KR20070061006A - Mobile reader and contents server having contents security function, and method in mobile reader - Google Patents

Abstract

A mobile reader and a content server having a content protection function, and a method thereof are provided to raise content protection efficiency by enabling the mobile reader to determine a content level allowed to a user and use a mode for transmitting a key address instead of transferring a content protection key while minimizing information shared between a communication provide and a CP(Content Provider). A smart poster connector(201) receives content information stored in the RFID tag(100). A content connection determiner(202) receives encoded contents and a CK(Content Key) address by requesting the contents from a content server(300) if the content level in the content information is allowed to the user. A matrix processor(203) generates a CK by decoding the encoded CK address with a personal key of the user, and using a user ID and a value inquiring a CK matrix with the CK address. A decoder(204) decodes the encoded contents with the CK. The content information includes a tag ID, a content connection URL(Uniform Resource Locator), and the content level.

Description

Mobile reader and contents server having contents security function and method in mobile reader}

1 is a block diagram illustrating a content protection system in a smart poster service using a tag according to an embodiment of the present invention.

FIG. 2 is a flowchart for explaining data transmission and reception in the system shown in FIG. 1.

FIG. 3A is a flowchart for describing an operation of the mobile reader of FIG. 1.

3B is a flowchart for describing an operation of the content server of FIG. 1.

4 is a block diagram illustrating generation of a content encryption key using the same CK matrix provided in the mobile reader and the content server, respectively.

<Explanation of symbols for the main parts of the drawings>

100 ... etag 200 ... mobile reader

201 ... Smart Poster Connection 202 ... Content Access Determination

203 ... matrix processing unit 204 ... content decoding unit

300 ... Content Server 301 ... Key Management

302 ... matrix processing unit 303 ... content encryption unit

304 ... Authentication Processing Unit 400 ... Authentication / Billing Server

The present invention relates to a mobile reader and a content server and a method having a content protection function provided by using an RFID (electronic tag), and more particularly, when accessing paid content through content information of an electronic tag attached smart poster. The present invention relates to a mobile reader and a content server having a content protection function for blocking access to adolescents and allowing access to content only for users who have completed user authentication and billing in the case of adult content according to content information.

In general, the mobile electronic tag service is a service for easily taking information of an article with an electronic tag by using a mobile terminal having an electronic tag reader function.

The application services include electronic tagging on expensive items (books, DVDs, medicines, etc.) to provide product information, or electronic tagging on movie posters to provide movie information, and electronic tagging on advertisement flyers. Services to be considered.

In addition, when the spread of the mobile reader, which is a mobile terminal equipped with the electronic tag reader, becomes popular, and the electronic tag service of the smart poster that enables the user to access the desired content with the electronic tag information attached to the movie poster is activated, the contents are downloaded. The user's desire for paid content services will also increase.

Conventional protection techniques for such content include Digital Rights Management (DRM) technology for restricting illegal storage, distribution, and playback of content. This technology primarily selects and operates a content server and a client that allows the content service provider to receive content through communication with the server to suit their content service. That is, a service that allows a content service provider to select a server and a client suitable for the client so that the encrypted content can be stored and reproduced after the client acquires a playback right.

However, the mobile electronic tag service is attached to the product by the operators for the purpose of product inventory management, advertisement, and information delivery, and the business model has not yet been secured in terms of contents protection and user protection by accessing content using electronic tags. It is not presented.

As a result, content providers are also familiar with the mobile environment and content protection, which provides content through mobile electronic tag services, other than Internet access, while preventing content from being downloaded illegally. There has been a demand for a model that blocks the access of unhealthy content by teenagers.

The technical problem to be achieved by the present invention is to determine whether the content rating is accessible to the user in the mobile reader in the smart poster service that can access the content using the electronic tag, while minimizing the shared information between the communication service provider and the content service provider for content protection The present invention provides a mobile reader and a content server having a content protection function and a method for improving the content protection efficiency by using a method of passing a key address instead of an encryption key.

Therefore, the detailed problem to be solved in the present invention is as follows.

In the smart poster service using an electronic tag, we propose a model that enables contents protection while minimizing the shared information of content service providers and communication service providers.

In addition, we present a simple adult authentication model that enables access to smart poster electronic tag content according to the user's grade in the smart poster service using the electronic tag.

In addition, we present a procedure for content access request and encryption key generation and delivery in mobile reader and content server.

In addition, in using a method of delivering information for determining an encryption key without directly delivering the content encryption key, CK (contents), which is a place where an encryption key seed value necessary for generating a content encryption key is stored. key) It suggests how to utilize specific address (location) value of matrix and user identifier which only one can know.

Content protection method of the mobile reader for achieving the above technical problem of the present invention,

(a) reading content information stored in an electronic tag; determining whether a content rating of the content information is a content rating available to a user; (c) accessing a content server and requesting content if it is determined that the user is available in a content rating in step (b); (d) checking the user authentication and billing status from the content server and receiving an encrypted content encryption key (CK) address and content when the user authentication is completed; And (e) decrypting the encrypted content using a value obtained by querying the CK matrix with the decrypted CK address.

The content information may include a tag identifier, a content access URL, and a content rating.

In addition, in step (c), the tag identifier and the user identifier are transmitted to the content server when the content is requested.

In addition, in step (d), the CK address encrypted with the user public key is received from the content server, and the content encrypted using the content encryption key CK and the user identifier is received.

In the step (e), the CK address is decoded by the user private key, and the content is decoded by using a value obtained by inquiring a CK matrix with the CK address and a CK generated by a user identifier.

In addition, a mobile reader having a content protection function for achieving another technical problem of the present invention,

Smart poster connection unit for receiving the content information stored in the electronic tag; A content access determination unit that receives the encrypted content and an encryption key (CK) address by requesting the corresponding content from a content server when the content rating included in the content information is an accessible rating by determining whether the user is an accessible rating; A matrix processing unit which decrypts the encrypted CK address and generates a CK using a value obtained by inquiring a CK matrix with the CK address and a user identifier; And a decryption unit for decrypting the encrypted content with the CK.

The content information may include a tag identifier, a content access URL, and a content rating.

The matrix processing unit may decode the encrypted CK address using a user private key and have a structure corresponding to the CK matrix provided in the content server.

In addition, the mobile reader is characterized in that it further comprises a mobile phone function.

In addition, the CK address encrypted by the matrix processing unit is characterized by decrypting using a user private key.

In addition, a content server having a content protection function for achieving another technical problem of the present invention, the key management unit for managing a mapping table of the content encryption key (CK) address corresponding to the tag identifier, which is an identifier for each content; An authentication processor configured to process a user authentication and a billing request as the tag identifier and the user identifier when receiving the tag identifier and the user identifier from the mobile reader who read the electronic tag; When the user authentication and billing is processed, the CK address is generated using the CK matrix value received from the key management unit corresponding to the received tag identifier, and the CK matrix is encrypted. Matrix processing unit for transmitting to; And a content encryption unit encrypting the content using the CK and transmitting the encrypted content to the mobile reader.

The matrix processing unit may generate a CK using a value of the CK matrix inquired by the CK address and the user identifier.

In addition, the encryption unit, characterized in that for encrypting the content using the public key of the user registered and stored in advance.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a block diagram illustrating a content protection system in a smart poster service using an electronic tag according to an embodiment of the present invention.

In FIG. 1, the electronic tag 100 attached to the smart poster stores information about access content, that is, content access URL and content rating, in addition to a tag identifier. After reading the tag identifier in the electronic tag 100, the mobile reader 200, which is generally a mobile phone, receives the content information including the content rating and accesses the content server 300 using the information.

The content server 300 is connected to the authentication / billing server 400 receives the basic information and authentication information for the user, using this information to generate an encryption key to generate a password for receiving content to the mobile reader 200 side Only the mobile reader 200 that transmits the key address and the encrypted content and verifies the encrypted content can receive and decrypt the encrypted content.

The content server 300 includes an encryption key CK address of content mapped to each tag identifier and a key management unit 301 for matrix management, and an encryption key CK of content corresponding to a tag identifier from the key management unit 301. ) A matrix processing unit 302 for receiving an address and generating a CK using a matrix value of the corresponding address, a content encryption unit 303 for generating encrypted content using the CK, and an authentication / billing server 400. An authentication processing unit 304 in charge of message processing with the system is provided.

In addition, the mobile reader 200 is based on the smart poster access unit 201 for requesting and receiving electronic tag information to the electronic tag access point, and based on the received tag identifier and content rating and information such as the age of the user stored in the mobile reader The content access determination unit 202 for determining a receivable content rating, and a decryption key (CK) address related to the content encryption and decryption, and using this, a matrix processing unit for generating a CK using an actual user identifier. 203 and a content decrypting unit 204 for decrypting the encrypted content from the content server 300 using the CK transmitted from the matrix processing unit 203 as a decryption key.

2 is a flow chart of data between each component until the actual content decryption is achieved by the mobile reader receives the electronic tag and the content information in the smart poster service to generate the content protection encryption key.

In the code shown in FIG. 2, UK pr (j) is the private key of user j, UK pu (j) is the public key of user j, user j is the identifier of user j, and tag i is the tag i The identifier, TK (Transport key) is an encryption key shared between the content server 300 and the authentication / billing server 400, CK (i) is an encryption key used to encrypt the content (i) (or tag (i)), The CK matrix is a matrix storing basic information for generating encryption keys shared between a mobile reader and a content server requiring encryption / decryption, and CKaddr (i) is an encryption key (CK (i) for a tag (i). ) Is actually a value that optionally includes one of two addresses (m, n) in the CK matrix, and is shown as CKaddr (mn) in FIG. (Contents) CK indicates that the content is encrypted using the encryption key CK.

3A is a flowchart of the operation at the mobile reader 200, and FIG. 3B is a flowchart of the operation at the content server 300.

A description of the data flowchart of FIG. 2 and the operation flowchart of FIG. 3 is as follows.

The mobile reader 200 stores the user private key UKpr (i) and the CK (encryption key) matrix, which is an encryption key matrix, in the matrix processing unit 203 (S301). When a user approaches the mobile reader 200 to a smart poster, for example, a movie poster, content information including a tag identifier, a content access URL, and a rating of the corresponding content is displayed from the electronic tag 100 attached to the smart poster. It leads to the smart poster connection 201 of 200 (S302).

The content access determination unit 202 of the mobile reader checks whether the received content rating is a content rating accessible by the user (S303) (corresponding to (a) and (b) of FIG. 2), and when the content access is possible, The content reception request is transmitted to the content server 300 and the response is received (S304).

When requesting a content, the content access determination unit 202 transmits a content identifier, that is, a tag i, a tag identifier, and a user j, an identifier of a user, to the content server 300. At 300, the user j and CKaddr (i), which is an encryption key address of the content, are encrypted with the user's public key, UKpu (j), and transmitted to the mobile reader 200. This process corresponds to (c) and (d) of FIG.

The response to the content request is encrypted by the content server 300 with the user public key UKpu (j), which is registered and stored as the encryption key address CKaddr (i), so that the address is stored in the mobile reader 200. It is decrypted using UKpr (i) which is a user private key (S305).

The response message includes CKaddr (i), which is an encryption key address to which one of two address values m and n for the CK matrix can be selectively applied, and the encryption key address enables the CK matrix in the matrix processing unit 203. (S306), the actual content encryption key CK (i) is generated using the value stored at one corresponding address in the CK matrix and the user j value that is the user identifier (S307). After that, when the encrypted content is received, the mobile reader 200 decrypts the content using the encryption key CK (i) (S308) (corresponding to (e) of FIG. 2).

The content server 300 stores and manages the same CK matrix stored in the mobile reader 200 in the matrix processing unit 302, and the content server 300 is a tag (i) for all content managed by the content server 300. The key management unit 301 manages the encryption key address CKaddr (i) mapping table used to encrypt the content corresponding to the content identifier, and receives the content reception request transmitted by the mobile reader 200 (S311 and S312). .

Thereafter, the content server 300 requests authentication and billing from the authentication / billing server 400 and checks the public key UKpu (i) for the user in response (S313). When the authentication and billing request, the tag (i) and the user (j), which is the identifier of the user, is encrypted with the encryption key TK shared with the content server 300 and the authentication server 400 to the authentication / billing server 400. After transmission, the authentication / billing server 400 encrypts the tag (i), the user (j), and the user public key UKpu (j) with a TK after completing the authentication for the user (j), which is a user identifier. 300) (corresponding to FIG. 2 (d)).

On the other hand, when the user authentication is completed by the authentication processing unit 304 of the content server 300 (S314), the key management unit 301 finds the encryption key address CKaddr (i) mapped to the tag identifier and the tag identifier, the matrix The processing unit 302 encrypts the CKaddr (j) with the public key UKpu (j) of the user and transmits it to the mobile reader 200 (S315).

In addition, the content server 300 inquires the CK matrix with the encryption key address CKaddr (j) (S316) and generates a content encryption key CK (i) of the content corresponding to the electronic tag 100 (S317). The content is encrypted using the encryption key CK (i) and transmitted to the mobile reader 200 (S318), so that the mobile reader 200 can decrypt it.

FIG. 4 is a block diagram illustrating the generation of a content encryption key using the CK matrix provided in the mobile reader and the content server, respectively. FIG. 4 illustrates the CK matrix, the CKaddr (i), and the user identifier (j). Shows an example of the encryption key generation using

The content server transmits only the content encrypted with the CK address and the encryption key to look up the CK matrix value to the mobile reader. Therefore, the content encryption key CK is not known without knowing the entire information about the CK matrix shared by the mobile reader and the content server. (i) can't be figured out, and thus a stronger hacking defense on the content is realized.

In addition, although not described above in the embodiments of the present invention, the entire CK matrix or the encryption key address CKaddr (i) for each content may be changed periodically or as needed, and thus, a content protection scheme enhanced by a content service provider may be applied. .

In addition, the CK matrix is provided in the mobile reader and the content server requiring the encryption key, respectively.On the communication line, the CK matrix is transmitted by encrypting only the addresses where these encryption keys are stored, and the CK matrix is used as the address where the encryption key is needed. The encryption key CK is used to encrypt the content using the retrieved value and the user identifier.

Meanwhile, the CK address is configured to be used by setting one of two addresses, and the mobile reader 200 and the content server 300 further include one separate CK matrix, not shown. Therefore, even if one CK matrix is hacked, the system can be used with an unhacked address and CK matrix without having to replace the system or immediately download the entire CK matrix, thereby increasing the availability of the system.

According to the present invention, while protecting the content while minimizing the sharing information between the communication service provider and the content service provider in the tagged smart poster, the content rating is additionally recorded in the smart poster in addition to the tag identifier and the encryption key is transmitted. It is effective to increase the efficiency of the content protection system by passing only the key address on the communication path.

In addition, the reception of harmful content can be controlled from the user's point of view, and the content provider's protection of his or her content is in his management area, which affects the communication service provider when the matrix is hacked or suspected of being hacked. There is an advantage that can apply new content protection mechanism without receiving.

Claims (13)

(a) reading content information stored in an electronic tag; determining whether a content rating of the content information is a content rating available to a user; (c) accessing a content server and requesting content if it is determined that the user is available in a content rating in step (b); (d) checking a user authentication and a charging state from the content server and receiving an encryption key (CK) address and content of the encrypted content when the user authentication is completed; And and (e) decrypting the encrypted content using a value obtained by querying the CK matrix with the decrypted CK address. The method of claim 1, The content information includes a tag identifier, a content access URL, and a content rating. The method of claim 1, And transmitting a tag identifier and a user identifier to the content server when the content is requested in step (c). The method of claim 1, And receiving the encrypted CK address encrypted with the user public key from the content server in step (d), and receiving the encrypted content using the encryption key (CK) and the user identifier of the content. . The method of claim 4, wherein In the step (e), the CK address is decoded by the user private key, and the content is decoded by using the CK address generated by the CK address and the CK generated by the user identifier. How to protect your content. Smart poster connection unit for receiving the content information stored in the electronic tag; A content access determination unit that receives the encrypted content and an encryption key (CK) address by requesting the corresponding content from a content server when the content rating included in the content information is an accessible rating by determining whether the user is an accessible rating; A matrix processing unit which decrypts the encrypted CK address and generates a CK using a value obtained by inquiring a CK matrix with the CK address and a user identifier; And And a decryption unit for decrypting the encrypted content with the CK. The method of claim 6, And the content information comprises a tag identifier, a content access URL, and a content rating. The method of claim 6, wherein the matrix processing unit, And decrypts the encrypted CK address using a user private key, and has a structure corresponding to the CK matrix provided in the content server. The method of claim 6, wherein the mobile reader, A mobile reader with content protection, characterized in that it further comprises a mobile phone function. The mobile reader of claim 6, wherein the CK address encrypted by the matrix processor is decrypted using a user private key. A key management unit that manages a mapping table of encryption key (CK) addresses of contents corresponding to tag identifiers, which are identifiers for each content; An authentication processor configured to process a user authentication and a billing request as the tag identifier and the user identifier when receiving the tag identifier and the user identifier from the mobile reader who read the electronic tag; When the user authentication and billing is processed, the CK address is generated using the CK matrix value received from the key management unit corresponding to the received tag identifier, and the CK matrix is encrypted. Matrix processing unit for transmitting to; And And a content encryption unit for encrypting the content by using the CK and transmitting the content to the mobile reader. The method of claim 11, wherein the matrix processing unit, And a content protection function for generating a CK using the value of the CK matrix queried by the CK address and the user identifier. The method of claim 11, wherein the encryption unit, And a content protection function for encrypting the content using a public key of a corresponding user registered and stored in advance.

Images