WO2002093470A1

WO2002093470A1 - Method for managing multimedia data with a smart card

Info

Publication number: WO2002093470A1
Application number: PCT/FR2002/001636
Authority: WO
Inventors: Michel Leduc
Original assignee: Gemplus
Priority date: 2001-05-15
Filing date: 2002-05-15
Publication date: 2002-11-21
Also published as: FR2824940A1; FR2824940B1

Abstract

The invention concerns a high-capacity smart card, simultaneously containing first multimedia data such as video data in a first memory workspace and second data representing copyright associated with the multimedia data in a second memory workspace, said second data being necessary for using the first data. The invention also concerns devices and methods for managing multimedia data, including their distribution and use by individual readers, and based on said portable electronic devices.

Description

MULTIMEDIA TYPE DATA MANAGEMENT METHOD

USING A CHIP CARD

The invention relates to the management of large digital files, attached to copyright, for example containing multimedia type data, video and / or audio type, or software. For the sake of simplification, the term “multimedia type data” will be used later to mention these electronic files.

By file management, we mean the distribution, storage and exploitation of this data.

A first constraint linked to the trade in this type of multimedia type data comes from the fact that it is not enough to make a conventional sale with a payment from the buyer to the seller, it is also necessary to ensure that the rights of the author, that is to say generally the rights of a third person, are respected. A buyer must acquire not only the data itself but also an associated right, which corresponds to copyright. There are a multitude of methods to obtain this right: it can be bought, either included in the price of the transaction, the seller taking care of the redistribution towards the author, or not understood and acquired by a second transaction of the buyer towards a third organization, or it can be acquitted by the simple membership of the buyer in a certain community offering him this right, or by other particular situations. Routine fraud stems from the circulation of copies of this data without payment of copyright. A second constraint comes from the size of these multimedia type data files; As an indication, we are interested in the present invention in files whose size is at least equivalent to a video of half an hour. This characteristic represents a significant constraint with regard to storage media and distribution methods.

The distribution of multimedia-type data can be done, within the limits imposed by the constraints set out above, remotely by telecommunication means, the Internet or using a mobile phone for example, and / or by telephone. using data carriers such as DVDs, CDs, floppies ... A first common characteristic of these prior art data carriers is their capacity to store large volumes. A second characteristic is the difficulty of including anti-fraud systems. Data exploitation means their use, ie viewing a video and / or listening to music for example. This exploitation can be done by any reader of the previous data carriers mentioned above or directly by a device receiving them remotely and suitable for their exploitation, such as for example a PC.

Taking these characteristics into account, several distinct solutions, not compatible and applied to particular fields in a limiting manner, have been proposed in the past.

By way of example, we cite below two opposite approaches of the prior art. A first achievement concerns the field of pay television. In such a system, a television channel transmits scrambled images and transmits to its subscribers a digital key to allow descrambling of the images in a decoder. This key is transmitted encrypted, stored in a smart card within the decoder for security reasons. It is then transmitted to the decoder which uses it in its image descrambling algorithm. The images obtained are sent in analog form to a television for viewing.

Such a system has the advantage of effective copyright control thanks to the decoding system based on a smart card. Only subscribers hold and have access to this right. In addition, the copies of the images are of degraded quality because they come from the data in analog form and therefore compete only to a small degree with the original versions.

On the other hand, this system is suitable for pay television but does not allow wider distribution, via other means of telecommunication or on data carriers. The television channel is the compulsory intermediary. A great disadvantage of such a system is therefore its lack of flexibility.

A potential customer, not wishing to take out a subscription because interested in a small percentage of the programs can resort to the purchase of video data on DVD.

This support has the same drawback of lack of flexibility. To avoid copying DVDs, data comes from it in analog form. Consequently, it is not possible to use them on a device other than a DVD player or to make copies of them for other interested buyers. The latter in turn must obtain the DVD and the associated equipment. On the other hand, we do not find in the form of DVDs all the videos of the television channel, and conversely, the television channel does not broadcast all the images offered for sale in the form of DVDs. To have a very wide choice, you must therefore combine these two systems, invest in a decoder, a pay TV subscription, a DVD player ...

In contrast, other systems of the prior art are much more flexible and consist of the exploitation of digital data obtained on the Internet. One principle of such systems is the downloading onto a PC of data, video or audio for example, from a dedicated website after having acquired the associated rights by an electronic transaction by any known means. These systems have the advantage of a great flexibility of distribution thanks to an easy access and a large choice of data, and a great flexibility of exploitation because it is possible to store the digital data received on different supports, for the operate on several devices ... A major drawback of these systems comes from abuses linked to non-respect of copyright: data that has become accessible in clear on a PC is easily duplicated and distributed in a fraudulent manner. We add “watermarking” solutions which consist in leaving a trace in this data to be able to trace their origin in the event of identified fraud. However, this is not avoided.

We therefore see that the prior art offers very different solutions, which are not compatible with each other and which have many drawbacks. The tendency of the prior art consists in improving each of these solutions, independently of each other, which contributes to making them more and more specific and incompatible. Furthermore, it appears in the prior art that there is a technical contradiction between the fact that the author wishes the distribution and the maximum exploitation of his work and at the same time the guarantee of the respect of his copyright. . The increase in one of these two characteristics comes at the expense of the other.

An objective of the present invention is to combine the advantages of the previous solutions while avoiding their disadvantages.

Another objective of the present invention is to provide a universal solution, allowing compatibility between existing systems.

For this, our invention aims to guarantee respect for copyright, that is to say guarantee that digital content cannot be exploited without the agreement of its author or his successor in title. In addition, our invention aims to allow flexible distribution and exploitation of multimedia type data. It is also looking for compatibility of the various networks and associated devices. The invention is based on an IS078§16 smart card characterized in that it contains both first multimedia data in a first memory space and second data representing the copyright associated with multimedia data in a second memory space, said second data being necessary for processing the first data.

In one embodiment, the second memory space is secure and / or the first data is stored encrypted and the second data contains at least one decryption key for the first data.

The first data can represent a video lasting at least half an hour.

As a variant, the card is capable of executing an algorithm for decrypting the first data, the algorithm being stored in a third memory space. It may also include a means for converting the first multimedia type data into analog form after their decryption.

The present invention also consists of a method for the distribution of digital works comprising the following steps:

• loading multimedia-type data into a first memory space of an IS07816 smart card in a form which is not directly usable; • loading of data into a second memory space on the same card representing the copyright associated with the first data.

The two loading steps are simultaneous or dissociated.

Finally, the present invention consists of a method for exploiting the data of a smart card as described above, characterized in that it comprises a step of executing an algorithm for transforming the first data into a form usable at using the second data. The operating device for implementing this method comprises a smart card reader and a security module capable of transforming first data of multimedia type which cannot be directly exploited into data which can be exploited using the second data.

Other characteristics and advantages of the present invention will appear on reading the following description of particular examples of embodiment, given by way of illustration and not limitation, and of the appended drawings in which: - Figure 1 schematically represents a smart card used in the implementation of the present invention; FIGS. 2A to 2H represent different successive stages in the production of such a smart card;

- Figure 21 shows the section of a smart card corresponding to Figures 2A to 2H comprising a circuit integrated, this cut showing the neutral fiber; FIG. 3 represents a first method and associated device for managing multimedia type data according to the present invention; FIG. 4 represents a second method and associated device for managing multimedia type data according to the present invention.

The invention is based on a smart card 1 of ISO 7816 format, as shown diagrammatically in FIG. 1. It contains a fast communication interface 2, a microprocessor 3 capable of managing first multimedia type data (DMc) in a first high-capacity memory space 4 and second data (K) in a second memory space 5 representing the copyright associated with the first data.

The multimedia data are stored encrypted (DMc) or scrambled or in any other state not directly exploitable, and the data (K) related to copyright contains the means to decipher or descramble, or more generally to make exploitable, the data of multimedia type. These second data linked to copyright can only be read by an authorized reader, after the execution of an authentication protocol between the card and the reader. In addition, they are stored securely in the memory space 5 and transmitted encrypted to the authenticated reader. The present invention does not relate to the secure storage of the data itself, nor to the encryption / decryption algorithms as such. We use techniques known to those skilled in the art. Thus, this encryption / decryption will be done by any known algorithm (ALGO). To simplify the description, we will consider in the following examples that the copyright-related data consists of a single key (K) for decrypting multimedia data.

One embodiment of the invention is based on a high capacity ISO 7816 format smart card, which can be manufactured according to the eight steps shown in FIGS. 2A to 2H and described below. This smart card comprises a communication interface, comprises a laminated card body in which the chip is housed, comprises at least one data storage memory cooperating with the chip, the memory being physically distinct from the chip and housed in the body card at a location located at a distance from the main bending lines of the card and in the neutral fiber of the card, the chip ensuring the communication of data stored in the storage memories between the interface and the storage memories.

This data carrier, thus used, has many advantages:

• It has a large volume of storage making it possible to memorize the equivalent of at least one hour of video data. • It has a small size, easy to store and transport.

• The digital data used allow high-quality processing (in terms of images or sounds, for example).

• It provides the well recognized high security of smart cards to systems according to the invention: it avoids copying and fraudulent exploitation, and thus guarantees respect for copyright. • It facilitates the distribution and the maximum exploitation of multimedia type data because there are already a multitude of telecommunication devices having a smart card reader (mobile phone, reader for PC ...).

Such a smart card can be manufactured according to the eight steps shown in FIGS. 2A to 2H.

The first manufacturing step, shown in FIG. 2A, consists in printing a communication bus 20 on an insulating sheet 21 having the dimensions of an ISO format smart card. The sheet 21 is for example made of PVC or PET and has a thickness of 300 μm. It is provided with a window 22 cut out from its body, intended to receive the electrical contacts of the card.

The electrically conductive ink used for printing is for example a brand ink

Dupont (protected brand) referenced E520. The bus 20 here consists of 23 conductive tracks forming a U around the window 22. FIG. 2B shows the second step of manufacturing a smart card according to the invention. An adhesive tape 23 is fixed on the opposite face of the insulating sheet 21, at the location of the window 22. The function of the adhesive tape is to keep the electrical contacts of the card in place, as will be seen later.

FIG. 2C shows the third step in manufacturing the card according to the invention. This step consists in mounting the communication interface, here consisting of contacts flush with the surface of the card.

The face of the insulating sheet 21 carrying the communication bus 20 is again visible. An insulating substrate 24 carrying electrical contacts 25 (here 8 contacts) is fixed against the adhesive 23 (FIG. 2B). The substrate is for example made of epoxy glass or capton. A bead of electrically insulating glue 26 forming a seal is then dispensed between the substrate 24 and the edge of the window so that this substrate is held in place during the final lamination step (FIG. 2H). This bead of glue 26 is for example Delo Photo Bond (registered trademark) referenced 4442. FIG. 2D shows the fourth step in manufacturing the card according to the invention.

This step consists in positioning metal spacers 27 in the four corners of the insulating sheet 21. The spacers 27 have a thickness of 300 μm and are located in the neutral fiber of the card. They are preferably made of soft iron. Their function is to confer on the card, once it is assembled, a certain rigidity protecting the elements it contains from destruction by folding the card, while retaining sufficient flexibility so that the spacers 27 do not break the sheets external to the card in case of bending thereof.

The spacers 27 are held in place by gluing so that they do not move during the final lamination operation.

FIG. 2E shows the fifth step of manufacturing the card according to the invention. A chip 28 and seven data storage memories 29 are positioned and glued to the communication bus 20. The chip 28 and the memories 29 have a thickness of 100 μm and are placed in the card body at locations located at a distance from the main bending lines of the card and in the neutral fiber of this card. Figure 21 shows a section showing the neutral fiber. The neutral fiber is defined as being the plane included in the middle of the planes forming the outer surfaces of the card. In FIG. 21, an integrated circuit 40 is included in the neutral fiber of a card 41, that is to say that it is exactly placed in the center of the card 41.

Returning to FIG. 2E, the chip 28 is for example constituted by a programmable logic circuit (FPGA in English - Field-Programmable Gate Array), that is to say by logic gates whose functions and interconnections can be defined through programming. The memories 29 are identical to each other and each have a capacity of 300 Mbytes. The bonding of the chip 28 and of the memories 29 is preferably carried out with a non-conductive UV adhesive. Such an adhesive is activated when UV radiation is applied to it and its complete polymerization is obtained after a few hours. In a preferred embodiment, the UV adhesive used is a Delo Photo Bond 4442 adhesive (registered trademark). All the slices of the chip and of the memories are isolated so that the next step does not cause short circuits.

FIG. 2F shows the sixth step in manufacturing the card according to the invention. This step consists in dispensing a conductive adhesive between on the one hand the contacts of the chip and of the memories and on the other hand the tracks of the communication bus 20.

The conductive adhesive used for this operation is for example a Johnson Mattey A1340 adhesive. Such an adhesive is commonly called "Silver glue" in English terminology. Cords of conductive glue 30 are deposited between the contacts of the memories 29 and the conductive tracks, so as to connect them electrically. The chip 28 undergoes the same operation and is connected, also by dispensing conductive adhesive, to the contacts 25. The adhesive is polymerized by steaming the assembly for 24 hours at a temperature of 100 ° C. All the electrical connections are therefore made.

FIG. 2G shows the seventh step of manufacturing the card according to the invention. This step consists in protecting the chip 28 and the memories 29 with a protective resin.

A rigid protective resin 31 (about 10 μm thick) is deposited by exemption on the various components constituting the electronics of the card. This resin is for example of the E505 Epotecny type. Its hardening is obtained by steaming for 24 hours at a temperature of 60 ° C.

Figure 2H shows the last step in manufacturing the card according to the invention. This step consists in dispensing a filling material on the device of FIG. 2G, this filling material being for example polyurethane 32, and in laminating a covering sheet 33 on the whole. This lamination is therefore a cold lamination. Finally, the adhesive 23, present on the non-visible face of the card in FIG. 2H, is removed.

We will illustrate below several multimedia type data management devices based on the smart card support described above.

A first embodiment of a multimedia data management method according to the present invention and its associated device is shown in FIG. 3.

In a first step E1, an individual wishing to acquire a certain film purchases a right from a service operator 01 offering video services using his GSM 51. He inserts a blank card 1, such as that described above, in a card reader from his mobile phone. After an electronic transaction according to a solution of the prior art, a secret key K1 representing his right is downloaded into the memory space 5 of his chip card 1. Advantageously, this key is transmitted encrypted.

In a second step E2, it downloads the encrypted data DMc corresponding to the film of its choice into the memory space 4 of the same smart card 1 via a multimedia terminal 52 having a smart card reader and allowing it broadband Internet access. The DMc data only pass in encrypted form into the computer of terminal 52, which ensures high security.

Alternatively, the two preceding steps can be simultaneous, the data representing the rights then being downloaded with the multimedia type data to an Internet terminal for example.

In a third step E3, he visualizes the film by means of an apparatus 60 composed of a card reader into which he inserts his smart card 1. The apparatus 60 comprises a screen 61, a security module 62 to decrypt the DMc data by applying to them the decryption algorithm based on the key K1. The security module 62 is in the physical form of a closed and inviolable block, according to known techniques. It securely stores the algorithm and the associated key (s). Advantageously, the images are produced therefrom in analog form just before their display on the screen 61. Thus, it is not possible to recover the deciphered multimedia type data, or at best in analog form. The device 60 can be in the form of a television, a mobile phone, a PC, etc.

An advantage of the present invention according to this first embodiment is therefore its flexibility with regard to distribution and its security against fraud linked to copyright.

FIG. 4 represents another device of the invention applied to the field of a pay television channel.

A service operator 02, of the pay-TV channel type, transmits scrambled images DM2c. A subscriber receives the images and stores them on a smart card 1 in a decoder 50 modified compared to the prior art. At the same time, 02 transmits an encrypted key K2c necessary for the descrambling algorithm. Multimedia type data is scrambled within an operator device according to a formula of the type: DM2c = ALG0 (DM2, K2, Y2) where Y2 represents at least one mother key of the system and ALGO a scrambling algorithm.

A subscriber has a modified television set 60 according to the present invention, having a security module 62 comprising in memory a descrambling algorithm as described in the previous example. The modified decoder 50 is suitable for it transmit the DM2c data and the K2c key in real time via a wired link lf. Alternatively, the processing of this data can be done subsequently by inserting the card 1 into the card reader of the device 60.

In the latter case, the reader and the card will first authenticate according to known methods. This authentication allows the card to ensure that it is facing a reader authorized to use its confidential data and the reader to recognize the card as being an acceptable data medium. Secondly, the card and the reader establish a common session key to allow them secure exchanges. Finally, the card transmits the key K2 then the data DM2c. The module 62 will descramble DM2c according to the following calculation:

DM2 = ALGO ^_1 (DM2c, K2, Y2)

It appears that in such a device, the smart card 1 can play the role of data carrier as such, in the same way as the DVDs or video cassettes of the prior art and the decoder 50 can have in addition to its decoding function a recorder function, replacing a video recorder. The smart card brings the advantages of storage of non-degraded images, usable on several devices: we can indeed provide viewing on televisions but also on mobile phones for example. According to a political choice of the operator 02, this transposition of the exploitation remains limited to personal needs or is more widely accessible to all the subscribers of the television channel. Technically, the latter case is equivalent to the distribution of a common key to all subscribers. In the first case, the recordings of a first subscriber will not be usable by a second subscriber. It will then be possible to provide a supervisory entity having rights greater than the rights of basic subscribers; these, via this intermediary, can then exchange their data, after having paid the fees.

Equivalently, the devices according to the invention corresponding to various operators can become compatible.

In fact, in the two examples described above, the corresponding devices are distinct and a priori incompatible, as in the prior art. The passage through a support 1 as described in the present invention offers the technical possibility of making these systems compatible by allowing the exchange of data from each of these systems through a supervisor organization having superior rights.

Thus, take the example of a non-subscriber to the scrambled television channel of the second operator 02 wishing to make a copy of a smart card 1 of a subscriber who recorded a video by this second system. It is first authorized to copy multimedia data to a blank card, since it is not directly usable. To obtain the operating right, he calls the operator 02 or a supervisory organization using any telecommunication device having a card reader, his GSM 51 for example, and requests the acquisition of new rights allowing him to exploit the multimedia data. The upper decryption data are then downloaded into the memory space 5 of its card.

Authors and operators have the advantage of greater profit linked to a wider distribution of multimedia-type data. The general public obtains the advantage of having a wider choice, not limited to a particular system.

An advantage of the present invention is therefore to allow technical compatibility between existing systems and thus to propose a universal solution.

In an alternative embodiment of the invention, the decryption or descrambling algorithm of the invention is moved from the reader 60 to a third memory space of the smart card 1. The data from the card will therefore be decrypted and the readers 60 clearly simplified. We can also plan to transform the decrypted multimedia type data into analog form within the card to limit the possibilities of copying. You can also use a smart card with screen so as to view a video directly on the card.

Claims

1. Smart card IS07816 characterized in that it contains both first multimedia data in a first memory space and second data representing the copyright associated with multimedia data in a second memory space, said data second data being necessary for the exploitation of the first data.

2. Card according to claim 1, characterized in that the second memory space is secure.

3. Card according to claim 1 or 2, characterized in that the first memory space is able to store the first encrypted data and in that the second memory space is able to store second data containing a key necessary for decrypting the first data .

4. Card according to one of claims 1 to 3, characterized in that the first memory space is capable of storing first data representing a video with a duration of at least half an hour.

5. Card according to one of claims 1 to 4, characterized in that it contains the algorithm for decrypting the first data in a third memory space and is suitable for the execution of said algorithm.

6. Card according to claim 5, characterized in that it comprises means for converting into the form analog the first multimedia data after their decryption.

7. Method for the distribution of digital works composed of multimedia type data comprising the following steps:

• loading multimedia-type data into a first memory space of an IS07816 smart card in a form which cannot be directly exploited; • loading of data into a second memory space on the same card representing the copyright associated with the first data.

8. Method according to claim 7, characterized in that the two loading steps are simultaneous.

9. Method according to claim 8, characterized in that the two loading steps are dissociated.

10. Method for processing data from a smart card according to one of claims 1 to 4, characterized in that it includes a step of executing an algorithm for transforming the first data into a form usable at using the second data.

11. Apparatus for processing data from a smart card according to one of claims 1 to 4, characterized in that it comprises a smart card reader and a security module capable of transforming the first non multimedia type data. directly exploitable in exploitable data using the second data.