KR20050005666A - Digital rights management system based on file management/common ownership of internet - Google Patents

Abstract

PURPOSE: A system for blocking illegal duplication/transfer of digital contents based on an Internet file storing/sharing system is provided to detect contents/license modification, prevent a DoS(Denial of Service) attack and user denial, and clearly distribute profits between a contents distributor and a contents circulator. CONSTITUTION: A contents distributor certification means certifies the contents distributor(510). An encryption/decryption key distributing/generating means(520) distributes/generates an encryption/decryption key for the digital contents distributed by the contents distributor. A package generating means(530) generates a digital contents package by using the key. A package circulating means(540) circulates the package. A package integrity verification/information analysis means(550) checks integrity of the package through header information of the circulated package and analyzes the corresponding information. A package/user certifying means(560) certifies the package and a user by using the analyzed information and digital contents user information.

Description

Digital content copyright protection system based on internet file storage / sharing system {DIGITAL RIGHTS MANAGEMENT SYSTEM BASED ON FILE MANAGEMENT / COMMON OWNERSHIP OF INTERNET}

The present invention relates to a digital content copyright protection system, and more particularly, to a system capable of preventing illegal copying and illegal transmission of digital content based on an Internet file storage / sharing system.

Recently, with the rapid development of networking and IT technologies, the amount and quality of information included in digital content exchanged through a network are increasing, but the piracy and illegal distribution of originals are easily performed due to the characteristics of digital content.

Therefore, the situation that solves the problems that can occur in the content distribution through various methods. Initially, the contents were provided in streaming form to be temporarily stored and used only in RAM memory, thereby preventing illegal copying and illegal distribution of digital contents.

However, the content service provided by this streaming method can download technical issues such as network status, communication speed or other compression, and download movies and dramas, music videos, video lectures and internet broadcasts that are serviced by the streaming method. The development of such programs helped to confirm the vulnerability to piracy.

Recently, as an alternative to digital content services using streaming, interest in digital rights management (DRM) systems is increasing. In order to protect the copyrights of various contents such as texts, movies and dramas, music videos, video lectures, and internet broadcasts distributed through various channels, the DRM system clearly grasps the rights relations related to the contents, illegal copying of the contents, It prevents illegal use and illegal distribution and transparently performs the distribution of interests of the owners related to the contents and the charges related to the contents.

Techniques for implementing the above-described DRM system can be roughly divided into copyright information management technology, metadata distribution technology, content protection technology and the like. Such DRM-related companies can be classified into DRM source technology provider and DRM commercialization service developer. In the world, there are Intertrust, Microsoft, IBM, Content Guard in the US, and Terten, Esssoft in Korea. , Mark Annie, and Fasu.com.

On the other hand, as a technology to solve the shortcomings of the dedicated viewer program has been proposed in the Korean Patent Application No. 10-2001-0034583 "Security System for Secure Delivery and Execution of Digital Data" and 10-2002-0001916 "Digital Content Information" Protection methods and systems. "

By the way, the above-mentioned patents refer to the digital content function control at the client end, the manner in which the encrypted or decrypted digital content is stored, and the specific technology of encryption / decryption, but may occur when providing a digital content distribution service. It does not provide countermeasures for factors such as Denial of Service, Content / License Modulation, and User Disclaimer.

Accordingly, an object of the present invention is to provide a digital content copyright protection system based on an Internet file storage / sharing system capable of preventing content / license tampering and DoS attacks. .

It is still another object of the present invention to provide a digital content copyright protection system based on an Internet file archiving / sharing system that can transparently distribute benefits between user disclaimers and content distributors and content distributors.

It is another object of the present invention to provide a digital content copyright protection system based on an Internet file storage / sharing system that can solve a content source protection problem that may occur when content distributors and content distributors are different.

In order to achieve the above object, a system for protecting the copyright of digital content distributed on the basis of the Internet file storage / sharing system according to the present invention includes: content distributor authentication means for authenticating a digital content distributor; Encryption / decryption key distribution generation / distribution means for generating and distributing an encryption / decryption key for encrypting and decrypting the digital content to be distributed by the distributor; Package generation means for generating a digital content package in a distribution form of digital content to be distributed using the generated and distributed encryption / decryption key; Package distribution means for distributing the generated digital content package; Package integrity verification / information analysis means for checking the integrity of the digital content package and analyzing the corresponding information through the header information of the distributed digital content package; Package / user authentication means for authenticating a digital content package and a user using the analyzed information and digital content user information; License management / control means for controlling the usage period, the number of times of use, the available commands, and the like, using the license information based on the authentication result; And means for using application control / content for intercepting file input / output request messages such as open, read, other commands, close, and exit between the application and the file system in which the encrypted digital content package is stored. do.

At this time, if the digital content distributor and distributor are different, the digital content copyright protection system protects the digital content source using a key used for digital content package encryption / decryption, and distributes the profit between the distributor and the distributor. Providing license information and key information necessary for content package restoration from distributors and distributors, respectively, it may further preferably include profit distribution means for distributing profits between distributors and distributors.

In addition, the digital content copyright protection system, by adding the content distributor's digital signature for the message digest to the package header to prevent DoS and digital content tampering that may occur during the distribution of digital content, When the content is changed, a tamper-proof means for preventing package regeneration, re-registration, redistribution, and user denial through a hash or electronic signature may be preferably implemented.

1 is a conceptual diagram for practicing the present invention,

2 is a field example included in a header constituting a digital content package generated according to the present invention;

3 is a field example for configuring a license issued from a content management system according to the present invention;

4 is a field example for configuring a license issued from a content distribution system according to the present invention;

5 is a block diagram of a digital content copyright protection system according to the present invention;

6 is a conceptual diagram illustrating a document use control method for helping understanding of the present invention;

7 is a running document table example.

* Explanation of symbols for main parts of the drawings

110: content distributor 120: content management system

130: content distribution system 140: content users

500: digital content copyright protection system 510: content distributor authentication means

520: encryption / decryption key distribution generation / distribution means 530: package generation means

540: package distribution means

550: package integrity verification / information analysis means 560: package / user authentication means

570: license management / control means

580: Means to use application control / content

Hereinafter, with reference to the accompanying drawings will be described in detail the present invention.

1 is a conceptual diagram for implementing the present invention, which includes a content distributor 110, a content management system 120, a content distribution system 130, and a content user 140. Here, the content management system 120 and the content distribution system 130 are built in a web-based environment, it may be configured in one system form. The content distribution system 130 and the content user 140 are built in a client / server based environment.

Referring to the drawings, the content distributor 110 is a subject for registering and distributing various contents. The content distributor 110 is authenticated through a certificate utilizing a PKI solution. A secure channel is created between 110 and the content management system 120.

The content distributor 110 may access the homepage of the content management system 120 through an internet web browser, and automatically download and install a new DRM agent using ActiveX control.

The content distributor 110 registers the content with the content management system 120 while encrypting the content using the key provided from the content management system 120 (automatically performing the DRM agent). In this case, the content distributor 110 may accept the basic license information of the content management system 120 as it is, or set license information such as the usage period, the number of times of use of the content, or a command that can be used.

The content registered by the content distributor 110 is registered and stored in the content management system 120 through the original extraction operation to keep the original content and packaged.

2 is an example field included in a header constituting a digital content package generated according to the present invention. The Contents Digital Signature field contains the digital signature (using the public key of the content management system) for the entire package (package header + encrypted content header + encrypted content), thereby modulating and DoS Attacks can be prevented in advance.

The license information such as the package, the period of use, the number of times, or the available commands for the corresponding content provided by the content distributor 110 is transmitted to the content distribution system 130. The distribution and license management of the actual content is performed by the content distribution system. 130 is in charge.

The content user 140 may select and open an encrypted content package that is provided online or offline in the content distribution system 130 and stored in his computer. At this time, the DRM agent is automatically started to check the integrity of the package by using the information contained in the content package header and prevent DoS attacks.

The content user 140 receives the authentication of the content package and the user through the analysis information and the user information from the content distribution system 130, and then licenses the corresponding content package to the content management system 120 and the content distribution system 130. ) Can be requested and received to use the content.

3 is a field example for configuring a license issued from a content management system according to the present invention, and FIG. 4 is a field example for configuring a license issued from a content distribution system according to the present invention.

Meanwhile, as described above, when the content distributor 110 registers the content, the content management system 120 performs encryption on the corresponding content. At this time, the biggest technical problem is the use of distributed generation / distribution technology for the keys used to decrypt digital content package files, providing protection for digital content sources that can occur when content distributors and content distributors are different. To provide a transparent means of profit sharing between content distributors and distributors.

To solve this problem, the content management system combines two pieces of information, Key ID and Key Seed, to generate the key for package decryption. Both of the above information is composed of 128-bit size and the two information must be combined to generate a key to be used for decryption, and even if any one is leaked, it is impossible to directly decrypt the file.

Therefore, even if the content distribution system has the package and license information for the content, it is impossible to extract the original content for the package. In addition, the key seed information not included in the package may be transmitted from the content distribution system through a license in an encrypted form using the user's public key from the content management system. As a result, license tampering, user non-repudiation, and transparent log management are achieved.

5 is a block diagram of a digital content copyright protection system according to the present invention, which includes a content distributor authentication means 510, encryption / decryption key distribution generation / distribution means 520, package generation means 530, and package distribution means 540. Package integrity verification / information analysis means 550, package / user authentication means 560, license management / control means 570, and application control / content usage means 580.

Referring to the figure, the content distributor authentication means 510 authenticates the digital content distributor. The encryption / decryption key distribution generation / distribution means 520 generates and distributes an encryption / decryption key to encrypt and decrypt the digital content to be distributed by the authorized distributor.

The package generating means 530 generates a digital content package in the form of distribution of digital content to be distributed using the generated and distributed encryption / decryption key, and the package distribution means 540 distributes the generated digital content package.

The package integrity verification / information analyzing means 550 checks the integrity of the digital content package and analyzes the corresponding information through the header information of the distributed digital content package. The package / user authentication means 560 authenticates the digital content package and the user using the analyzed information and the digital content user information.

The license management / control means 570 controls the usage period, the number of times, and the available commands of the content using the license information based on the authenticated result. The application control / content usage means 580 intercepts file input / output request messages such as open, read, other commands, closes, and exits between the application and the file system in which the encrypted digital content package is stored.

On the other hand, such a digital content copyright protection system, if the digital content distributor and distributor differ, the profit distribution for distributing profits between the distributor and the distributor while protecting the digital content original using a key used for digital content package encryption and decryption. Means may further comprise. Alternatively, if the digital content distributor and the distributor are different, the license information and key information necessary for restoring the digital content package may be further obtained from the distributor and the distributor, and may further include a profit distribution means for distributing profits between the distributor and the distributor. have.

On the other hand, such digital content copyright protection system further adds the content distributor's digital signature for the message digest to the package header, further adding DoS that may occur during distribution of the digital content, and tamper proof means for preventing the tampering of the digital content. It may include. Alternatively, the apparatus may further include tamper-proof means for preventing package regeneration, re-registration, redistribution, and user disclaimer through hash or electronic signature when the digital content user changes the legal content.

The present invention is a digital content copyright protection system that focuses on key distribution generation / distribution technology, integrity and license verification, user non-repudiation, and content source protection function, such as document usage control method, usage history recording / transmission, file encryption / decryption method, etc. You can use the same technology.

6 is a conceptual diagram illustrating a document usage control scheme for better understanding of the present invention. Kernel-level driver or hooking module that can capture each of the specific user operations such as "Save", "Save As", "Copy (Cut) & Paste", "Screen Capture" and "Print" at the most appropriate location Are installed on the client computer.

When a specific state change occurs, they detect it, stop the normal flow, and then block or allow the original operation by referring to the authority set in the Running Document Table, and additionally record the log.

7 is an example of a Running Document Table, which manages key information about package documents currently being viewed. To interact with the drivers and modules that will monitor and control the original document, use the Window Handle of the currently open source document as the only identifier, and access permission information of the relevant document extracted from the license as an attribute. Will have

As described above, the digital content copyright protection service method based on the Internet file storage / sharing system can prevent content / license tampering detection and DoS attack through message digest and digital signature.

In addition, public key encryption and decryption and digital signatures can prevent user denial and transparently distribute profits between content providers and content distributors, or rights holders. If you do this, you can solve the problem of content source protection.

Claims (5)

In the system for protecting the copyright of the digital content circulated on the Internet file storage / sharing system, Content distributor authentication means for authenticating the digital content distributor; Encryption / decryption key distribution / generation means for distributing and generating an encryption / decryption key for encrypting and decrypting the digital content to be distributed by the distributor; Package generating means for generating a digital content package in a distribution form of digital content to be distributed using the distributed and generated encryption / decryption keys; Package distribution means for distributing the generated digital content package; Package integrity verification / information analysis means for checking the integrity of the digital content package and analyzing the corresponding information through the header information of the distributed digital content package; Package / user authentication means for authenticating a digital content package and a user using the analyzed information and digital content user information; License management / control means for controlling the usage period, the number of times of use, the available commands, and the like, using the license information based on the authentication result; And And means for using application control / content to intercept file input / output request messages such as open, read, other commands, close, and exit between the application and the file system where the encrypted digital content package is stored. Digital contents copyright protection system based on internet file archiving / sharing system. According to claim 1, wherein the digital content copyright protection system, If the digital content distributor and the distributor is different, the Internet file further comprises a profit sharing means for distributing profits between the distributor and the distributor while protecting the digital content source by using the key used to encrypt and decrypt the digital content package. Digital contents copyright protection system based on archiving / sharing system. The digital content copyright protection system of claim 1, If the digital content distributor and the distributor is different, the license information and key information necessary for restoring the digital content package is obtained from the distributor and distributor, respectively, characterized in that it further comprises a profit distribution means for distributing profits between the distributor and the distributor. Digital contents copyright protection system based on internet file archiving / sharing system. According to claim 1, wherein the digital content copyright protection system, Internet of contents comprising a DoS (Denial of Service) that can occur during the distribution of digital content by adding the content distributor's digital signature for the message digest in the package header, and the Internet further comprises a tamper-proof means for preventing the digital content from being tampered with. Digital contents copyright protection system based on file archiving / sharing system. According to claim 1, wherein the digital content copyright protection system, Digital contents based on Internet file archiving / sharing system further comprising tamper proof means to prevent package regeneration, re-registration, redistribution, and user denial through hash or electronic signature when changing the legitimate contents of digital contents user Copyright protection system.