TW200843504A - System and method of digital rights management - Google Patents

Abstract

Disclosed is a system and method of digital rights management (DRM). The system includes a DRM agent, a communication and rights issuer, and a service registrar and content issuer. When a user needs to subscribe a DVB-H digital content, the DRM agent asks an authentication organization for a subscribe service. The DRM agent receives a broadcasted service from the service registrar and content issuer, and sends a license request message to the communication and rights issuer. According to a received license, the DRM agent further decrypts the encrypted content in the broadcasted service. Thereby, the user may use the subscribed digital content.

Description

200843504 IX. Description of the Invention: [Technical Field] The present invention relates to a management system and method, and is a system and method applied to Digital Rights Management (DRM). [Prior Art] With the advent of the Digital Video Broadcasting-Handheld (DVB-Η) standard, multimedia content can be transmitted to mobile devices for viewing. Recipients are free to copy, modify, or redistribute these digital content. The purpose of the handheld DRM system is to protect digital content played by DVB-Η on handheld devices. DRM is a digital data protection management technology. The DRM system can include a variety of protection mechanisms, such as encryption algorithms, watermarking, user identity, and so on. The DRM standard developed by the Mobilepen Mobile Alliance (OMA) puts information such as product information and licenses on the archives/data/games/audio media and the media to read the data to control the legality of the use. According to the OMADRM standard, all rights objects are written in the rights expression language (REL) and are expressed in a language that people can read and understand. In other words, the rights description is completely public. The DRM standard developed by OMA provides a variety of application scenarios and services. According to different purchasing needs and willingness, the user can select the number of the contents of the grid, and use the DRM distribution management mechanism to limit the circulation of the digits. The OMA DRM standard enables digital content providers and mobile device users to grasp the rights and obligations of the media objects to be downloaded. Object downloading is an important means of delivering media objects between mobile devices, and digital rights management is an important mechanism by which the use of media objects can be controlled when download actions occur. DRM allows digital content providers to define their rules (use rights) for the media objects being used, as well as to establish a relationship between a single media object and different usage rights. In the literature of U.S. Patent No. 7,139,372, an authorized distribution of digital content of a mobile network is disclosed (Auth〇rized Distrib_u Μ

Digital Content over Mobile Network) technology. As shown in the first figure, the architecture used by this technology includes a mobile service provider (m〇bile deviceprovider), multiple mobile devices (such as labels 121-123), and multiple content providers (such as the number 131- 233). Content providers 131-233 pass the inner valley to the mobile service provider. This mobile device can download the mobile service provider 11〇. For example, the mobile service provider 110 has a Mp3 song (s〇ng) in the form of digital content, and the mobile user can download the MP3 song to their respective actions through the mobile service provider 11〇. device. Alternatively, the 200843504 content provider is not required to provide content directly from the mobile service provider. However, the application of DRM technology in the current DVB_H mobile service system has not been fully constructed. Today's DRM systems still require additional hardware to achieve the protection mechanism. SUMMARY OF THE INVENTION A DRM system and method can be provided in an example of the present invention. The present invention can be applied to a DVB-Η mobile TV (m〇biie TV) service platform. The DRM system of the present invention comprises a DRM agent, a communication and rights issuer (communicati〇n an (j rights issuer), and a service registrar and content issuer) according to In the present invention, when a user wants to subscribe to DVB-H digital content, the DRM agent sends a subscription management system (SMS)/Subscription Authentication/Authorization System (Subscription Authentication/Authorization System) to a certification authority. The SAS) subscribes to the service. The DRM agent receives the broadcasted service returned by the service login and the digital content publisher, and delivers the license request message to the communication and rights object issuer. The returned broadcast service contains encrypted DVB-Η digit content. 200843504 The communication and rights object issuer transmits the corresponding use license to the DRM agent, and the DRM agent will receive the encrypted license according to the use license. The encrypted content is decrypted. In this way, the user can successfully use this DVB-Η digit. Ben Sheming added a protection message for each digital audio and video material in the content issuer of DVB-Η. The mobile device receives the video and audio data, and obtains the usage information related to the audio and video data according to the content of the protection message. () It can be proved that this license is combined with the mobile device to prevent other mobile devices from illegally using the same license to use audio and video data. Thus, the use, playback, or copying of digital content can obtain corresponding rights objects. The above and other objects and advantages of the present invention will be described in detail below with reference to the following drawings, the detailed description of the embodiments, and the scope of the claims. (Embodiment) The second figure is an implementation of the DRM system of the present invention. A schematic diagram of an example in which the system is applied to a DVB-Η mobile TV service platform. Referring to the first figure, the DRM system 200 includes a DRM agent 201, a communication and rights object issuer 203, and a service login and digits. Content Publisher 205. The DRM Agent 201 is responsible for managing 200843504 System (SMS)/Subscriber Authentication and Authorization to subscribers of a Certification Authority 230. The system (SAS) subscribes to a service 201a of DVB-Η digital content, and receives a service login and a broadcasted service 205a returned by the digital content publisher 205, and transmits a license to the communication and rights issuer 203. Certificate request message 201b. The communication and rights item issuer 203 transmits a corresponding use license 203a to the DRM agent 201, and the DRM agent 201 decrypts the received broadcast service 2〇5a based on the use license 203a. This broadcast service 205a contains encrypted DVB-Η digital content. In this way, the user can successfully use this DVB-Η digital content. The communication and rights item issuer 203 will have the right to use the DVB-Η digital content service 2〇ia for the DRM agent 201 to make an authentication and authorization action 230a to the SMS/SAS of the authentication authority 230. The service registration and digital content issuer 205 will perform a registration action 230b through the certification authority 230, including service registration to the SMS/SAS and content publisher registration to the content issuer registration center ( Content issuer registration). The registration with SMS/SAS is to ensure that the services provided are legal and to register their service information (eg copyright owner, service identification number, service_etc) and Lin Yingzhi. Registration to the number of Fairy Publisher Centers is a guarantee. 200843504 The DRM agent 201 can be installed in a receiving device supporting the DVB_H system. The receiving device may be a mobile phone, or a personal digital assistant (PDA), or a mobile device of a mobile communication device. Since the protection information of each digital content is added to the content transmission end of the DVB-Η, the DRM agent 201 is installed in the mobile device, and the reception is received from the service registration and the digital content publisher 2〇5. The content of the broadcast service 20 brothers is encrypted. The mobile device acquires the use license 203a corresponding to the encrypted content (e.g., video material, etc.) in accordance with the content of the protection information. This use license 2〇3a will be combined with the receiving device (action I) to prevent other mobile devices from illegally using the encrypted content with the same license. The third figure further illustrates an example of the workflow of the DRM system of the present invention. When a user wants to subscribe to a DVB-tI digital content, the DRM agent 201 subscribes the DVB-H digital content service 201a to the certification authority 230, as shown in step 301. In step 3.1, when the DRM agent 201 subscribes to the service 201a of the DVB-Η digit valley to the certification authority 230, the subscriber management system of the certification authority 230 or the subscriber authentication and authorization system records the DRM agent. 201 identification card (ID) and its subscription service information. The subscription service information of the DRM agent 2〇ι includes at least the service identification code (service ID) of the service subscribed by the DRM agent 201, and the right of the DRM agent 201 to be authorized, 200843504, for example, what is the copy service, the view service f A description of the usage rights and specifications, such as the number of times, or the expiration date. When the user desires the service 201a, the following steps are taken: the DRm agent 201 receives the broadcast service 205a and transmits the license request message 203b, as shown in step 302. In step 3〇2, the drm agent receives the slave service number (4) and the publisher 2G5 transmits the broadcast service 2〇5a, and transmits the license request message 201b to the communication and rights issuer 2〇3. Confirm that the DRM agent thank you for the right to use this service, as shown in step 303. Step 303, the communication and rights issue publisher adds the authentication and authorization action to the SMS/SAS of the certification authority 230. If it is confirmed that the DRM agent 201 has the right to use the service, the corresponding use license 203a is transmitted to the DRM agent 2〇1, as shown in step 304. In step 304, the communication and rights item issuer 2〇3 makes a confession to the SMS/SAS _, _ and the rights item issuer 203 transmits the corresponding use license 2〇3a to the drm agent 201. The invention is complete with the QMA system (4) DRM fresh, and cooperates with the DVB-Η-specific broadcast crane. This system can control the use, recording, and transfer of all audio and video materials to protect digital content. The system and the system may employ an encryption algorithm, and the line practice using the invention includes at least the relevant (4) sub-certification mark, such as a user number, and a user identification module (Subsciiber ldentity).

Module, SIM) card, etc. The following four to sixth figures further illustrate the structure and function examples of the modules of the DRM system. The fourth figure is a schematic diagram of a structural example of a communication and rights issuer in the DRM system 100 of the present invention. Referring to the fourth figure, the communication and rights item issuer 203 includes a communication module (communicati〇nm〇dule) 401, an internal authentication/authorization engine 403, and a rights object generator (rights object). Generator) 405. The communication module 401 can be used with a license request parser 401 a, an encryption and decryption engine 40 lb, and an authentication and authorization interface (extemal). Interface) 401c to achieve. The communication and rights item issuer 203 receives the license request message 201b transmitted from the DRM agent 201, if the license request message 2〇 lb is encrypted by the public key of the communication and rights object issuer 203 The encrypted license request message is decrypted by the encryption/decryption engine 401b and the private key 12 200843504 (pnvatekey) of the rights issuer 203. The decrypted license request message is interpreted by the license request parser 4〇la, and the service identifier (service ID) requested by the Sender agent 2〇1, the corresponding digital content issuer_code, and The agent ID is fetched out and becomes a parsed request for service authentication and rights-issuing actions. Therefore, the license request message contains at least the Cong agent ID and the required information. The service identification code, the corresponding digital content issuer identification code, and the public key of the polygon agent 201. The encryption/decryption engine 401b transmits the corresponding DRM agent identification code and the required service identification code in the SAS disclosure. And the corresponding digital content publisher code is added, and the external authentication and authorization interface 401c is transmitted to the SMS/SAS and the digital content publisher login center for authentication and authorization to confirm the DRM agent 2〇1 Is there a right to use the DVB_H digital content service 2〇la and confirm whether the digital content publisher who issued the DVB-Η digital content is a qualified and legal issuer The SMS/SAS encrypts the result of the authentication/authorization through the external authentication and authorization interface 4〇ic and the public key of the communication and rights object issuer 203' to the encryption of the communication and rights object issuer 203. The decryption engine 401b. The encryption/decryption engine 401b decrypts the result of the authentication and authorization by the private key of the communication and rights issuer 203, so as to perform the subsequent actions of 13 200843504. The s forbearance and the result of the push after the right solution are Certainly, the communication module 401 transmits the parsed request information ^parsecj request informati〇n) 4ii and the authentication and authorization affirmative message 412 to the internal authentication and authorization engine 403 for the rights object generator 4〇5 to generate. Rights object 4〇5a. This authentication and authorization result needs to include the encryption key used to decrypt the service 2〇la, the encryption and decryption algorithm specified, and the rights expression of the service 2〇la. If the decrypted authentication and authorization result is negative, the communication module 401 automatically returns a license to the DRM agent 2〇1, and indicates in the license that the requested service request is rejected. The internal authentication and authorization engine 403 compares the authentication and authorization results with the parsed information through the communication module 401, and after confirming the error, the authenticated and authorized service identification code, the digital content publisher identification code, and The corresponding rights expression is passed to the rights object generator 4〇5 to generate the corresponding rights object 405a. The rights object 4〇5a includes at least an encryption and decryption record for decrypting the DVM digital content, a designated encryption and decryption algorithm, and a rights statement for the DVB_H number of the singularity of the container. Accordingly, the rights object generator 405 generates rights objects in accordance with the rights description language. 14 200843504 When the result of the authentication and authorization is affirmative, and the rights object has been generated by the rights object generator 405 and transmitted to the communication module 4, the public key value of the parsed DRM agent is encrypted/resolved by the engine 401b. The rights object is encrypted to form a use license 203a, and the license 205a is returned to the DRM agent 201, and the DRM agent 2〇1 can use the rights object contained in the license 203a to make the encrypted service Decrypt. This use license 203a can be considered as an encrypted right object. ('The fifth figure is a schematic diagram of a structure example of service registration and digital content publisher in the DRM system 200 of the present invention. Referring to the fifth figure, the service login and digital content publisher 205 is composed of three modules, namely DVB. - DVB-H Service Broadcaster 501, Service Registrar 503, and Service Packager 505. Service wrapper 505 will match a new service to 〇MA The drm ^ standard content format is packaged to form a seryice package 505a and transmitted to the DVB-Η service broadcaster 501. If the service packet 505a is to be encrypted, the required encryption and decryption is selected according to the service information. The algorithm and the encryption and decryption record are used to encrypt the service packet 5〇5a, and the selected encryption and decryption algorithm is combined with the information such as the encryption and decryption key into an information of service package 505b, and transmitted to Service Registrar 503. 15 200843504 The Service Registrar 503 is based on the Service Packet Information 505b from the Service Wrapper 505, to the SMS/SAS and to the Digital Content Publisher. The service 201a that registers this DVB-Η digital content includes a service registration 503a to the SMS/SAS and a content publisher registration 503b to the digital content publisher center. The service packet information 5〇5b to 乂, package δ The information of the identification code and the rights expression of the service 201a. Thus, the user of the DRM agent 201 can subscribe to the service 201a to the SMS/SAS. The communication and rights item issuer 203 can issue the corresponding rights object and use license 2〇3a .

The DVB-Η service broadcast 501 transmits the service packet 5〇5a to the DRM agent 201 in a DVB-H transmission format, such as IP-encapsulated multiplexed transport streams. The DRM agent 201 receives this broadcast service 2〇5a. When the service packet information 505b is transmitted to the SMS/SAS, it needs to be encrypted with the public key of the SMS/SAS to ensure the security of the transmitted data. The role played by the publisher is a third party certification body for legal release. The authentication of the person, and the DRM agent 2 believes in the service content provided by the certified digital content publisher.

Fig. 6 is a diagram showing an example of a structure of a DRM agent in the DRM system of the present invention. The DRM Agent 2〇1 is installed in a mobile device supporting the DRM standard of 0MA 16 200843504 to provide a function of the protection mechanism at the mobile device side. Referring to the sixth figure, the DRM agent 2〇1 can use two modules, that is, the DVB-Η service receiving/unpacking device (dvb_h Sendee ReCeiVer/Depackager) 601, the rights object processor (Rights ObjectPr view s〇r) 603 And a large storage area (MassStorage, MS) 605, to achieve. The DVB-Η service receiving/unpacking unit 601 receives the service registration and the broadcast service 205a of the digital content issuer 205, and unpacks the service package 5〇5a into individual service materials, and the service data is still encrypted content 6〇1& And storing the encrypted content 601a in a large number of storage areas 〇5. The rights object processor 603 transmits a license request message 201b to the communication and rights object issuer 203 in accordance with the service resource from the service 201a, requesting authorization to unlock the encrypted content 6〇la. This license request message 201b contains at least the DRM agent identification code, the required monthly service identification code, the corresponding digital content issuer identification code, and the disclosure amount of the DRM agent 201. If the DRM agent 201 does subscribe to the service content, and the communication and rights item issuer 203 successfully authenticates to the SMS/SAS and the rights issuer registration center, the DRM agent 2〇1 receives the communication and rights object issuer. 203 uses the license 2〇3a encrypted by the public key of the DRM agent 201. 17 200843504 The rights object processor 603, with the private key of the DRM agent 2〇1, will make the certificate 2Q3a _, and the transfer side object is finely stored in the large storage area 6G5. When the mobile device needs to service 2〇ia, the rights object _6〇3 is processed by the side object to encrypt the content, and the encrypted content 6〇1& is processed according to the right expression. The invention can be stored in the hardware of the mobile device in a firmware manner, and does not need to add additional hardware devices, and has high convenience for the program code. The invention fully complies with the DRM standard established by the 0MA without additional hardware equipment, and cooperates with the broadcast type of DVB_H to develop the digital rights. This system can control the use, recording, and transfer of audio data to protect the rights of digital content providers. The authentication facility on the mobile device also ensures the security of the system and prevents users from randomly distributing or transferring audio and video data. However, the above description is only an example of the invention, and the scope of the invention is not limited thereto. That is, the equivalent changes and modifications made by the scope of the patent application of the invention should remain within the scope of the invention. 18 200843504 [Simple description of the diagram] The first figure is a schematic diagram of a conventional authorization distribution system for digital content of mobile networks. The second figure is a schematic diagram of an example of the DRM system of the present invention. The second figure further illustrates an example of a workflow of the DRM system of the present invention. The fourth figure is a schematic diagram of a structural example of a communication and rights object issuer in the DRM system of the present invention. The fifth figure is a schematic diagram of a structure example of a service login and a digital content publisher in the DRM system of the present invention. Fig. 6 is a diagram showing an example of a structure of a DRM agent in the DRM system of the present invention. [Main component symbol description] 110 mobile service 131-233 content ^ [total

201 DRM agent 2 〇 lb license _ 203 203 use license 205a broadcast service spear ^ 230a authentication and authorization action 230b registration action 201a subscription gygjl digital content service 203 communication and rights spear release 205 service voice content release 230 Certification Authority SMS Subscriber SAS Subscriber ggg Authorization System 19 200843504 r DRM Digital Rights Management DVB-H Digital Video Broadcasting ^3〇1 When a user wants to subscribe to a DVB-H digital content, through DRM Agent_童, Ordering a jjb DVB-Η digital content service to a certification authority 3〇2 When a user needs this service, the DRM agent receives a broadcast service, transmits a license request message jgLgg DRM agent ^ has the right to use this service

304. If it is confirmed that the DRM agent has the right to use the service, the corresponding license is transmitted to the DRM 401 communication module 401a to permit the parser 4Glb force σ^/decryption reference 4〇lc external authentication and authorization interface 403 Authorization Engine 405 Rights Object Generator 405a Rights Object 41j Authorizes Affirmed Message - 501 DVBjH Service Broadcaster 503a Service Registration 505 Service Wrapper Analyzed Request Information 411 503 Service Registrar 5〇3b Content Publisher 505a Service Packet 505b service information

- wrapper 605 mass storage area 603 right object gg 601a encrypted content 20

Claims (1)

200843504 X. Patent application scope: 1. A digital rights government system applied to a digital video broadcasting _ handheld (DVB-Η) mobile TV service platform, the system includes: a digital rights management agent; The right object issuer; and a service login digital content publisher; wherein the 'recording transfer management agent is responsible for subscribing to the _certifier to subscribe to the DVB-Η digital location service, and receiving the service login and digital content distribution The fine_service sends a license request message to the communication and rights object issuer, and the communication and rights object arranger is responsible for transmitting a corresponding use license to the digital rights management agent. 2. The digital rights management system of claim 1, wherein the digital paste management sister is in a receiving device in the support-dvb_h system. 3. The profit management system of the squatting position as described in item 2 of the patent scope, wherein the Wei device is one of mobile devices, personal care, or mobile communication devices. 4·If the scope of the patent application is the first! The digital rights management system described in the item, which is in line with the digital management standard of the Operational Action Alliance. 5. The digital rights management system as claimed in claim i, wherein the license request message includes at least the digital rights management agent identification code, the required service identification code, and the corresponding digital content release 21 200843504 The code, and the public key of the digital rights management. 6. The digital rights management system of claim 1, wherein the service of the DVB-Η digital content includes at least a service identification code of a service subscribed by the digital rights management agent, and the digital rights management agent The right to be authorized. 7. The digital rights management system of claim 1, wherein the broadcast service includes the encrypted DVB-H digital content. 8. The digital rights management system of claim 1, wherein the communication and rights object issuer is implemented by a communication module, an internal authentication and authorization engine, and a rights object generator. 9. The digital rights management system as described in claim 8 wherein the communication module decrypts and interprets the license request message and affirmed the request message and an authentication and authorization. The message is transmitted to the internal authentication/authorization engine to cause the rights object generator to generate a rights object. 10. The digital rights management system of claim 9, wherein the communication module is implemented by a license requirement parser, an encryption/decryption engine, and an external authentication and authorization interface. 11. The digital rights management system of claim 9, wherein the rights object includes at least an added key for decrypting the valley of the DVB-H digits, a specified encryption and decryption algorithm, and A description of the rights to the service for this DVB-Η digital content. 12. The digital rights management system as described in the scope of the patent application, wherein the "Hai service login and digital content publisher is a DVB-Η service 22 200843504 broadcaster, a service registrar, and a service wrapper to realise. 13. The digital rights management system of claim 12, wherein the service wrapper packages a new service in a content format conforming to the DRM standard established by the Open Action Alliance to form a service package, the DVB-Η The service broadcaster encapsulates the service, broadcasts it in the transmission format of DVB_H, and transmits it to the digital rights management agent. The service registrar registers the DVB with the certificate packet information sent by the service wrapper. - The service of digital content. 14. The digital rights management system of claim 1, wherein the digital rights management agent is implemented by a DVB_H service receiving/unpacking I, a rights object processor, and a mass storage area. 15. The digital rights management system of claim 2, wherein the DVB-Η service receiving/unpacking device unpacks the service package contained in the broadcast service into individual service materials and stores the data in the mass storage. In the area, the rights object processor obtains a right object from the use license, and decrypts and processes the individual service data with the rights object. 16. The digital rights management system of claim 1, wherein the individual service material is an encrypted service content. 17· A number _ forging method, should be listened to - difficult video broadcast - handheld (DVB_H) mobile TV service platform, the method includes the following steps: Although a user wants to subscribe to a DVB_H digital content, through a number 23 200843504 a rights management agent that subscribes to the DVB_H digital content service to a certification authority; when the user needs the DVB-Η digital content service, the digital rights management agent receives a broadcast service and transmits a license request message Acknowledging whether the digital rights management agent has the right to use the service of the DVB-Η digital content; and if it is confirmed that the digital rights management agent has the right to use the service of the DVB-H digital content, transmitting a corresponding Use the license to the digital rights management agent. 18. The digital rights management method of claim 17, wherein the digital rights management agent confirms whether the digital rights management agent has the right to use the DVB-Η digital valley service, including authentication and authorization to a certification authority. action. 19. The digital rights management method according to claim 18, wherein if the authentication and authorization result is negative, a license is automatically returned to the digital rights management agent, and in the license Describe the result of the requested service request being rejected. 2. The digital rights management method according to claim 17, wherein the broadcast service includes the DVB_H touch of the domain and is broadcasted in a DVB-Η transmission format and transmitted to the digital rights management agent. 21. The digital transfer management method of claim 18, wherein the license is an encrypted right object. twenty four