CN104966000A - Multimedia copyright protection method based on security engine - Google Patents

Abstract

The invention discloses a multimedia copyright protection method based on a security engine, which realizes the encryption and decryption technology of multimedia files by introducing the security engine, realizes file encryption, secret key distribution and electronic signature of digital watermarks on the files, and then carries out authorization management on the files through an authorization management module, distributes corresponding authority to purchasing users, and realizes the unified packaging protection of multimedia copyright by various encryption technologies. By the method, the multimedia file is safely processed at the multimedia service provider end, such as content encryption, digital signature, user authority configuration and the like, the obtained multimedia file is decrypted, signed and verified at the user terminal, the authority is realized, and the file playing function is realized, so that unified and standard data safety service is provided for the multimedia service provider.

Description

A Multimedia Copyright Protection Method Based on Security Engine

technical field

The invention relates to the technical field of data encryption and decryption, in particular to a security engine-based multimedia copyright protection method.

Background technique

With the popularization of the network and the development of computer technology, multimedia products such as digital images, audio and video have brought great convenience to people. However, because digital multimedia is easy to copy, unauthorized copying and illegal distribution of original works damage the legitimate rights and interests of copyright owners, so digital multimedia urgently needs copyright protection.

Multimedia copyright protection mainly includes digital copyright management based on cryptography and copyright tracking based on digital watermarking.

Digital Rights Protection (DRM) is currently the main means of copyright protection for multimedia digital content in the network. Identify, trade, protect, monitor and track the entire process of multimedia content from production to distribution, from sales to use, and provide copyright protection for multimedia producers and distributors of multimedia products. At present, triple play, new self-media, WeChat social platform, etc., have put forward new copyright protection requirements for digital copyright.

Contents of the invention

The technical problem to be solved by the invention is: in order to provide effective data security services for multimedia service providers, the invention provides a multimedia copyright protection method based on a security engine.

The technical scheme adopted in the present invention is:

A security engine-based multimedia copyright protection method, the method implements the encryption and decryption technology of multimedia files by introducing a security engine, realizes file encryption, key distribution, and digital watermarking to electronically sign files, and then through the authorization management module. Documents are authorized and managed, corresponding permissions are assigned to purchasers, and multiple encryption technologies are packaged together to protect multimedia copyrights.

The method includes the following steps:

After the multimedia file producer provides the multimedia file to the multimedia service provider, the provider encrypts the plaintext multimedia file through the security engine function module in the server-side management software, and uses various encryption algorithms provided in the security engine to encrypt and package the file , key generation, digital signature, and other encryption methods, the supplier can choose any combination to use, and package the file into a ciphertext file that integrates multiple encryptions;

According to the purchase and use of different users, the user's business information, such as user ID, content ID, key information and authority information, user public key certificate and user signature information, etc., are packaged into license authorization files, and finally issued to Clients of individual users;

The security engine function module is also added to the terminal software used by the end user. When the user uses a multimedia file, the encrypted multimedia file enters the security engine function module, and the encrypted file is decrypted and unpacked, such as file decryption, key verification, Digital signature verification, etc.; then, according to the license authorization file provided by the service provider, the end user is authorized to analyze the use of multimedia files, including user identification, content identification, key information and authority information, user public key certificate and user signature information, etc. , and finally play the multimedia file in the terminal software.

The encryption and decryption algorithms provided by the security engine include: key generation, AES encryption and decryption algorithms, digital content signature and verification algorithms, content digest algorithms, license signature algorithms, and the like.

The encrypted and packaged content includes: using a symmetrical AES algorithm and a 128-bit data encryption key to encrypt and protect the multimedia content; at the same time, calculating the abstract of the content, digitally signing the content, and verifying the integrity and validity of the digital content According to business needs, package single or multiple multimedia content and business information into products and sell them to end users.

The key is generated using the AES algorithm according to the public key cryptography system, the key is stored using hierarchical and layered technology, the key is distributed according to the encryption request, and the key is updated and destroyed according to the use requirements of the key.

The authorization management refers to packaging the user's business information, such as user identification, content identification, key information and authority information, user public key certificate and user signature information, into a license authorization XML file, and issuing it to the customer end.

The beneficial effects of the present invention are:

Through the method of the present invention, multimedia files can be safely processed at the multimedia service provider end, such as content encryption, digital signature, user rights configuration, etc., and the obtained multimedia files are decrypted, signature verified, and rights realized at the user terminal. It provides unified and standard data security services for multimedia service providers.

Instructions attached

FIG. 1 is a schematic diagram of a security engine-based multimedia copyright protection method according to the present invention.

Detailed ways

The present invention will be further described below in conjunction with specific embodiments according to the accompanying drawings:

A security engine-based multimedia copyright protection method, the method implements the encryption and decryption technology of multimedia files by introducing a security engine, realizes file encryption, key distribution, and digital watermarking to electronically sign files, and then through the authorization management module. Files are authorized and managed, corresponding permissions are assigned to purchasers, and multiple encryption technologies are packaged together to protect multimedia copyrights.

As shown in Figure 1, the method includes the following processes:

After the multimedia file producer provides the multimedia file to the multimedia service provider, the provider encrypts the plaintext multimedia file through the security engine function module in the server-side management software, and uses various encryption algorithms provided in the security engine to encrypt and package the file , key generation, digital signature, and other encryption methods, the supplier can choose any combination to use, and package the file into a ciphertext file that integrates multiple encryptions;

According to the purchase and use of different users, the user's business information, such as user ID, content ID, key information and authority information, user public key certificate and user signature information, etc., are packaged into license authorization files, and finally issued to Clients of individual users;

The security engine function module is also added to the terminal software used by the end user. When the user uses a multimedia file, the encrypted multimedia file enters the security engine function module, and the encrypted file is decrypted and unpacked, such as file decryption, key verification, Digital signature verification, etc.; then, according to the license authorization file provided by the service provider, the end user is authorized to analyze the use of multimedia files, including user identification, content identification, key information and authority information, user public key certificate and user signature information, etc. , and finally play the multimedia file in the terminal software.

The encryption and decryption algorithms provided by the security engine include: key generation, AES encryption and decryption algorithms, digital content signature and verification algorithms, content digest algorithms, license signature algorithms, and the like.

The encrypted and packaged content includes: using a symmetrical AES algorithm and a 128-bit data encryption key to encrypt and protect the multimedia content; at the same time, calculating the abstract of the content, digitally signing the content, and verifying the integrity and validity of the digital content Personality; according to business needs, package single or multiple multimedia content and business information into products and sell them to end users.

The key is generated using the AES algorithm according to the public key cryptography system, the key is stored using hierarchical and layered technology, the key is distributed according to the encryption request, and the key is updated and destroyed according to the use requirements of the key.

The authorization management refers to packaging the user's business information, such as user identification, content identification, key information and authority information, user public key certificate and user signature information, into a license authorization XML file, and issuing it to the customer end.

The above embodiments are only used to illustrate the present invention, but not to limit the present invention. Those of ordinary skill in the relevant technical field can make various changes and modifications without departing from the spirit and scope of the present invention. Therefore, all Equivalent technical solutions also belong to the category of the present invention, and the scope of patent protection of the present invention should be defined by the claims.

Claims (6)

1. the multimedia copyright protection method based on security engine; it is characterized in that: described method is by introducing the encryption and decryption technology of security engine realization to multimedia file; realize file encryption, key is allotted, digital watermarking signs electronically to file; by entitlement management module, empowerment management is carried out to file again; distribute corresponding authority to purchase user, realize multiple encryption technology uniform packing protection multimedia copyright.

2. a kind of multimedia copyright protection method based on security engine according to claim 1, it is characterized in that, it is as follows that described method comprises process:

After multimedia file is supplied to multimedia service supplier by multimedia file producing business, supplier passes through security engine functional module to multimedia file expressly in server end management software, in security engine, utilize the multiple encryption algorithms provided to be encrypted packing to file, a multiple cryptograph files being encrypted in one of collection is packaged into file;

For the buying service condition of different user, by the business information of user, be packaged into license authorizes file, be finally issued to the client of each user;

Also security engine functional module is added in the terminal software that terminal user uses, when user uses multimedia file time, the multimedia file of encryption enters security engine functional module, process of unpacking is decrypted to the file of encryption, then according to the license authorizes file provided from service provider, the use authority that terminal user carries out multimedia file is resolved, finally in terminal software, multimedia file is played back.

3. a kind of multimedia copyright protection method based on security engine according to claim 1 and 2; it is characterized in that, the enciphering and deciphering algorithm that described security engine provides comprises: secret generating, AES enciphering and deciphering algorithm, digital content signature and sign test algorithm, synopsis algorithm, ticket signature algorithm.

4. a kind of multimedia copyright protection method based on security engine according to claim 2, is characterized in that, the content of described encryption packing comprises: the data encryption key adopting symmetrical aes algorithm and 128, is encrypted protection to content of multimedia; Meanwhile, the summary of Computed-torque control, carries out digital signature to content, the completeness and efficiency of checking digital content; According to business demand, single or multiple content of multimedia and business information are packaged into product, are sold to terminal user.

5. a kind of multimedia copyright protection method based on security engine according to claim 4; it is characterized in that: described key; according to public-key cryptosystem; use aes algorithm generates; adopt classification and demixing technology to key storage; according to CIPHERING REQUEST, key is distributed, according to the user demand of key, to key updating and destruction.

6. a kind of multimedia copyright protection method based on security engine according to claim 1, is characterized in that: described empowerment management, refers to the business information of user, be packaged into license authorizes XML file, be handed down to client.