KR102305691B1 - Method for drm packaging for real-time on-demand digital content and computing device for executing the method - Google Patents

Abstract

DRM PACKAGING METHOD FOR REAL-TIME ON-DEMAND DIGITAL CONTENT AND COMPUTING DEVICE FOR EXECUTING METHOD Disclosed are a DRM packaging method for real-time on-demand digital content and a computing device for executing the same. According to an embodiment, a DRM packaging method for real-time on-demand digital content performed in a DRM server includes the steps of: receiving a license validation result for a user terminal from a license server; encrypting a content decryption key based on the secret key of the DRM server when it is determined that the license for the user terminal is valid; and transmitting the encrypted content decryption key to the license server.

Description

DRM packaging method of real-time on-demand digital content and computing device for executing the same

The disclosed embodiments relate to a DRM (Digital Rights Management) packaging technology for digital content that makes it impossible to decrypt real-time on-demand digital content other than a user terminal having a legal right.

Real-time on-demand digital content refers to content that is stored in a server and provided to a user terminal in real time according to a viewer's order so that viewers can watch TV programs or movies that they have not seen in time. As real-time on-demand digital content is established as a form of universal audiovisual content, viewers have become more active consumers from receivers who unilaterally accept content, resulting in a paradigm shift in the field of audiovisual content. .

These real-time on-demand digital content can be enjoyed by paying a fee for each content or by paying a usage fee for a predetermined period. and DRM packaging technology that prevents illegal copying is generally applied.

However, the existing DRM packaging technology does not encrypt the metadata for digital content or takes a simple encryption method, so there is a problem in that it can be downloaded directly from the web or can be easily downloaded using a browser extension program.

Republic of Korea Patent Publication No. 10-2007-0076108 (published on July 24, 2007)

The disclosed embodiments are for making it impossible to decrypt digital content except for a legitimate user terminal having a valid license.

According to an embodiment, a DRM packaging method of real-time on-demand digital content performed in a license server includes: transmitting a signing certificate and a signing key to a user terminal logged into a content providing service platform; receiving a license request signature generated based on the signing certificate and the signing key from the user terminal; verifying the validity of the license for the user terminal based on the license request signature; transmitting a license validation result for the user terminal to a DRM (Digital Rights Management) server; receiving an encrypted content decryption key from the DRM server based on the secret key of the DRM server; and transmitting the encrypted content decryption key to a content server.

The license request signature may be generated by signing date and time information at the time of signing, device information of the user terminal, identification information of a user account, identification information of content requested by the user terminal, and the certificate for signing with the signing key have.

The DRM packaging method of real-time on-demand digital content performed by the license server includes, prior to receiving the license request signature, validating a user account logged into the content providing service platform; and when the validity of the user account is verified, encrypting the address information of the license server and path information of metadata for the content requested by the user terminal and transmitting the encrypted information to the user terminal have.

The content decryption key may be a decryption key corresponding to each time-sharing content file.

According to an embodiment, a DRM packaging method of real-time on-demand digital content performed in a DRM server includes: receiving a license validation result for a user terminal from a license server; encrypting a content decryption key based on the secret key of the DRM server when it is determined that the license for the user terminal is valid; and transmitting the encrypted content decryption key to the license server.

The receiving may further receive at least one of device information of the user terminal, identification information of a user account, and identification information of content requested by the user terminal from the license server, wherein the encrypting includes: Encrypt the content decryption key, but set access restrictions on decryption of the content decryption key based on at least one of device information of the user terminal, identification information of the user account, and identification information of content requested by the user terminal can

The DRM packaging method of real-time on-demand digital content performed by the DRM server may further include generating metadata for the content requested by the user terminal based on the HLS format or the DASH format.

The content decryption key may be a decryption key corresponding to each time-sharing content file.

A license server according to an embodiment includes one or more processors; and a memory for storing one or more programs configured to be executed by the one or more processors, the programs comprising: transmitting a signing certificate and a signing key to a user terminal logged into a content providing service platform; receiving a license request signature generated based on the signing certificate and the signing key from the user terminal; verifying the validity of the license for the user terminal based on the license request signature; transmitting a license validation result for the user terminal to a DRM (Digital Rights Management) server; receiving an encrypted content decryption key from the DRM server based on the secret key of the DRM server; and transmitting the encrypted content decryption key to a content server.

The license request signature may be generated by signing date and time information at the time of signing, device information of the user terminal, identification information of a user account, identification information of content requested by the user terminal, and the certificate for signing with the signing key have.

The program may include, prior to receiving the license request signature, verifying the validity of a user account logged into the content providing service platform; and when the validity of the user account is verified, the command for executing the step of encrypting the address information of the license server and path information of metadata for the content requested by the user terminal and transmitting the encrypted information to the user terminal may include more.

The content decryption key may be a decryption key corresponding to each time-sharing content file.

DRM server according to an embodiment, one or more processors; and a memory for storing one or more programs configured to be executed by the one or more processors, the program comprising: receiving a license validation result for a user terminal from a license server; encrypting the content decryption key based on the private key of the DRM server when it is determined that the license for the user terminal is valid; and transmitting the encrypted content decryption key to the license server.

The receiving may further receive at least one of device information of the user terminal, identification information of a user account, and identification information of content requested by the user terminal from the license server, wherein the encrypting includes: Encrypt the content decryption key, but set access restrictions on decryption of the content decryption key based on at least one of device information of the user terminal, identification information of the user account, and identification information of content requested by the user terminal can

The program may further include instructions for executing the step of generating metadata for the content requested by the user terminal based on the HLS format or the DASH format.

The content decryption key may be a decryption key corresponding to each time-sharing content file.

According to the disclosed embodiments, by generating a signature for directly requesting a license from a user terminal, it is possible to prevent indiscriminate download of digital content compared to a conventional digital content security method of simply encrypting digital content.

In addition, according to the disclosed embodiments, by encrypting the decryption key required for the reproduction of the encrypted digital content with the secret key of the DRM server once more, it is possible to prevent illegal extraction of digital content more effectively than the digital content security method using the conventional encryption key. can

1 is a block diagram illustrating a DRM packaging system according to an embodiment;
2 is a block diagram illustrating and explaining a computing environment including a computing device according to an embodiment;
3 is a flowchart illustrating a DRM packaging method of real-time on-demand digital content performed in a license server according to an embodiment;
4 is a flowchart illustrating a DRM packaging method of real-time on-demand digital content performed in a license server according to an additional embodiment;
5 is a flowchart illustrating a DRM packaging method of real-time on-demand digital content performed in a DRM server according to an embodiment;
6 is a flowchart illustrating a DRM packaging method of real-time on-demand digital content performed in a DRM server according to an additional embodiment;
7 is a flowchart schematically illustrating a DRM packaging method of real-time on-demand digital content according to an embodiment.

Hereinafter, specific embodiments will be described with reference to the drawings. The following detailed description is provided to provide a comprehensive understanding of the methods, apparatus, and/or systems described herein. However, this is merely an example and the disclosed embodiments are not limited thereto.

In describing the embodiments, if it is determined that a detailed description of a related known technology may unnecessarily obscure the gist of the disclosed embodiments, the detailed description thereof will be omitted. And, the terms to be described later are terms defined in consideration of functions in the disclosed embodiments, which may vary according to intentions or customs of users and operators. Therefore, the definition should be made based on the content throughout this specification. The terminology used in the detailed description is for the purpose of describing the embodiments only, and should in no way be limiting. Unless explicitly used otherwise, expressions in the singular include the meaning of the plural. In this description, expressions such as “comprising” or “comprising” are intended to indicate certain features, numbers, steps, acts, elements, some or a combination thereof, one or more other than those described. It should not be construed to exclude the presence or possibility of other features, numbers, steps, acts, elements, or any part or combination thereof.

In the following description, the terms "transmission", "communication", "transmission", "reception" and other similar meanings of signals or information are not only directly transmitted from one component to another component, but also signal or information This includes passing through other components.

In particular, "transmitting" or "transmitting" a signal or information to a component indicates the final destination of the signal or information and does not imply a direct destination. The same is true for "reception" of signals or information. In addition, in this specification, when two or more data or information are "related", it means that when one data (or information) is acquired, at least a part of other data (or information) can be acquired based thereon.

1 is a block diagram illustrating a DRM packaging system according to an embodiment.

As shown, the DRM packaging system according to an embodiment includes a content server 120 , a license server 130 , and a DRM server 140 .

In the illustrated embodiment, each of the components may have different functions and capabilities other than those described below, and may include additional components in addition to those described below.

In addition, in one embodiment, the content server 120 , the license server 130 and the DRM server 140 are implemented using one or more physically separated devices, or one or more processors or one or more processors and software in combination. may be implemented, and unlike the illustrated example, specific operations may not be clearly distinguished.

The user terminal 110 refers to hardware that orders real-time on-demand digital content, performs an operation according to a user's input through an input device, and outputs a result through an output device. For example, the user terminal 110 may include a personal computer, a laptop computer, a smart phone, a tablet PC, a smart band, or a smart watch. It may be in the form of a wearable device of In addition, hardware that satisfies the above definition is interpreted as belonging to the user terminal 110 .

The content server 120 refers to hardware for packaging the digital content ordered by the user terminal 110 and a key required to release (decrypt) encryption applied to the digital content.

According to an embodiment, the content server 120 stores digital content provided by the content providing service platform in a storage space within the content server 120 or on a separate database (not shown) linked to the content server 120 . can be stored in

According to an embodiment, the content server 120 may time-sharing digital content provided by the content providing service platform at preset time intervals. However, the content server 120 may perform time division of digital contents in advance regardless of the user's digital contents order, and time division of the corresponding digital contents only after a digital contents order is requested from the user can also be performed.

The license server 130 refers to hardware that verifies the validity of a license for the user terminal 110 when the user terminal 110 orders digital content.

According to an embodiment, the user terminal 110 transmits a license request signature to the license server 130 together with an order for digital content, and the license server 130 receives the license request signature to the user terminal 110 based on the received signature. You can verify the validity of the license for

In the following embodiments, 'verifying the validity of the license' refers to a series of procedures for determining whether a user account logged in to the user terminal 110 that has ordered digital content has a preset type of work right for the corresponding digital content. can mean

The DRM server 140 controls the digital content ordered by the user terminal 110 according to a preset DRM (Digital Rights Management) condition according to the model of the user terminal 110, restrictions according to the validity period of the digital content, etc. hardware that is provided.

In this case, it should be noted that the type of DRM condition or the details of each condition may be variously set according to the embodiment.

In the following embodiments, the above-described content server 120 , license server 130 , and DRM server 140 exchange information for DRM packaging of digital content through the communication network 150 . Here, the communication network 150 includes the Internet, one or more local area networks, wire area networks, cellular networks, mobile networks, other types of networks, or a combination of these networks. can do.

2 is a block diagram illustrating and describing a computing environment 10 including a computing device according to an embodiment. In the illustrated embodiment, each component may have different functions and capabilities other than those described below, and may include additional components in addition to those described below.

The illustrated computing environment 10 includes a computing device 12 . In one embodiment, computing device 12 may be user terminal 110 . Also, the computing device 12 may be the content server 120 . Also, the computing device 12 may be the license server 130 or the DRM server 140 .

Computing device 12 includes at least one processor 14 , computer readable storage medium 16 , and communication bus 18 . The processor 14 may cause the computing device 12 to operate in accordance with the exemplary embodiments discussed above. For example, the processor 14 may execute one or more programs stored in the computer-readable storage medium 16 . The one or more programs may include one or more computer-executable instructions that, when executed by the processor 14, configure the computing device 12 to perform operations in accordance with the exemplary embodiment. can be

Computer-readable storage medium 16 is configured to store computer-executable instructions or program code, program data, and/or other suitable form of information. The program 20 stored in the computer readable storage medium 16 includes a set of instructions executable by the processor 14 . In one embodiment, computer-readable storage medium 16 includes memory (volatile memory, such as random access memory, non-volatile memory, or a suitable combination thereof), one or more magnetic disk storage devices, optical disk storage devices, flash It may be memory devices, other forms of storage medium accessed by computing device 12 and capable of storing desired information, or a suitable combination thereof.

Communication bus 18 interconnects various other components of computing device 12 , including processor 14 and computer readable storage medium 16 .

Computing device 12 may also include one or more input/output interfaces 22 and one or more network communication interfaces 26 that provide interfaces for one or more input/output devices 24 . The input/output interface 22 and the network communication interface 26 are coupled to the communication bus 18 . Input/output device 24 may be coupled to other components of computing device 12 via input/output interface 22 . Exemplary input/output device 24 may include a pointing device (such as a mouse or trackpad), a keyboard, a touch input device (such as a touchpad or touchscreen), a voice or sound input device, various types of sensor devices, and/or imaging devices. input devices, and/or output devices such as display devices, printers, speakers and/or network cards. The exemplary input/output device 24 may be included in the computing device 12 as a component constituting the computing device 12 , and may be connected to the computing device 12 as a separate device distinct from the computing device 12 . may be

3 is a flowchart illustrating a DRM packaging method of real-time on-demand digital content performed by the license server 130 according to an embodiment.

First, the license server 130 transmits a signing certificate and a signing key to the user terminal 110 that has logged into the content providing service platform ( 310 ).

According to an embodiment, the signing certificate transmitted by the license server 130 may be a private certificate (eg, a common certificate), and the signing key may be a 1024-bit key.

Thereafter, the license server 130 receives a license request signature generated based on the signing certificate and the signing key from the user terminal 110 ( 320 ).

According to an embodiment, the license server 130 decrypts the identification information of the content (or a hash value of the identification information of the content) received from the user terminal 110 and the license request signature received in step 320, and the content obtained The digital content ordered by the user may be specified by comparing the identification information (or the hash value of the identification information of the content).

According to an embodiment, the license request signature includes date and time information at the time of signing, device information of the user terminal 110, identification information of a user account, identification information of content requested by the user terminal 110, and a certificate for signing. It can be signed with a key and generated.

Specifically, 'device information of the user terminal 110' used to generate the license request signature may be a hash value obtained by applying a hash function to a unique value of the user terminal 110 . At this time, the 'unique value of the user terminal 110' is SSAID (Settings. Secure. Android ID) for an Android operating system-based device, UUID (Universally Unique Identifier) for an iOS-based device, and Windows ( In the case of a device based on Windows) or Linux, it may be a hard disk unique number of the device, and in the case of a device based on a Mac operating system, it may be a serial number of the device. However, the type of the unique value of the user terminal 110 is not limited thereto, and if it is a value that can identify the user terminal 110, it can be used as a unique value of the user terminal 110 without being restricted in the format. Be careful.

Meanwhile, 'identification information of a user account' means a unique value assigned to each user account subscribed by each content providing service platform.

According to an embodiment, the license request signature may be generated according to a Hash-based Message Authentication Code (HMAC) method.

Thereafter, the license server 130 verifies the validity of the license for the user terminal 110 based on the received license request signature ( 330 ).

According to one embodiment, the license server 130, before verifying the validity of the license, HTTP protocol-based authentication method (eg, Basic authentication method, Digest authentication method, SSL client authentication method, form-based authentication method, etc.) ) to verify the validity of the user account.

Thereafter, the license server 130 transmits a license validation result for the user terminal 110 to the DRM server 140 ( 340 ).

Then, the license server 130 receives the encrypted content decryption key based on the private key of the DRM server 140 from the DRM server 140 (350).

According to an embodiment, the content requested by the user terminal 110 may be time-divided by the content server 120, and in this case, the content decryption key may be a decryption key corresponding to each time-divided content file.

Then, the license server 130 transmits the encrypted content decryption key to the content server 120 (360).

4 is a flowchart illustrating a DRM packaging method of real-time on-demand digital content performed by the license server 130 according to an additional embodiment.

First, the license server 130 transmits a signing certificate and a signing key to the user terminal 110 logged in to the content providing service platform ( 410 ).

Thereafter, the license server 130 verifies the validity of the user account logged into the content providing service platform ( 420 ).

Then, when the validity of the user account is verified, the license server 130 encrypts the address information of the license server 130 and path information of metadata for the content requested by the user terminal 110 to the user terminal. Transmits to 110 (430).

According to an embodiment, address information of the license server 130 and path information of metadata may be encrypted based on the AES-256 scheme.

According to an embodiment, address information of the encrypted license server 130 and path information of the encrypted metadata may be provided to the user terminal 110 as an encoding file in a json format.

Thereafter, the license server 130 receives a license request signature generated based on the signing certificate and the signing key from the user terminal 110 ( 440 ).

Thereafter, the license server 130 verifies the validity of the license for the user terminal 110 based on the received license request signature ( 450 ).

Then, the license server 130 transmits the license validation result for the user terminal 110 to the DRM server 140 (460).

Thereafter, the license server 130 receives a content decryption key encrypted based on the private key of the DRM server 140 from the DRM server 140 ( 470 ).

Thereafter, the license server 130 transmits the encrypted content decryption key to the content server 120 ( 480 ).

According to an embodiment, the license server 130 may transmit information on the validity period of the public key of the DRM server 140 for decrypting the encrypted content decryption key together with the encrypted content decryption key. In this case, the content server 120 may transmit (transmit) information about the validity period of the encrypted content decryption key and the public key of the DRM server 140 to the user terminal 110 .

5 is a flowchart illustrating a DRM packaging method of real-time on-demand digital content performed by the DRM server 140 according to an embodiment.

First, the DRM server 140 receives a license validation result for the user terminal 110 from the license server 130 (510).

According to an embodiment, the DRM server 140 provides not only the license validation result from the license server 130 , but also device information of the user terminal 110 , identification information of the user account, and content requested by the user terminal 110 . At least one of identification information may be additionally received.

Thereafter, when it is determined that the license for the user terminal 110 is valid, the DRM server 140 encrypts the content decryption key based on the private key of the DRM server 140 ( 520 , 530 ).

According to an embodiment, the DRM server 140 may generate a public key and a private key pair for encryption and decryption of the content decryption key in advance prior to step 510 .

According to another embodiment, when it is determined that the license is valid in step 520 , the DRM server 140 may generate a public key and a private key pair for encryption and decryption of the content decryption key.

According to an embodiment, the DRM server 140 may provide the public key for decrypting the content decryption key to the content server 120 and the license server 130 in the form of binary data. Through this, it is possible to prevent leakage of the public key to the outside of the DRM packaging system in the process of sharing it.

According to an embodiment, the DRM server 140 encrypts the content decryption key, but at least one of the device information of the user terminal 110, the identification information of the user account, and the identification information of the content requested by the user terminal 110 Based on the content decryption key, access restrictions for decryption may be set.

For example, the DRM server 140 may identify the ordered content based on the identification information of the content, and may determine the type of the user terminal 110 based on the device information of the user terminal 110 . Thereafter, the DRM server 140 may set such that, in the ordered content, the content decryption key cannot be decrypted through a terminal having a different model than that of the corresponding user terminal 110 .

As another example, the DRM server 140 may identify the user account using the identification information of the user account, and identify the ordered content based on the identification information of the content. Thereafter, the DRM server 140 may set a restriction on a period during which the content decryption key can be decrypted through the corresponding user account in the ordered content.

Then, the DRM server 140 transmits the encrypted content decryption key to the license server 130 (540).

6 is a flowchart illustrating a DRM packaging method of real-time on-demand digital content performed by the DRM server 140 according to an additional embodiment.

First, the DRM server 140 generates metadata for the content requested by the user terminal 110 based on the HLS format or the DASH format ( 610 ).

Thereafter, the DRM server 140 receives a content decryption key for decrypting the content requested by the user terminal 110 from the license server 130 ( 620 ).

Then, when it is determined that the license for the user terminal 110 is valid, the DRM server 140 encrypts the content decryption key based on the private key of the DRM server 140 (630, 640).

Thereafter, the DRM server 140 transmits the encrypted content decryption key to the license server 130 ( 650 ).

7 is a flowchart schematically illustrating a DRM packaging method of real-time on-demand digital content according to an embodiment.

First, the content server 120 time-divisions digital contents stored in a storage space within the content server 120 or a separate database (not shown) linked to the content server 120 at preset time intervals (701), and time-divided A content encryption key and a content decryption key for digital contents are generated ( 702 ), and time-divided digital contents are encrypted based on the generated content encryption key ( 703 ).

Next, the user 700 who wants to use the content providing service logs in to the content providing service platform with his or her user account through the user terminal 120 ( 704 ).

Next, when the login for the user account is performed, the license server 130 transmits the signing certificate and the signing key to the user terminal 110 to which the user account is logged ( 705 ).

Then, the user 700 orders digital content (706), and accordingly, the user terminal 110 generates a license request signature based on the received signing certificate and signature key (707), and uses the generated license request signature. Transmits to the license server 130 (708).

Next, the license server 130 verifies the validity of the license for the user terminal 110 based on the received license request signature ( 709 ).

Then, the license server 130 transmits the license validation result for the user terminal 110 to the DRM server 140 (710).

Next, when it is determined that the license for the user terminal 110 is valid, the DRM server 140 generates a public key and a private key of the DRM server 140 for the content decryption key of the ordered digital content (711). . Although it is shown in FIG. 7 that the public key and the private key of the DRM server 140 are generated after step 710, this is for convenience of explanation. The key and the secret key may be generated in advance before step 706 .

Next, the DRM server 140 encrypts the content decryption key based on the secret key generated in step 711 (712).

Subsequently, the DRM server 140 transmits the encrypted content decryption key to the license server 130 ( 713 ), and the license server 130 receives it and transmits it to the content server 120 ( 714 ).

Next, the content server 120 packages the digital content ordered by the user 700 among the time-divided digital content, the public key and the encrypted content decryption key generated in step 711 ( 715 ), and delivers the packaged content to the user terminal ( 110) (716).

Next, the user terminal 110 decrypts the encrypted content decryption key with the public key generated in step 711, decrypts the encrypted digital content using the obtained content decryption key, and then plays it back (717).

According to an embodiment, when the user terminal 110 fails to release (decrypt) the encryption applied to the digital content, it may determine that the access to the digital content has expired because the DRM condition is not satisfied. In this case, the user terminal 110 may provide a notification or message requesting the user 700 to order content again, and automatically repeats from step 707 without separately requesting the user 700 order. can do.

3 to 7, the method is described by dividing the method into a plurality of steps, but at least some of the steps are performed in a different order, performed together in combination with other steps, omitted, or divided into detailed steps. Alternatively, one or more steps not shown may be added and performed.

The embodiments described above may be implemented by a hardware component, a software component, and/or a combination of a hardware component and a software component. For example, the apparatus, methods and components described in the embodiments may include, for example, a processor, a controller, an arithmetic logic unit (ALU), a digital signal processor, a microcomputer, a field programmable gate (FPGA). array), a programmable logic unit (PLU), a microprocessor, or any other device capable of executing and responding to instructions. The processing device may execute an operating system (OS) and one or more software applications running on the operating system. The processing device may also access, store, manipulate, process, and generate data in response to execution of the software. For convenience of understanding, although one processing device is sometimes described as being used, one of ordinary skill in the art will recognize that the processing device includes a plurality of processing elements and/or a plurality of types of processing elements. It can be seen that can include For example, the processing device may include a plurality of processors or one processor and one controller. Other processing configurations are also possible, such as parallel processors.

The software may comprise a computer program, code, instructions, or a combination of one or more thereof, which configures a processing device to operate as desired or is independently or collectively processed You can command the device. The software and/or data may be any kind of machine, component, physical device, virtual equipment, computer storage medium or device, to be interpreted by or to provide instructions or data to the processing device. , or may be permanently or temporarily embody in a transmitted signal wave. The software may be distributed over networked computer systems, and stored or executed in a distributed manner. Software and data may be stored in one or more computer-readable recording media.

Although representative embodiments of the present invention have been described in detail above, those of ordinary skill in the art will understand that various modifications are possible without departing from the scope of the present invention with respect to the above-described embodiments. . Therefore, the scope of the present invention should not be limited to the described embodiments, but should be defined by the claims described below as well as the claims and equivalents.

10: Computing Environment
12: computing device
14: Processor
16: computer readable storage medium
18: communication bus
20: Program
22: input/output interface
24: input/output device
26: network communication interface
110: user terminal
120: content server
130: license server
140: DRM server
150: communication network

Claims (16)

one or more processors, and
A method performed in a license server having a memory for storing one or more programs executed by the one or more processors,
transmitting a signing certificate and a signing key to a user terminal logged into the content providing service platform;
receiving a license request signature generated based on the signing certificate and the signing key from the user terminal;
verifying the validity of the license for the user terminal based on the license request signature;
transmitting a license validation result for the user terminal to a DRM (Digital Rights Management) server;
receiving an encrypted content decryption key from the DRM server based on the secret key of the DRM server; and
DRM packaging method of real-time on-demand digital content comprising the step of transmitting the encrypted content decryption key to a content server.
The method according to claim 1,
The license request signature is
DRM of real-time on-demand digital content generated by signing date and time information at the time of signing, device information of the user terminal, identification information of a user account, identification information of content requested by the user terminal, and the certificate for signing with the key for signing packaging method.
The method according to claim 1,
Prior to receiving the license request signature,
verifying the validity of a user account logged into the content providing service platform; and
When the validity of the user account is verified, further comprising the step of encrypting the address information of the license server and path information of metadata for the content requested by the user terminal and transmitting the encrypted information to the user terminal, real-time DRM packaging method for on-demand digital content.
The method according to claim 1,
The content decryption key is
A method for DRM packaging of real-time on-demand digital content, which is a decryption key corresponding to each time-sharing content file.
one or more processors, and
A method performed in a DRM server having a memory for storing one or more programs executed by the one or more processors,
Receiving a license validation result for the user terminal from the license server;
encrypting a content decryption key based on the secret key of the DRM server when it is determined that the license for the user terminal is valid; and
DRM packaging method of real-time on-demand digital content comprising the step of transmitting the encrypted content decryption key to the license server.
6. The method of claim 5,
The receiving step is
Further receiving at least one of device information of the user terminal, identification information of a user account, and identification information of content requested by the user terminal from the license server,
The encryption step is
Encrypt the content decryption key, but set access restrictions on decryption of the content decryption key based on at least one of device information of the user terminal, identification information of the user account, and identification information of content requested by the user terminal DRM packaging method of real-time on-demand digital content.
6. The method of claim 5,
DRM packaging method of real-time on-demand digital content, further comprising the step of generating metadata (metadata) for the content requested by the user terminal based on the HLS format or the DASH format.
6. The method of claim 5,
The content decryption key is
A method for DRM packaging of real-time on-demand digital content, which is a decryption key corresponding to each time-sharing content file.
one or more processors; and
A computing device comprising a memory storing one or more programs configured to be executed by the one or more processors,
The program is
transmitting a signing certificate and a signing key to a user terminal logged into the content providing service platform;
receiving a license request signature generated based on the signing certificate and the signing key from the user terminal;
verifying the validity of the license for the user terminal based on the license request signature;
transmitting a license validation result for the user terminal to a DRM (Digital Rights Management) server;
receiving an encrypted content decryption key from the DRM server based on the secret key of the DRM server; and
and instructions for executing the step of sending the encrypted content decryption key to a content server.
10. The method of claim 9,
The license request signature is
Date and time information at the time of signing, device information of the user terminal, identification information of a user account, identification information of contents requested by the user terminal, and the certificate for signing are signed and generated with the key for signing, a license server.
10. The method of claim 9,
The program is
Prior to receiving the license request signature,
verifying the validity of a user account logged into the content providing service platform; and
When the validity of the user account is verified, instructions for executing the step of encrypting the address information of the license server and path information of metadata for the content requested by the user terminal and transmitting the encrypted information to the user terminal Further comprising, a license server.
10. The method of claim 9,
The content decryption key is
A license server, which is a decryption key corresponding to each time-sharing content file.
one or more processors; and
A computing device comprising a memory storing one or more programs configured to be executed by the one or more processors,
The program is
Receiving a license validation result for the user terminal from the license server;
encrypting the content decryption key based on the private key of the DRM server when it is determined that the license for the user terminal is valid; and
A DRM server comprising instructions for executing the step of sending an encrypted content decryption key to the license server.
14. The method of claim 13,
The receiving step is
Further receiving at least one of device information of the user terminal, identification information of a user account, and identification information of content requested by the user terminal from the license server,
The encryption step is
Encrypt the content decryption key, but set access restrictions on decryption of the content decryption key based on at least one of device information of the user terminal, identification information of the user account, and identification information of content requested by the user terminal which, DRM server.
14. The method of claim 13,
The program is
Based on the HLS format or the DASH format, the DRM server further comprising instructions for executing the step of generating metadata (metadata) for the content requested by the user terminal.
14. The method of claim 13,
The content decryption key is
A DRM server, which is a decryption key corresponding to each time-sharing content file.

Images