CN101141242B - Method and system for processing authority information - Google Patents
Method and system for processing authority information Download PDFInfo
- Publication number
- CN101141242B CN101141242B CN 200610127771 CN200610127771A CN101141242B CN 101141242 B CN101141242 B CN 101141242B CN 200610127771 CN200610127771 CN 200610127771 CN 200610127771 A CN200610127771 A CN 200610127771A CN 101141242 B CN101141242 B CN 101141242B
- Authority
- CN
- China
- Prior art keywords
- information
- consumption
- license
- original
- state information
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Images
Landscapes
- Storage Device Security (AREA)
Abstract
本发明公开了一种处理权限信息的方法,以便能够正确的记录和使用消费状态信息;该方法包括:根据许可的原始权限信息消费内容;对于消耗类权限,根据消费内容的情况记录相应的消费状态信息,并将该消费状态信息与所述原始权限信息关联。本发明同时公开一种终端设备、服务器和权限信息管理系统。
The invention discloses a method for processing authority information so as to correctly record and use the consumption status information; the method includes: consuming content according to the licensed original authority information; for consumption authority, recording the corresponding consumption according to the situation of consumption content status information, and associate the consumption status information with the original permission information. The invention also discloses a terminal device, a server and a rights information management system.
Description
技术领域 technical field
本发明涉及数字版权管理技术领域,尤其涉及一种处理权限信息的方法及系统。 The invention relates to the technical field of digital rights management, in particular to a method and system for processing rights information. the
背景技术Background technique
数字版权管理(Digital Rights Management,DRM)主要通过权利限制和内容保护方案控制数字内容的使用,保护内容所有者的合法权益。数字内容的发行者(Content Issuer,CI)将数字内容加密后,用户将加密的数字内容数据包下载到终端设备上;版权发行者(Rights Issuer,RI)负责分发与数字内容相对应的许可证,其中包括内容密钥及对应的权限,该内容密钥用于解密数字内容。终端设备只有同时拥有内容数据包(其中包含解密数字内容所必须的信息)和许可证,才能正常使用所购买的数字内容。DRM代理(DRM Agent)利用终端设备的公钥解密出许可证密钥,由该许可证密钥得到许可证中的内容密钥以解密数字内容,并根据许可证中的权限信息控制用户对数字内容的具体使用。 Digital Rights Management (DRM) mainly controls the use of digital content through rights restrictions and content protection schemes to protect the legitimate rights and interests of content owners. After the digital content issuer (Content Issuer, CI) encrypts the digital content, the user downloads the encrypted digital content data package to the terminal device; the copyright issuer (Rights Issuer, RI) is responsible for distributing the license corresponding to the digital content , which includes the content key and the corresponding permission, the content key is used to decrypt the digital content. The purchased digital content can only be used normally by the terminal device only if it has both the content data package (which contains the information necessary for decrypting the digital content) and the license. The DRM agent (DRM Agent) uses the public key of the terminal device to decrypt the license key, obtains the content key in the license from the license key to decrypt the digital content, and controls the user's access to the digital content according to the permission information in the license. specific use of the content. the
许可证中的权限主要包括权利和限制两类。根据所包含的限制的不同分为有状态许可和无状态许可;所述有状态许可为含有次数(count)、时间(包括时间段、累计时间等)等状态限制的许可;所述无状态许可为许可证中的所有权利下都不包含状态限制的许可。 Permissions in licenses mainly include rights and restrictions. According to the different restrictions included, it is divided into stateful license and stateless license; the stateful license is a license that contains state restrictions such as times (count), time (including time period, cumulative time, etc.); the stateless license License without state restrictions under all rights in this License. the
根据权利所包含的限制元素类型的不同,可以将权利分为非消耗类权利和消耗类权利。所谓非消耗类权利,即对该权利的使用不会影响后续的使用,如不包含限制元素的权利或包含时间段、空间范围、系统环境等限制的权利;消耗类权利,即该权利会随着使用的增加而逐渐被消耗,如:包含累计时间、次数等限制的权利。 According to the different types of restrictive elements contained in rights, rights can be divided into non-consumable rights and consumable rights. The so-called non-consumable right means that the use of the right will not affect the subsequent use, such as the right that does not contain restrictive elements or the right that includes restrictions such as time period, space range, and system environment; It is gradually consumed with the increase of use, such as: the right to include restrictions on accumulated time and times. the
许可的共享方式包括许可的转移、拷贝、临时共享等。现有技术要求许可(Rights Object,RO)转移时携带许可证标识ROID、原始权限信息、消费状态信息和内容密钥等信息。但是,如何描述消费状态信息,以及如何在存储和转移RO的过程中表示消费状态信息与原始权限信息之间的对应关系成为急待解决的问题。 The license sharing methods include license transfer, copying, temporary sharing, etc. Existing technology requires license (Rights Object, RO) transfer to carry license identification ROID, original rights information, consumption status information and content key and other information. However, how to describe the consumption state information, and how to represent the corresponding relationship between the consumption state information and the original authority information in the process of storing and transferring the RO has become an urgent problem to be solved. the
发明内容Contents of the invention
本发明提供一种实现权限信息交互的方法及系统,以便能够正确的记录和使用消费状态信息。 The invention provides a method and system for realizing authority information interaction, so as to correctly record and use consumption state information. the
本发明提供以下技术方案: The present invention provides the following technical solutions:
一种处理权限信息的方法,该方法包括步骤: A method for processing permission information, the method includes the steps of:
根据许可的原始权限信息消费内容; Consume content in accordance with licensed original rights information;
对于消耗类权限,根据消费内容的情况记录相应的消费状态信息,并将该消费状态信息与所述原始权限信息关联,其中所述消费状态信息通过在权利描述语言中增加状态信息元素来描述,该状态信息元素定义在传递许可的消息中或定义在许可中; For consumption rights, record the corresponding consumption status information according to the situation of consumption content, and associate the consumption status information with the original rights information, wherein the consumption status information is described by adding status information elements in the rights description language, The state information element is defined in the message conveying the permission or defined in the permission;
再次消费时,当所述消费状态信息为许可的当前可用状态信息时,根据所述消费状态信息消费内容,或者,当所述消费状态信息为许可的已消耗的权限信息时,根据所述消费状态信息和与之关联的原始权限信息消费内容。 When consuming again, when the consumption status information is the currently available status information of the license, consume the content according to the consumption status information, or, when the consumption status information is the consumed rights information of the license, according to the consumption status information The state information and the original rights information associated therewith consume the content. the
根据上述方法: According to the above method:
所述消费状态信息为许可的当前可用状态信息;或者,所述消费状态信息为许可的已消耗的权限信息。 The consumption state information is the current available state information of the license; or, the consumption state information is the consumed right information of the license. the
所述消费状态信息与原始权限信息通过标识相关联。 The consumption state information is associated with the original authority information through identification. the
所述原始权限信息中的各权限信息项分别设置有唯一的标识,消费状态信息中的消费状态信息项引用所述唯一的标识与对应的权限信息项关联。 Each permission information item in the original permission information is provided with a unique identifier, and the consumption status information item in the consumption status information refers to the unique identifier to associate with the corresponding permission information item. the
所述原始权限信息和消费状态信息记录在同一文件中;或者,所述原始权限信息与消费状态信息记录在不同的文件中。 The original authority information and the consumption state information are recorded in the same file; or, the original authority information and the consumption state information are recorded in different files. the
一种处理权限信息的方法,该方法包括步骤: A method for processing permission information, the method includes the steps of:
请求消费由许可的消耗类权限控制的内容; requesting consumption of content controlled by the licensed consumption class rights;
对于消耗类权限,确定是否存在与所述许可的原始权限信息关联的消费状态信息,若是,则根据权限消费内容,否则,根据所述原始权限信息消费内容并创建与所述原始权限信息关联的消费状态信息;以及 For consumption rights, determine whether there is consumption status information associated with the original rights information of the license, if yes, consume the content according to the rights, otherwise, consume the content according to the original rights information and create a consumption status information; and
根据用户消费内容的情况更新所述消费状态信息; Update the consumption status information according to the situation of the user's consumption of content;
其中所述消费状态信息通过在权利描述语言中增加状态信息元素来描述,该状态信息元素定义在传递许可的消息中或定义在许可中。 The consumption state information is described by adding a state information element in the right description language, and the state information element is defined in the message transferring the license or defined in the license. the
根据上述方法: According to the above method:
所述消费状态信息为许可的当前可用状态信息;或者,所述消费状态信息为许可的已消耗的权限信息。 The consumption state information is the current available state information of the license; or, the consumption state information is the consumed right information of the license. the
所述根据权限消费内容是指当所述消费状态信息为许可的当前可用状态信息时,根据所述消费状态信息消费内容;或者,所述根据权限消费内容是指当所述消费状态信息为许可的已消耗的权限信息时,根据所述消费状态信息和与之关联的原始权限信息消费内容。 The consuming content according to the authority refers to consuming content according to the consumption state information when the consumption state information is the current available state information of the license; or, the consuming content according to the authority means when the consumption state information is the licensed state information. When using the consumed rights information, the content is consumed according to the consumption state information and the original rights information associated therewith. the
所述消费状态信息与原始权限信息通过标识相关联。 The consumption state information is associated with the original authority information through identification. the
所述原始权限信息中的各权限信息项分别设置有唯一的标识,消费状态信息中的消费状态信息项引用所述唯一的标识与对应的权限信息项关联。 Each permission information item in the original permission information is provided with a unique identifier, and the consumption status information item in the consumption status information refers to the unique identifier to associate with the corresponding permission information item. the
所述原始权限信息和消费状态信息记录在同一文件中;或者,所述原始权限信息与消费状态信息记录在不同的文件中。 The original authority information and the consumption state information are recorded in the same file; or, the original authority information and the consumption state information are recorded in different files. the
一种传送权限信息的方法,该方法包括步骤: A method for transmitting permission information, the method comprising the steps of:
在第一设备上将许可的消耗类权限的原始权限信息和对应的消费状态信息进行关联; Associating the original permission information of the licensed consumption permission with the corresponding consumption status information on the first device;
所述第一设备向第二设备发送所述原始权限信息和与之相关联的消费状态信息; The first device sends the original permission information and the consumption state information associated therewith to the second device;
所述第二设备接收并保存所述原始权限信息和与之相关联的消费状态信息; The second device receives and saves the original permission information and the consumption state information associated therewith;
其中所述消费状态信息通过在权利描述语言中增加状态信息元素来描述, 该状态信息元素定义在传递许可的消息中或定义在许可中。 Wherein the consumption state information is described by adding a state information element in the right description language, and the state information element is defined in the message for transferring the license or defined in the license. the
根据上述方法: According to the above method:
所述第二设备根据所保存的原始权限信息及消费状态信息控制内容的后续消费。 The second device controls the subsequent consumption of content according to the stored original rights information and consumption state information. the
所述消费状态信息为许可的当前可用状态信息;或者,所述消费状态信息为许可的已消耗的权限信息。 The consumption state information is the current available state information of the license; or, the consumption state information is the consumed right information of the license. the
所述消费状态信息与原始权限信息通过标识相关联。 The consumption state information is associated with the original authority information through identification. the
所述原始权限信息中的各权限信息项分别设置有唯一的标识,消费状态信息中的消费状态信息项引用所述唯一的标识与对应的权限信息项关联。 Each permission information item in the original permission information is provided with a unique identifier, and the consumption status information item in the consumption status information refers to the unique identifier to associate with the corresponding permission information item. the
一种终端设备,包括: A terminal device comprising:
用于根据许可的原始权限信息和与之相关联的消费状态信息控制对内容的消费的模块; A module for controlling the consumption of content based on licensed original rights information and consumption state information associated therewith;
用于根据用户按消耗类权限消费内容的情况记录相应的消费状态信息,并将该消费状态信息与所述原始权限信息关联的模块; A module for recording the corresponding consumption status information according to the situation of the user consuming content according to the consumption permission, and associating the consumption status information with the original permission information;
用于接收或发送所述原始权限信息和与之相关联的消费状态信息的模块; A module for receiving or sending the original permission information and the consumption state information associated therewith;
其中所述消费状态信息通过在权利描述语言中增加状态信息元素来描述,该状态信息元素定义在传递许可的消息中或定义在许可中。 The consumption state information is described by adding a state information element in the right description language, and the state information element is defined in the message transferring the license or defined in the license. the
一种服务器,包括: A server comprising:
用于解析许可的消费状态信息,并将该消费状态信息与消耗类权限的原始权限信息关联的模块; A module for parsing the consumption status information of the license and associating the consumption status information with the original permission information of the consumption permission;
用于接收或发送所述原始权限信息和与之相关联的消费状态信息的模块; A module for receiving or sending the original permission information and the consumption state information associated therewith;
其中所述消费状态信息通过在权利描述语言中增加状态信息元素来描述,该状态信息元素定义在传递许可的消息中或定义在许可中。 The consumption state information is described by adding a state information element in the right description language, and the state information element is defined in the message transferring the license or defined in the license. the
所述服务器为许可服务器。 The server is a license server. the
一种权限信息管理系统,包括:第一设备,用于记录许可的消费状态信息,将许可的消耗类权限的原始权限信息和对应的消费状态信息进行关联,并向第二设备发送所述原始权限信息和与之相关联的消费状态信息; A rights information management system, comprising: a first device, configured to record licensed consumption state information, associate original rights information of licensed consumption rights with corresponding consumption state information, and send the original Permission information and consumption status information associated with it;
第二设备,用于接收并保存所述原始权限信息和与之相关联的消费状态信息; The second device is used to receive and save the original permission information and consumption status information associated therewith;
其中所述消费状态信息通过在权利描述语言中增加状态信息元素来描述,该状态信息元素定义在传递许可的消息中或定义在许可中。 The consumption state information is described by adding a state information element in the right description language, and the state information element is defined in the message transferring the license or defined in the license. the
其中,所述消费状态信息与原始权限信息通过标识相关联。 Wherein, the consumption state information is associated with the original authority information through identification. the
所述原始权限信息中的各权限信息项分别设置有唯一的标识,消费状态信息中的消费状态信息项引用所述唯一的标识与对应的权限信息项关联。 Each permission information item in the original permission information is provided with a unique identifier, and the consumption status information item in the consumption status information refers to the unique identifier to associate with the corresponding permission information item. the
所述第一设备和第二设备为终端设备或服务器。 The first device and the second device are terminal devices or servers. the
所述服务器为许可服务器。 The server is a license server. the
本发明有益效果如下: The beneficial effects of the present invention are as follows:
1、本发明在终端设备根据许可的权限消费内容时,创建消费状态信息以记录对内容的消费情况,且所记录的消费状态信息与对应的原始权限信息相关联,从而正确地控制内容的后续消费。 1. When the terminal device consumes content according to the licensed authority, the present invention creates consumption state information to record the consumption of the content, and the recorded consumption state information is associated with the corresponding original authority information, so as to correctly control the follow-up of the content. Consumption. the
2、在本发明中,两个实体间在执行许可的转移、拷贝、备份等需要交互权限信息的操作时,能够在消息交互的过程中,保证许可的原始权限信息与消费状态信息的准确关联,从而提高了DRM系统的安全性。 2. In the present invention, when two entities perform license transfer, copy, backup and other operations that require the exchange of permission information, the accurate association between the original permission information of the license and the consumption status information can be ensured in the process of message interaction , thereby improving the security of the DRM system. the
附图说明Description of drawings
图1为本发明实施例中许可的消费状态信息与原始权限信息关联的示意图; Figure 1 is a schematic diagram of the association between licensed consumption status information and original authority information in an embodiment of the present invention;
图2为本发明实施例中权限信息管理系统的结构示意图; Fig. 2 is a schematic structural diagram of a rights information management system in an embodiment of the present invention;
图3为本发明实施例中终端设备的结构示意图; Fig. 3 is a schematic structural diagram of a terminal device in an embodiment of the present invention;
图4为本发明实施例中终端设备使用许可消费内容的流程图; Fig. 4 is the flow chart of terminal device use license consumption content in the embodiment of the present invention;
图5为本发明实施例中终端设备相互之间传递许可的流程图; Fig. 5 is the flow chart of transferring license between terminal devices in the embodiment of the present invention;
图6为本发明实施例中服务器的结构示意图; Fig. 6 is the structural representation of server in the embodiment of the present invention;
图7为本发明实施例中终端设备在服务器上备份许可的流程图。 Fig. 7 is a flow chart of a terminal device backing up a license on a server in an embodiment of the present invention. the
具体实施方式Detailed ways
本发明在权利描述语言(REL)中增加用于描述消费状态信息的元素;并且,通过为权利描述语言(REL)的权限元素(permission/constraint)增加标识属性(id)和标识引用属性(idref),来实现消费状态信息与原始权限信息的匹配。 The present invention adds elements for describing consumption status information in the rights description language (REL); and, by adding an identification attribute (id) and an identification reference attribute (idref ) to match the consumption status information with the original permission information. the
所述消费状态信息指示许可的消耗类权限的原始权限信息被消费后的状态,以OMA(Open Mobile Alliance,开放移动联盟)DRM为例,所述消费状态信息可通过在REL中增加状态信息<stateInfo>元素来描述,该元素可以定义在传递许可RO(Rights Object)的消息中,也可以定义在许可RO中。 The consumption state information indicates the state after the consumption of the original authority information of the consumption type authority of the license. Taking OMA (Open Mobile Alliance, Open Mobile Alliance) DRM as an example, the consumption state information can be added by adding the state information < stateInfo> element to describe, this element can be defined in the message that transmits the permission RO (Rights Object), or can be defined in the permission RO. the
例如,在传递权限相关信息的消息中定义消费状态信息字段: For example, define the consumption status information field in the message that transmits permission-related information:
<element name=″stateInfo″type=″o-ex:constraintType″minOccurs=″0″maxOccurs=″unbounded″/> <element name="stateInfo"type="o-ex:constraintType"minOccurs="0"maxOccurs="unbounded"/>
或者,在许可RO中定义用于记录消费状态信息的元素,其中包含一个或多个限制项,且每一个限制项(如次数count/时间间隔interval等)的标识引用属性idref指示该消费状态信息中的限制项所关联的原始权限信息中的限制项。具体定义如下: Alternatively, an element used to record consumption status information is defined in the license RO, which contains one or more restriction items, and the identification reference attribute idref of each restriction item (such as count/time interval, etc.) indicates the consumption status information The restricted items in the original permission information associated with the restricted items in . The specific definition is as follows:
<!ELEMENT oma-dd:stateInfo(o-dd:count?,oma-dd:timed-count?,o-dd:datetime?,o-dd:accumulated?)> <! ELEMENT oma-dd:stateInfo(o-dd:count?, oma-dd:timed-count?, o-dd:datetime?, o-dd:accumulated?)>
或者,用于记录消费状态信息的元素中包含限制<constraint>子元素,由<constraint>子元素进一部包含具体的限制项。 Alternatively, the element used to record the consumption state information contains a restriction <constraint> sub-element, and the <constraint> sub-element further contains specific restriction items. the
<!ELEMENT oma-dd:stateInfo(o-ex:constraint?)> <! ELEMENT oma-dd:stateInfo(o-ex:constraint?)>
以限制项count、interval为例,分别为其定义标识属性id和标识引用属性idref;所述标识属性id用于在一个许可证内部唯一地标识一个原始权限信息项,所述标识引用属性idref用于在消费状态信息项中引用对应的原始权限信息项。消费状态信息项中的<count>项的取值可以表示已消耗的次数,也可以表示剩余的次数,具体可以由不同的应用场景自行定义,也可以由<stateInfo>的属性决定。 Taking the restriction items count and interval as an example, define the identification attribute id and the identification reference attribute idref for them respectively; the identification attribute id is used to uniquely identify an original permission information item within a license, and the identification reference attribute idref is used To refer to the corresponding original permission information item in the consumption status information item. The value of the <count> item in the consumption state information item can indicate the number of times consumed, or the remaining number of times, which can be defined by different application scenarios or determined by the attribute of <stateInfo>. the
<!ATTLIST o-dd:count o-ex:id ID#IMPLIED>//标识属性id适用<count>的父元素<constraint>属于原始权限信息的情形,用于唯一地标识该原始权限信息项。 <! ATTLIST o-dd: count o-ex: id ID#IMPLIED>//Identify the case where the parent element <constraint> of <count> for the identification attribute id belongs to the original permission information, and is used to uniquely identify the original permission information item. the
<!ATTLIST o-dd:count o-ex:idref IDREF #IMPLIED>//标识引用属性idref适用<count>的父元素<constraint>属于消费状态信息的情形,用于将消费状态信息与对应的原始权限信息相关联。 <! ATTLIST o-dd: count o-ex: idref IDREF #IMPLIED>//Identification reference attribute idref is applicable to the situation where the parent element <constraint> of <count> belongs to the consumption state information, and is used to compare the consumption state information with the corresponding original permission information Associated. the
消费状态信息项中的时间间隔<interval>的取值表示从用户第一次消费数字内容开始,可持续消费的时间长度。如<interval>10h</interval>表示从用户第一次消费该内容开始计时,在10小时之内可以使用,超过10小时则会被禁止。因此,在记录<interval>的消费状态时,也可以转化成时间段datetime来记录。 The value of the time interval <interval> in the consumption state information item indicates the length of time for the user to consume the digital content for the first time. For example, <interval>10h</interval> means that the time starts from the user's first consumption of the content, and it can be used within 10 hours, and it will be banned after 10 hours. Therefore, when recording the consumption status of <interval>, it can also be converted into a time period datetime for recording. the
<!ATTLIST o-dd:interval o-ex:id ID #IMPLIED>//标识属性id适用<interval>的父 元素<constraint>属于原始权限信息的情形,用于唯一地标识该原始权限信息项。 <! ATTLIST o-dd:interval o-ex:id ID #IMPLIED>//The identification attribute id applies to the case where the parent element <constraint> of <interval> belongs to the original permission information, and is used to uniquely identify the original permission information item. the
<!ATTLIST o-dd:datetime o-ex:idref IDREF #IMPLIED>//标识引用属性idref适用<datetime>的父元素<constraint>属于消费状态信息的情形,用于将消费状态信息与对应的原始权限信息相关联。 <! ATTLIST o-dd:datetime o-ex:idref IDREF #IMPLIED>//Identification reference attribute idref is applicable to the situation where the parent element <constraint> of <datetime> belongs to the situation of consumption status information, which is used to compare the consumption status information with the corresponding original permission information Associated. the
由于所记录的消费状态信息既可以表示当前可用的权限,也可以表示已消耗的权限,因此,可以进一步为stateInfo增加一个属性,表明其含义,如: Since the recorded consumption status information can represent both the currently available permissions and the consumed permissions, you can further add an attribute to stateInfo to indicate its meaning, such as:
<!ATTLIST oma-dd:stateInfo oma-ex:mode#IMPLIED>//用于表示是“剩下的”还是“已消耗的” <! ATTLIST oma-dd:stateInfo oma-ex:mode#IMPLIED>//Used to indicate whether it is "remaining" or "consumed"
权限相关信息的传递可以通过许可的转移(move)、拷贝(copy)、共享(share)等方式来实现。目的实体在获得所述权限相关信息后,根据“原始权限信息项-消费状态信息项”对确定本地可用的权限相关信息,并根据该权限相关信息控制对数字内容的消费。参阅图1所示,消费状态信息项a表示原始权限信息项1被消费后的状态,它们之间通过“标识=001”相关联;消费状态信息项b表示原始权限信息项3被消费后的状态,它们之间通过“标识=003”相关联。 The transmission of permission-related information can be realized by means of permission transfer (move), copy (copy), share (share), and the like. After obtaining the rights-related information, the target entity determines locally available rights-related information according to the "original rights information item-consumption status information item" pair, and controls the consumption of digital content according to the rights-related information. Referring to Fig. 1, the consumption state information item a represents the state after the original rights information item 1 is consumed, and they are related by "identification=001"; the consumption state information item b represents the state after the original rights information item 3 is consumed Status, they are associated with each other through "identification = 003". the
下面给出在进行权限相关信息的传递时,描述权限相关信息的一个具体实例。该实例表明,用户最初获得的许可证中包含一个播放(play)的权限,最多只能播放10次,并且播放该许可证对应的数字内容的系统必须为XYZ v1.0版;而到目前为止,10次的播放权利已被消耗了2次,即当前用户还拥有8次该内容的播放权利,且限制播放系统必须为XYZ v1.0版。 A specific example of describing the rights-related information when transferring the rights-related information is given below. This example shows that the license originally obtained by the user contains a play permission, which can only be played 10 times at most, and the system for playing the digital content corresponding to the license must be version XYZ v1.0; and so far , 10 times of playback rights have been consumed 2 times, that is, the current user still has 8 times of playback rights for the content, and the restricted playback system must be XYZ v1.0. the
…… ……
<permission> <permission>
<play> <play>
<constraint> <constraint>
<count id=“c1”>10</count> <count id="c1">10</count>
<system> <system>
<context> <context>
<version>1.0</version> <version>1.0</version>
<uid>XYZ</uid> <uid>XYZ</uid>
</context> </context>
</system> </system>
</constraint> </constraint>
</play> </play>
</permission> </permission>
…… ……
…… ……
<stateInfo> <stateInfo>
<count idref=“c1”>2</count> <count idref="c1">2</count>
</stateInfo> </stateInfo>
…… ……
又如,用户最初获得一个具有播放权限,且interval限制为10小时的许可证。用户第一次播放对应内容是在2006年3月1日14:00,按照interval的定义,该用户最多只能在2006年3月1日24:00之前播放该内容,因此对应的消费状态信息中记录了终止时间为2006-03-01T24:00:00Z。 In another example, the user initially obtains a license with playback rights and an interval limited to 10 hours. The user played the corresponding content for the first time at 14:00 on March 1, 2006. According to the definition of interval, the user can only play the content at most before 24:00 on March 1, 2006, so the corresponding consumption status information The end time recorded in is 2006-03-01T24:00:00Z. the
…… ……
<permission> <permission>
<play> <play>
<constraint> <constraint>
<interval id=“i1”>10h</interval> <interval id="i1">10h</interval>
</constraint> </constraint>
</play> </play>
</permission> </permission>
…… ……
…… ……
<stateInfo> <stateInfo>
<datetime idref=“i1”> <datetime idref="i1">
<end>2006-03-01T24:00:00Z</end> <end>2006-03-01T24:00:00Z</end>
</datetime> </datetime>
</stateInfo> </stateInfo>
…… ……
类似的,可以为其它的限制项增加标识属性id和标识引用属性idref,如:timed-count、accumulated等;也可以为各权利项设置id、idref属性,如在play、print、execute等权利元素下分别定义id、idref属性。 Similarly, you can add identification attribute id and identification reference attribute idref for other restriction items, such as: timed-count, accumulated, etc.; you can also set id and idref attributes for each right item, such as in play, print, execute and other right elements Define the id and idref attributes respectively. the
在上述处理过程中,各权限项是通过id、idref属性来进行标识及引用,这里也可以将ID、IDREF作为各权限项的子元素来达到标识及引用的目的。如: In the above process, each permission item is identified and referenced through id and idref attributes, and ID and IDREF can also be used as sub-elements of each permission item to achieve the purpose of identification and reference. like:
<!ELEMENT o-dd:count(oma-dd:id,oma-dd:idref)> <! ELEMENT o-dd:count(oma-dd:id, oma-dd:idref)>
由于一个<constraint>下面一般不会出现多个相同的限制项,因此,除了标识具体的限制项之外,id还可用于标识<constraint>元素,也能达到唯一标识限制项的目的。如: Since a <constraint> generally does not have multiple identical restriction items, in addition to identifying the specific restriction item, id can also be used to identify the <constraint> element, which can also achieve the purpose of uniquely identifying the restriction item. like:
<permission> <permission>
<play> <play>
<constraint id=“001”> <constraint id="001">
<count>10</count> <count>10</count>
<system> <system>
<context> <context>
<version>1.0</version> <version>1.0</version>
<uid>XYZ</uid> <uid>XYZ</uid>
</context> </context>
</system> </system>
</constraint> </constraint>
</play> </play>
</permission> </permission>
…… ……
…… ……
<stateInfo idref=“001”> <stateInfo idref="001">
<count>2</count> <count>2</count>
</stateInfo> </stateInfo>
…… ……
在上述处理过程中,由于idref只能用于内部引用,因此只有将原始权限信息及消费状态信息记录在同一文件(如Rights Object)中时,才可以使用id、idref的方式将两者关联。如果原始权限信息与消费状态信息分开记录的话,则需要定义其它的元素或属性将两者关联,例如分别使用标识属性id来将两者关联,并且以<constraint>元素为例,定义id属性。 In the above process, since idref can only be used for internal reference, only when the original permission information and consumption status information are recorded in the same file (such as Rights Object), can the two be associated by means of id and idref. If the original permission information and consumption status information are recorded separately, other elements or attributes need to be defined to associate the two, for example, use the identification attribute id to associate the two, and take the <constraint> element as an example to define the id attribute. the
<!ATTLIST o-ex:constraint o-ex:id ID #IMPLIED>//当<count>的父元素<constraint>位于原始信息中时,id用于在RO中唯一地标识该<cosntraint>元素,并将″stateInfo″与对应原始权限信息中的<constraint>相关联。 <! ATTLIST o-ex:constraint o-ex:id ID #IMPLIED>//When the parent element <constraint> of <count> is in the original information, the id is used to uniquely identify the <cosntraint> element in the RO, and will "stateInfo" is associated with <constraint> in the corresponding original permission information. the
在传递权限相关信息的消息中定义消费状态信息字段: Define the consumption status information field in the message that transmits permission-related information:
<element name=″stateInfo″type=″o-ex:constraintType″minOccurs=″0″maxOccurs=″unbounded″/>// <element name="stateInfo"type="o-ex:constraintType"minOccurs="0"maxOccurs="unbounded"/>//
通过<constraint>与stateInfo的id属性将两者关联,如: Associate the two through the id attribute of <constraint> and stateInfo, such as:
<permission> <permission>
<play> <play>
<constraint id=“001”> <constraint id="001">
<count>10</count> <count>10</count>
<system> <system>
<context> <context>
<version>1.0</version> <version>1.0</version>
<uid>XYZ</uid> <uid>XYZ</uid>
</context> </context>
</system> </system>
</constraint> </constraint>
</play> </play>
</permission> </permission>
…… ……
…… ……
<stateInfo id=“001”> <stateInfo id="001">
<count>2</count> <count>2</count>
</stateInfo> </stateInfo>
…… ……
参阅图2所示,本实施例中的权限信息管理系统包括多个终端设备200和服务器201;所述多个终端设备200,用于相互之间转移许可时交互权限相关信息,该权限相关信息反映转移的许可的当前消费状态;或者,用于在服务器上备份许可时交互权限相关信息,该权限相关信息反映备份的许可的当前消费状态;所述服务器201,用于备份所述许可,并将该许可的消费状态信息与原始权限信息相关联;较佳的,所述服务器为许可服务器。
Referring to Fig. 2, the authority information management system in this embodiment includes a plurality of
参阅图3所示,所述终端设备200包括显示模块300、许可处理模块301、安全模块302、通信模块303、状态信息解析模块304及状态信息记录模块305;所述显示模块300,用于向用户提供触发消费数字内容的接口;所述许可处理模块301,用于根据许可的当前可用状态信息以控制对数字内容的使用;所述安全模块302,用于在通信时进行签名和验证签名;所述通信模块303,用于组建交互消息,并与其它设备进行通信;所述状态信息解析模块304,用于解析许可中的消费状态信息,并将该消费状态信息与许可的原始权限信息相关联 以获取许可的当前可用状态信息,以及将所述许可的当前可用状态信息发送到所述许可处理模块301;所述状态信息记录模块305,用于在消费消耗类许可时,及时记录相应的消费状态信息。
3, the
参阅图4所示,所述终端设备200在本地使用消耗类许可消费内容的处理流程如下:
Referring to FIG. 4, the processing flow of the
步骤400、用户通过显示模块提供的接口触发在本地消费数字内容,所述内容的消费权限为P_action。
步骤401、许可处理模块根据数字内容的标识属性id查找本地对应的许可相关信息。
步骤402、许可处理模块在查找到对应的许可相关信息后,进一步判断所述许可是否具有消费权限P_action;若是,则继续步骤403,否则进行步骤408的处理。
步骤403、许可处理模块在确定所述许可具有消费权限后,进一步判断该许可是否为有状态许可,若是,则继续步骤404,否则进行步骤409的处理。
步骤404、状态信息解析模块读取所述许可的消费状态信息。
步骤405、状态信息解析模块根据读取的所述许可的消费状态信息进一步判断所述许可是否为消耗类许可,若是,则继续步骤406,否则进行步骤407的处理。
步骤406、状态信息解析模块根据标识引用属性idref将消费状态信息与原始权限信息相关联,以获取许可的当前可用状态信息。
步骤407、状态信息解析模块将许可的当前可用状态信息传送给所述许可处理模块。
步骤408、所述许可处理模块根据许可的当前可用状态信息判断是否允许终端设备执行消费动作,若是,则继续步骤409,否则拒绝终端设备对许可的消费。
步骤409、所述许可处理模块在确定允许终端设备执行消费动作后根据许 可的当前可用状态信息消费对应的数字内容,同时由状态信息记录模块更新所述许可的消费状态信息。 Step 409: After the license processing module determines that the terminal device is allowed to perform the consumption action, it consumes the corresponding digital content according to the current available status information of the license, and at the same time, the status information recording module updates the consumption status information of the license. the
参阅图5所示,所述终端设备200相互之间在进行消耗类许可的传递时,其处理流程如下:
Referring to Figure 5, when the
步骤500、源设备在本地消费一个消耗类许可,消费的同时记录该许可的消费状态信息;在记录消费状态信息时,记录的限制项的标识引用属性idref的取值与当前所消费的许可的原始权限信息中对应的限制项的标识属性id的取值一致;当所述消费状态信息记录为已被消耗的状态信息,则再次消费时,需要结合原始状态信息和消费状态信息,得到当前可用的状态信息,并根据该信息控制对数字内容的使用;当所述消费状态信息记录为当前可用的状态信息,则再次消费时,直接根据该信息控制对数字内容的使用。 Step 500, the source device consumes a consumable license locally, and records the consumption status information of the license at the same time; when recording the consumption status information, the value of the identification reference attribute idref of the recorded restriction item is consistent with the value of the currently consumed license The value of the identification attribute id of the corresponding restriction item in the original permission information is the same; when the consumption state information is recorded as the state information that has been consumed, when consuming again, it is necessary to combine the original state information and consumption state information to obtain the currently available state information, and control the use of digital content based on this information; when the consumption state information is recorded as the currently available state information, and then consume again, directly control the use of digital content based on this information. the
步骤501、当许可中包含可用的许可转移(move)权利项时,由用户触发将已被源设备使用部分权限的许可从源设备转移到目的设备。 Step 501. When the license contains an available license transfer (move) right item, the user triggers the transfer of the license that has been used by the source device with partial rights from the source device to the destination device. the
步骤502、源设备向目的设备发起许可转移请求,向目的设备发送许可转移请求消息,该消息中携带的信息包括:许可证标识、原始权限信息、消费状态信息及密钥信息;其中,所述原始权限信息为源设备最初获得的权利以及限制的信息;所述消费状态信息为步骤500中记录的包含标识引用属性idref的消费状态信息;所述密钥信息为源设备用目的设备的公钥信息重新封装的内容密钥。 Step 502, the source device initiates a license transfer request to the destination device, and sends a license transfer request message to the destination device, the information carried in the message includes: license identifier, original authority information, consumption status information and key information; wherein, the The original rights information is the rights and restrictions initially obtained by the source device; the consumption status information is the consumption status information recorded in step 500 including the identification reference attribute idref; the key information is the public key of the destination device used by the source device Content key for information repackaging. the
步骤503、目的设备响应源设备的许可转移请求,向源设备返回许可转移响应消息;所述许可转移响应消息中表明源设备许可转移成功或失败,也可反映更详细的内容,如失败原因等。 Step 503: The destination device responds to the license transfer request of the source device, and returns a license transfer response message to the source device; the license transfer response message indicates whether the license transfer of the source device succeeds or fails, and may also reflect more detailed content, such as failure reasons, etc. . the
步骤504、当所述许可转移成功时,目的设备在本地使用得到的许可,使用时同时记录许可的消费状态信息,由该消费状态信息控制对数字内容的使用,其使用方式同步骤500中所述。 Step 504. When the transfer of the license is successful, the destination device uses the obtained license locally, and records the consumption state information of the license at the same time, and uses the consumption state information to control the use of the digital content. The usage method is the same as that in step 500. stated. the
图5所示流程为消耗类许可在终端设备之间的交互,当终端设备之间进行 非消耗类许可的交互时,无需进行消费状态信息的交互。 The process shown in Figure 5 is the interaction of consumption licenses between terminal devices. When terminal devices interact with non-consumable licenses, there is no need to interact with consumption status information. the
参阅图6所示,所述服务器201包括显示模块600、许可处理模块601、安全模块602、通信模块603、状态信息解析模块604。所述显示模块600,用于向用户提供显示所备份的许可的消费状态的接口;所述许可处理模块601,用于备份许可相关信息,所述许可相关信息反映许可的当前可用状态;所述安全模块602,用于在通信时进行签名和验证签名;所述通信模块603,用于组建交互消息,并与其它设备进行通信;所述状态信息解析模块604,用于解析许可中的消费状态信息,并将该消费状态信息与许可的原始权限信息相关联以获取许可的当前可用状态信息,以及将所述许可的当前可用状态信息发送到所述许可处理模块601。
Referring to FIG. 6 , the
参阅图7所示,所述终端设备在服务器上备份消耗类许可时,其处理流程如下: Referring to Figure 7, when the terminal device backs up the consumption license on the server, its processing flow is as follows:
步骤700、源设备消费本地的一个许可证,消费同时记录消费状态信息;在记录消费状态信息时,记录的限制项的标识引用属性idref的取值与当前所消费的权利项下对应限制项的标识属性id的取值一致;当所述消费状态信息记录为已被消耗的状态,则再次消费时,需要结合原始状态信息和消费状态信息,得到当前可用的状态信息,并根据该信息控制对数字内容的使用;当所述消费状态信息记录为剩余的状态,则再次消费时,直接根据该消费状态信息控制对数字内容的使用。 Step 700, the source device consumes a local license, and records the consumption status information at the same time; when recording the consumption status information, the value of the identification reference attribute idref of the recorded restriction item is the value of the corresponding restriction item under the currently consumed right item The value of the identification attribute id is consistent; when the consumption state information is recorded as being consumed, then when consuming again, it is necessary to combine the original state information and consumption state information to obtain the currently available state information, and control the consumption based on this information The use of digital content; when the consumption status information is recorded as a remaining status, the use of digital content is directly controlled according to the consumption status information when consumption is performed again. the
步骤701、当服务器能够提供网络备份功能时,由用户触发将已被源设备使用部分后的许可从源设备备份到服务器。 Step 701. When the server can provide the network backup function, the user triggers to back up the part of the license that has been used by the source device from the source device to the server. the
步骤702、源设备向服务器发起许可备份请求,向服务器发送许可备份请求消息,该消息中携带的信息包括许可证标识和消费状态信息;其中,所述消费状态信息为步骤700中记录的包含idref属性的消费状态信息;此外,所述许可备份请求消息中还可包括原始权限信息和密钥信息;所述原始权限信息为源设备最初获得的权利以及限制的信息;所述密钥信息为与内容密钥相关的信 息,该密钥可以由服务器的公钥封装;当服务器端已经存储了许可的原始信息,结合上报的许可证标识、消费状态信息,即可得到准确的可用权限信息,则所述许可备份请求消息中无需携带原始权限信息;当服务器本地已存储有内容密钥时,所述许可备份请求消息中无需携带密钥信息。 Step 702, the source device initiates a license backup request to the server, and sends a license backup request message to the server, the information carried in the message includes license identification and consumption status information; wherein, the consumption status information is recorded in step 700 and includes idref attribute consumption status information; in addition, the license backup request message may also include original rights information and key information; the original rights information is the rights and restrictions initially obtained by the source device; the key information is Information related to the content key, which can be encapsulated by the server’s public key; when the server has stored the original information of the license, combined with the reported license ID and consumption status information, accurate available permission information can be obtained. Then the license backup request message does not need to carry the original rights information; when the server has stored the content key locally, the license backup request message does not need to carry the key information. the
步骤703、服务器响应终端设备的许可备份请求,向终端设备返回许可备份响应消息;所述许可备份响应消息中表明终端设备许可备份成功或失败,也可反映更详细的内容,如失败原因等。 Step 703, the server responds to the license backup request of the terminal device, and returns a license backup response message to the terminal device; the license backup response message indicates whether the terminal device license backup succeeds or fails, and may also reflect more detailed content, such as failure reasons. the
步骤704、当所述许可备份成功,则使该许可处于可恢复状态,后续可以从服务器上恢复先前备份的许可。 Step 704, when the license is backed up successfully, make the license in a recoverable state, and subsequently restore the previously backed up license from the server. the
从上述实施例可知,本发明在终端设备根据许可的权限消费内容时,创建消费状态信息以记录对内容的消费情况,且所记录的消费状态信息与对应的原始权限信息相关联,从而正确地控制内容的后续消费;进一步的,在本发明中,两个实体间在执行许可的转移、拷贝、备份等需要交互权限信息的操作时,能够在消息交互的过程中,保证许可的原始权限信息与消费状态信息的准确关联,从而提高了DRM系统的安全性。 It can be seen from the above-mentioned embodiments that when the terminal device consumes content according to the authorized authority, the present invention creates consumption state information to record the consumption situation of the content, and the recorded consumption state information is associated with the corresponding original authority information, so as to correctly Control the subsequent consumption of content; further, in the present invention, when two entities perform operations such as transferring, copying, and backing up licenses that require the exchange of permission information, the original permission information of the license can be guaranteed in the process of message interaction Accurate association with consumption status information, thereby improving the security of the DRM system. the
显然,本领域的技术人员可以对本发明进行各种改动和变型而不脱离本发明的精神和范围。这样,倘若对本发明的这些修改和变型属于本发明权利要求及其等同技术的范围之内,则本发明也意图包含这些改动和变型在内。 Obviously, those skilled in the art can make various changes and modifications to the present invention without departing from the spirit and scope of the present invention. Thus, if these modifications and variations of the present invention fall within the scope of the claims of the present invention and equivalent technologies, the present invention also intends to include these modifications and variations. the
Claims (15)
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN 200610127771 CN101141242B (en) | 2006-09-08 | 2006-09-08 | Method and system for processing authority information |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN 200610127771 CN101141242B (en) | 2006-09-08 | 2006-09-08 | Method and system for processing authority information |
Publications (2)
Publication Number | Publication Date |
---|---|
CN101141242A CN101141242A (en) | 2008-03-12 |
CN101141242B true CN101141242B (en) | 2011-12-07 |
Family
ID=39193012
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN 200610127771 Active CN101141242B (en) | 2006-09-08 | 2006-09-08 | Method and system for processing authority information |
Country Status (1)
Country | Link |
---|---|
CN (1) | CN101141242B (en) |
Families Citing this family (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN109767229A (en) * | 2019-01-16 | 2019-05-17 | 厦门中控智慧信息技术有限公司 | A kind of method, server and the consumer device of consumption rights management |
Citations (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN1539115A (en) * | 2001-06-07 | 2004-10-20 | ��̹�е¿عɹɷ�����˾ | Method and apparatus for managing transfer of rights |
CN1774685A (en) * | 2003-04-11 | 2006-05-17 | 松下电器产业株式会社 | Digital content reproducing device and method thereof |
-
2006
- 2006-09-08 CN CN 200610127771 patent/CN101141242B/en active Active
Patent Citations (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN1539115A (en) * | 2001-06-07 | 2004-10-20 | ��̹�е¿عɹɷ�����˾ | Method and apparatus for managing transfer of rights |
CN1774685A (en) * | 2003-04-11 | 2006-05-17 | 松下电器产业株式会社 | Digital content reproducing device and method thereof |
Also Published As
Publication number | Publication date |
---|---|
CN101141242A (en) | 2008-03-12 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
KR100402071B1 (en) | Systems and methods for integrity certification and verification of content consumption environments | |
US8726010B2 (en) | Secure content distribution | |
JP4976492B2 (en) | Methods and systems for backing up and restoring licenses | |
JP4912406B2 (en) | Transfer of digital license from the first platform to the second platform | |
US20070219917A1 (en) | Digital License Sharing System and Method | |
KR20120014561A (en) | Enhanced product functionality based on user ID | |
KR20120017035A (en) | Interaction model for the migration of state and data | |
US10360389B2 (en) | Composite document access | |
US10095848B2 (en) | System, method and apparatus for securely distributing content | |
CN104021318B (en) | Anti-replay-attack device and anti-replay-attack method | |
TWI461956B (en) | Apparatus and method for digital rights management | |
US20100306485A1 (en) | Content longevity with user device domains | |
US20070112679A1 (en) | Digital rights management method and system | |
JP2004110197A (en) | Information processing method and access authority management method in center system | |
US20090199279A1 (en) | Method for content license migration without content or license reacquisition | |
CN101127066B (en) | Method for controlling security admission turnaround and digital copyright management proxy | |
CN101141242B (en) | Method and system for processing authority information | |
KR100506530B1 (en) | Method for DRM license supporting plural devices | |
CN111597561B (en) | Information processing system, computer readable medium, and computer program product | |
KR20080006638A (en) | System and method for integrity assurance and verification | |
WO2008003222A1 (en) | A method and an apparatus for operating right | |
KR100716719B1 (en) | D.R.M based package contents providing method and apparatus therefor | |
JP2009048554A (en) | Document operation system, management device, and program |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
C06 | Publication | ||
PB01 | Publication | ||
C10 | Entry into substantive examination | ||
SE01 | Entry into force of request for substantive examination | ||
C14 | Grant of patent or utility model | ||
GR01 | Patent grant |