Classifications

• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
  • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L63/00—Network architectures or network communication protocols for network security
  • H04L63/02—Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
  • H04L63/0281—Proxies
• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06F—ELECTRIC DIGITAL DATA PROCESSING
  • G06F17/00—Digital computing or data processing equipment or methods, specially adapted for specific functions
• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06F—ELECTRIC DIGITAL DATA PROCESSING
  • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
  • G06F21/10—Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM]
  • G06F21/106—Enforcing content protection by specific content processing
  • G06F21/1063—Personalisation
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L12/00—Data switching networks
  • H04L12/66—Arrangements for connecting between networks having differing types of switching systems, e.g. gateways
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L63/00—Network architectures or network communication protocols for network security
  • H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
  • H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L2463/00—Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00
  • H04L2463/101—Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00 applying security measures for digital rights management

Definitions

• the present invention relates to a method of operating a Digital Rights Management (DRM) gateway performing DRM conversion between terminals supporting different DRM methods and a DRM gateway for performing the method. More particularly, the present invention relates to a method of operating a DRM gateway receiving, from a first user terminal, a contents transmission request encrypted according to a DRM method which a second user terminal supports, and transmitting the contents encrypted according to the DRM method, to the second user terminal, and the DRM gateway.
• DRM Digital Rights Management
• DRM Digital Rights Management
• DRM is a general concept of a technology for protecting interests and rights of parties concerned in copyrights to prevent unauthorized usage of digital contents.
• a contents providing server providing DRM generally transmits contents by encrypting contents, and enables an authorized user to replay and output contents by transmitting a rights object to the authorized user.
• the rights object includes a contents encryption key used for decrypting contents, information about contents usage, i.e. contents usage authority, and the like.
• a user terminal replays and outputs only contents in a predetermined DRM method.
• a contents providing server providing contents similarly provides a user terminal with contents by applying one
• FIG. 1 is a diagram illustrating providing a user terminal with contents to which DRM is applied.
• the first contents providing server 102 transmits contents encrypted according to a DRM 1 method, and a rights object to the first user terminal 101.
• the first contents providing server 102 corresponds to a server encrypting contents according to a DRM method which the first user terminal 101 supports, i.e. the DRM 1 method, and generating the rights object.
• Contents encrypted may be first transmitted to the first user terminal 101, and the rights object may be separately transmitted via a predetermined payment process and a predetermined authentication process.
• the first user terminal 101 decrypts encrypted contents by using a decryption key included in the rights object, and replays and outputs decrypted contents.
• a second user terminal 103 similarly transmits a contents provision request to a second contents providing server 104.
• the second contents providing server 104 encrypts contents according to a DRM method which the second user terminal 103 supports, i.e. a DRM 2 method, and generates a rights object.
• the second contents providing server 104 transmits contents encrypted according to the DRM 2 method, and the rights object, to the second user terminal 103.
• encrypted contents may be first transmitted, and the rights object may be separately transmitted via a predetermined payment process and a predetermined authentication process.
• the second user terminal 103 decrypts encrypted contents by using a decryption key included in the rights object, and replays and outputs decrypted contents.
• a contents providing server of a conventional art simply provides contents encrypted according to a predetermined DRM method, there is a defect that contents encrypted in different DRM methods may not be provided.
• FIG. 1 when a user desires to replay identical contents by using the second user terminal 103 after the user replays and outputs contents by using the first user terminal 101, the user may transmit contents from the first user terminal 101 to the second user terminal 103, but when DRM methods which the first user terminal 101 and the second user terminal 103 support are different, there is a defect that contents transmitted from the first user terminal 101 to the second user terminal 103 may not be replayed.
• a contents providing server according to a conventional art protects contents by simply using one DRM method, there is a defect that contents encrypted by using different DRM methods may not be provided.
• a device in which a first user terminal may also request contents transmission in a DRM method which a second user terminal supports, and provide the second user terminal with contents in the DRM method which the second user terminal supports in response to a contents transmission request, thereby solving the defect, is urgently required.
• the present invention provides a Digital Rights Management (DRM) gateway for increasing availability of contents by performing conversion in the DRM method from a user terminal to another user terminal when a user uses at least two user terminals, and when DRM methods which a first user terminal and a second user terminal support are different.
• DRM Digital Rights Management
• the present invention also provides a method of operating a DRM gateway and the DRM gateway for generating identical contents in both a first user terminal and a second user terminal when a user simply transmits, from the first user terminal to the DRM gateway, DRM method information which the second user terminal supports and a contents transmission request.
• the present invention also provides a method of operating a DRM gateway and the DRM gateway for protecting contents copyrights when a user transmits contents, which are currently used or stored in a first user terminal, to a second user terminal in a form of the DRM method the second user terminal supports is applied, and the contents can be immediately used in the second user terminal.
• a method of operating a Digital Rights Management (DRM) gateway for providing a user terminal with predetermined contents to which a DRM method is applied including: receiving, from a first user terminal, DRM method information which a second user terminal supports and a contents transmission request encrypted according to the DRM method; requesting, according to the contents transmission request, encrypted contents corresponding to the DRM method from a contents providing server connected via a communication network; and receiving the encrypted contents from the contents providing server, and transmitting the encrypted contents to the second user terminal.
• DRM Digital Rights Management
• a DRM gateway for providing a user terminal with predetermined contents to which a DRM method is applied including: a communication module receiving, from a first user terminal, DRM method information which a second user terminal supports and a contents transmission request encrypted according to the DRM method; a contents request module requesting, according to the contents transmission request, encrypted contents corresponding to the DRM method from a contents providing server connected via a communication network; and a contents transmission module receiving the encrypted contents from the contents providing server, and transmitting the encrypted contents to the second user terminal.
• An aspect of the present invention provides a Digital Rights Management
• DRM gateway for increasing availability of contents by performing a conversion in the DRM method from a user terminal to another user terminal when a user uses at least two of user terminals, and when DRM methods which a first user terminal and a second user terminal support are different.
• An aspect of the present invention also provides a method of operating a DRM gateway and the DRM gateway for generating identical contents in both a first user terminal and a second user terminal when a user simply transmits, from the first user terminal to the DRM gateway, DRM method information which the second user terminal supports and a contents transmission request.
• An aspect of the present invention also provides a method of operating a DRM gateway and the DRM gateway for protecting contents copyrights when a user transmits contents, which are currently used or stored in a first user terminal, to a second user terminal in a form of the DRM method that the second user terminal supports is applied, and the contents can be immediately used in the second user terminal.
• FIG. 1 is a diagram illustrating an exemplary embodiment providing a user terminal with contents to which a Digital Rights Management (DRM) is applied according to a conventional art;
• DRM Digital Rights Management
• FIG. 2 is a diagram illustrating a network connection of a DRM gateway according to an exemplary embodiment of the present invention
• FIG. 3 is a flowchart illustrating a process of operating a DRM gateway according to an exemplary embodiment of the present invention
• FIG. 4 is a diagram illustrating an example of a database included in a DRM gateway according to an exemplary embodiment of the present invention.
• FIG. 5 is a block diagram illustrating a configuration of a DRM gateway according to an exemplary embodiment of the present invention.
• FIG. 2 is a diagram illustrating a network connection of a DRM gateway according to an exemplary embodiment of the present invention.
• a first user terminal 201 and a second user terminal 202 connect with the DRM gateway 203 via a wired/wireless communication network.
• the DRM gateway 203 connects with a plurality of contents providing servers 204, 205 and 206 providing contents, to which at least one DRM method is applied, via the wired/wireless communication network.
• a first user terminal 201 of the present invention may have a predetermined communication module such as a code division multiple access (CDMA) module, a Bluetooth module, an infrared data association (IrDA) module, and a wired/wireless local area network (LAN) card, such as those included in a personal computer (PC), a personal digital assistant (PDA), a smart phone, a handheld PC, a mobile phone, a Moving Picture Experts Group Audio Layer 3 (MP3) player, and the like.
• the first user terminal 201 is a general concept of a terminal having a predetermined operation capability by including a predetermined microprocessor implementing a function of replaying multimedia, and the first user terminal 201 and the second user terminal 202 may be terminals supporting DRM of different methods.
• FIG. 3 is a flowchart illustrating a process of operating a DRM gateway according to an exemplary embodiment of the present invention. Referring to FIG. 3, the process of operating the DRM gateway according to the exemplary embodiment of the present invention is described below.
• a first user terminal 301 transmits contents stored in the first user terminal 301.
• the first user terminal 301 may request DRM method information which a second user terminal 302 supports.
• DRM method information which a second user terminal 302 supports.
• a user listening to music contents "lovely" stored in the first user terminal 301 i.e. a PC
• the user transmits the music contents to a second user terminal 302, i.e. the mobile communication terminal, and requests the DRM method information which the second user terminal 302 supports.
• the first user terminal 301 may simply request the DRM method information which the second user terminal 302 supports, or store the DRM method information of the second user terminal 302 in an internal storage device of the first user terminal 301, without transmitting contents to the second user terminal 302.
• the second user terminal 302 receives the contents, and identifies the DRM method applied to the contents.
• the second user terminal 302 transmits the DRM method information which the second user terminal 302 supports, and terminal identification information to the first user terminal 301.
• the second user terminal 302, i.e. the mobile communication terminal receives the music contents, and identifies the DRM method applied to the contents.
• the mobile communication terminal transmits the DRM method information which the mobile communication terminal supports, and terminal identification information, i.e. a mobile communication terminal number, to the PC.
• the second user terminal 302 transmits the DRM method information to the first user terminal 301.
• the first user terminal 301 receives, from the second user terminal 302, the DRM method information which the second user terminal 302 supports, and transmits, to a DRM gateway 303, the received DRM method information and a contents transmission request encrypted according to the DRM method.
• the contents transmission request may include identification information of the contents stored in the first user terminal 301, or identification information of the second user terminal 302.
• the first user terminal 301 i.e. the PC, receives, from the second user terminal 302, i.e. the mobile communication terminal, the DRM method information which the mobile communication terminal supports, and the contents transmission request encrypted according to the DRM method, and transmits, to the DRM gateway 303, the received DRM method information and the contents transmission request encrypted according to the DRM method.
• the contents transmission request may include identification information of the music contents "lovely" stored in the first user terminal, and identification information of the second user terminal, e.g. a mobile communication terminal number "011-345- 6789".
• the user may transmit the contents transmission request to the DRM gateway 303 via a predetermined authentication process or a predetermined payment process in the first user terminal 301.
• the DRM gateway 303 may maintain the number of downloadable times for each user in a database, and transmit contents to the first user terminal 302 within the number of downloadable times.
• the DRM gateway 303 may transmit contents via the payment process.
• the DRM gateway 303 of the present invention requests, according to the contents transmission request, encrypted contents corresponding to the DRM method from a contents providing server connected via a communication network.
• the DRM gateway 303 maintains a database for recording a list of a plurality of contents providing servers providing contents to which at least one
• DRM method is applied, and requests, by referring to the database, the encrypted contents from the contents providing server providing the contents to which the DRM method is applied.
• FIG. 4 is a diagram illustrating an example of a database included in a DRM gateway according to an exemplary embodiment of the present invention.
• a database included in the DRM gateway records and maintains a list of contents providing servers, i.e. a contents providing server information 402, and a DRM method
• the contents providing server 402 may include an identifier for identifying a contents providing server, a network address for transmitting contents request information to the contents providing server, and the like.
• the DRM gateway 303 of the present invention receives the DRM method information which the second user terminal supports, and the contents transmission request, the DRM gateway 303 searches, by referring to the database, the contents providing server providing the contents to which the received DRM method is applied.
• the DRM gateway 303 When the corresponding contents providing server is located, the DRM gateway 303 requests encrypted contents corresponding to the DRM method from the contents providing server connected via a communication network. For example, when the DRM method which the second user terminal supports corresponds to "DRM 1", the DRM gateway 303 may locate, by referring to the database, a "server 1" providing contents to which a "DRM 1" method is applied, and request contents "lovely” encrypted in the "DRM 1" method from the "server 1". In this instance, the DRM gateway 303 of the present invention may request encrypted contents and a rights object for the encrypted contents. Similar to the description above, the rights object includes the encryption key in which the contents may be replayed in the second user terminal, information about contents usage, i.e. contents usage authority, and the like. The encryption key may be encrypted using a public key of the user terminal as a configuration for establishing restriction to use contents in only specific user terminals.
• the contents usage authority may include user terminal information which corresponding contents may be replayed, information concerning to whether the corresponding contents may be backed up, information about a period when the corresponding contents may be replayed, and the like.
• the present exemplary embodiment is described as an exemplary embodiment which a contents providing server provides both encrypted contents and a rights object for the encrypted contents, but encrypted contents and a rights object for the encrypted contents may be provided from a separate server.
• the DRM gateway 303 may separately request and receive contents and the rights object.
• a contents providing server 304 receives the contents transmission request confirms the DRM method information and contents identification information included in the contents transmission request, the contents providing server 304 identifies the corresponding contents, and transmits identified contents and the rights obj ect to the DRM gateway 303.
• the contents providing server i.e. the "server 1” transmits the contents "lovely” encrypted in the "DRM 1" method, and the rights object for the encrypted contents to the DRM gateway 303.
• the DRM gateway 303 of the present embodiment receives the encrypted contents and the rights object from the contents providing server, and transmits the encrypted contents and the rights object to the second user terminal by using the identification information of the second user terminal.
• the DRM gateway 303 receives the contents "lovely” encrypted in the "DRM 1" method, and the rights object for the contents from the contents providing server 304, and transmits the contents and the rights object to the second user terminal 302 corresponding to the mobile communication terminal number, e.g. "011-345-6789".
• the DRM gateway 303 may transmit a message including address information of a storage device where the encrypted contents are stored in the second user terminal by referring to the terminal identification information of the second user terminal 302, and transmit the encrypted contents.
• the address information may a call-back uniform resource locator (URL), or the message may be a message of a short message service (SMS).
• SMS short message service
• the second user terminal that received the message receives the encrypted contents from the storage device via the wired/wireless communication network according to a user's confirmation response.
• the message of the SMS including address information of a storage device where the encrypted contents are stored is transmitted and the user selects the confirmation response in the second user terminal 302.
• the second user terminal 302 may receive the encrypted contents by connecting with the storage device.
• the DRM gateway 303 transmits the encrypted contents in operation S307 and the rights object for the encrypted contents to the first user terminal, and the first user terminal transmits the encrypted contents which are received, and the rights object for the encrypted contents to the second user terminal.
• the contents encrypted according to the DRM method which the second user terminal supports may be also transmitted to the second user terminal.
• a DRM method which the PC supports, and a DRM method which the mobile communication terminal supports are different according to a conventional art.
• each of the two terminals is required to connect with each server.
• the present invention there is an effect of protecting contents copyrights when a user transmits contents, which are currently used or stored in a first user terminal, to a second user terminal in a form of which the DRM method that the second user terminal supports is applied, and the contents can be immediately used in the second user terminal.
• a method of operating a DRM gateway according to the above-described embodiment of the present invention may be recorded in computer-readable media including program instructions to implement various operations embodied by a computer.
• the media may also include, alone or in combination with the program instructions, data files, data structures, and the like.
• the media and program instructions may be those specially designed and constructed for the purposes of the present invention, or they may be of the kind well-known and available to those having skill in the computer software arts.
• FIG. 5 is a block diagram illustrating a configuration of a DRM gateway according to an exemplary embodiment of the present invention.
• the DRM gateway according to the exemplary embodiment of the present invention includes a communication module 501, a contents request module 502, a contents transmission module 503, and a database 504.
• the communication module 501 receives, from a first user terminal, DRM method information which a second user terminal supports and a contents transmission request encrypted according to the DRM method.
• the contents request module 502 requests, according to the contents transmission request, encrypted contents corresponding to the DRM method from a contents providing server connected via a communication network. Similar to the description above, the contents request module 502 may request, by referring to the database 504, the encrypted contents from the contents providing server providing the contents to which the DRM method is applied, and also request a rights object for the encrypted contents.
• the contents transmission module 503 receives the encrypted contents and the rights object from the contents providing server, and transmits, to the second user terminal, the encrypted contents and the rights object received from the contents providing server.
• the database 504 records a list of a plurality of contents providing servers providing contents to which at least one DRM method is applied. The database 504 is described by referring to FIG. 4.

Priority Applications (2)

Applications Claiming Priority (2)

Publications (1)

Family

ID=37713234

Family Applications (1)

Country Status (4)

Cited By (2)

Families Citing this family (1)

Citations (3)

Family Cites Families (8)

• 2005
  • 2005-10-28 KR KR1020050102530A patent/KR100648711B1/ko not_active IP Right Cessation
• 2006
  • 2006-10-27 CN CN2006800403472A patent/CN101297518B/zh not_active Expired - Fee Related
  • 2006-10-27 WO PCT/KR2006/004429 patent/WO2007049942A1/en active Application Filing
  • 2006-10-27 JP JP2008537605A patent/JP2009514322A/ja active Pending

Patent Citations (3)

Also Published As

Similar Documents

Legal Events