KR20040048161A - DRM Method for PDA Terminal in Wireless Telephony Network - Google Patents

Abstract

PURPOSE: A DRM(Digital Right Management) applying method for a supplementary terminal in a wireless communication network is provided to prevent movement and duplication of digital contents by using both a software certificate and a user ID of a wireless portal Web server. CONSTITUTION: When a user connects to a Web server and requests contents by using a supplementary terminal(S201), the Web server transfers user information to a contents providing server and requests the corresponding contents(S202). The contents providing server requests a personal key corresponding to an ID extracted from the user information from an authentication server(S203). The authentication server issues a public key among private key of the corresponding ID to the contents providing server(S204). The contents providing server codes contents with the public key received from the authentication server(S205) and transmits the coded contents to the user(S206). The user decodes the coded contents to an authentication key installed in the supplementary terminal(S207).

Description

Application method of DRM for additional terminal in wireless communication network {DRM Method for PDA Terminal in Wireless Telephony Network}

The present invention relates to a digital rights management (DRM) application method for an additional terminal in a wireless communication network. More specifically, the present invention relates to a DRM application method for preventing the movement and copying of digital content by simultaneously using a software certificate and a user ID of a wireless portal web server.

Unlike the analog era, digital contents have become mainstream, and the application of DRM technology for copyright protection of digital contents has been applied in the situation that the copies with the same quality as the original are quickly and simply copied and spread easily and quickly through the Internet. It is becoming an important issue.

When applying the DRM, the GUID (Global Unique ID), which is a unique key, is used to generate the authentication key. Generally, in case of PC, hard disk volume serial number (HDD ID) or network card MAC address is used.If the hard disk is formatted by the user, the volume serial number is changed, and the LAN card's MAC address is used by modem users. There is a limit that can only be excluded. Thus, hardware specific information and software certificates can be used simultaneously. Even if you format the hardware, you can download and reinstall the certificate.

If the existing method is applied to the additional terminal, the following problem occurs.

Additional terminals may provide hardware specific information depending on the device, but some may not be provided. For example, Palm add-on terminal can look up unique ID in Flash ROM, but it is only supported in some terminals. Pocket PC type knows unique ID through program although hardware specific information exists. There is no way to do this.

DRM can be applied by installing a software certificate on the additional terminal (store key value in the registry). However, because the device does not charge for about a week due to device characteristics, the hardware is initialized when the battery is discharged, and since the certificate is deleted due to the user's request or random initialization of the hardware, it is difficult to apply DRM in this way. have.

An object of the present invention is to generate an authentication key using a software certificate and a user ID of a wireless portal web server as unique information, and to encrypt digital content with the generated authentication key. The present invention provides a method of applying DRM to protect copyright of digital content on a computer.

In accordance with an aspect of the present invention, there is provided a method of applying a DRM, the method comprising: authenticating a user by connecting an additional terminal of the user to a wireless portal web server; Issuing and transmitting an authentication key from the authentication server to the additional terminal; Encrypting the content requested by the user to the wireless portal web server in the content providing server and transmitting the encrypted content to the additional terminal; And decrypting the encrypted content transmitted to the additional terminal.

In addition, in the step of issuing an authentication key to the user's additional terminal and encrypting content, the user ID registered in the wireless portal web server and the system information of the additional terminal may be used simultaneously. In addition, it is possible to access the wireless portal web server with multiple user IDs in one additional terminal so that when the DRM is applied, only the content that is applied with the DRM can be decrypted and the content can be viewed. It is characterized by not being able to see.

1 is a schematic configuration diagram of a system for performing a DRM application method of an additional terminal according to the present invention.

2 is a flowchart illustrating a general procedure of authenticating a user by connecting an additional terminal to a wireless portal web server in a mobile communication system.

3 is a flowchart of a step of issuing and transmitting an authentication key from the authentication server to the additional terminal.

4 is a flowchart illustrating a procedure of encrypting corresponding content in a content providing server and transmitting the encrypted content to an additional terminal of a user.

5 to 7 illustrate first, second, and third embodiments of DRM applied services according to the present invention.

<Description of Symbols for Major Parts of Drawings>

10: mobile communication additional terminal 20: mobile communication system

30: Wireless Portal Web Server 40: Authentication Server

50: content providing server

Hereinafter, with reference to the accompanying drawings, the configuration and operation of the embodiment of the present invention will be described in detail.

1 is a schematic configuration diagram of a system for performing a DRM application method of an additional terminal according to the present invention.

As shown in FIG. 1, the mobile communication additional terminal 10 is connected to the wireless portal web server 30 via the mobile communication system 20. The mobile communication additional terminal 10 shows a terminal including a personal digital assistant (PDA), a CDMA module (wireless modem) mounted in a PDA, and a dedicated browser in one block.

The mobile communication system 20 shows a system including a base station, a switch, an Inter Working Function (IWF), and a proxy server for an additional terminal as one block. The authentication server 40 generates an authentication key for each user's ID and transmits the authentication key to the mobile communication additional terminal 10. The content providing server 50 receives the authentication key from the authentication server 40 according to a user's request. The server encrypts the data and sends it to the additional terminal.

2 is a flowchart illustrating a general procedure of authenticating a user by connecting an additional terminal to a wireless portal web server in a mobile communication system.

Dedicated browser installed in the additional terminal is ① phone number (hereinafter referred to as Min number) of wireless modem, ② PDA specification, ③ user input ID and Password (hereinafter referred to as PW) and written in user information field (UA: User Agent) Tries to connect to the Proxy server. The proxy server requests authentication by querying the DB server for the user information extracted from the UA field of the connected additional terminal. DB server approves authentication when user information exists in DB and valid information. When the user authentication is completed, the proxy server requests a web page, writes the user information as a cookie, and sends it to the additional terminal.

3 is a flowchart illustrating a process of issuing and transmitting an authentication key from the authentication server to the additional terminal.

In order to apply the DRM method according to the present invention, all additional terminals that have been authenticated by the wireless portal web server receive an authentication key, and the authentication key once transmitted is recorded in the registry of the additional terminal, such as replacement of the additional terminal or hardware initialization. For this reason, it is not downloaded again until the authentication key disappears.

If the authentication terminal corresponding to the ID / PW of the user who attempted the connection does not exist in the registry of the additional terminal (S102), the browser of the additional terminal which has been authenticated by the wireless portal web server (S102), The system information (serial information and date) of the additional terminal is encrypted and transmitted (S103).

In the authentication server that manages the authentication key for each user ID (S104), if the authentication key of the corresponding ID is not issued, the user is registered (S105) and the authentication key is generated using the ID / PW of the user (S106). The result is set to success (S107).

On the contrary, if the authentication key of the corresponding ID has already been issued, the authentication key is regenerated using the system information of the additional terminal (S110) and the result value is set to success (S111). The authentication key and the generated result value generated in this way are transmitted to the additional terminal (S113). The browser extracts the result value (S114), and if successful, registers the transmitted authentication key in the registry of the additional terminal (S115). If the result value is a failure, an error message indicating that the contents cannot be viewed is displayed (S116).

In the DRM method according to the present invention, in order to limit this since several users can access a wireless portal web server in one additional terminal, the number of issuance is limited when issuing an authentication key (S109). Therefore, if the limited number of issuance is exceeded, the result value fails and the content cannot be viewed (S112).

4 is a flowchart illustrating a procedure of encrypting a corresponding content in a content providing server and transmitting the content to a user's additional terminal when the user accesses the wireless portal web server and requests the content using the additional terminal.

When the user accesses the wireless portal web server using the additional terminal to search for and requests the desired content (S201), the wireless portal web server passes the user information to the content providing server after the charging procedure according to the content and the corresponding content. Request (S202). The content providing server requests the authentication server for a private key corresponding to the ID extracted from the user information (S203), and the authentication server issues a public key among the private keys of the corresponding ID to the content providing server (S204).

The content providing server encrypts the content with the public key received from the authentication server (S205), and then transmits the encrypted content to the user (S206). The encryption algorithm used in this case uses the Blowfish encryption algorithm, which uses the 128-bit encryption algorithm with the DES of symmetric key, and the RC5 algorithm prevents hacking of packets by using RC5. . By mixing the two algorithms, the content is encrypted in units of blocks. The size of one block adopts 128 bits, which has the advantage of having a large block size, high speed, and greater flexibility. Based on these algorithms, users can encrypt in real time when they download content.

The user decrypts the encrypted content with the authentication key installed in the additional terminal (S207). If the user copies the authentication key arbitrarily, the content cannot be decrypted. Only when the authentication key is downloaded normally, decryption is possible.

5 to 7 illustrate first, second, and third embodiments of DRM applied services according to the present invention.

Looking at the first, second and third embodiments according to the present invention, in accordance with the original purpose of applying the DRM, the user A accesses the wireless portal web server with the additional terminal A 'to download and decrypt the content encrypted with the A. The user B can view the contents through the same procedure as the additional terminal B '(refer to FIG. 5).

In addition, in order to provide convenience to a user having a plurality of additional terminals, user A may access the wireless portal web server from the additional terminals A 'and B' to A to download and decrypt the A encrypted content. In this case, the content encrypted with A downloaded from the additional terminal A 'is recognized as the same content even when copied to the additional terminal B', so that it can be decrypted and viewed. (See Figure 6)

Both user A and B can access the same additional terminal A 'and can download the encrypted contents, but the contents encrypted with A can be decrypted only by user A, and the contents encrypted with B can be decrypted only by user B. have. In order to prevent users A and B from accessing the same additional terminal A 'alternately and unlimitedly decrypting the encrypted content, each time the user changes the ID, the authentication key is newly issued and the number of issuances is limited. For example, 30 times. (See Figure 7)

As described above, according to the DRM application method for an additional terminal in a wireless communication network according to the present invention, an authentication key is generated by using a software certificate and a user ID of a wireless portal web server as unique information, By encrypting the content, it is possible to protect the copyright of the digital content on the additional terminal.

Claims (4)

A method of applying a DRM for an additional terminal in a wireless communication network equipped with a mobile communication terminal, a mobile communication system, a wireless portal web server, an authentication server, and a content providing server, Authenticating the user by connecting the additional terminal of the user to a wireless portal web server by the mobile communication system; Issuing and transmitting an authentication key from the authentication server to an additional terminal; Encrypting the content requested by the user to the wireless portal web server in the content providing server and transmitting the encrypted content to the additional terminal; And And decrypting the encrypted content transmitted to the additional terminal. The method of claim 1, wherein the issuing an authentication key to the additional terminal of the user and encrypting the contents further include using a user ID registered in the wireless portal web server and system information of the additional terminal at the same time. DRM application method for the terminal. The wireless communication network of claim 1, wherein when the DRM is applied to the wireless portal web server by using multiple user IDs in one additional terminal, only the content to which the DRM is applied by the corresponding ID can be decrypted and viewed. Application method of DRM for additional terminal of. The wireless communication network of claim 1, wherein when one DRM is connected to a wireless portal web server with multiple user IDs and the DRM is applied, the DRM is not decoded to view the contents. Application method of DRM for additional terminal of.