JP2008527526A - Method and apparatus for licensed domain management - Google Patents

Abstract

The present invention discloses a method for authorizing the use of content. According to the method, a request for using content and receiving a request including information related to a license domain is received; in response to the request, a corresponding right to use the content is granted to the license domain; Rights are directed to the licensed domain. Since the right to use the content is directed to the licensed domain, the content provider has more control over the content. Employing the method and apparatus of the present invention provides a method for license domain management, while at the same time allowing users or devices in the license domain to more conveniently use content in the license domain. be able to.

Description

  The present invention relates to a method and apparatus for digital rights management (DRM), and more particularly to a method and apparatus for authorized domain management.

  With the rapid development of network technology and digital technology, the use of digital content has become easier, and the number of content protection systems has increased rapidly accordingly. From the viewpoint of the content provider, it is expected to protect the copyright of the content. Unrestricted use of source digital content can cause significant damage to the content provider's interests. On the other hand, from the content consumer's perspective, it is always desirable to use any content conveniently.

  In order to consider both the content provider's interest and the content consumer's interest, the concept of licensed domain (AD) has been introduced. The basic idea of the license domain is to provide a managed network environment in which content can be used relatively freely as long as it does not cross the boundaries of the license domain. The license domain is divided into a device-based license domain, a user-based license domain, and a hybrid license domain that includes devices and users. Generally, a license domain is formed from a set of devices and users connected to each other. These devices and users may belong to a family. Within a license domain, a user is typically implemented on a device associated with the user (ie, the user's device). Content may be freely moved and / or copied between various user devices within the license domain, but content is restricted and should not be taken outside the license domain. In general, content can be transferred from the content provider to the licensed domain via standard publishing channels (eg, video broadcast, private network, Internet, telephone line, satellite download, etc.). In addition, content can be entered into the license domain via conventional mail.

  Currently, there are several techniques for implementing a licensed domain system. For example, international patent application WO2004 / 038568 filed on October 15, 2003 by the same applicant as the present application discloses a method and system for authorizing the use of content. The entire contents of this patent application document are hereby incorporated by reference.

  In the prior art, when a user of a license domain purchases content from a content provider, the content provider grants the user the right to use the content. However, the content provider knows almost nothing about the licensed domain to which the user belongs, such as how many members in the licensed domain are likely to use this content and whether the licensed domain is public good. . Therefore, the content provider cannot better protect the copyright of the content. Therefore, there is a need for new methods and devices for authorizing the use of content that allow content providers to have more control over the content.

  One of the objects of the present invention is a method for a method for authorizing the use of content: first, receiving a request to use the content, including information relating to the license domain; Second, in response to the request, the method includes a step of granting a corresponding right to use the content to the license domain, and the right is directed to the license domain. Since the right to use the content licensed by the content provider is directed to the license domain, the content provider can know the license domain well when granting the right, and thus can better manage the spread of the content.

  Preferably, the method further comprises the step of verifying whether the request is a valid request based on information associated with the licensed domain. The verifying step includes: firstly sending a verification request to a verification authority to verify whether the request in the receiving step is valid; secondly, receiving a corresponding verification result from the verification authority Can have.

  Preferably, the method further comprises: obtaining identification information of the licensed domain based on the information.

  Preferably, the method further comprises: calculating a cost to be paid by the licensing domain as a function of the right to use the content.

  Preferably, the method further comprises: sending the right to use to the licensing domain.

  Another object of the present invention is a method for requesting the use of content: firstly, sending a request to use the content and including information related to the licensed domain; Receiving a corresponding right to use the content, said right being to provide a method that is directed to said licensed domain.

  Another object of the present invention is a method of using content: firstly sending a request to use the content; secondly, obtaining the rights associated with the content and using the content The right is directed to the licensed domain; third, check whether the request is from the licensed domain; and finally, if the request is from the licensed domain, use the content It is to provide such a method having steps.

  Another object of the present invention is an apparatus for an apparatus authorizing the use of content, the receiving means receiving a request for using the content and including information relating to the license domain; said request And a license means for granting a corresponding right to use the content to the license domain, wherein the right is to provide an apparatus directed to the license domain.

  Preferably, the granting device further comprises: verification means for verifying whether the request is a valid request based on the information. The verification means further includes: a verification request means for sending a verification request to a verification authority to verify whether the request received by the reception means is valid; a verification reception means for receiving a corresponding verification result from the verification authority Can have.

  Preferably, the licensed device further includes: an acquisition unit configured to acquire identification information of the license domain based on the information.

  Preferably, the licensing device further comprises: billing means for calculating a cost to be paid by the licensing domain according to the rights.

  Preferably, the licensing device further comprises: sending the right to use the content to the licensing domain. The sending means may send the content to the license domain.

  Another object of the present invention is a right acquisition device for requesting use of content: a request for use of content, right request means for sending a request including information related to a license domain; A right receiving means for receiving a corresponding right to use, wherein the right is to provide an apparatus directed to the license domain.

  Another object of the present invention is an apparatus that uses content: use request means for sending a request to use the content; obtaining a right to use the content associated with the content and using the content Obtaining means for directing the right to a licensed domain; checking means for confirming whether the request is from the licensed domain; and using the content if the request is from the licensed domain And a device for use.

  The present invention and related advantages are further extended by the exemplary embodiments and accompanying schematic diagrams.

  Throughout the drawings, the same reference numerals represent similar or identical features or functions.

  FIG. 1 is a flowchart of a method for authorizing the use of content according to the present invention.

  First, a request for using content is received (step S110).

  The content provider receives a request from the license domain. The request is submitted through the device by a user in the license domain. A request requests the use of some content, and at the same time the request contains information related to a certain licensed domain. The information related to the license domain may be identification information of the license domain or identification information of a member of the license domain. The license domain identification information is information for distinguishing the license domain from other license domains, such as a license domain name and a license domain identification number. The member identification information may be identification information of a member of the license domain or identification information of a device having the license domain.

  In this embodiment, the request received by the content provider includes a user certificate. The user certificate includes user identification information. The user identification information may include a user ID, or may include a user ID and a license domain name. There are two examples of user certificates containing user IDs and licensed domain names: one has a user certificate that identifies each user as being a user of a licensed domain. The other is that all users of a licensed domain are listed in a single user certificate. In the latter embodiment, when the number of users in the licensed domain increases or decreases, user certificate modification becomes easier and is therefore a more preferred embodiment.

  As shown in Table 1, the structure of the user certificate includes a user ID, a license domain to which the user belongs (optional), a domain authority issuing the user certificate (optional), and a digital signature.

下記はユーザー証明書の例である。ユーザー証明書はドメイン当局のデジタル署名を有する。さらに、ドメイン許諾証明書は一般に、発行時と有効期限を含む。この例では、デジタル署名のアルゴリズムは標準的なデジタル署名アルゴリズムでありうる。

The following is an example of a user certificate. The user certificate has a digital signature of the domain authority. In addition, domain license certificates generally include an issue time and an expiration date. In this example, the digital signature algorithm may be a standard digital signature algorithm.

Number of bytes Format Value
Domain_User_Certificate () AttributeCertificate
{
User_Id_Length 2 Unit16
User_Id var char
Domain_Id_Length 2 Unit16
Domain_Id var char
UserDomainAuthority 20 bit string
Signature_Algorithm algorithm identifier
Signature_Value bit string
}
The user certificate can also include the user's age. Since some content is only suitable for people over the age of 18, the user certificate can add an item, namely the user's age, to protect the interests of minors. The user can use the corresponding content only when the user reaches the legal age.

  Secondly, it is verified whether the request is a valid request (step S120).

  Verification of whether a request is a valid request has two meanings: (1) Verify whether the user is a licensed user: (2) Scope of requested content (scope) It is verified whether it is in.

  Verifying whether the user is a licensed user, for example, verifying that the user is a member of a licensed domain, may prevent unauthorized user access. There are two ways to verify user effectiveness: In the first method, the content provider can directly verify whether the user is a licensed user. The content provider determines whether the user is a licensed user by comparing information in the database about the licensed domain stored on the content provider's server. The database for the licensed domain can come from a formal domain authority. Formal domain authorities can be government departments or non-governmental organizations.

  In the second method, the content provider can also verify whether the user is a licensed user through a verification organization. The verification step includes: firstly sending a verification request to a verification authority, eg, a domain authority, requesting that the request in the receiving step S110 is valid; and secondly, a corresponding verification from the verification authority. Receiving a result.

  Verifying that the requested content is within the specified range is that the manner requested to use the content is within the rights specified by the content provider. It is to verify whether. It may be verified whether the user requesting use of the content is a qualified user for the content, for example, whether the user is over 18 years old.

  Third, the identification information of the license domain is acquired (step S130).

  If the verification result is affirmative, the identification information of the licensed domain is acquired according to the user certificate shown in Table 1.

  When the user certificate includes the user ID, the license domain to which the user belongs, and the digital signature, the identification information of the license domain to which the user belongs can be obtained by decrypting the digital signature through an appropriate key.

  If the user certificate includes a user ID and a digital signature, the user ID can be obtained by decrypting the digital signature through a proper key. Next, the license domain database is searched according to the user ID to obtain the identification information of the license domain to which the user belongs, for example, the license domain name.

Fourth, a corresponding right to use the content is granted to the license domain in response to the request. Rights are directed to the license domain. (Step S140)
A usage right certificate corresponding to the request received in step S110 is generated. The usage right certificate includes the license domain name. Table 2 shows the rights of the content, and includes a content ID, a content key, a license domain name, a content right expression (right expression), and a digital signature of the content provider. Here, the content ID identifies the content associated with that right; the content key is used to decrypt the content; the right indication describes how the user uses the content. Uses include: playing content, recording content, sending content, and creating a copy of the content.

ステップＳ１１０で受領された要求に基づいて生成された使用権利証明書は、許諾ドメインおよびユーザーの両方に同時に向けられてもよい。たとえば、表３は、もう一つのコンテンツ使用権を示しており、コンテンツID、コンテンツ鍵、ユーザーID、許諾ドメイン名、コンテンツの権利表示およびコンテンツ提供者のデジタル署名を含んでいる。この方法では、ユーザーが属していた許諾ドメインを去るとき、そのユーザーはいまだそのコンテンツを使用できる。コンテンツの使用権利証明書が該ユーザーをも指しているからである。

The usage rights certificate generated based on the request received in step S110 may be directed simultaneously to both the license domain and the user. For example, Table 3 shows another content usage right, which includes a content ID, a content key, a user ID, a license domain name, a content right display, and a digital signature of the content provider. In this way, the user can still use the content when leaving the licensed domain that the user belonged to. This is because the content usage right certificate also points to the user.

第五に、前記権利に応じて許諾ドメインによって支払われるべき費用を計算する（ステップＳ１５０）。

Fifth, a cost to be paid by the license domain according to the right is calculated (step S150).

  Since the content right refers to the license domain, the cost to be paid by the license domain can be calculated according to the characteristics of the license domain. For example, different accounting standards are adopted for commercial license domains and non-profit license domains. Alternatively, the cost to be paid by the license domain is calculated according to the number of users in the license domain. The costs can be paid together by the license domain or by a representative of the license domain, for example, by the designated user who made the request.

  Sixth, the content right is sent (step S160).

  The content provider sends the content right to the licensed domain that has applied for the content. At the same time, the content provider can send the content to the licensed domain that has applied for the content. Of course, if the content is stored in the license domain, there is no need to send the content.

  FIG. 2 shows a functional block diagram of the content permission apparatus 200 according to the present invention. The content permission apparatus 200 may be a part of a content provider's server.

  The content permission device 200 is a device for permitting use of content, and includes a receiving unit 210 and a permission unit 240. Here, the receiving unit 210 is used to receive a request to use the content. The request includes information related to the license domain. The permission unit 240 is used to grant a corresponding right to use the content to the license domain according to the request. That right is directed to the license domain. The permission unit 240 may include a generation unit 242 for generating a usage right certificate according to the request. The usage right certificate includes the identification information.

  Preferably, the content licensing apparatus 200 further comprises: a verification unit 220 that verifies whether the request is a valid request based on information related to the licensing domain in the request received by the receiving unit 210. The verification unit 220 may further include a verification request transmission unit 222 and a verification result reception unit 224. Here, the verification request transmission unit 222 sends a verification request to the verification authority and is used to verify whether the request received by the reception unit 210 is valid. The verification result reception unit 224 Used to receive the corresponding verification result from the institution.

  Preferably, the content licensing apparatus 200 further comprises: an acquisition unit 230 that acquires license domain identification information based on information related to the license domain in the request received by the receiving unit 210.

  Preferably, the content licensing apparatus 200 further comprises: a charging unit 250 that calculates a cost to be paid by the licensing domain based on information related to the licensing domain in the usage right certificate generated by the licensing unit 242. For example, different accounting standards are adopted for commercial license domains and non-profit license domains. Alternatively, the cost to be paid by the license domain is calculated according to the number of users in the license domain.

  Preferably, the content licensing apparatus 200 further comprises: a sending unit 260 that sends the rights granted by the licensing unit 240 to the licensing domain pointed to by the rights. The sending unit 260 may send the content to the license domain. At the same time, the sending unit 260 can send the billing information from the billing unit 250 to the license domain.

  FIG. 3 is a flowchart of a method for requesting use of content in accordance with the present invention.

First, send a request to use the content. The request includes information related to the license domain. (Step S310)
A user with a license domain sends a request to use the content to the content provider. The request includes information related to the license domain. The information related to the license domain may be identification information of the license domain or identification information of a member of the license domain. The license domain identification information is information for distinguishing the license domain from other license domains, such as a license domain name and a license domain identification number. The member identification information may be identification information of a member of the license domain or identification information of a device having the license domain.

  Second, receive a corresponding right to use the content. The right is directed to the license domain (step S320). After receiving the corresponding right to use the content, the license domain can store it in a secure memory.

  FIG. 4 exemplarily shows a functional block diagram of the right acquisition device 400 according to the present invention. The rights acquisition device 400 can be part of a certain device in the license domain.

  The right acquisition device 400 is used to request permission to use content, and includes a right request unit 410 and a right reception unit 420.

  The rights request unit 410 is used to send a request to use the content to the content provider. The request includes information related to the license domain. The right receiving unit 420 is used to receive a corresponding right to use the content from the content provider. The right is directed to the license domain.

  FIG. 5 is a flowchart of a method of using content according to the present invention.

  First, a request for using content is sent (step S510).

  Content and content rights can be stored on the smart card of the user in the licensed domain or anywhere on the network. When a user in the licensed domain needs to use the content, the user sends a request to use the content.

  Second, obtain the usage rights associated with the content. The right is directed to the license domain. (Step S520) The user of the licensed domain obtains the right of use directed to the licensed domain.

  Further, it is confirmed whether or not the request is from a license domain (step S530).

  A licensed domain user uses a device to check whether the user is a licensed domain user. The contents to be confirmed are: (1) the identification number of the content; (2) whether the user requesting the use of the content is a user in the licensed domain identified in the rights of the content, or Whether the device requesting the use of the content is a device in a licensed domain that is confirmed in the content right; (3) content right display.

  Finally, if the request is from a licensed domain, the content is used (step 540).

  If all confirmation results are positive, the device can represent the content according to the rights indication confirmed in the content rights.

  In this way, all users or devices in the licensed domain can use the purchased content quickly and conveniently anytime, anywhere within the licensed domain.

  FIG. 6 is a diagram exemplarily showing components of the right usage apparatus 600 according to the present invention.

  The rights usage device 600 is for using content: a usage request unit 610, an acquisition unit 620, a confirmation unit 630, and a usage unit 640. The use request unit 610 is used to receive a request for using content. Acquisition unit 620 is used to acquire usage rights associated with the content. The right is directed to the license domain. A confirmation unit 630 is used to confirm whether the request is from a license domain. The use unit 640 is for operating the content if the request is from a licensed domain.

  Although the present invention has been described in combination with individual embodiments, it will be apparent to those skilled in the art that substitutions, changes and modifications may be readily made in many aspects of the invention based on the above examples. Accordingly, all such alternatives, modifications and variations are included in the invention as long as they are within the spirit and scope of the appended claims.

4 is a flowchart of a method for authorizing use of content according to the present invention. It is a figure which shows illustratively the functional block diagram of the content permission apparatus based on this invention. 3 is a flowchart of a method for requesting use of content according to the present invention. It is a figure which shows exemplarily the functional block diagram of the right acquisition apparatus based on this invention. 4 is a flowchart of a method for using content according to the present invention. It is a figure which shows exemplarily the functional block diagram of the right usage apparatus based on this invention.

Claims (23)

A method for authorizing the use of content:
(A) receiving a request including information related to a licensed domain that is a request to use content;
(B) granting a corresponding right to use the content to the licensed domain in response to the request, wherein the right is directed to the licensed domain.   The method of claim 1, further comprising verifying based on the information whether the request is a valid request. The verification step includes:
Sending a verification request to a verification authority to verify whether the request in step (a) is valid;
Receiving a corresponding verification result from the verification authority;
The method of claim 2 comprising:   The method according to claim 1, further comprising obtaining identification information of the license domain based on the information.   5. The method of claim 4, wherein step (b) comprises: generating a usage right certificate including the identification information in response to the request.   The method of claim 1, further comprising calculating a cost to be paid by the licensing domain in response to the right.   The method of claim 1, further comprising sending the right to the license domain.   The method according to claim 1, further comprising sending the content to the licensed domain.   The method according to claim 1, wherein the information is identification information of the license domain or identification information of a member of the license domain.   The method according to claim 9, wherein the identification information of the member is identification information of a user having the license domain or identification information of a device having the license domain.   The method of claim 1, wherein the request is from a user of the licensed domain and the rights are directed to the licensed domain and the user. A method for requesting the use of content:
Sending a request to use content, including information related to the licensed domain;
Receiving a corresponding right to use the content, wherein the right is directed to the licensed domain. How to use content:
Sending a request to use the content;
Obtaining a right associated with the content and directed to a licensed domain;
Checking whether the request is from the licensed domain;
If the request is from the licensed domain, using the content;
And a method comprising: A device for a device that licenses the use of content:
Receiving means for receiving a request including information related to a licensed domain that is a request to use content;
In response to the request, the license domain includes a license unit that grants a corresponding right to use the content to the license domain, and the right is directed to the license domain.   The apparatus according to claim 14, further comprising verification means for verifying whether the request is a valid request based on the information. Said verification means:
Verification requesting means for sending a verification request to a verification authority to verify whether the request received by the receiving means is valid;
Verification receiving means for receiving a corresponding verification result from the verification authority;
The apparatus of claim 15.   The apparatus according to claim 14, further comprising obtaining means for obtaining identification information of the license domain based on the information.   The apparatus according to claim 17, wherein the permission unit includes a generation unit that generates a usage right certificate including the identification information in response to the request.   15. The apparatus according to claim 14, further comprising billing means for calculating a cost to be paid by the license domain according to the right.   15. The apparatus according to claim 14, further comprising transmission means for sending a right to use the content to the license domain.   21. The apparatus of claim 20, wherein the sending means is used to send the content to the license domain. A rights acquisition device that requests the use of content:
A right requesting means for sending a request to use the content and including information relating to the licensed domain;
Right receiving means for receiving a corresponding right to use said content, said right being directed to said licensed domain. A device that uses content:
Use request means for sending a request to use the content;
Obtaining means for obtaining a right to use the content associated with the content and directed to a license domain;
Confirmation means for confirming whether the request is from the licensed domain;
If the request is from the licensed domain, a device having usage means for using the content.

Images