KR20050111533A - Digital contents electronic commerce system and method in which digital right is protected and memory media recoding program to operate the method - Google Patents

Abstract

The present invention relates to a digital content electronic commerce system and method, comprising: a content management server for registering meta information of digital content, generating encrypted content, and managing distribution and settlement information of digital content; A usage right issuing server for paying a fee from a user, issuing a right to use the encrypted content to a user computer, and transmitting digital content transaction information to the content management server; A service provider server which accesses the content management server to search and select a registered digital content list and a profit condition, to register the encrypted content in its content transmission server, and to transmit the encrypted content to a user computer; A permission management module for authenticating all decryption requests for the use rights of encrypted contents, obtaining the use rights from the use rights issuing server, and decrypting the use rights, from the use rights decrypted by the use rights management module And a content reproducing module for decoding and reproducing the encrypted content, and at least one user computer including a protected storage area for storing a right of use of the encrypted content, thereby enabling a more efficient and secure digital content electronic commerce system. It can be provided.

Description

Digital contents electronic commerce system and method in which digital right is protected and memory media recoding program to operate the method}

The present invention relates to a digital contents electronic commerce system and method for protecting digital copyright, and a recording medium on which a program for executing the same is recorded. More specifically, the digital contents are encrypted to protect the digital copyright, and the encryption is performed. Content must be distributed online, and in order to play encrypted digital content, users must be granted a license (license) to pay the corresponding cost and provide a decryption key. Otherwise, by strictly controlling access to the encrypted content, The present invention relates to a technology that can effectively protect and manage copyrights of digital contents online.

The terms used in the present invention are defined as follows.

Digital Rights Management (DRM) refers to a function that protects and manages the rights of digital content creators. The usage right (license) means data that contains the decryption key used to decrypt the encrypted content and the contents specifying the right (number, duration) of the content. Metadata means data describing data. For example, content metadata is data that contains additional description of the content.

Recently, various digital works, such as music, movies, and publications, which are rapidly spreading through the Internet, are illegally infringed by intellectual property rights regardless of the will of the copyright holder due to file sharing such as P2P (personal file sharing) method online. Not only do they disrupt the order of commerce and undermine the creative will, but the disputes over copyright infringement continue.

Unlike analog content, digital content retains the same quality as the original after several copies. When digital content having such characteristics meets the Internet communication media, copies of the same quality as the original can be propagated infinitely rapidly. That's why content owners (e.g., Hollywood filmmakers) who have invested so much capital and effort are reluctant to digitize their content and commercialize it on the Internet. This climate eventually leads to disadvantages in that content consumers (users) cannot be provided with high quality content.

Currently, the method used to protect digital content provided by the Internet is a content access control method, which allows users to access and use content after subscribing to a content seller or service provider and paying for the content service price. The content security process is performed by using the charging authentication method in addition to the login method. However, such a content access control method, when a digital file is stored in a hard disk of a personal computer (Personal Computer) at the content service site (shopping mall) and then played, the user pays a fee and secures the content once. If you then copy the downloaded file to your relatives or colleagues, the content protection device will no longer work. Therefore, login-based digital protection is inevitably dependent on the conscience of the user.

To secure this flaw, DRM technology has emerged. This DRM technology first converts the content into an encrypted content (digital file format) via an encoder in the form of DRM packaging. The encryption key is used to encrypt the content. Users can copy and distribute this encrypted content at will, but a decryption key is necessary to use the encrypted content. In addition, the player is required to play the decrypted content. The player plays a role in controlling the use of digital content in addition to the decryption function. In other words, the user can use the content only within the content usage rights concluded with the operator at the time of downloading the content. That is, digital content copyright protection encrypts digital content using an encryption key and then pays a fair price to the user using the content. Accordingly, the digital copyright management system receiving the just payment notice transfers the user right including the decryption key to the user.

Therefore, in the digital copyright management system, the management and distribution of the right having the decryption key is very important. Also, if the information about the right is exposed to the outside of the system, the copyright management system will show a loophole in content protection. There is a problem that can be.

However, in the conventional DRM technology, there is a problem that a reliable means for controlling and restricting access to a use right including a decryption key so that only the authenticator can obtain the decryption information is not provided.

In addition, the currently proposed electronic commerce system or method using the DRM technology is based on a binary structure (or ternary structure including a digital content provider) consisting of a digital copyright management server as a business operator and a client as a consumer.

However, under such a system, there was a burden that the operator directly manages and operates the digital copyright management server, and an efficient system that allows a large number of Internet service providers to easily access the digital copyright management server to select and distribute digital contents that meet the conditions. There is a problem that does not provide.

In order to solve the above problems, an object of the present invention is to provide a means of ensuring the reliability to ensure that only the authenticator can obtain the decryption information by controlling and restricting access to the use authority including the decryption key. .

It is another object of the present invention to provide an efficient DRM e-commerce system and method that allows a plurality of Internet service providers to easily access digital copyright management servers to select and distribute digital content according to conditions.

In the digital copyright management system of the present invention for achieving the above object, in the digital content electronic commerce system in which at least one server and at least one user computer for managing a communication transaction is connected to the communication network,

A content management server for registering meta information of digital content, generating encrypted content, and managing distribution and settlement information of digital content; A usage right issuing server for paying a fee from a user, issuing a right to use the encrypted content to a user computer, and transmitting digital content transaction information to the content management server; A service provider server which accesses the content management server to search and select a registered digital content list and a profit condition, to register the encrypted content in its content transmission server, and to transmit the encrypted content to a user computer;

A usage rights management module for authenticating all decryption requests for the use rights of the encrypted contents, obtaining the use rights from the use rights issuing server, and decrypting the use rights; A content playback module for decoding and playing the encrypted content from the usage rights decrypted by the usage rights management module; It includes at least one user computer including a; protected storage area for storing the use rights of the encrypted content.

In this case, the permission management module is installed in the system operating system kernel of the user computer to authenticate all permission requests for the encrypted content, and access to the protected storage area only through the permission management module. It is done.

In addition, the digital content electronic commerce system may be stored in the protected storage area in a state where the usage rights are encrypted using an asymmetric algorithm.

In addition, the digital content electronic commerce system is connected to a content provider terminal that the content management server provides digital content and revenue conditions to the content management server, and inquiries in real time the transaction information of the digital content stored in the content management server It may be.

On the other hand, the digital content electronic commerce method of the present invention for achieving the above object, the electronic content in the digital content electronic commerce system connected to the communication network at least one or more servers and at least one user computer for managing a communication transaction In the method,

The service provider server retrieves and selects a list of digital content registered in the content management server and a profit condition, the content management server encrypts the selected digital content and transmits the encrypted content to the content transmission server, and the service provider encrypts the content. Registering a content with the content delivery server;

The user computer accessing the operator server to search for and select a digital content list to receive encrypted content;

The permission management module checks whether the encrypted content has a permission to use, and if there is no permission to use, request the issue of the use right to the use rights issuing server, and the use rights issuing server pays the fee from the user. Issuing a use right to the user computer and transmitting the corresponding digital content transaction information to the content management server, wherein the use right management module records the issued use right in the protected storage area;

The usage rights management module checks the existence of the use rights of the encrypted content, accesses the protected storage area and decrypts the use rights to the content play module if the use right exists, and the content play module decrypts the decryption. And extracting and decrypting the encrypted content from the decrypted content usage right.

In addition, another digital content electronic commerce method of the present invention, in the digital content electronic commerce system in which at least one server and at least one user computer managing a communication transaction is connected by a communication network,

The content provider terminal inputting content metadata information and a profit condition to the content management server and transmitting digital content, wherein the content management server registers the digital content information;

The service provider server retrieves and selects a list of digital content registered in the content management server and a profit condition, the content management server encrypts the selected digital content and transmits the encrypted content to the content transmission server, and the service provider encrypts the content. Registering a content with the content delivery server;

The user computer accessing the operator server to search for and select a digital content list to receive encrypted content;

The permission management module checks whether the encrypted content has a permission to use, and if there is no permission to use, request the issue of the use right to the use rights issuing server, and the use rights issuing server pays the fee from the user. Issuing a use right to the user computer and transmitting the corresponding digital content transaction information to the content management server, wherein the use right management module records the issued use right in the protected storage area;

The usage rights management module checks the existence of the use rights of the encrypted content, accesses the protected storage area and decrypts the use rights to the content play module if the use right exists, and the content play module decrypts the decryption. Extracting the content decryption information from the authorized usage rights and decrypting and playing back the encrypted content.

In still another aspect of the present invention, there is provided a digital content electronic commerce method in which a digital content electronic commerce system is connected in a digital content electronic commerce system in which at least one server and at least one user computer managing a communication transaction are connected through a communication network.

Transmitting, by any user computer A of the user computers, the encrypted digital content A to any user computer B;

The user right management module B of the user computer B checks whether the user has the right to use the encrypted content A, and if the user right does not exist, the user right issuing server requests issuance of the use right. After paying the usage fee from the user computer B, the user right is issued and the digital content transaction information is transmitted to the content management server, and the permission management module B records the issued permission in the protected storage area B. ;

The usage right management module B checks the existence of the use right of the encrypted content A, accesses the protected storage area B, decrypts the use right and transmits the content to the content playing module B, if there exists a use right, and plays the content. Module B includes the steps of extracting content decryption information from the decrypted usage rights and decrypting and playing encrypted content A.

On the other hand, the recording medium of the present invention for achieving the above object is a computer-readable recording medium that records a program for executing each step in the respective electronic commerce method on a computer.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a view schematically showing the overall configuration of the digital content electronic commerce system of the present invention.

Reference numeral 110 denotes a content management server (CSM), 120 denotes a download server (CDS) to an operator server, 130 denotes a license authority issuing server (RIS), and 300, 300A, 300B, and 300C denote user computers.

The content management server 110 serves to register meta information of digital content, generate encrypted content, and manage distribution and settlement information of digital content, and the operator server 120 accesses and registers the content management server 110. Inquiries and selection of the digital content list and the revenue conditions are registered and registered to the own content transmission server and transmits to the user computer, the authorization authority server 130 pays the user fee from the user Issuing the use rights 60 of the encrypted content 51 to the computer 300 and transmits the digital content transaction information to the content management server 110.

Briefly explaining the overall configuration of the digital content electronic commerce system of the present invention as shown.

① The copyright holder or the copyright provider can access the content management server 110, input his digital content 50 information, and inquire the sales status of the digital content 50 in real time. ② The user 300 accesses the service provider server 120 to search the digital content 50 list and requests and receives the encrypted content 51 of the desired digital content 50. ③ The user 300 pays the cost of the desired digital content to the usage right issuing server 130 and receives the usage right 60 for playing the encrypted content 51 from the usage right issuing server 130. ④ ⑤ (5) The encrypted content 51 may be propagated to another user 300A through the Internet by the user 300, which has downloaded the encrypted content 51 once. ⑥ Users (300A, 300B, 300C) that have obtained the encrypted content 51 through the Internet or the like, pay the fee for using the content to the license issuing server 130 in order to play the encrypted content (51). One (60) should be sent.

① in the above configuration can be selectively used in practicing the present invention. That is, the digital content may be provided offline from the digital content provider to the digital copyright management service provider under certain conditions and registered in the content management server 100.

As described above, the digital content electronic commerce system of the present invention encrypts the digital content 50 to generate the encrypted content 51 and distributes the encrypted content 51, and obtains the encrypted content 51 by an arbitrary path ( Even if the 300A, 300B, 300C) to pay the content usage cost and receive the use rights 60 having the decryption key for the encrypted content 51 to play the desired digital content.

Therefore, digital copyrights are protected through such a system, and digital contents are widely distributed through the Internet to spread the use of the corresponding digital contents and provide more profits to digital contents providers and operators.

Hereinafter, with reference to the drawings will be described in detail the specific content of the digital content electronic commerce system and method focusing on the characteristic parts of the present invention.

2 is a view showing in detail the packaging and registration step of the digital content of the digital content electronic commerce system of the present invention.

As shown, the service provider 400 accesses the content management server 110 and inquires the registered content. (Content name, revenue distribution condition, etc.) The service provider 400 determines the content to be serviced. And request it. The content management server 110 generates encrypted content 51 by applying copyright protection technology to the requested content, and the content management server 110 delivers the encrypted content 51 to the service provider 400. The service provider 400 that acquired the content registers it in its download server 120.

The above copyright protection technology is constructed as follows.

(1) Generates content meta information and generates encrypted content using a symmetric key algorithm.

(2) Issue and distribute a usage rights statement that contains the decryption key.

(3) In order to use encrypted content A, it is necessary to acquire the use right A (decryption key A of use right A).

(4) The encrypted content A without the use authority A cannot be leaked even if it is distributed and shared indefinitely.

(5) If a user who obtains only encrypted content A wants to use it, the user accesses the location information (URL) of the server for issuing the permission in the header of the encrypted content, requests the permission A, and charges the fee in this process. .

In the digital content electronic commerce system of the present invention, various Internet service providers can access the content management server and receive digital content according to the conditions. The service provider 400 generally has a portal site operator having a plurality of users (users). Could be.

Thus, unlike the prior art, by separating the content management server and the operator server and configured to allow a number of Internet operators to access the content management server to select and distribute the digital content of the appropriate conditions, the service provider only has a download server digital content Since distribution business is possible and many service providers are competitively connected, it is possible to build more efficient digital contents e-commerce system by providing digital contents to more consumers with better conditions.

3 is a diagram showing in detail the step of acquiring the digital content and its use rights in the digital content electronic commerce system of the present invention.

As shown, the user system includes a content playback module 310, a usage right management module 320, and a protected storage area 330. The content playback module 310 decrypts and plays the encrypted content 51 from the usage rights 60 decrypted by the usage rights management module 320, and the usage rights management module 320 plays the encrypted content 51. Control access to the usage rights (60) of the control panel, obtain the usage rights (60) from the usage rights issuing server (130), and decode the usage rights (60), and the protected storage area (330) It serves to store the use rights 60 of the encrypted content (51).

The user 300 accesses the service provider's system, retrieves the digital content list, requests the desired content, and acquires the encrypted content 51.

The content playback module 310 of the user 300 requests the usage right management module 320 for the usage right 60 of the target encrypted content 51 to be played. The permission management module 320 authenticates the requestor (content playback module) and checks the existence of the permission 60. If the permission 60 does not exist, the permission specified in the meta information of the encrypted content 51 Request for issuance of the use right 60 to the use right issuing server 130. The usage right issuing server 130 pays the usage fee from the user 300 and, when the usage fee is paid, issues the usage right 60 of the encrypted content 51 and transmits it to the user computer 300, sales information. To transmit to the content management server (110).

The usage rights management module 320 of the user 300 records the obtained usage rights 60 in the protection storage area 330 where access control is performed. The usage right management module 320 detects all requests for the protected storage area 330 and does not allow the unresolved requests.

As described above, the right to use the encrypted content is checked, obtained, and stored by the use right management module of the user system, so that the right to use the encrypted content can be obtained only when the fee for the digital content is paid.

4 is a diagram illustrating in detail the digital content reproduction step of the digital content electronic commerce system of the present invention.

As shown, the user instructs the content playback module 310 to play the encrypted content 51. The content playback module 310 requests the usage right management module 320 for the usage right 60 of the encrypted content 51. The permission management module 320 authenticates the requester of the content playback module 310, and if the authentication is successful, accesses the protection storage area 330, decrypts the requested permission 60, and delivers it to the permission management module 320. do. The content playing module 310 extracts the content decryption key from the usage right 60 to decrypt the encrypted content 51 and plays it under the specified conditions.

Application authentication for playing digital content consists of signature generation and verification using a public key encryption / decryption algorithm (asymmetric algorithm). The content playing module transmits the decryption key request message and the data (signature data) encrypted with the private key to its right management module. This signature data can be decrypted only with the public key of the content playback module.

Signature data verification is done according to the following procedure. The permission management module decrypts the signature value with the public key of the content playback module and compares the decrypted data with the request message. If the comparison is the same, it is proved that the private key of the content playback module is encrypted. This is because the private key of the content playing module is included only in the content playing module, so it is proved that the sender of the request data is the content playing module. If authentication is successful with the signature value, the permission management module accesses the protected storage area, extracts the decryption key, and delivers it to the content playback module.

Through this application authentication procedure, access to the permissions can be controlled primarily.

5 is a view showing in detail the digital content redistribution step of the digital content electronic commerce system of the present invention.

As shown, user A can redistribute encrypted content A 51 to a third user B. Redistribution is possible via any form of media that can transmit digital data (web, mail, peer-to-peer, bulletin boards, etc.).

User B can obtain the encrypted content A 51 through various media. User B instructs content playback module B 310 to play encrypted content A 51. The content playback module B 310 requests the usage right management module B 320 for the usage right A 60 of the encrypted content A 51. The usage right management module B 320 authenticates the content playback module B 310 which is the requester and, if the authentication succeeds, accesses the usage right issuing server 130 and requests the usage right A 60. The usage right issuing server 130 proceeds with the fee payment procedure and, when the payment is completed, transfers the use authority A 60 of the encrypted content A 51 to the use authority management module B 320 and transmits the sales information to the content management server. Transmit to 110. The permission management module B 320 decrypts the permission A 60 and delivers it to the content playback module B 310. The content playback module B 310 extracts the decryption key from the received permission A 60. The encrypted content A 51 is decrypted and then played back.

FIG. 6 is a view schematically illustrating a method for controlling access to a protected storage area in which a user right is stored in a digital content electronic commerce system of the present invention.

As shown, the permission management module 320 is installed in the operating system kernel (area that can not be changed or reconfigured by the user) of the user computer, the permission management module 320 present in the kernel mode is arbitrarily selected by the user It cannot be removed. Therefore, the protected storage area 330 becomes part of the storage area of the user system that is thoroughly secured by the permission management module 320. That is, all access requests to the protected storage area 330 are received by the permission management module 320, and it is impossible for the user to change this path arbitrarily due to the structure of the system operating system constituting the user system. Thus, no access to the protected storage area 330 can bypass the rights management module 320.

Therefore, the permission management module 320 monitors all requests for the storage device, and if a request for the protection storage area 330 comes in during an access request, the permission management module 320 rejects (errors) the protection storage area 330. Block access to

This access control technology to the protected storage area prevents the user, the owner of the system, from changing or forging the usage rights (primary security).

The permission management module 320 performs an authentication procedure through an asymmetric algorithm, and if not authenticated, any request of any type is rejected. In addition, the usage right is stored in the protection storage area 330 in a state encrypted with the public key of the asymmetric algorithm, so that the use right can have the private key corresponding to the public key.

Therefore, even if the access control security function for the permission management module is disabled due to an abnormal error of the system, the content of the permission is secured. (Second security)

As described above, in the detailed description of the present invention has been described with respect to specific embodiments, various modifications are of course possible without departing from the scope of the invention. Therefore, the scope of the present invention should not be limited to the described embodiments, but should be defined not only by the scope of the following claims, but also by those equivalent to the scope of the claims.

By the above-described configuration, the present invention can provide an efficient DRM e-commerce system and method that allows a plurality of Internet service providers to easily access the digital copyright management server to select and distribute the digital content according to the conditions.

In addition, digital copyrights are more securely protected by providing a more reliable means for controlling and restricting access to usage rights, including decryption keys, so that only authenticators who have paid the fee for digital content can obtain the decryption information. Digital content electronic commerce system and method can be implemented.

1 is a view schematically showing the overall configuration of the digital content electronic commerce system of the present invention.

2 is a view showing in detail the packaging and registration step of the digital content of the digital content electronic commerce system of the present invention.

3 is a diagram showing in detail the step of acquiring the digital content and its use rights in the digital content electronic commerce system of the present invention.

4 is a diagram illustrating in detail the digital content reproduction step of the digital content electronic commerce system of the present invention.

5 is a view showing in detail the digital content redistribution step of the digital content electronic commerce system of the present invention.

FIG. 6 is a diagram schematically illustrating a method for controlling access to a protected storage area in which a user right is stored in a digital content electronic commerce system of the present invention.

Explanation of symbols on main parts of drawing

50: digital content 51: encrypted content

60: permission 110: content management server

120: download server (user server) 130: permission issue server

300: user (user computer) 310: content playback module

320: permission management module 330: protected storage area

Claims (9)

A digital content electronic commerce system in which at least one server for managing a communication transaction and at least one user computer are connected to a communication network, A content management server for registering meta information of digital content, generating encrypted content, and managing distribution and settlement information of digital content; A usage right issuing server for paying a fee from a user, issuing a right to use the encrypted content to a user computer, and transmitting digital content transaction information to the content management server; A service provider server which accesses the content management server to search and select a registered digital content list and a profit condition, to register the encrypted content in its content transmission server, and to transmit the encrypted content to a user computer; A usage rights management module for authenticating all decryption requests for the use rights of the encrypted contents, obtaining the use rights from the use rights issuing server, and decrypting the use rights; A content playback module for decoding and playing the encrypted content from the usage rights decrypted by the usage rights management module; A digital content electronic commerce system comprising at least one user computer including a protected storage area for storing the use rights of the encrypted content. The method of claim 1, The permission management module is installed in a system operating system kernel of the user computer to authenticate all permission requests for encrypted content, and access to the protected storage area only through the permission management module. Digital Contents E-Commerce System. The method according to claim 1 or 2, And the usage right is stored in the protected storage area in an encrypted state using an asymmetric algorithm. The method according to claim 1 or 2, The content management server provides digital content and revenue conditions to the content management server, and digital content electronics, characterized in that connected to the content provider terminal for inquiring in real time the transaction information of the digital content stored in the content management server Commerce system. The method of claim 3, wherein The content management server provides digital content and revenue conditions to the content management server, and digital content electronics, characterized in that connected to the content provider terminal for inquiring in real time the transaction information of the digital content stored in the content management server Commerce system. A method of electronically commerce digital content in a digital content electronic commerce system in which at least one server and at least one user computer managing a communication transaction are connected through a communication network, The service provider server retrieves and selects a list of digital content registered in the content management server and a profit condition, the content management server encrypts the selected digital content and transmits the encrypted content to the content transmission server, and the service provider encrypts the content. Registering a content with the content delivery server; The user computer accessing the operator server to search for and select a digital content list to receive encrypted content; The permission management module checks whether the encrypted content has a permission to use, and if there is no permission to use, request the issue of the use right to the use rights issuing server, and the use rights issuing server pays the fee from the user. Issuing a use right to the user computer and transmitting the corresponding digital content transaction information to the content management server, wherein the use right management module records the issued use right in the protected storage area; The usage rights management module checks the existence of the use rights of the encrypted content, accesses the protected storage area and decrypts the use rights to the content play module if the use right exists, and the content play module decrypts the decryption. And extracting and decrypting the encrypted content from the content decryption information from the authorized usage rights. A method of electronically commerce digital content in a digital content electronic commerce system in which at least one server and at least one user computer managing a communication transaction are connected through a communication network, The content provider terminal inputting content metadata information and a profit condition to the content management server and transmitting digital content, wherein the content management server registers the digital content information; The service provider server retrieves and selects a list of digital content registered in the content management server and a profit condition, the content management server encrypts the selected digital content and transmits the encrypted content to the content transmission server, and the service provider encrypts the content. Registering a content with the content delivery server; The user computer accessing the operator server to search for and select a digital content list to receive encrypted content; The permission management module checks whether the encrypted content has a permission to use, and if there is no permission to use, request the issue of the use right to the use rights issuing server, and the use rights issuing server pays the fee from the user. Issuing a use right to the user computer and transmitting the corresponding digital content transaction information to the content management server, wherein the use right management module records the issued use right in the protected storage area; The usage rights management module checks the existence of the use rights of the encrypted content, accesses the protected storage area and decrypts the use rights to the content play module if the use right exists, and the content play module decrypts the decryption. And extracting and decrypting the encrypted content from the content decryption information from the authorized usage rights. A method of electronically commerce digital content in a digital content electronic commerce system in which at least one server and at least one user computer managing a communication transaction are connected through a communication network, Transmitting, by any user computer A of the user computers, the encrypted digital content A to any user computer B; The user right management module B of the user computer B checks whether the user has the right to use the encrypted content A, and if the user right does not exist, the user right issuing server requests issuance of the use right. After paying the usage fee from the user computer B, the user right is issued and the digital content transaction information is transmitted to the content management server, and the permission management module B records the issued permission in the protected storage area B. ; The usage right management module B checks the existence of the use right of the encrypted content A, accesses the protected storage area B, decrypts the use right and transmits the content to the content playing module B, if there exists a use right, and plays the content. And module B extracting content decryption information from the decrypted usage rights and decrypting and playing encrypted content A. A non-transitory computer-readable recording medium having recorded thereon a program for executing each step in the digital content electronic commerce method of claim 6.