CN1584870A - Digital content management system and method and its application method - Google Patents

Abstract

A digital content management system includes a memory for storing personal security information and an electronic file including encrypted digital content and an encrypted symmetric key, an information management unit, an encryption and decryption function module, an information analysis module, and a media playback module. The information management unit uses the encryption and decryption function module to decrypt the encrypted symmetric key with the personal security information to obtain a symmetric key, and decrypts the encrypted digital content with the symmetric key to obtain the digital content. The information analysis module analyzes the digital content to obtain the corresponding copyright control information. The media analysis module can analyze the decrypted digital content according to the copyright control information.

Description

Digital content management system and method and its application method

technical field

The present invention relates to a digital content management system and method, and in particular to a system and method capable of effective copyright control for digital content and providing digital content for application.

Background technique

With the popularization of computers and networks, people's lifestyles are facing major changes. For example, the creation and management of digital content has replaced traditional data recording types, and the Internet has become the best way for people to collect data. In addition, people are also trying to use the Internet for commercial applications, such as shopping and downloading related information and files. At the same time, with the changes in data recording and dissemination patterns, digital content, such as e-books and audio-visual files, has become one of the important communication methods in life.

The current method of copyright control for digital content is to encrypt the digital content, and then provide it to the buyer to decrypt it based on its security information, such as a password or a private key (Private Key), to obtain the original digital content and carry out parse. In the conventional method, since the digital content is stored in the computer, and the security information is stored in the chip card or the computer, when the user wants to analyze the digital content, the security information must be imported into the computer storing the digital content Among them, and the computer must have the decryption ability to analyze the digital content. And when the user wants to analyze on a different computer host, the security information and digital content must be copied to the computer host, and decryption software must be installed in the computer host to perform analysis.

Due to the easy duplication of electronic digital content and the lack of an effective control mechanism, digital content is easily copied and embezzled by users, resulting in difficulties in the management of digital content copyright and the inability to effectively control the copyright of digital content, thereby hindering The development and growth of the digital content industry and market.

Contents of the invention

The main purpose of the present invention is to provide a digital content management system and method capable of effective copyright control of digital content.

Another object of the present invention is to provide a digital content exchange method that can implement digital content application on the network.

In order to achieve the above object, it can be achieved by the digital content management system and method of the present invention and its application method. The digital content management system according to the embodiment of the present invention includes a personal security information, an electronic file including an encrypted digital content and an encrypted symmetric key, an information management unit and a media playing module. The information management unit decrypts the encrypted symmetric key with the personal security information to obtain a symmetric key, and decrypts the encrypted digital content with the symmetric key to obtain a digital content. The media playing module can play the decrypted digital content.

When the information management unit decrypts the encrypted digital content with the symmetric key, a digital signature of an issuer of the corresponding digital content is obtained, and the information management unit further calculates a first hash value of the corresponding digital content, and obtains A public key corresponding to the issuer, and the digital signature is unlocked according to the public key to obtain a second hash value, and it is judged whether the digital content has been modified according to the first hash value and the second hash value.

The digital content management system further includes an information analysis unit for analyzing the digital content to obtain copyright control information of the corresponding digital content. Wherein, the digital content can have multiple file partitions, and each file partition has corresponding copyright control information, and the media playing module can play the digital content according to the copyright control information.

In an optimal situation, personal security information and electronic files are stored in a portable storage device.

An example of digital content application according to the embodiment of the present invention-application method. Firstly, the issuer digitally signs the digital content, and transmits the digital content with the digital signature to the digital content website management background of a digital content application platform on the network. Afterwards, the digital content website management background verifies the digital content to determine the inventor and integrity information of the corresponding digital content. Then, the digital content website management background stores the digital content to the digital content file server.

When a consumer wants to purchase digital content, the consumer selects the digital content on the digital content application platform. Afterwards, the digital content application platform obtains the digital content from the digital content archive server, and obtains the certificate of the corresponding consumer from the authentication server. Then, the digital content application platform transmits the digital content and the certificate to the encryption server. The encryption server encrypts the digital content with a symmetric key to obtain the encrypted digital content, and encrypts the symmetric key according to the certificate to obtain an encrypted symmetric key. Finally, the digital content application platform combines the encrypted digital content and the encrypted symmetric key into an electronic file, and transmits it to the consumer.

Description of drawings

FIG. 1 is a schematic diagram showing an application environment of digital content according to an embodiment of the present invention;

FIG. 2 is a flow chart showing the digital signature process of digital content according to an embodiment of the present invention;

FIG. 3 is a flow chart showing the process of verifying the identity and integrity of the issuer of digital content according to an embodiment of the present invention;

FIG. 4 is a flow chart showing the process of encrypting digital content according to an embodiment of the present invention;

FIG. 5 is a schematic diagram showing the system architecture of a digital content management system according to an embodiment of the present invention;

FIG. 6 is a flow chart showing the process of decrypting and playing digital content according to an embodiment of the present invention.

Symbol Description:

100-Digital content application platform

101-Digital content network management background

102-Digital content archive server

103-Authentication server

104-encrypted server

110-Consumer

120-issuer

130-Network

S201, S202-operation steps

S301, S302, ..., S306-operation steps

S401, S402, ..., S405-operation steps

500-memory

501-Personal Security Information

502-Electronic File

510-Information Management Unit

520-Encryption and decryption function module

530-Information analysis unit

540-media player module

S601, S602, ..., S605-operation steps

Detailed ways

As shown in FIG. 1 , it is an application environment for displaying digital content according to an embodiment of the present invention. As shown in the figure, the digital content application environment includes a consumer 110 and a digital content publisher 120 , which can be coupled with the digital content application platform 100 through a network 130 . It should be noted that the digital content may be electronic files, or digital electronic data such as video and audio files.

The digital content application platform 100 is a platform to provide consumers 110 and issuers 120 with digital content applications. The digital content application platform 100 includes a digital content network management background 101 , a digital content file server 102 , an authentication server 103 and an encryption server 104 . The detailed operation of each unit will be described later. It is worth noting that the present invention can construct a public key infrastructure, and issue a certificate to the issuer, agent and owner of each digital content, so that the issuer can use this certificate to digitally sign the file chapter, and encrypt the digital content with the owner's certificate to prevent it from being analyzed by others. Wherein, all credential information can be recorded in the authentication server 103 .

FIG. 2 shows the digital signature flow of the publisher 120 for the digital content according to the embodiment of the present invention. After the issuer 120 obtains the digital content, in step S201, the hash value of the digital content is calculated according to a hash function (HashFunction). Afterwards, the private key of the issuer 120 is obtained, and in step S202, a digital signature is created according to the hash value of the private key of the issuer 120 and the digital content, so as to complete the digital content with the digital signature. It should be noted that the digital signature of the present invention uses asymmetric key technology to ensure the integrity, non-repudiation and authenticity of digital content.

After the issuer 120 digitally signs the digital content, the issuer 120 can log into the digital content application platform 100 and transmit the digital content with the digital signature to the digital content website management background 101 in the digital content application platform 100 middle.

FIG. 3 shows the process of verifying the publisher's identity and integrity of the digital content by the digital content website management background 101 according to an embodiment of the present invention. After the digital content website management background 101 receives the digital content, as in step S301, the first hash value of the digital content is directly calculated according to the hash function. Next, in step S302, the digital content website management background 101 obtains the certificate of the digital content, and confirms the identity of the publisher according to the identity information of the publisher 120 recorded in the certificate. Afterwards, the digital content website management background 101 obtains the public key of the corresponding issuer 120 in the certificate, and as in step S303, unlocks the digital signature of the corresponding digital content according to the public key of the issuer 120 to obtain a second hash value.

Afterwards, in step S304, the digital content website management background 101 compares the first hash value with the second hash value. When the first hash value is different from the second hash value (No in step S304), as in step S305, it means that the digital content has been modified (not complete). And when the first hash value is the same as the second hash value (Yes in step S304), as in step S306, it means that the digital content is complete. Therefore, the digital content website management background 101 can store the digital content in the digital content file server 102 .

As mentioned earlier, digital content can be encrypted with the owner's credentials to prevent it from being parsed or misappropriated by others. Therefore, after the consumer 110 selects the digital content to be purchased and downloaded on the digital content application platform 100, the digital content application platform 100 obtains the specified digital content from the digital content archive server 102, and obtains the corresponding consumer 110's ID from the authentication server 103. certificate. Afterwards, the digital content application platform 100 transmits the digital content and the certificate to the encryption server 104 for related encryption operations.

FIG. 4 shows the process of encrypting digital content by the encryption server 104 according to an embodiment of the present invention. First, in step S401, the encryption server 104 randomly generates a symmetric key, and in step S402, encrypts the digital content with the symmetric key, thereby generating an encrypted digital content. Afterwards, in step S403, the encryption server 104 obtains the public key of the corresponding consumer 110 in the certificate, and in step S404, encrypts the symmetric key with the public key of the consumer 110 to obtain an encrypted symmetric key. Finally, in step S405, the encryption server 104 combines the encrypted digital content and the encrypted symmetric key into an electronic file.

After the encryption server 104 completes the encryption operation and generates a corresponding electronic file, the digital content application platform 100 can transmit the electronic file to the consumer 110 . It should be noted that the digital content application platform 100 can generate copyright control information according to the purchase status of the digital content by the consumer 110 . Wherein, the copyright control information may include the authorization period of the corresponding digital content, printing restriction information, issuer information, digital signature and so on. In addition, the digital content can also be divided into multiple file partitions, and each file partition has corresponding copyright control information to control the playback copyright of the digital content in the file partition. In addition, the digital content application platform 100 can incorporate copyright control information into encrypted digital content. In one case, the copyright control information may be presented using Extensible Markup Language (XML). On the other hand, the digital content application platform 100 also has a corresponding billing and payment mechanism for the purchase of digital content by the consumer 110, but it is not the main feature of this case, so it is omitted here.

FIG. 5 shows the system architecture of the digital content management system at the customer end according to an embodiment of the present invention. As shown in the figure, the digital content management system according to the embodiment of the present invention includes a memory 500 , an information management unit 510 , an encryption and decryption function module 520 , an information analysis module 530 and a media player module 540 .

The storage 500 stores the personal security information 501 of the consumer 110, such as a private key and an electronic file 502 including encrypted digital content and an encrypted symmetric key. Among them, the electronic file 502 is purchased and downloaded by the digital content application platform 100 . The information management unit 510 can decrypt and restore the encrypted digital content to digital content, and its operation will be described in detail later. The encryption and decryption function module 520 can provide applications of cryptographic calculations, such as encryption/decryption and signature/verification of symmetric and asymmetric keys. The information analysis module 530 can analyze the digital content, so as to obtain the corresponding digital content and copyright control information. The media playing module 540 can be a text reader, a video player, or any media parser, etc., for playing digital content.

FIG. 6 shows a flow of decrypting and playing digital content according to an embodiment of the present invention. When the consumer 110 (the owner of the digital content) wants to read the digital content, as in step S601, the information management unit 510 obtains the private key (personal security information 501) of the corresponding consumer 110 from the storage 500, and as in step S602, The information management unit 510 uses the private key of the consumer 110 to decrypt the encrypted symmetric key according to the function provided by the encryption and decryption function module 520 , so as to obtain the symmetric key.

Next, in step S603, the information management unit 510 uses the symmetric key to decrypt the encrypted digital content, so as to obtain the decrypted digital content. Afterwards, in step S604, the information analysis module 530 analyzes the digital content to obtain copyright control information corresponding to the digital content. Then, in step S605, the media playing module 540 can play the decrypted digital content according to the copyright control information. It should be noted that the information management unit 510 can also verify the digital content, that is, verify the identity and integrity of the issuer of the digital content. The method is shown in FIG. 3 .

It should be particularly noted that, in order to strengthen the effectiveness of digital content copyright control and copyright management, consumers' personal security information, media playback modules and electronic files can be stored in portable storage devices, such as flash drives. With the assistance of this technology, digital content owners can carry this portable storage device at any time to analyze and read digital content on each computer.

Therefore, with the digital content management system and method and its application method proposed by the present invention, an innovative application mode of digital content can be provided and effective copyright control can be performed on digital content. In addition, during transmission, digital content can be identified as its publisher, ensuring that its content has not been tampered with, nor can it be parsed by someone other than the owner.

Claims (35)

1. digital content management system comprises:

One personal security's information;

One electronic record comprises an encrypted digital content and an encryption symmetrical expression gold key;

One information management unit is decrypted for this encryption symmetrical expression gold key with this personal security's information, thereby obtains symmetrical expression gold key, and be decrypted in this encrypted digital content with this symmetrical expression key pair, thereby obtains a digital content; And

One media play module is in order to play this digital content.

2. digital content management system according to claim 1, wherein when this information management unit with this symmetrical expression key pair when this encrypted digital content is decrypted, more obtain mutually a digital signature of a publisher that should digital content, and this information management unit more calculate mutually should digital content one first Hash Value, and obtain mutually should publisher a PKI, and untie this digital signature according to this PKI, thereby obtain one second Hash Value, and judge that according to this first Hash Value and this second Hash Value whether this digital content is through revising.

3. digital content management system according to claim 2, wherein this digital signature is to make with this first Hash Value that mutually should digital content according to a private key that mutually should publisher.

4. digital content management system according to claim 2, wherein a PKI that mutually should publisher be recorded in mutually should a voucher of publisher in, and the identity information that this evidence record mutually should publisher.

5. digital content management system according to claim 1, wherein this encryption symmetrical expression gold key is to encrypt according to a owner's that mutually should digital content a PKI.

6. digital content management system according to claim 1, wherein this encrypted digital content is to encrypt according to this symmetrical expression gold key.

7. digital content management system according to claim 1 more comprises information analysis unit, in order to this digital content is analyzed, thereby obtain mutually should digital content a copyright control information.

8. digital content management system according to claim 7, wherein this digital content has a plurality of archives subregions, and each these archives subregion has corresponding this copyright control information.

9. digital content management system according to claim 7, wherein this copyright control information comprise mutually should digital content a licensing term.

10. digital content management system according to claim 7, wherein this copyright control information comprise mutually should digital content one print restricted information.

11. digital content management system according to claim 7, wherein this media play module is more play this digital content according to this copyright control information.

12. digital content management system according to claim 5, wherein this personal security's information is this owner's that mutually should digital content a private key.

13. digital content management system according to claim 1, wherein this personal security's information and this electronic record are to be stored in the portable memory device.

14. a digital content management method comprises the following steps:

An electronic record that comprises an encrypted digital content and an encryption symmetrical expression gold key is provided;

Be decrypted for this encryption symmetrical expression gold key with personal security's information, thereby obtain symmetrical expression gold key;

Be decrypted in this encrypted digital content with this symmetrical expression key pair, thereby obtain a digital content; And

With a media play module this digital content is play.

15. digital content management method according to claim 14, wherein when with this symmetrical expression key pair when this encrypted digital content is decrypted, more obtain mutually a digital signature of a publisher that should digital content, and more comprise the following steps:

Calculate mutually should digital content one first Hash Value;

Obtain mutually should publisher a PKI;

Untie this digital signature according to this PKI, thereby obtain one second Hash Value; And

Judge that according to this first Hash Value and this second Hash Value whether this digital content is through revising.

16. digital content management method according to claim 15, wherein this digital signature is to make with this first Hash Value that mutually should digital content according to a private key that mutually should publisher.

17. digital content management method according to claim 15, wherein a PKI that mutually should publisher be recorded in mutually should a voucher of publisher in, and the identity information that this evidence record mutually should publisher.

18. digital content management method according to claim 14, wherein this encryption symmetrical expression gold key is to encrypt according to a owner's that mutually should digital content a PKI.

19. digital content management method according to claim 14, wherein this encrypted digital content is to encrypt according to this symmetrical expression gold key.

20. digital content management method according to claim 14 more comprises this digital content is analyzed, thus obtain mutually should digital content a copyright control information.

21. digital content management method according to claim 20, wherein this digital content has a plurality of archives subregions, and each these archives subregion has corresponding this copyright control information.

22. digital content management method according to claim 20, wherein this copyright control information comprise mutually should digital content a licensing term.

23. digital content management method according to claim 20, wherein this copyright control information comprise mutually should digital content one print restricted information.

24. digital content management method according to claim 20 more comprises with this media play module and plays this digital content according to this copyright control information.

25. digital content management method according to claim 18, wherein this personal security's information is this owner's that mutually should digital content a private key.

26. digital content management method according to claim 14, wherein this personal security's information and this electronic record are to be stored in the portable memory device.

27. a digital content application process is applicable to a digital content application platform, comprises the following steps:

One publisher makes a digital signature with a digital content;

This digital content that this publisher will have this digital signature is sent to a digital content portal management backstage of this digital content application platform;

This this digital content of digital content portal management background authentication, with judge mutually should digital content this inventor and an integrity information; And

This digital content portal management backstage is stored to a digital content archives server with this digital content.

28. digital content application process according to claim 27 more comprises the following steps:

One consumer is in selected this digital content of this digital content application platform;

This digital content application platform obtains this digital content by this digital content archives server;

This digital content application platform by a certificate server obtain mutually should the consumer a voucher;

This digital content application platform is sent to an encryption server with this digital content and this voucher;

This encryption server is encrypted this digital content with symmetrical expression gold key, thereby obtains an encrypted digital content;

This encryption server is encrypted this symmetrical expression gold key according to this voucher, encrypts symmetrical expression gold key thereby obtain one; And

This digital content application platform is combined into an electronic record with this encrypted digital content and this encryption symmetrical expression gold key, and this electronic record is sent to this consumer.

29. digital content application process according to claim 27, wherein this publisher carries out the method for digital signature with this digital content, comprises the following steps:

Calculate a Hash Value of this digital content; And

Make this digital signature according to a private key and this Hash Value that mutually should publisher.

30. digital content application process according to claim 27, wherein the method for this this digital content of digital content portal management background authentication comprises the following steps:

Calculate mutually should digital content one first Hash Value;

Obtain mutually should publisher a PKI;

Untie this digital signature according to this PKI, thereby obtain one second Hash Value; And

Judge that according to this first Hash Value and this second Hash Value whether this digital content is through revising.

31. digital content application process according to claim 28 more comprises the following steps:

This consumer is decrypted for this encryptions symmetrical expression gold key with a private key that mutually should the consumer, thereby obtains the golden key of this symmetrical expression;

Be decrypted in this encrypted digital content with this symmetrical expression key pair, thereby obtain this digital content; And

With a media play module this digital content is play.

32. digital content application process according to claim 31 more comprises the following steps:

This digital content is analyzed, thus obtain mutually should digital content a copyright control information; And

Play this digital content with this media play module according to this copyright control information.

33. digital content application process according to claim 32, wherein this digital content has a plurality of archives subregions, and each these archives subregion has corresponding this copyright control information.

34. digital content application process according to claim 32, wherein this copyright control information comprise mutually should digital content a licensing term.

35. digital content application process according to claim 32, wherein this copyright control information comprise mutually should digital content one print restricted information.

Images