KR100959380B1 - Flash contents supplying method - Google Patents

Abstract

PURPOSE: A flash contents supplying method is provided to block automatic exposure of flash contents stored in a client terminal, thereby protecting web business logic and preventing mass production of piracy contents. CONSTITUTION: If a client terminal requests a flash contents to flash providing server, a flash providing server transmits the first flash operating module including file ID and a user certification key to a terminal(S12). The operating module generates an asymmetric public and a private key. An operating module transmits the asymmetric public key, the file ID and a user authentication key to the flash providing server and request the second contents(S14). The flash providing server performs a client authentication to a user authentication key(S16).

Description

Flash content delivery method {FlASH CONTENTS SUPPLYING METHOD}

The present invention relates to a flash content providing method, and to a flash content providing method that can prevent the automatic exposure of flash content stored in the client terminal to protect the web business logic and prevent the mass production of illegally duplicated content.

Flash was a web animation tool developed in 1996 by a small venture company called FutureWave in the United States, which was originally released under the name FutureSplash Animator. At that time, it was not very popular. However, due to its power and the potential for its usefulness on the web, Macromedia, which had been targeting the web multimedia market, acquired FutureWave in January 1997, and since then has produced the most generalized web animation. It is positioned as a tool.

The flash is basically based on vector drawing, which is different from conventional bitmap graphics (eg GIF, JPEG, BITMAP, PCX, etc.). Curve) and a set of figures, and the object, which is a component of the vector image, has its own characteristic values such as color, figure, outline, size, and position on the screen. The independence of can be maintained uniquely, allowing modifications while maintaining the original clean look exactly without affecting other objects in the entire graphic. In particular, by the above vector drawing method, the flash can add various animation effects, action scripts, and / or various event effects, and because it uses a tag format, it is highly scalable and uses infinite clients over a network. It supports a high performance compression format that can be transmitted to the terminal, and can be executed independently of the operating system with a predetermined plug-in.

In addition to the above vector drawing, the flash can insert various digital contents such as graphic, sound, and video of the existing bitmap method, and in this case, the characteristics of the flash (for example, various animation effects and action scripts) can be inserted. , And / or the addition of various event effects, or high performance compression, etc.), the current Flash file is a SWF (Shock Wave File) file is easily found on many websites.

Flash files from sites actually accessed by clients are automatically stored in the Temporary Internet Files folder on the client computer, so anyone can save this flash file to their personal computer.

However, there is a problem that the stored flash file can be restored to the original source code through a decompiler program.

In other words, the saved flash file is exposed to decompilation, so you can use the decompile tool to hack the development code inside the file, and to expose the main information such as the main server URL or parameters called through the hacked source code. It is possible to hack such as calling a server through the manipulated value, and the flash application source code is exposed as it is, so that the core technologies of the developing company can be passed on to other competitors.

The present invention has been made to solve the above problems, (a) the first time the client terminal requests the flash content to the flash providing server, the flash providing server is a primary containing a file ID and a userCertificate key (userCertKey) Extracting the flash drive module and transmitting the extracted flash drive module to the corresponding client terminal; (b) When the client terminal receives the primary flash drive module, the drive module generates an asymmetric public key and a private akey, and includes them in the generated asymmetric public key and the drive module. The file ID and the user certificate key (userCertKey) are transmitted to the flash providing server to request the secondary content, and the flash providing server receiving the request for the secondary content uses the received user certificate key (userCertKey) to authenticate the client. Performing; (c) the flash providing server extracting the requested flash content (swfFILE) using the file ID transmitted from the client terminal; (d) generating a symmetric key (SKey) for content encryption by the flash providing server; (e) generating, by the flash providing server, a file header value; (f) encrypting the generated symmetric key (SKey) by using the asymmetric public key (PublicAkey) delivered from the client terminal by the flash providing server; (g) encrypting the flash content (swfFILE) extracted by the server using a symmetric key (SKey) generated by the flash providing server; (h) the flash providing server packetizes the file header value generated by the server, the encrypted symmetric key (SKey) and the encrypted flash content (swfFILE), and transmits the second flash execution content to the corresponding client terminal. step; And (i) decrypting, by the client terminal, the secondary flash file provided as execution content by using the decryption unit and the asymmetric private key of the primary flash driving module transmitted to the client terminal by the flash providing server; Characterized in that it comprises a.

Looking at the features of the present invention in detail, the first flash drive module transmitted to the client terminal in the step (a) is automatically stored in a flash file format in the temporary Internet file folder of the client terminal is exposed to the user of the client terminal and The driving module serves to block decompilation of the secondary flash contents by providing only a module communicating with the flash providing server to call the secondary flash contents.

In addition, the secondary flash content file transmitted from the flash providing server in step (i) is stored in an encrypted state in a temporary internet folder of the terminal and encrypted after decrypting the secondary flash content through the asymmetric private key by the primary flash drive module. Since all the keys used in the disappears, it cannot be re-executed unless the flash provisioning server is authenticated, so that the keys are not directly exposed to the user.

Specifically, the step (i), the step (i) is (i-1) the secondary flash transmitted from the flash providing server by the client terminal using an asymmetric private key (PrivateAKey) of the primary flash drive module Decrypting a symmetric key (SKey) of execution content; And (i-2) decrypting, by the client terminal, the flash content (swfFILE) of the secondary flash execution content transmitted from the flash providing server using the decrypted symmetric key (SKey). Characterized in that it comprises a.

In another aspect, as the flash providing server sequentially provides the primary flash driving module and the secondary flash execution content, a user authentication key (userCertKey) and a file generated at the server when the primary flash driving module is provided. ID and time information, userCertKey, asymmetric public key, file ID and time information sent from client when requesting secondary content, and symmetric key generated from server when providing secondary flash execution content (SKey), header information and time information are stored and managed.

Flash content providing method according to the present invention has the effect that it is possible to block the automatic exposure of the flash content stored in the client terminal to protect the web business logic and prevent the mass production of illegal pseudo-copy content.

In particular, since the encrypted SWF file remains in the Internet temporary file folder of the client computer, the file cannot be decompiled even if the file is obtained.

In addition, since the symmetric key is used to encrypt the file, the file size does not change and the encryption time is very short.

In addition, since the symmetric key (SKey) and the asymmetric key (PublicAkey, PrivateAkey) are constantly changed each time the Flash content is requested, the encrypted file is also changed continuously, making decryption more impossible.

In addition, the primary flash drive module randomly generates an asymmetric public key (PublicAkey) and an asymmetric public key (PrivateAkey) and transmits only the asymmetric public key (PublicAkey) to the flash providing server, the flash providing server asymmetric received The secondary flash execution content is encrypted with the PublicAkey and sent to the client terminal. The encrypted secondary flash execution content received by the client terminal can be decrypted only by the requesting client using the asymmetric private key of the primary flash drive module.

Hereinafter, an embodiment according to the present invention will be described with reference to FIGS. 1 and 2.

1 is a view for explaining the entire system to which the flash content providing method according to the present invention is applied.

As shown in FIG. 1, in the flash content providing system to which the present invention is applied, a plurality of client terminals 200 connected to the flash providing server 100 through the flash providing server 100 and the Internet to receive flash contents are provided. It is configured to include.

The flash providing server 100 sequentially provides the first flash driving module and the second flash execution content according to a request of the client terminal 200 connected through the Internet, and automatically stores them in the client terminal by the encryption / decryption method. This protects the content and prevents access to key technical code and data by preventing clients from decompiling the Flash content.

The flash providing server 100 may include a connection unit 110, a content request identification unit 120, a primary content request processing unit 130, a secondary content request processing unit 140, a user authentication unit 150, and a content detection unit 160. ), The content DB 170, the content encryption unit 180 and the verification information management unit 190.

The connection unit 110 receives the flash content requested by the client terminal 200 on the web through the Internet.

The content request identification unit 120 determines whether the flash content requested through the access unit 110 is a primary content request or a secondary content request.

In this case, the content request determination of the content request identification unit 120 determines whether the content request of the client terminal 200 includes a user authentication key (userCertKey), an asymmetric key (AKey), a public akey and a file ID. If it does not include such user authentication key (userCertKey), asymmetric public key (PublicAkey) and file ID, it is determined as the primary content request, and in other cases, userCertKey (userCertKey), asymmetric public key If (PublicAkey) and file ID are included, it is determined as a secondary content request.

When the primary content request processing unit 130 is determined as the primary content request through the content request identification unit 120, the primary content request processing unit 130 extracts the primary flash drive module for the requested flash from the flash drive module DB 131. It is transmitted to the client terminal 200 through the connection unit 110.

The primary flash drive module includes an authentication key manager 232, a file ID manager 233, an asymmetric key generator 234, and a decryptor 235. The primary flash drive module is automatically stored in a flash file format (for example, ooo.swf) in a temporary internet files folder of the client terminal 200 that has made a primary content request, and thus is used by a user of the client terminal 200. And the role of the driving module blocks the decompilation of the secondary flash content by providing only a module communicating with the flash providing server to call the secondary flash content.

The authentication key manager 232 manages a user certificate key (userCertKey) given to the corresponding client terminal 200 according to the corresponding primary content request. This user certificate key (userCertKey) is delivered from the server side to prevent abnormal client access, and only the client that transmits the user certificate key (userCertKey) together to access the secondary flash content.

The file ID management unit 233 manages actual physical file information on the secondary flash execution content when the secondary content is requested.

The asymmetric key generation unit 234 generates an asymmetric public key (PublicAkey) and an asymmetric private key (PrivateAKey) of the client terminal 200 according to the RSA asymmetric cryptography.

The decoder 235 is responsible for decrypting the secondary flash execution content when the secondary flash execution content is transmitted later.

A more detailed description of this primary flash drive module will be further embodied in the following description of the client terminal 200.

When the secondary content request processing unit 140 determines the secondary content request through the content request identification unit 120, the client request for the requested flash, symmetric key (SKey) generation, and content encryption are performed. The secondary flash execution content of the state is transmitted to the client terminal 200 through the connection unit 110.

At this time, the content request determination of the content request identification unit 120 is determined based on whether the content request of the client terminal 200 includes a user authentication key (userCertKey), an asymmetric public key (PublicAkey) and a file ID. If the user certificate key (userCertKey), asymmetric public key (PublicAkey) and the file ID are not included, they are determined as the primary content request. Is included, it is determined as a secondary content request.

The user authentication unit 150 includes a user authentication key (userCertKey) included in the primary flash driving module received from the flash providing server when the client terminal 200 requests the first flash content, and the client terminal 200 performs the secondary When the content request is made, the client authentication is performed by comparing with the user certificate key (userCertKey) sent to the flash providing server.

The content detection unit 160 requests the flash content (swfFILE) requested using the file ID transmitted from the client terminal 200 after authentication of the user authentication unit 150 when the client terminal 200 requests the secondary content. Is extracted by searching in the content DB (170).

In this case, the encryption step is performed by transmitting the file ID to the client and sending the file ID to the server again so as to extract the flash content corresponding to the file ID from the server. Even if the contents of the client-server communication performed in the hacking are exposed to hacking, etc., only the file ID is exposed, thereby preventing the hacking of the call to the main contents.

In the description and drawings of the present invention, the content DB 170 is described and illustrated as a configuration included in the flash providing server 100, but the principle of the present invention is not limited thereto, and the content DB 170 is not limited thereto. It is also possible to operate as a database server.

The content encryptor 180 encrypts the flash content swfFILE extracted through the content detector 160.

In more detail, the content encryption unit 180 includes a symmetric key generation unit 181, a header generation unit 182, a symmetric key encryption unit 183, a content encryption unit 184, and a packet generation unit 185. Is provided.

The symmetric key generation unit 181 described above generates a symmetric key (SKey) for primary content encryption.

Since the symmetric key SKey may have a large file size, a symmetric key algorithm is used. 128-bit encryption algorithms (eg AES, SEED) can be used to increase the encryption strength.

The header generation unit 182 generates a file header value such as encryption status, version information, AKey Length of the symmetric key (SKey) encrypted with an asymmetric public key (PublicAkey), and the like.

The symmetric key encryptor 183 encrypts the symmetric key SKey generated by the symmetric key generator 181 using the asymmetric public key PublicAkey transmitted from the client terminal 200 (PublicAkey {SKey). }).

The content encryption unit 184 encrypts the extracted flash content swfFILE using the symmetric key SKey generated by the symmetric key generation unit 181 (SKey {swfFILE}).

The packet generator 185 may include a file header value generated by the header generator 182, a symmetric key (SKey) encrypted by the symmetric key encryptor 183, and a flash encrypted by the content encryptor 184. The content is combined and packetized (see FIG. 2).

The packetized secondary flash execution content is transmitted to the corresponding client terminal 200 through the connection unit 110.

On the other hand, the verification information management unit 190 sequentially provides the primary flash drive module and the secondary flash execution content, the user authentication key (userCertKey), file ID generated in the server when providing the primary flash drive module And time information, a user certificate key (userCertKey), asymmetric public key (PublicAkey), file ID, and time information transmitted from the client when requesting the secondary content, and a symmetric key generated from the server when providing the secondary flash execution content ( SKey), header information, and time information are stored and managed.

By the data exchange record of the verification information management unit 190, the entire flash content providing process is stored, thereby leaving traces of hacking or data leakage of the client, thereby enabling backtracking.

Meanwhile, the client terminal 200 requesting flash contents to the flash providing server 100 may include a display 240 for displaying flash contents, an internet browser 220 for driving the internet, and a memory for storing flash contents. The unit 230 and a control unit 210 for controlling each unit.

Here, the memory unit 230 stores the primary flash driving module transmitted from the flash providing server 100. The primary flash driving module is a temporary internet file of the corresponding memory unit 230. Folder is automatically stored in a flash file format (for example, ooo.swf) and exposed to the user of the client terminal 200, but the role of the driving module is to communicate with the flash providing server to call the secondary flash contents. Providing only prevents decompilation of secondary Flash content.

As described above, the primary flash drive module converts the file byte information into a valid file so that it can be executed only after authentication, and this process is performed by exchanging data between the primary flash drive module of the client and the server and by itself. Implemented by the decryption function.

That is, the primary flash drive module stored in the memory unit 230 according to the primary content request by the client terminal 200 includes an authentication key manager 232, a file ID manager 233, and an asymmetric key generator 234. And a decoder 235.

The authentication key manager 232 manages a user certificate key (userCertKey) given to the client terminal 200 from the flash providing server 100 according to the corresponding primary content request. The user certificate key (userCertKey) is delivered from the server side to prevent abnormal access of the client, only the client that transmits the user certificate key (userCertKey) can access the flash content.

The file ID manager 233 manages a file ID for the requested flash content when the primary content request is made.

The asymmetric key generation unit 234 generates an asymmetric public key (PublicAkey) and an asymmetric private key (PrivateAKey) of the client terminal 200 according to the RSA asymmetric key cryptography.

The decryption unit 235 decrypts the flash file provided as the secondary flash execution content encrypted by the flash provision server 100.

In more detail, the decryption unit 235 encrypts the secondary flash execution content transmitted from the flash providing server 100 by using the asymmetric private key generated from the asymmetric key generation unit 234. Decrypts the generated symmetric key (SKey) (PrivateAKey {PublicAkey {SKey}} ^-1 ).

In addition, the decryption unit 235 decrypts the encrypted flash content (swfFILE) of the secondary flash execution content transmitted from the flash providing server 100 using the decrypted symmetric key (SKey) (SKey {SKey). {swfFILE}} ^-1 ).

The decrypted flash content is managed as a secondary flash content 236 in the primary flash drive module, so that the client terminal 100 loads the flash file, but all the keys used for encryption are lost. If not, it cannot be re-executed and is not directly exposed to the user.

3, the overall flow of the flash content providing method according to the present invention will be described.

First, the client terminal 100 requests the flash content to the flash providing server 100 connected through the Internet (S10).

In response to the flash primary content request of the client terminal 100, the primary flash driving module is extracted from the flash driving module DB 131 and transmitted to the corresponding client terminal 200 through the connection unit 110 (S12). ).

Accordingly, the transmitted primary flash drive module is automatically stored in a flash file format (for example, ooo.swf) in a temporary Internet files folder of the corresponding client terminal 100 to the user of the client terminal 200. Although exposed, the role of the drive module blocks the decompilation of the secondary flash content by providing only a module that communicates with the flash providing server to invoke the secondary flash content.

The client terminal 100 extracts a user authentication key (userCertKey) and a file ID through the authentication key manager 232 and the file ID manager 233 included in the primary flash drive module, and the primary flash drive module Generate asymmetric public key (PublicAkey) and asymmetric private key (PrivateAkey), and transfer the generated asymmetric public key (PublicAkey) and the file ID and user authentication key (userCertKey) included in the drive module to the flash providing server. The content is requested (S14).

Accordingly, the flash providing server 100 includes a user authentication key (userCertKey) included in the primary flash driving module received from the flash providing server when the client terminal 200 requests the first flash content through the user authentication unit 150. ) Is compared with the user authentication key (userCertKey) that the client terminal 200 transmits to the flash providing server when requesting the second content (S16).

When the client authentication is completed, the flash providing server 100 searches for and extracts the requested flash content (swfFILE) from the content DB 170 using the file ID transmitted from the client terminal 200 (S18). ).

Thereafter, the flash providing server 100 performs encryption on the extracted file through the content encryption unit 180. This will be described in detail below.

First, the flash providing server 100 generates a symmetric key (SKey) for primary content encryption through the symmetric key generation unit 181 (S20).

The flash providing server 100 generates a file header value such as encryption key, version information, AKey Length, etc., encrypted with asymmetric public key (PublicAkey), through the header generator 182. (S22).

The flash providing server 100 encrypts the symmetric key (SKey) generated in step S20 through the symmetric key encryption unit 183 using the asymmetric public key (PublicAkey) transmitted from the client terminal 200. (PublicAkey {SKey}) (S24).

In addition, the flash providing server 100 encrypts the extracted flash content swfFILE using the symmetric key SKey generated by the symmetric key generation unit 181 through the content encryption unit 184 (SKey). {swfFILE}) (S26).

The flash providing server 100 may include a file header value generated by the header generator 182 and a symmetric key encrypted by the symmetric key encryptor 183 through the packet generator 185 and the content encryptor ( In step 184, the encrypted flash content is combined and packetized (see FIG. 2), and transmitted to the corresponding client terminal 200 through the connection unit 110 (S26).

The client terminal 200 receiving the secondary flash execution content from the flash provision server 100 decodes the flash file provided as the secondary flash execution content through the decryption unit 235 (S30).

Referring to step S30 in more detail, the decryption unit 235 is a secondary flash transmitted from the flash providing server 100 by using an asymmetric private key (PrivateAKey) generated from the asymmetric key generation unit 234 Decrypt the symmetric key (SKey) of execution content (PrivateAKey {PublicAkey {SKey}} ^-1 ).

In addition, the decryption unit 235 decrypts the flash content swfFILE of the secondary flash execution content transmitted from the flash providing server 100 by using the decrypted symmetric key SKey (SKey {SKey {swfFILE). }} ^-1 ).

The decrypted flash content is managed as a secondary flash content 236 in the primary flash drive module, so that the client terminal 100 loads the flash file, but all the keys used for encryption are lost. If not, it cannot be re-executed and is not directly exposed to the user.

The present invention described above is capable of various substitutions, modifications, and changes without departing from the technical spirit of the present invention for those skilled in the art to which the present invention pertains. It is not limited to the drawings shown.

1 is a view for explaining the entire system to which the flash content providing method according to the present invention is applied.

2 is a diagram for explaining a file format of secondary flash execution content according to the present invention;

3 is a view for explaining the overall flow of the flash content providing method according to the present invention.

Claims (5)

delete (a) when the client terminal requests flash contents from the flash providing server for the first time, the flash providing server extracts a primary flash driving module including a file ID and a userCertificate Key (userCertKey) and transmits it to the corresponding client terminal; (b) When the client terminal receives the primary flash driving module, the driving module generates the asymmetric public key and the private akey, and includes the generated asymmetric public key and the driving module in the generated asymmetric public key. The file ID and the user certificate key (userCertKey) are transmitted to the flash providing server to request the secondary content, and the flash providing server receiving the request for the secondary content uses the received user certificate key (userCertKey) to authenticate the client. Performing; (c) the flash providing server extracting the requested flash content (swfFILE) using the file ID transmitted from the client terminal; (d) generating a symmetric key (SKey) for content encryption by the flash providing server; (e) generating, by the flash providing server, a file header value; (f) encrypting the generated symmetric key (SKey) by using the asymmetric public key (PublicAkey) delivered from the client terminal by the flash providing server; (g) encrypting the flash content (swfFILE) extracted by the server using a symmetric key (SKey) generated by the flash providing server; (h) the flash providing server packetizes the file header value generated by the server, the encrypted symmetric key (SKey) and the encrypted flash content (swfFILE), and transmits the second flash execution content to the corresponding client terminal. step; And (i) decrypting, by the client terminal, the secondary flash file provided as execution content by using the decryption unit and the asymmetric private key of the primary flash driving module transmitted to the client terminal by the flash providing server; Including, The primary flash drive module transmitted to the client terminal in step (a) is automatically stored in a flash file format in a temporary internet file folder of the client terminal and exposed to the user of the client terminal, but the role of the drive module is secondary flash content. Flash content providing method to block the decompile of the secondary flash content by providing only a module in communication with the flash providing server to call. 3. The method of claim 2, The secondary flash content file transmitted from the flash providing server in step (i) is stored in an encrypted state in a temporary internet folder of the terminal, and the primary flash drive module decrypts the secondary flash content through an asymmetric private key and then encrypts the secondary flash content file. Since all used keys disappear, the flash content providing method is not directly exposed to the user because it cannot be re-executed unless the flash providing server is authenticated. 3. The method of claim 2, In the step (i), the flash terminal providing the decryption unit and the private AKey of the primary flash drive module, the client terminal using the asymmetric private key (PrivateAKey) of the primary flash drive module the flash providing server Decrypting a symmetric key (SKey) of the secondary flash execution content transmitted from the; And Decrypting, by the client terminal, the flash content (swfFILE) of the secondary flash execution content transmitted from the flash providing server by using the decrypted symmetric key (SKey); Flash content providing method comprising a. 3. The method of claim 2, As the flash providing server provides the primary flash driving module in step (a) and sequentially provides the secondary flash execution content in step (h), a user generated in the server when providing the primary flash driving module is provided. When providing the authentication key (userCertKey), file ID and time information, the user certificate key (userCertKey), asymmetric public key (PublicAkey), file ID and time information transmitted from the client when the secondary content is requested, and the secondary flash execution content. And storing and managing a symmetric key (SKey), header information, and time information generated at the server.

Images