KR20070105599A - Protecting method and system of contents - Google Patents

Abstract

A method and a system for protecting contents are provided to prevent the outside from accessing the contents even if a member shop directly keeps the contents by protecting hacking and download probability generated when a head office provides various kinds of contents to the member shop through the Internet, and enable users visiting the member shop to use the contents in various modes by enabling the member shop to directly keep the contents. A data receiver(140) receives data if the data is received from a member shop server through a web server(300) and provides the received data to a controller(130). A contents extractor(120) searches and extracts a contents file stored in a main database(200). A data transmitter(150) provides the extracted contents file to the member shop server through the web server. The main database includes a member information database, a security management database, a contents database, and a contents list database. The security management database stores distributed storage data includes a file name, which is provided by using a random number, after the member shop server divides the contents file received from a main server into a plurality of files and provides the file name to each file by using the random number.

Description

{Protecting method and system of contents}

1 is a schematic illustration of a content protection system in accordance with the present invention;

2 is a view schematically showing the configuration of the main server shown in FIG. 1;

3 is a view schematically showing the configuration of the main DB shown in FIG. 1;

4 is a diagram schematically illustrating a configuration of an affiliated store server illustrated in FIG. 1;

FIG. 5 is a diagram schematically illustrating a configuration of an affiliated store DB shown in FIG. 1;

6 schematically illustrates a content protection procedure in accordance with a preferred embodiment of the present invention;

7 is a diagram illustrating details of transmitting content in a content protection method according to a preferred embodiment of the present invention;

8 is a diagram illustrating details of storing content in a content protection method according to a preferred embodiment of the present invention;

9 illustrates in detail the steps of using content in a content protection method according to a preferred embodiment of the present invention; And

FIG. 10 is a diagram illustrating a method of blocking unauthorized access of content in a content protection method according to an exemplary embodiment of the present invention.

The present invention provides a method and system for protecting contents, and more specifically, in the business model in which the head office provides contents to merchants and the merchants generate revenue using the provided contents, external hacking may occur when the contents are provided online. The invention relates to a content protection method and system that solves security vulnerabilities.

Recently, due to the development of multimedia technology, various types of leisure facilities such as video room, DVD room, karaoke room, and game room have been created, and these spaces are used by many people for the purpose of leisure use and social gathering. Facilities are increasingly franchised to generate stable revenue through effective marketing. The franchise for these recreational facilities usually consists of a relationship between the head office and the affiliated store (chain store), which unites the interior of each affiliated store and provides or purchases various hardware equipment such as karaoke machines, DVD players and computer devices. In particular, contents that meet the characteristics of each franchise are collectively provided.

On the other hand, the content has been provided offline using tools such as videotape and CD-ROM titles in the past, but with the recent development of the Internet technology, a technology that can transfer a large amount of files in a short time has been developed. As storage capacity has increased dramatically, there has been a tendency to provide various contents through online download methods, and to store the received contents in various storage media such as hard disk drives. In the case of providing contents by using online upload / download method, since there is no need for a separate tool for storing contents, the cost of purchasing content is relatively low, and in addition to having a small computer at the merchant, it is possible to store separate contents. There is no need for space, and downloads can be done in real time, greatly reducing the burden of purchasing a large amount of content in the early stage.

However, in the case of providing the content by such upload / download method, the computer installed in the affiliated store is difficult to have expensive security device, so the security against the external hacking is relatively weak, so that the computer terminal installed in the external or affiliated store There is a disadvantage that it is easy to hack a merchant server to copy various contents without permission. In addition, the hacked content can be duplicated with the same quality regardless of the number of times, so that those who have the authority to permit the use of various contents, such as copyright holders, are reluctant to supply the contents through the franchise.

On the other hand, in order to prevent such problems such as illegal downloads, services that provide various content in a streaming manner has recently increased. The streaming method is a technology that can reproduce the transmitted data in real time without interruption, and when using this method, users can use various data on the Internet in real time without storing it on their PCs. As such, when the streaming method is used to prevent the problem of illegal download, the client stores all the contents on the server or the storage device of the headquarters, and if the request for the use of the contents is requested from the client computer connected to the merchant server, the client immediately stores the contents through the merchant server. Transfer to a computer (or directly from our server to a client computer).

However, in this case, all contents are stored only in the server or DB of the head office. Therefore, if the user wants a large amount of service such as a DVD movie file, it takes a considerable time to transfer. Due to a drop in speed and forced termination of a connection, there is a limit to comfortably using contents desired by a user. In addition, in such a streaming method, since the user cannot use the functions such as quick view and replay, the user has a limit in freely using the content selected by the user.

The present invention is to block the possibility of illegal hacking, download that can occur when the headquarters supply various content to the merchants, especially the headquarters using the content of the conventional franchise that the merchants have the content directly In this case, an object of the present invention is to provide a method and system for protecting content that can block access to the content from the outside.

In addition, an object of the present invention is to provide a content protection method and system that allows each merchant to store the content directly so that users who visit the merchant can use various contents in various ways.

In addition, an object of the present invention is to provide a content protection method and system that allows the owners of content, such as copyright holders to conclude a content supply contract with confidence by blocking the possibility of hacking from the outside, even though the merchant owns the content directly. do.

According to an aspect of the present invention, there is provided a content protection method comprising: (I) receiving at least one content file using a wired or wireless communication network; Storing the provided content file (II); And (III) providing the provided content file to the client computer at the request of the client computer.

In step II, the method further comprises: dividing the provided content file into a plurality of files and providing a file name using a random number to each of the plurality of divided files; Storing each of the plurality of divided files in storage means; Generating distributed stored data including a file name provided using the random number; And storing the distributed storage data including the generated file name in a storage means different from the storage means in which the plurality of divided files are stored.

Further, in this case, it is preferable to further include the step of deleting the original file of the divided file and distributed storage data not stored in the other storage means. In addition, the generated distributed storage data is preferably provided to the main server and stored in the main DB connected to the main server.

Also, the step III may include receiving a request for providing a predetermined content file from a client computer; Receiving distributed storage data including the generated file name; Receiving the plurality of divided content files using the received distributed stored data; Combining the plurality of divided content files; Preferably, providing the combined content file to a client computer.

In this case, it is preferable to further include the step of deleting the distributed storage data including the generated file name after combining the plurality of divided content files. In addition, in this case, when the access signal is provided from the client computer, it is preferable to further include the step of performing the authentication process for the client computer.

In addition, the step I preferably includes receiving a content file encoded using the encoding keycode and decoding the encoded content file using the decoding keycode. In addition, the encoding keycode and the decoding keycode are preferably provided to a plurality of merchant servers, respectively.

In addition, the content protection method according to the present invention forcibly terminating the merchant server and / or forcibly deleting the content file when the content file is accessed from an external computer or a client computer by a method different from a predetermined method. It is preferable to further include (IV). In this case, the method may further include providing an access warning message to the external computer or the client computer before forcibly terminating the server and / or forcibly deleting the content file.

On the other hand, the content protection system according to the present invention stores the content files and other files provided from the main server and the main server, using the main DB and wired and wireless communication network to provide the stored files to the main server and a plurality of merchant server Includes a web server that provides connectivity for

The main server may include: a data receiver configured to receive the input data and provide the received data to a controller when predetermined data is input from the affiliated store server through the web server; A content extraction unit searching for a content file stored in the main DB and extracting the retrieved content file according to a command of a controller; A data transmitter for providing the extracted content file to the affiliated store server through the web server; And a control unit controlling functions of the content extraction unit, the data receiving unit, and the data transmitting unit.

The main DB is an individual member stores personal personal information such as the member's name, ID, password, personal details of each member, and in the case of a member member, server information such as personal information of each affiliated store and hardware information of the affiliated server, etc. A member information DB storing information of the DB; The merchant server divides the content file provided from the main server into a plurality of files, provides a file name using a random number to each of the plurality of divided files, and then distributes the stored data including the file name provided using the random number to the main server. Security management DB provided and stored through; A content DB for storing all content that can be transmitted to the plurality of merchant servers; And a content list DB storing a list of contents to be distributed to each of the affiliated server and a list of contents stored in the current contents DB.

In the content protection system according to the present invention, the security management DB further stores a plurality of encoding keycodes respectively formed for the plurality of affiliated servers. The main server may further include a security code extracting unit for checking the affiliate server information to transmit the content file and extracting an encoding key code of the affiliate server to transmit the file among encoding key codes stored in the main DB. . The main server may further include an encoding unit encoding the content file extracted from the content extraction unit using the extracted encoding code key. In this case, the data transmission unit preferably provides the encoded content file to the affiliate server.

In addition, the content protection system according to the present invention, if the authentication information of the member member is provided through the at least one affiliated server server compares the authentication information of the member member of the merchant with the member information stored in the main DB, each member member It is preferable to further include a member management unit for providing a state of the state and the state of the merchant server to the controller.

In addition, the content protection system according to the present invention stores a variety of files including the content files provided from the merchant server and the merchant server, and provides a control server and the control server using a merchant DB and wired and wireless communication network to provide the stored files and data to the merchant server; Includes a web server providing a connection to the merchant server,

The affiliated store server may include: a data receiving unit configured to receive the input file and provide the received file to a controller when a predetermined file is input from the main server through the web server; A content management unit for dividing the received file into a plurality of files, providing a file name using a random number to the divided file, and forming distributed stored data including a file name provided using the random number; A content inlet / out unit for providing a predetermined file to the affiliate store DB and extracting the file provided to the affiliate store DB; A content transmission unit providing the extracted content to the client computer; A data transmitter which provides various data to a main server through the web server; And a control unit controlling functions of the content entry / exit unit, the content transmitter, the data receiver, and the data transmitter.

In addition, the affiliated server preferably further includes a decoding unit for decoding the encoded file of the file provided from the main server using a predetermined decoding code key.

The affiliated store server may further include a memory unit that temporarily stores at least one of the decoded file and the distributed storage data and deletes the decoded file and the distributed storage data according to a command of a controller.

Hereinafter, exemplary embodiments of the present invention will be described with reference to the accompanying drawings. For reference, components having the same function used the same reference numerals, and the following embodiments are only one of the best forms constituting the present invention, the scope of the present invention is not limited by the following embodiments. .

1 is a view schematically showing a content protection system according to a preferred embodiment of the present invention. As shown in FIG. 1, the content protection system according to the present embodiment stores a content file and other files provided by the main server 100 and the main server 100, and provides the stored DB to the main server 200. Franchise headquarters side system comprising a main server 100 and a web server 300 that provides a connection between a plurality of affiliated server servers 401, 402, ... by using a wired / wireless communication network 700, and a main server. Merchant server (401, 402, ..., hereinafter 400) for transmitting and receiving various files, such as content files from the 100, Merchant DB (501, 502, ..., which stores the content file, etc. provided from the main server) Hereinafter, a variety of contents transmitted from a merchant system and a merchant server including a web server (not shown) that provides a connection between the main server 100 and a plurality of merchant servers 400 using the wired / wireless communication network 700). Client computer running the file (6 11, 612, 621, 622, ..., hereinafter 600).

Specifically, as shown in FIG. 2, when predetermined data is input from the affiliate server 400 through the web server 300, the main server 100 receives the input data and provides the received data to the controller. Receiving unit 150; When the authentication information of the affiliated member and / or the individual member is provided through the affiliated server server 400, the information is compared to the information of the affiliated member and the member stored in the main DB 200 and then the state of each member is provided to the controller 140. Member management unit 110; A content extraction unit 130 for searching for a content file stored in the main DB 200 and extracting the retrieved content file according to a command of the controller 140; A security code extracting unit 120 for checking the affiliate server information to transmit the content file and extracting the encoding key code of the affiliate server from the encoding key codes stored in the main DB 100; An encoding unit 170 for encoding the content file extracted from the content extraction unit 130 using a predetermined encoding code key; A data transmitter 160 providing the encoded content file to the affiliate server 400 through the web server 300; And a controller 140 for controlling functions of the member manager 110, the security code extractor 120, the content extractor 130, the encoder 170, the data receiver 150, and the data transmitter 160. do. Meanwhile, in the present invention, the key code is divided into an encoding key code for encrypting the content file and a decoding key code for decrypting the encrypted content file, and are formed separately for the plurality of affiliated server servers 400, respectively, in the main DB. The keycode for encoding is stored in 200, and the keycode for decoding is stored in the affiliated store DB 500.

In addition, as shown in Figure 3, the main DB 200 is a member of the individual stores the personal information such as the member's name, ID, password, personal details of each member, and in the case of the member is a member of the member's personal information Member information DB (210) storing server information such as hardware information of the merchant server and information of the merchant DB, security management DB (220) storing a plurality of encoding key codes respectively formed for the plurality of merchant servers (400), A content DB 230 for storing all content files that can be transmitted to a plurality of affiliate servers, and a content list DB 240 for storing a list of contents to be distributed to each of the affiliate servers and a list of contents currently stored in the content DB. It includes. In addition, as described later, the security management DB (220) divides the content file received from the merchant server 400 into a plurality of files, and provides a file name using a random number to each of the plurality of divided files, When distributed storage data including the file name provided using the random number is provided to the main server 100, the distributed storage data including the file name are further stored from the main server 100.

In addition, as shown in FIG. 4, when the affiliate server 400 inputs a predetermined file such as a content file (encoded) from the main server 100 through a web server (not shown), distributed storage data for a divided file name, etc. A data receiver 410 which receives the input file and provides the received file to a controller; A decoding unit 430 for decoding the encoded file among the files provided from the main server 100 using a predetermined decoding code key stored in the affiliated store DB 500; A content entry / exit unit 470 which provides the affiliated store DB 500 with the divided or undivided content file in the manner described below, and extracts the file provided to the affiliated store DB 500; A content transmitter 480 for providing the extracted content to the client computer; A data transmitter 420 for providing various types of data generated by the affiliated store server 400 to the main server 100 through a web server, such as distributed storage data including divided content file names and member information; The content management unit 460 for dividing the decoded file into a plurality of files in a manner to be described later, providing a file name using a random number to the divided file, and forming distributed storage data including the file name provided using the random number. ); Temporarily storing distributed storage data including a decoded and non-partitioned content file to be described later and a file name provided using the random number, and deleting the decoded file and the distributed storage data according to a command of the controller 440. A memory unit 450; And a controller 440 for controlling the functions of the various components.

In addition, as shown in Figure 5, the merchant DB 500 is a member information DB 510 that stores personal information such as the name, ID, password, personal details of each member for the individual member; A key code management DB 520 for storing decoding key codes of the affiliated store server 400 connected to a predetermined affiliated store DB 500 among a plurality of key codes respectively formed for the plurality of affiliated server servers 400; A content DB 530 for storing all content files received from the main server 100; And a content list DB 540 which stores a list of content files currently stored in the predetermined affiliated store DB 430 and a list of content files stored in the main DB 200, and the like.

A detailed configuration of the system of the present embodiment having the above configuration and various embodiments of a method of distributing content using the system will be described below. For reference, components that perform the same functions as those described with reference to FIGS. 1 to 5 will be described using the same reference numerals.

6 is a view schematically showing a content protection method according to a preferred embodiment of the present invention. As shown in FIG. 6, in the content protection method according to the present embodiment, a content file encoded using a code key is received from a main server, and the received content file is decoded (S100). Dividing and randomly storing the divided file names (S200), extracting and recombining a plurality of divided content files according to a request of the client computer, and providing the recombined content files to the client computer (S300); If there is an attempt to access and download the stored content from an external or client computer in a predetermined unscheduled manner, the server may be forcibly shut down or delete at least a part of the content (S400).

Receiving the encoded content file using the code key from the main server, and decoding the received content file (S100) will be described below with reference to FIG.

When a connection signal is provided to the main server 100 from the affiliate server 400 or other external computer, the main server 100 compares the member server DB of the member information DB 210 with the server information of the computer attempting to connect. It is determined whether the attempted computer is an authorized merchant server 400 (S101). If the computer attempting the connection is not an authorized merchant server, the main server 100 forcibly blocks the connection (S111).

Or, if the computer attempting to access is the affiliate server 400, the content extraction unit 130 extracts a predetermined content file from the content DB 230 (S102). The extraction may be to extract the content file requested by the merchant server 200 in real time or in advance, or may be provided to the predetermined merchant DB automatically by the selection of the main DB 100. In addition, the security code extraction unit 130 extracts a key code for encoding for the merchant server to transmit the content in the security management DB (220).

That is, in the embodiment according to the present invention, the keycode is composed of an encoding keycode and a decoding keycode, and is formed of different keycodes for a plurality of affiliated server servers. In addition, the main server is provided with a key code for encoding, and each affiliate server receives a key code for decoding distinguished from each other for each merchant in advance before providing contents. Therefore, when the content file is provided from the main server to the merchant server through a communication network such as the Internet, the main server encodes the content file using the encoding keycode for the merchant server, and the merchant server decodes the encoded content file for the merchant server. By using the code key for decoding, even if the content file is copied without permission due to hacking or other situation during transmission, the unique content of each merchant does not have a unique key code, so the duplicated content can be secured without being disclosed. Although this embodiment adopts a configuration having a unique keycode for each affiliated store to improve security performance, it is clear that the object of the present invention can be sufficiently achieved even if the same keycode is given to all affiliated stores. . In addition, in the present embodiment, the head office system and the affiliated system have each key code, but the key file is encoded and decrypted at the main server without having to hold the key code before the content is transmitted. The decoding keycode may be provided to the affiliate server in parallel with the content file.

On the other hand, following step S103, the encoding unit 170 encodes the extracted content file using the extracted encoding keycode (S104), and the encoded content file is transmitted from the data transmitter 160 to the web server 300 and the like. It is provided to the affiliated store server 400 through the communication network 700 (S105). In addition, the controller 140 checks whether all encoded content files have been provided to the affiliate server 400 (S106), and continues to perform a content transmission procedure when all of the content files are not provided.

In addition, when the data receiving unit 410 of the merchant server 400 receives all the content files from the main server 100, the merchant server 400 extracts the keycode for decoding from the keycode management DB 520 and extracts the content file. The obtained keycode is provided to the decoding unit 430 (S107). Subsequently, the decoding unit 430 decodes the encoded content file using the decoding keycode, and provides the decoded content file to the control unit 440 (S108). Subsequently, the controller 440 determines whether the original content file and the decoded content file are the same file (S109). Such a check may, for example, use a checksum method. The checksum method is a method of separately sending a sum of all the data sent before the end of the transmission data to confirm that the data is correctly transmitted. The merchant server 400 adds the decoded content and then adds the main content. It is checked whether there is an error compared to the check sum provided by the server 100. The control unit 440 checks whether the file is normally transmitted by file inspection using a checksum method or the like (S110), and if not, the control unit 440 provides the fact to the control unit 140 of the main server 100. If the file is newly received and is normally transmitted, step S100 is terminated.

Next, a step (S200) of dividing the decoded content file into a plurality of pieces and randomly storing the divided file name (S200) will be described with reference to FIG. 8.

First, the normally received and decoded content file is divided into a plurality of files by the content manager 460 (S201). On the other hand, it is preferable that the original content file, which is divided into a plurality of files, is temporarily stored in the memory unit 450 for the reasons described later. Subsequently, the plurality of divided files are named by the random number method (S202). The random number method used in the present embodiment does not limit its kind such as arithmetic random number and physical random number. Subsequently, the plurality of files named by the random number method are distributed and stored in the content DB 530. Subsequently, in case of recombination in order to use the distributed and stored content files at the request of the client computer later, they are distributed together with the names of the content files, randomized merchant server information, and file names of a plurality of files named by random numbers. DB of the stored file is generated to generate distributed stored data (S204). In addition, the generated distributed storage data is temporarily stored in the memory unit 450.

Subsequently, in order to confirm whether file division, naming by random numbers, and distributed storage data are generated correctly, the original content file and distributed storage data temporarily stored in the memory unit 450 are extracted, and the extracted distributed storage data is used. By extracting the plurality of split files distributed and stored in the content DB (530) and recombine them (S205). The recombined content file and the original content file are compared (S206). If both files are identical to each other, the next procedure is performed. If the two files are not identical, the procedure is resumed from step S201. Alternatively, when both files are the same, distributed storage data is provided to the main server 100 through the data transmitter 320, and the main server 100 stores the distributed data stored in the security management DB 220. If there is a request from the merchant DB (400) in the future to extract it and provide it to the merchant server (400). By the above method, even if the distributed and stored contents of the affiliated store DB 500 are replicated by an external or client computer without permission in the future, each of the contents is divided and randomly mixed and randomly mixed. It is not possible to complete a single content in combination with each other, thus greatly reducing the possibility of duplication by hacking of the content. The control unit 440 checks whether the distributed storage data has been completely provided (S208), proceeds with the transmission procedure again if not completely provided, and deletes the original content stored in the memory unit 450 if fully provided (S209). And proceeding to delete the distributed storage data (S210), the procedure S200 is terminated by completely removing the original content and distributed storage data from the merchant side system.

Next, a step (S300) of extracting and recombining a plurality of content files divided by the request of the client computer 600 and providing the recombined content files to the client computer 600 will be described with reference to FIG. 9.

First, the client computer 600 accesses the affiliated store server 400 or accesses the main server 100 through the affiliated store server 400 (S301). Then, the main server 100 or the merchant server 400 checks the client computer information, and the member information provided from the client computer 600 and the member information stored in the member management DB 210 or the member management DB 410. In comparison, it is checked whether the client computer 600 is a computer authenticated by the corresponding affiliate server 400, and the member requesting access is a member registered in the member management DBs 210 and 410 (S302). Meanwhile, the present embodiment adopts a system and method for confirming both client computer information and member information. However, if only client computer information is correctly identified, a procedure for confirming member information may be omitted, and a non-member user may also implement the present invention. It can also be configured to use the service used. As a result of the check, if the client computer 600 is a computer authenticated by the affiliate server, the following procedure is performed. If the client computer 600 is not an authorized computer, the main server 100 or the merchant server 400 forces the computer and the main server. Blocking the connection with the 100 and the merchant server 400 (S303).

If the client computer 600 is a computer authenticated by the affiliate server, the client computer 600 may request the affiliate server 400 to provide predetermined content (S304). When the merchant server 400 receives a predetermined content providing request, the merchant server 400 receives distributed storage data for the corresponding content file stored in the security management DB 220 through the main server 100 (S305). If the transmission is not performed correctly, the distributed storage data reception step is repeated. Upon receiving the distributed storage data, the content extractor 470 extracts a plurality of content files having file names stored in the distributed storage data through the content DB 530, and recombines the extracted files (S307). The prepared content to the client computer 600. On the other hand, the client computer 600 according to the present invention provides a connection between the user and the merchant server 400, and allows the user to use the content provided by the merchant server 100, but the possibility of illegal copying by the user It is desirable to configure not to include a separate storage device to block. That is, the client computer 600 only outputs each content provided from the affiliate server 400 through the display screen and the speaker, and is configured not to be stored using a storage device such as a separate HDD. ), It is desirable to prevent the unauthorized copying of the content, and the resulting copyright, violation of the content supply contract. Subsequently, the controller 440 checks whether the corresponding content has been completely used by the client computer 600 (S309). After the use is completed, the controller 440 divides the recombined file again, and transmits the distributed storage data to the main server 100. Distributed storage data and non-partitioned content files stored in the merchant server are completely deleted.

Next, referring to FIG. 10, step S400 of forcibly terminating the server or deleting at least a part of the content when there is an attempt to access and download the stored content from an external or client computer in a predetermined unscheduled manner will be described with reference to FIG. 10. .

First, when an external computer other than the client computer accesses the affiliate server 400, or accesses the affiliate server 400 in a manner not previously promised as the client computer 600, the affiliate server 400 is the main server. Check the connection with the 100 (S401).

In this embodiment, when the affiliate server 400 is online with the main server 100, access by such an external computer is controlled by the main server 100. That is, when the main server 100 receives information indicating that an external computer approaches the affiliated server 400 (S402), the main server 100 transmits a message for requesting access stop to the corresponding external computer once or several times (S403). In spite of the message, if the access to the affiliated store server 400 is continued by an external computer or the like, the main server 100 operates a remote control process (S404). After determining whether the main server 100 can directly control the affiliate server 400 by the remote control process (S405), if the remote control is possible, the main server 100 performs a process of forcibly terminating the affiliate server 400 (S406). . Subsequently, it is determined whether the affiliated server server 400 is completely terminated (S407), and if the affiliated server 400 is not terminated, the forced termination process is continued, and when the affiliated server server 400 is terminated, the remote control process is terminated. Let's do it.

On the other hand, when the remote control by the main server 100 is not possible in S405, and access to the affiliated store server 400 is continued by an external computer, the protection program by the affiliated store server 400 operates. That is, the affiliate server 400 forcibly destroys the content file stored in the affiliate store DB 500 by a program stored therein. The merchant server 400 checks whether all the content files stored in the merchant DB 500 are destroyed (S412), and if all are not destroyed, continues the destruction procedure, and terminates the forced destruction program if all are destroyed.

In addition, when the affiliated store server 400 and the main server 100 are not connected through the communication network in S401, the protection program by the affiliated store server 400 operates. In this case, the affiliated store server 400 first transmits a message for requesting an administrator authentication signal and an interruption of access to an external computer once or several times (S408). If the administrator authentication according to the administrator authentication signal request (S409), the merchant server checks whether the authentication is correct (S410), and terminates the protection program if it is determined that the right holder access. On the other hand, if the server administrator according to S409 does not perform or is determined to be unauthorized access, the merchant server 400 requests the execution of the remote control process of the main server 100 again (S404), and proceeds to steps S405 to S407. Let's do it. Alternatively, if the affiliate server 400 does not request server administrator authentication, the affiliate server 400 may immediately proceed with the process of destroying the stored content of the affiliate DB without requesting the remote control process of the main server 100.

Meanwhile, in the present embodiment, the protection program by the main server is configured to forcibly terminate the affiliate server, and the protection program by the affiliate server is configured to destroy all contents stored in the affiliate DB, but the main server and the affiliate server are All can freely choose forced termination and / or content destruction to form a protection program. In addition, the affiliate server itself may execute various kinds of protection programs such as forced termination and content destruction of the affiliate server without remote control of the main server.

The content protection method and system according to the preferred embodiment of the present invention have been described in detail above. However, the configuration of the embodiment is to illustrate a specific method using the present invention, those of ordinary skill in the art will recognize that various modifications and changes are possible from this embodiment. Therefore, the scope of the present invention is not limited to the scope of the above embodiments, but only by the claims described later.

According to the content protection method according to the present invention, since a separate key code is given to each affiliate store when the content is transmitted, and the content decoded by the key code unique to each affiliate store is provided to the affiliate store server, the content is exposed. The risk of illegal copying can be prevented.

In addition, according to the content protection method according to the present invention, by dividing each content into a plurality of files when storing the content, and by encrypting each file name, by placing the data that can decrypt the split file and the file name in a completely different place Even if the merchant DB is hacked, the use of the content is practically impossible, so the content can be effectively protected.

In addition, according to the content protection method according to the present invention, when access to the merchant server by the computer, which is not promised in the first place, by forcibly shutting down the server or destroying the content, it is possible to more effectively prevent unauthorized copying of the content by external intrusion. have. In addition, even if the content is destroyed in this way, the destroyed content can be retransmitted through the main server, so the merchants are provided with a safe protection device for their own content without any additional cost due to the content destruction.

Claims (19)

Receiving at least one content file using a wired or wireless communication network (I); Storing the provided content file (II); And (III) providing the provided content file to the client computer at the request of a client computer, In step II, the method further comprises: dividing the provided content file into a plurality of files and providing a file name using a random number to each of the plurality of divided files; Storing each of the plurality of divided files in storage means; Generating distributed stored data including a file name provided using the random number; And storing the distributed storage data including the generated file name in a storage means different from the storage means in which the plurality of divided files are stored. 2. The method of claim 1, wherein said step II further comprises the step of deleting the original file of said divided file and distributed storage data not stored in said other storage means. The method of claim 2, wherein the generated distributed storage data is provided to a main server and stored in a main DB connected to the main server. 2. The method of claim 1, wherein said step III comprises: receiving a request for providing a predetermined content file from a client computer; Receiving distributed storage data including the generated file name; Receiving the plurality of divided content files using the received distributed stored data; Combining the plurality of divided content files; Providing the combined content file to a client computer. 5. The method of claim 4, wherein said step III further comprises the step of deleting the distributed storage data including said generated file name after combining a plurality of divided content files. 6. The method of claim 5, further comprising the step of authenticating the client computer when a connection signal is provided from the client computer. 5. The method of claim 1 or 4, wherein the step I includes receiving a content file encoded using the encoding keycode and decoding the encoded content file using the decoding keycode. How to protect your content. 8. The method of claim 7, wherein the encoding keycode and the decoding keycode are provided to a plurality of merchant servers, respectively. The method of claim 1 or 4, further comprising: forcibly terminating the merchant server and forcibly deleting the content file when the content file is accessed from the external computer or the client computer by a method different from a predetermined method. Content protection method characterized in that it further comprises one. 10. The method of claim 9, further comprising providing an access warning message to the external computer or the client computer before forcibly terminating the server and forcibly deleting the content file. . And a web server that stores content files and other files provided from the main server and the main server, and provides a connection between the control server and a plurality of merchant servers using a main DB and a wired / wireless communication network that provide the stored files to the main server. , The main server may include: a data receiver configured to receive the input data and provide the received data to a controller when predetermined data is input from the affiliated store server through the web server; A content extraction unit searching for a content file stored in the main DB and extracting the retrieved content file according to a command of a controller; A data transmission unit providing the extracted content file to the affiliated store server through the web server; And a control unit controlling functions of the content extraction unit, the data receiving unit, and the data transmitting unit. The main DB is an individual member stores personal personal information such as the member's name, ID, password, personal details of each member, and in the case of a member member, server information such as personal information of each affiliated store and hardware information of the affiliated server, etc. A member information DB storing information of the DB; The merchant server divides the content file provided from the main server into a plurality of files, provides a file name using a random number to each of the plurality of divided files, and then distributes the stored data including the file name provided using the random number to the main server. Security management DB provided and stored through; A content DB for storing all content that can be transmitted to the plurality of merchant servers; And a content list DB storing a list of contents to be distributed to each affiliate server and a list of contents stored in the current contents DB. The system of claim 11, wherein the security management DB further stores a plurality of encoding keycodes respectively formed for the plurality of affiliate servers. The method of claim 12, wherein the main server further checks the merchant server information to transmit the content file, and further extracts a security code extraction unit for encoding the key code for encoding of the blind point server to transmit the file among the encoding keycode stored in the main DB Content protection system comprising a. The system of claim 11 or 12, wherein the main server further comprises an encoding unit for encoding the content file extracted from the content extraction unit using the extracted encoding code key.   15. The system of claim 14, wherein the data transmitter provides the encoded content file to the affiliate server. The method of claim 14, wherein when authentication information of a member who is an affiliate is provided through the at least one affiliate server, authentication information of a member that is an affiliate store is compared with member information stored in the main DB, and the state and membership of each member that is an affiliate store. Contents protection system further comprises a member management unit for providing a state of the merchant server to the control unit. A web server that stores various files including content files provided from the merchant server and the merchant server, and provides a connection between the control server and the merchant server using a merchant DB and a wired / wireless communication network that provide the stored files and data to the merchant server. Including, The affiliated store server may include: a data receiving unit configured to receive the input file and provide the received file to a controller when a predetermined file is input from the main server through the web server; A content management unit for dividing the received file into a plurality of files, providing a file name using a random number to the divided file, and forming distributed stored data including a file name provided using the random number; A content inlet / out unit for providing a predetermined file to the affiliate store DB and extracting the file provided to the affiliate store DB; A content transmission unit providing the extracted content to the client computer; A data transmitter which provides various data to a main server through the web server; And a control unit controlling functions of the content entry / exit unit, the content transmitter, the data receiver, and the data transmitter. 18. The system of claim 17, wherein the merchant server further includes a decoding unit to decode the encoded file among the files provided from the main server by using a predetermined decoding code key. 19. The method of claim 17 or 18, wherein the merchant server temporarily stores at least one of the decoded file and the distributed storage data, and the memory unit for deleting the decoded file and the distributed storage data according to a command of the controller Content protection system further comprising.

Images