Classifications

• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L63/00—Network architectures or network communication protocols for network security
  • H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
  • H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L63/00—Network architectures or network communication protocols for network security
  • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities

Definitions

• the present invention relates to a method for broadcasting at least one content in a secure manner via an Internet type communication network. It finds a particularly interesting application in the field of syndication of electronic content.
• the content can be "News", articles, ...
• Content syndication consists of distributing publication data stored in a database of a publication server, a sort of content wholesaler. The distribution is carried out from a server either by ftp or by email (attachment).
• the client receives syndicated content in text, HTML or xml format.
• the customer offers this content to individuals via the Internet.
• the invention is of a broader scope, since it can be applied to any system for distributing content via the Internet.
• the present invention aims to a new method for limiting the dissemination of content on a web page to predefined users.
• the invention aims to secure the content available on the Internet.
• the goal sought is achieved with a method for broadcasting at least one content in a secure manner via an Internet-type communication network.
• the following steps are carried out: opening, by means of the browser of a user's computer, of a Web page containing at least encrypted content, this content can be encrypted in a standard manner such as for example symmetric encryption; - activation of an application, called an applet, embedded with said web page, this applet requiring identification of the user; registration of a user identifier; in particular the user enters his login and password in an input window created by the applet, but we can also provide that the applet automatically retrieves the user-identifier stored in
• the license includes parameters for the use of content, constraint parameters and a decryption key.
• the usage parameters can be usage rights allowing to define the possibility or not to view, copy, print or redistribute the content.
• the constraint parameters can be usage constraints such that the content is valid for one week, only once, ...
• the encryption key is only stored in the computer's RAM.
• the entire license remains in RAM so that no confidential information remains indefinitely on the user's computer.
• the applet transmits at the same time as the user identifier, the identifier of each content present in said web page.
• the applet stores a set of consultation information. This information is for example the number of times the user has printed the content.
• the applet when the viewing window is closed, the applet returns, to the approval server, the license updated from said set of consultation information.
• FIG. 1 is a general schematic view of a system implementing the method according to the invention
• - Figure 2 is a diagram illustrating the architecture of the database shown in Figure 1
• - Figure 3 is a flowchart illustrating different steps of the method according to the invention
• Figure 4 is a schematic view of a web page and an identifier input window 1 according to the invention
• Figure 5 is a schematic view of a viewing window and a web page according to the invention.
• Figure 1 we see a platform 1 accessible Internet life and offering a set of services.
• It includes a content server 3 capable of encrypting content 4 coming from an external environment and transmitting it to a Web server 5 for consultation via the Internet.
• This web server 5 is capable of broadcasting all kinds of content, encrypted or not.
• the encrypted content can be mixed with unencrypted content and broadcast over the Internet through a web page 6 to a user's computer 7.
• the user To decrypt encrypted content, the user must contact platform 1 to recover decryption rights.
• the user will have taken care to register beforehand with the platform 1.
• the database 2 is connected to a plurality of web service servers: the offer server 8 a the function of presenting the user with different subscription possibilities, that is to say different levels of licenses; it therefore allows the user to subscribe; the authentication server 9 has the function of managing user registration and authentication, - the approval server 10 has the function of managing licenses, the environment server 11 has the function of updating the licenses on reception of the information transmitted by the applet module when the session is closed.
• the offer server 8 a the function of presenting the user with different subscription possibilities, that is to say different levels of licenses; it therefore allows the user to subscribe
• the authentication server 9 has the function of managing user registration and authentication
• - the approval server 10 has the function of managing licenses
• the environment server 11 has the function of updating the licenses on reception of the information transmitted by the applet module when the session is closed.
• t_user is a table containing the registered users
• - t_session a session is opened each time a user identifies himself
• t_contenu is a table which references the contents
• t_asset an asset corresponds to a given type of content such as front page articles of the week or all sports news, etc.
• t_ hockey an offer is a set of permissions associated with an asset
• t_agrement an approval is a license and corresponds to a user's subscription to an offer.
• the different tables are chained in series so as to form a solid base.
• offers and approvals are expressed in ODRL language for "Open Description Right Language" in English.
• the web server 5 took care to store c2-encrypted content downloaded from the content server 3 of the platform 1.
• the user 7 downloads in step 12 a web page 6 containing two contents non-encrypted cl, c2, encrypted content c2-encrypted as well as each title associated with each content, titrel, titre2 and titre3.
• the cl and c2 content can be represented on the web page in the form of readable texts while the c2-encrypted content is a incomprehensible encrypted text.
• Web 6 includes an embedded application such as a java module (applet) which, as soon as this page is displayed
• Web 6 activates in step 13 the offer server 8 which transmits a request to the client 7 in step 14.
• This request corresponds to an identification request.
• the user identifies himself in step 15 by entering, for example, a login and a password.
• FIG. 4 we see the web page 6 as well as a popup window 24 developed by the java module so as to transmit to the platform 1 the identifier of the user as well as the identifier of the content c2 -crypt.
• the response of the user 7 is directly transmitted to the authentication server 9 during step 16.
• the latter opens a session in step 17 so that the offer server 8 recovers, during steps 18 and 19, from the approval server 10, a license associated with this user. This license is specific to c2-encrypted content.
• This license describes a right of use which may be the right to view without the possibility of copying, printing or redistributing.
• the license also describes a usage constraint which is, for example, possible viewing for a week from the first viewing. It also includes a c2-encrypted content decryption key.
• the offer server 8 transmits to the java module embedded in the web page 6 the license found.
• This license remains stored in the random access memory of the user's computer 7.
• the on-board module then develops a display window 25 as seen in FIG. 5. This window 25 lists all of the titles whose contents are present in the web page 6, therefore on the user's computer 7.
• the java module retrieves in step 22 the c2-encrypted content within the web page 6, transforms it into c2-encrypted content using the decryption key present in the license, and displays this content c2- decrypted on the viewing window 25 during step 23.
• the actions that the user can perform on the viewing window are managed by the java module according to the usage rights associated with the license.
• the java module updates the license according to the actions of the user, and transmits said license to the approval server. Otherwise, the java module can directly transmit the license and actions to platform 1, the environment server will be responsible for updating the license.
• each server (content, offers, authentication, approvals and environment) is a Web service which can be activated either by the applet or by a user action.
• the invention is' not limited to the examples just described and numerous adjustments can be made to these examples without exceeding the scope of the invention.

Landscapes

• Engineering & Computer Science (AREA)
• Computer Security & Cryptography (AREA)
• Computer Hardware Design (AREA)
• Computing Systems (AREA)
• General Engineering & Computer Science (AREA)
• Computer Networks & Wireless Communication (AREA)
• Signal Processing (AREA)
• Storage Device Security (AREA)
• Information Transfer Between Computers (AREA)
• Management, Administration, Business Operations System, And Electronic Commerce (AREA)

Applications Claiming Priority (2)

Publications (1)

Family

ID=34945545

Family Applications (1)

Country Status (8)

Cited By (1)

Families Citing this family (18)

Family Cites Families (8)

• 2004
  • 2004-04-19 FR FR0404123A patent/FR2869131B1/fr not_active Expired - Fee Related
• 2005
  • 2005-04-19 EP EP05758140A patent/EP2104991A1/de not_active Withdrawn
  • 2005-04-19 CN CNA2005800118197A patent/CN1943166A/zh active Pending
  • 2005-04-19 WO PCT/FR2005/000959 patent/WO2005109751A1/fr active Application Filing
  • 2005-04-19 CA CA002563586A patent/CA2563586A1/fr not_active Abandoned
  • 2005-04-19 RU RU2006140781/09A patent/RU2006140781A/ru not_active Application Discontinuation
  • 2005-04-19 US US11/578,662 patent/US20070214498A1/en not_active Abandoned
  • 2005-04-19 JP JP2007507821A patent/JP2007537509A/ja active Pending

Non-Patent Citations (1)

Also Published As

Similar Documents

Legal Events