KR20180043679A - A method for providing digital right management function in cloud storage server communicated with gateway server - Google Patents

Abstract

Disclosed is a method for providing a digital right management (DRM) function in a cloud storage server interlocked with a user terminal, a gateway server, a DRM server, and an application server. The method for providing a DRM function comprises the steps of: performing authentication on a user of a user terminal when the access of the user terminal is confirmed; transmitting a file list to the user terminal when the authentication is approved; receiving a request to browse a first file included in the file list from the user terminal; transmitting the first file to the gateway server; receiving, from the gateway server, the first file in which the DRM application is canceled; and transmitting the received first file to the application server. Therefore, it is possible to provide or receive a DRM function even on a platform where hooking is limited.

Description

TECHNICAL FIELD [0001] The present invention relates to a method for providing a DRM function in a cloud storage server interworking with a gateway server,

The present invention relates to a method of providing a DRM function, and more particularly, to a method of providing a DRM function in a cloud storage server by relaying an application server, a DRM server, and a user terminal in a cloud environment.

Recently, with the development of computer technology, various digital materials are widely used.

Also, among these digital materials, there are many confidential materials requiring copyright protection or copyrighted works, and various technologies for protecting these materials have been proposed.

Digital rights management (DRM) is a term that refers to any technology that restricts the use of digital material or hardware that the publisher or copyright holder distributes, and restricts its use to its intended use only. Many of the music and movies that were distributed offline on CD or DVD are distributed online, and in order to prevent unauthorized use that does not pay a fair amount of money, However, as the importance of security has increased and the awareness of the security has increased, it has been widely used for the purpose of preventing leakage of confidential data including business secrets.

On the other hand, in many cases, DRM functions such as authority control for existing security documents are mostly performed by encrypting and decrypting documents using various hooking techniques.

However, the current DRM technology uses a separate program among the companies, and at the same time, a process collision (crash) due to hooking and a delay in the operation time may occur, resulting in a problem that the system becomes unstable.

In addition, if the system or platform does not provide hooking technology, a separate technique for providing the DRM function may be required.

On the other hand, as various digital materials are utilized extensively, there is a problem that the limit of resources for storing personal data is confronted. Therefore, various cloud stores based on cloud services are being introduced. For example, Google's google drive, Microsoft's OneDrive, etc. are being deployed, and plans are being sought to overcome resource limitations.

In order to solve the above problems, an object of the present invention is to provide a method for providing a DRM function in a cloud storage server.

It is another object of the present invention to provide a method for providing a DRM function in a gateway server.

Another object of the present invention is to provide an apparatus for providing a DRM function.

According to an aspect of the present invention, there is provided a DRM service method for a DRM service in a cloud gateway server interworking with a user terminal, a gateway server, a DRM server, and an application server, A method for providing a function includes performing authentication for a user of a user terminal when a connection of a user terminal is confirmed, transmitting a file list to the user terminal when authentication is approved, Receiving a browse request for the first file, and transmitting the first file to the gateway server.

Here, the cloud storage server may register the gateway server in advance and process the first file in cooperation with the gateway server.

The step of performing authentication for a user of the user terminal comprises the steps of receiving user information from the user terminal, performing one-way encryption on the received user information, and comparing the result of the one-way encryption with user information stored in one- Step < / RTI >

According to another aspect of the present invention, there is provided a method for providing a DRM function in a gateway server coupled with a cloud storage server, a DRM server, and an application server, Receiving a first file from the cloud storage server according to a request for browsing a first file through the cloud storage server of the cloud storage server, releasing DRM application in cooperation with the DRM server according to whether the received first file is DRM applied And transmitting the DRM-deactivated first file to the application server.

Here, the gateway server is registered in advance in the cloud storage server, and can transmit and receive data using a predefined API (Application Programming Interface).

Here, the DRM application can be performed by packaging the first file encrypted with the symmetric key method and the first file encrypted with the metadata related to the first file.

Here, the step of transmitting to the application server may be carried out according to at least one security protocol such as Transport Layer Security (TLS) and Secure Sockets Layer (SSL).

Here, the metadata may include at least one of a valid period, a generation time, a modification time, and a decryption key for the first file.

Here, the step of canceling the DRM application may include a step of checking whether the first file is DRM applied, a step of determining a user's access right in cooperation with the DRM server when DRM is applied to the first file, And releasing the DRM application of the first file.

Here, the method may further include receiving a second file from which the first file is modified from the application server, and transmitting the second file to the cloud storage server.

Here, in the step of transmitting the second file to the cloud storage server, DRM application may be performed for the second file in cooperation with the DRM server, and the second file may be transmitted to the cloud storage server.

According to another aspect of the present invention, there is provided an apparatus for providing a DRM function in cooperation with a user terminal, a gateway server, a DRM server, and a cloud storage server, An apparatus for providing a DRM function includes a processor for executing at least one instruction and a memory for storing at least one instruction.

Here, the processor receives the first file from the cloud storage server according to a request for browsing the first file through the cloud storage server of the user, synchronizes with the DRM server according to DRM application of the received first file, And can transmit the first file whose DRM application is released to the application server.

Here, the device providing the DRM function can be previously registered in the cloud storage server and can transmit and receive data using a predefined API (Application Programming Interface).

Here, the processor can encrypt the first file with the symmetric key method, and package the metadata related to the first file together with the encrypted first file to perform the DRM application.

Here, the metadata may include at least one of a valid period, a generation time, a modification time, and a decryption key for the first file.

Here, the processor may transmit the DRM-deactivated first file to the application server according to at least one security protocol such as Transport Layer Security (TLS) and Secure Sockets Layer (SSL).

Here, the processor checks whether or not the first file is DRM applied. If DRM is applied to the first file, the processor determines the access right of the user in cooperation with the DRM server. If DRM is applied to the first file, Can be released.

Here, the processor may receive a second file from which the first file has been modified from the application server, and send the second file to the cloud storage server.

Here, the processor may perform DRM application in association with the DRM server with respect to the second file, and may transmit the DRM-applied second file to the cloud storage server.

When the method or apparatus for providing the DRM function according to the present invention as described above is used, it is possible to process the DRM file even in a platform with limited hooking.

In addition, since DRM application can be performed in a cloud environment, security in a cloud environment can be improved.

In addition, cloud storage can be used to overcome resource constraints on local storage.

In addition, it has a high scalability and high stability because it can work with a completed application server.

1 is a block diagram of a method or apparatus for providing a DRM function according to an embodiment of the present invention.
2 is a flowchart illustrating a method of providing a DRM function in a cloud storage server according to an exemplary embodiment of the present invention.
3 is a flowchart illustrating a method of providing a DRM function in a gateway server according to an exemplary embodiment of the present invention.
4 is a first sequence diagram of a method for providing a DRM function according to an embodiment of the present invention.
5 is a second sequence diagram of a method for providing a DRM function according to an embodiment of the present invention.
6 is a block diagram of an apparatus for providing a DRM function according to an embodiment of the present invention.
7 is an exemplary view of a user interface provided by a cloud storage server according to an embodiment of the present invention.

While the invention is susceptible to various modifications and alternative forms, specific embodiments thereof are shown by way of example in the drawings and will herein be described in detail. It should be understood, however, that the invention is not intended to be limited to the particular embodiments, but includes all modifications, equivalents, and alternatives falling within the spirit and scope of the invention. Like reference numerals are used for like elements in describing each drawing.

The terms first, second, A, B, etc. may be used to describe various elements, but the elements should not be limited by the terms. The terms are used only for the purpose of distinguishing one component from another. For example, without departing from the scope of the present invention, the first component may be referred to as a second component, and similarly, the second component may also be referred to as a first component. And / or < / RTI > includes any combination of a plurality of related listed items or any of a plurality of related listed items.

It is to be understood that when an element is referred to as being "connected" or "connected" to another element, it may be directly connected or connected to the other element, . On the other hand, when an element is referred to as being "directly connected" or "directly connected" to another element, it should be understood that there are no other elements in between.

The terminology used in this application is used only to describe a specific embodiment and is not intended to limit the invention. The singular expressions include plural expressions unless the context clearly dictates otherwise. In the present application, the terms "comprises" or "having" and the like are used to specify that there is a feature, a number, a step, an operation, an element, a component or a combination thereof described in the specification, But do not preclude the presence or addition of one or more other features, integers, steps, operations, elements, components, or combinations thereof.

Unless defined otherwise, all terms used herein, including technical or scientific terms, have the same meaning as commonly understood by one of ordinary skill in the art to which this invention belongs. Terms such as those defined in commonly used dictionaries are to be interpreted as having a meaning consistent with the contextual meaning of the related art and are to be interpreted as either ideal or overly formal in the sense of the present application Do not.

Hereinafter, preferred embodiments according to the present invention will be described in detail with reference to the accompanying drawings.

1 is a block diagram of a method or apparatus for providing a DRM function according to an embodiment of the present invention.

Referring to FIG. 1, a method or apparatus for providing a DRM function may include a user terminal, a cloud server, a gateway server, a DRM server, and / or an application server.

Here, the DRM function is a function of encrypting and decrypting contents when transmitting and receiving various contents such as a media file or an electronic document file, managing the keys used for encryption, Design and packaging, and the management and interpretation of rights to use the content, thereby preventing the distribution and copying of digital contents.

Here, the user terminal accesses the cloud storage server, browses the file, and can read, modify or delete the DRM-applied file in cooperation with the application server and / or the gateway server. Here, DRM-applied files may include media files as well as various office files including word processor files. Also, the platform of the user terminal may be an operating system (OS) that does not support or supports various hooking techniques such as function hooking and API hooking. For example, Apple's MAC OS, Linux, and so on.

Examples of the user terminal include a portable computer such as a desktop computer, a laptop computer, a notebook, a smart phone, a tablet PC, a mobile phone, a smart phone, Such as a smart watch, a smart glass, an e-book reader, a portable multimedia player (PMP), a portable game machine, a navigation device, a digital camera, a digital multimedia broadcasting (DMB) A digital audio recorder, a digital audio player, a digital video recorder, a digital video player, a PDA (Personal Digital Assistant), and the like.

Here, the gateway server can provide the DRM function to the cloud storage server by relaying the cloud storage server and the DRM server. It is also possible to relay the application server and the DRM server. Specifically, data stored in the cloud storage server can be transmitted and received, and a DRM application can be performed or released with respect to a file received from the cloud storage server in cooperation with the DRM server. In addition, DRM application may be performed by receiving a file from the application server, or DRM application may be canceled and the processed file may be transmitted to the cloud storage server. However, when sending and receiving DRM-released files, they can transmit and receive in environments where network security is applied. In addition, data can be exchanged with each other using an application programming interface (API) provided by a cloud storage server, a DRM server, or an application server, respectively. At this time, a unique identifier such as an IP address, a MAC address , server ID, and so on.

Here, the cloud storage server can download various files of a user, upload it, search a directory or a file list, transmit various stored files to the outside, An application programming interface (API) can be provided. In particular, the cloud storage server registers the gateway server in advance, processes various files stored in the cloud storage server in association with the gateway server, and transmits / receives the file to / from the application server.

Examples of cloud storage servers are cloud services such as google drive, onedrive, and dropbox, and may be stored on a private network. It can also be, for example, sharepoint. Here, the application server can process various files stored in the cloud storage server in cooperation with the gateway server. For example, a file stored in a cloud storage can be received via a gateway server to play media files, various office document files, picture files, etc., and can make changes including editing, deletion, and the like.

More specifically, the application server may be a web-based server for processing documents or media files, such as google doc, naver office, thinkfree, MS office 365, and the like. In addition, various media servers through a public or private network may be included, or may be a device capable of directly or indirectly connecting with a user terminal on a network to drive various applications.

In another embodiment of the present invention, the application server may include a gateway server. For example, an application server may register with a cloud storage server to transmit / receive various files, and may interwork with a DRM server The DRM application may be performed or the DRM application may be canceled.

Here, the DRM server may receive DRM-related data including DRM-applied files, user information, other access rights or management policies in cooperation with the gateway server, authenticate the user using the received user information, And can transmit whether DRM is released or not.

In addition, the DRM server may include a policy server or a device. The policy server may store not only the rights of the user but also information about the distribution or distribution of DRM-applied files. For example, , And may mean a unique identifier for a device capable of playing or browsing a DRM-applied file.

In addition, the DRM server may transmit information on the DRM application to the DRM-applied file to the gateway server. Here, the information on the application of DRM may be an encryption key for a DRM applied file or a decryption key for canceling DRM application, as information for performing or releasing DRM application.

Also, the DRM server may include a key server for storing or managing the encryption key or the decryption key, and may store or manage the key in cooperation with a separate key server.

2 is a flowchart illustrating a method of providing a DRM function in a cloud storage server according to an exemplary embodiment of the present invention.

Referring to FIG. 2, a method of providing a DRM function in a cloud server (gateway server) interworking with a user terminal, a gateway server, a DRM server, and an application server includes the steps of: (S200). When the authentication is approved, the authentication server transmits the file list to the user terminal (S205). The user terminal transmits the first file (S210), and transmitting the first file to the gateway server (S215).

Here, the cloud storage server can register the gateway server in advance and process the file in cooperation with the gateway server.

Here, the step S200 of performing authentication for the user of the user terminal may include receiving the user information from the user terminal, performing one-way encryption on the received user information, and outputting the result in a one- And comparing them. Here, authentication for the user may mean authentication for the cloud storage.

Here, the user information may be, for example, a user ID, a password, biometric information including a fingerprint or iris, an ID of the user terminal, a MAC address of the user terminal, or the like. Here, the one-way encryption may be a hash function including at least one of MD-5, SHA-1, and SHA-256.

3 is a flowchart illustrating a method of providing a DRM function in a gateway server according to an exemplary embodiment of the present invention.

Referring to FIG. 3, a method of providing a DRM function in cooperation with a cloud storage server, a DRM server, and a web application server includes the steps of: requesting browsing of a first file through a user's cloud storage server; (S300) of receiving the first file from the cloud storage server, releasing the DRM application in cooperation with the DRM server according to whether the received first file is DRM applied (S305), and releasing the DRM application 1 file to the application server (S310).

Here, the gateway server is registered in advance in the cloud storage server, and can transmit and receive data using an API (Application Programming Interface) provided in the cloud storage server.

Here, after the step S300 of receiving the first file from the cloud storage server, performing the user authentication on at least one of the DRM server and the application server may be performed. Here, user authentication can be performed by receiving user information in the cloud storage, which is the same as the user authentication in the cloud storage described above. At this time, it may be performed by comparing the received user information with the user information received from the DRM server, transmitting the user information received from the cloud storage to the DRM server, and receiving the authentication information from the DRM server. Here, the meaning after the step S300 of receiving the first file is not limited to the step immediately following the step S300 of receiving the first file, and it should be construed that the step can be performed at any stage thereafter.

Here, after the step S300 of receiving the first file from the cloud storage server, it may further include a step of inducing the user terminal to connect to the application server. For example, the gateway server may send a link to the user terminal to connect to the application server, and the link may include an address capable of accessing the first file of the gateway server. The user terminal that receives the link can access the application server according to the link. When the user terminal is connected, the application server accesses the gateway server through the address accessible to the first file of the gateway server included in the link, . Here, the meaning after the step S300 of receiving the first file is not limited to the step immediately following the step S300 of receiving the first file, and it should be construed that the step can be performed at any stage thereafter.

Here, the step of transmitting to the application server (S310) may be carried out according to at least one security protocol such as Transport Layer Security (TLS) and Secure Sockets Layer (SSL).

For example, symmetric key encryption may be used to ensure confidentiality on a communication connection, public key encryption may be used to authenticate each other, and a message authentication code (MAC) Can be used.

Here, the DRM application can be performed by packaging the first file encrypted with the symmetric key method and the first file encrypted with the metadata related to the first file. Examples of symmetric key schemes are DES, TDES, AES, SEED, RSA, RC4, IDEA.

Here, the metadata may include at least one of a valid period, a generation time, a modification time, and a decryption key for the first file.

In another embodiment, DRM application may perform encryption using a first key for a first file. Also, encryption may be performed using the second key for the first key, and the encrypted first key may be packaged together with the metadata for the encrypted first file. Here, the second key may be stored in the DRM server and received from the DRM server. Here, the DRM server can store the second key by performing encryption such as one-way encryption. Also, the first key or the second key may be a symmetric key scheme, but not an asymmetric key scheme.

Here, the step of canceling DRM application (S305) may include checking whether DRM is applied to the first file, determining DRM application to the first file, determining the access right of the user in cooperation with the DRM server, And releasing DRM application of the first file based on the authority.

The step of determining the access right of the user may include receiving information on the access right of the user from the DRM server, determining the access right using the received information, inquiring the rights of the user to the DRM server, It can check the access authority and receive the permission of the user.

For example, the step of determining the access right of the user may include determining a MAC address, a cookie, an IP address (Internet Protocol address), a user ID, a password, biometric information including a fingerprint or an iris The access right of the user may be determined by transmitting at least one and verifying the transmitted information with the DRM server or verifying the information received from the DRM server with the gateway server.

The releasing the DRM application of the first file based on the access right may include decrypting the first file using the decryption key received from the DRM server. Here, the decryption key may be a second key if the second key is a symmetric key scheme, and may be an asymmetric key for the second key if it is an asymmetric key scheme. At this time, if the first key is a symmetric key, the first key can be decrypted using the decryption key, and the first file can be decrypted using the decrypted first key. Here, the received decryption key may be stored in the gateway server until the operation of modifying the first file is completed.

Here, the method for providing the DRM function may further include receiving a second file from which the first file is modified from the application server, and transmitting the second file to the cloud storage server.

Here, the step of receiving the second file from the application server can be received by the gateway server receiving from the application server whether the modification of the first file has been completed and requesting the second file to the application server accordingly. Specifically, for example, when the application server receives the instruction to store the first file from the user terminal, terminates editing of the first file, or terminates the connection to the application server, And thus the gateway server can receive it by requesting a second file to the application server. As another example, the user terminal may directly transmit the modification to the first file to the gateway server, and the gateway server may receive the second file from the application server.

In another embodiment, the gateway server may be listening to a message from the application server after the gateway server sends the DRM-deactivated first file to the application server. At this time, when the application server receives the save command of the first file from the user terminal or finishes editing the first file or ends the connection to the application server, the application server adds the second A file can be attached and transmitted to the gateway server, and accordingly, the gateway server can receive the second file.

Here, the step of receiving the second file from the application server may be performed periodically according to a predetermined time interval.

Here, in the step of transmitting the second file to the cloud storage server, DRM application may be performed for the second file in cooperation with the DRM server, and the second file may be transmitted to the cloud storage server.

Here, the step of transmitting the second file to the cloud storage server may include: checking the management policy in cooperation with the DRM server with respect to the second file; performing DRM application on the second file according to the management policy; And transmitting the second file to which the application is performed to the cloud storage server. Here, the management policy may be stored in the policy server included in the DRM server or linked to the DRM server.

Here, the management policy refers to at least one of the job title of the user who modified the second file, the ID of the user, the MAC address of the user terminal, and the IP address of the user terminal (Internet Protocol address) Can be determined.

Here, the management policy may determine whether DRM is applied to the second file, depending on whether the first file is DRM-applied or not. For example, if the first file is a DRM-applied file, DRM may be applied to the second file. If the first file is a DRM-unapplied file, DRM may not be applied to the second file .

Here, as described above, the application of the DRM to the second file can perform encryption using the first key for the second file. Further, encryption may be performed using the second key for the first key, and the encrypted first key may be packaged together with the metadata for the encrypted second file. However, since the second key may be obtained from the DRM server in the step S305 of canceling the DRM application, the DRM server may not receive the second key from the DRM server. Also, the first key may be packaged together in the first file and thus may be obtained in the first file.

4 is a first sequence diagram of a method for providing a DRM function according to an embodiment of the present invention.

Referring to FIG. 4, the user terminal 100 may access the cloud storage server 300 (S400).

The cloud storage server 300 can perform user authentication for the user of the user terminal 100 (S401) and send the file list to the authenticated user terminal 100 (S402). Here, the cloud storage server 300 transmits the file list to the user terminal 100 may include providing the user terminal 100 with a user interface for the file list.

The user terminal 100 can request the cloud storage server 300 to browse the first file included in the file list at step S403 and the cloud storage server 300 transmits the first file to the gateway server 200 (S404).

When the gateway server 200 receives the first file as the cloud storage server 300 transmits the first file to the gateway server 200 in step S404, the gateway server 200 determines that the user terminal 100 is the application server, (Step S405). For example, the gateway server 200 may send a link to the user terminal 100 to access the application server 500, and the link may include an address accessible to the file of the gateway server 200 May be included. The user terminal 100 receiving the link can be connected to the application server 500 according to the link S406 and the application server 500 can access the file of the gateway server 200 included in the link And can request a file to the gateway server 200 through the address. Here, the step of causing the gateway server 200 to connect to the application server 500 to the user terminal 100 is the same as the step after the gateway server 200 receives the first file from the cloud storage server 300 (S404) It is to be understood that the present invention is not limited thereto, and any ordinary person skilled in the art can select and implement the invention at each step.

The gateway server 200 checks whether the first file is DRM applied (S407). If DRM is applied to the first file, the gateway server 200 can request the DRM server 400 to confirm the access right of the user (S408). The DRM server 400 can transmit the access right to the user at step S409 and the gateway server 200 can determine the access right of the user based on the received access right at step S410. If the gateway server 200 determines that the user has access right, the DRM application of the first file can be released (S411). In addition, the gateway server 200 may transmit the first file for which DRM application is canceled to the application server 500 (S412). When the application server 500 receives the first file for which the DRM application is canceled, the user terminal 100 may provide functions such as editing, browsing, storing, or deleting the first file for which DRM application is canceled S413).

5 is a second sequence diagram of a method for providing a DRM function according to an embodiment of the present invention.

Referring to FIG. 5, the following description will be given of a process in which the user terminal 100 receives various functions for the first file from the application server 500 (S413 in FIG. 4).

First, the user terminal 100 can modify the first file through the application server 500 (S500), and the application server 500 can thereby generate the second file in which the first file is modified (S501 ). Thereafter, the application server 500 may transmit the second file to the gateway server 200 by request of the gateway server 200 or the user terminal 100 (S502).

For example, after the gateway server 200 transmits the first file for which DRM application is canceled to the application server 500, the gateway server 200 may listen to a message from the application server 500 . At this time, when the application server 500 receives a command to store the first file from the user terminal 100, terminates editing of the first file, or terminates the connection to the application server 500, the application server 500 May attach a second file to a request message and transmit the request message to the gateway server 200 and the gateway server 200 may receive the second file.

The gateway server 200 may determine whether to apply the DRM to the received second file (S503). Specifically, the second file received can be determined by referring to the policy for the second file in cooperation with the DRM server 400. [

If the gateway server 200 determines to apply the DRM to the second file, the gateway server 200 can apply DRM to the second file in cooperation with the DRM server 400 (S504). The gateway server 200 may upload the DRM-applied second file to the cloud storage server 300 (S505).

6 is a block diagram of an apparatus for providing a DRM function according to an embodiment of the present invention.

Referring to FIG. 6, a device 200 providing a DRM function in cooperation with a user terminal, a cloud storage server, a DRM server, and an application server includes at least one command A processor 210 for executing a program, and a memory 220 for storing at least one instruction. In addition, it may include a storage device 230 that stores a user's file, a directory, and the like, and may include a communication unit 240 that transmits and receives data to and from a user terminal, a gateway server, a DRM server, or an application server.

Here, the device 200 providing the DRM function may be the gateway server described in FIGS.

Here, the processor 210 receives the first file from the cloud storage server in response to a request for browsing the first file through the cloud storage server of the user, and controls the DRM server 210 according to whether the DRM is applied to the received first file. The DRM application can be released, and the DRM application-canceled first file can be transmitted to the application server.

Here, the device 200 providing the DRM function can be previously registered in the cloud storage server and can transmit and receive data using a predefined application programming interface (API).

Here, the processor 210 may encode the first file with a symmetric key method and package the metadata related to the first file together with the encrypted first file to perform DRM application.

Here, the metadata may include at least one of a valid period, a generation time, a modification time, and a decryption key for the first file.

Here, the processor 210 can transmit the DRM-deactivated first file to the application server according to at least one security protocol such as Transport Layer Security (TLS) and Secure Sockets Layer (SSL) have.

Here, the processor 210 checks whether or not the first file is DRM applied. If DRM is applied to the first file, the processor 210 determines the access right of the user in cooperation with the DRM server, DRM application can be released.

Here, the processor 210 may receive a second file from which the first file is modified from the application server, and may transmit the second file to the cloud storage server.

Here, the processor 210 may apply DRM to the second file in cooperation with the DRM server, and may transmit the DRM-applied second file to the cloud storage server.

7 is an exemplary view of a user interface provided by a cloud storage server according to an embodiment of the present invention.

Referring to FIG. 7, it can be explained that the cloud storage server can be interworked with the gateway server.

Specifically, a user connected to the cloud storage server can select a browse or open command for the file list, and can select and open a specific application at this time.

Here, the application provided in the list may be a gateway server registered in advance in the cloud storage server.

Here, when the user selects a gateway server and browses the file with a specific application, the gateway server can guide the user terminal to connect to the application server. Accordingly, the user terminal can edit, modify, store, delete A user interface regarding the processing of the file can be provided from the application server.

The methods according to the present invention can be implemented in the form of program instructions that can be executed through various computer means and recorded on a computer readable medium. The computer readable medium may include program instructions, data files, data structures, and the like, alone or in combination. The program instructions recorded on the computer readable medium may be those specially designed and constructed for the present invention or may be available to those skilled in the computer software.

Examples of computer-readable media include hardware devices that are specially configured to store and execute program instructions, such as ROM, RAM, flash memory, and the like. Examples of program instructions may include machine language code such as those produced by a compiler, as well as high-level language code that may be executed by a computer using an interpreter or the like. The hardware devices described above may be configured to operate with at least one software module to perform the operations of the present invention, and vice versa.

Also, the above-described method or apparatus may be implemented by combining all or a part of the configuration or function, or may be implemented separately.

Claims (19)

1. A method for providing a DRM function in a cloud gateway server interworking with a user terminal, a gateway server, a DRM server, and an application server,
Performing authentication for the user of the user terminal when the connection of the user terminal is confirmed;
Transmitting the file list to the user terminal when the authentication is approved;
Receiving a request to browse the first file included in the file list from the user terminal; And
And sending the first file to a gateway server. The method according to claim 1,
The cloud storage server includes:
And registering the gateway server in advance and processing the first file in cooperation with the gateway server. The method according to claim 1,
The step of authenticating the user of the user terminal comprises:
Receiving user information from a user terminal; Performing one-way encryption on the received user information, and comparing the result of the one-way encryption with stored user information in one-way encryption in advance. A method for providing a DRM function in a gateway server interworking with a cloud storage server, a DRM server, and an application server,
Receiving the first file from the cloud storage server according to a user's request to view the first file through the cloud storage server;
Releasing the DRM application in cooperation with the DRM server according to whether the DRM is applied to the received first file; And
And transmitting the DRM-deactivated first file to the application server. The method of claim 4,
The gateway server comprises:
And registering in advance in the cloud storage server, and transmitting and receiving data using a predefined application programming interface (API). The method of claim 4,
Wherein the transmitting to the application server comprises:
According to at least one of a Transport Layer Security (TLS) and a Secure Sockets Layer (SSL) security protocol. The method of claim 4,
In the DRM application,
And encrypting the first file with a symmetric key scheme and packaging the first file with the metadata associated with the first file. The method of claim 7,
The metadata includes:
A generation time, a modification time, and a decryption key for the first file. The method of claim 4,
Wherein the step of releasing the DRM application comprises:
Checking whether DRM is applied to the first file;
If DRM is applied to the first file, determining access authority of the user in cooperation with the DRM server; And
And releasing DRM application of the first file based on the access right. The method of claim 4,
Receiving a second file from which the first file is modified from the application server; And
And sending the second file to the cloud storage server. The method of claim 10,
Wherein the transmitting the second file to the cloud storage server comprises:
Wherein the DRM application is performed in cooperation with the DRM server with respect to the second file, and the second file subjected to the DRM application is transmitted to the cloud storage server. 1. An apparatus for providing a DRM function in cooperation with a user terminal, a gateway server, a DRM server, and a cloud storage server,
The apparatus for providing the DRM function includes: a processor for executing at least one command; And
And a memory in which the at least one instruction is stored,
The processor comprising:
Receiving the first file from the cloud storage server in response to a user's request to browse the first file through the cloud storage server, and synchronizing with the DRM server according to DRM application of the received first file, And sends the DRM application-canceled first file to the application server. The method of claim 12,
The apparatus for providing the DRM function includes:
And a DRM function that is registered in advance in the cloud storage server and transmits / receives data using a predefined API (Application Programming Interface). The method of claim 12,
The processor comprising:
And the DRM application is performed by packaging the first file with the first file encrypted with the symmetric key method and the encrypted first file together with the metadata of the first file. 15. The method of claim 14,
The metadata includes:
A generation time, a modification time, and a decryption key for the first file. The method of claim 12,
The processor comprising:
And a DRM function for transmitting the DRM-disabled first file to the application server according to at least one security protocol such as Transport Layer Security (TLS) and Secure Sockets Layer (SSL) . The method of claim 12,
The processor comprising:
Determining whether the DRM application of the first file is applied to the DRM server, determining whether the DRM application of the first file is applied to the DRM server in cooperation with the DRM server, Device that provides DRM functionality. The method of claim 12,
The processor comprising:
Receives the second file from which the first file is modified from the application server, and transmits the second file to the cloud storage server. 19. The method of claim 18,
The processor comprising:
And performs DRM application for the second file in cooperation with the DRM server, and transmits the DRM-applied second file to the cloud storage server.

Images