JP4252280B2 - Baseline DVB-CPCM equipment - Google Patents

Description

【００４１】
次に、CPCM装置間の送信に使用されるベースラインDVB-CPCMを説明する。
２つの適合CPCM装置間の送信は、すべてのCPCM装置に予め実装されている標準ベースラインDVB-CPCMモジュールである「メッセージルータ（Message Router）」を通じて実現される。通信は、図７に示されているように相互運用性を提供するためにメッセージングインタフェースを通じて行なわれる。
【００４２】
メッセージルータ（MR）経由のメッセージは、CPCM装置間の下記の送信をもたらす。
一方から他方へのコンテンツの転送。
一方から他方へのCPCMツールの転送。
コンテンツ転送中のコンテンツ管理とユーザデータベース管理および権利確認に使用される下記の識別表示を定義する。
【００４３】
【表２】

【００４４】
暗号化されたコンテンツが、その「使用規則」および暗号化鍵の入った「CPCM権利ホルダ」と共にCPCM装置Aに格納されているものとする。
１）CPCM装置BからCPCM装置Aへのコンテンツ要求メッセージの送信
ここで、CPCM Device Bは「メッセージルータ」を介してメッセージを送り、ContentID/ProgramNumberまたは可能性のある基本PID、ならびにそのCPCM_DomainIDにより、特定のコンテンツを要求する。これらのパラメータに加え、さらにCPCM装置Bは1組の鍵を生成し、表３に示されるPublicKeyを前述のパラメータと共にCPCM装置Aに送る。
【００４５】
【表３】

【００４６】
２）照合−相互認証
その後、CPCM装置Aは、このメッセージをすべてのパラメータと共に受信し、記憶装置内のContentID/ProgramNumberを探し、CPCM_DomianIDをベースラインDVB-CPCM内の「CPCM権利管理」モジュールによるそのCPCM_DomianIDに対して照合する。同時に、要求されたコンテンツ／プログラムの使用規則をチェックし、最終的にCPCM_Device_Bへ応答メッセージを送ることによってコピーまたは権利の移動を許可する。
エラー通知を含む応答メッセージのフォーマットを表４に示す。
【００４７】
【表４】

【００４８】
３）CPCMストリームを生成するための暗号化鍵のオンライン暗号化
前述の「権利確認」終了後、コンテンツと共にCPCM装置Aに格納されている暗号化鍵は、CPCM装置Bから受信されたPublicKeyによって暗号化され、CPCMストリームが形成される。
４）CPCM装置AからCPCM装置Bへのコンテンツ転送
ここで、要求されたコンテンツは、「ユーザ規則（変更されることもある）」および形成されたCPCMストリームと共に、セキュリティ上安全なチャネルを介してCPCM装置AからCPCM装置Bへセキュリティ上安全に転送される。
５）CPCM装置AとCPCM装置Bの間のツール転送
CPCM装置B内の「CPCMマネージャ」が、MPEG-2 TSストリームのPCIに組み込まれている「CPCM制御情報」を検索して「CPCMツールリスト」を入手する。「CPCMマネージャ」が、「CPCMツールリスト」をCPCM装置B内の「ツールボックス」に対してチェックをかけてもToolIDで示される「ツール」が見つからない。これは、新しいまたは更新された「CPCMツール」が使われているのに、CPCM装置Bが実装していない場合に発生することがある。
この場合、CPCM装置Bが欠けている「CPCMツール」を入手する方法は３通りある。
ａ）CPCM装置Bが「ツール要求メッセージ（Tool Request Message）」を「メッセージルータ」経由でCPCM装置Aに送り、ToolIDによる「ツール」を要求する。同時に、CPCM装置BはさらにそのCPCM_DomainIDをCPCM装置Aに送る。
「ツール要求メッセージ」のフォーマットを表５に示す。
【００４９】
【表５】

【００５０】
CPCM装置Aは「ツール要求メッセージ」を受信し、装置Bと相互認証を行なうことを選択してもよく、また、ToolIDを使用して「ツールボックス」の表６記載の転送ステータスを確認する。
【００５１】
【表６】

【００５２】
ステータスがyesの場合、CPCM装置AはCPCM装置Bに応答を送り、その後、「ツール」をその関連記述子とともにCPCM装置Bに送る。
ｂ）表６に示されているように、欠けているツールは「CPCMツールコンテナ」に組み込まれているコンテンツストリームから検索することもできる。
ｃ）図６に示されているように、欠けているツールは、別のCPCM装置から入手することもできる。
ｄ）図６に示されているように、欠けているツールは、戻りチャネルまたは本提案の範囲外の他の手段を介して遠隔URLから検索することもできる。
次に、ベースラインDVB-CPCMの標準構成要素を説明する。
【００５３】
ベースラインDVB-CPCMに使用されるこれらの機能モジュールを下の表７に列記する。
【００５４】
【表７】

【００５５】
表７に示されているように、最後のモジュールを除く、機能と挙動が記載されている他の５つのモジュールは、いずれも、規準を確立して世界的な相互運用性を提供するように標準化される必要がある。
CPCM装置と独自CPCMツール（プラグイン）の間のメッセージルータのメッセージフォーマットが規準となり、コンテンツ転送、ツール転送、CPCM装置間の相互認証、ならびにCPCMプラグインとの接続に使用される。
【００５６】
ベースラインDVB-CPCM内のさまざまなモジュール間のインタフェースはここでは限定されない。それは、実装の問題である。ベースラインDVB-CPCMがここに記載されたすべての機能を満足する限り、ベースラインCVB-CPCMとDVB STBの間のインタフェースもここでは限定されない。
【００５７】
【発明の効果】
このベースラインDVB-CPCMの発明は、放送やコピーおよび伝送されるデジタルコンテンツを保護するという課題を解決し、優れた相互運用性を提供するものである。
発明されたベースラインDVB-CPCMは、適合CPCM装置で実施されるユニットであり、セキュリティおよび相互運用性に要求される機能のほとんどを実現する５つのモジュールから構成されている。
【００５８】
「CPCM制御情報」および「CPCMストリーム」は、世界的な相互運用性を有するためにオペレータおよびメーカーの両方が従うべき基準を提供するように定められ、「CPCM制御情報」は、「CPCMツールリスト」、「権利者」、および「ツールコンテナ」を含む。適合CPCM装置を指定すると、コンテンツ保護およびコピー管理用の機能のほとんどを満足する、「CPCMマネージャ」、「ツールボックス」、「権利管理」、「メッセージルータ」、および「CAS-CPCMコンバータ」を含むベースラインDVB-CPCMが作られる。
【００５９】
ここでは、コンテンツすなわちCPCM装置間のツール転送、ならびに独自CPCMプラグインとの接続に関するメッセージングインタフェースといくつかのメッセージが定められている。
各コンテンツ、プログラム、または基本ストリームとも関連付けられた使用規則を提供するために、XML構造またはバイナリ形式の権利言語を「CPCM権利ホルダ」に含ませることもできる。
【図面の簡単な説明】
【図１】 異なるＣＡシステムを使用することによって保護コンテンツを受信する既存のDVB-STBの従来技術を示す図である。
【図２】 エンド・ツー・エンド・ソリューションを用いた本発明のDVB CPCM STBを示す図である。
【図３】 CPCM保護コンテンツとMPEG2システムの構造を示す図である。
【図４】 放送の場合にエンド・ツー・エンド・ソリューションに使用される権利管理機能の図である。
【図５】 コンテンツ配信の場合にエンド・ツー・エンド・ソリューションに使用される権利管理機能の図である。
【図６】 CPCMマネージャのツール検索機能の図である。
【図７】 CPCM装置間のコンテンツ送信を示す図である。
【符号の説明】
1.0 コンテンツ所有者
1.1 オペレータA
1.5 オペレータB
1.9 オペレータC[0001]
BACKGROUND OF THE INVENTION
The present invention relates to protection and copy management of content used in broadcasting, content distribution, and video-on-demand, and in particular, protected content can be supplied, the content can be used, and the content can be securely stored in a storage device. It relates to an application field that can be transferred between devices that can.
[0002]
[Prior art]
As digital technology and media processing power advance, consumers will be able to easily get content. Unlike analog media, digital media has countless copies of high quality. Therefore, the content owner, ie the content operator, is very concerned about the dangers if the content is not well protected.
[0003]
Digital television (DTV) broadcasting has been widely adopted throughout the world. At this stage, there is not much interest in content protection and security. However, since a new generation DTV-STB (Set Top Box) with a digital interface such as local hard disk and IEEE1394 will be launched, content stakeholders, movie industry, and media owners will be responsible for content protection and copy management I'm starting to worry. As with secure transport channels, they do not allow content to be exposed to such applications until they have a complete and secure DTV-STB, secure delivery and transport mechanism Will. Therefore, MPEG, DVB, TVanytime, content companies, CE (homes) to address interoperable and secure end-to-end solutions for content protection and copy management in such application scenarios. Electrical appliances) manufacturers and security technology suppliers are gathering.
[0004]
As multimedia data and content can be delivered anywhere, anytime, content distribution and video on demand are also becoming more demanding. Users are satisfied with convenience and adaptability and can enjoy entertainment easily and efficiently.
[0005]
On the other hand, content owners are trying to satisfy customer needs, but they are also worried about illegal use of their ownership. There is a balance between the two.
[0006]
In the MPEG standardization group, people are working toward standardization of IPMP (Intellectual Property Management and Protection) systems including compatible terminals. All terminals can play protected content that is encrypted and protected by following the same IPMP standard, regardless of the type of IPMP tool used.
[0007]
The DVB Enterprise Union also distributes content from the operator to the receiver and transfers content from one DVB-CPCM (Protection and Copy Management) device to the other in a secure and interoperable manner Made a request for a CPCM proposal that was mainly targeted.
[0008]
Current DVB receivers, such as DVB devices, have a security-safe and interoperable requirement for content transfer between DVB receivers and other storage devices, such as PVRs, that has not received much attention. I can't be satisfied.
[0009]
Basically, the conventional technology of the existing DVB receiver is shown in FIG. 1 and shows a state in which contents are distributed informally though it is safe for security.
[0010]
The invention relating to this is disclosed in Japanese Patent Application Nos. 2001-265908 and 2001-058236 filed by the present applicant.
[0011]
[Problems to be solved by the invention]
The subject of the present invention is as follows.
Design interoperable and secure devices that are used for content delivery and transfer in a secure manner.
Design an interoperable and security-safe device that can be used safely for content distribution between such devices.
In the above case, protect the content from unauthorized use of the property, properly handle the authorized use and send it from one device to the other in the authorized domain.
[0012]
[Means for Solving the Problems]
The device according to the invention comprises as components:
Means to use a standard baseline DVB-CPCM unit implemented in a compatible CPCM device;
A means of using the baseline DVB-CPCM sub-modules and their functions and operations;
Means to use a set of messages for content transfer, tool transfer, mutual authentication between compatible CPCM devices, and interfaces with proprietary CPCM tools (plug-ins);
A means of using a set of identifiers for content management and domain management;
A means of indicating the format of protected content in which protected information and content usage information are embedded, using CPCM information and its sub-information held within the content, as well as the syntax set of such information and its semantics A means used by a content provider or service operator as a standard means of integrating content with other information, and at the same time used as a reference for creating a compliant CPCM device by a CPCM device manufacturer;
A means of using a comprehensive XML (Extensible Markup Language Convention) -based schema that can represent different types of usage rights and usage rules by different parties,
Have
[0013]
DETAILED DESCRIPTION OF THE INVENTION
In the present invention, a parameter named “permitted domain” is newly provided. The “permitted domain” specifies one or more local networks. Only playback / recording devices within the local network identified by the permitted domain are allowed to perform either playback or copying of CPCM (content protection and copy management) protected content. Thereby the content is completely protected when transferred between devices in the network.
The permission domain is defined when a user makes a contract for content application with a content provider. Contract terms may vary depending on the characteristics of the local network, such as the number and / or type of devices in the local network that are assigned the same domain.
For example, the permitted domain can be set by adopting the IP address portion of the device in the local network. More specifically, if the device has an IP address of “dvdplayer1.seno.drl.mei.co.jp”, the permitted domain can be “seno.drl.mei.co.jp”. At this time, all apparatuses having an IP address of “seno.drl.mei.co.jp” are permitted to execute one of reproduction and copying of the contracted content. Here, the “domain” specifies a logical unit related to connection between devices. This may not necessarily take the form of a network.
[0014]
First, the basic structure of the present invention will be described.
(1) On the content provider in the CPCM environment, that is, on the operation side,
1. The content is encoded using existing coding techniques such as MPEG-2 or MPEG-4 and encrypted using existing predefined encryption tools such as DES or AES. A copy control watermark may be embedded in the content before encoding. The encryption key is re-encrypted using a pre-defined encryption tool, resulting in an encrypted encryption key and a license key used to encrypt the encryption key.
2. At the same time, ContentID is generated.
3. Based on which tool is used to protect the content, a “CPCM Tools List” indicated by ToolID is also created.
4). The “CPCM Rights Holder” includes usage rights and usage rules specified by the content owner. These usage rights and specification rules can be created specifically for each content (by using ContentID), dedicated to each program under a certain content (by using the MPEG2 program number), or the basic PID of the MPEG2 system. It can also be created for each elementary stream under a program (by using it). The aforementioned license key can be included in a “CPCM rights holder” or can be distributed to the CPCM via some security-safe means, a return channel, or a smart card.
5. If necessary, a “CPCM Control Graph” is created according to detailed protection and usage rules that apply to each control point.
6). A “CPCM Tool Container” is generated by communicating the necessary CPCM tools in a protected format.
7). A “CPCM Stream” including the above-described encrypted encryption key and any other control information for protection such as a time stamp, a tool configuration message, etc. is also generated.
[0015]
All the above-mentioned CPCM information is held in MPEG-2 standard PSI and is called CPCM control information.
(2) On the content receiving side in the same CPCM environment,
The protected content is delivered to the conforming CPCM device and the baseline DVB-CPCM unit works by activating its submodules.
1. The “Rights Management” module searches for “CPCM Rights Holder” information. Usage rules and usage conditions related to the content are analyzed. These include copy information regarding the right to use each program, the basic stream, and whether content (ie, programs) can be transferred between CPCM devices within the same authorized domain. If the license key is included in the "CPCM Rights Holder", the "Rights Management" module will also search for the license key after confirming that this device has access to specific content or programs It is. Otherwise, the license key is obtained from somewhere, possibly from a smart card, through a secure means.
2. The “CPCM Manager” module searches the “CPCM Tool List” and invokes that tool if such a tool indicated by ToolID is in the “Toolbox” of the baseline DVC-CPCM. If there is no such tool in the case of a new or updated tool, the missing tool is downloaded or searched in three ways: That is, send a ToolRequest to another CPCM device, search for a tool from the content (if the tool is held in the “Tool Container Descriptor”), or a missing tool Search remotely from the URL site. The newly acquired tool is used as an original CPCM tool (plug-in).
3. In the case of only reproduction, the license key stored in the buffer of the baseline DVB-CPCM is called to decrypt the encrypted encryption key in the CPCM stream. The restored key is used to decrypt the encrypted content one unit at a time and reproduce it without storing the protected content.
4). When the content is stored at the beginning of playback, the usage rules and usage rights contained in the “CPCM rights holder” are also searched and verified in order to confirm whether or not this program, that is, the right to copy the content. In the case of broadcasting, a program number such as ProgramNumber is used to identify the usage rights that apply to the relevant program, whereas in the case of content distribution, the usage rights that apply to the relevant content are identified. ContentID is used.
After the usage rules are collated, the protected content is played in the same way as shown in the playback situation described above. At the same time, if the encrypted content is "CPCM information"("CPCM tool list", "CPCM rights holder", "CPCM control graph", "CPCM tool container", and the encryption key is not encrypted) Is also stored in the storage device of the CPCM device.
(3) Protected content transfer between two compatible CPCM devices
It is assumed that the protected content is stored in the CPCM apparatus A together with “CPCM control information”. CPCM device B is owned by the same user and is considered to be in the same authorized domain.
[0016]
In the case of content distribution, when a registered user applies through a return channel, smart card, or other means, the same CPCM_DomainID corresponding to the registered user is issued as a certificate and registered in all CPCM devices of this user.
This CPCM_DomainID as a certificate is transmitted, supplied, and registered to the user's CPCM device in a secure manner, or registered to the user's CPCM device via a plug-in smart card. This CPCM_DomainID registered in the baseline DVB-CPCM of the user's CPCM device is used as a hardware identifier or an authorized domain identifier.
[0017]
In this registration process, a password assigned by the service operator may be used. All charges for pay-per-view or content purchases are charged to the user based on the user's own CPCM_DomainID and password. All registered CPCM devices of a user are considered to be in the permitted domain by the same certificate that is CPCM_DomainID.
Within the same domain, each CPCM device is also assigned a CPCM_DeviceID that identifies itself and is used as an address for message transmission / reception between the two CPCM devices. Each CPCM device also has a key generation module for generating a pair of public and private keys used to encrypt and decrypt the encryption key in the CPCM stream.
[0018]
If CPCM device B wants to obtain the protected content / program stored in CPCM device A, CPCM device B sends a ContentRequest message to device A,
a) ContentID / ProgramNumber of the requested content / program,
b) CPCM_DomainID of device B;
c) Public Key—PublicKey generated online (or pre-embedded) by Baseline DVB-CPCM of Device B;
d) CPCM_DeviceID of device B,
Send together.
The baseline DVB-CPCM of device A receives the ContentRequest message using CPCM_DomainID and PublicKey, and confirms the following.
a) Whether device B is in the authorized domain. This can be done by mutual authentication with device B using a certificate through a mutual confirmation message, or by simply verifying the received CPCM_DomainID with its own CPCM_DomainID.
b) Whether there is such content / program with ContentID / ProgramNumber (programNumber is used for broadcasting).
c) Whether such a copy right of the requested content / program exists by calling the rights management module to confirm the usage rules contained in the CPCM rights holder.
d) If the above three steps are passed, the encryption key held in the CPCM stream stored in the device A is encrypted with the received PublicKey, and the CPCM stream attached to the protected content is re-sent. Form.
e) The requested content is finally transferred from the device A to the device B together with the CPCM information, but some CPCM information may be changed.
f) When the copy right described in “CPCM right holder” is “Copy Once”, it is changed to “Copy No More”.
g) If the copy right information is included in the watermark embedded in the video, the watermark extraction tool is called from the “toolbox” to extract the copy right information. In this case, if the copy right is “one copy”, the watermark embedding tool is called and “end copy count” is embedded in the video content.
(4) CPCM tool transfer between two compatible CPCM devices
It is assumed that the CPCM tool is stored in the “tool box” module of the “baseline DVB-CPCM” of the CPCM apparatus A.
[0019]
The CPCM device B receives the protected content and searches the “CPCM tool list”. However, if it is found that the tool required by ToolID is missing or cannot be found from the “Toolbox” of “Baseline DVB-CPCM” of CPCM device B, device B sends a ToolRequest message to device A and so on. Demanding tools. The message contains
a) CPCM_DomainID of device B;
b) the ToolID of the requested tool;
c) CPCM_DeviceID of device B,
Is included.
The “CPCM rights management” module of device A receives the ToolRequest message using CPCM_DomainID and ToolID, and confirms the following.
a) Whether device B is in the authorized domain. This can be done by mutual authentication with device B using a certificate through a mutual confirmation message, or by simply verifying the received CPCM_DomainID with its own CPCM_DomainID.
b) Whether there is a tool having the ToolID by searching a tool table stored in a local memory such as a RAM in the baseline DVB-CPCM of the device A.
c) Whether the tool is allowed to be transferred to another device, even if in the authorized domain, according to the requested transfer status of the tool.
d) If the above three steps are passed, the requested tool is transferred from device A to device B along with its transfer status.
Preferred embodiments of the present invention will be described below with reference to the drawings.
[0020]
FIG. 1 shows a conventional technique of a general DTV system currently used. The DVB-STB with dedicated CA system is shown here as a receiver as an example.
In unit 1.0, the “Content Owner” distributes the content to various operators along with specific basic and general usage rules for the content.
In unit 1.1, the MPEG-2 standard is used here for audio, video and system coding, but Operator A uses the tools and formats to generate protected content. The format of usage rules, the protection mechanism including the protection tool used here, is based on the proprietary standard A. Therefore, in order to be able to receive and interpret in unit 1.3 and to use protected content in unit 1.4, a CA module based on such a standard B must be used in unit 1.2 and attached to DVB-STB 1 Don't be.
[0021]
A similar method applies to Operator B and DVB-STB 2.
In unit 1.5, the MPEG-2 standard is used here for audio, video and system coding, but Operator B uses the tools and formats to generate protected content. The format of usage rules, the protection mechanism including the protection tool used here, is based on the proprietary standard B. Therefore, in order to be able to receive and interpret in unit 1.7 and to use protected content in unit 1.8, a CA module based on such a standard B must be used in unit 1.6 and attached to DVB-STB 2 Don't be.
[0022]
A similar method applies to Operator C and DVB-STB 3.
In unit 1.9, the MPEG-2 standard is used here for audio, video and system coding, but Operator B uses the tools and formats to generate protected content. The format of usage rules, the protection mechanism including the protection tools used here, is based on the proprietary standard C. Therefore, in order to be able to receive and interpret in unit 1.11 and to use protected content in unit 1.12, a CA module based on such a standard C must be used and attached to DVB-STB 3 in unit 1.10. Don't be.
[0023]
Given the above situation, if DVB-STB 1 wants to receive and use content delivered by Operators B and C in addition to Operator A, DVB-STB 1 users must purchase multiple CA systems. Therefore, the user's desire to pay is further strengthened.
On the other hand, such DVB-STB cannot realize secure storage of secure content and secure transfer of content between different devices by maintaining the same usage rules.
[0024]
Furthermore, there is no compatibility among all existing CA systems, so the cost of receiving and using the same number of content from multiple operators on the same DVB-STB is very high for the consumer.
The new generation DVB-STB will allow local storage devices embedded in the STB to receive as well as store received content. In addition, content transfer between such devices, including personal video recorders (PVR), will become increasingly demanding. Therefore, new DBV devices need to be defined in order to achieve interoperable and secure content delivery and end-to-end transfers and transfers between such devices.
[0025]
End-to-end solution
In accordance with the present invention, a future compatible DVB CPCM STB will include a baseline DVB-CPCM module pre-implemented or embedded in the DVB STB as shown in FIG.
An end-to-end solution based on the DVB CPCM STB with the invented baseline DVB-CPCM is shown in FIG. As sub-function modules, "CPCM Manager", "Toolbox", "Rights Management Module (" Usage Status "and" Usage Rule Analysis "), between dedicated CAS (ECM and EMM) and" CPCM Usage Status & Rules " Baseline DVB-CPCM is clearly stated, including "CAS-CPCM converter" and "message router" that carries all necessary messages.
[0026]
FIG. 3 shows the structure of MPEG-2 protected by the CPCM system. As shown in Fig. 3, CPCM protected content includes "CPCM tool list", "CPCM rights holder", "CPCM control information" including "CPCM tool container", and CPCM stream It is. “CPCM control information” is included in the PSI (program service information) of the MPEG-2 system, while the CPCM stream is held as an individual basic stream.
[0027]
The DVB CPCM STB mentioned above has two possible “use cases”.
1) If content is protected and managed by a standard DVB CPCM system,
The content is encoded and encrypted using specific usage rules and delivered / forwarded to the DVB CPCM STB along with other usage information based on the user's application.
[0028]
Note that the coding of all components and usage rules, such as encryption tools, is based on the CPCM system, so the baseline DVB-CPCM embedded in the STB is therefore the encryption tool in the “toolbox”. Call and use rules are analyzed by the “rights management module” and then the protected content is processed.
The encryption key is encrypted again and put into the “CPCM stream”. The key used to encrypt the encryption key, ie the license key, is included in the “right holder” or some security-safe via a smart card or via a return channel such as a modem line. Informed to DVB CPCM STB in a way.
[0029]
The “rights management” module in the invented baseline DVB-CPCM of the corresponding CPCM device operates for the following functions as shown in FIGS.
In FIG. 4 in the case of broadcasting, in step 1, the protected content with CPCM information is passed to the “right management (RM)” module, and “CPCM rights holder” is searched in this module. "Usage rules" and possibly a license key is incorporated into the "CPCM rights holder".
[0030]
In the first step in step 2 shown in FIG. 4, the RM has the right to receive the content embedded in the “CPCM rights holder” and the CPCM_DomainID registered in the user's CPCM device Check to see if this device is entitled to use the content.
If the above result is negative, the RM generates an output message telling that it is an unauthorized user as shown in step 3 of FIG.
If the above result is positive, the RM retrieves the license key from the “right holder” or smart card in step 4 and prepares to decrypt the encrypted encryption key embedded in the “CPCM stream” To arrange.
In the next step, in step 5, the RM checks the user's request or selection between “play” or “play and copy”.
If the user request is “playback only”, the “license key” retrieved in step 4 is passed to step 8 to decrypt the encrypted encryption key. The next step is to unscramble the protected content at step 9 and play the content at step 10.
If the user request is “play and copy”, in step 6, the RM searches for “usage rules” and has the copy right to save the current content (program in the case of broadcast) in the storage device of the corresponding CPCM device. Please check.
If the above result is negative, the RM generates an output message telling that “copy / move” is prohibited, as shown in step 7. If the above result is positive, the “license key” retrieved in step 4 is passed to step 8 to decrypt the encrypted encryption key. The next step is to unscramble the protected content at step 9 and play the content at step 10. At the same time, in step 11, the restored key is stored in the “rights management” module for later use. In step 12, the protected content is stored in the local storage device of the CPCM device.
[0031]
In FIG. 5 in the case of content distribution, the protected content with CPCM information is passed to the “right management (RM)” module in step 1, and “CPCM management holder” is searched in this module. "Usage rules" and possibly a license key is incorporated into the "CPCM rights holder".
[0032]
As shown in FIG. 5, in the first step of step 2, the RM checks the CPCM_DomianID of the content embedded in the “CPCM rights holder” against the CPCM_DomianID registered in the user's CPCM device, Check if this device is in the “permitted domain” and is eligible to use the content.
If the above result is negative, the RM generates an output message telling it not in the authorized domain, as shown in step 3.
If the above result is positive, the RM retrieves the license key from the “right holder” or smart card in step 4 and prepares to decrypt the encrypted encryption key embedded in the “CPCM stream” To arrange.
[0033]
In the next step, in step 5, the RM checks the user's request or selection between “play” or “play and copy”.
If the user request is “playback only”, the “license key” retrieved in step 4 is passed to step 8 to decrypt the encrypted encryption key. The next step is to unscramble the protected content at step 9 and play the content at step 10.
If the user request is “play and copy”, in step 6, the RM searches for “usage rules” and has the copy right to save the current content (program in the case of broadcast) in the storage device of the corresponding CPCM device. Please check.
If the above result is negative, the RM generates an output message telling that “copy / move” is prohibited, as shown in step 7. If the above result is positive, the “license key” retrieved in step 4 is passed to step 8 to decrypt the encrypted encryption key. The next step is to unscramble the protected content at step 9 and play the content at step 10. At the same time, in step 11, the restored key is stored in the “rights management” module for later use. In step 12, the protected content is stored in the local storage device of the CPCM device.
[0034]
FIG. 6 shows how the “CPCM Manager” searches for tools and obtains missing tools in various ways.
As shown in FIG. 6, in step 1, a “CPCM Tool List” is passed to the “CPCM Manager” module to search for the requested tool. In step 2, a “toolbox” is searched for the requested tool. If the requested tool is present in the “toolbox”, in step 3 the tool is activated and functioning. If not, the “CPCM tool container” is checked to see if the tool exists, as shown in step 4.
[0035]
If the requested tool can be found in step 4, in step 5, the tool is retrieved from the “CPCM tool container” and stored in the “toolbox”. Otherwise, in step 6, the requested tool is obtained from another CPCM device by sending a request message.
When the tool request is accepted, in step 7 the tool is transferred and saved in the “toolbox”. Otherwise, in step 8, the response message tells the reason for the failure.
[0036]
In step 9, the “CPCM plug-in” module is checked to see if there is such a request tool to use. If not, in step 11 the requested tool must be retrieved remotely via a return channel, URL or other means.
When content is protected and managed by a dedicated CAS system:
The content is encrypted with a control word in the ECM and sent to the DVB CPCM STB using its own EMM format.
Since ECM and EMM are based on the dedicated format of CAS system, a dedicated CAS module corresponding to DVB STB is required to decrypt and process protected content.
[0037]
As shown in Figure 2, a CPCM plug-in module (CAS-CPCM converter), such as a smart card with DVB compliant common interface (CI), provided by CA manufacturers to receive and play such content Is done.
Communication between the CAS-CPCM converter module and the baseline DVB-CPCM module in a compliant CPCM device is realized on both sides of the DVB compliant common interface (CI). CAS stands for Conditional Access System.
[0038]
Next, the mapping between the CA system and the recording baseline DVB-CPCM will be described.
If the content is only for reproduction, there is no need to perform mapping. However, if the content is allowed to be stored in the DVB CPCM STB for future transfer within the authoring domain, the “usage rules” CPCM format used in the dedicated CA system A CAS-CPCM converter module with DVB conforming common interface (CI) is required to map to. In addition to usage rule mapping, the content is decrypted by a dedicated CA system and re-encrypted by the baseline DVB-CPCM, and its "CPCM Control Information"("CPCM Tool List", "CPCM Rights Holder", etc.) and "CPCM It must be stored in the STB in encrypted form along with the “stream” and hold the encryption key and other relevant information.
[0039]
The following table shows the function of each module described in FIG. 2 for an end-to-end solution.
[0040]
[Table 1]

[0041]
Next, the baseline DVB-CPCM used for transmission between CPCM devices will be described.
Transmission between two conforming CPCM devices is accomplished through a “Message Router” which is a standard baseline DVB-CPCM module that is pre-installed in all CPCM devices. Communication takes place through the messaging interface to provide interoperability as shown in FIG.
[0042]
A message via the message router (MR) results in the following transmission between CPCM devices:
Transfer content from one to the other.
Transfer of CPCM tools from one to the other.
Defines the following identifiers used for content management and user database management and rights confirmation during content transfer:
[0043]
[Table 2]

[0044]
It is assumed that the encrypted content is stored in the CPCM apparatus A together with the “use rule” and the “CPCM right holder” containing the encryption key.
1) Transmission of content request message from CPCM device B to CPCM device A
Here, the CPCM Device B sends a message via the “message router” and requests specific content by ContentID / ProgramNumber or possible basic PID and its CPCM_DomainID. In addition to these parameters, the CPCM device B further generates a set of keys and sends the PublicKey shown in Table 3 to the CPCM device A together with the aforementioned parameters.
[0045]
[Table 3]

[0046]
2) Verification-mutual authentication
CPCM device A then receives this message with all parameters, looks for ContentID / ProgramNumber in the storage device, and matches CPCM_DomianID against its CPCM_DomianID by the “CPCM Rights Management” module in the baseline DVB-CPCM . At the same time, the usage rules of the requested content / program are checked, and finally the copy or transfer of rights is permitted by sending a response message to CPCM_Device_B.
Table 4 shows the format of a response message including an error notification.
[0047]
[Table 4]

[0048]
3) Online encryption of encryption key to generate CPCM stream
After the above-mentioned “right confirmation” is completed, the encryption key stored in the CPCM device A together with the content is encrypted by the PublicKey received from the CPCM device B, and a CPCM stream is formed.
4) Content transfer from CPCM device A to CPCM device B
Here, the requested content is securely transferred from CPCM device A to CPCM device B via a secure channel, together with “user rules (sometimes changed)” and the formed CPCM stream. Is done.
5) Tool transfer between CPCM device A and CPCM device B
The “CPCM manager” in the CPCM apparatus B searches for “CPCM control information” incorporated in the PCI of the MPEG-2 TS stream to obtain the “CPCM tool list”. Even if “CPCM Manager” checks “CPCM Tool List” in “Tool Box” in CPCM Device B, “Tool” indicated by ToolID is not found. This may occur when a new or updated “CPCM tool” is used but CPCM device B is not implemented.
In this case, there are three methods for obtaining a “CPCM tool” lacking in the CPCM device B.
a) CPCM device B sends a “Tool Request Message” to CPCM device A via “message router” to request a “tool” by ToolID. At the same time, the CPCM device B further sends the CPCM_DomainID to the CPCM device A.
Table 5 shows the format of the “tool request message”.
[0049]
[Table 5]

[0050]
CPCM device A may receive a “tool request message” and choose to perform mutual authentication with device B, and uses ToolID to confirm the transfer status described in Table 6 of “Toolbox”.
[0051]
[Table 6]

[0052]
If the status is yes, CPCM device A sends a response to CPCM device B and then sends “tool” along with its associated descriptor to CPCM device B.
b) As shown in Table 6, the missing tools can also be retrieved from the content stream embedded in the “CPCM Tool Container”.
c) As shown in FIG. 6, the missing tool can also be obtained from another CPCM device.
d) As shown in FIG. 6, the missing tool can also be retrieved from a remote URL via a return channel or other means outside the scope of the proposal.
Next, standard components of the baseline DVB-CPCM will be described.
[0053]
These functional modules used for the baseline DVB-CPCM are listed in Table 7 below.
[0054]
[Table 7]

[0055]
As shown in Table 7, except for the last module, all the other five modules whose functions and behaviors are described will establish standards and provide global interoperability. Need to be standardized.
The message router message format between the CPCM device and the original CPCM tool (plug-in) is the standard, and is used for content transfer, tool transfer, mutual authentication between CPCM devices, and connection with the CPCM plug-in.
[0056]
The interface between the various modules in the baseline DVB-CPCM is not limited here. That is an implementation issue. The interface between the baseline CVB-CPCM and the DVB STB is not limited here as long as the baseline DVB-CPCM satisfies all the functions described here.
[0057]
【The invention's effect】
The invention of the baseline DVB-CPCM solves the problem of protecting digital contents that are broadcast, copied, and transmitted, and provides excellent interoperability.
The invented baseline DVB-CPCM is a unit implemented in a conforming CPCM device and consists of five modules that implement most of the functions required for security and interoperability.
[0058]
“CPCM Control Information” and “CPCM Stream” are defined to provide standards that both operators and manufacturers must follow to have global interoperability, and “CPCM Control Information” ”,“ Right holder ”, and“ tool container ”. Specifying a compatible CPCM device will satisfy most of the functions for content protection and copy management, including "CPCM Manager", "Toolbox", "Rights Management", "Message Router", and "CAS-CPCM Converter" Baseline DVB-CPCM is created.
[0059]
Here, a messaging interface and several messages are defined for content transfer, that is, tool transfer between CPCM devices, and connection with a unique CPCM plug-in.
To provide usage rules associated with each content, program, or elementary stream, an XML structure or binary form of the rights language can also be included in the “CPCM rights holder”.
[Brief description of the drawings]
FIG. 1 is a diagram illustrating a conventional technology of an existing DVB-STB that receives protected content by using different CA systems.
FIG. 2 shows the DVB CPCM STB of the present invention using an end-to-end solution.
FIG. 3 is a diagram illustrating a structure of CPCM protected content and an MPEG2 system.
FIG. 4 is a diagram of rights management functions used for end-to-end solutions in the case of broadcast.
FIG. 5 is a diagram of rights management functions used for end-to-end solutions in the case of content distribution.
FIG. 6 is a diagram of a tool search function of a CPCM manager.
FIG. 7 is a diagram showing content transmission between CPCM devices.
[Explanation of symbols]
1.0 Content owner
1.1 Operator A
1.5 Operator B
1.9 Operator C

Claims (13)

Baseline DVB-CPCM (Digital Video Broadcasting for Content Protection and Copy Management) device on the sender side that delivers CPCM protected content used in a complete business environment, where the CPCM protected content includes content CPCM information for protection and copy management is attached to the encrypted content stream,
Means for generating the encrypted content stream on the owner side or operator side;
Means for generating the CPCM information, wherein the CPCM information is information for identifying a permitted domain permitted to execute one of reproduction and copying of the CPCM-protected content;
Means for generating the CPCM protected content by attaching the CPCM information to the encrypted content stream;
Means for delivering the CPCM protected content. An apparatus for receiving-side baseline DVB-CPCM (Digital Video Broadcasting for Content Protection and Copy Management),
In the CPCM device, means for receiving CPCM-protected content having CPCM information and a CPCM stream, wherein the CPCM information includes an authorized domain that is permitted to execute one of reproduction and copying of the CPCM-protected content. Means for identifying and searching for the CPCM information by means of the CPCM device, comparing it with pre-registered information in the baseline DVB of the CPCM device, and determining whether the CPCM device is in a permitted domain; ,
Means for retrieving the CPCM information by the CPCM device and decrypting the encrypted content stream;
Means for storing the content in a protected form in the CPCM device;
After confirming that the CPCM device and another compatible CPCM device belong to the same authorized domain, transfer the CPCM protected content from the CPCM device to the other compatible CPCM device in a secure manner. A device comprising: Baseline DVB-CPCM (Digital Video Broadcasting for Content Protection and Copy Management) equipment used for end-to-end solutions on the sending side,
Means for generating a CPCM-protected content stream on the content owner side or operator side;
All used to protect the content with the tool ID code assigned to any tool used to protect the content, including encryption, watermark embedding, watermark detection, digital signature A means for creating a “tool list” as a “CPCM tool list” for enumerating tools;
Means for creating a “CPCM Rights Holder” in a specific format by including usage rules and copy rights associated with the content;
Means for creating a “CPCM control graph” showing the protection order using different tools at different locations;
Means for generating a “CPCM tool container” for transmitting a CPCM tool having a specific CPCM tool ID;
Means for generating a “CPCM stream” to transmit key information, control information, timestamp information related to the use of the tool to protect the content;
Specify the “CPCM Information” and “CPCM Stream” including “CPCM Tool List”, “CPCM Rights Holder”, “CPCM Control Graph” and “CPCM Tool Container” together with the CPCM protected content stream to identify the system layer Means for arranging in a specific format at the position of
Means for assigning a “content ID” as a content identifier for content management on both the operator side and the user side;
A means for distributing the CPCM-protected content having the CPCM information to the CPCM device in a security-safe manner, wherein the CPCM device uses “CPCM_DomainID” as a “CPCM domain identifier” for permitted domain management. And a means belonging to the permitted domain set by designating. An apparatus for receiving-side baseline DVB-CPCM (Digital Video Broadcasting for Content Protection and Copy Management),
Means for receiving the transferred content by the CPCM device;
Means for determining whether it belongs to the permitted domain and allowing the CPCM device;
Means for retrieving the CPCM information contained in the transferred content by the CPCM device;
Means for verifying usage rules by the CPCM device before addressing a user request;
Call the CPCM tool from the CPCM device, or call the unique CPCM plug-in module if the requested CPCM tool does not exist in the CPCM device, and use the retrieved CPCM information to protect the CPCM A means of decrypting the content,
Means for playing back the decrypted content to a user;
Storing the CPCM-protected content with CPCM information upon user request. A device for baseline DVB-CPCM (Digital Video Broadcasting for Content Protection and Copy Management) used to transfer content between devices,
Means for setting a set of messages for content transfer having a data structure of a plurality of parameters used for content transfer;
Means for receiving a "content request message", the "content request message" being transmitted by the CPCM device B to request content transfer from the CPCM device A together with defined parameters;
A means for verifying a plurality of parameters received by the CPCM device A, wherein the CPCM device A permits execution of one of reproduction and copying of the CPCM-protected content, which is data stored in advance. CPCM information that identifies the authorized domain that has been assigned, and the means is whether the CPCM devices A and B are in the same domain, the requested content is in the CPCM device A, or the like Means for verifying whether or not a copy / move right is attached to the content;
Means for transmitting, after the verification, a “content response message” having a plurality of response messages for various cases by the CPCM device A to the CPCM device B;
An apparatus comprising: means for transmitting the content requested from the CPCM apparatus A together with the CPCM information to the CPCM apparatus B in a security-safe manner when the response is positive. A device for baseline DVB-CPCM (Digital Video Broadcasting for Content Protection and Copy Management) used for CPCM tool transfer,
Means for setting a set of messages for content transfer having a data structure of a plurality of parameters used for tool transfer;
Means for transmitting a “tool request message” having a plurality of parameters defined by the CPCM device B to request tool transfer from the CPCM device A;
A means for verifying a plurality of parameters received by the CPCM device A, wherein the CPCM device A permits execution of one of reproduction and copying of the CPCM-protected content, which is data stored in advance. CPCM information identifying the authorized domain that has been assigned, and the means requests whether the CPCM devices A and B are in the same domain, or whether the requested tool is in the CPCM device A Means for verifying that the tool is authorized to transfer to another CPCM device;
Means for transmitting a “tool response message” having a plurality of response messages for various cases by the CPCM device A to the CPCM device B after the verification;
Means for transmitting the tool requested from the CPCM device A together with its CPCM information to the CPCM device B in a security-safe manner if the response is positive;
Means for the CPCM device B to retrieve the CPCM tool from another source if the response is negative. Baseline DVB-CPCM (Digital Video Broadcasting for Content Protection and Copy Management) device,
Search for CPCM information arranged in the system layer of the received content stream, process the “CPCM tool list” information, and search for a CPCM tool indicated by “ToolID” in the “CPCM tool list”. “CPCM Manager” module for Baseline DVB-CPCM;
A “rights management” module for the baseline DVB-CPCM that retrieves the “CPCM rights holder” information regarding domain verification, usage rule verification, and session key distribution if necessary;
“Toolbox” for Baseline DVB-CPCM, which retains as much as possible of defined CPCM tools or tools transferred and retrieved from other sources and runs the requested tools to perform their functions Modules,
A “message router” module of the baseline DVB-CPCM for use in a message interface for sending and receiving messages between CPCM devices and communicating between compatible CPCM devices and proprietary CPCM plug-in modules;
Baseline DVB-CPCM "CAS-CPCM Converter" used to convert usage rules set by existing CA (Conditional Access System) between DVB conforming common interfaces (CI) for backward compatibility Modules,
An apparatus comprising a baseline DVB-CPCM “key generator” module for generating a pair of keys for secure content transfer. A baseline DVB-CPCM device for generating a protected content stream according to claim 3 on the content owner or operator side, comprising:
If requested, means for embedding copy control information such as a watermark in the content using the CPCM tool;
Means for encoding the content based on an existing format such as MPEG-2 using a coding tool to generate a content stream;
Means for encrypting the content stream using the CPCM tool to generate protected content;
A device further comprising: The baseline DVB-CPCM apparatus for generating content protection and copy management (CPCM) control information and generating a content protection and copy management (CPCM) stream according to claim 1, comprising:
Used to protect the content with a tool ID (identifier) assigned to any tool used to protect the content, including encryption, watermark embedding, watermark detection, digital signature As a “CPCM tool list” for enumerating all tools, a means for creating a “tool list”;
Means for creating a “CPCM Rights Holder” in a specific format by including usage rules and copy rights associated with the content;
Means for creating a “CPCM control graph” showing the protection order using different tools at different locations;
Means for generating a “CPCM tool container” for transmitting a CPCM tool having a specific CPCM tool ID;
Means for generating a “CPCM stream” and transmitting key information, control information and time stamp information relating to the use of the tool to protect the content. 6. A baseline DVB-CPCM device that transmits a “content request message” with a number of defined parameters by a CPCM device B to request content transfer from another CPCM device A according to claim 5. And
An apparatus further comprising means for transmitting a “content request message” together with a ContentID of the requested content, a CPCM_DomainID for domain confirmation, and a PublicKey used to encrypt the encryption key. 7. A baseline DVB-CPCM device that sends a “tool request message” with some defined parameters by CPCM device B to request a tool transfer from another CPCM device A according to claim 6. And
An apparatus further comprising means for sending a “tool request message” with a ToolID for the requested tool, a CPCM_DomainID for domain verification, and a PublicKey used to encrypt the tool. The apparatus of baseline DVB-CPCM of claim 6, wherein if the response is negative, the CPCM tool is retrieved from other sources,
An apparatus further comprising means for downloading from other sources in a secure manner via a return channel, a defined URL or other means. The apparatus of the baseline DVB-CPCM according to claim 5 or 6, which transmits a "content request message" and transmits a "tool request message",
Means for using a CPCM_DeviceID defined as an identifier of a CPCM device for a CPCM device in the same authorized domain;
Means for using the CPCM_DeviceID to send a message to a CPCM device having the CPCM_DeviceID and simultaneously using another CPCM_DeviceID corresponding to the address of the message sender;
A device further comprising:

Images