KR20070051156A - File identification system in distributed network and method thereof - Google Patents

Abstract

The present invention relates to a file identification / authentication system of a distributed network system, wherein the file identification / authentication system of a distributed network system includes a plurality of user computers connected to a shared server through a network to exchange, transfer, or receive files. And a file verification / authentication system of a distributed network system in which a plurality of user computers are interconnected through a network to exchange files and receive data between the user computers. When a specific file is downloaded to a shared server or another user's computer, the primary file identification information of the download request file is extracted and transmitted through a network, and the secondary file identification information request transmitted through the network is received. Confirm secondary file of download request file A copyright management module for extracting and transmitting the data through a network and connected to a network with the user computer and storing copyright related information, and using the primary file identification information transmitted from the copyright management module, the copyright of the download request file. If it is determined whether or not to protect the copyright protection using the primary file confirmation information, the second request for receiving the file confirmation information received by the copyright management module, and the download request using the secondary file confirmation information It is a file verification / authentication system of a distributed network system, characterized in that it comprises a copyright management server for determining whether or not the copyright of the file.

According to the present invention, a file transmitted through a distributed network is monitored in real time, confirmed and authenticated, and if the file is subject to copyright protection, the copyright management according to the copyright holder's setting can be performed in real time. It is possible to protect copyrights in real time and to accurately identify files, which can reduce copyright protection.

DRM, Fingerprinting, Digital Copyright, Copyright Protection, Copyright Management, Distributed Network

Description

File identification / authentication system of distributed network system and its providing method {File identification system in distributed network and Method

1 is a schematic configuration diagram of a file verification / authentication system of a distributed network system according to an embodiment of the present invention.

2 is a block diagram illustrating a copyright management module according to an embodiment of the present invention.

3 is a block diagram of a copyright management unit according to an embodiment of the present invention.

4 is a flowchart illustrating a process of performing file verification / authentication in a copyright management server according to an exemplary embodiment of the present invention.

5 is a flowchart illustrating a process of performing file checking / authentication in a copyright management module according to an embodiment of the present invention.

Figure 6 is a flow chart showing a process of performing file verification / authentication in the copyright management server according to another embodiment of the present invention.

Explanation of symbols on the main parts of the drawings

100a to 100n: user computer

110: network 120: shared server

130: copyright management module 140: copyright management server

160: copyright management unit 200: communication control unit

202: file information analysis unit 204: security control unit

206: download control unit 300: communication control module

302: DB control module 304: fingerprinting analysis module

306: Copyright protection module 308: Main module

The present invention relates to file identification and authentication in a distributed network, and more particularly, to a file of a distributed network that performs file identification and authentication using keyword information of a file, encrypted hash value of a file, and fingerprinting of a file. It relates to a verification / authentication system and a method of providing the same.

Currently, copyright protection and management on Peer to Peer (P2P) or the web is based on a method in which rights holders who have exclusive rights in advance securely distribute their contents through the Digital Rights Management System (DRM System). Has been concentrated on.

However, conversion from existing offline media (general CDs for music, DVDs for movies, comic books for comics, books for books themselves, etc.) to digital information can be achieved by extracting MP3 files from CDs, and video from DVDs to other formats. Easily extract files, scan from books and comics, or extract text.

Therefore, networks (P2P, web storage service, web service portal site) that general users (netizens) easily convert and distribute content into digital information are spreading.

Due to this proliferation, the infringement of intellectual property rights of digital contents is increasing day by day, and the problem of copyright protection of digital contents in decentralized networks is increasing day by day.

The purpose of the file identification and authentication method is to efficiently manage copyrights in a distributed network, and to change the managed works into a legal content trading market through filtering and pricing.

First of all, a distributed network is a network in which various files (general files, music, videos) are freely distributed in P2P, file storage through the web, and general web services.

Under such a distributed network, there are various ways to identify files, analyze files, and identify and authenticate identical multimedia files.

The method of analyzing keyword of file, comparing the hash value of file, determining whether the file is identical or not, inserting watermark into file, and verifying and authenticating file by comparing fingerprinting information of file come.

The most basic method of checking a file is a method of comparing the files using the keyword of the file, that is, the file name or the meta information of the file (file information such as creation date, author, artist name, etc.), and determining the identity.

However, the file verification method through keyword analysis has a problem that accurate file identification is impossible because the file name of the file or the meta information of the file is easily changed.

In general, a method of verifying a file through analysis of the file itself may analyze the file based on an encrypted hash value and monitor the transmission of the file over the network.

The encrypted hash value is a unique value of the file itself. Since the same file has the same hash value, the identity of the file can be determined by checking the hash value.

In this case, the file distribution network (P2P, web storage, web service) must support each module or software that can monitor the network.

However, in the case of a multimedia file, one content (for example, Kim Gun Mo's 'excuse') exists in various formats and as various files.

One analog content is converted into a plurality of digital contents according to the software, encoding method, bit rate, etc. used in the process of converting the content of Kim Gun Mo's 'exclusion' into digital contents.

In other words, a single content exists in various types of files, and all of the files are converted into various digital contents (various files) from the same intellectual property (content).

Therefore, when analyzing a file using an encrypted hash value, since only the same file can be determined, there is a problem that the digital content existing in various forms cannot be sufficiently protected.

In order to solve this problem, a method of determining the similarity of digital content (ie, whether it is an intellectual property as a concept of factual identity) has been studied. .

The method of verifying a file by using fingerprinting is widely received because it can determine whether the same intellectual property is regardless of the format or size of the file.

In general, in the case of a music file converted from one analog music content, there are various types of files depending on the conversion software, encoding method, bit rate, etc., but unique characteristics of the music content (for example, constant frequency analysis The characteristic value calculated by the algorithm has a value that does not change depending on the type of file.

Therefore, when checking a file using such fingerprinting, the content can be determined as the same source (same intellectual property) regardless of the type of the file.

However, there is a problem that it is too expensive to check the file in real time for the exchange and distribution of the file in real time on the distributed network using such a fingerprinting technique (a method of verifying the file using finger printing). .

In other words, configuring a system to search and analyze a large number of various contents (movies, music, games, documents, etc.) exchanged and distributed in real time in real time makes the system burden heavy and it is difficult to secure real-time. There was this.

In order to solve the problems of the prior art as described above, the present invention provides a distributed network capable of identifying files transmitted in real time in a distributed network by combining keyword information such as a fingerprinting technique, an encrypted hash technique, and the name of a file itself. In order to provide a file verification / authentication system and a method thereof.

In order to achieve the above object, according to a preferred embodiment of the present invention, a plurality of user computers are connected to a shared server via a network to exchange files, receive or transmit files, or a plurality of user computers In a file identification / authentication system of a distributed network system in which files are exchanged and exchanged between user computers through a mutual connection, the computer is mounted on the user computer, and the user computer is identified to the shared server or the other user computer through a network. When requesting a file download, the primary file identification information of the download request file is extracted and transmitted through a network, and the secondary file identification information request is received by receiving a secondary file identification information request transmitted through the network. Copyright to extract and transmit information over the network Lee module; And a copyright related information connected to a network with the user computer, and determining copyright protection of the download request file by using primary file identification information transmitted from the copyright management module. If it is unsuccessful to determine whether to protect the copyright using the confirmation information, the copyright management module requests and receives the second file confirmation information and uses the secondary file confirmation information to determine whether the copyright protection of the download request file is copyright management. Provided is a file verification / authentication system for a distributed network system, including a server.

In addition, in order to achieve the above object, according to another embodiment of the present invention, a plurality of user computers are connected to a shared server through a network to exchange, transfer or receive files, or a plurality of user computers In a file identification / authentication system of a distributed network system in which files are exchanged and transmitted between user computers through a network, the computer is mounted on the user computer, and the user computer is connected to the shared server or the other user computer through a network. A copyright management module for extracting the primary file identification information and the secondary file identification information of the download request file and transmitting it through a network when requesting a specific file download; And connected with a network of the user computer, copyright-related information is stored, and receives the primary file identification information and the secondary file identification information transmitted from the copyright management module, and uses the primary file identification information. To determine whether the download request file is copyright protected, and if it is unsuccessful to determine whether to protect the copyright using the primary file identification information, to determine whether to protect the copyright of the download request file using the secondary file identification information. Provided is a file verification / authentication system for a distributed network system, including a management server.

In addition, in order to achieve the above object, according to another embodiment of the present invention, a plurality of user computers equipped with a copyright protection module for analyzing and transmitting the information of the file and files transmitted from the copyright protection module In a file verification / authentication method of a copyright protection system connected to a copyright management server that performs file identification / authentication using information, the method comprising: (a) receiving a hash value of a download request file transmitted from the copyright protection module; Doing; (b) comparing the hash value with at least a hash value of a copyrighted file to determine whether the download request file is a registered work; (c) requesting keyword information and fingerprinting information of the download request file from the copyright protection module when there is no identical hash value in step (b); (d) receiving keyword information and fingerprinting information of the download request file from the copyright protection module; And (e) determining whether the download request file is a registered work using the keyword information and the fingerprinting information, wherein the copyright management server includes a hash value database, a keyword information database, and fingerprinting of the registered work. Provided is a file verification / authentication method for a distributed network system, comprising an information database.

In addition, in order to achieve the above object, according to another embodiment of the present invention, a plurality of user computers equipped with a copyright protection module for analyzing and transmitting the information of the file and files transmitted from the copyright protection module In the file verification / authentication method of a copyright protection system connected to a copyright management server that performs file identification / authentication using information, (A) a hash value and a keyword of a download request file transmitted from the copyright protection module; Receiving information and fingerprinting information; (B) comparing the hash value with at least the hash value of the copyrighted file and determining whether the download request file is a registered work; (C) if there is no identical hash value in step (b), determining whether the download request file is a registered asset using the keyword information and the fingerprinting information received in step (a); The copyright management server is provided with a file identification / authentication method of a distributed network system, comprising a hash value database, a keyword information database, and a fingerprinting information database of a registered work.

Hereinafter, with reference to the accompanying drawings will be described in detail a preferred embodiment of the file verification / authentication system of the distributed network system according to an embodiment of the present invention.

1 is a schematic configuration diagram of a file verification / authentication system of a distributed network system according to an exemplary embodiment of the present invention.

In more detail, FIG. 1A is a schematic configuration diagram of a file verification / authentication system of a P2P distributed network system, and FIG. 1B is a schematic configuration diagram of a file verification / authentication system of a distributed network system using a shared server.

As shown in FIG. 1A, the file verification / authentication system of the P2P distributed network system according to the present invention includes a plurality of user computers 100, a shared server 120, and a network in which the copyright management module 130 is mounted. 110 and a copyright management server 140, as shown in Figure 1b, the file verification / authentication system of a distributed network system using a shared server according to an embodiment of the present invention is a copyright management module The server 130 may include a plurality of user computers 100, a shared server 120, a network 110, and a copyright management server 140 mounted thereon.

In a P2P distributed network system, a plurality of user computers 100 are interconnected via a network 110, and the user computer 100a itself provides a file providing server that provides files to other user computers 100n. At the same time to perform a function to download a file from another user computer (100n).

In other words, the P2P software installed in the user computer 100 functions as a kind of virtual file providing server.

In the distributed network system using the shared server 120, a plurality of user computers 100 are connected to the shared server 120 where the files are stored, and the user computer 100 downloads the files stored in the shared server 120.

In general, the transfer of files using a web-storage service or a website storage service provides a distributed network system using such a shared server.

The plurality of user computers 100 are connected to the sharing server 120 or another user computer 100 through the network 110, and transmit or receive specific files with the sharing server 120 or other user computer 100. do.

In the following description, the user computer 100 is used to mean not only a personal computer but also a personal information communication device such as a PDA and a portable mobile communication device.

The user computer 100 includes a key input device (not shown), a storage device (not shown), a wired / wireless network device (not shown), a central processing unit (not shown), and a memory (not shown) for data communication. have.

The shared server 120 includes a storage device (not shown) and a wired / wireless network device (not shown), a central processing unit (not shown), and a memory (not shown) for data communication. Is connected through a network, files transmitted from the plurality of user computers 100 are stored, and the stored files are transmitted to the user computer 100.

The shared server 120 may correspond to a storage server that provides a web storage service, a web service server that provides a predetermined storage space, and the like, hereinafter, such a server is collectively referred to as a shared server 120.

The copyright management module 130 may be implemented in hardware or software and mounted on the user computer 100.

Typically included in the P2P program or download program in the form of a module is mounted on the user computer 100, the user computer 100 to analyze the information of the file requesting the download, but the P2P program or the download program of the module It does not have to be included in the form, it is linked to the P2P program or download program, it is mounted on the user computer 100 in a form that can control the P2P program or download program.

The copyright management module 130 extracts primary file identification information of a download request file when a user operates a user computer () to request a download of a specific file to another user computer or a shared server () connected through a network (). Is transmitted to the copyright management server 140 through the network 110, and receives the secondary file verification information request transmitted from the copyright management server 140 through the network and is downloaded by the user computer 100 through the network (). The secondary file identification information of the requested file is extracted and transmitted through the network 110.

More preferably, the copyright management module 130 according to the present invention extracts and transmits an encrypted hash value (hereinafter referred to as a 'hash value') of the file as primary file identification information of the download request file, and transmits the secondary file. As identification information, keyword information and fingerprinting information of a file are extracted and transmitted.

Of course, a specific value having an intrinsic value (absolute value) according to a file other than a hash value is used as the primary file confirmation information, and as the secondary file confirmation information, the similarity of the file content is relatively relatively other than keyword information and fingerprinting information. It will be apparent to those skilled in the art that specific values that can be determined can be set and used.

The hash value used as the primary file identification information in the present invention may be a hash value of the entire file, or may be a hash value of a certain portion of the file.

That is, when the file is stored in the shared server 120 and transmitted to the user computer 100, the hash value of the entire file may be used, but the file is different from the user computer 100 through the network (). When transmitted to the user computer 100, the hash value of the portion of the file transmitted in real time from the user computer 100 may be configured to be used for file verification.

The hash value is a unique value of a specific file. Since the same file has the same hash value, it is frequently used to determine the identity of a file.

That is, since the hash value of the file created by using the same hash function always has the same value, the hash value is used as the primary information of the file identification, and this hash function uses the hash function basically supported in the program. It can be extracted by using a combination of functions, or a combination of specific functions can be written to match the definition of a hash function to extract a hash value.

Since a technique for extracting such a hash value uses a known technique, a detailed description thereof will be omitted.

The keyword information of the file refers to the meta information of the file such as the file name, creation date, file creator, etc. The fingerprinting information of the file is information for determining the content identity of each file, even if the file format or size is different. In the case of a file having the same contents, the same fingerprinting information is provided.

The fingerprinting information used as the secondary file confirmation information in the present invention may be fingerprinting information of the entire file, or may be fingerprinting information of a certain portion of the file (ie, 1M of the front part of the file). .

A number of techniques have already been known for obtaining fingerprinting information of such a file. In the present invention, fingerprinting information is obtained using a known technique.

Briefly, in the case of a music file (MP3 format, etc.), even if there is a change in the format or size of the file, the fingerprinting information through frequency analysis of the music file has the same format as long as it has the same music content.

In addition, in the case of a video file or an image file, unique fingerprinting information can be extracted by comprehensively analyzing image information such as color arrangement and image size using an image analysis algorithm.

Therefore, in the present invention, the fingerprinting information as described above is used as the data for determining the file identity (actual identity).

Further, more preferably, the copyright management module 130 according to the present invention downloads a file requested by the user computer 100 to download through the network 110 according to the copyright management information transmitted from the copyright management server 140. Will be controlled.

That is, if the file requested by the user computer 100 is the same file as the copyright content registered in the copyright management server 140, and is subject to copyright protection, the copyright management module 130 is stored in the copyright management server 140. By controlling the download request user computer 100 in accordance with the copyright management information is to perform a copyright management function such as blocking the download of the file, or charging the usage fee.

In addition, the copyright management module 130 according to the present invention, the primary file identification information of the file that the user computer 100 requests the download to the shared server 120 or another user computer 100 connected via the network 110 And second file identification information are simultaneously extracted and transmitted to the copyright management server 140 through the network 110, and the file download of the user computer 100 is performed according to the copyright management information transmitted from the copyright management server 140. It may be configured to control.

The copyright management server 140 includes a storage device (not shown) and a wired / wireless network device (not shown), a central processing unit (not shown), and a memory (not shown) for data communication. It is connected to the network 110, and determines whether the download request file is a copyright management target file by using the primary and secondary file identification information transmitted from the copyright management module 130, and, if the copyright management target file, The copyright management information for controlling the download of the file is transmitted to the copyright management module 130 according to the copyright management information.

More preferably, the copyright management server 140 according to the present invention may include a copyright information database 142, 144, 146, 148, 150 and a copyright management unit 160.

The copyright information database 142, 144, 146, 148, 150 is structured and stored the information of the copyrighted content and copyright management information.

In order to perform the file verification / authentication function, the copyright management server 140 according to the present invention includes a hash value, keyword information, finger printing information, and asset management information (ie, a hash value of a work registered in the copyright management server 140). When a work is downloaded, the steps taken to protect the work are structured and stored.

Even more preferably, copyright information databases 142, 144, 146, 148, 150 include index database 144, keyword / meta information database 142, fingerprinting database 146, copyright group database 148 and copyright management. It may include an information database 150.

The index database 144 stores the hash value of the multimedia file converted from the registered copyright content, and the keyword / meta information database 142 stores the keyword information of the multimedia file converted from the registered copyright content. The fingerprinting database 146 stores structured fingerprinting information of registered copyright content.

In addition, the copyright group database 148 includes at least one index database information, at least one keyword database information, fingerprinting database information, and registered copyright content related information of the copyright content registered in the copyright management server 140. It is structured and stored as content information.

That is, information of a work having the same fingerprinting information (that is, a work having the same content), hash values (ie, a plurality of hash values) of files having various forms and sizes generated by converting the work, and a plurality of keywords. And meta information is structured and stored so as to be managed as one registered asset information.

The copyright management information database 150 stores structured copyright management information including download control information of registered copyright content.

The copyright management unit 160 receives primary file confirmation information transmitted from the copyright management module 130 to determine whether the download request file is copyright protected by referring to the copyright information databases 142, 144, 146, 148, and 150. If it is unsuccessful in determining whether to protect the copyright through the primary file verification information, the second file verification information is requested and received by the copyright management module 130 and stored in the copyright information database 142, 144, 146, 148, 150. After determining whether to protect the copyright by comparing the information with the secondary file identification information, if the download request file is the copyright protection target, refer to the copyright information database (142, 144, 146, 148, 150) and manage the corresponding copyright management information. The module 130 transmits.

2 is a block diagram illustrating a copyright management module according to an embodiment of the present invention.

As shown in FIG. 2, the copyright management module according to an exemplary embodiment of the present invention may include a communication controller 200 and a file information analyzer 202.

The file information analyzer 202 extracts an encrypted hash value of a file by analyzing the file when a download request for a specific file is requested from the shared server 120 or the other user computer 100 from the user computer 100. The primary file check information is configured and output.

In addition, when the secondary file confirmation information request is input from the copyright management server 140, the keyword information and the fingerprinting information of the download request file are extracted to construct and output the secondary file confirmation information.

In addition, the file information analysis unit 202 according to the present invention analyzes the file when there is a download request for a specific file from the shared server 120 or another user computer 100 from the user computer 100 of the file Extract the encrypted hash value to construct the primary file verification information, extract the keyword information and the fingerprinting information of the download request file to construct the secondary file verification information, and then extract the primary file verification information and the secondary file verification information. It may be configured to output at the same time.

The communication control unit 200 performs wired / wireless data communication with the copyright management server 140.

That is, the primary file confirmation information output from the file information analysis unit 202 is transmitted to the copyright management server 140, and the file information analysis unit is received by receiving the secondary file confirmation information request transmitted from the copyright management server 140. 202, and transmits the second file check information output from the file information analyzer 202 to the copyright management server 140, in addition to the copyright management module 130 and the copyright management server 140 Overall control and performance of data communications will be performed.

In addition, more preferably, the copyright management module 130 according to the present invention may further include a security controller 204.

The security control unit 204 encrypts and decrypts the data transmitted between the communication control unit 200 and the copyright management server 140, and blocks the hacking attempt of the copyright management book 140 through the user computer 100.

That is, the security control unit 204 grasps the program execution memory area and transmits the change information to the copyright management server 140 when the service-related points and important matters are changed, encrypts a specific service-related message, and transmits an abnormal message. Upon receipt, the information is transmitted to the copyright management server 140, the transformation and the state are measured by calculating a unique key for the executable file, and the specific IP connection or DNS (Domain Name Sever) of the copyright management server 140 If you block the connection, the service will not be provided.

In addition, even more preferably, the copyright management module 130 according to the present invention may further include a download controller 206.

The download control unit 206 controls the download of the file requested by the user computer 100 according to the copyright management information transmitted from the copyright management server 140.

The copyright management information may be any one of a file download restriction, a billing request for a file download, and a connection to a specific site in exchange for a file download.

That is, when the copyright holder has set copyright management information as a download restriction to completely prohibit the downloading of a work file through the distributed network, the download control unit 206 completely limits the download of the file.

If the copyright holder has set the copyright management information by charging a certain fee for downloading a work file through the distributed network, the download control unit 206 performs the billing process, and only if the fee is paid. Will allow the download of.

Alternatively, when a copyright holder visits a specific site for downloading an asset file and sets the download to be allowed when the user performs a specific action (for example, viewing an advertisement) using the user computer 100, the download control unit ( 206 controls the user computer 100 to connect to the site, and allows the download of the file only when a specific action set by the copyright holder is performed.

3 is a block diagram illustrating a copyright management unit according to an embodiment of the present invention.

As shown in Figure 3, the copyright management unit 160 according to an embodiment of the present invention is a communication control module 300, DB control module 302, fingerprinting analysis module 304, copyright protection module 306 ) And the main module 308.

The copyright management unit 160 is implemented in hardware or software and mounted on the copyright management server 140.

The communication control module 300 controls data communication with the copyright management module 130, and the database control module 302 controls data input / output of the copyright information database 142, 144, 146, 148, 150. .

In addition, the database control module 302 according to the present invention may be configured to update the information of the work stored in the copyright information database (142, 144, 146, 148, 150) in real time or periodically, After storing certain basic asset information, it may be configured to periodically search for various multimedia files converted from the same content by using an analysis robot, etc., and store the same to structure and store the same for use in copyright protection.

Here, an analysis robot is a kind of search and information acquisition program that searches a multimedia file transmitted through a distributed network, analyzes hash value, keyword information, and fingerprinting information of the searched multimedia file, When a multimedia file having a new hash value, etc., converted from a registered work is searched for, the file information is stored in the copyright management information database.

The copyright protection module 306 compares the hash value transmitted from the copyright management module 130 with the hash value stored in the index database 144 and determines whether the copyrighted work is a registered work. As a result of comparing the hash value, the index database 144 is determined. If there is data having the same hash value as the hash value transmitted from the copyright management module 130, the information of the corresponding work is output. When there is no data having the same hash value as a result of comparing the hash values, the copyright management module ( 130, the keyword information and the fingerprinting information of the download request file are requested and received.

In addition, the copyright protection module 306 according to the present invention, if the copyright management module () according to the present invention is configured to transmit the primary file confirmation information and the secondary file confirmation information at the same time, the primary and secondary file confirmation information; Received, it is determined whether the registered work using the primary file identification information (that is, the hash value of the file), and if it is unsuccessful to determine whether the registered asset using the primary file identification information, the file using the secondary file identification information It can be configured to attempt to verify.

In addition, the copyright protection module 306 extracts at least one or more copyright contents having the same or similar keywords as the keyword information of the download request file by referring to the keyword database and outputs the corresponding copyright content information.

The fingerprinting analysis module 304 extracts the fingerprinting corresponding to the copyrighted content from the fingerprinting database using at least one copyrighted content information output from the copyright protection module 306, and the fingerprinting information of the received download request file. Compare and determine whether the download request file is a registered asset and output the result.

The main control module 308 controls the communication control module 300, the database control module 302, the copyright protection module 306 and the fingerprinting analysis module 304 to determine the identity of the download request file and the registered work. In the same case, the management information of the corresponding work is extracted with reference to the copyright management information database 150 and transmitted to the copyright management module 130.

Hereinafter, an operation process of a file verification / authentication system of a distributed network system according to an exemplary embodiment of the present invention having the above configuration will be described in detail with reference to FIGS. 4 and 5.

4 is a flowchart illustrating a process of performing file verification / authentication in a copyright management server according to an exemplary embodiment of the present invention.

The copyright management server 140 receives primary file identification information (that is, a hash value of the download request file) transmitted from the copyright management module 130 (S400), and stores the received hash value and the index database 144. The hash value is compared to determine whether there is a work having a file equal to the hash value of the download request file among the download request file and the registered work (S402).

As a result of the determination, when there is a file having the same hash value, the management information of the work corresponding to the file is extracted from the copyright management information database 150, and the copyright is controlled to control the download of the download request file according to the extracted copyright management information. The copyright management information is transmitted to the management module 130 (S416).

However, as a result of the determination in step S402, if there is no registration work having the same hash value, the copyright management server 140 to the copyright management module 130, the secondary file identification information (that is, keyword information and fingerprinting of the download request file) Information), and receives the secondary file confirmation information transmitted from the copyright management module 130 (S406).

The copyright management server 140 extracts a plurality of registered works having the same or similar keywords from the keyword database by using the keyword information in the secondary file identification information, and then extracts the copyright group database 148 of the extracted plurality of registered works. The fingerprinting information is extracted with reference to the extracted fingerprint information, and the fingerprinting information of the downloaded fingerprinting information and the download request file is compared to determine the identity of the file (S408).

That is, after searching for a registered work having the same or similar keyword information, the fingerprinting information of the searched work and the fingerprinting information of the download request file are compared, and the download request file has substantially the same contents as the registered work. To determine if there is.

The process of judging the identity of the file by comparing the fingerprinting information may be configured to judge the same work only when the fingerprinting is exactly the same, or a certain range (for example, 95) in consideration of errors caused by various factors. It may be configured to determine as the same work by setting the same).

If it is determined that the download request file is the same file as the registered work using the second file check information, the copyright management server 140 transmits the copyright management information as described above to the copyright management module 130 (S416). If the same content is not searched even though the secondary file check information is used, the download permission message is transmitted to the copyright management module 130 (S414).

In addition, the file identification / authentication method of the distributed network according to the present invention, it is determined whether the information collection function for a predetermined range of files is set in advance (S410), if the information collection function is set, the copyright management server 140 is copyright The method may further include storing information of the corresponding download file in the copyright information database by using the primary and secondary file identification information received from the management module 130 (S412).

5 is a flowchart illustrating a process of performing file verification / authentication in a copyright management module according to an embodiment of the present invention.

With reference to the accompanying drawings, it will be described in detail the operation of the copyright management module according to an embodiment of the present invention.

The copyright management module 130 determines whether the user requests the download of a specific file to another user computer 100 or the sharing server 120 connected through the network 110 by operating the user computer 100 (S500), When a download request for a specific file is transmitted from the user computer 100 through the network 110, a hash value of the corresponding download file is extracted (S502), and the extracted hash value is transmitted through the network 110 to the copyright management server 140. In step S504).

Next, the copyright management module 130 determines whether the secondary file confirmation information request is received from the copyright management server 140 (S506), and if the secondary file confirmation information request is not received, whether or not to receive the copyright management information. It is determined (S516).

If the copyright management information is received in step S516, the copyright management module 130 controls the download of the corresponding download request file according to the received copyright management information (S518).

That is, the download is restricted or charged according to the contents of the management information, or the user's computer 100 is connected to a specific site to perform copyright management according to the intention of the copyright holder.

If the second file confirmation information request is received in step S506, the copyright management module 130 extracts secondary file confirmation information (ie, keyword information and fingerprinting information) of the corresponding file (S508), and the extracted 2 The primary file confirmation information is transmitted to the copyright management server 140 (S510).

Next, the copyright management module 130 determines whether a download permission message transmitted from the copyright management server 140 is received (S512), and if the download permission message is not received, determines whether to receive copyright management information (S516). ) If the copyright management information is received, the download control of the corresponding download request file is controlled according to the received copyright management information (S518).

If the download permission message is received in step S512, the user computer 100 allows the download of the requested file (S514).

6 is a flowchart illustrating a process of performing file verification / authentication in a copyright management server according to another exemplary embodiment of the present invention.

In more detail, in the process shown in FIG. 6, the first file identification information and the second file of the file requested by the copyright management module 130 of the present invention to be downloaded by the user computer 100 through the network 110 are described. Simultaneously extract the verification information and send it to the copyright management server 140 via the network 110, the copyright management server 140 simultaneously receives the primary and secondary file verification information, the file using the primary file verification information File verification / authentication in a copyright management server according to another preferred embodiment of the present invention configured to perform the verification and to perform file verification using the secondary file verification information when the file verification using the primary file verification information fails. This is a flow chart showing the process performed.

The copyright management server 140 stores the primary file identification information (ie, the hash value of the download request file) and the secondary file identification information (ie, keyword information and fingerprinting information) transmitted from the copyright management module 130. In operation S600, the received hash value is compared with the hash value stored in the index database 144 to determine whether there is an asset having a file equal to the hash value of the download request file among the download request file and the registered asset (S602). .

If there is a file having the same hash value as a result of the comparison (S604), the management information of the work corresponding to the file is extracted from the copyright management information database 150, and the download request file is downloaded according to the extracted copyright management information. The copyright management information is transmitted to the copyright management module 130 to control (S616).

However, as a result of judging in steps S602 and S604, when there is no registration work having the same hash value, the copyright management server 140 uses the keyword information among the secondary file identification information received in step S600, and the same from the keyword database. After extracting a plurality of registered assets with similar or similar keywords, the fingerprinting information is extracted by referring to the copyright group database 148 of the extracted plurality of registered assets, and the fingerprinting of the extracted fingerprinting information and the download request file is performed. The information is compared to determine the identity of the file (S606 and S608).

That is, after searching for a registered work having the same or similar keyword information, the fingerprinting information of the searched work and the fingerprinting information of the download request file are compared, and the download request file has substantially the same content as the registered work. To determine if you are.

The process of judging the identity of the file by comparing the fingerprinting information may be configured to judge the same work only when the fingerprinting is exactly the same, or a certain range (for example, 95) in consideration of errors caused by various factors. It may be configured to determine as the same work by setting the same).

If it is determined that the download request file is the same file as the registered work using the secondary file verification information, the copyright management server 140 transmits the copyright management information as described above to the copyright management module 130 (S616). If the same content is not searched even though the secondary file check information is used, the download permission message is transmitted to the copyright management module 130 (S614).

In addition, the file identification / authentication method of the distributed network according to the present invention determines whether the information collection function for a predetermined range of files is set in advance (S610), and if the information collection function is set, the copyright management server 140 is copyrighted. The method may further include storing the information of the corresponding download file in the copyright information database by using the primary and secondary file identification information received from the management module 130 (S612).

Through the above-described process, the identification / authentication of the file transmitted in real time in the distributed network system is performed, and digital copyright protection for the file transmitted in real time is performed through this process.

Preferred embodiments of the present invention described above are disclosed for purposes of illustration, and those skilled in the art will be able to make various modifications, changes and additions within the spirit and scope of the present invention. Additions should be considered to be within the scope of the following claims.

As described above, according to the file identification / authentication system of the distributed network system and the method of providing the same according to the present invention, a file transmitted through the distributed network is monitored and verified in real time, and authenticated. There is an advantage that the copyright management according to the setting of can be performed in real time.

In addition, according to the present invention has the advantage that the load of the copyright management server is reduced to enable copyright protection in real time.

In addition, according to the present invention, since accurate file identification is possible, more effective copyright protection is possible.

Claims (25)

A file in a distributed network system in which a plurality of user computers are connected to a shared server through a network to exchange and transfer files, or a plurality of user computers are interconnected through a network to exchange and transfer files between user computers. In the verification / authentication system, Mounted on the user computer, when the user computer requests to download a specific file to the shared server or the other user computer through a network, the primary file identification information of the download request file is extracted and transmitted through the network; A copyright management module which receives the secondary file confirmation information request transmitted through the network, extracts the secondary file confirmation information of the download request file and transmits it through the network; And It is connected to the network with the user computer, the copyright related information is stored, it is determined whether or not the copyright protection of the download request file using the primary file identification information transmitted from the copyright management module, and the primary file identification information If it fails to determine whether to protect the copyright using the copyright management module, requesting and receiving the second file confirmation information, and the copyright management server for determining whether or not the copyright protection of the download request file using the secondary file confirmation information; File identification / authentication system of a distributed network system, characterized in that it comprises a. A file in a distributed network system in which a plurality of user computers are connected to a shared server through a network to exchange and transfer files, or a plurality of user computers are interconnected through a network to exchange and transfer files between user computers. In the verification / authentication system, Mounted on the user computer, when the user computer requests to download a specific file to the shared server or the other user computer through a network, the first file identification information and the second file identification information of the download request file are extracted. Copyright management module for transmitting over the network; And It is connected to the network with the user computer, the copyright related information is stored, and receives the primary file confirmation information and the secondary file confirmation information transmitted from the copyright management module, by using the primary file confirmation information Copyright management to determine whether the copyright protection of the download request file, and if the protection of copyright protection using the primary file identification information fails, the copyright management to determine whether the copyright protection of the download request file using the secondary file identification information File identification / authentication system of a distributed network system, characterized in that it comprises a server. The method according to claim 1 or 2, The primary file identification information extracted by the copyright management module includes an encrypted hash value of the download request file, and the secondary file identification information includes keyword information and fingerprinting information of the download request file. File identification / authentication system of a distributed network system, characterized in that. The method of claim 3, The copyright management server transmits copyright management information of the download request file through a network when the download request file is a copyright protection target file. And the copyright management module controls the download of the download request file according to copyright management information transmitted from the copyright management server. The method of claim 1, The copyright management module, Analyze the download request file, extract the encrypted hash value of the file, configure and output the primary file confirmation information, and extract the keyword information and the fingerprinting information of the download request file when the secondary file confirmation information request is input. A file information analyzer configured to configure and output secondary file identification information; And The primary file confirmation information output from the file information analysis unit is transmitted to the copyright management server, the secondary file confirmation information request transmitted from the copyright management server is received and output to the file information analysis unit, and the file information. And a communication control unit for transmitting the secondary file confirmation information output from the analysis unit to the copyright management server. The method of claim 2, The copyright management module, Analyze the download request file, extract the encrypted hash value of the file to construct and output the primary file identification information, and extract the keyword information and the fingerprinting information of the download request file to construct and output the secondary file identification information. File information analysis unit; And And a communication control unit for transmitting the primary file confirmation information and the secondary file confirmation information outputted from the file information analysis unit to the copyright management server. The method according to claim 5 or 6, The copyright management module, And a security control unit for encrypting and decrypting data transmitted between the communication control unit and the copyright management server and blocking a hacking program through the shared server. The method of claim 7, wherein The copyright management module, And a download control unit for controlling the download of the download request file according to the copyright management information transmitted from the copyright management server. The method of claim 8, The copyright management information is a file check / authentication system of a distributed network system, characterized in that any one of a download restriction, a billing request, and a specific site connection. The method of claim 1, The copyright management server, A copyright information database in which information on copyrighted content and copyright management information are structured and stored; And Receiving primary file identification information transmitted from the copyright management module to determine the copyright protection of the download request file with reference to the copyright information database, and if it fails to determine the copyright protection through the primary file identification information, After requesting and receiving the secondary file confirmation information from the copyright management module, and comparing the information stored in the copyright information database and the secondary file confirmation information to determine whether to protect the copyright, and if the download request file is the copyright protection target; And a copyright management unit for transmitting corresponding copyright management information to the copyright management module with reference to the copyright information database. The method of claim 2, The copyright management server, A copyright information database in which information on copyrighted content and copyright management information are structured and stored; And Receiving primary file identification information and secondary file identification information transmitted from the copyright management module to determine copyright protection of the download request file using the primary file identification information with reference to the copyright information database, If it is unsuccessful to determine whether to protect the copyright by using the primary file identification information, and after comparing the secondary file identification information and information stored in the copyright information database to determine whether the copyright protection, and if the download request file is the copyright protection target And a copyright management unit for transmitting corresponding copyright management information to the copyright management module with reference to the copyright information database. The method according to claim 10 or 11, wherein The copyright information database, An index database in which a hash value of a multimedia file converted from registered copyright contents is structured and stored; A keyword / meta information database in which keyword information of a multimedia file converted from registered copyright content and meta information of a multi-die file are structured and stored; A fingerprinting database in which fingerprinting information of registered copyright content is structured and stored; A copyright group database in which at least one index database information of registered copyright content, at least one keyword database information, fingerprinting database information, and registered copyright content related information are structured and stored as one copyright content information; And And a copyright management information database in which copyright management information including download control information of registered copyright content is structured and stored. The method of claim 10, The copyright management unit, A communication control module for controlling data communication with the copyright management module; A database control module controlling data input / output of the copyright information database; The hash value transmitted from the copyright management module and the hash value stored in the copyright information database are compared to determine whether the copyrighted work is a registered work. A copyright protection module for requesting and receiving keyword information and fingerprinting information, and extracting and outputting at least one copyright content having the same or similar keyword information by referring to the copyright information database using keyword information of the download request file. ; Fingerprinting to determine whether the download request file is a registered work by comparing fingerprinting information of at least one copyrighted content output from the copyright protection module with reference to the copyright information database and fingerprinting information transmitted from the copyright management module. Analysis module; And The communication control module, the database control module, the copyright protection module and the fingerprinting analysis module are controlled to determine the identity of the download request file and the copyrighted work registered in the copyright information database. And a main control module for transmitting management information of a corresponding work to the copyright management module with reference to the file management / authentication system. The method of claim 11, The copyright management unit, A communication control module for controlling data communication with the copyright management module; A database control module controlling data input / output of the copyright information database; The hash value transmitted from the copyright management module and the hash value stored in the copyright information database are compared to determine whether the copyrighted work is a registered work, and if the registration work fails by comparing the hash values, the keyword information of the download request file is used. A copyright protection module for extracting and outputting at least one copyright content having the same or similar keyword information with reference to the copyright information database; Fingerprinting to determine whether the download request file is a registered work by comparing fingerprinting information of at least one copyrighted content output from the copyright protection module with reference to the copyright information database and the fingerprinting information transmitted from the copyright management module. Analysis module; And The communication control module, the database control module, the copyright protection module and the fingerprinting analysis module are controlled to determine the identity of the download request file and the copyrighted work registered in the copyright information database. And a main control module for transmitting management information of a corresponding work to the copyright management module with reference to the file management / authentication system. The method according to claim 13 or 14, The database control module is a file verification / authentication system of a distributed network system, characterized in that for updating the copyright information database by analyzing the information of the file previously received through the distributed network using the analysis robot at regular intervals. A copyright protection system connected to a plurality of user computers equipped with a copyright protection module for analyzing and transmitting information of a file and a copyright management server for verifying / authenticating a file by using file information transmitted from the copyright protection module. File verification / authentication method, (a) receiving a hash value of a download request file transmitted from the copyright protection module; (b) comparing the hash value with at least a hash value of a copyrighted file to determine whether the download request file is a registered work; (c) requesting keyword information and fingerprinting information of the download request file from the copyright protection module when there is no identical hash value in step (b); (d) receiving keyword information and fingerprinting information of the download request file from the copyright protection module; And (e) determining whether the download request file is a registered work using the keyword information and the fingerprinting information, wherein the copyright management server includes a hash value database, a keyword information database, and fingerprinting information of the registered work. File verification / authentication method of a distributed network system, characterized in that it comprises a database. The method of claim 16, In step (e), (e1) extracting a plurality of crops having the same or a similar range of similar keywords from the keyword information database using keyword information of the download request file; And (e2) comparing the fingerprinting information of the plurality of asset fingerprinting information extracted in the step (d1) with the fingerprinting information of the download request file to determine whether the file is a registered asset. / Authentication method. The method of claim 17, After step (e), (f) if the download request file is a registered work, further comprising transmitting copyright management information to the copyright management module, wherein the copyright management server stores the copyright management information database in which the work management information is stored according to the registered work. File verification / authentication method of a distributed network system, characterized in that it further comprises. The method of claim 18, The copyright management information is a file check / authentication method of a distributed network system, characterized in that any one of a download restriction, a billing request, and a specific site connection. The method of claim 19, After step (f), (g) if the download request file is not a registered work, storing the information of the download request file in the hash value database, the keyword information database, and the fingerprinting information database. How to check / authenticate a file on a network system. A copyright protection system connected to a plurality of user computers equipped with a copyright protection module for analyzing and transmitting information of a file and a copyright management server for verifying / authenticating a file by using file information transmitted from the copyright protection module. File verification / authentication method, (A) receiving a hash value, keyword information, and fingerprinting information of a download request file transmitted from the copyright protection module; (B) comparing the hash value with at least the hash value of the copyrighted file and determining whether the download request file is a registered work; (C) if there is no identical hash value in step (b), determining whether the download request file is a registered asset using the keyword information and the fingerprinting information received in step (a); And the copyright management server includes a hash value database, a keyword information database, and a fingerprinting information database of the registered copyrighted work. The method of claim 21, The (c) step, (C) extracting a plurality of works having the same or a similar range of similar keywords from the keyword information database using keyword information of the download request file; And (C2) comparing the fingerprinting information of the plurality of asset fingerprinting information extracted in the step (c) with the fingerprinting information of the download request file to determine whether the asset is a registered asset. File verification / authentication method. The method of claim 22, After the above (c) step, (D) if the download request file is a registered work, the method further includes transmitting copyright management information to the copyright management module, wherein the copyright management server stores the copyright management information database according to the registered work. File verification / authentication method of a distributed network system, characterized in that it further comprises. The method of claim 23, wherein The copyright management information is a file check / authentication method of a distributed network system, characterized in that any one of a download restriction, a billing request, and a specific site connection. The method of claim 24, After step (d), (E) if the download request file is not a registered work, further comprising storing the information of the download request file in the hash value database, the keyword information database, and the fingerprinting information database. File verification / authentication method of network system.

Images