CN101211395A - Method and system for realizing permission object sharing - Google Patents

Abstract

The invention provides a method for realizing rights object sharing, including: saving the rights object associated with the digital content in a portable storage device, the terminal obtains the rights object from the portable storage device, and uses the digital content according to the obtained rights object. At the same time, the present invention also provides a system for sharing rights objects, including: a terminal and a portable storage device, wherein the portable storage device is used to save rights objects associated with digital content; Obtain a rights object, and use the digital content according to the obtained rights object. The entire sharing process in the present invention does not require the participation of the server, and even in an offline state, it is convenient to share ROs on multiple user terminals, thereby realizing that the user and Can easily use digital content.

Description

Method and system for realizing permission object sharing

technical field

The present invention relates to digital rights management (DRM, Digital Rights Management) technology, in particular to a method and system for realizing sharing of rights objects.

Background technique

With the rapid development of broadband network technology, more and more users now download digital content such as music, film and television, and online education courses through the Internet for use. The characteristic of digital content is that it is easy to copy, distribute and process, and the traditional network download method cannot realize the copyright protection of these digital content. However, since digital content providers need certain costs to produce digital content, if digital content is copied, distributed and used arbitrarily without permission, the interests of digital content providers will suffer.

Digital Rights Management DRM is a method of protecting digital content from unauthorized copying and use. It provides a means for content providers to protect their proprietary music or other data from illegal copying and use. DRM technology protects digital content by encrypting digital content and attaching usage rules. The usage rules can determine whether a user meets the conditions for using digital content, and generally prevent content from being copied or limit the number of times the content can be played.

The digital content protected by DRM technology is encrypted, and any user can freely access the encrypted digital content, and the user can also forward the encrypted digital content to family members or friends for sharing. However, if a user wants to use digital content, he must purchase a rights object (RO) associated with the content. The use of digital content is carried out strictly according to the purchased permission object, and users cannot use it beyond their rights.

In the traditional DRM technology, although the digital content can be freely disseminated, the rights object RO of the digital content cannot be forwarded arbitrarily. That is to say, if the user downloads the purchased RO to a terminal device, the user can only use the digital content on the terminal device. If the user wants to use the digital content on other terminals, he must re-download the RO. In addition, although the free dissemination of digital content enables users to forward encrypted digital content to family members or friends for sharing, traditional DRM technology does not allow users to share the RO required to execute the content, and the recipients of digital content do not have access to The RO associated with the content was previously unable to use the received digital content. It can be seen that although the traditional DRM technology protects the interests of digital content providers, it is extremely inconvenient for users to use digital content.

Japanese Patent Application Publication No. 200358657 proposes a method for sharing a license to use digital content, RO, with other users. The method mainly includes: storing information about content licenses for each user or terminal in a dedicated area of the license information server; when receiving a request sent by a distributor, creating an encryption key, and using the key to encrypt information about licenses , and move the encrypted information from the private area to the public area, and then send the encryption key to the distributor; after the distributor transmits the issued encryption key to the transferee, when the transferee requests permission, Verify the transferee by checking that the transferee possesses the encryption key issued to the assignor; when verifying, decrypt the information about the license with the key sent by the transferee, and move the decrypted information from the public domain for the transferee to a dedicated area.

The method can enable the user holding the content license to transfer the license to other users, so as to realize the sharing of rights objects among multiple users. However, this method requires the participation of the license information server, that is to say, the sharing of rights objects can only be realized in an online state. In addition, in order to transfer the content license to the transferee, the distributor must first receive the encryption key from the license information server, transmit the received encryption key to the transferee, and then the license information server uses the encryption key to authenticate the recipient. Otherwise, the whole process is very complicated and cumbersome.

Contents of the invention

In view of this, the main purpose of the present invention is to provide a method and system for realizing the sharing of rights objects, which can conveniently realize the sharing of rights objects in an offline state.

In order to achieve the above-mentioned purpose, the method for realizing permission object sharing provided by the present invention is as follows:

The rights object associated with the digital content is stored in the portable storage device, and the terminal obtains the rights object from the portable storage device, and uses the digital content according to the obtained rights object.

Wherein, the terminal obtaining the rights object from the portable storage device includes:

A. The terminal sends a request to the portable storage device to acquire a permission object, and the request carries the content identifier of the digital content and the usage permission requested by the terminal;

B. After the portable storage device receives the request from the terminal, it reads the rights object corresponding to the content identifier carried in the request, and recreates the rights object according to the use rights requested by the terminal within the limits of the rights object, and then The recreated permission object is sent to the terminal.

Further comprising after the step B:

The portable storage device updates the rights object stored by itself and corresponding to the content identifier according to the usage rights requested by the terminal.

Further include before the step A:

The terminal and the portable storage device authenticate each other and generate the same session key.

The sending of the re-created rights object to the terminal in step B includes: the portable storage device uses the generated session key to encrypt the re-created rights object, and sends the encrypted rights object to the terminal;

Before the terminal uses the digital content according to the acquired rights object, it further includes: after receiving the encrypted rights object sent by the portable storage device, the terminal uses the generated session key to decrypt the received encrypted rights object to restore the rights Object plaintext.

The use of digital content by the terminal according to the acquired rights object includes:

The terminal decrypts the digital content by using the decryption key included in the obtained rights object, recovers the plaintext of the digital content, and uses the digital content according to the digital content usage rights included in the obtained rights object.

After the terminal uses the digital content according to the acquired rights object, it further includes:

The terminal encrypts and saves the digital content using the encryption and decryption key included in the acquired rights object.

The system for sharing rights objects provided by the present invention includes: a terminal and a portable storage device, wherein the portable storage device is used to store rights objects associated with digital content;

The terminal is used to obtain the rights object from the portable storage device, and use the digital content according to the obtained rights object.

The terminal includes: a rights object acquiring unit and a digital content using unit, wherein,

The rights object obtaining unit is used to send the request for obtaining the rights object carrying the content identification of the digital content and the requested use right to the portable storage device, and is used to receive the rights object from the portable storage device, and send the obtained rights object to the digital content for use unit;

a digital content usage unit, configured to use the digital content according to the received rights object;

The portable storage device includes: a rights object storage unit and a rights object creation unit, wherein,

a rights object storage unit, configured to store rights objects associated with digital content;

A rights object creation unit, configured to receive a request for acquiring a rights object from the terminal, read the rights object corresponding to the content identifier carried in the request from the rights object storage unit, and perform the request within the limits of the rights object The permission object carried by the terminal is recreated with the permission requested by the terminal, and the recreated permission object is sent to the terminal.

The portable storage device further includes: a rights object update unit,

The authority object creation unit is further configured to send the use authority requested by the terminal to the authority object update unit;

A rights object updating unit, configured to update the rights object stored in the rights object storage unit corresponding to the content identifier according to the received usage rights requested by the terminal.

The portable storage device further includes: an encryption unit,

The rights object creation unit is configured to send the re-created rights object to the encryption unit;

The encryption unit is configured to encrypt the received rights object, and send the encrypted rights object to the terminal;

The terminal further includes: a decryption unit,

The authority object acquisition unit is configured to send the acquired authority object to the decryption unit;

The decryption unit is used to decrypt the received rights object, and send the decrypted rights object to the digital content usage unit.

In addition, the present invention also provides a storage device capable of realizing the management of rights objects.

The storage device includes: a permission object storage unit and a permission object creation unit, wherein,

a rights object storage unit, configured to store rights objects associated with digital content;

A rights object creation unit, configured to receive a request for acquiring a rights object from the terminal, read the rights object corresponding to the content identifier carried in the request from the rights object storage unit, and perform the request within the limits of the rights object The permission object carried by the terminal is recreated with the permission requested by the terminal, and the recreated permission object is sent to the terminal.

The storage device further includes: a rights object updating unit,

The authority object creation unit is further configured to send the use authority requested by the terminal to the authority object update unit;

A rights object updating unit, configured to update the rights object stored in the rights object storage unit corresponding to the content identifier according to the received usage rights requested by the terminal.

The storage device further includes: an encryption unit,

The rights object creation unit is configured to send the re-created rights object to the encryption unit;

The encryption unit is configured to encrypt the received rights object, and send the encrypted rights object to the terminal.

In addition, the present invention also provides a terminal for using digital content by acquiring a rights object from a portable storage device.

The terminal includes: a rights object acquiring unit and a digital content using unit, wherein,

a rights object obtaining unit, configured to obtain the rights object from the portable storage device, and send the obtained rights object to the digital content use unit;

The digital content usage unit is configured to use the digital content according to the received rights object.

The terminal further includes: a decryption unit,

The authority object acquisition unit is configured to send the acquired authority object to the decryption unit;

The decryption unit is used to decrypt the received rights object, and send the decrypted rights object to the digital content usage unit.

It can be seen that the present invention manages ROs through a portable storage device with a DRM function, and realizes the sharing of rights objects among multiple users or between multiple user terminals. If the user wants to use the digital content on other terminals, or share the digital content with other users, he only needs to obtain the corresponding RO from the portable storage device. The entire sharing process does not require the participation of the server, even in an offline state, it is very convenient to share ROs on multiple user terminals. Therefore, under the premise of ensuring that the copyright of the digital content is not infringed, the user can use the digital content conveniently.

Description of drawings

FIG. 1 is a schematic diagram of a process in which a terminal acquires an RO from a portable storage device and uses digital content according to the acquired RO in an embodiment of the present invention.

FIG. 2 is a schematic structural diagram of a system for realizing permission object sharing in the present invention.

FIG. 3 is a schematic structural diagram of a system for realizing permission object sharing in an embodiment of the present invention.

FIG. 4 is a schematic structural diagram of a system for implementing rights object sharing in another embodiment of the present invention.

Detailed ways

In order to make the object, technical solution and advantages of the present invention clearer, the present invention will be further described in detail below with reference to the accompanying drawings and examples.

The basic idea of the method for realizing rights object sharing provided by the present invention is: save the rights object RO associated with the digital content in the portable storage device, and the terminal obtains the rights object from the portable storage device, and uses the digital content according to the obtained rights object .

Specifically, the digital content provider puts the encrypted digital content on the content distribution server for users to download freely, and puts the RO associated with the digital content on the authority distribution server; the user downloads the digital content from the content distribution server to the If you want to use the digital content in your own terminal, you must purchase the RO associated with the digital content, and download the RO from the rights distribution server to the terminal; if the user wants to use the downloaded digital content on other terminals , then the user can download the rights object RO associated with the digital content from the rights distribution server through the terminal, store it in a portable storage device with DRM function, and transfer the downloaded digital content to other terminals by copying or other methods. When the user wants to use the digital content on other terminals, the user can insert the portable storage device that stores the RO into the terminal that wants to use the digital content, and the terminal obtains the RO from the portable storage device, and obtains according to the The RO uses this digital content.

That is to say, the present invention manages ROs through a portable storage device with a DRM function, and realizes the sharing of rights objects among multiple users or between multiple user terminals. If the user wants to use the digital content on other terminals, or share the digital content with other users, he only needs to obtain the corresponding RO from the portable storage device. The entire sharing process does not require the participation of the server, even in an offline state, it is very convenient to share ROs on multiple user terminals. Therefore, under the premise of ensuring that the copyright of the digital content is not infringed, the user can use the digital content conveniently.

Wherein, the terminal is a device used by users such as computers, mobile phones, and PDAs; and the portable storage device is a storage device such as a mobile memory card, a U disk, and a mobile hard disk.

The RO mainly includes encryption and decryption keys used to encrypt and decrypt digital content and digital content use rights. Digital content use rights are equivalent to the use rules described in the background technology, and are mainly used to determine whether a user meets the conditions for using digital content, such as whether the user has copy rights, whether the number of times the user has played the content has reached the upper limit, and so on. Users must strictly follow the usage rights in RO to use digital content.

Table 1

Table 1 shows an exemplary RO structure.

Among them, the first item is the content identification (ID) used to identify the digital content; the second item is the usage authority of the digital content corresponding to the indicated content ID; the third item is the encryption and decryption of the digital content corresponding to the indicated content ID key. The content provider uses the encryption and decryption key to encrypt the digital content, and the terminal uses the encryption and decryption key to decrypt the encrypted digital content.

There are many forms of constraints. For example, refer to the constraint condition structure shown in Table 2. Taking playback rights as an example, digital content providers can limit the user’s playback times by counting times, limit the user’s playback time by accumulating time, or limit the user’s playback time by specifying The way of starting and ending time limits the user's playing period and so on.

Table 2

In the present invention, when the user wants to use the digital content through the terminal, the RO associated with the digital content must first be obtained from the portable storage device with the DRM function that stores the RO. For more clarity, the following takes the portable storage device as a removable storage card (memory card for short) as an example, and describes in detail the process in which the terminal acquires the RO from the portable storage device and uses the digital content according to the acquired RO.

Referring to Figure 1, the process mainly includes the following steps:

Step 101: When the user wants to use the digital content on the terminal, the user inserts the memory card with the RO stored in the terminal, the terminal and the memory card authenticate each other, and both the terminal and the memory card generate the same session key .

For example, the terminal and the memory card respectively generate a random number and send the random number generated by each to the other party. After receiving the random number sent by the other party, the terminal/memory card compares the received random number with the random number generated by itself. Modulo 2 operation to generate the same session key.

Step 102: After the mutual identity authentication between the terminal and the memory card is successful, the user can send a request to the terminal to use the digital content by clicking on the digital content in the terminal or by other means, and the terminal reads the digital content after receiving the user's use request the content ID of the digital content, and send a request to the memory card to obtain the RO associated with the content, and the request includes the content ID of the digital content.

In addition, when the terminal sends the request for obtaining the RO, it also needs to send the requested usage permission to the memory card, for example, the terminal requests the usage permission to play the digital content once.

Step 103: After receiving the RO acquisition request from the terminal, the memory card reads the RO corresponding to the content ID carried therein, and creates a new RO within the limits of the RO according to the use rights requested by the terminal.

For example, when the usage right requested by the terminal is to play the digital content once, the content of the usage right included in the newly created RO is to play, and the constraint condition is one time, and no other content of the usage right is included.

Step 104: The memory card uses the session key generated in step 101 to encrypt the re-created RO, such as using a symmetric encryption algorithm such as DES/3DES or AES, and then sends the encrypted RO to the terminal.

Step 105: After sending the newly created RO to the terminal, the memory card updates the digital content use right stored in the RO corresponding to the content ID according to the use right requested by the terminal.

For example, when the usage permission requested by the terminal is to play the digital content once, after sending the newly created RO to the terminal, the memory card will save the digital content usage permission constraints in the RO associated with the digital content. The value of the usage permission requested by the terminal is deducted from , that is, the number of times of playback in the constraint condition is reduced by 1.

If the value of the constraints in the usage permission corresponding to a certain digital content stored in the memory card is reduced to 0, the next time the terminal requests the usage permission of the digital content from the storage card, it will be rejected by the storage card. The use of the digital content can only be resumed after the user re-purchases the use right of the digital content.

Step 106: After receiving the encrypted RO sent by the memory card, the terminal uses the session key generated in step 101 to decrypt the received encrypted RO, and recover the RO plaintext.

Step 107: The terminal decrypts the encrypted digital content using the encryption and decryption key included in the RO, and recovers the plaintext of the digital content.

Step 108: The terminal uses the digital content according to the digital content usage authority included in the RO, for example, plays the digital content once.

Step 109: After the digital content is used, the terminal encrypts and saves the digital content using the encryption and decryption key included in the RO.

Corresponding to the method provided by the present invention, the present invention also provides a system for realizing rights object sharing, as shown in FIG. 2 , the system mainly includes: a terminal and a portable storage device. Wherein, the portable storage device is used to save the rights object associated with the digital content; the terminal is used to obtain the rights object from the portable storage device, and use the digital content according to the obtained rights object.

Referring to FIG. 3 , the terminal may specifically include: a rights object acquisition unit and a digital content use unit. Wherein, the rights object obtaining unit is used to send the request for obtaining the rights object carrying the content identification of the digital content and the requested use right to the portable storage device, and is used to receive the rights object from the portable storage device, and send the obtained rights object to the digital A content use unit; a digital content use unit, used for using digital content according to the received rights object.

The portable storage device may specifically include: a rights object storage unit and a rights object creation unit. Wherein, the rights object storage unit is used to save the rights object associated with the digital content; the rights object creation unit is used to receive the request from the terminal to obtain the rights object, and read the content identification carried in the request from the rights object storage unit corresponding rights object, and within the limits of the rights object, recreate the rights object according to the usage rights requested by the terminal carried in the request, and send the recreated rights object to the terminal.

Referring to Fig. 4, the portable storage device may further include: a rights object updating unit. The rights object creation unit sends the use rights requested by the terminal to the rights object update unit; the rights object update unit is used to update the rights object corresponding to the content identifier stored in the rights object storage unit according to the received use rights requested by the terminal to update.

The portable storage device may further include: an encryption unit. The rights object creation unit sends the re-created rights object to the encryption unit; the encryption unit is used to encrypt the received rights object and send the encrypted rights object to the terminal.

Correspondingly, the terminal further includes: a decryption unit. The rights object obtaining unit sends the obtained rights object to the decryption unit; the decryption unit is used to decrypt the received rights object, and sends the decrypted rights object to the digital content usage unit.

In addition, the present invention also provides a storage device and a terminal. Their basic structures and further structures are respectively shown in FIG. 3 and FIG. 4 , which will not be repeated here.

The purpose, technical solutions and beneficial effects of the present invention have been further described in detail above. It should be understood that the above description is not intended to limit the present invention. Any modification, equivalent replacement, improvement, etc. shall be included in the protection scope of the present invention.

Claims (16)

1. method that realizes that permission object is shared is characterized in that this method comprises:

The permission object related with digital content is kept in the portable memory apparatus, and terminal is obtained permission object from portable memory apparatus, and uses digital content according to the permission object that obtains.

2. method according to claim 1 is characterized in that, described terminal is obtained permission object and comprised from portable memory apparatus:

A, terminal send the request of obtaining permission object to portable memory apparatus, carry the content identification of digital content and the rights of using of terminal request in this request;

After B, portable memory apparatus receive the request of self terminal, read with this request in the corresponding permission object of content identification that carries, and in the restriction of this permission object according to the rights of using of terminal request create right object again, the permission object that will create again sends to terminal again.

3. method according to claim 2 is characterized in that, further comprises after the described step B:

Portable memory apparatus is according to the rights of using of terminal request, self is preserved, upgrade with the corresponding permission object of described content identification.

4. according to claim 2 or 3 described methods, it is characterized in that, further comprise before the described steps A:

Terminal and portable memory apparatus carry out authentication mutually, and generate identical session key.

5. method according to claim 4 is characterized in that,

The described permission object that will create again of step B sends to terminal and comprises: portable memory apparatus uses the session key that generates that the permission object of creating is again encrypted, and the encrypted rights object is sent to terminal;

Described terminal further comprises before using digital content according to the permission object that obtains: after terminal is received the encrypted rights object that portable memory apparatus sends, use the session key that generates that the encrypted rights object of receiving is decrypted, recover permission object expressly.

6. according to claim 1,2,3 or 5 described methods, it is characterized in that described terminal uses digital content to comprise according to the permission object that obtains:

Terminal uses the decruption key that comprises in the permission object that obtains that described digital content is decrypted, and recovers digital content expressly, and uses digital content according to the digital content rights of using that comprise in the permission object that obtains.

7. method according to claim 6 is characterized in that, described terminal further comprises after using digital content according to the permission object that obtains:

Terminal uses the encryption and decryption key that comprises in the permission object that obtains that described digital content is encrypted and preserved.

8. system that realizes that permission object is shared is characterized in that this system comprises: terminal and portable memory apparatus, wherein,

Portable memory apparatus is used to preserve the permission object related with digital content;

Terminal is used for obtaining permission object from portable memory apparatus, and uses digital content according to the permission object that obtains.

9. system according to claim 8 is characterized in that,

Described terminal comprises: permission object acquiring unit and digital content are used the unit, wherein,

The permission object acquiring unit, be used for sending the permission object request of obtaining of the rights of using of the content identification carry digital content and request to portable memory apparatus, and be used to receive permission object from portable memory apparatus, the permission object that obtains is sent to digital content use the unit;

Digital content is used the unit, is used for using digital content according to the permission object of receiving;

Described portable memory apparatus comprises: permission object storage unit and permission object creating unit, wherein,

The permission object storage unit is used to preserve the permission object related with digital content;

The permission object creating unit, be used to receive the permission object request of obtaining of self terminal, from the authority object-storage unit, read with this request in the corresponding permission object of content identification that carries, and the rights of using of the terminal request of in the restriction of this permission object, carrying in according to described request create right object again, the permission object of creating is again sent to terminal.

10. system according to claim 9 is characterized in that, described portable memory apparatus further comprises: the permission object updating block,

Described permission object creating unit is further used for the rights of using of terminal request are sent to the permission object updating block;

The permission object updating block is used for according to upgrading with the corresponding permission object of described content identification that the rights of using of the terminal request of receiving are preserved the permission object storage unit.

11., it is characterized in that described portable memory apparatus further comprises according to claim 9 or 10 described systems: ciphering unit,

Described permission object creating unit, the permission object that is used for creating again sends to ciphering unit;

Described ciphering unit be used for the permission object of receiving is encrypted, and the permission object after will encrypting sends to terminal;

Described terminal further comprises: decryption unit,

Described permission object acquiring unit, the permission object that is used for obtaining sends to decryption unit;

Described decryption unit is used for the permission object of receiving is decrypted, and the permission object after will deciphering sends to digital content use unit.

12. a memory device is characterized in that, this equipment comprises: permission object storage unit and permission object creating unit, wherein,

The permission object storage unit is used to preserve the permission object related with digital content;

The permission object creating unit, be used to receive the permission object request of obtaining of self terminal, from the authority object-storage unit, read with this request in the corresponding permission object of content identification that carries, and the rights of using of the terminal request of in the restriction of this permission object, carrying in according to described request create right object again, the permission object of creating is again sent to terminal.

13. memory device according to claim 12 is characterized in that, this memory device further comprises: the permission object updating block,

Described permission object creating unit is further used for the rights of using of terminal request are sent to the permission object updating block;

The permission object updating block is used for according to upgrading with the corresponding permission object of described content identification that the rights of using of the terminal request of receiving are preserved the permission object storage unit.

14., it is characterized in that this memory device further comprises according to claim 11 or 12 described memory devices: ciphering unit,

Described permission object creating unit, the permission object that is used for creating again sends to ciphering unit;

Described ciphering unit be used for the permission object of receiving is encrypted, and the permission object after will encrypting sends to terminal.

15. a terminal is characterized in that, this terminal comprises: permission object acquiring unit and digital content are used the unit, wherein,

The permission object acquiring unit is used for obtaining permission object from portable memory apparatus, and the permission object that obtains is sent to digital content use unit;

Digital content is used the unit, is used for using digital content according to the permission object of receiving.

16. terminal according to claim 15 is characterized in that, this terminal further comprises: decryption unit,

Described permission object acquiring unit, the permission object that is used for obtaining sends to decryption unit;

Described decryption unit is used for the permission object of receiving is decrypted, and the permission object after will deciphering sends to digital content use unit.

Images