TW201530345A - Digital right management system, management method and information transmission system and method thereof - Google Patents

Abstract

A digital right management system is disclosed. The digital right management system includes a digital content providing unit, a right management unit and a user device. The right management unit is configured to perform an authority verification. The user device is in communication with the digital content providing unit and the right management unit and includes a user information. The user device generates an AES public key and accesses a public key of a RSA public key/private key pair from the right management unit. The AES public key is encrypted by the public key of the RSA public key/private key pair by the user device and then transmitted to the right management unit. The user information is encrypted by the AES public key by the user device and then transmitted to the right management unit via the digital content providing unit. The encrypted AES public key is decrypted by a private key of the RSA public key/private key pair by the right management unit, and the encrypted user information is decrypted by the AES public key to access the user information. The right management unit is configured to perform the authority verification according to the user information.

Description

Digital rights management system, management method and information transmission system and method thereof

The present invention relates to a digital rights management system and method, and more particularly to a digital rights management system, a management method, and an information transmission system and method thereof for effectively protecting user information for use authority verification.

With the development of communication networks, digital content providers can upload their digital content to the network service platform via the Internet for remote licensees to download applications. In order to protect digital content, to prevent digital content from being downloaded, used, copied and disseminated by unauthorized persons, and to protect the rights of digital content providers, the Digital Right Management System (DRM system) was developed. Authorization to manage digital content and to limit unauthorized access, use, copy and dissemination of digital content.

In the current digital rights management system, when a user (or client) wants to obtain a specific digital content provided by a network service platform through its user device, the user device needs to transmit its user information first. To the network service platform, the network service platform verifies the user device's usage rights for the specific digital content based on the user information. After confirming that the user device has the right to use the specific digital content, the network service platform can provide the specific digital content to the user device, so that the user can use the digital content within the scope of its authority.

In order to ensure the confidentiality and security of the user information in the delivery process, the prior art uses the AES or RSA encryption and decryption method to encrypt and decrypt the user information transmitted between the sender and the receiver. The AES encryption and decryption method is a symmetric encryption and decryption method, which is characterized in that the transmitting party and the receiving party must agree to a common key before encrypting data to simultaneously encrypt and decrypt, although the AES encryption and decryption method has high encryption and decryption efficiency. However, the disadvantage is that both parties must have the same key. If either party leaks the key, the external can use the key to decrypt the encrypted information. The RSA encryption and decryption method is an asymmetric encryption and decryption method, which is characterized in that the receiver first generates two sets of keys, that is, a public key and a private key pair, before the transmitting party transmits the data. The recipient then passes the public key to the sender and retains the private key. When the transmitting party wants to transmit the data to the receiving party, the transmitting party first encrypts the data by using the public key, and the receiving party can decrypt the private key after receiving the encrypted data, so that even if the public key is leaked, there is no need to worry about the data being decrypted. Although the RSA encryption and decryption method is more secure, its disadvantage is that the encryption and decryption efficiency is not good.

In view of this, it is necessary to develop a digital rights management system and method to solve the problems of inefficiency in user information encryption and decryption and insufficient security in the prior art.

The purpose of the present invention is to provide a digital rights management system, a management method, and an information transmission system and method thereof, which can effectively keep user information confidential for use permission verification, and can solve the problem that the prior art encrypts and decrypts user information efficiently. Insufficient security and other issues.

According to the concept of the present case, the present invention provides a digital rights management system, which comprises a digital content providing unit, a rights management unit and a user device. The digital content providing unit includes at least one bit of content. The rights management unit is structured to perform a usage rights verification. The user device is coupled to the digital content providing unit and the rights management unit, and includes a user information. The user device generates a symmetric key, and the rights management unit obtains one of the asymmetric public key and the private key pair, and transmits the key to the rights management unit by using the public key. The device encrypts the user information with a key and transmits it to the rights management unit via the digital content providing unit. The rights management unit decrypts the key with one of the asymmetric public key and the private key pair, and decrypts the key to obtain user information, and uses the user information to verify the use authority.

According to the concept of the present invention, the present invention further provides a digital rights management method, comprising: (a) providing a digital content providing unit and a rights management unit; and (b) providing a user device to generate a symmetric gold for the user device. Key, and the user device obtains one of the asymmetric public key and the private key pair by the authority management unit, and transmits the key to the authority management unit by public key encryption; (c) the authority management unit uses the asymmetric Decrypting the key by one of the public key and the private key pair; (d) the user device encrypts a user information with the key and transmits it to the rights management unit via the digital content providing unit; and (e The rights management unit decrypts the user information by using the key decryption, and performs a use authority verification according to the user information.

According to the concept of the present invention, the present invention further provides an information transmission method, comprising: (a) causing a transmitting party to generate a symmetric key, and the transmitting party obtains an asymmetric public key and a private key pair by a receiving party. a public key, and the key is encrypted and transmitted to the recipient by the public key; (b) the recipient decrypts the key with one of the asymmetric public key and the private key pair; (c) The transmitting party encrypts a message with the key and transmits it to the recipient; and (d) the recipient decrypts the key to obtain the information.

According to the concept of the present case, the present invention further provides an information transmission system including a transmitting party and a receiving party. The sender contains a message. The recipient is connected to the sender. The transmitting party generates a symmetric key, and the transmitting party obtains one of the asymmetric public key and the private key pair by the receiving party, and transmits the key to the public key by using the public key. The recipient, the sender encrypts the information with the key and transmits it to the recipient. The receiver decrypts the key with one of the asymmetric public key and the private key pair, and decrypts the key to obtain the information.

1‧‧‧Digital Rights Management System
11‧‧‧ Rights Management Unit
12‧‧‧Digital Content Providing Unit
13‧‧‧User device
14‧‧‧ Key
15‧‧‧ Public and private key pairs
16‧‧‧Usage rights correspondence table
131‧‧‧ processor
132‧‧‧ storage unit
133‧‧‧ User Information
134‧‧‧Device Management Module
135‧‧‧Digital Content Interface Module
151‧‧‧ public key
152‧‧‧ private key
2‧‧‧Communication network
3‧‧‧Internet Service Platform
4‧‧‧Users
S10~S17, S20~S26‧‧‧ process steps

Figure 1 is a schematic diagram showing the architecture of the digital rights management system of the preferred embodiment of the present invention.

2A and 2B are schematic diagrams showing the structure of data encryption, decryption and transmission of user information between the user device and the rights management unit in FIG.

Fig. 3 is a diagram showing the use authority verification and digital content access between the rights management unit, the digital content providing unit, and the user device of Fig. 1.

Figure 4 is a flow chart of the use rights verification and digital content access for the digital rights management system shown in Figure 3.

Fig. 5 is an exemplary usage authority correspondence table built by the rights management unit shown in Fig. 3.

Some exemplary embodiments embodying the features and advantages of the present invention are described in detail in the following description. It is to be understood that the present invention is capable of various modifications in the various aspects of the present invention, and the description and drawings are intended to be illustrative and not limiting.

Figure 1 is a schematic diagram showing the architecture of the digital rights management system of the preferred embodiment of the present invention. As shown in FIG. 1, the digital rights management system 1 of the present invention includes a rights management unit 11, a digital content providing unit 12, and at least a user device 13, wherein the rights management unit 11, the digital content providing unit 12, and the user device 13 The communication network 2 can be connected and communicated with each other, and the rights management unit 11 and the digital content providing unit 12 are jointly configured as a network service platform 3 to perform digital content provision, management, authorization, and/or online transaction, etc. service. The rights management unit 11 is configured to verify and manage the user right of the user device 13 for the digital content. The rights management unit 11 performs the use right verification according to the user information provided by the user device 13. The digital content providing unit 12 is configured to store, provide, and manage digital content, and can be connected to the rights management unit 11 via the communication network 2 to provide digital content to the user device 13 according to the authority verification result of the rights management unit 11. . The user device 13 can be connected to the rights management unit 11 and the digital content providing unit 12 via the communication network 2, and provides a user information for the rights management unit 11 to perform the use right verification, and the digital content providing unit 12 receives the right. After the verification result, the digital content providing unit 12 retrieves the digital content. In this embodiment, the digital content may include any known type of file content, such as, but not limited to, movies, music, games, e-books, pictures or network connection addresses thereof in various file formats. The user device 13 of the user 4 can be, but is not limited to, a multimedia platform device, a digital set-top box, a network television, a personal computer, a server, a tablet, or a mobile communication device.

2A and 2B are schematic diagrams showing the structure of data encryption, decryption and transmission of user information between the user device and the rights management unit in FIG. As shown in FIG. 2A, the user device 13 and the rights management unit 11 can be configured as an information delivery system, wherein the user device 13 is a transmitting party, the rights management unit 11 is a receiving party, and the user information is information to be transmitted. According to the concept of the present application, the user device 13 generates a key 14 by using a symmetric encryption algorithm of the Advanced Encryption Standard (AES) before transmitting the user information, and obtains the RSA from the rights management unit 11. After the public key of the asymmetric encryption algorithm and the public key 151 of the private key pair 15 are encrypted, the key 14 is encrypted by the public key 151, and then sent back to the rights management unit 11 to decrypt the key 14 with the private key 152. save. Further, as shown in FIG. 2B, the user device 13 encrypts the user information 133 by the key 14, and transfers it to the digital content providing unit 12, and transfers it to the authority management unit 11. The authority management unit 11 decrypts the user information 133 with the key 14 and performs the usage authority verification based on the user information 13, and returns the authority verification result to the digital content providing unit 12. If the result of the authority verification is that the authority is available, the digital content providing unit 12 may start downloading the specific digital content or related information to the user device 13. With the data encryption and decryption method of the user information carried out by the digital rights management system 1 of the present case, the user information 133 can simultaneously use the AES and RSA encryption and decryption methods for data confidentiality and transmission to achieve confidentiality security and improve encryption and decryption efficiency. efficacy.

Figure 3 is a schematic diagram showing the use authority verification and digital content access between the rights management unit, the digital content providing unit and the user device of Fig. 1, and the fourth figure is the digital rights management shown in Fig. 3. The system performs a flow chart of using permission verification and digital content access. As shown in FIG. 3 and FIG. 4, the user device 13 includes a processor 131, a storage unit 132, a device management module 134, and a digital content interface module 135, and the user device 13 includes a user information 133 stored in Storage unit 132. The device management module 134 can be a device management application (such as an App), which can be provided by the rights management unit 11 and downloaded and installed on the user device 13 as an interface between the user device 13 and the rights management unit 11, and the architecture. The communication and data processing between the user device 13 and the rights management unit 11 are performed. The digital content interface module 135 can be an application (app) that can be provided by the digital content providing unit 12 and downloaded and installed on the user device 13 as an interface between the user device 13 and the digital content providing unit 12, and the architecture. The communication and data processing between the user device 13 and the digital content providing unit 12 are performed. The device management module 134 and the digital content interface module 135 can be implemented by the processor 131 to execute their applications.

When the user 4 wants to use the user device 13 to access the specific digital content provided by the digital content providing unit 12 (for example, watching a movie, listening to music, playing a game, browsing a picture, or reading an electronic book), the rights management unit 11 and the digital device After the content providing unit 12 and the user device 13 implement and execute the permission verification program for one of the digital rights management systems 1 and identify the user device 13 of the user 4 for the use of the specific digital content, The digital content providing unit 12 is allowed to provide the specific digital content to the user device 13. The process steps of the usage rights verification and digital content access procedures are briefly described below.

First, as shown in step S10, in response to the operation of the user 4, the user device 13 enables the device management module 134 and the digital content interface module 135, and the digital content interface module 135 issues a message to the device management module 134. The request is to request the device management module 134 to provide user information 133 for verification. Then, as shown in step S11, after receiving the request, the device management module 134 of the user device 13 generates the key 14 by using a symmetric encryption algorithm of the Advanced Encryption Standard (AES), and uses the The key 14 encrypts the user information 133 to generate encrypted user information. Thereafter, as shown in step S12, the device management module 134 of the user device 13 issues a request to the rights management unit 11 to request the rights management unit 11 to provide a public key 151 of the public key and the private key pair 15. In this step, the user device 13 also stores the key 14 and the encrypted user information 133 in the storage unit 132.

Next, as shown in step S13, in response to the request from the device management module 134 of the user device 13, the rights management unit 11 generates a public key and private key pair 15 using the RSA asymmetric encryption algorithm. Thereafter, as shown in step S14, the rights management unit 11 transmits the public key 151 of the public key and the private key pair 15 to the device management module 134 of the user device 13. Next, as shown in step S15, the device management module 134 of the user device 13 encrypts the key 14 using the public key 151 provided by the rights management unit 11 to form the encrypted key 14. Then, as shown in step S16, the device management module 134 of the user device 13 transmits the encrypted key 14 to the rights management unit 11. Thereafter, as shown in step S17, the encrypted key 14 is decrypted by the authority management unit 11 with the private key 152 of the public key and the private key pair 15 to solve the key 14, and the key 14 is stored in Its database 11a.

Next, as shown in step S20, the device management module 134 of the user device 13 provides the encrypted user information (i.e., the one generated by encrypting the user information 133 with the key 14 in step S11) to the digital content. Interface module 135. In this embodiment, the user information 133 includes at least a user account and a password. Thereafter, as shown in step S21, the digital content interface module 135 of the user device 13 transmits the encrypted user information 133 to the digital content providing unit 12. Then, as shown in step S22, the digital content providing unit 12 directly transfers the encrypted user information 133 to the rights management unit 11. Then, as shown in step S23, after receiving the encrypted user information 133, the rights management unit 11 decrypts the encrypted user information 133 by using the key 14 obtained in step S17 to obtain the decrypted use. Information 133.

Then, as shown in step S24, after the user management information 133 of the user device 13 is decrypted, the rights management unit 11 performs the user rights information 133 and one of the usage rights correspondence tables 16 built in the database 11a. Use permission verification. In some embodiments, as shown in FIG. 5, the content of the usage rights correspondence table 16 established and stored by the rights management unit 11 includes file data of a plurality of users, wherein the items of each user's file data are The content includes a user ID (User ID), a password (Password), a media access address (MAC Address), a user device identification code (UUID), a key 14 and a rights content, wherein the rights content can be an example but not It is limited to digital content items purchased and authorized by users and their usage rights, such as time limit, content range, copyability and dissemination, etc.

In addition, the user account, the password, the media access address, the user device identifier, and the like in each user's profile may be purchased by the user 4 and the user device is purchased. When the program linked to one of the rights management units 11 is registered and registered, the authority management unit 11 can first acquire and construct the permission authority correspondence table 16. In some embodiments, the item and content of each user's profile may include a machine identification code. The user device 13 of the user 4 can be first connected to one of the portal registration user accounts and passwords provided by the rights management unit 11. After the registration is completed, the rights management unit 11 first generates a set of verification codes, and the user 4 can input the verification code to the user device 13 for confirmation. At this time, the user device 13 automatically connects with the rights management unit 11 to After confirming the identity of the user, the rights management unit 11 returns a machine identification code to the user device 13 so that the rights management unit 11 confirms the permission of the user device 13. Therefore, when the encrypted user information 133 includes a user account, a password, and at least one item selected from a media address (MAC Address), a user device identification code (UUID), and a machine identification code, the rights management unit 11 can confirm the user identity according to the user account and password, and confirm the use of the user device 13 according to the media address (MAC Address), the user device identification code (UUID) and/or the machine identification code. Permissions.

In step S25, the rights management unit 11 determines the identity of the user 4 and whether the user device 13 has the specific digital content according to the user information 133 obtained by decryption and using the usage authority correspondence table 16. Use permissions. In detail, the rights management unit 11 uses the user account number, password, media access address, user device identification code and the like included in the user information 133 obtained by decryption, and uses the usage authority correspondence table 16, The comparison can be made to confirm whether the user 4 is a registered registrant, whether the password is correct, the user device 13 has the right to use the specific digital content, and whether there is a purchase of new digital content or the like.

Next, as shown in step S25, after the rights management unit 11 completes the use authority verification, the rights management unit 11 issues a rights verification result to the digital content providing unit 12. Then, as shown in step S26, the digital content providing unit 12 provides or does not provide the digital content or a network connection address to the digital content interface module 135 of the user device 13 according to the authorization verification result. In this step, if the permission verification result is that the user device 13 of the user 4 has the right to use the specific digital content, the digital content providing unit 12 will provide the digital content or a network connection address to the user. The digital content interface module 135 of the user device 13 can use the digital content through the digital content interface module 135, such as but not limited to playing a movie, playing music, opening a game level, and opening a motion. Sets, etc. If the result of the authority verification is that the user device 13 of the user 4 does not have the right to use the specific digital content, the digital content providing unit 12 provides a prompt message to the digital content interface module 135 of the user device 13. To remind the user 4 that there is no permission to use (such as unauthorized or expired), or to suggest and recommend the user 4 to purchase the required digital content online.

In some embodiments, the digital content added by the digital content providing unit 12 can be uploaded to a network mall constructed by the rights management unit 11, and the user 4 can be linked to the rights management by its user device 13 according to its needs. Unit 11 purchases the desired digital content. Since the digital content providing unit 12 performs only the management and maintenance of the digital content product, the online transaction, the opening of the usage authority, the verification and the management are directly performed between the user device 13 and the authority management unit 11, so that all the user information The usage rights and the newly used usage rights are only managed and verified by the rights management unit 11, so that the confidentiality and security of the user information can be improved, and the user data outflow can be avoided.

To sum up, the digital rights management system and method provided in the present case can effectively keep the user confidential during the process of user information transmission, and will not allow the third party to obtain user information, and the authority management unit can verify the user. The usage right is transmitted to the digital content providing unit, and the digital content providing unit provides the authorized digital content to the user device. The digital rights management system and method of the present invention can effectively keep the user information confidential for use permission verification, and can solve the problems of insufficient encryption and decryption of user information and insufficient security in the prior art.

This case has been modified by people who are familiar with the technology, but it is not intended to be protected by the scope of the patent application.

1‧‧‧Digital Rights Management System

11‧‧‧ Rights Management Unit

12‧‧‧Digital Content Providing Unit

13‧‧‧User device

2‧‧‧Communication network

3‧‧‧Internet Service Platform

4‧‧‧Users

Claims (22)

[Item 1] A digital rights management system comprising:
a digital content providing unit including at least one digit content;
a rights management unit, configured to perform a usage authority verification; and a user device coupled to the digital content providing unit and the rights management unit, and including a user information;
The user device generates a symmetric key, and the rights management unit obtains one of the asymmetric public key and the private key pair, and transmits the key to the authority by using the public key. a management unit that encrypts the user information with the key and transmits to the rights management unit via the digital content providing unit; and wherein the rights management unit uses the asymmetric public key and private key pair One of the private keys decrypts the key, decrypts the key with the key, and performs the usage authority verification according to the user information. [Item 2] The digital rights management system as described in claim 1, wherein the user device is a multimedia platform device, a digital set-top box, a network television, a personal computer, a server, a tablet computer or an action Communication device. [Item 3] The digital rights management system of claim 1, wherein the rights management unit transmits a rights verification result to the digital content providing unit, and the digital content providing unit converts the at least one digital content according to the rights verification result. Provided to the user device. [Item 4] The digital rights management system of claim 1, wherein the symmetric key is generated by an AES symmetric encryption algorithm, and the asymmetric public key and private key pair are asymmetrically encrypted by RSA. The algorithm is generated. [Item 5] The digital rights management system of claim 1, wherein the user information comprises a user account and a password. [Item 6] The digital rights management system of claim 5, wherein the user information further comprises at least one of a media access address, a user device identifier, and a machine identification code. [Item 7] The digital rights management system of claim 1, wherein the rights management unit includes a usage rights correspondence table, and the rights management unit compares the user information with the usage rights correspondence table to perform the use. ASD. [Item 8] A method for managing digital rights, comprising:
(a) providing a digital content providing unit and a rights management unit;
(b) providing a user device to cause the user device to generate a symmetric key, and the user device obtains one of the asymmetric public key and the private key pair by the rights management unit, and The key is encrypted and transmitted to the rights management unit by the public key;
(c) the rights management unit decrypts the key with one of the asymmetric public key and the private key pair;
(d) the user device encrypts a user information with the key and transmits to the rights management unit via the digital content providing unit; and (e) the rights management unit decrypts the user information by using the key And performing a usage authority verification according to the user information. [Item 9] The method for managing digital rights as described in claim 8 wherein the step (e) further comprises the following steps:
(f) the rights management unit transmits a rights verification result to the digital content providing unit; and (g) the digital content providing unit provides at least one digital content to the user device according to the rights verification result. [Item 10] The method for managing digital rights according to claim 8, wherein the symmetric key is generated by an AES symmetric encryption algorithm, and the asymmetric public key and private key pair are asymmetrically encrypted by RSA. The algorithm is generated. [Item 11] The digital rights management method of claim 8, wherein the user information includes a user account and a password. [Item 12] The digital rights management method of claim 11, wherein the user information further comprises at least one of a media access address, a user device identifier, and a machine identification code. [Item 13] The digital rights management method of claim 8, wherein the rights management unit includes a usage rights correspondence table, and in the step (e), the rights management unit corresponds to the usage rights according to the user information. Table comparison to perform the usage rights verification. [Item 14] A method of information transmission, including:
(a) causing a transmitting party to generate a symmetric key, and the transmitting party obtains one of the asymmetric public key and the private key pair by a receiving party, and encrypts the key by the public key. To the recipient;
(b) the recipient decrypts the key with one of the asymmetric public key and the private key pair;
(c) the transmitting party encrypts a message with the key and transmits it to the recipient; and (d) the recipient decrypts the key to obtain the information. [Item 15] The information transmission method according to claim 14, wherein the symmetric key is generated by an AES symmetric encryption algorithm, and the asymmetric public key and private key pair are subjected to an RSA asymmetric encryption algorithm. Law is produced. [Item 16] The method of transmitting information according to claim 14, wherein the transmitting party is a user device, the receiving party is a rights management unit, and the information is user information of the user device. [Item 17] The method of transmitting information according to claim 16, wherein in the step (c), the user device encrypts the user information with the key, and transmits the rights management to the rights management via a digital content providing unit. unit. [Item 18] The information transmission method according to claim 17, wherein in the step (d), the rights management unit performs a usage authority verification according to the user information. [Item 19] An information delivery system comprising:
a transmitting party comprising a message; and a receiving party coupled to the transmitting party;
The transmitting party generates a symmetric key, and the transmitting party obtains one of the asymmetric public key and the private key pair by the receiving party, and transmits the key to the public key by using the public key. a recipient, the sender encrypts the information with the key and transmits to the recipient; and wherein the recipient decrypts the key with one of the asymmetric public key and the private key pair And the key is decrypted to obtain the information. [Item 20] The information transmission system of claim 19, wherein the transmission party is a user device, the recipient is a rights management unit, and the information is user information of the user device. [Item 21] The information delivery system of claim 20, wherein the user device encrypts the user information with the key and transmits the content to the rights management unit via a digital content providing unit. [Item 22] The information transmission system of claim 21, wherein the authority management unit performs a usage authority verification according to the user information.