TWI317083B - Content protection system and method for enabling secure sharing of copy-protected content - Google Patents

Description

-1317083

达达编号号: TW2859PA IX. Description of the Invention: [Technical Field] The present invention relates to a digital copyright management system and method, and more particularly to a content protection system for securely copying copy-protected content and method. [Prior Art] Digital rights management (DRM) is no longer unfamiliar to the purchase of digital content today. For example, Apple's iTunes Music Store online shopping store uses DRM technology to prevent unauthorized access. The behavior of copying songs has become commonplace for a wide variety of download media, such as audio clips, video, movies and files. Some operating systems, such as the Microsoft Windows XP operating system, include support for DRM for use with portable players and for streaming content to other devices. Under the DRM system, users who have purchased the right to use content (such as songs) φ can only listen to their own DRM encrypted copies of the song. The content owner provides the user with authorization for this content. When the user who has purchased the rights of a song wants to listen to the DRM encrypted copy of the song for himself, the user's playback device obtains the authorization information associated with the user to decrypt the encrypted copy and can play the song. Since the third party does not have the right or authorization information to decrypt the encrypted copy of the song, the third party cannot play the encrypted copy. Thus, the user who has authorized access to the content cannot share the encrypted content with a third party such as a friend. For content owners, the limit is -1317083

The three-digit number: TW2859PA 麴 is in its interest to prevent the illegal distribution of copyrighted copies and to reduce the loss of proceeds from the illegal use of copyrighted copies. However, people like to share with others or recommend content that they like to use. Under the above restrictions, in order to share content, users may risk security risks and have to use the authorization information they have obtained for others. In addition, the conventional DRM prevents some of the more traditional promotional activities that are established from friends or 'others' recommendations for music. Content * Owners may consider promotional activities by their authorized users as an activity that is positive for their career. However, conventional DRM systems lack an efficient and secure solution to meet the above needs of both users and content owners. SUMMARY OF THE INVENTION Accordingly, it is an object of the present invention to provide a content protection system and method for securely copying copy-protected digital content. A piece of content and a first authorization file are associated with a first user. The first authorization file securely includes a first decryption key for decrypting one of the contents and a plurality of restrictions regarding the use of the content by the first user. The first user is authorized to use the content based on these restrictions in the first authorization file. In accordance with an embodiment of the present invention, a content protection system for encrypting a copy of a piece of content for secure sharing is provided. The system includes a first processing unit and an authorization management unit. The first processing unit is configured to enable the first user to transmit for use with at least a second use 7 J317083

Sanda number: TW2859PA tm share one of the requests for this content, where the request contains the identification information of the second user and the identification information of the content. In response to the request, the authorization management unit is configured to generate a second authorization file for the second user to associate with the first authorization file, the content and the second user, wherein the second authorization file is securely included A second decryption key for decrypting one of the pen contents and a plurality of restrictions on the second user using the pen content. The second user is authorized to use a copy of one of the contents in accordance with these restrictions in the second authorization file. In accordance with another embodiment of the present invention, a content protection method for encrypting a copy of a piece of content for secure sharing is provided. The method comprises the steps of: (a) transmitting a request for sharing the content with the at least one second user, wherein the request includes the identification information of the second user and the identification information of the content; (b) In response to the request, a second authorization file is generated for the second user to associate with the first authorization file and the content of the pen with the second user, wherein the second authorization file securely includes the content of the pen content for decryption One of the second decryption keys and a plurality of restrictions on the use of the content by the second user. The second user is authorized to use the copy of one of the contents of the content in accordance with the restrictions in the second authorization file. In accordance with another embodiment of the present invention, an authorization management device for use in a content protection system is provided for securely sharing a piece of content that has been encrypted to prevent copying. The authorization management device includes a storage device and a management unit. The storage device is used to store authorization information containing information corresponding to the first authorization file. The management unit is a request for sharing the content with the at least one second user by the application, wherein the request includes the second user 8 • 1317083

Sanda number: TW2859PA Μ Identification information and identification information of the content. According to the fourth request, the management unit is configured to generate a second user-authorized authorization file for the second user: the slot and the request slot, and the content of the pen and the second user are securely included for decryption. The contents of this paragraph - the first slot. The second and the plurality of users who use the content of the second user and the second user are authorized to use the copy of one of the contents according to the restrictions in the second grant. The above-mentioned objects, features, and advantages of the present invention will become more apparent from the claims. [Embodiment] According to an embodiment of the present invention, in a content protection system for making copy-protected content securely shared with others, there is a right to use one of the contents of the first user and a second user ( For example, a friend) shares the content by making a request for sharing to the content owner, enabling the second user to create a new authorization to share the copy using one of the contents. After the content owner establishes the new authorization, the second user may request authorization information about the second user, wherein the authorization information indicates a restriction on the second user's use of the content. Based on the authorization information in this new license, the second user is authorized to use the copy of the shared content of the content, depending on the content type, such as playing a song or a video, or reading a text File or a picture. In this way, the encrypted content file can be freely copied 'eg 9 -1317083

The Sanda number: TW2859PA m is provided directly to the recipient by the sharer, or via a point-to-point application, but still requires an authorization to play the content. In the above embodiment, the content owner may manipulate a web service (e.g., a content store or an information website), and the web service includes an authorization management unit. This authorization management unit is used to establish an authorization or a new authorization, and operates, for example, under an authorization server. For example, a network service is a service with a single address, which can be achieved under a wireless or wired network, or a hybrid network of the two, for example, one of the Internet sites or stations in the Internet or A service under a digital wireless telephone network. From a practical point of view, the actions of the "content owner" described in the embodiments of the present invention can also be considered as an interactive or automatic manner by, for example, a network service, an authorization management unit. Or a software module to achieve the action. In addition, the first user can use a processing unit to transmit a request to share copy-protected content, such as a computer system, a portable device, or a mobile phone. Thus, as described above, the content protection system including a processing unit and an authorization management unit provides a new authorization to the third party to use the content. More specifically, in accordance with an embodiment of the present invention, a content protection system is shown in FIG. 1 for encryption to prevent copying of a single piece of content 200 for secure sharing. The system includes an authorization server 100 for a first user to use a first processing unit 500 and a second user for a second processing unit 700. The pen content 200 and a first authorization file 210 are associated with a first user, and the first user can use a first processing unit such as a personal computer, a portable device or a portable playback device -1317083

Sanda number: TW2859PA • 500, to communicate with this authorized server 1〇0. The first authorization slot 2 ι securely includes one of the first decryption record 211 for decrypting the content 2 and a plurality of restrictions 213 'the user-user system for the first user to use the content of the pen This content 2 is authorized to be used in accordance with the restriction conditions 213 in the first authorization file 21〇. The content is information such as text, sound, pictures or video, or any combination thereof, which is encrypted and can contain information about where to obtain that: one of the content authorizations (eg, a particular information website address)虺 Information. • The Authorization Server 100 authenticates the identity of a user and stores information about what actions a user can perform on the content, such as play, copy, and any other applicable restrictions—for example, only Play 30 times, play for 7 days or you can not digitally output the content as a playback action. The authorization server 100 includes, for example, a storage device 110 for storing authorization information, and a management unit 13 for performing an authorization management operation (for example, establishing an authorization for a user) (eg, executing a phase with a processor) Close the program to achieve). An authorization file securely contains (i.e., it is a secure file) information about these actions and restrictions, and includes a decryption key for decrypting one of the contents. The first user transmits a request for sharing the content of the pen with at least one second user by using the first processing unit 500, wherein the request includes the identification information of the second user and the content of the pen. Identification information. In response to the request 800, the authorization server ι generates a second authorization broadcast 220 for the second user to associate with the first authorization file 210, the content 2, and the second user. The second authorization file 220 securely packs 11 '1317083

Sanda number: TW2859PA contains a plurality of restrictions 223 for decrypting the second decryption key 221 of the pen content 200 regarding the second user's use of the pen content. The second user is authorized to use the duplicate 2〇1 shared by one of the inner valleys 200 in accordance with these restrictions 223 in the second authorization file 220. The first user, for example, uses the second processing unit to obtain the second authorization file 220 to use (eg, play) the shared copy of the content of the content 201 f• f 2 to display another embodiment in accordance with the present invention. A flow chart of one of the content protection methods for making copy-protected content securely shared. This embodiment enables the copy-protected encrypted content to be shared and the restricted access for the recipient to be implemented in a content-based content protection system. First, for clarity, the first user is referred to as a sharer and the second user is referred to as a recipient. In the same information service (such as an online music store), both the sharer and the recipient have their user accounts. In step 2100, the sharer sends a request to share the content to the authorized owner, for example, via a processing unit. This step can be accomplished in a variety of ways, such as through the content owner's webpage or online store or through The app of the sharer's content database is reached. Such a request contains the following information: (1) the identification information (ID) that the content is intended to share with a user; (b) the identification information (ID) of the content to be shared; (4) the content that the sharer imposes on the content Any restrictions on the above. In step 2200, the content owner creates a new or 12*1317083 three-number for the recipient: TW2859PA multiple new authorizations, and each new authorization is associated with the pen-shared content. These licenses include, for example, all of the restrictions imposed on this content, but also any restrictions imposed by the sharer on this shared copy. For example, the sharer can play a song in an unlimited number of times but can choose to limit the copy of the share for a limited number of times, such as ^ times.

In step ray 'this content owner checks the material _ condition one combination' and adjusts them if necessary to comply with their business rules' as indicated in step 24GG. These changes will prevent this content from being shared too widely. Typical limitations may include, for example, the following, 丨, - (4) copying of copies of this content is prohibited; (b) the authorization for the copy of this share is only limited to a limited number of copies of this share or for a limited period of time. Valid during the period 'it may be lower than the special designation by this sharer. And (c) may only play a low quality copy of this content. For example, if the content is a song in MP3 format at a bit rate of 128 kb/s, the shared copy of the song may be played or tied at a lower bit rate (eg 64 kb/s). ;^ 70 Continuing to step 2400, the content owner may choose to limit the shared copy to be played until a lesser number of times (eg, 5 times), thereby overturning the looser restrictions imposed by the sharer (eg, maximum Up to 10 times. In addition, the content owner adds an information to this authorization to indicate that the authorization is a copy of the shared copy. This information block contains the sharer's still and is charged for the payment (pay_per_VieW) When the recipient wants to play the shared content, for example, by the second processing unit 700 shown in Fig. 1, the following steps can be taken. First, 13.1317083

Sanda number: TW2859PA The second processing unit 7 that plays this valley has obtained the second authorization file 220 for this content and checks the authorizations belonging to both the sharer and the recipient. If the time limit for the authorization of this sharer or the authorization of this recipient has expired, then the recipient is notified that the content is no longer being played and requires their own authorization to be purchased. If the user or the recipient is allowed to play the content a fixed number of times and the restriction has been reached, the recipient is notified that the content is no longer played and requires their own authorization to be purchased. Otherwise, reduce the number of times the player and the recipient are reduced or decrease the number of remaining plays. If this content is a pay-per-view content, the cost of this shared content is used each time from the sharer's account. For prepaid accounts that are available for insufficient deposits, notify the recipient that this content cannot be played at this time and asks to purchase their own authorizations. According to the above disclosed embodiments, while maintaining all rights of the content owner and without losing revenue In the case where a user is allowed to provide a copy of the 0 'preview' of the content to another user. Encrypted files of content can be freely copied, for example, from the sharer directly to the recipient, or via a peer-to-peer application, but still require an authorization to play the content. There is no loss of interest to the content owner by using a combination of one of the authorization restrictions imposed by the content owner and the sharer. For example, the content owner can track who has shared a piece of content. 'At the same time, sharers can limit the use of their account information for content playback and billing. Also, for example, one of the promotion and the payment of the fee • 1317083 Sanda number: TW2859PA industry can be built on this security sharing. In addition, this new license is subject to this original authorization, so any features that need to be measured for this license will also be applied to this copy of the valley (as new). This also allows the content owner to track the distribution of this content. Therefore, as shown in the above embodiment, the inner valley protection system satisfies the needs of these users to share content, and satisfies the content owner's need for copy protection and permission promotion.

While the invention has been described by way of example and embodiments, it is understood that the invention is not limited thereto. On the contrary, the present invention is intended to cover various modifications and classes (4) configurations and materials. Therefore, the broadest description should be met, and modifications and similar configurations and procedures can be incorporated. \ 然 然 然 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Sanda Number: TW2859PA' [Simple Description of the Drawings] Figure 1 shows a schematic diagram of a content protection system for securely sharing copy-protected content in accordance with an embodiment of the present invention. Figure 2 is a flow chart showing a method of content protection for securely copying copy-protected content in accordance with an embodiment of the present invention. [Main Component Symbol Description] 100: Authorization Server® 110: Storage Device 130: Management Unit 200: Content 201: Shared Replica 210: First Authorization File 211: First Decryption Key 213: Restriction Condition 220: Second Authorization File 221: second decryption key 223: restriction condition 500: first processing unit 700 · second processing unit 8 0 0 : request

Claims (1)

-1317083 Sanda number: TW2859PA X. Patent application scope: 1. A kind of content protection system 'used to make it encrypted to prevent one copy of the pen from being shared.' The content and the __ authorization system In association with the first user, (4) the first authorization file securely includes a "first-decryption key and a plurality of cage conditions for the user-using the content" to decrypt the inside. Time based on the first The restrictions in the rights are authorized to make the ribs contain, the system comprising: a brother-one processing + element 'to enable the first-user to transmit to share the content with at least the second user a request, wherein the request includes the identification information of the second user and the identification information of the content of the pen; an authorization device, which is requested to generate, for the second use, a first authorization The second authorized file is associated with the first-authorized two valleys and the second user, wherein the second authorized file includes all of the fourth authorized user--about the second user兮箠 amp & + 胛 in the key and a plurality of restrictions thereof; and, the first user is authorized to use the copy of the content-shared according to the second authorization condition. Second limit 2. The request from the first processing unit in the fourth item of claim 4 (4) further includes the plurality of restrictions imposed on the content. The user is as strong as the content described in item 2 of the patent application to order the authorized ship to establish the second authorization file, wherein the relevant person uses the condition of the (4) capacity, and the number is 17 -1317083. TW2859PA _ User uses these restrictions for this content. 4. The content protection system of claim 3, wherein the restrictions on the use of the content by the second user are dependent on the restrictions on the use of the content by the first user Conditions and the constraints imposed by the first user on the content of the pen. 5. The content protection system of claim 4, wherein the restrictions on the use of the content by the second user are those restrictions regarding the use of the content by the first user And a combination of the restrictions imposed by the first user on the content. 6. The content protection system of claim 5, wherein the authorization server further causes the restriction conditions regarding the use of the content by the second user to include copying the sharing of the content of the pen. One of the restrictions. 7. The content protection system of claim 5, wherein the authorization server further causes the restriction condition regarding the second user to use the content to include the second authorization file only when the pen is played The content is one of the valid conditions within a limited number of times. 8. The content protection system of claim 5, wherein the authorization server further causes the second authorization file to include the second authorization file only for a limited period of time One of the restrictions is valid. 9. The content protection system of claim 5, wherein the authorization server further causes the restrictions on the second user to use the content to include only one of the low content of the content -1317083 Sanda number: TW2859PA " One of the limitations of the quality copy. 10. The content protection system of claim 1, wherein the authorization server establishes the second authorization file, wherein the restrictions on the use of the content by the second user are dependent on The first user uses the restrictions of the content of the pen. 11. The content protection system of claim 1, wherein the authorization server further causes the restrictions regarding the use of the content by the second user to include copying the sharing of the content of the pen. One of the limitations of the copy. 12. The content protection system of claim 1, wherein the authorization server further causes the second authorization to include the second authorization file for the second user to play the pen The content is one of the valid conditions within a limited number of times. 13. The content protection system of claim 1, wherein the authorization server further causes the second authorization file to include the second authorization file only for a limited period of time One of the restrictions is valid. 14. The content protection system of claim 1, wherein the authorization server further causes the restrictions regarding the use of the content by the second user to include only one of the low quality of the content being played. One of the limitations of the copy. 15. The content protection system of claim 14, wherein the identification information of the first user in the second authorization file is for billing on the pay-per-view content. 19 -1317083 Sanda number: TW2859PA * 16. The content protection system of claim 1, wherein the first authorization file includes the identification information of the user, and includes indication information to indicate the second The authorization slot is used to authorize the [user to use a shared copy.内容. A content protection method for encrypting to prevent copying of a pen to be safely shared, wherein the content is associated with a first user and a first user, and the first authorization is read The file securely includes a plurality of restrictions for decrypting the inner valley and the first decryption gold wheel, and the first user is based on the plurality of restrictions in the first authorization file Restricting the condition and being authorized to use the content, the method comprises the following steps: (8) transmitting an identifier for requesting the user to share the content with at least the second user, wherein the request includes the identification of the two users and the pen The identification information of the content; <(8) is a second authorization for the second user to be requested, ft豸 the first authorization file and the first authorization broadcast, the content and the second user Correspondingly, wherein the second authorization ceremony securely includes a second decryption key for the content of the pen and a plurality of restrictions on the use of the content by the second user; and wherein the second user system according to The restriction in the second authorization file is authorized to use the copy shared by one of the contents. 18. The content protection method described in claim 17 of the patent application, wherein the request from the first processing unit Further includes a plurality of restrictions imposed by the first user on the content of the pen. 20.1317083 Canda No.: TW2859PA 19. The content protection method as described in claim 18, wherein in step (a) The restrictions on the use of the content by the second user are determined by the restrictions on the use of the content by the first user. 20. Content protection as described in claim 19 a method, wherein in step (b), the restrictions on the use of the content by the second user are determined by the restrictions on the use of the content by the first user and the first user The content protection method imposed on the content of the article. 21. The content protection method according to claim 20, wherein in the step (b), the second user is used in the pen The restrictions are a combination of the restrictions on the use of the content by the first user and the restrictions imposed by the first user on the content of the pen. The content protection method of item 21, wherein in step (b), the authorization server further causes the restriction conditions regarding the use of the content by the second user to include copying the sharing of the content of the pen The content protection method of claim 21, wherein the authorization server further includes the second condition that the second user uses the content of the content includes the second The authorization file is only valid for one of the limited number of times the content is played. 24. The content protection method of claim 21, wherein the authorization server further causes the second user to use the 21*1317083 three-number: TW2859PA pen content including the restriction The second authorization file is only valid for one limited period of time. 25. The content protection method of claim 21, wherein the authorization server further causes the restriction condition regarding the use of the content by the second user to include only one of the pen content that is low quality One of the limitations of the copy. 26. The content protection method of claim 17, wherein the authorization server further causes the restriction on the use of the *pen content by the second user to include copying the sharing of the content of the pen. One of the limitations of the copy. 27. The content protection method of claim 17, wherein the authorization server further causes the second authorization file to be used by the second user to include the second authorization file only when the pen is played The content is one of the valid conditions within a limited number of times. 28. The content protection method of claim 17, wherein the authorization server further causes the restriction on the second user to use the content to include the second authorization file only in a limited One of the restrictions that are valid during the period. 29. The content protection method of claim 17, wherein the authorization server further causes the restrictions on the use of the content by the second user to include only one of the low content of the content being played. One of the limitations of the copy. 30. The content protection method according to claim 17, wherein the second authorization file includes identification information of the first user, and includes 22 • 13170083 three-number: TW2859PA « indication information to indicate the second The authorization file is used to authorize the first user to use a shared copy. 31. The content protection method of claim 3, wherein the identification information of the first user in the first authorization file is for billing on the pay-per-view content. - 32. The content protection method of claim 17, wherein in step (a), the certain restrictions on the use of the content by the second user are determined by the use of the Use these restrictions on the content of the pen. J3. An authorization management device for the content protection system, the content=5蒦 system is used to enable encryption to prevent copying of a piece of content safely | wherein the content of the pen and a first authorization file are first User-related and the first authorization file securely includes a first condition=key for decrypting the content and a plurality of conditions for the first user to use the content, the first user is based on the first - the authorization in the authorization file is authorized to use the content, the authorization management device: the; &~ storage device for storing authorization information, the authorization information is included, and the first authorization file is included The information in the pen is used to identify the content of the second user's identification slot, and the identification of the content is included in the second user. Information, the management unit is configured to generate a second authorization for the second user according to the first authorization file, the first authorization file, the first authorization file, the first authorization file, the pen content, and Associated with the first user, The second authorization file securely includes a second decryption key for decrypting 23 1317083 three digits: TW2859PA, and a plurality of restrictions on the second user using the content; and wherein the The second user is authorized to use the copy shared by one of the pieces of content according to the restrictions in the second authorization file. twenty four