WO2009039748A1 - Procédé, dispositif et système pour réaliser un service de gestion des droits numériques dans un environnement de diffusion - Google Patents

Procédé, dispositif et système pour réaliser un service de gestion des droits numériques dans un environnement de diffusion Download PDF

Info

Publication number
WO2009039748A1
WO2009039748A1 PCT/CN2008/072245 CN2008072245W WO2009039748A1 WO 2009039748 A1 WO2009039748 A1 WO 2009039748A1 CN 2008072245 W CN2008072245 W CN 2008072245W WO 2009039748 A1 WO2009039748 A1 WO 2009039748A1
Authority
WO
WIPO (PCT)
Prior art keywords
information
drm
drm service
stream
transport stream
Prior art date
Application number
PCT/CN2008/072245
Other languages
English (en)
French (fr)
Inventor
Zhipeng Zhou
Original Assignee
Huawei Technologies Co., Ltd.
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Huawei Technologies Co., Ltd. filed Critical Huawei Technologies Co., Ltd.
Priority to EP08800757A priority Critical patent/EP2204737A4/en
Publication of WO2009039748A1 publication Critical patent/WO2009039748A1/zh

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04NPICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/80Generation or processing of content or additional data by content creator independently of the distribution process; Content per se
    • H04N21/83Generation or processing of protective or descriptive data associated with content; Content structuring
    • H04N21/835Generation of protective data, e.g. certificates
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04NPICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/20Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
    • H04N21/23Processing of content or additional data; Elementary server operations; Server middleware
    • H04N21/235Processing of additional data, e.g. scrambling of additional data or processing content descriptors
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04NPICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/20Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
    • H04N21/25Management operations performed by the server for facilitating the content distribution or administrating data related to end-users or client devices, e.g. end-user or client device authentication, learning user preferences for recommending movies
    • H04N21/254Management at additional data server, e.g. shopping server, rights management server
    • H04N21/2541Rights Management
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04NPICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/40Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
    • H04N21/43Processing of content or additional data, e.g. demultiplexing additional data from a digital video stream; Elementary client operations, e.g. monitoring of home network or synchronising decoder's clock; Client middleware
    • H04N21/434Disassembling of a multiplex stream, e.g. demultiplexing audio and video streams, extraction of additional data from a video stream; Remultiplexing of multiplex streams; Extraction or processing of SI; Disassembling of packetised elementary stream
    • H04N21/4348Demultiplexing of additional data and video streams
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04NPICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/40Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
    • H04N21/43Processing of content or additional data, e.g. demultiplexing additional data from a digital video stream; Elementary client operations, e.g. monitoring of home network or synchronising decoder's clock; Client middleware
    • H04N21/435Processing of additional data, e.g. decrypting of additional data, reconstructing software from modules extracted from the transport stream
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04NPICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/40Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
    • H04N21/45Management operations performed by the client for facilitating the reception of or the interaction with the content or administrating data related to the end-user or to the client device itself, e.g. learning user preferences for recommending movies, resolving scheduling conflicts
    • H04N21/462Content or additional data management, e.g. creating a master electronic program guide from data received from the Internet and a Head-end, controlling the complexity of a video stream by scaling the resolution or bit-rate based on the client capabilities
    • H04N21/4627Rights management associated to the content
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04NPICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/60Network structure or processes for video distribution between server and client or between remote clients; Control signalling between clients, server and network components; Transmission of management data between server and client, e.g. sending from server to client commands for recording incoming content stream; Communication details between server and client 
    • H04N21/65Transmission of management data between client and server
    • H04N21/654Transmission by server directed to the client
    • H04N21/6543Transmission by server directed to the client for forcing some client operations, e.g. recording
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04NPICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/80Generation or processing of content or additional data by content creator independently of the distribution process; Content per se
    • H04N21/83Generation or processing of protective or descriptive data associated with content; Content structuring
    • H04N21/835Generation of protective data, e.g. certificates
    • H04N21/8355Generation of protective data, e.g. certificates involving usage data, e.g. number of copies or viewings allowed
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04NPICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N7/00Television systems
    • H04N7/16Analogue secrecy systems; Analogue subscription systems
    • H04N7/162Authorising the user terminal, e.g. by paying; Registering the use of a subscription channel, e.g. billing
    • H04N7/165Centralised control of user terminal ; Registering at central

Definitions

  • the present invention relates to the field of digital rights management technologies, and in particular, to a method, device and system for implementing a digital copyright management service in a broadcast environment. Background technique
  • Digital Rights Management protects the legitimate rights and interests of content owners by controlling the use of digital content through rights restrictions and content protection schemes.
  • the digital content issuer (CI) encrypts the digital content
  • the user downloads the encrypted digital content data package to the terminal device;
  • the authorized issuer (RI) is responsible for distributing the license corresponding to the digital content. , encapsulated with a content decryption key and corresponding permissions.
  • the device can use the purchased digital content only if it has both content packets and licenses.
  • the legitimate DRM terminal DRMAgent
  • a domain-joined device can use the domain object (RO) purchased for this domain.
  • the domain RO encapsulates the content decryption key of the digital content.
  • the device in the domain obtains the domain key of the domain in the process of joining the domain, so that the domain RO can be parsed and the content decryption key is obtained.
  • the device applies to the RI to join the domain through the "join domain request" message.
  • the RI After receiving the domain join request, the RI carries the domain key of the corresponding domain in the "join domain response" message returned to the device, so that the device completes the device. The process of joining a domain.
  • the embodiments of the present invention provide a method, a device, and a system for implementing a DRM service in a broadcast environment, which are used to implement various DRM services in a broadcast communication environment.
  • An embodiment of the present invention provides a method for implementing a DRM service in a broadcast environment, where the method includes:
  • the embodiment of the invention further provides a method for implementing a DRM service in a broadcast environment, the method comprising:
  • the transport stream is transmitted over a broadcast channel.
  • the embodiment of the invention further provides a method for implementing a DRM service in a broadcast environment, the method comprising:
  • the server encapsulates the DRM service information in the transport stream, and sends the transport stream to the terminal device through the broadcast channel;
  • the terminal device performs a corresponding DRM service operation according to the DRM service information.
  • the embodiment of the invention further provides a communication device, including:
  • a receiving module configured to receive a transport stream that is transmitted through a broadcast channel, where the transport stream is encapsulated with DRM service information
  • an extracting module configured to extract the DRM service information from the transport stream, and execute a module, configured to perform a corresponding DRM service operation according to the DRM service information.
  • the embodiment of the invention further provides a communication device, including: An encapsulating module, configured to encapsulate DRM service information in a transport stream; and a sending module, configured to transmit the transport stream by using a broadcast channel.
  • the embodiment of the invention further provides a communication system, including:
  • a server configured to encapsulate DRM service information in a transport stream, and send the transport stream through a broadcast channel;
  • a terminal device configured to receive the transport stream, and extract the foregoing from the transport stream
  • DRM service information ; performing corresponding DRM service operations according to the DRM service information.
  • the server encapsulates the DRM service information in the transport stream, and sends the transport stream to the terminal device through the broadcast channel; the terminal device receives the transport stream, and extracts the DRM service information from the transport stream.
  • the terminal device performs corresponding DRM service operations according to the DRM service information; thereby implementing various DRM services in a broadcast communication environment, and bringing more service choices to operators and consumers.
  • FIG. 1 is a flowchart of a process for a server to implement a DRM service in a broadcast environment according to an embodiment of the present invention
  • FIG. 2 is a flowchart of processing a DRM service implemented by a terminal device in a broadcast environment according to an embodiment of the present invention
  • FIG. 3 is a flowchart of processing a specific example of implementing a DRM service in a broadcast environment according to an embodiment of the present invention
  • FIG. 4 is a process flowchart of a specific example of a system end device notifying a related terminal device to perform a domain upgrade operation according to an embodiment of the present invention
  • FIG. 5 is a schematic structural diagram of a communication device according to an embodiment of the present invention.
  • FIG. 6 is a schematic structural diagram of still another communication device according to an embodiment of the present invention.
  • FIG. 7 is a schematic structural diagram of a communication system according to an embodiment of the present invention.
  • FIG. 8 is a schematic structural diagram of a communication system in a specific example according to an embodiment of the present invention. detailed description The embodiments of the present invention are described in detail below with reference to the accompanying drawings.
  • a process for implementing a DRM service in a broadcast environment by a server is as follows:
  • Step 101 Encapsulate DRM service information in the transport stream.
  • Step 102 Transmit a transport stream encapsulated with DRM service information by using a broadcast channel.
  • the processing procedure for the terminal device to implement the DRM service in the broadcast environment is as follows:
  • Step 201 Receive a transport stream that is transmitted through a broadcast channel, where the transport stream is encapsulated
  • Step 202 Extract DRM service information from the received transport stream.
  • Step 203 Perform a corresponding DRM service operation according to the extracted DRM service information.
  • the DRM service information may include one or any combination of registration information, joining domain information, exit domain information, upgrade domain information, and license request information.
  • DRM business operations may include registration, joining a domain, exiting a domain, upgrading a domain, licensing a request, or any combination thereof.
  • the DRM service information may be encapsulated in a transport packet carrying the transport stream.
  • AVSDRM ServiceMessage—Container
  • Control_info_class_tag field indicates the label of the control information
  • Length indicates the word of the AVS DRM unit container class immediately after the field. Number of sections
  • MessageData represents specific message information.
  • the newly designed control information also needs to be assigned a new tag value.
  • MessageData is the information of the DRM message carried. Specifically, the message may be: a domain response message (domain registration response message), a domain upgrade response message, an exit domain response message, and the like.
  • the specific message format definition can refer to the DRM service message definition in the existing standards in the application.
  • the terminal device After receiving the DRM service message, the terminal device performs a corresponding subsequent DRM service operation according to the specific message.
  • a method for distinguishing different types of message information is to set a message type identifier in the message body, where the DRM service information includes a type identifier, the type identifier indicates a DRM service operation corresponding to the DRM service information, and the other is a message body.
  • the DRM service information includes a DRM service name, and the DRM service name indicates a DRM service operation corresponding to the DRM service information.
  • the serial number Serial_num field can be set in the AVSDRM-DomainMessage_Container, and the field value is 0 for each DRM information. If the DRM information is divided into multiple parts to be carried by multiple AVSDRM-DomainMessage-Containers, The value of the Serial_num field of each part is incremented by one.
  • the DRM service information may be encapsulated in a DRM information stream, and the DRM information stream is multiplexed into the transport stream.
  • the transport stream is obtained by multiplexing the DRM information stream, the key stream, and the media stream.
  • the DRM information stream includes flow identification information, and the terminal device may extract DRM service information from the transport stream according to the flow identification information.
  • a specific example is as follows:
  • the user terminal device is in an MPEG broadcast system; the user requests to join a terminal device to a certain domain; the system side (server) agrees to send the join domain response message to the terminal device after agreeing that the terminal device joins the domain request.
  • the system side server
  • the terminal device receives the join domain response, the user subscribes to the system for a license for the movie and subscribes to the domain license.
  • the domain license is encapsulated with content key and permission information.
  • the system side device sends the domain license ordered by the terminal device to the terminal device.
  • Step 301 The terminal user applies to join the domain to the system through the outband mode.
  • Step 302 After the user joins the domain application, the system sends the domain response message to the terminal device through the broadcast system. Specifically, the domain response message is encapsulated into the DRM information stream, and then multiplexed with the key stream and the media stream into the transport stream, and transmitted to the terminal device by the broadcast channel.
  • the domain response message is added to the domain registration response message defined by XBS, and the definition is as shown in Table 5:
  • the message_tag field value in the domain registration response message is set to 0x02.
  • the protocol_version field indicates the version information of the message.
  • the version of the current XBS message is set to 0x0.
  • domain— timestamp— start , domain — timestamp — end field indicates the start and end time of the domain validity period.
  • the signature_type_flag field indicates the type of the signature algorithm.
  • RSA 1024, RSA 2048, and RSA 4096 are defined. The values are 0x0, 0x1, and 0x2 respectively.
  • the key field represents the domain key of the OMADRM domain.
  • the session key-block encapsulates domain-related information (including the domain key) and is encrypted. Only the device private key with the legal device can resolve the encrypted domain-related information.
  • a digital signature of the system-side message is encapsulated in the signature_block.
  • Step 303 After receiving the domain registration response message, the terminal device decrypts the domain key in the sessionkey_block by using the device private key after verifying the digital signature of the message, and deposits the domain key in the local secure storage area of the terminal device. .
  • Step 304 The user subscribes to the domain license of a movie to the system through the outband mode.
  • Step 305 The system side encapsulates the license of the content ordered by the user into the container.
  • the RightsData field is domain license information, which encapsulates information such as permitted usage rights and content decryption keys.
  • Step 306 After receiving the license information, the terminal device may decrypt the content key with the domain key and decrypt the digital content by using the content key. Wherein, the media stream of the movie is demultiplexed, and the plaintext of the movie data is decrypted, so that the media player can play.
  • the terminal device when the related data broadcast is transmitted, the terminal device is not necessarily in the power-on state, so the server can continuously transmit the same DRM service information by using the carousel. After receiving the DRM service information, the terminal device needs to determine that it is Have received this information (such as judging by the AVSDRM-control-info-version field). If you have received the same information, discard it; otherwise, perform the corresponding processing.
  • the terminal device may notify the server in an out-of-band manner to send relevant information to the terminal device.
  • the license information can also be carried in the DRM service message and transmitted to the terminal device as data in the sessionkey_block.
  • the DRM service information is directly encapsulated into the DRM information flow AVSDRM-Control-Info_section (;) structure.
  • different DRM information may be separately encapsulated into different flows.
  • the flow identification information may be included in the DRM information flow, and each DRM information flow carrying different DRM service information has different flow identifiers.
  • the identifier stream may also be multiplexed with the identifier information stream, where the identifier information stream includes the stream identifier information and/or the description information of the DRM information stream, and the terminal device may extract the stream identifier information and/or the description information from the identifier information stream.
  • the DRM service information is extracted from the transport stream according to the flow identification information and/or the description information.
  • the terminal device may extract corresponding PES (Packet Element Stream) packet information or table information from the transport stream according to the flow identifier, and extract DRM service information from the PES packet information or the table information.
  • PES Packet Element Stream
  • a DRM control table is designed to record the flow identifiers of different DRM information flows in the table. All DRM control table information is composed of a single stream multiplexed into the transport stream for transmission. Or, in the existing type of information, such as PMT (Program Map Table), the flow identification information of different DRM information flows is recorded. The terminal device extracts corresponding DRM service information from the transport stream according to the flow identification information of each DRM information flow in the DRM control table (or PMT).
  • PMT Program Map Table
  • the PID (Packet Identifier) value of the DRM control table information may be defined in the PMT or may be set to a fixed value.
  • the DRM control table syntax can be defined as shown in Table 7: DRM control table syntax
  • elementary_ PID is flow identification information
  • related description information of the flow is defined in descriptor().
  • the definition of the DRM stream descriptor() can be as defined above for DRM_Service_descriptor().
  • DRM-Info_section() the definitions of other parameters are similar to those defined in TS_program_map_section() and CA_section().
  • the encapsulation of the DRM information in the transport packet can be defined as PES, so that the corresponding stream id needs to be defined for the DRM information, such as setting it as 'DRM info', as specified.
  • a specific example is: assume that the PID value of the device DRM control table information is a fixed value of 0x4.
  • the current DRM service information definition has two flow types, one is a license information flow; the other is a domain response information flow.
  • the system side (server) identifies the license information flow as 100; the i or response flow ID is 101.
  • the system side records the information about the two streams in the DRM_Info_section structure of the DRM control table information, including the stream identifier and the DRM_Service_descriptor of each stream.
  • a related information of a certain flow is recorded in DRM_Service_descriptor().
  • the terminal device After extracting the DRM control table information from the system flow according to the PID value, the terminal device extracts the related information of the two DRM information flows in the DRM_Info_section structure, thereby obtaining the basic flow with the flow identifier of 100 as the license.
  • the information flow; the elementary flow with the flow identifier 101 is the domain response information flow. Therefore, the terminal device can separately parse related DRM service information from the two streams.
  • specific DRM service information is encapsulated in a PES packet.
  • specific DRM service information may be encapsulated in a table information format.
  • the table information defined in the AVSDRM_Control_Info_section() format carries DRM service information, and the flow identifier of the path is obtained in the DRM control table information.
  • the DRM service information is carried in the DRM information stream.
  • the DRM service information is encapsulated in a Descriptor structure, and the Descriptor structure is loaded into a PMT (Program Map Table). Or CAT (Conditional Access Table) information, and then multiplexed into the transport stream.
  • the Descriptor structure may carry Descriptor identification information, and the Descriptor identification information indicates that the information encapsulated in the Descriptor structure is DRM service information.
  • the DRM service information is encapsulated in the descritptor structure so that it can be carried in other types of information streams (such as PMT CAT).
  • the AVSDRM descriptorQ is defined in the AVS DRM standard, and its syntax is defined as shown in Table 9:
  • AVS DRM data field (AVSDRM Data) The meaning of the AVS DRM data field (AVSDRM Data) is: AVS DRM data describes the protection mechanism and special usage rules. It currently does not involve DMR business information.
  • one method is to carry the service message information (such as the information defined by the AVSDRM-ServiceMessage_Container) by using the existing DRMdescriptor; the other is to separately design a new descriptor type, such as Table 10 shows:
  • the descriptor of the DRM_Service_descriptor type whose descriptor tag identifier needs to be defined, can be defined as 64.
  • Step 401 The system-side device generates a DRM_Service_descriptor, where the domain upgrade information is encapsulated, including the original domain identifier, the new domain identifier, and the upgrade domain key, etc.;
  • Step 402 The system-side device loads the DRM_Service_descriptor The broadcast is sent to the terminal device in the PMT information.
  • Step 403 After receiving the PMT, the terminal device extracts the DRM_Service_descriptor information. If it is determined that the domain to which the terminal device belongs and the original domain identifier in the domain upgrade information match, the domain upgrade related operation is completed.
  • the DRM service information may be encapsulated in an ECM (Entitlement Control Message) or EMM (Entitlement Management Message) structure, and the ECM or EMM is multiplexed into the transport stream.
  • ECM Entitlement Control Message
  • EMM Entitlement Management Message
  • DRM service information is carried in an EMM or ECM message.
  • the ECM/EMM format is not defined, and the specific format is customized by the system vendor.
  • the user requests to join the domain through the outband mode; the system side device (server) encapsulates the join domain response message in the EMM and sends it to the user terminal device.
  • the following information can be included in the EMM:
  • ServiceMessage 8*message_length bit bslbf After receiving the EMM, the terminal device extracts the join domain response message and completes the join operation.
  • the embodiment of the present invention further provides a communication device, which is configured as shown in FIG. 5, and includes: a receiving module 501, an extracting module 502, and an executing module 503.
  • the receiving module 501 is configured to receive a broadcast channel.
  • the transport stream is transmitted, and the DRM service information is encapsulated in the transport stream;
  • the extracting module 502 is configured to extract the DRM service information from the received transport stream;
  • the executing module 503 is configured to execute the corresponding DRM service according to the extracted DRM service information. operating.
  • the DRM information stream includes flow identification information
  • the extraction module 502 is further configured to extract the DRM service letter from the transport stream according to the flow identification information. Interest.
  • the received transport stream may also be multiplexed with an identifier information stream, and the identifier information stream includes
  • the stream identification information and/or the description information of the DRM information stream may be further configured to extract the stream identification information and/or the description information from the identifier information stream, where the stream identification information and/or the description information are extracted from the transport stream. DRM business information.
  • the extracting module 502 is further configured to extract corresponding PES packet information or table information from the transport stream according to the flow identifier, and extract DRM service information from the PES packet information or the table information.
  • the embodiment of the present invention further provides a communication device, which is configured as shown in FIG. 6, and includes: a package module 601, a sending module 602, where the encapsulating module 601 is configured to encapsulate the DRM service in the transport stream.
  • the sending module 602 is configured to transmit, by using a broadcast channel, a transport stream encapsulated with DRM service information.
  • the encapsulating module 601 is further configured to encapsulate the DRM service information in the DRM information stream, and multiplex the DRM information stream into the transport stream.
  • the encapsulation module 601 can also be used to encapsulate the DRM service information in a Descriptor structure, load the Descriptor structure into the PMT or CAT information, and multiplex it into the transport stream.
  • the encapsulation module 601 can also be used to encapsulate DRM service information in an ECM or EMM structure, and multiplex the ECM or EMM into the transport stream.
  • the embodiment of the present invention further provides a communication system, which is configured as shown in FIG. 7 and includes: a server 701, a terminal device 702, where the server 701 is configured to encapsulate DRM service information in the transport stream, and The transport stream is sent by using a broadcast channel.
  • the terminal device 702 is configured to receive the transport stream sent by the server 701, extract DRM service information from the received transport stream, and perform a corresponding DRM service operation according to the DRM service information.
  • the server in the communication system includes a DRM service information generating module 801, a key information generating module 802, a media information generating module 803, and a multiplexing module.
  • the DRM service information stream is used by the multiplexing module 804.
  • the key stream and the media stream are multiplexed to generate a transport stream, which is transmitted by the broadcast channel to the terminal device.
  • the classification of these information flows is a logical division.
  • the DRM service information and the key may be the same basic stream.
  • the terminal device includes a demultiplexing module 805, a service processing module 806, a decryption module 807, and a descrambling module 808.
  • the demultiplexing module 805 parses the system stream, and sends the parsed information streams to the service processing module. 806.
  • the decryption module 807 and the descrambling module 808 perform processing.
  • the service processing module 806 parses the service information, and controls the terminal to perform related operations according to the service information, including information related to the interaction with the decryption module 807, for example, after extracting the key information in the service information and then performing decryption.
  • Module 807 performs the associated decryption operation; the process by which service processing module 806 performs license verification may also rely on the decryption module to complete.
  • the decryption module 807 can decrypt the content scramble key in the key stream and pass it to the descrambling module 808 to descramble the received scrambled media stream to obtain the plaintext of the digital content.
  • ROM Read- Only Memory
  • RAM Random-Access Memory
  • CD Compact Disc
  • the server encapsulates the DRM service information in the transport stream, and sends the transport stream to the terminal device through the broadcast channel; the terminal device receives the transport stream, and extracts the DRM service information from the transport stream.
  • the terminal device performs the corresponding DRM service operation according to the DRM service information; thereby implementing various DRM services in the broadcast communication environment, including implementing domain-related services; and using the method of the embodiment of the present invention, the currently widely used digital television
  • the system performs DRM transformation, which in turn enables rich DRM services in digital TV systems, bringing more business choices to operators and consumers. It is within the spirit and scope of the invention. Therefore, it is intended that the present invention cover the modifications and variations of the invention as claimed.

Landscapes

  • Engineering & Computer Science (AREA)
  • Multimedia (AREA)
  • Signal Processing (AREA)
  • Computer Security & Cryptography (AREA)
  • Databases & Information Systems (AREA)
  • Two-Way Televisions, Distribution Of Moving Picture Or The Like (AREA)

Description

广播环境下数字版权管理业务的实现方法、 设备及系统 技术领域
本发明涉及数字版权管理技术领域,尤其涉及广播环境下数字版 权管理业务的实现方法、 设备及系统。 背景技术
数字版权管理(Digital Rights Management, DRM )主要通过权 利限制和内容保护方案控制数字内容的使用,保护内容所有者的合法 权益。 数字内容的发行者( Content Issuer, CI )将数字内容加密后, 用户将加密的数字内容数据包下载到终端设备上;授权发行者( Rights Issuer, RI ) 负责分发与数字内容相对应的许可证, 其中封装有内容 解密密钥及对应的权限。设备只有同时拥有内容数据包和许可证, 才 能正常使用所购买的数字内容。 合法的 DRM终端 (DRMAgent )可 以解析出许可证中所封装的内容解密密钥以解密数字内容,并根据许 可证中的权限信息控制用户对数字内容的具体使用。
在现有的 DRM系统中, 引入了域的概念。 加入了域的设备可以 使用为本域购买的域许可(Rights Object, RO )。 域 RO中封装有数 字内容的内容解密密钥 ,本域的设备在加入域过程中获取本域的域密 钥, 从而可以解析域 RO,获取其中的内容解密密钥。
目前, 设备通过 "加入域请求" 消息向 RI申请加入域, RI在接 受设备的加入域请求后, 在返回给设备的 "加入域响应" 消息中携带 对应域的域密钥, 从而使设备完成加入域的过程。
但现有的被广泛地应用于数字电视等数字广播应用中的 MPEG ( Motion Picture Experts Group, 活动图像专家组) 系统并没有实现 DRM功能。
发明人在实现本发明的过程中发现,在现有的 AVS DRM技术中 的广播档中目前只存在权限信息的传输方法, 而不支持广播环境下 DRM业务的实现, 特别是当前未涉及广播环境下的 DRM的域相关 技术。 因此, 无法在广播环境下实现各种 DRM业务。 发明内容
本发明实施例提供一种广播环境下 DRM业务的实现方法、 设备 及系统, 用以在广播通信环境下实现各种 DRM业务。
本发明实施例提供一种广播环境下 DRM业务的实现方法, 该方 法包括:
接收通过广播信道传送的传输流, 所述传输流中封装有 DRM业 务信息;
从所述传输流中提取出所述 DRM业务信息;
根据所述 DRM业务信息执行对应的 DRM业务操作。
本发明实施例还提供一种广播环境下 DRM业务的实现方法, 该 方法包括:
在传输流中封装 DRM业务信息;
通过广播信道传送所述传输流。
本发明实施例还提供一种广播环境下 DRM业务的实现方法, 该 方法包括:
服务器在传输流中封装 DRM业务信息 , 将所述传输流通过广播 信道发送给终端设备;
终端设备接收所述传输流, 从所述传输流中提取出所述 DRM业 务信息;
终端设备根据所述 DRM业务信息执行对应的 DRM业务操作。 本发明实施例还提供一种通信设备, 包括:
接收模块, 用于接收通过广播信道传送的传输流, 所述传输流中 封装有 DRM业务信息;
提取模块, 用于从所述传输流中提取出所述 DRM业务信息; 执行模块, 用于根据所述 DRM业务信息执行对应的 DRM业务 操作。
本发明实施例还提供一种通信设备, 包括: 封装模块, 用于在传输流中封装 DRM业务信息; 发送模块, 用于通过广播信道传送所述传输流。
本发明实施例还提供一种通信系统, 包括:
服务器, 用于在传输流中封装 DRM业务信息, 以及通过广播信 道发送所述传输流;
终端设备, 用于接收所述传输流, 从所述传输流中提取出所述
DRM业务信息;根据所述 DRM业务信息执行对应的 DRM业务操作。
本发明实施例中, 服务器在传输流中封装 DRM业务信息, 将所 述传输流通过广播信道发送给终端设备; 终端设备接收所述传输流, 从所述传输流中提取出所述 DRM业务信息;终端设备根据所述 DRM 业务信息执行对应的 DRM业务操作; 以此在广播通信环境下实现各 种 DRM业务, 对运营商及消费者带来更多的业务选择。 附图说明
图 1为本发明实施例中服务器在广播环境下实现 DRM业务的处 理流程图;
图 2为本发明实施例中终端设备在广播环境下实现 DRM业务的 处理流程图;
图 3为本发明实施例中在广播环境下实现 DRM业务的一个具体 实例的处理流程图;
图 4 为本发明实施例中系统端设备通知相关终端设备执行域升 级操作的一个具体实例的处理流程图;
图 5为本发明实施例中一种通信设备的结构示意图;
图 6为本发明实施例中又一种通信设备的结构示意图;
图 7为本发明实施例中通信系统的结构示意图;
图 8 为本发明实施例中通信系统在一个具体实例中的结构示意 图。 具体实施方式 下面结合说明书附图对本发明实施例进行详细说明。
如图 1所示, 本发明实施例中, 服务器在广播环境下实现 DRM 业务的处理流程如下:
步骤 101、 在传输流中封装 DRM业务信息。
步骤 102、 通过广播信道传送封装有 DRM业务信息的传输流。 如图 2所示,本发明实施例中,终端设备在广播环境下实现 DRM 业务的处理流程如下:
步骤 201、 接收通过广播信道传送的传输流, 该传输流中封装有
DRM业务信息。
步骤 202、 从接收的传输流中提取出 DRM业务信息。
步骤 203、 根据提取的 DRM业务信息执行对应的 DRM业务操 作。
DRM业务信息可以包括注册信息、 加入域信息、 退出域信息、 升级域信息、 许可请求信息其中之一或任意组合。 对应的, DRM业 务操作可以包括注册、 加入域、 退出域、 升级域、 许可请求其中之一 或任意组合。
一个实施例中, 对于通过广播信道传送的传输流, 可以将 DRM 业务信息封装在承载传输流的传输包中。参考 AVS DRM广播档中所 定义的控制信息结构, 设计一个新的 AVSDRM— control— info— class, 其结构如表 4所示:
AVSDRM control info class的结构
语法 位数 助记符
AVSDRM_ServiceMessage_Container () {
Control_info_class_tag 8 uimsbf
Serial_num 8 uimsbf
Length 16 uimsbf
MessageData ByteArray
} 其中: AVSDRM—ServiceMessage— Container ( )为本类型控制信 息的语法定义, 具体的, Control— info— class— tag字段表示本控制信息 的标签; Length表示紧接着本字段之后 AVS DRM单元容器类的字节 数; MessageData表示具体的消息信息。
新设计的控制信息亦需赋予一个新的标签值。 例如, 可定义 AVSDRM—DomainMessage— Container结构中的 Control— info— class— tag 赋值为 0X04。
MessageData为所携带的 DRM消息信息, 具体的可以为: 加入 域响应消息 (域注册响应消息 )、 域升级响应消息、 退出域响应消息 等。
具体消息格式定义在应用中可参考现有各标准中的 DRM业务消 息定义。
终端设备接收到 DRM业务消息后, 根据具体的消息执行相应的 后续 DRM业务操作。
不同类型消息信息的区分,一种方法是在消息体中设置消息类型 标识, 在 DRM业务信息包含类型标识, 该类型标识指示所述 DRM 业务信息对应的 DRM业务操作; 另一种是消息体中含有消息名, 在 DRM业务信息包含 DRM业务名称,该 DRM业务名称指示所述 DRM 业务信息对应的 DRM业务操作。
一种可能的情况是, 对每一个 section (段)有大小的限制, 而 DRM 信息其大小可能会超过对一个 section 大小的限制。 故在 AVSDRM—DomainMessage— Container 中可以设置序列号 Serial— num 字段, 该字段值对每条 DRM信息初值为 0, 若 DRM信息分割成多 个部分以由多个 AVSDRM—DomainMessage— Container承载, 则各部 分的 Serial— num字段值按序增 1。
一个实施例中 , DRM业务信息可以封装在 DRM信息流中 , DRM 信息流被复用到传输流中, 例如, 由 DRM信息流、 密钥流及媒体流 复用得到传输流。 DRM信息流包含流标识信息, 终端设备可以根据 流标识信息从传输流中提取出 DRM业务信息。 一个具体实例如下:
假设用户终端设备在一个 MPEG广播系统中; 用户请求将一个 终端设备加入到某一个域中; 系统端(服务器)同意终端设备加入域 请求后, 向终端设备发送加入域响应消息。 在终端设备接收到加入域 响应后, 用户向系统端订购一部电影的许可证, 并且订购的是域许可 证。 域许可证中封装有内容密钥及权限信息。 系统端设备将终端设备 所订购的域许可证发送给终端设备。
如图 3所示, 本具体实例中在广播环境下实现 DRM业务的处理 流程如下:
步骤 301、 终端用户通过带外方式向系统端申请加入域。
步骤 302、 系统端通过用户加入域申请后, 将加入域响应消息通 过广播系统发送给终端设备。 具体的, 将域响应消息封装入 DRM信 息流, 再经与密钥流、 媒体流复用合入到传输流中, 由广播信道传送 到终端设备。
具体加入域响应消息釆用 XBS所定义的域注册响应消息, 其定 义如表 5所示:
域注册响应消息
Figure imgf000008_0001
ocsp_response_counter M global, not encrypted
r_length M global, not encrypted
ocsp_response M global, not encrypted
domain—timestamp—start 0 device specific, not encrypted domain_timestamp_end 0 device specific, not encrypted signature—type—flag M global, not encrypted
keyset—block—length M device specific, not encrypted local_domain_key M device specific, encrypted longform_domain_id() 0 device specific, encrypted shortform_domain_id M device specific, encrypted signature—block M device specific, not encrypted 上述域注册响应消息的语义如表 6定义:
表 6 域注册响应消息的语义
fields length type domain_registration_response() {
/* signature protected part starts here */
/* message header starts here /*
message—tag 8 bslbf protocol—version 4 bslbf reserved for fiiture use 4 bslbf unique device number 80 bslbf reserved for fiiture use 4 bslbf device nonce 4 bslbf
Status 8 bslbf flags {
ri certificate counter 3 bslbf ocsp response counter 3 bslbf signature—type—flag 2 bslbf time—stamp—flag 1 bslbf reserved for future use 7 bslbf keyset—block—length 16 uimsbf }
certificate—version 8 bslbf for(cntl=0; cntl < ri_certificate_counter;
cntl++){
c_length 16 uimsbf ri_certificate() 8*c length bslbf
}
for(cnt2=0; cnt2 < ocsp_response_counter;
cnt2++){
r_length 16 uimsbf ocsp_response() 8*r length bslbf
}
if (time_stamp_flag == 0x1) {
domain—timestamp—start 40 mjdutc domain_timestamp_end 40 mjdutc
}
/* message header ends here /*
if (signature—type—flag == 0x0) {
sessionkey_block() 1024 bslbf
} else if (signature—type—flag == 0xl)
sessionkey_block() 2048 bslbf
} else if (signature—type—flag == 0x2)
sessionkey_block() 4096 bslbf
}
/* signature protected part ends here */
if (signature—type—flag == 0x0) {
signature—block 1024 bslbf
} else if (signature—type—flag == 0xl)
signature—block 2048 bslbf
} else if (signature—type—flag == 0x2)
signature—block 4096 bslbf
} 对上述域注册响应消息中各字段解释如下:
在 XBS中, 域注册响应消息中 message— tag字段值设为 0x02. protocol— version字段表示消息的版本信息。 当前 XBS 消息的版 本设置为 0x0。
domain— timestamp— start 、 domain— timestamp— end 字段表示域有 效期的起、 止时间。
signature— type— flag字段表示签名算法的类型, 当前定义了 RSA 1024、 RSA 2048、 RSA 4096三种类型, 分别设值为 0x0、 0x1、 0x2。
local— domain— key字段表示 OMADRM域的域密钥。
在 sessionkey— block中封装有域相关信息 (包括域密钥)且经过 加密保护,只有拥有合法设备的设备私钥才能解析出所加密的域相关 信息。
在 signature— block中封装有系统端对消息的数字签名。
步骤 303、 终端设备收到域注册响应消息后, 在对消息数字签名 验证通过后, 即利用设备私钥解密出 sessionkey— block中的域密钥, 并存入到终端设备的本地安全存储区域中。
步骤 304、用户通过带外方式向系统端订购一部电影的域许可证。 步骤 305、 系统端将用户所订购内容的许可证封装入容器
AVSDRM— Rights— Container 中, 发送给终端设备。 其中, RightsData 字段为域许可证信息,其中封装有所允许的使用权限及内容解密密钥 等信息。
步骤 306、 终端设备接收到许可证信息后即可用域密钥解密出内 容密钥并使用内容密钥解密数字内容。 其中, 先解复用出该电影的媒 体流, 再解密出电影数据的明文, 从而可以由媒体播放器进行播放。
一个实施例中, 在广播系统中, 当相关数据广播发送时, 终端设 备不一定处于开机状态,故而服务器可釆用轮播的方式不断的发送同 样的 DRM业务信息。 终端设备在接收到 DRM业务信息后需判别是 否已收到此项信息 (如依据 AVSDRM— control— info— version字段进行 判断)。 若曾收到相同的信息, 则丟弃; 否则进行相应的处理。
另外, 若终端设备未收到相应的信息, 如在相当长时间内未收到 终端设备加入域的响应时,用户可以带外的方式通知服务器再为终端 设备发送相关的信息。
许可证信息亦可携带在 DRM业务消息中,作为 sessionkey— block 中的数据, 传送给终端设备。
上述实施例中, 各类 DRM 业务信息直接封装入 DRM信息流 AVSDRM— Control— Info— section (; ) 结构中, 另一实施例中, 可以将 不同的 DRM信息分别封装成不同的流。 在 DRM信息流中可以包含 流标识信息, 载有不同 DRM业务信息的各 DRM信息流拥有不同的 流标识。 在传输流中还可以复用有标识信息流, 标识信息流包含有 DRM信息流的流标识信息和 /或描述信息, 终端设备可以从标识信息 流中提取出流标识信息和 /或描述信息, 根据流标识信息和 /或描述信 息从传输流中提取出 DRM业务信息。
一个实施例中,终端设备可以根据流标识从传输流中提取对应的 PES ( Packet Element Stream, 已分组的基本流) 包信息或表信息, 从 PES包信息或表信息中提取 DRM业务信息。
例如, 设计一 DRM控制表, 在表中记录不同的 DRM信息流的 流标识。 所有 DRM控制表信息组成单独的一路流复用到传输流中传 输。 或者, 在现有类型的信息中, 如 PMT ( Program Map Table, 节 目映射表 ) 中记录不同的 DRM信息流的流标识信息。 终端设备根据 DRM控制表(或 PMT ) 中各 DRM信息流的流标识信息 , 从传输流 中提取出相应的 DRM业务信息。 以下以设计新的 DRM控制表信息 为例进行说明:
DRM控制表信息的 PID ( Packet Identifier, 分组标识符 )值既可 以在 PMT中定义, 亦可以设为某一固定值。 可定义 DRM控制表语 法 ^口表 7所示: DRM控制表语法
Figure imgf000013_0001
其中, elementary— PID为流标识信息, 该路流的相关描述信息在 descriptor()中定义。 对 DRM 信息流 descriptor()的定义可如上述 DRM— Service— descriptor()的定义。
在 DRM— Info— section() 中 , 其 它 参 数 的 定 义 与 TS_program_map_section()、 CA_section()中的定义类似。
对于 DRM信息在传输包中的封装可如 PES定义, 这样需要为 DRM信息定义相应的 stream id, 如设定其为 'DRM info' , 具体如
DRM信息在传输包中的封装
Figure imgf000013_0002
packet_start_code_prefix 24 bslbf stream—id 8 uimsbf
PES_packet_length 16 uimsbf if( stream—id != program—stream—map
0 0 0 0 0 0 此^:略
}
else if (stream—id = = program—stream—map
stream—id = = private_stream_2
II stream—id = = ECM
II stream—id = = EMM
stream—id = = program—stream—directory
stream—id = = DSMCC_stream
stream—id = = ITU-T Rec. H.222.1 type E stream
II stream—id = =DRM_info){
for (i=0;i<PES_packet_length;i++){
PES_packet_data_byte 8 bslbf
}
}
else if (steam_id = = padding—stream) {
for (i=0;i<PES_packet_length;i++){
padding—byte 8 bslbf
}
}
}
一个具体实例为:假设设备 DRM控制表信息的 PID值为固定值 0x4。 当前 DRM业务信息定义有两种流类型, 一种是许可证信息流; 一种是域响应信息流。 系统端 (服务器)将许可证信息流标识定为 100; 对 i或响应信息流标识为 101。
系统端在 DRM控制表信息的 DRM— Info— section结构中记录了两 路流的相关信息, 包括流标识及每路流的 DRM— Service— descriptor 在 DRM— Service— descriptor()中记录有某一路流的相关信息。
终端设备在依据 PID值从系统流中提取出 DRM控制表信息后, 再提取出 DRM— Info— section结构中的两路 DRM信息流的相关信息, 从而获知流标识为 100的基本流为许可证信息流;流标识为 101的基 本流为域响应信息流。从而使终端设备可以分别从两路流中解析相关 的 DRM业务信息。
上述实施例中, 具体的 DRM业务信息封装在 PES包中。 另一实 施例中, 可以用表信息格式封装具体的 DRM 业务信息。 例如, 在 AVSDRM— Control— Info— section()格式所定义的表信息中载有 DRM业 务信息, 而该路流的流标识在 DRM控制表信息中获得。
上述实施例中, DRM业务信息在 DRM信息流中承载, 一个实 施例中, DRM 业务信息封装在 Descriptor (描述符) 结构中, 将 Descriptor结构载入 PMT(Program Map Table, 传输流节目映射表)或 CAT ( Conditional Access Table, 条件存取表)信息中,再复用到传输 流中。 Descriptor结构中可以携带 Descriptor标识信息, Descriptor标 识信息指示 Descriptor结构中封装的信息为 DRM业务信息。
DRM业务信息在 descritptor结构中封装, 从而可以在其它类型 信息流 (如 PMT CAT ) 中携带。 在 AVS DRM 标准中定义了 AVSDRM descriptorQ, 其语法定义如表 9所示:
AVSDRM— descriptor()语法
语法 位数 助记符
AVSDRM descriptor() {
descriptor tag 8 uimsbf descriptor length 8 uimsbf
AVSDRM Descriptor ID 32 uimsbf
AVSDRM Data length 16 uimsbf for ( i=0; i< N; i++) {
AVSDRM Data
I
isSigned 8 uimsbf
Signature ByteAr
NumCerts 8 uimsbf for (i=0; i<numCerts;i++) {
CertType 8 uimsbf
Figure imgf000016_0001
其中 , AVS DRM数据字段( AVSDRM Data )的含义是: AVS DRM 数据描述保护机理以及特别的使用规则。 其当前不涉及 DMR业务信 息。
本发明实施例中, 一种方法是将业务消息信息 (如类似于 AVSDRM—ServiceMessage— Container 所定义的信息) 利用现有的 DRMdescriptor来携带; 另一种是单独设计一种新的 descriptor类型, 如表 10所示:
descriptor类型语法
语法 位数 助记符
DRM_Service_descriptor() {
descriptor—tag 8 uimsbf descriptor—length 8 uimsbf
Message—Length 8 uimsbf for ( i=0; i< Message—Length; i++) {
Service_Message_byte 8 uimsbf
}
}
其中 , DRM— Service— descriptor类型的 descriptor,其 descriptor tag 标识需要给出定义, 如可定义其值为 64。
一个具体实例为: 假设系统端设备(服务器)通知相关终端设备 执行域升级操作, 具体步骤如图 4所示, 包括:
步骤 401、 系统端设备生成一个 DRM— Service— descriptor, 其中 封装有域升级信息, 包括原域标识, 新域标识, 升级域密钥等信息; 步骤 402、系统端设备将 DRM— Service— descriptor载入 PMT信息 中广播发送给终端设备。 步骤 403 、 终端 设备接 收到 PMT 后 , 提取 出 DRM— Service— descriptor信息, 若判断终端设备所属域与域升级信息 中的原域标识匹配, 则完成域升级相关操作。
一个实施例中, DRM 业务信息可以封装在 ECM ( Entitlement Control Message, 权限控制信息)或 EMM ( Entitlement Management Message,权限管理信息)结构中,并将 ECM或 EMM复用到传输流。 例如,在数字电视系统中 , DRM业务信息在 EMM或 ECM报文中携 带。
在 MPEG SYS标准中, 对 ECM/EMM格式未定义, 具体格式由 系统厂商自定义。 例如, 用户通过带外方式请求加入域; 系统端设备 (服务器)将加入域响应消息封装在 EMM中发送给用户终端设备。
例如, 在 EMM中可以包含如下信息:
EMM{
CARD ID 80位 uimsbf
Device—id 24位 uimsbf
Product—id 16位 uimsbf
Message—length 16位 bslbf
ServiceMessage 8*message_length位 bslbf 终端设备接收到 EMM后提取出加入域响应消息并完成加入域后 续操作。
基于同一发明构思, 本发明实施例还提供一种通信设备, 其结构 如图 5所示, 包括: 接收模块 501、 提取模块 502、 执行模块 503; 其中, 接收模块 501 , 用于接收通过广播信道传送的传输流, 该传输 流中封装有 DRM业务信息; 提取模块 502, 用于从接收的传输流中 提取出 DRM业务信息; 执行模块 503 , 用于根据提取的 DRM业务 信息执行对应的 DRM业务操作。
一个实施例中, DRM信息流包含有流标识信息, 提取模块 502 还可以用于根据流标识信息从所述传输流中提取出所述 DRM业务信 息。
接收的传输流中还可以复用有标识信息流, 标识信息流包含有
DRM信息流的流标识信息和 /或描述信息, 提取模块 502还可以用于 从标识信息流中提取出流标识信息和 /或描述信息, 居流标识信息 和 /或描述信息从传输流中提取出 DRM业务信息。
提取模块 502还可以用于根据流标识从传输流中提取对应的 PES 包信息或表信息, 从 PES包信息或表信息中提取 DRM业务信息。
基于同一发明构思, 本发明实施例还提供又一种通信设备, 其结 构如图 6所示, 包括: 封装模块 601、 发送模块 602; 其中, 封装模 块 601 , 用于在传输流中封装 DRM业务信息; 发送模块 602, 用于 通过广播信道传送封装有 DRM业务信息的传输流。
一个实施例中, 封装模块 601还可以用于将 DRM业务信息封装 在 DRM信息流中, 将 DRM信息流复用到传输流中。
封装模块 601还可以用于将 DRM业务信息封装在 Descriptor结 构中,将 Descriptor结构载入 PMT或 CAT信息中并复用到传输流中。
封装模块 601还可以用于将 DRM业务信息封装在 ECM或 EMM 结构中, 将 ECM或 EMM复用到传输流中。
基于同一发明构思, 本发明实施例还提供一种通信系统, 其结构 如图 7所示, 包括: 服务器 701、 终端设备 702; 其中, 服务器 701 , 用于在传输流中封装 DRM业务信息, 以及通过广播信道发送该传输 流; 终端设备 702, 用于接收服务器 701发送的传输流, 从接收的传 输流中提取出 DRM业务信息;根据 DRM业务信息执行对应的 DRM 业务操作。
一个具体实例如图 8所示, 通信系统中的服务器包括 DRM业务 信息产生模块 801、 密钥信息产生模块 802、 媒体信息产生模块 803、 复用模块; 由复用模块 804将 DRM业务信息流、 密钥流、 媒体流复 用生成传输流, 由广播信道传送到终端设备。 这些信息流的分类是逻 辑上的划分, 在传输流中, DRM业务信息与密钥可能会是同一路基 本流。 终端设备包括解复用模块 805、业务处理模块 806、解密模块 807、 解扰模块 808; 由解复用模块 805对系统流进行解析, 将所解析出的 各路信息流分别送与业务处理模块 806、解密模块 807、解扰模块 808 进行处理。 其中, 业务处理模块 806对业务信息进行解析, 并依据业 务信息控制终端执行相关的操作,包括其与解密模块 807交互相关的 信息, 例如, 在提取出业务信息中的密钥信息后交由解密模块 807完 成相关的解密操作;业务处理模块 806执行许可证验证的过程亦可依 赖于解密模块完成。
解密模块 807 可以解密出密钥流中的内容加扰密钥并交由解扰 模块 808 对所收到的已加扰媒体流进行解扰从而得到数字内容的明 文。
本领域普通技术人员可以理解上述实施例方法中的全部或部分 步骤是可以通过程序来指令相关的硬件完成 ,该程序可以存储于一计 算机可读存储介质中,存储介质可以包括: ROM( Read-Only Memory, 只读存储器)、 RAM (Random- Access Memory, 随机存取存储器)、 磁 盘或光盘等。
本发明实施例中, 服务器在传输流中封装 DRM业务信息, 将所 述传输流通过广播信道发送给终端设备; 终端设备接收所述传输流, 从所述传输流中提取出所述 DRM业务信息;终端设备根据所述 DRM 业务信息执行对应的 DRM业务操作; 以此在广播通信环境下实现各 种 DRM业务, 包括实现域相关业务; 利用本发明实施例方法, 可以 对当前普遍使用的数字电视系统进行 DRM改造, 进而可在数字电视 系统中开展丰富的 DRM业务, 对运营商及消费者带来更多的业务选 择。 脱离本发明的精神和范围。 这样, 倘若对本发明的这些修改和变型属 于本发明权利要求及其等同技术的范围之内,则本发明也意图包含这 些改动和变型在内。

Claims

权利要求
1、 一种广播环境下 DRM业务的实现方法, 其特征在于, 该方 法包括:
接收通过广播信道传送的传输流, 所述传输流中封装有 DRM业 务信息;
从所述传输流中提取出所述 DRM业务信息;
根据所述 DRM业务信息执行对应的 DRM业务操作。
2、 如权利要求 1所述广播环境下 DRM业务的实现方法, 其特 征在于, 所述 DRM业务信息封装在 DRM信息流中, 所述 DRM信 息流被复用到所述传输流中。
3、 如权利要求 2所述广播环境下 DRM业务的实现方法, 其特 征在于, 所述 DRM信息流包含有流标识信息, 根据所述流标识信息 从所述传输流中提取出所述 DRM业务信息。
4、 如权利要求 3所述广播环境下 DRM业务的实现方法, 其特 征在于, 所述传输流中还复用有标识信息流, 所述标识信息流包含有 DRM信息流的流标识信息和 /或描述信息 , 从所述标识信息流中提取 出所述流标识信息和 /或描述信息, 4艮据所述流标识信息和 /或描述信 息从所述传输流中提取出所述 DRM业务信息。
5、 如权利要求 3所述广播环境下 DRM业务的实现方法, 其特 征在于, 根据所述流标识从所述传输流中提取所述 DRM业务信息包 括: 根据所述流标识从所述传输流中提取对应的 PES 包信息或表信 息, 从所述 PES包信息或表信息中提取所述 DRM业务信息。
6、 一种广播环境下 DRM业务的实现方法, 其特征在于, 该方 法包括:
在传输流中封装 DRM业务信息;
通过广播信道传送所述传输流, 使得终端根据所述传输流中的 DRM业务信息执行对应的 DRM业务操作。
7、 如权利要求 6所述广播环境下 DRM业务的实现方法, 其特 征在于, 将所述 DRM业务信息封装在 DRM信息流中, 将 DRM信 息流复用到所述传输流中。
8、 如权利要求 6所述广播环境下 DRM业务的实现方法, 其特 征在于, 将所述 DRM 业务信息封装在 Descriptor 结构中, 将所述 Descriptor结构载入 PMT或 CAT信息中并复用到所述传输流中。
9、 如权利要求 6所述广播环境下 DRM业务的实现方法, 其特 征在于, 将所述 DRM业务信息封装在 ECM或 EMM结构中, 将所 述 ECM或 EMM复用到所述传输流中。
10、 如权利要求 6至 9任一项所述广播环境下 DRM业务的实现 方法, 其特征在于, 所述 DRM业务信息包括注册信息、加入域信息、 退出域信息、 升级域信息、 许可请求信息其中之一或任意组合。
11、 一种通信设备, 其特征在于, 包括:
接收模块, 用于接收通过广播信道传送的传输流, 所述传输流中 封装有 DRM业务信息;
提取模块, 用于从所述传输流中提取出所述 DRM业务信息; 执行模块, 用于根据所述 DRM业务信息执行对应的 DRM业务 操作。
12、 如权利要求 11所述通信设备, 其特征在于, 所述 DRM信 息流包含有流标识信息,所述提取模块进一步用于根据所述流标识信 息从所述传输流中提取出所述 DRM业务信息。
13、 如权利要求 12所述通信设备, 其特征在于, 所述传输流中 还复用有标识信息流, 所述标识信息流包含有 DRM信息流的流标识 信息和 /或描述信息, 所述提取模块进一步用于从所述标识信息流中 提取出所述流标识信息和 /或描述信息, 根据所述流标识信息和 /或描 述信息从所述传输流中提取出所述 DRM业务信息。
14、 如权利要求 13所述通信设备, 其特征在于, 所述提取模块 进一步用于根据所述流标识从所述传输流中提取对应的 PES 包信息 或表信息, 从所述 PES包信息或表信息中提取所述 DRM业务信息。
15、 一种通信设备, 其特征在于, 包括:
封装模块, 用于在传输流中封装 DRM业务信息;
发送模块, 用于通过广播信道传送所述传输流。
16、 如权利要求 15所述通信设备, 其特征在于, 所述封装模块 进一步用于将所述 DRM业务信息封装在 DRM信息流中, 将 DRM 信息流复用到所述传输流中。
17、 如权利要求 15所述通信设备, 其特征在于, 所述封装模块 进一步用于将所述 DRM业务信息封装在 Descriptor结构中, 将所述 Descriptor结构载入 PMT或 CAT信息中并复用到所述传输流中。
18、 如权利要求 15所述通信设备, 其特征在于, 所述封装模块 进一步用于将所述 DRM业务信息封装在 ECM或 EMM结构中, 将 所述 ECM或 EMM复用到所述传输流中。
PCT/CN2008/072245 2007-09-17 2008-09-02 Procédé, dispositif et système pour réaliser un service de gestion des droits numériques dans un environnement de diffusion WO2009039748A1 (fr)

Priority Applications (1)

Application Number Priority Date Filing Date Title
EP08800757A EP2204737A4 (en) 2007-09-17 2008-09-02 METHOD, DEVICE AND SYSTEM FOR REALIZING DIGITAL RIGHTS MANAGEMENT SERVICE IN A BROADCAST ENVIRONMENT

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN200710154636.1 2007-09-17
CN200710154636A CN101394297B (zh) 2007-09-17 2007-09-17 广播环境下drm业务的实现方法、设备及系统

Publications (1)

Publication Number Publication Date
WO2009039748A1 true WO2009039748A1 (fr) 2009-04-02

Family

ID=40494389

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2008/072245 WO2009039748A1 (fr) 2007-09-17 2008-09-02 Procédé, dispositif et système pour réaliser un service de gestion des droits numériques dans un environnement de diffusion

Country Status (3)

Country Link
EP (1) EP2204737A4 (zh)
CN (1) CN101394297B (zh)
WO (1) WO2009039748A1 (zh)

Families Citing this family (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101667995B (zh) * 2008-09-03 2013-01-16 联想(北京)有限公司 数字版权管理方法、系统、硬件安全单元及计算机
FR2964288A1 (fr) * 2010-08-26 2012-03-02 France Telecom Acquisition de droits d'acces a un contenu protege sans intervention de l'utilisateur.
CN105635305A (zh) * 2016-01-19 2016-06-01 中国传媒大学 一种统一内容标签的推送方法及服务器
CN106254898A (zh) * 2016-08-15 2016-12-21 杭州当虹科技有限公司 一种ts包插入互动广告的方法
CN108882026A (zh) * 2018-06-15 2018-11-23 深圳市茁壮网络股份有限公司 一种基于ts流的大文件传输方法及装置
CN114189713A (zh) * 2021-12-21 2022-03-15 杭州当虹科技股份有限公司 一种内容加密的方法

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1946166A (zh) * 2005-10-04 2007-04-11 三星电子株式会社 数字广播条件接收终端及方法
US20070192875A1 (en) * 2006-02-15 2007-08-16 Samsung Electronics Co., Ltd. Method and apparatus for importing content having plurality of parts

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1946166A (zh) * 2005-10-04 2007-04-11 三星电子株式会社 数字广播条件接收终端及方法
US20070192875A1 (en) * 2006-02-15 2007-08-16 Samsung Electronics Co., Ltd. Method and apparatus for importing content having plurality of parts

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
See also references of EP2204737A4 *

Also Published As

Publication number Publication date
EP2204737A4 (en) 2010-10-13
CN101394297A (zh) 2009-03-25
EP2204737A1 (en) 2010-07-07
CN101394297B (zh) 2012-09-05

Similar Documents

Publication Publication Date Title
JP4311899B2 (ja) コンテンツの配信および保護を行なう方法および装置
US7299362B2 (en) Apparatus of a baseline DVB-CPCM
EP1430720B1 (en) Apparatus of a flexible and common ipmp system for mpeg-2 content distribution and protection
US9479825B2 (en) Terminal based on conditional access technology
KR101518086B1 (ko) 데이터 처리 방법 및 iptv 수신 디바이스
JP3695992B2 (ja) 放送受信装置及びコンテンツ利用制御方法
EP2772062B1 (en) Constructing a transport stream
WO2002100037A1 (fr) Appareil et procede destines a un systeme ipmp(gestion et protection de la propriete intellectuelle) souple et commun de fourniture et de protection de contenu
KR20110004333A (ko) 스트림에서의 레코딩가능한 콘텐트의 프로세싱
JP2003218852A (ja) ネットワーク用のコンテンツ保護及びコピー管理システム
WO2009039748A1 (fr) Procédé, dispositif et système pour réaliser un service de gestion des droits numériques dans un environnement de diffusion
KR20110004332A (ko) 스트림에서의 레코딩가능한 콘텐트의 프로세싱
US20110113443A1 (en) IP TV With DRM
WO2017092687A1 (zh) 一种支持数字版权管理(drm)的媒体网关/终端实现方法及其设备
WO2010069134A1 (zh) 数据文件解密方法、解密装置和数据广播系统
Hwang Content and service protection for IPTV
KR100916228B1 (ko) 페이 퍼 뷰 및 서비스 기반 방송 가입자를 위한 sek와pek의 관리 방법 및 그 통신 시스템
KR100497336B1 (ko) 공개키 기반 구조의 제한 수신 시스템에서의 자격관리메시지 변환 방법
US9294788B2 (en) Method, cryptographic system and security module for descrambling content packets of a digital transport stream
CN107547946B (zh) 在互联网数据通信网络上传输流媒体数字内容的方法及介质
EP2366250A1 (en) Method and apparatus for secure distribution of audiovisual data encapsulated according to a plurality of transport protocols
CN101521570A (zh) 一种实现iptv组播业务媒体安全的方法、系统及设备
Hwang et al. Protection of MPEG‐2 Multicast Streaming in an IP Set‐Top Box Environment
Jain Fwd: ByDesign iCAS Feedback on the TRAI STB Interoperability Consultation Paper
Noore Secure distribution of heterogeneous multimedia content on the internet

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 08800757

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

WWE Wipo information: entry into national phase

Ref document number: 2008800757

Country of ref document: EP