KR20040036745A - Web-based digital contents protection system and method using the real-time encryption/decryption - Google Patents

Abstract

PURPOSE: A system and a method for protecting web based digital contents using realtime encryption/decryption are provided to prevent illegal usage and infringement of intellectual property rights of static web based digital contents and dynamically generated digital contents. CONSTITUTION: A web page is transmitted from a web server(10) to a web client(20). A web based digital contents protect system analyses a header of transmitted web page. And the system decides web pages to protect. An HTTP header analyzing part(121) analyzes the header according to the size of the web page script. An HTML analyzing part(122) picks out the HTML sources to protect. An encryption part(123) encrypts HTML sources. A script addition part(124) adds encrypted script.

Description

Web-based digital contents protection system and method using the real-time encryption / decryption}

The present invention provides a web-based digital asset protection system and method and method for effectively preventing infringement and illegal use of web-based digital assets through real-time encryption and decryption of static or dynamic web pages (digital works) serviced through a web server; And a computer readable recording medium having recorded thereon a program for realizing the above method.

In the conventional web-based digital content management system, a method of encrypting the content to be protected in advance is not applicable to dynamically generated web pages (asp, php, cgi ...). In other words, the existing method for protecting web pages is to encrypt all the web page sources to be protected in advance as a preprocessing operation, and the web server simply takes care of the transmission. Therefore, the web pages dynamically generated by the web server operation (ASP , PHP, CGI, etc.)

However, due to the proliferation of Internet users and the development of multimedia and network technologies, various digital works are being delivered through the web, and the proportion of web pages that are dynamically generated in conjunction with the database (DB) is not static web pages. There is a limit to existing techniques that can only be applied to static web pages at an increasing time. In addition, if a static web page is modified, it is difficult to update and manage quickly because it can be protected by encrypting it through preprocessing every time.

Therefore, in order to protect statically and dynamically generated web pages, it is necessary to work through real-time encryption / decryption at the point of being processed in the web server software and delivered to the user's web browser.

The present invention has been proposed in response to the above-described needs, and includes various infringement of Intellectual Property Rights for not only static web-based digital works (web pages) but also dynamically generated web-based digital works. To provide a web-based digital copyright protection system using real-time encryption / decryption to effectively prevent illegal use and its use, and a computer-readable recording medium recording a program for realizing the method. There is this.

1 is a block diagram of an embodiment of a web-based digital asset protection system according to the present invention.

2 is a flow diagram of an embodiment of a web-based digital asset protection method according to the present invention.

* Explanation of symbols for the main parts of the drawings

10: Web server 20: Web client (web browser)

In the present invention for achieving the above object, in a web-based digital asset (web page) protection system, by analyzing the header of the web page transmitted from the web server to the web client, to determine whether to encrypt the web page to protect, Web page header processing means for matching a size item of a web page header according to a change in size of a web page body according to an encryption process; Web page body processing means for classifying a region to be protected in the entire web page body according to a header analysis result of the web page header processing means; Encrypting means for encrypting a protected area divided by said web page body processing means; And script adding means for adding a script to the area encrypted by the encryption means.

In addition, the present invention is characterized in that it further comprises a decryption means for decrypting the encrypted web page transmitted from the web server by the ActiveX control or plug-in is driven by the script in the web client.

In addition, the ActiveX control or plug-in is driven by the script in the web client, characterized in that it further comprises a protection means for supporting additional security of the encrypted web page transmitted from the web server.

In order to achieve the above object, the present invention provides a method for protecting a web-based digital asset (web page), by analyzing a header of a web page transmitted from a web server to a web client, and determining whether to encrypt the web page to be protected, A first step of matching a size item of a web page header according to a change in size of a web page body according to an encryption process; A second step of classifying a region to be protected in the entire web page body; Encrypting the separated protected area; And a fourth step of adding a script to the encrypted region and transmitting the script to the web client.

In addition, the present invention is characterized in that it further comprises a fifth step of decrypting the encrypted web page transmitted from the web server by the ActiveX control or plug-in is driven by the script in the web client.

In addition, the present invention further comprises a sixth step in which an ActiveX control or a plug-in is driven by the script in the web client to support additional security of an encrypted web page transmitted from the web server. It features.

The present invention for achieving the above object, in the web-based digital asset (web page) protection system having a processor, by analyzing the header of the web page transmitted from the web server to the web client, whether or not to encrypt the web page to be protected A first function of determining and matching a size item of a web page header according to a change in size of a web page body according to an encryption process; A second function of distinguishing an area to be protected from the entire web page body; A third function of encrypting the separated protected area; And adding a script to the encrypted area to provide a computer-readable recording medium having recorded thereon a program for realizing a fourth function for transmitting to the web client.

In addition, the present invention can be read by a computer recorded with a program for further realizing a fifth function of decrypting an encrypted web page transmitted from the web server by an ActiveX control or a plug-in driven by the script on the web client. Provide a recording medium.

In addition, the present invention is a program for further implementing a sixth function to support the additional security of the encrypted web page transmitted from the web server by the ActiveX (ActiveX) control or plug-in is driven by the script in the web client Provide a computer readable recording medium having recorded thereon.

The present invention aims to realize intellectual property management and protection services for web-based works through real-time encryption and decryption of various web pages such as HTML, PHP, ASP, etc. in conjunction with various web servers.

To this end, the present invention injects a module (filtering module) in the form of a filter in the web server software to protect not only static web pages but also dynamically generated web pages to perform encryption and script addition operations necessary for protecting web pages. Processing is performed in real time, and the decryption and protection module is added to the web client program so that only those who are allowed to access the web page can decrypt and view it and perform other processing necessary for protection. At this time, the web service operator can protect the web page with minimal modification, and the web service user can use the web service transparently for protection by using the web service in the same way as the existing method. .

In particular, the present invention adds a filtering module to the web server as described above, and encrypts the portion in need of protection just before being transmitted to the user (web client) in the web server in real time. It can also be applied to web pages and can be protected with minimal code addition to existing web-based digital works. That is, the present invention allows encryption to be performed in real time while the web server transmits the web page to the user without any preprocessing work for the web page source, so that the present invention can be applied to all dynamically generated web pages. In addition to the encryption, it is possible to add or modify a separate script in the web page source, it can be used for various purposes.

As such, the present invention is applicable to static or dynamic web pages (digital works) served through a web server, and enables digital copyright protection through minimal modification to web page sources. In other words, the present invention can be applied to dynamic web pages beyond the existing static web page method, and additionally, a script can be added to a web page or a web page can be modified to protect a web-based digital asset. Is used for.

The above objects, features and advantages will become more apparent from the following detailed description taken in conjunction with the accompanying drawings. Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is an embodiment configuration diagram of a web-based digital asset protection system according to the present invention, in which "11" is web server software, "12" is a filtering module, and "21" is an ActiveX control or plug-in. (Plug-in) module, "12" is the HyperText Transfer Protocol (HTTP) header analysis unit, HyperText Mark-up Language (HTML) analysis unit, "123" is the encryption unit, "124" denotes a script adder, "211" denotes a decryption unit, and "212" denotes a protection unit.

As shown in FIG. 1, the web-based digital asset protection system according to the present invention analyzes a header of a web page (HTML, ASP, PHP, CGI, etc.) transmitted from the web server 10 to the web client 20. To determine whether to encrypt the web page to be protected, and to match the size item of the web page header according to the change in the size of the body of the web page according to the encryption process, the HTTP header analyzer 121 and the HTTP header analyzer 121 According to the header analysis result of the), the HTML analysis unit 122 for classifying the area to be protected in the entire web page body, and the encryption unit 123 for encrypting the protected area divided by the HTML analysis unit 122 And a script adding unit 124 for adding the script to the area encrypted by the encryption unit 123. In addition, the active X control or plug-in module 21 is driven by a script in the web client 20, and further includes a decryption unit 211 for decrypting the encrypted web page transmitted from the web server (10). In addition, the ActiveX control or plug-in module 21 is driven by a script in the web client 20 to support additional security of an encrypted web page transmitted from the web server 10 (storage function, printing function, block copy). And a protection unit 212 for controlling the screen capture function so that the original text does not leak.

Looking at the operation of the web-based digital asset protection system using real-time encryption / decryption according to the present invention having the above configuration as follows.

In the present invention, the original source of the web page, such as HTML, ASP, PHP, CGI is finally generated after the processing through the web server software 11 is transmitted to the web server 10 before the HTML to the web client 20 The added filter type module (filtering module) 12 intercepts and applies the necessary processing. Thereafter, when the HTML is delivered to the web client 20, it is transmitted through Hypertext Transfer Protocol (HTTP). HTTP transmits an HTTP header first to transmit HTML, and then transmits an HTML body. do. At this time, the HTTP header analysis unit 121 analyzes the HTTP header to check whether the HTML body to be encrypted and other processing thereafter, and if necessary, the HTTP header is appropriately processed. At this time, the most important process is that the size of the HTML body is changed when encryption and other processing is applied to the HTML body, and the size items of the HTML body should be exactly matched to the HTTP header.

Thereafter, after the processing of the HTTP header, the HTML analysis unit 122 checks whether there is a portion of the body content that requires encryption. Usually you don't need to encrypt the entire HTML, so you only have to place a particular tag and encrypt the tag area. When the area to be encrypted is determined in the HTML analysis unit 122 as described above, the encryption unit 123 performs encryption. At this time, encryption is a part that must be especially modularized so that it can be encrypted using various algorithms. When the encrypted HTML is transmitted to the user's web browser 20, the web browser 20 needs to activate the decryption unit 211. In order to be activated and decrypted and protected in the web browser 20, the ActiveX control is performed. Form or plug-in form (21).

Therefore, a script for activating the ActiveX control or the plug-in module 21 in the web browser 20 should be added in the web server 10, and this task is handled by the script adding unit 124.

The HTML that is encrypted in real time and interlocked with the web server software 11 is already encrypted even if intercepted in the middle of transmission. Therefore, even if there is no module for decryption or even a decryption module, the HTML is not authorized. In this case, since the decryption cannot be performed, the leak can be prevented.

Meanwhile, the encrypted HTML transmitted to the web browser 20 operates the ActiveX control or the plug-in module 21 by the script included therein, and is decrypted by the decryption unit 211. At this time, when decrypting, it is decrypted only in the corresponding PC by referring to the serial number of the user PC, and if not, it is not decrypted. For example, when the source view function or the storage function of the web browser 20 is used, it cannot be known because it appears only in an encrypted form.

After the original text is decrypted through the decryption process, if additional security is required, the protection unit 212 supports the protection. Here, additional protection usually controls the storage function, printing function, block copy function, screen capture function, etc. so that the original text is not leaked. At this time, the storage function is not a problem because only the encrypted HTML is stored if you save even if you do not block.

2 is a flowchart illustrating a web-based digital asset protection method according to the present invention.

As shown in FIG. 2, the web-based digital asset protection method through real-time encryption / decryption may first include a web page (HTML, which is transmitted from the web header 10 to the web client 20 in the HTTP header analyzer 121). ASP, PHP, CGI, etc.) headers are analyzed to determine whether to encrypt the web page to be protected, and the size items of the web page header are matched according to the size change of the body of the web page according to the encryption process (201). That is, the HTTP header analysis unit 121 analyzes the HTTP header to check whether the HTML body to be encrypted and other processing thereafter, and if necessary, the HTTP header is appropriately processed. In this case, the most important process is that the size of the HTML body is changed when encryption and other processing are applied to the HTML body so that the size items of the HTML body exactly match the HTTP header.

Thereafter, the HTML analyzer 122 classifies the region to be protected in the entire web page body according to the header analysis result of the HTTP header analyzer 121 (202). That is, the HTML analyzer 122 checks whether there is a portion of the body content that requires encryption. This is usually because the entire HTML does not need to be encrypted, so only certain tags can be encrypted and only within that tag area.

When the area to be encrypted is determined by the HTML analyzing unit 122 as described above (202), the encryption unit 123 encrypts the protected area divided by the HTML analyzing unit 122 (203).

When the encrypted HTML is transmitted to the user's web browser 20, in order to activate the ActiveX control or the plug-in module 21 in the web browser 20, the script adder 124 adds a script to the encrypted HTML. (204).

Next, the encrypted HTML to which the script is added is transmitted to the web client 20 through the web server 10 (205).

Meanwhile, the encrypted HTML transmitted to the web browser 20 is driven by the ActiveX control or plug-in module 21 by a script included therein, and is transmitted from the web server 10 through the decryption unit 211. The decrypted web page is decrypted (206). At this time, it is decrypted only in the PC with reference to the serial number of the user PC at the time of decryption, and is not decrypted if leaked.

Finally, after the original text is decrypted through the decryption process, if additional security is required, the protection unit 212 supports protection (controlling the storage function, print function, block copy function, and screen capture function so that the original text is not leaked. (207).

As described above, the present embodiment is applied to the protection of the web page through encryption, but it can be modified in various ways such as changing the web page, adding a specific script, and controlling access to the web page.

The method of the present invention as described above may be implemented as a program and stored in a computer-readable recording medium (CD-ROM, RAM, ROM, floppy disk, hard disk, magneto-optical disk, etc.).

The present invention described above is not limited to the above-described embodiments and the accompanying drawings, and various substitutions, modifications, and changes are possible in the art without departing from the technical spirit of the present invention. It will be clear to those of ordinary knowledge.

The present invention as described above, by installing an additional module in the web server software to enable the protection of the web page through the real-time encryption / decryption for real-time encryption / decryption without pre-processing for the web page generated static or dynamic, protection through the existing pre-processing operation While the method is only applicable to static web pages, it enables protection of various dynamically generated web pages and enables additional processing to protect the web pages more completely. Efforts have been made to enable the protection and maintenance of web pages.

Claims (11)

In a web-based digital asset (web page) protection system, It analyzes the header of the web page sent from the web server to the web client, decides whether to encrypt the web page to be protected, and matches the size items of the web page header according to the size change of the web page body due to the encryption process. Page header processing means; Web page body processing means for classifying a region to be protected in the entire web page body according to a header analysis result of the web page header processing means; Encrypting means for encrypting a protected area divided by said web page body processing means; And Script adding means for adding a script to the area encrypted by the encryption means Web-based digital asset protection system comprising a. The method of claim 1, The script is Web-based digital asset protection system, characterized in that to activate the ActiveX (ActiveX) control or plug-in (Plug-in) in the web client. The method of claim 2, Decryption means for decrypting an encrypted web page transmitted from the web server by running an ActiveX control or a plug-in by the script in the web client Web-based digital asset protection system further comprising. The method of claim 3, wherein Protection means for supporting an additional security of an encrypted web page transmitted from the web server by running an ActiveX control or a plug-in by the script on the web client. Web-based digital asset protection system further comprising. The method of claim 4, wherein The protective means, Web-based digital asset protection system that prevents the original text from leaking by controlling the storage function, printing function, block copy function, and screen capture function. In the method of protecting web-based digital assets (web pages), The first step of analyzing the header of the web page transmitted from the web server to the web client to determine whether to encrypt the web page to be protected, and matching the size items of the web page header in accordance with the size change of the body of the web page according to the encryption process step; A second step of classifying a region to be protected in the entire web page body; Encrypting the separated protected area; And A fourth step of adding a script to the encrypted area and transmitting the script to the web client Web-based digital asset protection method comprising a. The method of claim 6, A fifth step in which an ActiveX control or a plug-in is driven by the script in the web client to decrypt an encrypted web page transmitted from the web server Web-based digital asset protection method further comprising. The method of claim 7, wherein A sixth step of supporting an additional security of an encrypted web page transmitted from the web server by running an ActiveX control or a plug-in by the script in the web client; Web-based digital asset protection method further comprising. In the web-based digital asset (web page) protection system with a processor, The first step of analyzing the header of the web page transmitted from the web server to the web client to determine whether to encrypt the web page to be protected, and matching the size items of the web page header in accordance with the size change of the body of the web page according to the encryption process function; A second function of distinguishing an area to be protected from the entire web page body; A third function of encrypting the separated protected area; And A fourth function of adding a script to the encrypted area and transmitting the script to the web client A computer-readable recording medium having recorded thereon a program for realizing this. The method of claim 9, A fifth function of operating an ActiveX control or a plug-in by the script in the web client to decrypt an encrypted web page transmitted from the web server A computer-readable recording medium that records a program for further realization. The method of claim 10, A sixth function that activates an ActiveX control or a plug-in by the script on the web client to support additional security of an encrypted web page transmitted from the web server A computer-readable recording medium that records a program for further realization.