KR101532927B1 - Method and apparatus for providing encrypted key based on DRM type of host device - Google Patents

Abstract

The present invention relates to a method and apparatus for providing an encryption key based on a DRM type of a host apparatus, and more particularly, to a method and apparatus for ensuring compatibility of a host apparatus by providing an encryption key according to a DRM type of the host apparatus, ≪ / RTI >
A method of providing an encryption key based on a DRM type of a host device according to an embodiment of the present invention includes: receiving available DRM type information from a host device and discriminating the received available DRM type; Generating a content key container based on a decryption key of content used by the host device; Requesting generation of a key object by transmitting the determined DRM type, the generated content key container, the right to use the content, and metadata to the DRM providing server; And transmitting the generated key object to the host device according to the request.

Description

[0001] The present invention relates to a method and apparatus for providing an encryption key based on a DRM type of a host device,

The present invention relates to a method and apparatus for providing an encryption key based on a DRM type of a host apparatus, and more particularly, to a method and apparatus for ensuring compatibility of a host apparatus by providing an encryption key according to a DRM type of the host apparatus, ≪ / RTI >

In general, digital rights management (DRM) technology is a technology for protecting and managing the rights of digital content creators. It is a technology for storing content in encrypted form in a content providing server, And transmits the encrypted content and key information for decrypting the encrypted content. For example, the DRM specifies the number of times the digital content can be played back, whether or not the content can be copied, or the number of times the content can be copied.

The functions of DRM can be classified into protection of digital contents, management of usage rules, and management of charging system. Through DRM technology, digital content can be distributed illegally, It is protected through an encryption process to prevent illegal use. In addition, DRM allows only legitimate users with cryptographic keys to decrypt and use the encrypted content, and protects the content by making it illegal to use it if it does not exist.

FIG. 1 is a diagram illustrating a conventional DRM-based content playback process. Referring to FIG.

As shown, when a predetermined content provider 10 selects a specific solution such as DRM A for the purpose of copy protection and distribution control of digital content and applies the content to the content, the digital content 20 ) Can be used only in the DRM A-capable device 30.

This is because the digital content 20 to which the DRM A technology is applied is converted into a form dependent on the corresponding solution and is recognized as a service system for compatibility between the DRM A system and the device 30 attempting to play the DRM A It is not provided.

Accordingly, the DRM-applied content is dependent on the DRM technology and solution, and there is a problem that compatibility between various devices is not ensured for DRM-applied content.

In addition, there is a problem that a system of an open structure in which a content provider, a service provider, a DRM provider, a device maker, and the like can freely participate in providing DRM compatibility is not provided.

Korean Unexamined Patent Application Publication No. 2005-0091378 (a shift register and a display device including the same) includes a plurality of stages connected to each other and generating an output signal in order, each stage being responsive to outputs of two different stages, Discloses a technology for generating the output signal according to any one of a plurality of clock signals having a duty ratio of less than 50% and having different phases. However, this technology is not limited to the technique of providing an encryption key according to the DRM type of the host device I do not mention it at all.

The technical problem of the present invention is to ensure compatibility of a host device by generating and providing an encryption key according to a DRM type of the host device.

The technical objects of the present invention are not limited to the technical matters mentioned above, and other technical subjects not mentioned can be clearly understood by those skilled in the art from the following description.

According to an aspect of the present invention, there is provided a method of providing an encryption key based on a DRM type of a host device, the method comprising: receiving available DRM type information from a host device; Determining a type; Generating a content key container based on a decryption key of content used by the host device; Requesting generation of a key object by transmitting the determined DRM type, the generated content key container, the right to use the content, and metadata to the DRM providing server; And transmitting the generated key object to the host device according to the request.

According to another aspect of the present invention, there is provided an apparatus for providing an encryption key based on a DRM type of a host apparatus, the apparatus including: a transceiver for receiving available DRM type information from a host apparatus; A controller for identifying the received available DRM type; A message generator for generating a message for requesting generation of a key object based on the determined available DRM type information; And a content key container generation unit for generating a content key container based on the decryption key of the content used by the host device.

Also, a method of providing an encryption key based on a DRM type of a host device according to an embodiment of the present invention may include: providing the DRM type information of the host device, the content key container, The method comprising: receiving a request message requesting generation of a key object from a relay server, using at least one of the available DRM type information of the host device, the content key container, the usage right, and the metadata, ; And transmitting the generated key object to the relay server.

The details of other embodiments are included in the detailed description and drawings.

BRIEF DESCRIPTION OF THE DRAWINGS The advantages and features of the present invention and the manner of achieving them will become apparent with reference to the embodiments described in detail below with reference to the accompanying drawings. The present invention may, however, be embodied in many different forms and should not be construed as limited to the embodiments set forth herein. Rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the scope of the invention to those skilled in the art. To fully disclose the scope of the invention to those skilled in the art, and the invention is only defined by the scope of the claims. Like reference numerals refer to like elements throughout the specification.

According to the method and apparatus for providing the encryption key based on the DRM type of the host apparatus of the present invention as described above, one or more of the following effects can be obtained.

There is an advantage that the compatibility of the host apparatus is ensured by providing the encryption key according to the DRM type of the host apparatus.

In addition, since the content and the DRM technology are independent, efforts to apply various DRM technologies of the content providing server can be minimized.

In addition, since the host device provides the key object according to the available DRM type, it is not necessary to manufacture the host device for applying various DRM technologies, thereby minimizing the royalty payment of the manufacturer.

Also, there is an advantage that a content providing server, a service providing server, a DRM providing server, a host device manufacturer, and the like can freely participate by providing a system of open structure for DRM compatibility.

FIG. 1 is a diagram illustrating a conventional DRM-based content playback process. Referring to FIG.
2 is a diagram illustrating a frame structure of a DRM file in an apparatus for providing an encryption key according to a DRM type of a host apparatus according to an embodiment of the present invention.
FIG. 3 illustrates a system for providing an encryption key according to a DRM type of a host apparatus according to an exemplary embodiment of the present invention. Referring to FIG.
4 is a block diagram of a relay server in a system for providing an encryption key according to a DRM type of a host apparatus according to an embodiment of the present invention.
5 is a flowchart illustrating operations of a content providing server and a relay server in a system for providing an encryption key according to a DRM type of a host apparatus according to an embodiment of the present invention.
6 is a flowchart illustrating operations of a service providing server and a relay server in a system for providing an encryption key according to a DRM type of a host apparatus according to an embodiment of the present invention.
7 is a flowchart illustrating operations of a host device, a relay server, and a DRM providing server in a system for providing an encryption key according to a DRM type of a host device according to an embodiment of the present invention.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings.

2 is a diagram illustrating a frame structure of a DRM file in an apparatus for providing an encryption key based on a DRM type of a host apparatus according to an embodiment of the present invention.

As shown, a frame of the DRM file includes a content key in the payload portion. The content key is a summetric key for content encryption. DRM packaging is performed on the frame of the DRM file by the DRM providing server. Here, DRM packaging refers to binding to a content encryption key based on a DRM type supported by a user's host device.

Then, when the DRM packaging is completed, a content key container is included in the payload portion of the frame of the DRM file. Here, the content key container refers to a data entity generated according to a data format requested by the DRM providing server, the decryption key input by the initial content providing server. That is, a frame of the DRM file is transmitted in a data format (for example, OMA - > dcf, WMDRM - > asf) Is changed.

The data in the DRM file format includes a decryption key for the content, usage right information, and meta data. The data includes a key object suitable for the DRM type supported by the user host device based on the data in the DRM file format .

FIG. 3 illustrates a system for providing an encryption key based on a DRM type of a host apparatus according to an exemplary embodiment of the present invention. Referring to FIG.

The system for providing the encryption key according to the DRM type of the host apparatus includes the relay server 100, the content providing server 200, the service providing server 300, the host device 400, the DRM providing server 500 And a rights object issuing server 600. [

The content providing server 200 communicates with the relay server 100 to provide information on the content (for example, content identifier, license, metadata, decryption key, etc.) and request service registration. Here, the content refers to movies, music, photographs, games, documents, and the like, and is not limited to the types. The metadata refers to various information about the content. For example, when the content is a music file, the metadata refers to album information, artist information, song title, and reproduction time information.

That is, the content providing server 200 writes the metadata about the content in order to distribute the content to the user who wants to use the predetermined content, sets the usage right for application of the service business, determines the commodity price of the content, And registers it with the server 100. Here, the content providing server 200 encrypts the content through a general encryption algorithm (for example, AES 128). That is, it is not necessary to separately generate contents using various DRM technologies (for example, MS DRM (Microsoft DRM) and OMA DRM (Open Mobile Alliance DRM)).

The service providing server 300 receives the encrypted content from the content providing server 200 and communicates with the relay server 100 to request information necessary for the service configuration of the content, And provides the information to the host device 400.

The host device 400 receives the content service and the encrypted content from the service providing server 300 and provides the DRM type information to the relay server 100 in order to use the provided encrypted content, Key (i.e., a key object). Here, the key object is a decryption key of the content used by the host apparatus. In addition, when the key object is packaged in the DRM technology available in the host device 400 and attempts to use it, the usage right input by the initial content providing server 200 is applied.

In addition, the host device 400 requests the rights object issuing server 600 to use the rights object to use the encrypted content. Here, the host device 400 refers to a device that can play back a content object by consuming a license and a rights object. For example, the host device 400 may be a portable content reproducing device such as a cellular phone, a PDA, or an MP3 player, or a fixed content reproducing device such as a desktop computer or a digital TV.

In addition, since the host device 400 is provided with the key object according to the available DRM type, it is not necessary to provide a separate device for reproducing the content to which various DRM technologies are applied.

The DRM providing server 500 performs packaging based on the available DRM type information, the content key container, the usage right, the metadata, and the like of the host device 400 provided from the relay server 100 to generate a key object, . Here, the DRM providing server 500 can interoperate with the MS DRM and the OMA DRM.

The right object issue server 600 provides the right object to the host device 400 at the request of the host device 400. [ Here, the rights object is a kind of license (i. E., A DRM license) having usage rights for the content object. The DRM license may include a Content Encryption Key (CEK), permission information, constraint information, and a content ID of a content object that can be decrypted using the content encryption key .

The relay server 100 receives the DRM type available from the host device 400 and provides the received DRM type to the DRM providing server 500 to request the key object and transmits the key object transmitted from the DRM providing server 500 to the host device 400 ). Here, the key object including the decryption key can guarantee DRM compatibility in the host device 400 because the usage right is granted based on the DRM technology that is operable in the host device 400. [

The relay server 100 stores information on the contents (for example, contents identifier, usage right, metadata, decryption key, etc.) provided from the contents providing server 200 and transmits the information to the service providing server 300 Provides information necessary for service configuration of contents.

4 is a block diagram of a relay server in a system for providing an encryption key based on a DRM type of a host device according to an embodiment of the present invention.

The relay server 100 includes a transceiver 110, an authentication unit 120, an information retrieval unit 130, a message generation unit 140, a content key container generation unit 150, a storage unit 160 And a control unit 170. [0033]

Herein, the term " part " used in the present embodiment means a hardware component such as software or an FPGA or an ASIC, and 'part' performs certain roles. However, 'part' is not meant to be limited to software or hardware. &Quot; to " may be configured to reside on an addressable storage medium and may be configured to play one or more processors. Thus, by way of example, 'parts' may refer to components such as software components, object-oriented software components, class components and task components, and processes, functions, , Subroutines, segments of program code, drivers, firmware, microcode, circuitry, data, databases, data structures, tables, arrays, and variables. The functions provided in the components and components may be further combined with a smaller number of components and components or further components and components.

The transmitting and receiving unit 110 communicates with the content providing server 200, the service providing server 300, the host device 400 and the DRM providing server 500 to transmit and receive predetermined information, messages and key objects.

For example, the transceiver unit 110 receives a service registration request message and information (e.g., a content identifier, a license, a metadata, a decryption key, and the like) transmitted from the content providing server 200, From the service providing server 300, a message requesting information necessary for configuring the service of the content. Also, the DRM type information available from the host apparatus 400 is received.

The transmission / reception unit 110 transmits a response message for registering the service to the content providing server 200, transmits information necessary for the service configuration of the requested content to the service providing server 300, Lt; RTI ID = 0.0 > decryption < / RTI >

The transceiver 110 transmits the available DRM type information of the host device 400 to the DRM providing server 500 and receives the key object generated by the DRM providing server 500. [

The authentication unit 120 verifies the validity of the message and the content ID transmitted from the content providing server 200, the service providing server 300, and the host device 400, and authenticates the conformity.

When the service providing server 300 requests the information necessary for configuring the service of the specific content based on the ID of the content, the information searching unit 130 searches the information necessary for the service configuration of the content corresponding to the ID of the transmitted content (E. G., Rights of use and metadata of the contents).

The message generating unit 140 generates a response message to be transmitted to the content providing server 200, the service providing server 300 and the host device 400 and transmits a message requesting the key object to be transmitted to the DRM providing server 500 .

The content key container generation unit 150 generates a content key container in which the decryption key provided by the content providing server 200 is changed to a format requested by the DRM providing server 500. [

The storage unit 160 stores information on the content provided by the content providing server 200 (for example, content identifier, usage right, metadata, and decryption key).

The controller 170 determines the available DRM type based on the available DRM type information provided from the host device 400 and provides the DRM type determined when the key object is generated to the DRM providing server 500. [

In addition, the controller 170 controls the operation of each of the functional blocks 110 to 160 constituting the relay server 100.

5 is a flowchart illustrating operations of a content providing server and a relay server in a system for providing an encryption key based on a DRM type of a host apparatus according to an embodiment of the present invention.

First, the content providing server 200 generates a content key for decrypting content using a symmetric key algorithm (S510). The content is encrypted (S520). Next, a policy for content ID, metadata about contents, and usage rights is generated (S530).

The content providing server 200 then communicates with the relay server 100 to transmit information about the content (for example, content ID, license, metadata, content key, etc.) and a message requesting content registration (S540).

The relay server 100 authenticates the conformity to the content registration request message transmitted from the content providing server 200 in operation S550 and transmits information about the content transmitted from the content providing server 200 For example, content ID, license, metadata, and content key) (S560).

Then, a response message to the content registration result is generated and transmitted to the content providing server 200 (S570).

6 is a flowchart illustrating operations of a service providing server and a relay server in a system for providing an encryption key based on a DRM type of a host apparatus according to an embodiment of the present invention.

First, the service providing server 300 receives the encrypted content from the content providing server 200. Next, the conformity of the received encrypted content is verified (S610).

If it is determined that the encrypted content is suitable, the service providing server 300 searches the address of the relay server 100 and the ID of the content to set the content service (S620).

Then, a message requesting the metadata of the content ID searched at the address of the searched relay server 100 is transmitted (S630). Here, the metadata of the content refers to information necessary for the content service. For example, when the content is a music file, the metadata refers to album information, artist information, song title, and reproduction time information.

Accordingly, the relay server 100 authenticates the content ID transmitted from the service providing server 300 in step S640. If the authentication result is appropriate, the relay server 100 searches the license and metadata for the content in step S650.

Then, a response message is transmitted to the service providing server 300 together with the retrieved usage right and metadata (S660). Then, the service providing server 300 sets the content service using the transferred usage right and metadata (S670).

7 is a flowchart illustrating an operation of a host device, a relay server, and a DRM providing server in a system for providing an encryption key based on a DRM type of a host device according to an embodiment of the present invention.

First, the host device 400 downloads the encrypted content from the service providing server 300 (S710).

Then, in step S715, the host device 400 searches for the ID of the content and the address of the relay server 100 (step S715) S720).

Then, the host device 400 checks available DRM type information for using the downloaded contents (S725). Then, in step S730, the DRM type information and the retrieved content ID are transmitted to the address of the retrieved relay server 100, together with the checked DRM type information and the requested content ID.

The relay server 100 authenticates the content ID transmitted from the host device 400 in step S735 and if available, the relay server 100 determines whether the DRM type information is available based on the available DRM type information received from the host device 400 And determines a DRM type (S740).

After that, the relay server 100 changes the decryption key received from the content providing server 200 into a format requested by the DRM providing server 500 (S745) A content key container is generated (S750).

Then, in step S755, the DRM server 500 transmits a message requesting generation of a key object together with the determined DRM type, the retrieved license and metadata, and the generated content key container.

The DRM providing server 500 verifies the received content key container in step S760 and checks the usage right and metadata in step S765. The DRM providing server 500 transmits the available DRM type information, the content key container, The packaging is performed based on the data to generate a key object (S770). Here, when the generated key object is packaged in the DRM technology available in the host device 400 and attempts to use it, the usage right input by the original content providing server 200 is applied.

Then, the generated key object is transmitted to the relay server 100 (S775), and the relay server 100 transmits a response message to the host device 400 together with the received key object (S780).

Next, the host device 400 requests the rights object generation server 600 to use the right object for using the encrypted content, and obtains the rights object transmitted in response to the request (S785).

Then, the host device 400 decrypts the encrypted content through the received right object and key object (S790).

While the present invention has been described in connection with what is presently considered to be practical exemplary embodiments, it is to be understood that the invention is not limited to the disclosed embodiments, but, on the contrary, You will understand. It is therefore to be understood that the above-described embodiments are illustrative in all aspects and not restrictive.

100: Relay server 200: Content providing server
300: Service providing server 400: Host device
500: DRM providing server 600: Rights object issuing server

Claims (15)

Receiving available DRM type information from the host device, and determining the received available DRM type;
Generating a content key container based on a decryption key of content used by the host device;
Requesting generation of a key object by transmitting the determined DRM type, the generated content key container, the right to use the content, and metadata to the DRM providing server; And
And transmitting the generated key object to the host device in accordance with the request. The method according to claim 1,
Wherein the key object is a content decryption key used by the host device,
Wherein the key object is generated from a DRM providing server using at least one of the available DRM type information of the host device, the content key container, the usage right, and the metadata, / RTI > The method according to claim 1,
Wherein the decryption key, the usage right, and the metadata of the content are provided from a content providing server, and the encryption key is based on a DRM type of the host device. delete A transmission / reception unit for receiving DRM type information available from the host device;
A controller for identifying the received available DRM type;
A content key container generation unit for generating a content key container based on a decryption key of content used by the host device; And
And a message generation unit for generating a message for requesting generation of a key object including the determined DRM type, the generated content key container, the right to use the content, and metadata,
And transmits the generated key object to the host device in response to the request for generating the key object, based on the DRM type of the host device. 6. The method of claim 5,
Wherein the key object is a content decryption key used by the host device,
Wherein the key object is generated from a DRM providing server using at least one of the available DRM type information of the host device, the content key container, the usage right, and the metadata, . 6. The method of claim 5,
Wherein the decryption key, the right of use, and the metadata of the content are provided from a content providing server, and provide an encryption key based on a DRM type of the host device. delete Receiving, from a relay server, a request message requesting generation of a key object, together with available DRM type information of the host device, a content key container, a right of usage of the content, and metadata of the content;
Generating a key object using at least one of the available DRM type information of the host device, the content key container, the usage right, and the metadata; And
And transmitting the generated key object to the relay server. A method of providing an encryption key based on a DRM type of a host device. 10. The method of claim 9,
Wherein the rights and metadata provided from the content providing server are received by the relay server, and the encryption key is based on the DRM type of the host device. 10. The method of claim 9,
Further comprising performing DRM packaging on a frame of the DRM file to convert the DRM file structure into a DRM file format processed by the DRM providing server, the method comprising: providing an encryption key based on a DRM type of the host device How to. 12. The method of claim 11,
Wherein the DRM packaging is bound using a content encryption key based on a DRM type supported by the host device. 12. The method of claim 11,
Wherein the content key container is included in a payload portion of a frame of the DRM file after the DRM packaging is completed. 14. The method of claim 13,
Wherein the content key container is a data entity generated according to a DRM file format requested by the DRM providing server, the DRM type being based on a DRM type of a host device. 12. The method of claim 11,
Wherein the DRM file format includes a decryption key for the content, the right to use, and the metadata.

Images