KR100857568B1 - Method for providing content download service using encoding/decoding based on neutral secure layer and terminal apparatus therefor - Google Patents

Abstract

The present invention relates to a method for providing a content download service through a neutral layer-based encryption / decryption that is independent of an application, and a user terminal device for the same, and independently of an application using a paid or various paid alternative payment means. In order to provide a content download service, a user terminal equipped with an application-neutral neutral security layer-based encryption / decryption agent (hereinafter referred to as an agent) may be replaced by a paid or various paid users from a server of a content distributor. Downloading an encrypted content file in which a payment policy is defined; When a user executes the downloaded encrypted content file, an agent of the user terminal reads a paid or various paid alternative payment policy of the downloaded encrypted content file; An agent of the user terminal performing a paid or various paid alternative payment means according to the read paid or various paid alternative payment policy; After execution of the paid or various paid alternative payment means, an agent of the user terminal decrypting the encrypted content file into a memory or a physical storage device; Playing the content file decrypted by the memory or the physical storage device by the corresponding application program; And if necessary, the agent of the user terminal performs the paid or various paid alternative payment means while the application is playing while decrypting the encrypted content file into a memory or a physical storage device according to the paid or paid alternative payment policy. It includes.

Ad, video ad, neutral layer, content, encryption, decryption, DRM

Description

METHOD FOR PROVIDING CONTENT DOWNLOAD SERVICE USING ENCODING / DECODING BASED ON NEUTRAL SECURE LAYER AND TERMINAL APPARATUS THEREFOR}

1 is a block diagram of a system for providing a content download service using a neutral processing security technology according to an embodiment of the present invention.

2 is a functional diagram of a neutral layer-based encryption / decryption agent according to an embodiment of the present invention.

3 is a diagram illustrating an example of re-encrypting and distributing a content file encrypted with Microsoft DRM according to the present invention.

4 is a flowchart illustrating a content download service method according to an embodiment of the present invention.

5 is a flowchart illustrating a content download service method according to another embodiment of the present invention.

<Explanation of symbols for the main parts of the drawings>

110: server 120: user terminal

121: neutral layer-based encryption / decryption agent 201: encryption and decryption manager

203: Policy Manager 205: Authentication Manager

The present invention relates to a content download service, and more particularly, to a content download service utilizing a paid or various paid alternative payment means.

At present, Internet media services in Korea are largely formed in two categories. One is sound source service derived from MP3 and MP4 based video service.

Such Internet media services are initially provided free of charge. Recently, the paying of the music contents has been expanded to other media, starting with the monetization of music contents. For example, 'Bug's Music', the nation's largest music service provider, which provided free music service, turned to full payment after the service was suspended by the Copyright Association.

Furthermore, in recent years, extensive copyright infringement investigations have been conducted on illegal video downloads using P2P, and regulations have been tightened. If this flow tightens the restrictions on content, users will no longer be able to use it for free.

Accordingly, in the Internet media service market, paid content services are provided through limited quality streaming services, such as monthly payments, based on the membership system. However, there is a problem in that users cannot meet various media usage environment needs and high quality media demands. .

Although a download service is provided by partially installing a licensed DRM using Microsoft's media server, it is a service dependent on a specific media player. In addition, there is a problem that does not solve the desire for various additional Internet business opportunities.

The present invention has been proposed to solve the above problems, and a method for providing a content download service based on a paid or various paid alternative payment means through a neutral layer-based encryption / decryption independent of the application and a user terminal device therefor The purpose is to provide.

Other objects and advantages of the present invention can be understood by the following description, and will be more clearly understood by the embodiments of the present invention. Also, it will be readily appreciated that the objects and advantages of the present invention may be realized by the means and combinations thereof indicated in the claims.

In order to achieve the above object, the present invention provides a method for providing a content download service independently to an application by using a paid or paid alternative payment means, which is an application-independent neutral security layer based encryption / decryption agent (hereinafter, Downloading, by a user terminal equipped with an “agent”, an encrypted content file in which a paid or paid alternative payment policy (video advertisement, web advertisement, electronic payment, etc.) is defined from a server of a content distribution provider; When the user executes the downloaded encrypted content file, the agent of the user terminal reads the paid or paid alternative payment policy of the downloaded encrypted content file; An agent of the user terminal performing a paid or paid alternative payment means according to the read paid or paid alternative payment policy; Decrypting the encrypted content file by an agent of the user terminal after performing the paid or paid alternative payment means; And playing the decrypted content file by the corresponding application program.

In addition, the present invention is a method for providing a content download service independently to an application by using a paid or paid alternative payment means, in a server providing a content file distribution service, a neutral security layer-based encryption independent of the application Receiving a content file encrypted by the agent from a user terminal equipped with a decryption agent (hereinafter referred to as an agent); Defining a paid or paid alternative payment policy (video advertisement, web advertisement, electronic payment, etc.) in the received encrypted content file at the server; Downloading, by another user terminal, an encrypted content file in which a paid or paid alternative payment policy is defined; When another user executes the downloaded encrypted content file, an agent of the other user terminal reading a paid or paid alternative payment policy of the downloaded encrypted content file; An agent of the other user terminal performing a paid or paid alternative payment means according to the read paid or paid alternative payment policy; Decrypting the encrypted content file by an agent of the other user terminal after performing the paid or paid alternative payment means; And playing the decrypted content file by the corresponding application program.

In addition, the present invention is a method for providing a content download service independently to an application by using a paid or paid alternative payment means, the neutral security layer-based encryption / decryption agent independent of the application (hereinafter referred to as "agent" Downloading, by the user terminal equipped with the encrypted content file in which the paid or paid alternative payment policy (video advertisement, web advertisement, electronic payment, etc.) is defined from the server of the content distributor; When the user executes the downloaded encrypted content file, the agent of the user terminal reads the paid or paid alternative payment policy of the downloaded encrypted content file; Decrypting the encrypted content file by an agent of the user terminal; And performing, by the agent of the user terminal, a paid or paid alternative payment means in accordance with the read paid or paid alternative payment policy while the corresponding application program plays the decrypted content file.

In addition, the present invention is a user terminal device for a content download service using a paid or paid alternative payment means, including an agent installed in a neutral security layer independent of the application, the agent is downloaded from a server on the Internet A policy manager configured to read a paid or paid alternative payment policy from the encrypted content file to perform a paid or paid alternative payment means; And an encryption / decryption management unit for decrypting the encrypted content file to a memory or a physical storage device.

The above objects, features and advantages will become more apparent from the following detailed description taken in conjunction with the accompanying drawings, whereby those skilled in the art may easily implement the technical idea of the present invention. There will be. In addition, in describing the present invention, when it is determined that the detailed description of the known technology related to the present invention may unnecessarily obscure the gist of the present invention, the detailed description thereof will be omitted. Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a block diagram of a system for providing a content service using a neutral processing security technology according to an embodiment of the present invention, as shown in Figure 1, the content service system according to an embodiment of the present invention, the server 110, a plurality of user terminals 120 and 140, and a P2P server 130. The server 110 and the user terminal 120 is connected to the wired / wireless Internet network.

The server 110 downloads and installs a neutral layer-based encryption / decryption agent to the user terminal 120, and also encrypts the content file and assigns a policy for paying or paying a substitute for the encrypted content file to the user terminal. Provided by 120. Here, the content file refers to various media such as an MP3 sound source file, an MP4 video file, an electronic book, and the like. The paid payment means is paid directly by the user through various payment means such as cash. As an image or video file of a survey, promotion, sales, etc., the user terminal 120 replaces the paid payment for the media service by forcibly executing the paid alternative payment means.

When the user terminal 120 accesses the server 110, the agent download unit 111 of the server 110 guides the download of the neutral layer-based encryption / decryption agent to the user terminal 120, and the user terminal ( Upon approval of 120, the neutral / based encryption / decryption agent is downloaded to the user terminal 120 and installed. Of course, the user terminal 120 may download and install a neutral layer-based encryption / decryption agent from another user terminal 140 connected by P2P other than the server 110, or store the neutral layer-based encryption / decryption agent. It can be installed using a storage medium such as a CD-ROM.

The encryption engine 112 of the server 110 encrypts the content file stored in the DB 114. In addition, the policy manager 113 of the server 110 designates a policy for paid or paid replacement payment in the content file encrypted through the encryption engine 112.

The policy designation method for the paid or paid alternative payment in the policy management unit 113 may be variously modified according to the policy of the content distribution operator operating the server 110.

First, the policy management unit 113 defines that the user terminal 120 accesses the server 110 to download the paid or paid alternative payment means in the header of the content file encrypted by the encryption engine 112, and the user terminal ( 120 accesses the server 110 according to the policy defined in the header of the encrypted content file, downloads the paid or paid alternative payment means from the server 110, and forces the same.

Secondly, the policy manager 113 downloads a policy file including paid or paid alternative payment means to the user terminal 120 separately from the content file encrypted by the encryption engine 112 and installed on the user terminal 120. The 121 reads the policy file stored in the hard disk of the user terminal 120 and forcibly performs the paid or paid alternative payment means included in the policy file. At this time, the policy management unit 113 records the information of the policy file in the header of the encrypted content file so that the agent 121 of the user terminal 120 based on the policy file information recorded in the header of the encrypted content file. Lets search for policy files. Preferably, the file name of the encrypted content file and the policy file are the same and only the file extension is set differently.

Third, the policy file including the paid or paid alternative payment means is downloaded to the user terminal 120 separately from the content file encrypted by the encryption engine 112, and the valid period of the paid or paid alternative payment means is set to When the expiration date expires, the user accesses the server 110 again to download the paid or paid alternative payment means. To this end, the policy manager 113 sets a valid period of a paid or paid alternative payment means in the header of the encrypted content file.

The user terminal 120 downloading and storing the encrypted content file in which the paid or paid alternative payment policy is specified from the server 110 is stored with the other user terminal 140 through the P2P server 130 and the paid or paid alternative payment policy. You can share this specified encrypted content file. As such, the encrypted content file in which the paid or paid alternative payment policy is specified is propagated to a plurality of user terminals 140 through a P2P service, thereby solving the inconvenience of having to download a content file by accessing a specific server 110. It is effective to expose a paid or paid alternative payment means to a large number of users.

Alternatively, the user encrypts the content file owned by the neutral layer-based encryption / decryption agent 121 installed in the user terminal 120 directly and specifies a paid or paid alternative payment policy to the other user terminal 120. I can deliver it. As described above, the method of propagating an encrypted content file to another user may propagate the content file to another user using a P2P service or through a public server.

The encryption of the server 110 encryption engine 112 and the encryption method of the neutral layer-based encryption / decryption agent 121 installed on the user terminal 120 encrypts the entire content file with an encryption key of 128 bits or more using a block encryption algorithm. Is done. Examples include SEED and ARIA. In addition, it is possible to apply domestic and international standard encryption algorithm.

More specifically, the encryption / decryption algorithm can be variously changed according to the requirements of the content distribution provider. That is, different content encryption / decryption algorithms may be used when distributing content files only to specific users for specific purposes and when distributing content files to unspecified users.

First, when distributing a content file for a specific purpose, for example for an adult or for distributing a content file for a subscribed member, the encryption engine 112 of the server 110 encrypts the content file with an encryption key of 128 bits or more. And assign to a user a paid or paid alternative payment policy. When the user executes the encrypted content file, the neutral layer-based encryption / decryption agent 121 installed in the user terminal 120 accesses and encrypts the server 110 according to the encryption information recorded in the header of the encrypted content file. Get the key. In this case, the server 110 performs user authentication based on a private certificate or a public certificate distributed by the server 110 from the user terminal 120, and in the case of a political user, encrypts an encryption key with a public key or a master key of a certificate. Transmission to the terminal 120. The neutral layer-based encryption / decryption agent 121 of the user terminal 120 decrypts the encryption key transmitted from the server 110 with the private key or the master key of the certificate and decrypts the content file with the decrypted encryption key. At this time, the neutral layer-based encryption / decryption agent 121 of the user terminal 120 is charged or paid according to the paid or paid alternative payment policy recorded in the header of the encrypted content file before decrypting the content file with the decrypted encryption key. An alternative payment means is forcibly performed on the user terminal 120, and both the paid or the paid alternative payment means are executed and the encrypted content file is decrypted. The paid or paid alternative payment policy designation method is as described above.

Next, when distributing the content file to an unspecified user, the encryption engine 112 of the server 110 encrypts the content file with an encryption key of 128 bits or more and specifies a paid or paid alternative payment policy. The encryption key is encrypted using a public key or a master key of a certificate and then stored or distributed in the encrypted content file. The encrypted content file is distributed to an unspecified user. Alternatively, the user encrypts the content file using a neutral layer-based encryption / decryption agent 121 installed on the user terminal 120, specifies a paid or paid alternative payment policy, and distributes the same to another user through a P2P or public server. do. The unspecified user who receives the content file encrypted and distributed by the server 110 or the general user performs decryption through a neutral layer-based encryption / decryption agent installed in his user terminal. That is, the neutral layer-based encryption / decryption agent first assembles the encrypted encryption key distributed in the encrypted content file (or finds the encrypted encryption key that is not distributed), or the private key or master of the certificate. Decrypt the assembled encryption key with a key. Then, according to the paid or paid alternative payment policy recorded in the header of the encrypted content file, the paid or paid alternative payment means is forcibly performed on the user terminal, and after the paid or paid alternative payment method is performed, the encrypted content file is encrypted. Decrypt with a key. The paid or paid alternative payment policy designation method is as described above.

2 is a functional diagram of a neutral layer-based encryption / decryption agent according to an embodiment of the present invention.

As shown in FIG. 2, the neutral layer-based encryption / decryption agent 121 according to the present invention is installed in a neutral secure service layer independent of an application (sound player, video player, etc.) and an operating system. It runs between the application and the operating system. Kernel and subsystem are separate operating system components. When constructing such a neutral layer, it is generally composed of only one of them, or in this layer, it plays only a role of security related to encryption / decryption. It is common. However, in the present invention, the agent 121 according to the present invention is individually or organically installed in the kernel and the subsystem, and performs not only encryption / decryption, but also paid and paid substitute payment policies (video advertisement, web advertisement, electronic payment, etc.). do.

As shown in FIG. 2, the neutral layer-based encryption / decryption agent 121 according to the present invention includes an encryption / decryption manager 201, a policy manager 203, and an authentication manager 205.

The encryption / decryption manager 201 encrypts the content file stored in the hard disk or decrypts the encrypted content file stored in the hard disk. The encryption is performed when the user encrypts the content file directly and assigns a paid or paid alternative payment policy to distribute to other users. When the user inputs an encryption command, the encryption / decryption manager 201 encrypts the content file with an encryption key of 128 bits or more. After encrypting the encryption key with a public key or a master key through a certificate managed by the authentication manager 205, the encrypted encryption key is stored or distributedly stored in the encrypted content file.

Meanwhile, decryption in the encryption / decryption manager 201 is performed when the user downloads and executes the encrypted content through the server 110 or the P2P service, that is, the application 210 calls the encrypted content file stored in the hard disk. Is performed. The decoding process can be divided into two cases.

First, the encryption / decryption manager 201 accesses the server 110 according to the encryption information recorded in the header of the encrypted content file, obtains an encryption key, and decrypts the encrypted content file into a memory or a physical storage device. When the user executes the encrypted content file stored in the hard disk, the encryption / decryption manager 201 accesses the server 110 according to the encryption information recorded in the header of the encrypted content file to obtain an encryption key. The server 110 performs user authentication based on a private certificate distributed by the server 110 or a user ID method that replaces a certificate, which is managed by the authentication manager 205. The encryption key is encrypted with a key or a master key and transmitted to the user terminal 120. The encryption / decryption manager 201 decrypts the encryption key transmitted from the server 110 to the private key or the master key of the certificate, and decrypts the content file to the memory or the physical storage device using the decrypted encryption key.

Secondly, the encryption / decryption manager 201 assembles the encryption key distributed in the encrypted content file (or finds the encryption key not distributed in the storage) and decrypts the encrypted content file into a memory or a physical storage device. will be. That is, when the user executes the encrypted content file stored in the hard disk, the encryption / decryption manager 201 distributes the encrypted encryption key stored in the encrypted content file according to the encryption information recorded in the header of the encrypted content file. After assembling (or finding an encrypted encryption key that is not distributedly stored), the assembled encryption key is decrypted through a certificate or master key managed by the authentication manager 205. The encryption / decryption manager 201 decrypts the encrypted content file to the memory or the physical storage device using the decrypted encryption key.

The performance of encryption and decryption based on this neutral security layer guarantees a decryption rate of about 110% to 115%, assuming 100% security non-application status when applying 128bit SEED and AES. That is, the buffering of the application 210 is guaranteed at the original performance, and even if the media is moved to an arbitrary point by moving the slide bar in the application 210, the original performance of the application 210 is completely guaranteed.

The policy manager 203 may use the paid or paid alternative payment policy recorded in the header of the encrypted content file before the encrypted content file is decrypted into memory or physical storage and executed by the application 210. Force a user to pay or pay alternative payment means. That is, if the paid or paid alternative payment policy defined in the header of the encrypted content file is to download and execute the paid or paid alternative payment means from the server 110, the policy manager 203 may determine the header of the encrypted content file. In accordance with the paid or paid alternative payment policy defined in the access to the server 110 to download the paid or paid alternative payment means to force the user terminal 120. Meanwhile, a paid or paid alternative payment policy file is stored in the hard disk of the user terminal 120 separately from the encrypted content file, and the information (for example, file name / location information of the policy file) is stored in the header of the encrypted content file. ) Is defined, the policy manager 203 retrieves the paid or paid alternative payment policy file from the hard disk of the user terminal 120 and selects the paid or paid alternative payment means included in the corresponding paid or paid alternative payment policy file. Force the user terminal 120.

The certificate manager 205 accepts the X.509 v3 digital certificate format and manages private certificates or public certificates distributed by the server 110, and public key infrastructure (PKI) (RSA, DH, ECC-1024 bits or more). Authentication and key exchange are performed.

As such, since the neutral layer-based encryption / decryption agent 121 according to the present invention operates between an application program and an operating system, the neutral layer-based encryption / decryption agent 121 does not collide with an encryption format recognized by an application of another company and ensures compatibility.

3 is a diagram illustrating an example of re-encrypting and distributing a content file encrypted with Microsoft DRM according to the present invention.

As shown in FIG. 3. After the content file distributor re-encrypts and distributes the content file (hereinafter referred to as 'DRM content file') 301 to Microsoft users by using Microsoft Digital Rights Management (DRM) according to the present invention, the user When executing the content file 303, the Microsoft media player 305 calls the encrypted DRM content file 303 stored on the hard disk (1).

Then, the neutral layer-based encryption / decryption agent 121 according to the present invention, the paid or paid alternative payment means such as advertising in accordance with the paid or paid alternative payment policy defined in the header of the encrypted DRM content file 303 Force the user to do this. After all of the paid or paid alternative payment means are forcibly performed, the neutral layer-based encryption / decryption agent 121 according to the present invention converts the DRM content file 303 encrypted according to the present invention into the DRM content file 301. (2) to the memory or the physical storage device. Subsequently, the Microsoft media player 305 decodes the decrypted DRM content file 301 as an original content file in a memory or a physical storage device (3).

This process, after the development user has duly obtained a file already encrypted in another enterprise's encryption format, and encrypts it with the neutral layer-based encryption / decryption agent 121 according to the present invention and their own paid and paid alternative payment policy Can be used to specify and distribute to other users.

4 is a flowchart illustrating a content download service method according to an embodiment of the present invention.

As shown in FIG. 4, first, the server 110 of a content distributor encrypts a content file and gives a paid or paid alternative payment policy to the encrypted content file to provide the user to the user through a web site (S401). .

Granting a paid or paid alternative payment policy allows a user using an encrypted content file to access the public server 110 to download a paid or paid alternative payment method. In addition, a method of allowing a user to use a content file immediately offline, through a paid or paid alternative payment means added to an offline encrypted content file, and when the predetermined time expires, the public server 110 It may be made in such a way that the connection to download a new paid or paid alternative payment means. The granting of such paid or paid alternative payment policy can be accomplished by defining a paid or paid alternative payment policy in the header of the encrypted content file. In particular, when a paid or paid alternative payment means is added to an encrypted content file and downloaded together with the user terminal 120, the file name and file location information of the paid or paid alternative payment means are downloaded together in the header of the encrypted content file. Is defined.

The user terminal 120 equipped with the neutral layer-based encryption / decryption agent 121 accesses the server 110 according to a user's input and downloads an encrypted content file to which a paid or paid alternative payment policy is granted (S403). ).

Subsequently, when the user executes the downloaded encrypted content file, that is, when the encrypted content file is executed using a specific application program (for example, Microsoft Media Player, Winamp, Real Player, etc.), the user terminal ( The neutral layer-based encryption / decryption agent 121 mounted at 120 reads the paid or paid alternative payment policy defined in the header of the downloaded encrypted content file (S405).

The neutral layer-based encryption / decryption agent 121 performs a paid or paid alternative payment means to the user according to the paid or paid alternative payment policy defined in the header of the downloaded encrypted content file (S407). For example, the neutral layer-based encryption / decryption agent 121 connects to the server 110 and downloads and enforces a paid or paid alternative payment means, or a paid or paid alternative payment including a paid or paid alternative payment means. When a policy file is downloaded together with the encrypted content file, the neutral ray-based encryption / decryption agent 121 reads and enforces the paid or paid alternative payment means from the paid or paid alternative payment policy file. This operation of the agent 121 is determined according to the policy of the content file distribution provider. If the paid or paid alternative payment policy file is downloaded with an encrypted content file, the paid or paid alternative payment policy file is downloaded to the same directory as the encrypted content file, preferably with the same file name and different file extension. .

As such, after forcibly performing the paid or paid alternative payment means, the neutral layer-based encryption / decryption agent 121 decrypts the encrypted content file according to the encryption information recorded in the header of the encrypted content file. The encryption key for decryption (S409). For example, when the agent 121 connects to the server 110 according to the encryption information recorded in the header of the encrypted content file, the server 110 may access a private certificate (distributed by the server 110) or a public certificate and User authentication is performed based on the individual user ID. If the user is a political user, the encryption key is encrypted with a public key or a master key and transmitted to the user terminal 120. Then, the agent 121 decrypts the encryption key transmitted from the server 110 to a private key or a master key. Alternatively, the agent 121 assembles an encrypted encryption key distributed in the encrypted content file according to the encryption information recorded in the header of the encrypted content file (or generates an encrypted encryption key that is not distributedly stored). And decrypt it with the private or master key of the certificate. This encryption key decryption method is selected according to the policy of the content file distribution provider. The order of steps S407 and S409 may be changed in accordance with the design scheme.

After performing the paid or paid alternative payment means and decrypting the encryption key, the neutral layer-based encryption / decryption agent 121 decrypts the encrypted content file to memory or physical storage device using the decrypted encryption key. (S411). Subsequently, the application program displays the decrypted content file (S413). If necessary according to the paid or paid alternative payment policy, the agent 120 of the user terminal 120 may perform paid or various paid alternative payment means while the application plays the decrypted content file. That is, a paid or paid alternative payment means is performed while the content file is being played. In this case, the step S407 may not be performed, or after the step S407 is performed, the paid or paid alternative payment means may be performed once again while the application program plays the content file.

5 is a flowchart illustrating a content download service method according to another embodiment of the present invention.

As shown in FIG. 5, a user first encrypts a content file stored in the user terminal 120 using the neutral layer-based encryption / decryption agent 121 mounted on the user terminal 120 (S501). The encrypted content file is registered in the public server 110 and a paid or paid alternative payment policy is granted (S503).

Granting a paid or paid alternative payment policy allows a user using an encrypted content file to access the public server 110 to download a paid or paid alternative payment method. In addition, a method of allowing a user to use a content file immediately offline, through a paid or paid alternative payment means added to an offline encrypted content file, and when the predetermined time expires, the public server 110 It may be made in such a way that the connection to download a new paid or paid alternative payment means. The granting of such paid or paid alternative payment policy can be accomplished by defining a paid or paid alternative payment policy in the header of the encrypted content file. In particular, when a paid or paid alternative payment means is added to an encrypted content file and downloaded together with the user terminal, the file name and file location information of the paid or paid alternative payment means downloaded together are defined in the header of the encrypted content file. .

As such, the encrypted content file to which the paid or paid alternative payment policy is granted is distributed to other users (S505). That is, another user accesses the public server 110 to download an encrypted content file to which the paid or paid alternative payment policy is granted, or the encrypted to which the paid or paid alternative payment policy is granted from the public server 110. The encrypted content file is downloaded from the user who downloaded the content file using a P2P service.

The other user then executes the downloaded encrypted content file. At this time, when executing the encrypted content file using a specific application program (for example, Microsoft Media Player, Winamp, etc.), the neutral layer-based encryption / decryption agent mounted on the user terminal is encrypted. The paid or paid alternative payment policy defined in the header of the content file is read (S507).

The neutral layer-based encryption / decryption agent performs the paid or paid alternative payment means to the user according to the paid or paid alternative payment policy defined in the header of the downloaded encrypted content file (S509). For example, the neutral layer-based encryption / decryption agent accesses the public server 110 to download and enforce a paid or paid alternative payment method, or a paid or paid alternative payment policy file including paid or paid alternative payment means. When the content is downloaded with the encrypted content file, the neutral ray based encryption / decryption agent reads and enforces the paid or paid alternative payment means from the paid or paid alternative payment policy file. This behavior of the agent is determined by the policy of the content file distribution provider.

As such, after forcibly executing the paid or paid alternative payment means, the neutral layer-based encryption / decryption agent decrypts the encrypted content file according to the encryption information recorded in the header of the encrypted content file. Decode the (S511). For example, when the agent accesses the public server 110 according to the encrypted information recorded in the header of the encrypted content file, the public server 110 performs user authentication based on a private certificate or a public certificate and an individual user ID. In the case of a party user, the encryption key is encrypted with a public key or a master key and transmitted to the user terminal. The agent then decrypts the encryption key sent from the server into a private or master key. Alternatively, the agent assembles the encrypted encryption key distributed in the encrypted content file according to the encryption information recorded in the header of the encrypted content file (or finds the encrypted encryption key which is not stored in the distributed) certificate. Decrypt with private key or master key. This encryption key decryption method is selected according to the policy of the content file distribution provider. In addition, the order of step S509 and step S511 may be changed in accordance with the design scheme.

After performing the paid or paid alternative payment means and decrypting the encryption key, the neutral layer-based encryption / decryption agent decrypts the encrypted content file to a memory or a physical storage device using the decrypted encryption key (S513). . Subsequently, the application program displays the decrypted content file (S515). If necessary according to the paid or paid alternative payment policy, the agent of the user terminal may perform paid or various paid alternative payment means while the application plays the decrypted content file. That is, a paid or paid alternative payment means is performed while the content file is being played. In this case, the step S509 may not be performed, or the paid or paid alternative payment means may be performed once again while the application program plays the content file after the step S509 is performed.

The content download service using the neutral layer-based encryption / decryption technology as described above may be applied to a video advertising business or an advertising business (for example, a car salesman, an insurance sales, a wedding, etc.) of an individual operator. An individual who wishes to run an advertising business purchases certain content, then encrypts the content with a neutral layer-based encryption / decryption agent and places the advertisement directly on the encrypted content (e.g., business cards, greeting videos, stores). Information, etc.) can be added and distributed.

In addition, the present invention can be applied to electronic commerce and membership (royalty business). In a general retail store or Dongdaemun shopping mall, a store owner invites visitors to a public server membership, and the store owner selects and purchases content that meets the customer's taste when a new product arrives at the store or conducts an event. Encrypt and add the transaction page of the store's home page as a paid or paid alternative payment method so that the customer can download it. The customer places a real-time order and purchases a product directly from the transaction page of the store home page. In addition, the present invention can be applied to used goods trading business, online lecture business and the like.

As described above, the method of the present invention may be implemented as a program and stored in a recording medium (CD-ROM, RAM, ROM, floppy disk, hard disk, magneto-optical disk, etc.) in a computer-readable form. Since this process can be easily implemented by those skilled in the art will not be described in more detail.

The present invention described above is capable of various substitutions, modifications, and changes without departing from the technical spirit of the present invention for those skilled in the art to which the present invention pertains. It is not limited by the drawings.

The present invention as described above, by providing a content download service by using advertising, promotional video, etc. as a paid or paid alternative payment means based on a neutral security layer independent of the application, without compromising the rights of the content owner for the content It is able to activate the secure content download service based on the high quality service beyond the limited quality of the existing streaming service, and it has the effect of meeting consumers' demand for high quality and activating the video advertising market. In addition, it has the effect of providing new business opportunities for small business owners and creating new niche P2P businesses.

Claims (17)

A method of providing a content download service independently of an application by using a paid or paid alternative payment method. (a) A user terminal equipped with an application-independent, neutral security layer-based encryption / decryption agent (hereinafter referred to as an "agent") may have a paid or paid alternative payment policy defined in the header from the server of the content distributor. Downloading an encrypted content file; (b) when the user executes the downloaded encrypted content file, the agent of the user terminal reads the paid or paid alternative payment policy defined in the header of the downloaded encrypted content file; (c) the agent of the user terminal performing the paid or paid alternative payment means according to the read paid or paid alternative payment policy; (d) decrypting the encrypted content file by an agent of the user terminal after performing the paid or paid alternative payment means; And (e) playing the decrypted content file by the corresponding application program. The method of claim 1, In step (c), An agent of the user terminal accessing a server of the content distribution provider; And And downloading and performing the paid or paid alternative payment means from the connected server. The method of claim 1, The encrypted content file downloaded from the server includes a paid or paid alternative payment policy file, In step (c), Reading, by the agent of the user terminal, the paid or paid alternative payment means from the paid or paid alternative payment policy file; And And performing the read paid or paid alternative payment means. The method of claim 2 or 3, In step (d), the agent of the user terminal, the content download service method, characterized in that for decrypting the encrypted content file to a memory or physical storage device. The method of claim 2 or 3, In step (d), An agent of the user terminal receiving an encryption key encrypted with a public key or a master key from the server; Decrypting the received encrypted encryption key with a private key or a master key; And Decrypting the encrypted content file with a decrypted encryption key into a memory or a physical storage device. The method of claim 2 or 3, In step (d), Decrypting, by an agent of the user terminal, an encryption key stored in the encrypted content file; And Decrypting the encrypted content file with a decrypted encryption key into a memory or a physical storage device. A method of providing a content download service independently of an application by using a paid or paid alternative payment method. (a) In a server providing a content file distribution service, a content file encrypted by the agent is obtained from a user terminal equipped with an application-independent neutral security layer-based encryption / decryption agent (hereinafter referred to as an agent). Receiving; (b) defining a paid or paid alternative payment policy in the received encrypted content file at the server; (c) downloading, by another user terminal, an encrypted content file in which a paid or paid alternative payment policy is defined from the server; (d) when another user executes the downloaded encrypted content file, an agent of the other user terminal reads the paid or paid alternative payment policy of the downloaded encrypted content file; (e) an agent of the other user terminal performing the paid or paid alternative payment means according to the read paid or paid alternative payment policy; (f) decrypting the encrypted content file by an agent of the other user terminal after performing the paid or paid alternative payment means; And (g) playing the decrypted content file by the corresponding application program. The method of claim 7, wherein Step (f), Decrypting an encryption key stored in the encrypted content file by an agent of the other user terminal; And Decrypting the encrypted content file with a decrypted encryption key into a memory or a physical storage device. The method of claim 7, wherein Step (f), An agent of the other user terminal receiving an encryption key encrypted with a public key or a master key from the server; Decrypting the received encrypted encryption key with a private key or a master key; And Decrypting the encrypted content file with a decrypted encryption key into a memory or a physical storage device. The method according to any one of claims 7 to 9, And sharing the encrypted content file with another user terminal through a peer-to-peer service in the other user terminal. A method of providing a content download service independently of an application by using a paid or paid alternative payment method. (a) In a server providing a content file distribution service, the agent encrypts and pays or pays from a user terminal equipped with an application-independent neutral security layer-based encryption / decryption agent (hereinafter referred to as an agent). Receiving a content file defining an alternative payment policy; (b) downloading, by another user terminal, an encrypted content file in which a paid or paid alternative payment policy is defined from the server; (c) when another user executes the downloaded encrypted content file, an agent of the other user terminal reads the paid or paid alternative payment policy of the downloaded encrypted content file; (d) an agent of the other user terminal performing a paid or paid alternative payment means according to the read paid or paid alternative payment policy; (e) decrypting the encrypted content file by an agent of the other user terminal after performing the paid or paid alternative payment means; And (f) playing the decrypted content file by the corresponding application program. A method of providing a content download service independently of an application by using a paid or paid alternative payment method. (a) A user terminal equipped with an application-neutral neutral security layer-based encryption / decryption agent (hereinafter referred to as an "agent") may have a paid or paid alternative payment policy (video advertisement, web Downloading an encrypted content file in which an advertisement, an electronic payment, etc.) are defined; (b) when the user executes the downloaded encrypted content file, the agent of the user terminal reads the paid or paid alternative payment policy of the downloaded encrypted content file; (c) the agent of the user terminal decrypting the encrypted content file; And (d) while the corresponding application plays the decrypted content file, an agent of the user terminal performs a paid or paid alternative payment means according to the read paid or paid alternative payment policy; Way. A user terminal device for a content download service utilizing paid or paid alternative payment means, Include agents installed in a neutral security layer that is independent of the application, The agent, A policy management unit that reads a paid or paid alternative payment policy from an encrypted content file downloaded from a server on the Internet and performs a paid or paid alternative payment means; And And a decryption manager to decrypt the encrypted content file into a memory or a physical storage device. The method of claim 13, Further comprising a certificate management unit for managing a PKI-based certificate, The encryption and decryption management unit, Receiving an encryption key encrypted with a public key or a master key from the server, decrypting the private key or master key of the certificate, and decrypting the encrypted content file with a decrypted encryption key to a memory or a physical storage device Terminal device. The method of claim 13, Further comprising a certificate management unit for managing a PKI-based certificate, The encryption and decryption management unit, And decrypting an encrypted encryption key stored in the encrypted content file with a private key or a master key of the certificate, and decrypting the encrypted content file with a memory or a physical storage device using the decrypted encryption key. The method according to any one of claims 13 to 15, The policy management unit, The user terminal device, characterized in that for connecting to the server to download the paid or paid alternative payment means. The method according to any one of claims 13 to 15, The encrypted content file downloaded from the server includes a paid or paid alternative payment policy file, The policy management unit, And extracting a paid or paid alternative payment means from the paid or paid alternative payment policy file.

Images