content Cont_A processed according to the DRM A.
  • a device Dev_A which is currently being used, uses the DRM A
  • the device Dev_B uses the DRM B
  • the content Cont_A is obtained by processing content Cont using the DRM A, and stored in the device Dev_A.
  • the method shown in FlG. 2 will now be described in detail for a case where the device Dev_B desires to use the content Cont using the DRM B and the device Dev_A provides the content Cont to the device Dev_B-
  • content Cont_A indicates content obtained by processing the content Cont according to the DRM A
  • content Cont_B indicates contents obtained by processing the content Cont according to the DRM B.
  • the device Dev_A sends a DRM conversion server S-conv a message indicating that the device Dev_B has used the DRM B and requires the content, together with the content Cont_A and a license Lic_A (S202).
  • the DRM conversion server S_conv converts the content Cont_A into the content Cont_B using a server S_A (S204 and S206).
  • the DRM conversion server S-conv requests and receives a license Lic_B required to use the content Cont_B from a server S_B corresponding to the DRM B (S208 and S210).
  • the DRM conversion server S_conv transmits the content Cont_B and the license Lic_B to the device Dev_B (S212).
  • the content Cont_B and the license Lic_B may be transmitted to the device Dev_B via the device Dev_A or transmitted directly to the device Dev_B. Disclosure of Invention
  • the content Cont_A is transmitted from the device Dev_A to the DRM conversion server S_conv and the content Cont_B is transmitted from the DRM conversion server S_conv to the device Dev_B, thereby increasing load on a transmission line and the processing load on the DRM conversion server S_conv.
  • this problem becomes worse.
  • the present invention provides a method of transmitting content processed using one DRM directly to a device that uses another DRM, thereby minimizing a load on a DRM conversion server and a transmission channel.
  • the present invention also provides a method of reproducing content processed using one DRM in a device that uses another DRM.
  • the present invention it is possible to allow a device using one DRM to use content processed according to another DRM. Also, the present invention allows content to be directly exchanged between devices, thereby reducing the load on a DRM conversion server and a transmission channel.
  • FlG. 1 is a schematic block diagram of a conventional digital rights management
  • FlG. 2 is a block diagram illustrating a conventional method of changing DRMs
  • FlG. 3 is a block diagram illustrating a method of transmitting content according to an exemplary embodiment of the present invention
  • FlG. 4 is a block diagram illustrating a method of reproducing the content transmitted using the method illustrated in FlG. 3 according to an exemplary embodiment of the present invention
  • FlG. 5 is a flowchart illustrating a method of transmitting content according to an exemplary embodiment of the present invention
  • FlG. 6 is a flowchart illustrating a method of reproducing the content transmitted using the method illustrated in FlG. 5 according to an exemplary embodiment of the present invention
  • FlG. 7 is a block diagram of a DRM conversion server that performs the methods il ⁇ lustrated in FIGS. 5 and 6 according to an exemplary embodiment of the present invention
  • FlG. 8 is a block diagram illustrating a method of transmitting content according to another exemplary embodiment of the present invention.
  • FlG. 9 is a block diagram of a DRM conversion server that performs the method il ⁇ lustrated in FlG. 8 according to an exemplary embodiment of the present invention.
  • a method of transmitting first content which is obtained by processing content using first digital rights management (DRM), from a first device that uses the first DRM to a second device that uses second DRM, the method including (a) generating a ticket using a first license server and a second license server, the first license server issuing a first license for use in the first DRM and the second license server issuing a second license for use in the second DRM; (b) the second device obtaining a second content key required to process the content using the ticket and the second DRM; and (c) the second device receiving the content from the first device and processing the content using the second content key and the second DRM.
  • the ticket comprises use control information which specifies a restriction of use of the content, and the second content key required to process the content using the second DRM.
  • Operation (a) may comprise: (al) receiving the first license from the first device;
  • Operation (al) may comprise (al 1) receiving destination information regarding the destination of the content from the first device.
  • Operation (al) may further comprise (al2) receiving from the first device a conversion list which lists DRM that are convertible to or from the first DRM, wherein (a2) through (a4) are performed only when the second DRM is included in the conversion list.
  • Operation (a2) may comprise: (a21) a DRM conversion server transmitting the first license to the first license server; and (a22) the first license server extracting the use control information from the first license and transmitting the extracted use control in ⁇ formation to the DRM conversion server.
  • Operation (b) may comprise: (bl) the second device receiving the ticket from the
  • DRM conversion server and (b2) the second device extracting the second content key from the ticket.
  • Operation (c) may comprise: (cl) the second device receiving the content from the first device; and (c2) the second device encrypting the content using the second content key immediately after the second device receives the content.
  • a method of reproducing second content processed using a second device according to second digital rights management The second content is generated from first content obtained by processing content according to first DRM using a first device.
  • the second content is reproduced using a second license required to reproduce the second content, a ticket generated using use control information and a second content key, the use control information specifying a restriction of use of the content, and the second content key used to process the content in the second DRM.
  • the ticket is generated by a DRM conversion server using a first license server and a second license server, the first license server issuing a first license and the second license server issuing a second license.
  • the method includes (al) the second device transmitting the ticket to the DRM conversion server; (a2) the DRM conversion server extracting the use control in ⁇ formation and the second content key from the ticket and transmitting them to the second license server; (a3) the second license server generating the second license using the use control information and the second content key and transmitting it to the second device; and (a4) the second device reproducing the second content using the second license.
  • a digital rights management (DRM) conversion system for converting first content, which is obtained by processing content according to first DRM, into second content obtained by processing the content according to second DRM, the DRM system comprising: a first device which includes a first license required to reproduce the first content, and transmits the content to a second device which uses the second DRM; a DRM conversion server which generates a ticket using the first license; and the second device which converts the content into the second content using the ticket and reproduces the second content.
  • the ticket contains use control information which specifies a restriction of use of the content, and a second content key required to process the content according to the second DRM.
  • the DRM conversion server transmits the first license to the first license server; receives the use control information from the first license server; receives the second content key, which is generated by the second license server, from the second license server; and generates the ticket using the use control information and the second content key.
  • a digital rights management (DRM) conversion system for converting first content, which is obtained by processing content according to first DRM, into second content obtained by processing the content according to second DRM.
  • a ticket is generated according to a first license required to reproduce the first content, and transmitted to a second device which uses the second DRM.
  • the ticket is received from the second device, and a second license is obtained from the ticket and transmitted to the second device, and the ticket includes use control information specifying a restriction of use of the content, and a second content key required to process the content using the second DRM.
  • First content is obtained by processing predetermined content using first digital rights management (DRM).
  • DRM digital rights management
  • the first content is obtained by encrypting the predetermined content using a first content key.
  • second content is obtained by processing the predetermined content using second DRM.
  • a first license indicates a license for using content encrypted using the first DRM.
  • the first license includes use control information and a content key to be used in the first DRM system.
  • the use control information and the content key may be encrypted.
  • the use control in ⁇ formation specifies a period of time when and a number of times that the first content can be reproduced.
  • the use control information is shared by all DRM systems.
  • the use control information extracted from the first license is also applicable to a second license.
  • the second license indicates a license for using content encrypted using a second DRM.
  • a first license server issues the first license
  • a second license server issues the second license
  • the first content key denotes an encryption key or a decryption key used in the first
  • the encryption key and the decryption key may be the same in a symmetrical key structure and be different from each other in an asymmetrical key structure.
  • the first content is encrypted or decrypted using the first content key. Since a content key generated by a manufacturer is not public to another manufacturer, the first content key extracted from the first license cannot be used in the second DRM system. Similarly, a second content key is used in only the second DRM system.
  • FIG. 3 is a block diagram illustrating a method of transmitting content according to an embodiment of the present invention.
  • a device D_A sends a DRM conversion server S_conv a license Lic_A and destination in ⁇ formation indicating that the destination of content Cont is a device D_B (S302).
  • the device D_A uses DRM A
  • a device D_B uses DRM B.
  • Content Cont_A is obtained by processing the content Cont using the DRM A.
  • the license Lic_A denotes a license required to reproduce the content Cont_A.
  • the DRM conversion server S-conv acquires use control information I_usage from a license server S_A (S304 and 305), and acquires a content key from a license server S_B (S306 and 307).
  • the DRM conversion server S_conv transmits the license Lic_A to the license server S_A (S304).
  • the license server S_A uses the DRM A.
  • the license server S_A extracts the use control information I_usage from the license Lic_A, and transmits it to the DRM conversion server S_conv (S305).
  • the use control information I_usage specifies a period of time when and a number of times that the content Cont can be reproduced.
  • the DRM conversion server S_conv sends the license server S_B a message that requests a content key for the content Cont (S306).
  • the license server S_B uses the DRM B.
  • the license server S_B generates a content key K_B for the content Cont that can be used in the DRM B, and transmits the content key K_B to the DRM conversion server S_conv (S307).
  • the DRM conversion server S_conv generates a ticket Tic using the use control information I_usage and the content key K_B (S308). If the ticket Tic contains the use control information I_usage and the content key K_B, the data format of the ticket Tic is not limited. Alternatively, the ticket Tic may be encrypted and the result of encryption may be transmitted.
  • the DRM conversion server S_conv transmits the ticket Tic to the device D_B
  • the device D_B extracts the use control information I_usage and the content key K_B from the ticket Tic (S312).
  • the device D_A transmits the content Cont to the device D_B (S314).
  • the content Cont may be encrypted and the result of encryption may be transmitted to the device D_B via a transmission line.
  • the device D_B generates encrypted content Cont_enc by encrypting the content Cont using the content key K_B extracted in operation S312, and stores the encrypted content Cont_enc in an information storage medium (not shown) included in the device D_B (S316).
  • the encrypted content Cont_enc is encrypted using the content key K_B, and the content key K_B is generated using the DRM B. That is, the encrypted content Cont_enc is content Cont_B processed using the DRM B. Accordingly, the content Cont_B is stored in the device D_B, and the device D_B can use the content Cont_B within a restricted range specified by the use control information I_usage.
  • the device D_B must be designed to allow the content Cont to be encrypted right after the content Cont is received from the device D_A so that the device D_B can use the content Cont according to only the DRM B. If the content Cont received from the device D_A is not encrypted, the device D_B can use the content Cont without the DRM B. In this case, it is impossible to achieve the object of the DRM that only an authorized user is allowed to use the content Cont, which is not preferable in view of business rules.
  • FlG. 4 is a block diagram illustrating a method of reproducing the content Cont_B produced in the method illustrated in FlG. 3 according to an embodiment of the present invention.
  • the device D_B transmits the ticket Tic to the DRM conversion server S_conv (S402).
  • the DRM conversion server S_conv extracts the use control information I- usage and the content key K_B from the ticket Tic, and transmits them to the license server S_B (S404 and 406).
  • the license server S_B generates the license Lic_B using the use control in ⁇ formation I-usage and the content key K_B, and transmits it to the DRM conversion server S_conv (S408).
  • the DRM conversion server S_conv transmits the license Lic_B to the device
  • the device D_B uses the content Cont_B using the license Lic_B (S412).
  • the device D_B extracts the use control information I_usage from the license Lic_B, and checks whether a number of times that and a period of time when the content Cont can be reproduced are consistent with the use control information I_usage. Also, based on the use control information I_usage, the device D_B extracts the content key K_B from the license Lic_B, generates the content Cont by decrypting the content Cont_B using the content key K_B, and reproduces the content Cont.
  • the DRM conversion server S_conv extracts the use control information I_usage and the content keys K_B, which are specified in different DRM systems, from the licenses Lic_A and Lic_B which are not compatible with each other, respectively, and generates the tickets Tic for use in the respective DRM systems or converts the licenses Lic_A and Lic_B into the licenses Lic_B and Lic_A, respectively. That is, the DRM conversion server meditates between two devices using different DRM systems, and between different license servers.
  • the license servers S_A and S_B generate the licenses Lic_A and Lic_B using the use control information I_usage and the content key K_B, respectively, or extract the use control information I_usage and the content key K_B from the licenses Lic_A and Lic_B, respectively.
  • the methods illustrated in FIGS. 3 and 4 are differentiated from the conventional method illustrated in FlG. 2 in that content and a license are transmitted separately. T he content is transmitted between the devices D_A and D_B, not between the DRM conversion server and the devices D_A and D_B- In general, a load on a transmission channel is caused by the transmission of content rather than the transmission of a message.
  • transmission of the content between the DRM conversion server and the devices D_A and D_B increases the load on a transmission channel.
  • the DRM conversion server requires a large bandwidth to transmit lots of data.
  • the transmission of data between devices does not affect the transmission of data between the DRM conversion server and another device, and thus, a large bandwidth DRM conversion server is not required.
  • FlG. 5 is a flowchart illustrating a method of transmitting content Cont according to an embodiment of the present invention.
  • a DRM conversion server S_conv receives from a first device D_A that uses first DRM A a first license Lic_A for the content Cont_A to be managed using a first DRM system A, and destination in ⁇ formation indicating that the destination of the content Cont is a second device D_B that uses second DRM B (operation 510).
  • the DRM conversion server obtains use control information I_usage contained in the first license Lic_A related to the first DRM A (operation 520). That is, the DRM conversion server transmits the first license Lic_A to the license server S_A that uses the first DRM A, and the license server S_A extracts the use control in ⁇ formation I_usage from the first license Lic_A and transmits it to the DRM conversion server.
  • the DRM conversion obtains a content key K_B, which will be used to reproduce the content Cont server using the second DRM B, from a license server S_B using the second DRM B (operation 530).
  • the DRM conversion server sends the license server S_B a message that requests the content key K_B so as to reproduce the content Cont.
  • the license server S_B generates the content key K_B that allows the content Cont to be reproduced using the second DRM B, and transmits it to the DRM conversion server S_conv.
  • the DRM conversion server generates a ticket Tic using the use control in ⁇ formation I_usage and the content key K_B, and sends it to the second device D_B (operation 540).
  • the second device D_B receives the content Cont, which is not processed using DRM, from the first device D_A (operation 550).
  • the second device D_B extracts the content key K_B from the ticket Tic transmitted in operation 540 (operation 560).
  • the second device D_B encrypts the content Cont using the content key
  • FlG. 6 is a flowchart illustrating a method of reproducing content Cont stored using the method illustrated in FlG. 5, according to an embodiment of the present invention.
  • the second device D_B obtains content Cont_B processed using second DRM B, and a ticket Tic.
  • the ticket Tic contains use control information I_usage regarding the content Cont_B, and a content key K_B.
  • the second device D_B acquires the ticket Tic, it does not obtain a second license Lic_B for the second DRM system B.
  • the second DRM B used by the device D_B can be used to recognize the second license Lic_B but not the ticket Tic.
  • the second device D_B cannot reproduce the content Cont_B- Therefore, the second device D_B obtains the second license Lic_B, and then reproduces the content Cont_B.
  • the ticket Tic is used to obtain the second license Lic_B-
  • the DRM conversion server S_conv receives the ticket Tic from the second device D_B (operation 610).
  • the DRM conversion server S_conv generates the second license Lic_B using the second license server S_B (operations 620 and 630).
  • the DRM conversion server S_conv extracts the use control in ⁇ formation I_usage and the content key K_B from the ticket Tic, and sends them to the second license server S_B (operation 620).
  • the second license server S_B receives the use control information I_usage and the content key K_B from the DRM conversion server S_conv, generates the second license Lic_B using the received use control in ⁇ formation I_usage and the content key K_B, and sends the second license Lic_B to the DRM conversion server (operation 630).
  • the DRM conversion server S_conv transmits the second license Lic_B to the second device D_B (operation 640).
  • the second device D_B reproduces the content Cont_B using the second license Lic_B (operation 650).
  • the second device D_B acquires the use control information I_usage and the content key K_B by interpreting the second license Lic_B, determines whether it can reproduce the content Cont_B based on the use control information I_usage contained in the second license Lic_B, and decrypts and reproduces the content Cont_B using the content key
  • FlG. 7 is a block diagram of a DRM conversion server 700 that performs the methods illustrated in FIGS. 5 and 6, according to an embodiment of the present invention.
  • data paths indicated by solid lines are data paths through which the DRM conversion server 700 transmits content using the method illustrated in FlG. 5
  • data paths indicated by dotted lines are data paths through which the DRM conversion server 700 transmits a second license to a second device D_B using the method illustrated in FlG. 6 so that the second device can reproduce the content.
  • the DRM conversion server 700 includes a license processor 710 that acquires in ⁇ formation required to generate a ticket 714 while operating interactively with a first license server S_A and a second license server S_B, and a ticket processor 720 that generates the ticket 714 using a first license 702 or obtains the first license 702 from the ticket 714.
  • the license processor 710 receives the first license 702 and destination information
  • the license processor 710 obtains the use control information 707 from the first license server S_A. That is, the license processor 710 transmits the first license 702 to the first license server S_A and receives the use control information 707 from the first license server S_A.
  • the first license 702 contains the use control information 707 and a first content key (not shown) regarding the content, which is to be transmitted from the first device D_A to the second device D_B-
  • the use control information 707 and the first content key are generated using the first DRM system.
  • licenses produced in different DRM systems are generated in different formats so that only corresponding license servers can interpret the licenses. Therefore, the license processor 710 cannot extract the use control information 707 from the first license 702.
  • the first license server S_A extracts the use control information 707 from the first license 702 and transmits it to the license processor 710. Since the content will be transmitted to only the second device D_B, the first content key is not transmitted to the license processor 710.
  • the license processor 710 obtains the second content key 709 from the second license server S_B-
  • the license processor 710 sends the second license server S_B specified in the destination information 704, a message 708 that requests the second content key 709, and receives the second content key 709 from the second license server S_B.
  • the license processor 710 sends the ticket processor 720 the use control in ⁇ formation 707 and the second content key 709 which are received from the first license 702.
  • the ticket processor 720 generates the ticket 714 using the use control information 707 and the second content key 709, and transmits the ticket 714 to the second device D_B-
  • the data format of the ticket 714 is not related to that of the first license 702 but must contain the use control information 707 and the second content key 709.
  • the ticket processor 720 receives a ticket 722 from the second device D_B, extracts use control information 724 and a second content key 726 from the ticket 722, and transmits the use control information 724 and the second content key 726 to the second license server S_B.
  • the second license server S_B generates a second license 728 using the use control information 724 and the second content key 726 and transmits it to the ticket processor 720.
  • the ticket processor 720 transmits the second license 728 to the second device D_B again.
  • FlG. 8 is a block diagram illustrating a method of transmitting content Cont according to another embodiment of the present invention.
  • a device D_A transmits, to a DRM conversion server S_conv, a license Lic_A, destination information indicating that the destination of the content Cont is the device D_B, and a conversion list List_conv listing DRM systems that are convertible to/from DRM A (operation 802).
  • the conversion list List_conv is determined based on the right of each of devices, generated by a DRM conversion server S_conv, and provided to the devices.
  • the DRM conversion server S_conv determines whether content processed using DRM A can be converted into content processes using desired DRM B based on the conversion list List_conv (operation 803).
  • the device D_A transmits the content to the device D_B
  • whether the content can be processed using the DRM B is determined by checking whether the DRM B is included in the conversion list List_conv produced by the device D_A.
  • Operation 804 is performed when the content can be processed using the DRM B, and the method of FlG. 8 is completed otherwise.
  • Operations 804 through 816 are similar to operations 304 through 316 described with reference to FlG. 3.
  • the DRM conversion server S_conv receives use control in ⁇ formation I_usage from a license server S_A (operations 804 and 805), and receives a content key from a license server S_B (operations 806 and 807).
  • the DRM conversion server S_conv transmits the license Lic_A to the license server S_A (operation 804).
  • the license server S_A is related to the DRM system A.
  • the license server S_A extracts the use control information I_usage from the license Lic_A and transmits it to the DRM conversion server S_conv (operation 805).
  • the use control information I_usage specifies a number of times that and a period of time when the content Cont can be reproduced.
  • the DRM conversion server S_conv sends the license server S_B a message that requests a content key K_B required to reproduce the content Cont under the DRM B (operation 806).
  • the license server S_B is related to the DRM B.
  • the license server S_B generates the content key K_B and transmits it to the
  • the DRM conversion server S_conv generates a ticket Tic using the use control information I_usage and the content key K_B (operation 808).
  • the data format of the ticket Tic is not limited.
  • the ticket Tic may be encrypted and the result of encryption may be transmitted.
  • the DRM conversion server S_conv transmits the ticket Tic to the device D_B
  • the device D_B extracts the use control information I_usage and the content key K_B from the ticket Tic (operation 812).
  • the device D_A transmits the content Cont to the device D_B (operation 814).
  • the content Cont may be encrypted and transmitted to the device D_B via a transmission channel.
  • the device D_B generates encrypted content Cont_enc by encrypting the content Cont using the content key K_B extracted in operation 812, and stores it in a storage medium of the device D_B (operation 816).
  • FlG. 9 is a block diagram of a DRM conversion server 900 that performs the method of FlG. 8 according to an embodiment of the present invention.
  • data paths indicated by solid lines are data paths through which the DRM conversion server 900 transmits content to a second device D_B using the method of FlG. 5
  • data paths indicated by dotted lines are data paths through which the DRM conversion server 900 transmits a second license to the second device D_B so that the second device D_B can reproduce the content according to the method of FlG. 6.
  • the DRM conversion server 900 includes a license processor 910 that acquires in ⁇ formation required to produce a ticket 914 while the DRM conversion server 900 operates interactively with a first license server S_A and a second license server S_B, and a ticket processor 920 that produces the ticket 914 using a second license 928 or obtains the second license from the ticket 914.
  • a determination unit 934 receives a conversion list 932 from the first device D_A, determines whether the first device D_A has a right to transmit the content to the second device D_B according to the conversion list 932, and sends the license processor 910 a message 934 that content processed using first DRM A can be converted into content processed using second DRM B.
  • the license processor 910 Only when the license processor 910 receives the message 934 from the de- termination unit 930, the license processor 910 receives a first license 902 and destination information 904 from the first device D_A that uses the first DRM, and obtains use control information 907 and a second content key from the first and second license servers S_A and S_B- If the license processor 910 does not receive the message 934, the license processor 910 generates an error message and transmits the error message to the first device D_A.
  • the other operations of the license processor 910 and the operations of the ticket processor 920 are similar to the operations of the license processor 710 and the ticket processor 720 of FTG. 7.
  • the license processor 910 receives the use control information
  • the license processor 910 transmits the first license 902 to the first license server S_A, and receives the use control in ⁇ formation 907 from the first license server S_A.
  • the license processor 910 receives a second content key 909 from the second license server S_B.
  • the license processor 910 sends a message 908 that requests the second content key 909 to the second license server S_B which is indicated in the destination information 904, and receives the second content key 909 from the second license server S_B-
  • the license processor 910 sends the use control information 907, which is received from the first license server S_B, and the second content key 909 to the ticket processor 920.
  • the ticket processor 920 generates the ticket 914 using the use control information
  • the data format of the ticket 914 is not related to the data format of the first license 902, and must contain the use control information 907 and the second content key 909.
  • the ticket processor 920 receives a ticket 922 from the second device D_B, extracts use control information 924 and a second content key 926 from the ticket 922, and transmits the use control information 924 and the second content key 926 to the second license server S_B-
  • the second license server S_B produces a second license 928 using the use control information 924 and the second content key 926, and transmits it to the ticket processor 920.
  • the ticket processor 920 transmits the second license 928 to the second device D_B again.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Management, Administration, Business Operations System, And Electronic Commerce (AREA)
  • Storage Device Security (AREA)

Abstract

Provided is a method of transmitting content processed according to first digital rights management (DRM) to a device that uses second DRM. The method includes generating a ticket using a first license server and a second license server, the first license server issuing a first license for use in the first DRM and the second license server issuing a second license for use in the second DRM; the second device obtaining a second content key required to process the content using the ticket and the second DRM; and the second device receiving the content from the first device and processing the content using the second content key and the second DRM. The ticket includes use control information that specifies a restriction of use of the content, and the second content key required to process the content using the second DRM.

Description

Description METHOD OF TRANSMITTING AND REPRODUCING
CONTENT PROCESSED BY VARIOUS DRM SYSTEMS
Technical Field
[1] the present invention relates to changing of digital rights management (DRM), and more particularly, to a method of transmitting content processed by a DRM directly to a device that uses another DRM, and a method of reproducing the content.
Background Art
[2] Digital rights management (DRM) indicates a method of managing digital contents so that only an authorized user can use them. In general, a DRM system includes a content server that provides content; a license server that gives a user a right to use the content, changes the right, or removes the right from the user; and a user device that receives the content from the content server, receives the right for the content from a license server, and uses the content.
[3] A DRM server application program is installed in the license server, and a DRM client application program is installed in the user device. Various DRM programs have been developed and used, such as SmartRight developed by Thomson, Open Conditional Content Access Management (OCCAM) suggested by Sisco, an xCP Cluster Protocol developed by IBM, and Digital Transmission Content Protection (DTCP) developed by Digital Transmission License Administrator (DTLA).
[4] FlG. 1 is a schematic block diagram of a conventional DRM system. Referring to
FlG. 1, a device 1 sends a content server 2 a message 4 requesting content that a user desires to receive.
[5] The content server 2 transmits content 5 processed according to DRM A to the device 1. That the content 5 is processed according to the DRM A is understood that the content 5 is encrypted using an encryption key and an encryption format defined in the DRM A, and that use control information regarding the content 5, which specifies usage rules and a number of times and a period of time that the content 5 can be reproduced, for example, is recorded in a format defined by the DRM A.
[6] Next, the device 1 sends the license server 3 a message 6 requesting a license for the content 5. A license is a legal document giving official permission to use pre¬ determined content. The license includes a decryption key for decrypting the content and the use control information. If the content is processed according to the DRM A, the device 1 must acquire a license for the content defined in the DRM A, in order to use the content.
[7] The license server 3 determines whether the user is an authorized user, and generates a license 7 for the content 5 and transmits the license 7 to the device 1 when the user is an authorized user. The license 7 includes a decryption key and use control information specified by the DRM A.
[8] Referring to FlG. 1, the license server 3 may be combined with the content server 2 to form a DRM server 8.
[9] The device 1 reproduces the content 5 using the license 7. Specifically, a DRM client program installed in the device 1 extracts the decryption key for decrypting the content 5 and the use control information from the license 7, and checks a number of times and a period of time that the content 5 can be reproduced, which is described in the extracted use control information, to determine whether use of the content 5 violates rules defined in the use control information. If the use of the content 5 does not violate the rules, the content 5 is decrypted using the decryption key and the decrypted content is reproduced.
[10] Since the data format of a license varies according to the type of a DRM system used, a DRM system must be changed to allow data to be exchanged between devices that use different DRM systems.
[11] FlG. 2 is a diagram illustrating a conventional method of changing DRMs.
Conversion of DRM A into DRM B allows a device Dev_B that uses the DRM B to receive and reproduce content Cont_A processed according to the DRM A.
[12] In FlG. 2, a device Dev_A, which is currently being used, uses the DRM A, and the device Dev_B uses the DRM B. The content Cont_A is obtained by processing content Cont using the DRM A, and stored in the device Dev_A. The method shown in FlG. 2 will now be described in detail for a case where the device Dev_B desires to use the content Cont using the DRM B and the device Dev_A provides the content Cont to the device Dev_B- Throughout this disclosure, content Cont_A indicates content obtained by processing the content Cont according to the DRM A, and content Cont_B indicates contents obtained by processing the content Cont according to the DRM B.
[13] Referring to FlG. 2, the device Dev_A sends a DRM conversion server S-conv a message indicating that the device Dev_B has used the DRM B and requires the content, together with the content Cont_A and a license Lic_A (S202).
[14] Next, the DRM conversion server S_conv converts the content Cont_A into the content Cont_B using a server S_A (S204 and S206).
[15] Next, the DRM conversion server S-conv requests and receives a license Lic_B required to use the content Cont_B from a server S_B corresponding to the DRM B (S208 and S210).
[16] Thereafter, the DRM conversion server S_conv transmits the content Cont_B and the license Lic_B to the device Dev_B (S212). In this case, the content Cont_B and the license Lic_B may be transmitted to the device Dev_B via the device Dev_A or transmitted directly to the device Dev_B. Disclosure of Invention
Technical Problem
[17] However, in the conventional method, the content Cont_A is transmitted from the device Dev_A to the DRM conversion server S_conv and the content Cont_B is transmitted from the DRM conversion server S_conv to the device Dev_B, thereby increasing load on a transmission line and the processing load on the DRM conversion server S_conv. In general, since a DRM conversion server is connected to lots of devices, this problem becomes worse.
Technical Solution
[ 18] The present invention provides a method of transmitting content processed using one DRM directly to a device that uses another DRM, thereby minimizing a load on a DRM conversion server and a transmission channel.
[19] The present invention also provides a method of reproducing content processed using one DRM in a device that uses another DRM.
Advantageous Effects
[20] According to the present invention, it is possible to allow a device using one DRM to use content processed according to another DRM. Also, the present invention allows content to be directly exchanged between devices, thereby reducing the load on a DRM conversion server and a transmission channel.
Description of Drawings
[21] FlG. 1 is a schematic block diagram of a conventional digital rights management
(DRM) system;
[22] FlG. 2 is a block diagram illustrating a conventional method of changing DRMs;
[23] FlG. 3 is a block diagram illustrating a method of transmitting content according to an exemplary embodiment of the present invention;
[24] FlG. 4 is a block diagram illustrating a method of reproducing the content transmitted using the method illustrated in FlG. 3 according to an exemplary embodiment of the present invention;
[25] FlG. 5 is a flowchart illustrating a method of transmitting content according to an exemplary embodiment of the present invention;
[26] FlG. 6 is a flowchart illustrating a method of reproducing the content transmitted using the method illustrated in FlG. 5 according to an exemplary embodiment of the present invention;
[27] FlG. 7 is a block diagram of a DRM conversion server that performs the methods il¬ lustrated in FIGS. 5 and 6 according to an exemplary embodiment of the present invention; [28] FlG. 8 is a block diagram illustrating a method of transmitting content according to another exemplary embodiment of the present invention; and
[29] FlG. 9 is a block diagram of a DRM conversion server that performs the method il¬ lustrated in FlG. 8 according to an exemplary embodiment of the present invention.
Best Mode
[30] According to one aspect of the present invention, there is provided a method of transmitting first content, which is obtained by processing content using first digital rights management (DRM), from a first device that uses the first DRM to a second device that uses second DRM, the method including (a) generating a ticket using a first license server and a second license server, the first license server issuing a first license for use in the first DRM and the second license server issuing a second license for use in the second DRM; (b) the second device obtaining a second content key required to process the content using the ticket and the second DRM; and (c) the second device receiving the content from the first device and processing the content using the second content key and the second DRM. The ticket comprises use control information which specifies a restriction of use of the content, and the second content key required to process the content using the second DRM.
[31] Operation (a) may comprise: (al) receiving the first license from the first device;
(a2) receiving the use control information from the first license server, the use control information generated by the first license server and extracted from the first license; (a3) receiving the second content key, which is generated by the second license server, from the second license server; and (a4) generating the ticket using the use control in¬ formation and the second content key.
[32] Operation (al) may comprise (al 1) receiving destination information regarding the destination of the content from the first device.
[33] Operation (al) may further comprise (al2) receiving from the first device a conversion list which lists DRM that are convertible to or from the first DRM, wherein (a2) through (a4) are performed only when the second DRM is included in the conversion list.
[34] Operation (a2) may comprise: (a21) a DRM conversion server transmitting the first license to the first license server; and (a22) the first license server extracting the use control information from the first license and transmitting the extracted use control in¬ formation to the DRM conversion server.
[35] Operation (b) may comprise: (bl) the second device receiving the ticket from the
DRM conversion server; and (b2) the second device extracting the second content key from the ticket.
[36] Operation (c) may comprise: (cl) the second device receiving the content from the first device; and (c2) the second device encrypting the content using the second content key immediately after the second device receives the content.
[37] According to another aspect of the present invention, there is provided a method of reproducing second content processed using a second device according to second digital rights management (DRM). The second content is generated from first content obtained by processing content according to first DRM using a first device. The second content is reproduced using a second license required to reproduce the second content, a ticket generated using use control information and a second content key, the use control information specifying a restriction of use of the content, and the second content key used to process the content in the second DRM. The ticket is generated by a DRM conversion server using a first license server and a second license server, the first license server issuing a first license and the second license server issuing a second license.
[38] The method includes (al) the second device transmitting the ticket to the DRM conversion server; (a2) the DRM conversion server extracting the use control in¬ formation and the second content key from the ticket and transmitting them to the second license server; (a3) the second license server generating the second license using the use control information and the second content key and transmitting it to the second device; and (a4) the second device reproducing the second content using the second license.
[39] According to yet another aspect of the present invention, there is provided a digital rights management (DRM) conversion system for converting first content, which is obtained by processing content according to first DRM, into second content obtained by processing the content according to second DRM, the DRM system comprising: a first device which includes a first license required to reproduce the first content, and transmits the content to a second device which uses the second DRM; a DRM conversion server which generates a ticket using the first license; and the second device which converts the content into the second content using the ticket and reproduces the second content. The ticket contains use control information which specifies a restriction of use of the content, and a second content key required to process the content according to the second DRM.
[40] The DRM conversion server transmits the first license to the first license server; receives the use control information from the first license server; receives the second content key, which is generated by the second license server, from the second license server; and generates the ticket using the use control information and the second content key.
[41] According to still another aspect of the present invention, there is provided a digital rights management (DRM) conversion system for converting first content, which is obtained by processing content according to first DRM, into second content obtained by processing the content according to second DRM. A ticket is generated according to a first license required to reproduce the first content, and transmitted to a second device which uses the second DRM. The ticket is received from the second device, and a second license is obtained from the ticket and transmitted to the second device, and the ticket includes use control information specifying a restriction of use of the content, and a second content key required to process the content using the second DRM.
Mode for Invention
[42] Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. The same reference numerals represent the same elements throughout the drawings.
[43] For better understanding of the present invention, terms used in this disclosure will now be explained. First content is obtained by processing predetermined content using first digital rights management (DRM). In other words, the first content is obtained by encrypting the predetermined content using a first content key. Similarly, second content is obtained by processing the predetermined content using second DRM.
[44] A first license indicates a license for using content encrypted using the first DRM.
That is, the first content can be reproduced using the first license. The first license includes use control information and a content key to be used in the first DRM system. The use control information and the content key may be encrypted. The use control in¬ formation specifies a period of time when and a number of times that the first content can be reproduced. The use control information is shared by all DRM systems. Thus, the use control information extracted from the first license is also applicable to a second license. Likewise, the second license indicates a license for using content encrypted using a second DRM.
[45] A first license server issues the first license, and a second license server issues the second license.
[46] The first content key denotes an encryption key or a decryption key used in the first
DRM system. The encryption key and the decryption key may be the same in a symmetrical key structure and be different from each other in an asymmetrical key structure. In the first DRM system, the first content is encrypted or decrypted using the first content key. Since a content key generated by a manufacturer is not public to another manufacturer, the first content key extracted from the first license cannot be used in the second DRM system. Similarly, a second content key is used in only the second DRM system.
[47] FIG. 3 is a block diagram illustrating a method of transmitting content according to an embodiment of the present invention. In the method illustrated in FIG. 3, a device D_A sends a DRM conversion server S_conv a license Lic_A and destination in¬ formation indicating that the destination of content Cont is a device D_B (S302). The device D_A uses DRM A, and a device D_B uses DRM B. Content Cont_A is obtained by processing the content Cont using the DRM A. The license Lic_A denotes a license required to reproduce the content Cont_A.
[48] Next, the DRM conversion server S-conv acquires use control information I_usage from a license server S_A (S304 and 305), and acquires a content key from a license server S_B (S306 and 307).
[49] More specifically, the DRM conversion server S_conv transmits the license Lic_A to the license server S_A (S304). The license server S_A uses the DRM A.
[50] Next, the license server S_A extracts the use control information I_usage from the license Lic_A, and transmits it to the DRM conversion server S_conv (S305). The use control information I_usage specifies a period of time when and a number of times that the content Cont can be reproduced.
[51] Next, the DRM conversion server S_conv sends the license server S_B a message that requests a content key for the content Cont (S306). The license server S_B uses the DRM B.
[52] Next, the license server S_B generates a content key K_B for the content Cont that can be used in the DRM B, and transmits the content key K_B to the DRM conversion server S_conv (S307).
[53] Next, the DRM conversion server S_conv generates a ticket Tic using the use control information I_usage and the content key K_B (S308). If the ticket Tic contains the use control information I_usage and the content key K_B, the data format of the ticket Tic is not limited. Alternatively, the ticket Tic may be encrypted and the result of encryption may be transmitted.
[54] Next, the DRM conversion server S_conv transmits the ticket Tic to the device D_B
(S310).
[55] Next, the device D_B extracts the use control information I_usage and the content key K_B from the ticket Tic (S312).
[56] Next, the device D_A transmits the content Cont to the device D_B (S314). Al¬ ternatively, the content Cont may be encrypted and the result of encryption may be transmitted to the device D_B via a transmission line.
[57] Next, the device D_B generates encrypted content Cont_enc by encrypting the content Cont using the content key K_B extracted in operation S312, and stores the encrypted content Cont_enc in an information storage medium (not shown) included in the device D_B (S316).
[58] The encrypted content Cont_enc is encrypted using the content key K_B, and the content key K_B is generated using the DRM B. That is, the encrypted content Cont_enc is content Cont_B processed using the DRM B. Accordingly, the content Cont_B is stored in the device D_B, and the device D_B can use the content Cont_B within a restricted range specified by the use control information I_usage.
[59] The device D_B must be designed to allow the content Cont to be encrypted right after the content Cont is received from the device D_A so that the device D_B can use the content Cont according to only the DRM B. If the content Cont received from the device D_A is not encrypted, the device D_B can use the content Cont without the DRM B. In this case, it is impossible to achieve the object of the DRM that only an authorized user is allowed to use the content Cont, which is not preferable in view of business rules.
[60] FlG. 4 is a block diagram illustrating a method of reproducing the content Cont_B produced in the method illustrated in FlG. 3 according to an embodiment of the present invention. In the method illustrated in FlG. 4, the device D_B transmits the ticket Tic to the DRM conversion server S_conv (S402).
[61] Next, the DRM conversion server S_conv extracts the use control information I- usage and the content key K_B from the ticket Tic, and transmits them to the license server S_B (S404 and 406).
[62] Next, the license server S_B generates the license Lic_B using the use control in¬ formation I-usage and the content key K_B, and transmits it to the DRM conversion server S_conv (S408).
[63] Next, the DRM conversion server S_conv transmits the license Lic_B to the device
D_B (S410).
[64] Next, the device D_B uses the content Cont_B using the license Lic_B (S412). In other words, the device D_B extracts the use control information I_usage from the license Lic_B, and checks whether a number of times that and a period of time when the content Cont can be reproduced are consistent with the use control information I_usage. Also, based on the use control information I_usage, the device D_B extracts the content key K_B from the license Lic_B, generates the content Cont by decrypting the content Cont_B using the content key K_B, and reproduces the content Cont.
[65] In the methods illustrated in FIGS. 3 and 4, the DRM conversion server S_conv extracts the use control information I_usage and the content keys K_B, which are specified in different DRM systems, from the licenses Lic_A and Lic_B which are not compatible with each other, respectively, and generates the tickets Tic for use in the respective DRM systems or converts the licenses Lic_A and Lic_B into the licenses Lic_B and Lic_A, respectively. That is, the DRM conversion server meditates between two devices using different DRM systems, and between different license servers. Also, the license servers S_A and S_B generate the licenses Lic_A and Lic_B using the use control information I_usage and the content key K_B, respectively, or extract the use control information I_usage and the content key K_B from the licenses Lic_A and Lic_B, respectively. [66] The methods illustrated in FIGS. 3 and 4 are differentiated from the conventional method illustrated in FlG. 2 in that content and a license are transmitted separately. T he content is transmitted between the devices D_A and D_B, not between the DRM conversion server and the devices D_A and D_B- In general, a load on a transmission channel is caused by the transmission of content rather than the transmission of a message. Thus, transmission of the content between the DRM conversion server and the devices D_A and D_B increases the load on a transmission channel. In particular, when the number of devices used is great, the higher the frequency of exchange of data between the DRM conversion server and the devices, the greater the load on the DRM conversion server. In this case, the DRM conversion server requires a large bandwidth to transmit lots of data. However, the transmission of data between devices does not affect the transmission of data between the DRM conversion server and another device, and thus, a large bandwidth DRM conversion server is not required.
[67] FlG. 5 is a flowchart illustrating a method of transmitting content Cont according to an embodiment of the present invention. In this method, a DRM conversion server S_conv receives from a first device D_A that uses first DRM A a first license Lic_A for the content Cont_A to be managed using a first DRM system A, and destination in¬ formation indicating that the destination of the content Cont is a second device D_B that uses second DRM B (operation 510).
[68] Next, the DRM conversion server obtains use control information I_usage contained in the first license Lic_A related to the first DRM A (operation 520). That is, the DRM conversion server transmits the first license Lic_A to the license server S_A that uses the first DRM A, and the license server S_A extracts the use control in¬ formation I_usage from the first license Lic_A and transmits it to the DRM conversion server.
[69] Next, the DRM conversion obtains a content key K_B, which will be used to reproduce the content Cont server using the second DRM B, from a license server S_B using the second DRM B (operation 530). In other words, the DRM conversion server sends the license server S_B a message that requests the content key K_B so as to reproduce the content Cont. In response to the message, the license server S_B generates the content key K_B that allows the content Cont to be reproduced using the second DRM B, and transmits it to the DRM conversion server S_conv.
[70] Next, the DRM conversion server generates a ticket Tic using the use control in¬ formation I_usage and the content key K_B, and sends it to the second device D_B (operation 540).
[71] Next, the second device D_B receives the content Cont, which is not processed using DRM, from the first device D_A (operation 550).
[72] Next, the second device D_B extracts the content key K_B from the ticket Tic transmitted in operation 540 (operation 560).
[73] Thereafter, the second device D_B encrypts the content Cont using the content key
K_B extracted in operation 560 and stores the result of encryption in a storage medium of the second device D_B (operation 570).
[74] FlG. 6 is a flowchart illustrating a method of reproducing content Cont stored using the method illustrated in FlG. 5, according to an embodiment of the present invention. In the present embodiment, the second device D_B obtains content Cont_B processed using second DRM B, and a ticket Tic. The ticket Tic contains use control information I_usage regarding the content Cont_B, and a content key K_B. However, although the second device D_B acquires the ticket Tic, it does not obtain a second license Lic_B for the second DRM system B. The second DRM B used by the device D_B can be used to recognize the second license Lic_B but not the ticket Tic. Thus, even if the ticket Tic contains the use control information I_usage and the content key K_B, the second device D_B cannot reproduce the content Cont_B- Therefore, the second device D_B obtains the second license Lic_B, and then reproduces the content Cont_B. The ticket Tic is used to obtain the second license Lic_B-
[75] In the method illustrated in FlG. 6, the DRM conversion server S_conv receives the ticket Tic from the second device D_B (operation 610).
[76] Next, the DRM conversion server S_conv generates the second license Lic_B using the second license server S_B (operations 620 and 630).
[77] Specifically, the DRM conversion server S_conv extracts the use control in¬ formation I_usage and the content key K_B from the ticket Tic, and sends them to the second license server S_B (operation 620). The second license server S_B receives the use control information I_usage and the content key K_B from the DRM conversion server S_conv, generates the second license Lic_B using the received use control in¬ formation I_usage and the content key K_B, and sends the second license Lic_B to the DRM conversion server (operation 630).
[78] Next, the DRM conversion server S_conv transmits the second license Lic_B to the second device D_B (operation 640).
[79] Next, the second device D_B reproduces the content Cont_B using the second license Lic_B (operation 650). In other words, using the second DRM system B, the second device D_B acquires the use control information I_usage and the content key K_B by interpreting the second license Lic_B, determines whether it can reproduce the content Cont_B based on the use control information I_usage contained in the second license Lic_B, and decrypts and reproduces the content Cont_B using the content key
K_B.
[80] FlG. 7 is a block diagram of a DRM conversion server 700 that performs the methods illustrated in FIGS. 5 and 6, according to an embodiment of the present invention. In FlG. 7, data paths indicated by solid lines are data paths through which the DRM conversion server 700 transmits content using the method illustrated in FlG. 5, and data paths indicated by dotted lines are data paths through which the DRM conversion server 700 transmits a second license to a second device D_B using the method illustrated in FlG. 6 so that the second device can reproduce the content.
[81] The DRM conversion server 700 includes a license processor 710 that acquires in¬ formation required to generate a ticket 714 while operating interactively with a first license server S_A and a second license server S_B, and a ticket processor 720 that generates the ticket 714 using a first license 702 or obtains the first license 702 from the ticket 714.
[82] The license processor 710 receives the first license 702 and destination information
704 from a first device D_A that uses first DRM, and obtains use control information 707 and a second content key 709 from the first and second license servers S_A and S_B, respectively.
[83] More specifically, the license processor 710 obtains the use control information 707 from the first license server S_A. That is, the license processor 710 transmits the first license 702 to the first license server S_A and receives the use control information 707 from the first license server S_A.
[84] The first license 702 contains the use control information 707 and a first content key (not shown) regarding the content, which is to be transmitted from the first device D_A to the second device D_B- The use control information 707 and the first content key are generated using the first DRM system. In general, licenses produced in different DRM systems are generated in different formats so that only corresponding license servers can interpret the licenses. Therefore, the license processor 710 cannot extract the use control information 707 from the first license 702. Thus, the first license server S_A extracts the use control information 707 from the first license 702 and transmits it to the license processor 710. Since the content will be transmitted to only the second device D_B, the first content key is not transmitted to the license processor 710.
[85] Next, the license processor 710 obtains the second content key 709 from the second license server S_B- The license processor 710 sends the second license server S_B specified in the destination information 704, a message 708 that requests the second content key 709, and receives the second content key 709 from the second license server S_B.
[86] Then, the license processor 710 sends the ticket processor 720 the use control in¬ formation 707 and the second content key 709 which are received from the first license 702.
[87] The ticket processor 720 generates the ticket 714 using the use control information 707 and the second content key 709, and transmits the ticket 714 to the second device D_B- The data format of the ticket 714 is not related to that of the first license 702 but must contain the use control information 707 and the second content key 709.
[88] In order to reproduce the content, the ticket processor 720 receives a ticket 722 from the second device D_B, extracts use control information 724 and a second content key 726 from the ticket 722, and transmits the use control information 724 and the second content key 726 to the second license server S_B. The second license server S_B generates a second license 728 using the use control information 724 and the second content key 726 and transmits it to the ticket processor 720. The ticket processor 720 transmits the second license 728 to the second device D_B again.
[89] FlG. 8 is a block diagram illustrating a method of transmitting content Cont according to another embodiment of the present invention. Referring to FlG. 8, a device D_A transmits, to a DRM conversion server S_conv, a license Lic_A, destination information indicating that the destination of the content Cont is the device D_B, and a conversion list List_conv listing DRM systems that are convertible to/from DRM A (operation 802). The conversion list List_conv is determined based on the right of each of devices, generated by a DRM conversion server S_conv, and provided to the devices.
[90] Next, the DRM conversion server S_conv determines whether content processed using DRM A can be converted into content processes using desired DRM B based on the conversion list List_conv (operation 803). When the device D_A transmits the content to the device D_B, whether the content can be processed using the DRM B is determined by checking whether the DRM B is included in the conversion list List_conv produced by the device D_A. Operation 804 is performed when the content can be processed using the DRM B, and the method of FlG. 8 is completed otherwise.
[91] Operations 804 through 816 are similar to operations 304 through 316 described with reference to FlG. 3. The DRM conversion server S_conv receives use control in¬ formation I_usage from a license server S_A (operations 804 and 805), and receives a content key from a license server S_B (operations 806 and 807).
[92] More specifically, the DRM conversion server S_conv transmits the license Lic_A to the license server S_A (operation 804). The license server S_A is related to the DRM system A.
[93] Next, the license server S_A extracts the use control information I_usage from the license Lic_A and transmits it to the DRM conversion server S_conv (operation 805). The use control information I_usage specifies a number of times that and a period of time when the content Cont can be reproduced.
[94] Next, the DRM conversion server S_conv sends the license server S_B a message that requests a content key K_B required to reproduce the content Cont under the DRM B (operation 806). The license server S_B is related to the DRM B.
[95] Next, the license server S_B generates the content key K_B and transmits it to the
DRM conversion server S_conv (operation 807).
[96] Next, the DRM conversion server S_conv generates a ticket Tic using the use control information I_usage and the content key K_B (operation 808). According to the present invention, if the ticket Tic contains the use control information I_usage and the content key K_B, the data format of the ticket Tic is not limited. The ticket Tic may be encrypted and the result of encryption may be transmitted.
[97] Next, the DRM conversion server S_conv transmits the ticket Tic to the device D_B
(operation 810).
[98] Next, the device D_B extracts the use control information I_usage and the content key K_B from the ticket Tic (operation 812).
[99] Next, the device D_A transmits the content Cont to the device D_B (operation 814).
Alternatively, the content Cont may be encrypted and transmitted to the device D_B via a transmission channel.
[100] Thereafter, the device D_B generates encrypted content Cont_enc by encrypting the content Cont using the content key K_B extracted in operation 812, and stores it in a storage medium of the device D_B (operation 816).
[101] Content transmitted using the method of FlG. 8 can be reproduced using the method of FIG. 6.
[102] FlG. 9 is a block diagram of a DRM conversion server 900 that performs the method of FlG. 8 according to an embodiment of the present invention. In FlG. 9, data paths indicated by solid lines are data paths through which the DRM conversion server 900 transmits content to a second device D_B using the method of FlG. 5, and data paths indicated by dotted lines are data paths through which the DRM conversion server 900 transmits a second license to the second device D_B so that the second device D_B can reproduce the content according to the method of FlG. 6.
[103] The DRM conversion server 900 includes a license processor 910 that acquires in¬ formation required to produce a ticket 914 while the DRM conversion server 900 operates interactively with a first license server S_A and a second license server S_B, and a ticket processor 920 that produces the ticket 914 using a second license 928 or obtains the second license from the ticket 914.
[104] In the DRM conversion server 900, a determination unit 934 receives a conversion list 932 from the first device D_A, determines whether the first device D_A has a right to transmit the content to the second device D_B according to the conversion list 932, and sends the license processor 910 a message 934 that content processed using first DRM A can be converted into content processed using second DRM B.
[105] Only when the license processor 910 receives the message 934 from the de- termination unit 930, the license processor 910 receives a first license 902 and destination information 904 from the first device D_A that uses the first DRM, and obtains use control information 907 and a second content key from the first and second license servers S_A and S_B- If the license processor 910 does not receive the message 934, the license processor 910 generates an error message and transmits the error message to the first device D_A.
[106] The other operations of the license processor 910 and the operations of the ticket processor 920 are similar to the operations of the license processor 710 and the ticket processor 720 of FTG. 7.
[107] More specifically, the license processor 910 receives the use control information
907 from the first license server S_A. That is, the license processor 910 transmits the first license 902 to the first license server S_A, and receives the use control in¬ formation 907 from the first license server S_A.
[108] Next, the license processor 910 receives a second content key 909 from the second license server S_B. The license processor 910 sends a message 908 that requests the second content key 909 to the second license server S_B which is indicated in the destination information 904, and receives the second content key 909 from the second license server S_B-
[109] Next, the license processor 910 sends the use control information 907, which is received from the first license server S_B, and the second content key 909 to the ticket processor 920.
[110] The ticket processor 920 generates the ticket 914 using the use control information
907 and the second content key 909, and sends it to the second device D_B- The data format of the ticket 914 is not related to the data format of the first license 902, and must contain the use control information 907 and the second content key 909.
[Ill] To reproduce the content, the ticket processor 920 receives a ticket 922 from the second device D_B, extracts use control information 924 and a second content key 926 from the ticket 922, and transmits the use control information 924 and the second content key 926 to the second license server S_B- The second license server S_B produces a second license 928 using the use control information 924 and the second content key 926, and transmits it to the ticket processor 920. The ticket processor 920 transmits the second license 928 to the second device D_B again. Industrial Applicability
[112]

Claims

Claims
[ 1 ] L A method of transmitting first content, which is obtained by processing content using first digital rights management (DRM), from a first device that uses the first DRM to a second device that uses second DRM, the method comprising:
(a) generating a ticket using a first license server and a second license server, the first license server issuing a first license for use in the first DRM and the second license server issuing a second license for use in the second DRM;
(b) the second device obtaining a second content key required to process the content using the ticket and the second DRM; and
(c) the second device receiving the content from the first device and processing the content using the second content key and the second DRM, wherein the ticket comprises use control information which specifies a restriction of use of the content, and the second content key required to process the content using the second DRM. [2] 2. The method of claim 1, wherein (a) comprises:
(al) receiving the first license from the first device;
(a2) receiving the use control information from the first license server, the use control information generated by the first license server and extracted from the first license;
(a3) receiving the second content key, which is generated by the second license server, from the second license server; and
(a4) generating the ticket using the use control information and the second content key.
[3] 3. The method of claim 2, wherein (al) comprises (al 1) receiving destination in¬ formation regarding the destination of the content from the first device. [4] 4. The method of claim 2, wherein (al) further comprises (al2) receiving from the first device a conversion list which lists DRM that are convertible to or from the first DRM, wherein (a2) through (a4) are performed only when the second DRM is included in the conversion list. [5] 5. The method of claim 2, wherein (a2) comprises:
(a21) a DRM conversion server transmitting the first license to the first license server; and
(a22) the first license server extracting the use control information from the first license and transmitting the extracted use control information to the DRM conversion server. [6] 6. The method of claim 5, wherein (b) comprises:
(bl) the second device receiving the ticket from the DRM conversion server; and (b2) the second device extracting the second content key from the ticket.
[7] 7. The method of claim 1, wherein (c) comprises:
(cl) the second device receiving the content from the first device; and (c2) the second device encrypting the content using the second content key im¬ mediately after the second device receives the content.
[8] 8. A method of reproducing second content processed using a second device according to second digital rights management (DRM), wherein the second content is generated from first content obtained by processing content according to first DRM using a first device, wherein the second content is reproduced using a second license required to reproduce the second content, a ticket generated using use control information and a second content key, the use control information specifying a restriction of use of the content, and the second content key used to process the content in the second DRM, wherein the ticket is generated by a DRM conversion server using a first license server and a second license server, the first license server issuing a first license and the second license server issuing a second license.
[9] 9. The method of claim 8, comprising:
(al) the second device transmitting the ticket to the DRM conversion server;
(a2) the DRM conversion server extracting the use control information and the second content key from the ticket and transmitting the use control information and the second content key to the second license server;
(a3) the second license server generating the second license using the use control information and the second content key and transmitting the second license to the second device; and
(a4) the second device reproducing the second content using the second license.
[10] 10. The method of claim 9, wherein (a3) is performed using the DRM conversion server.
[11] 11. The method of claim 9, wherein (a4) comprises:
(a41) extracting the second content key from the second license; and (a42) decrypting the second content using the second content key.
[12] 12. The method of claim 11, wherein (a4) further comprises:
(a44) extracting the use control information from the second license; and (a45) determining whether the second content can be reproduced based on the use control information, wherein (a41) through (a42) are performed only when it is determined that the second content can be reproduced. [13] 13. A digital rights management (DRM) conversion system for converting first content, which is obtained by processing content according to first DRM, into second content obtained by processing the content according to second DRM, the
DRM system comprising: a first device which includes a first license required to reproduce the first content, and transmits the content to a second device which uses the second
DRM; a DRM conversion server which generates a ticket using the first license; and the second device which converts the content into the second content using the ticket and reproduces the second content, wherein the ticket contains use control information which specifies a restriction of use of the content, and a second content key required to process the content according to the second DRM. [14] 14. The DRM conversion system of claim 13, wherein the DRM conversion server generates the ticket using a first license server and a second license server, the first license server issuing the first license and the second license server issuing the second license. [15] 15. The DRM conversion system of claim 14, wherein the DRM conversion server transmits the first license to the first license server; receives the use control information from the first license server; receives the second content key, which is generated by the second license server, from the second license server; and generates the ticket using the use control information and the second content key. [16] 16. The DRM conversion system of claim 15, wherein the DRM conversion server comprises: a license processor which obtains the use control information and the second content key while operating interactively with the first and second license servers; and a ticket processor which generates the ticket using the use control information and the second content key. [17] 17. The DRM conversion system of claim 13, wherein the DRM conversion server receives the ticket from the second device and obtains the second license using the ticket. [18] 18. The DRM conversion system of claim 13, wherein the DRM conversion server extracts the use control information and the second content key from the ticket, transmits the use control information and the second content key to the second license server, which issues the second license, receives the second license from the second license server, and transmits the second license to the second device.
[19] 19. A digital rights management (DRM) conversion system for converting first content, which is obtained by processing content according to first DRM, into second content obtained by processing the content according to second DRM, wherein a ticket is generated according to a first license required to reproduce the first content, and transmitted to a second device which uses the second DRM, the ticket is received from the second device, and a second license is obtained from the ticket and transmitted to the second device, and the ticket includes use control information specifying a restriction of use of the content, and a second content key required to process the content using the second DRM.
[20] 20. The DRM conversion server of claim 19, comprising: a first license server which issues the first license for the first DRM; and a second license server which issues the second license for the second DRM, wherein the ticket is generated using the first and second licenses.
[21] 21. The DRM conversion system of claim 20, wherein the first license is transmitted to the first license server, use control information extracted by the first license server is received from the first license server, the second content key generated by the second license server is received from the second license server, and the ticket is generated using the use control information and the second content key.
[22] 22. The DRM conversion system of claim 19, comprising: a license processor which obtains the use control information and the second content key while operating interactively with the first and second license servers; and a ticket processor which generates the ticket using the use control information and the second content key.
[23] 23. The DRM conversion system of claim 22, wherein the ticket processor obtains the second license by receiving the ticket from the second device and transmitting the ticket to the second license server.
[24] 24. The DRM conversion system of claim 23, wherein the ticket processor extracts the use control information and the second content key from the ticket and transmits the use control information and the second content key to the second license server, and receives the second license from the second license server and transmits the second license to the second device. [25] 25. A computer readable medium for storing a program which executes the method of claim 1 using a computer.
EP05774104A 2004-07-29 2005-07-29 Method of transmitting and reproducing content processed by various drm systems Withdrawn EP1771966A1 (en)

Applications Claiming Priority (3)

Application Number Priority Date Filing Date Title
US59187804P 2004-07-29 2004-07-29
KR1020040070795A KR100636169B1 (en) 2004-07-29 2004-09-06 Method for transmitting content which is processed by various DRM System, and the method for reproducing the contents
PCT/KR2005/002466 WO2006011768A1 (en) 2004-07-29 2005-07-29 Method of transmitting and reproducing content processed by various drm systems

Publications (1)

Publication Number Publication Date
EP1771966A1 true EP1771966A1 (en) 2007-04-11

Family

ID=35786469

Family Applications (1)

Application Number Title Priority Date Filing Date
EP05774104A Withdrawn EP1771966A1 (en) 2004-07-29 2005-07-29 Method of transmitting and reproducing content processed by various drm systems

Country Status (2)

Country Link
EP (1) EP1771966A1 (en)
WO (1) WO2006011768A1 (en)

Families Citing this family (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20090133129A1 (en) * 2006-03-06 2009-05-21 Lg Electronics Inc. Data transferring method
US8429300B2 (en) 2006-03-06 2013-04-23 Lg Electronics Inc. Data transferring method
CN101395596B (en) 2006-03-06 2010-10-27 Lg电子株式会社 Data transferring method
KR20080022476A (en) 2006-09-06 2008-03-11 엘지전자 주식회사 Method for processing non-compliant contents and drm interoperable system
WO2008069887A2 (en) * 2006-11-14 2008-06-12 Sandisk Corporation Method and system for allowing content protected by a first drm system to be accessed by a second drm system
US8918508B2 (en) 2007-01-05 2014-12-23 Lg Electronics Inc. Method for transferring resource and method for providing information
US8584206B2 (en) 2007-02-16 2013-11-12 Lg Electronics Inc. Method for managing domain using multi domain manager and domain system
CN103647127B (en) 2013-12-09 2017-02-01 上海贝尔股份有限公司 Connector used for coupling coaxial cable to strip line

Family Cites Families (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7272858B2 (en) * 2002-04-16 2007-09-18 Microsoft Corporation Digital rights management (DRM) encryption and data-protection for content on a relatively simple device
US7353402B2 (en) * 2002-06-28 2008-04-01 Microsoft Corporation Obtaining a signed rights label (SRL) for digital content and obtaining a digital license corresponding to the content based on the SRL in a digital rights management system

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
See references of WO2006011768A1 *

Also Published As

Publication number Publication date
WO2006011768A1 (en) 2006-02-02

Similar Documents

Publication Publication Date Title
US8151356B2 (en) Method of transmitting and reproducing content processed by various DRM systems
US20060080529A1 (en) Digital rights management conversion method and apparatus
CN100474806C (en) Method of creating domain based on public key cryptography
US8181266B2 (en) Method for moving a rights object between devices and a method and device for using a content object based on the moving method and device
US8443206B2 (en) Method and apparatus for managing digital rights using portable storage device
CN100535888C (en) Apparatus and method for supporting content exchange between different drm domains
US8079089B2 (en) Information usage control system and information usage control device
US20040139312A1 (en) Categorization of host security levels based on functionality implemented inside secure hardware
US20080209231A1 (en) Contents Encryption Method, System and Method for Providing Contents Through Network Using the Encryption Method
CN1326027C (en) Print data communication with data encryption and decryption
EP1771966A1 (en) Method of transmitting and reproducing content processed by various drm systems
US20080126801A1 (en) Method and apparatus for generating proxy-signature on right object and issuing proxy signature certificate
WO2006109982A1 (en) License data structure and license issuing method
CN100471110C (en) Method and apparatus for managing digital rights using portable storage device
CN101151606A (en) Encryption/decryption method and apparatus for controlling content use based on license information
KR100773388B1 (en) content combination providing system and method thereof
CN100507798C (en) Copyright information treating method and system
KR100644645B1 (en) Method and Apparatus for reproducing content using temporary license
JP2001147899A (en) System for distributing contents
JP4174237B2 (en) Content management system, content management terminal, use condition management server, content management method, and content management program
JP2003167784A (en) Peripheral equipment, control device, control method, and storage medium with controlling program stored therein
WO2006080650A1 (en) Digital rights management conversion method and apparatus
KR101681587B1 (en) Method and device for managing digital rights using activation of rights
KR20090022832A (en) Certificate system for device and method thereof
KR20040023092A (en) Method of digital rights management for the content owner

Legal Events

Date Code Title Description
PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

17P Request for examination filed

Effective date: 20061220

AK Designated contracting states

Kind code of ref document: A1

Designated state(s): DE FR GB IT NL

DAX Request for extension of the european patent (deleted)
RBV Designated contracting states (corrected)

Designated state(s): DE FR GB IT NL

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE APPLICATION IS DEEMED TO BE WITHDRAWN

18D Application deemed to be withdrawn

Effective date: 20100202