CN101405719B - Method and device for moving and sharing digital content and copyright objects - Google Patents

Abstract

Device and method for moving digital rights management (DRM) content and rights objects (ROs). The method includes a user joining multiple devices to a specific domain (group) and moving the domain ROs via a multimedia card such as a wired/wireless physical medium (e.g., a secure memory card) so that the domain ROs can be shared among them; and the domain ROs are used by the devices already joined to the domain to reproduce the DRM content of the domain ROs.

Description

Method and device for moving and sharing digital content and copyright objects

technical field

The present invention relates to digital rights management (DRM: Digital Rights Management), more specifically, relates to the method and equipment thereof of moving and sharing DRM content and rights object (RO: Rights Object). the

Background technique

Generally speaking, digital rights management (DRM) is a technology that protects the copyright object (RO) of digital content and systematically manages RO. Protection and management scheme for consumer RO and content. the

FIG. 1 is an architectural diagram illustrating a DRM system according to the prior art. the

As shown in the figure, the DRM system controls content distributed by content providers to users for consumption only within the authority of the RO. A content provider is an entity corresponding to a content issuing center (CI: ContentIssuer) or a copyright issuing center (RI: Rights Issuer). the

CI publishes content protected by a specific encryption method to prevent access by users without access rights (hereinafter referred to as DRM content), and RI publishes a rights object (RO) required to consume DRM content. the

A DRM agent is installed at a device to receive DRM content and RO from CI or RI, and controls consumption of DRM content at a corresponding device by analyzing "License" contained in the RO. A license consists of "Permission" and "Constraint". the

However, the DRM technology in the prior art has the following requirements. the

A user with multiple devices wishes to share DRM content at each of the multiple devices. the

In addition, users with multiple devices wish to form a specific group or domain in which to share DRM content and ROs of the DRM content. the

In addition, DRM content and RO must be moved (transmitted) through wired/wireless physical media to Shared across devices.

Contents of the invention

Accordingly, an object of the present invention is to provide a method of moving (transferring) Digital Rights Management (DRM) content and a Rights Object (RO) of the DRM content between a plurality of devices through a physical medium. the

In order to achieve these objectives, a method for moving ROs in a DRM system is provided, including: a user adds a first device and one or more second devices into a specific domain; ) receiving first information related to a domain RO; the first device moving the first information to a third device; and the third device moving the first information to the second device. the

Advantageously, the method further comprises said first device receiving a domain RO and one or more domain contents from said RI. the

The step of sending the first information to the third device includes authenticating the first device by the third device before the first device moves the first information to the third device. the

The step of sending the first information to the second device includes authenticating the second device by the third device before the third device moves the first information to the second device. the

The step of joining the first device and one or more second devices to the specific domain comprises: the user registering the first device and the one or more second devices with the RI ; the first device receives a domain list provided by the RI; the first device selects the specific domain in the domain list; and associates the first device with the one or more second The device joins the specific domain. the

In order to achieve these objectives, a method for sharing ROs in a DRM system is provided, the method comprising the following steps: the first device sends the first information related to the domain RO it owns to the third device; the user sends the third device separating from the first device and then incorporating the third device into the second device; the second device receiving the first information from the third device; and the second device utilizing the The domain RO is decoded by the first information, and the DRM content is consumed using the decoded domain RO. the

In order to achieve these objects, there is also provided a device for moving RO in the DRM system, the device includes: a socket for assembling and disassembling a multimedia entity; to register and receive a list of domains provided by the RI; a display to display the list of domains; a DRM agent that processes signals to add one or more devices of a user to the domain list selected by the user from the list of domains; memory, which stores the domain context (domain context) and domain RO provided by the RI; and a processor, which processes signals to utilize the domain context and the domain RO to consume DRM content, and to install The multimedia at the socket moves (transfers or sends) the domain environment and the domain RO. the

According to another aspect of the present invention, a method of moving an RO in a DRM system includes the steps of: a first device moves (transmits or sends) an encryption key for decoding an RO of a digital content to one or more second devices; and The one or more second devices move the RO of the digital content to another second device according to a user request. the

According to still another aspect of the present invention, a method for moving ROs in a DRM system includes the following steps: a first device moves ROs of digital content to one or more second devices; The encryption key for decoding the RO of the digital content is moved (transmitted or sent) between the two devices. the

According to another aspect of the present invention, there is provided a device for moving ROs in a DRM system. The device includes: a DRM agent that receives ROs of digital content from a copyright issuance center (RI) to move (transmit or sending) the encryption key for decoding the RO of the digital content or the corresponding RO. the

Description of drawings

Fig. 1 is the architectural diagram showing the DRM (Digital Rights Management) system according to the prior art;

Fig. 2 is the block diagram showing the DRM system according to the first embodiment of the present invention;

3 is a diagram showing a process of moving an RO of digital content in a DRM system according to a second embodiment of the present invention;

FIG. 4 is a diagram showing an update and authentication process of an RO of mobile digital content in a DRM system according to a third embodiment of the present invention;

5 is a diagram illustrating a process of moving an RO of digital content in a DRM system according to a fourth embodiment of the present invention;

6 is a diagram showing a process of moving an RO of digital content in a DRM system according to a fifth embodiment of the present invention;

7 is a diagram showing a process of moving an RO of digital content in a DRM system according to a sixth embodiment of the present invention;

8 is a flowchart illustrating a method of moving a domain RO by utilizing a smart card according to a seventh embodiment of the present invention;

FIG. 9 is a diagram illustrating an XML schema of a join domain request message and parameters contained in the message according to the present invention;

FIG. 10 is a diagram showing an XML schema of a join domain response message and parameters contained in the message according to the present invention;

11 is a diagram showing a process of moving an RO in a DRM system according to an eighth embodiment of the present invention; and

FIG. 12 is a block diagram schematically showing an apparatus for moving digital content or RO according to the present invention. the

Detailed ways

Reference will now be made in detail to the preferred embodiments of the invention, examples of which are illustrated in the accompanying drawings. the

The present invention is applied to a Digital Rights Management (DRM) system and a DRM device using digital rights. However, the present invention is also applicable to all communication fields including DRM-dedicated wired/wireless communication. the

The first idea of the present invention is that the user joins multiple devices (terminals) into a specific domain (group), and multiple devices move domain rights objects through multimedia cards such as wired/wireless physical media (such as secure memory cards) (RO) to share a domain RO among multiple devices. A second idea of the invention is that multiple devices implement (consume or use or play) the DRM content of the domain RO using the domain RO. The present invention also provides an instant authentication method for moving an RO or a domain key of digital content between devices (eg, terminals). the

The technical terms used in the present invention will be explained below. the

The terminal of the present invention is called a device, and the terminal includes all types of terminals that consume digital content. That is, the apparatus of the present invention includes mobile communication terminals (for example, user equipment UE, mobile phone, cellular phone, DMB phone, DVB-H phone, PDA, and PTT) using digital content, digital TV, GPS navigator, portable game machine , MP3 and other household appliances. Therefore in the present invention, the term "terminal" is the same as the term "equipment". The device of the present invention includes a communication module, a Web/WAP browser, a DRM agent, a media reproduction device and a media library, and a memory. the

A domain represents a collection of devices or a group of one or more devices. A domain is an object managed by a rights issue center (RI: Rights Issuer) or a domain authority (DA: domain authority), and the domain has a corresponding domain key. Domain keys are used to encode and/or decode domain ROs. Domain RO is issued by RI and includes RO of DRM content encoded by domain key. The DRM content is decoded by the encryption key contained in the domain RO, so that a user having the domain key can use the DRM content. Therefore, only a device joined to a specific domain (ie, each DRM agent of the device) can decode the domain RO using the domain key, and can implement DRM content using the decoded domain RO. DRM agents are installed on specific devices to join and/or leave domains. The DRM agent also moves the domain RO to another DRM agent in the domain through the wired/wireless medium. the

The RO of DRM content is divided into stateful RO (Stateful RO) and stateless RO (Stateless RO). A stateless RO is an RO in which the device does not manage state information (State Information). A stateful RO is an RO in which a device manages state information to precisely utilize permissions and restrictions within the RO. Limits managed by state information include "interval", "count", "timing", "cumulative", etc. the

The status information indicates the usable amount of the RO, and one stateful RO manages one status information. The status information may be managed by means of "timing", "count", etc., or by means of "remaining count", "remaining interval" and the like. the

DRM content can be distributed by a Content Distribution Center (CI) or RI. the

Connected devices represent devices that can be connected directly to the RI via wired or wireless means. In contrast, an unconnected device means a non-communication-capable device that is not directly connected to the RI. the

A smart card represents a medium or device such as a secure memory card (eg SIM or MMC) on which physical memory and/or agents are installed. the

Hereinafter, the method and device for moving ROs in the DRM system according to the present invention will be described in detail. the

FIG. 2 is a block diagram showing a DRM system according to a first embodiment of the present invention.

As shown in the figure, the DRM system according to the present invention includes a Copyright Issuing Center (RI) 40 of an RO that issues DRM content, a Content Issuing Center (CI) 50 that issues actual DRM content, and one or more slaves from RI 40 and CI respectively. 50 A device (terminal) that receives RO and DRM content (for example, the first device 10 and the second device 30 in FIG. 2 ). the

The first device 10 and the second device 30 include a communication module, a Web/WAP browser, a DRM agent, a media reproduction device and a media library, and a memory. the

Each DRM agent installed in the first device 10 and the second device 30 receives the RO and the DRM content from the RI 40 or the CI 50, and controls the consumption of the DRM content by analyzing the permissions and/or restrictions in the RO, or performs a check on the RO. update or move. the

The DRM content and/or RO are stored in the DRM agent within the first device 10, or in the DRM agent of a physical medium (not shown) such as a smart card. Accordingly, the user of the first device 10 may move a key (for example, a domain key) or RO for decoding the RO of the DRM content to the second device 30 through a physical medium. the

However, the RO of the DRM content is not necessarily removable. The user of the first device 10 must obtain permission from the RI 40 or CI 50 (for example, permission to move the RO) to move the RO to the user of the second device 30. In addition, when the RO of the DRM content is completely consumed, the user of the first device 10 may purchase a new RO from the RI 40 or the CI 50, or may request the RI 40 to update the RO. the

The user of the first device 10 can move his RO to the user of the second device 30 once the permission to move the DRM content is obtained by purchasing or updating the RO. the

FIG. 3 is a diagram illustrating a process of moving an RO of digital content in a DRM system according to a second embodiment of the present invention. the

Referring to FIG. 3, a user A purchases an RO of a specific DRM content. the

Next, when the user A wants to move the RO of a specific DRM content to the user B, the user A requests the device to move the RO (S10). the

The device that has received the request checks whether user A has permission to move the RO to another user (S11). the

As a result of the check, if User A has permission, the device moves the RO of the specific DRM content to User B via the Copyright Issuance Center (shown by a dotted line), or directly to User B The RO is moved (S12). the

FIG. 4 is a diagram illustrating an update and authentication process of an RO of a mobile digital content in a DRM system according to a third embodiment of the present invention. the

As shown in FIG. 4, when the user A wants to move the RO of the DRM content to the user B, the user A requests the DRM agent of the device to move the RO (S20). the

The device that has received the request checks whether the user A has permission to move the RO (S21). the

As a result of the check, if user A does not have permission, the device asks user A whether he wishes to obtain permission (not shown). If user A wishes to obtain permission, the device accesses the portal of RI to obtain permission (S22). The access process is performed by the Web/WAP browser according to the request of the DRM agent. Here, the device uses the DCF RL URL or RL URL stored in the RI environment to access the entry of the RI. The RI provides a link on the portal to download a trigger for updating the RO (S23). the

When the device sends an RO update request message to the RI (S24), the RI sends an RO response message to the device when granting mobile permission to the user A (S25). And when RI does not grant mobile permission to user A, RI sends an error message (error message) to the device. the

When the RI grants the mobile permission to the user A, the user A pays the required fee to the entrance of the RI, and selects additional permission rights, thereby updating the RO (S26). the

The user A has permission to move the RO through the updated RO, and the device moves the RO of the user A to the user B via the copyright issuance center, or directly moves the RO of the user A to the user B (S28). the

As shown in FIG. 2 to FIG. 4 , moving the RO of the digital content does not mean simply moving the RO of the digital content. That is, when a user equipment moves digital content after domain generation, RO movement among domain members includes not only simply moving ROs, but also moving (transmitting or sending) keys for decoding ROs. the

FIG. 5 is a diagram illustrating a process of moving an RO of digital content in a DRM system according to a fourth embodiment of the present invention. The process in Figure 5 is the same as that in Figure 3 in that: firstly, the encryption key is transmitted to the domain member for sharing, and then the RO is moved to the domain member through wired/wireless physical media. the

Referring to FIG. 5, user equipment A functions as a domain authority, and manages user equipment B and user equipment C that are domain members. Device A may be RI in FIG. 2 , and device B and device C may be terminals respectively. the

The domain authority (device A) moves the domain key to device B and device C for sharing. Here, the domain key is used to decode the domain RO. the

Then, when device A moves the domain RO to device B or device C through the wired/wireless physical medium (entity), each device uses its domain key to read the corresponding domain RO, thereby consuming desired digital content. Here, each device does not store the received domain RO. the

Preferably, the physical storage medium (entity) is a multimedia card, and includes a smart card, a User Identity Module (UIM: User Identity Module) card (or a Subscriber Identity Module (SIM: Subscriber Identity Module) card in the case of GSM), a security MMC card and various memory cards. Physical storage media include microprocessors and storage devices to process commands and store a certain amount of data. the

FIG. 6 is a diagram illustrating a process of moving an RO of digital content in a DRM system according to a fifth embodiment of the present invention. the

Referring to FIG. 6, the RO is first moved to each device for sharing, and then the encryption key is moved to each device through a wired/wireless physical medium. the

Device A (Domain Authority) moves domain RO to Device B and Device C for sharing. The domain RO is encrypted by the domain key. the

When the device A domain moves the key to the device B or the device C through a wired/wireless physical medium, each device uses the domain key to read the domain RO, thereby consuming desired digital content. Here, each device does not store the received domain key. When a domain key is transferred between devices, the device that has transferred the domain key to another device cancels or deletes the domain key. the

FIG. 7 is a diagram illustrating a process of moving an RO of digital content in a DRM system according to a sixth embodiment of the present invention. The sixth implementation in FIG. 7 is more specific than the fifth implementation in FIG. 6 . the

Referring to FIG. 7, assume that a specific user (hereinafter, referred to as user A) has two DRM devices (ie, a first device 10 and a second device 30). The first device 10 is a connected device with a communication function (for example, a mobile communication terminal), and the second device 30 is an unconnected device without a communication function (for example, an MP3 player). Assume user A has a multimedia entity (e.g., smart card) 20, this multimedia entity is a physical medium that can be consumed by being inserted into the first device 10 or the second device 30. the

As shown in FIG. 7, user A (not shown in FIG. 2) joins his or her own device (i.e., mobile phone 10 or MP3 player 30) to a specific domain (i.e., domain A60) generated and managed by RI40 Middle (S1). Here, the first device 10 receives the domain key from RI. The domain key may be moved from the RI 40 to the first device 10 through the domain context. The domain context includes information required to install a domain RO at the smart card 20 (eg domain key, domain identifier, expiration time, etc.). the

User A accesses RI and/or CI through the first device 10, thereby receiving the DRM content and the domain RO of the DRM content (S2). the

User A tries to share the DRM content owned by the first device 10 and/or the domain RO with the second device 30 that has joined the domain A60. User A can use the smart card 20 to share DRM content and/or domain RO with the first device 10 (mobile communication terminal) and the second device (MP3 player). That is, the user A moves the domain environment for installing the domain RO existing on the first device 10 to the smart card 20 (S3), and installs the smart card 20 on the second device 30 (S4). The DRM content and/or domain RO may be directly moved from the first device 10 to the second device 30 through a wired/wireless channel. The DRM content and/or domain RO may be moved from the first device 10 to the smart card 20 to be stored in the memory of the smart card 20 and then moved from the smart card 20 to the second device 30 . the

The user A may install the domain RO using the domain environment stored in the smart card 20 through the second device 30, and then implement the DRM content using the domain RO. the

When the domain environment is moved between the first device 10 and the smart card 20 and between the smart card 20 and the second device 30, authentication processing is performed respectively. the

Hereinafter, a signal flow between devices in the DRM system in FIG. 7 will be described in more detail with reference to FIG. 8 . the

FIG. 8 is a flowchart illustrating a method of moving a domain RO using a smart card according to a seventh embodiment of the present invention. The content provider (CP: content provider) can be RI or CI, and RI can be the entrance of CP. the

Assume that user A has two DRM devices (ie, a first device 10 and a second device 30). The first device 10 is a connected device with a communication function (for example, a mobile communication terminal), and the second device 30 is an unconnected device without a communication function (for example, an MP3 player). Fake A given user A is a physical medium that can be consumed by being inserted into the first device 10 and the second device 30, and has a multimedia entity (eg smart card) 20. the

The user A accesses the RI 40 using the first device 10 (S31), and registers the first device 10 and the second device 30 with the RI 40 (S32). User A first registers the first device 10 with the RI 40, and then registers the second device 30 (unconnected device) with the RI 40. the

User A joins the first device 10 into a specific domain (for example, domain A) (S33). The specific domain is one of a plurality of domains generated and managed by the RI 40. the

When the RI 40 inquires whether the second device 30 also joins the domain A that the user A has registered like the first device 10, the user A joins the second device (unconnected device) in the domain A. That is, the user A notifies the RI 30 that the second device is his or her other device, and browses the domain content downloaded by the first device 10 (S34). The RI 40 moves the domain list generated and managed by itself to the first device 10 (S35). Next, the user selects a specific domain (for example, domain A) to which the second device is to join from the domain list (S36). the

The RI 40 moves a trigger message (for example, a join domain trigger message) to the first device 10, so that the user A can join the second device 30 into the selected domain A through the first device 10 (S37). The first device 10 receives the join domain trigger message, and then sends a request message (for example, a join domain request message) to the RI 40 to join the second device 30 into domain A (S38). FIG. 9 shows an XML schema (XML schema) of a domain join request message and parameters included in the message. As shown in FIG. 9, the domain join request message includes one or more parameters. The domain join request message includes parameters of one or more device IDs (for example, the ID of the first device 10 sending the domain join request message and the ID of the second device 30 to join domain A). the

The RI 40 transmits a response message (for example, a domain join response message) as a response to the domain join request message (S39). Here, the join domain response message includes the domain environment of the second device 30 . The domain context includes information required to install a domain RO at the smart card 20 (eg domain key, domain identifier, expiration time, etc.). the

Fig. 10 shows the XML schema of the Join Domain Response message and the parameters contained in the message. As shown in FIG. 10, the Join Domain Response message includes one or more parameters (elements). First, the "domainInfo" element of the parameter is an identifier and is generated whenever the RI 40 issues a domain key for a device that has joined domain A (i.e., the first device 10 or the second device 30). here, The domain key is encoded by the respective public keys of the first device 10 and the second device. Second, the "deviceID" parameter of the "domainInfo" element is the device identifier using the domain key. However, the "deviceID" parameter does not indicate the ID of the smart card 20 . The "deviceID" parameter sent by the RI 40 within the "domainInfo" element means a list of device IDs known to the RI 40, each device with the same deviceID can use the domain key exclusively, and no other device can use the domain content. The fact that the device ID parameter is not included in the "domainInfo" element means that all devices belonging to user A cannot use domain content. Third, the "SRMStore" parameter is an attribute within the "domainInfo" element. The "SRMStore" parameter instructs the DRM agent implementing the JoinDomain protocol to store the domain key in the smart card 20 . the

The first device stores the received domain environment in the smart card 20 (S40). The smart card 20 is configured to be separated (separated) from the first device 10 , and the smart card 20 is in a mounted state with a corresponding fitting (mounting) portion (for example, a slot) of the first device 10 . The smart card 20 includes storage space and a dedicated agent that can perform authentication processing. The smart card 20 is a medium that can be fitted into and detached from the first device 10 and the second device 30, and is called a secure removable medium (SRM: secure removable media). The agent dedicated to the smart card 20 is called an SRM agent. The smart card 20 is a physical medium and includes a User Identity Module (UIM) card (or Subscriber Identity Module (SIM) card in the case of GSM), a secure MMC card, and various memory cards. the

In S40, an authentication process is performed between the first device 10 and the smart card 20 (S41). More specifically, an authentication process is performed between the DRM agent of the first device 10 and the SRM agent of the smart card 20 . In this authentication process, the information indicated by the parameters contained in the domain environment in step S39 is used. After this authentication process, the SRM agent of the smart card 20 moves the domain environment from the first device 10 to the smart card 20 . Through the authentication process (S41), the SRM agent of the smart card 20 can determine whether the DRM agent of the first device 10 is a genuine DRM agent. If it is determined in the authentication process (S41) that the DRM agent of the first device 10 is not a real DRM agent, the authentication process is revoked. The true DRM agent may be an agent qualified to communicate and given domain content and related to the SRM agent. the

After completing the authentication process, user A utilizes the first device 10 to access the RI 40, selects its desired domain content (eg, a specific music file) (S42), and downloads the domain content (S43). the

Then, if user A wishes to consume the domain content (eg, a specific music file), he can move the domain content from the first device 10 to the second device 30 through wired/wireless media. Here, domain content (eg, specific music files) may be moved in a super-distribution manner. User A may move the domain content and/or the corresponding domain key to the smart card 20 (S44). the

User A installs the smart card 20 into the second device 30 (ie, MP3 player) (S45). Next, the SRM agent of the smart card 20 performs authentication processing to check whether the second device is a genuine device that has joined domain A (S46). If it is determined in step S46 that the second device 30 is a genuine device that has joined domain A, the second device 30 searches the domain environment and domain content stored in the smart card 20 (S47). When the smart card 20 is installed (fitted) on the second device 30 (ie, the MP3 player), the user A can consume the domain content through the second device 30 (S48). However, when the smart card 20 is separated from the second device 30 , the user A can no longer consume domain content through the second device 30 . the

FIG. 11 is a diagram illustrating a procedure of moving an RO in a DRM system according to an eighth embodiment of the present invention. the

Referring to FIG. 11 , it is assumed that a specific domain (for example, domain A60 ) among a plurality of domains defined and managed by RI 40 includes N devices (first device 10 -Nth device). The Nth device 70 moves the domain RO to the external device 80 that does not belong to the domain A60, and then leaves the domain A60. the

The Nth device 70 moves its domain environment and domain RO to the external device 80 via the smart card 20 (eg, Secure Removable Media (SRM)). That is, the Nth device 70 moves the domain environment and the domain RO to the smart card 20 , and then the smart card 20 moves the domain environment and the domain RO to the external device 80 . After the authentication process is performed and a secure channel is formed, the domain environment and domain RO are moved through the secure channel. This authentication processing is performed in the same manner as the authentication processing (S41 and 46) in FIG. 8, and requires certificate revocation list (CRL: Certificate Revocation List) management. After successfully moving the domain environment and the domain RO, the domain environment and the domain RO are deleted from the mobile device (ie, the Nth device 70). Since the domain RO is deleted from the Nth device 70, the Nth device 70 can no longer consume domain content. The external device 80 that has received the domain environment and domain RO must register the domain environment and domain RO with the RI 40 using the information contained in the domain environment and domain RO. Here, domain A60 may be a domain defined by OMA DRM2.0, or a user domain defined in the home entertainment network field.

The domain environment and domain RO stored in the smart card 20 are not moved to the external device 80, but are installed in the external device 80 in the state stored in the smart card 20 (for example, inserted into an installation part (for example, a socket)). The domain environment and domain RO installed on the external device 80 can be directly implemented through the external device 80 . Since the smart card 20 has a domain RO, the smart card 20 acts as the subject of consuming content. the

Hereinafter, the configuration and operation of the apparatus for moving digital content and RO according to the present invention will be explained with reference to FIG. 12 . the

A device (terminal) of the present invention includes hardware for moving a domain environment, a domain RO, or DRM content to another device through multimedia to share between devices. The device 100 of the present invention includes a socket 101 for detachably mounting multimedia (eg, a smart card). Multimedia includes smart cards, user identity module (UIM) cards, subscriber identity module (SIM) cards, secure MMC cards, and various memory cards. The form of the socket 101 depends on the form of the multimedia. the

The device 100 of the present invention comprises a transceiver 102 that signals to register by accessing the RI and receives the list of domains provided by the RI. the

The device 100 of the present invention comprises a display 103 for displaying a list of domains moved towards the transceiver 102 after being processed by the processor 106 . the

The device 100 of the present invention includes a DRM agent 104 that processes signals to join one or more devices of the user into a specific domain selected by the user from a list of domains displayed on the display 103 so that shared domain RO. the

The device 100 of the present invention comprises a memory 105 storing the domain context and domain RO received from the RI and other DRM content. the

The device 100 of the present invention includes a processor 106 that processes signals to consume DRM content using the domain environment and domain RO, and processes the domain environment and domain RO to be moved to multimedia installed on the socket 101 . Processor 106 may be referred to as a controller. The detailed operation and configuration of the apparatus 100 of the present invention can be applied to the aforementioned components in FIGS. 2 to 11 . the

It is obvious to those skilled in the art that the device 100 includes components required to consume DRM content as well as those in FIG. 12 , and thus detailed description thereof is omitted. the

It will be apparent to those skilled in the art that various modifications and changes can be made in the present invention without departing from the spirit or scope of the inventions. Accordingly, this invention is intended to cover Such modifications and variations of the present invention are intended to come within the scope and equivalents thereof. the

For example, a smart card represents a physical or logical medium or device for moving domain keys and/or domain content among multiple devices, which is not limited to the literal meaning. the

Multiple devices (terminals) registered on a specific domain can share DRM content. the

Furthermore, the domain key and domain content can be shared between multiple devices through a physical medium called SRM (Secure Removable Media), such as a smart card. the

In addition, since a user having multiple devices can share DRM content and ROs of the DRM content among multiple devices, consumption of digital ROs can be enhanced.

Claims (11)

1. A method of moving a domain rights object from a connected device to an unconnected device in a digital rights management (DRM) system to be shared by one or more devices joining a particular domain, the method Include the following steps: Registering a first device and one or more second devices with a copyright issuance center (RI), wherein the first device is a connected device with a communication function, and the second device is an unconnected device without a communication function equipment; adding the first device to a specific domain, where the specific domain is one of multiple domains generated and managed by the copyright issuance center (RI); The first device selects the specific domain to join the second device from a domain list received from the copyright issuance center (RI), and the copyright issuance center (RI) generates and manages the domain list; said first device joins said one or more second devices in the selected specific domain to share said domain rights object; The first device receives first information from the copyright issuance center (RI), the first information includes a domain key related to the domain rights object, the first information includes a "domainInfo element", and the The "domainInfo element" is information related to issuing domain keys to the first device and the one or more second devices that have joined the specific domain, wherein the "domainInfo element" includes the first Each device ID and SRMStore parameters of a device and the one or more second devices, the device ID means that the first device with the device ID and the one or more second devices have joined has identified the specific domain and thus can use the domain key, and the SRMStore parameter instructs a digital rights management (DRM) agent implementing the JoinDomain protocol to store the domain key in a third device; The first device stores the first information in the third device; the one or more second devices receive the stored first information from the third device; and The one or more second devices decode the domain rights object using the received first information, and consume digital rights management (DRM) content using the decoded domain rights object. 2. The method of claim 1, further comprising the first device receiving at least one of a domain content and a domain rights object from the rights issuance center (RI). 3. The method according to claim 1, wherein the step of the first device storing the first information in the third device comprises: moving the first information to the third device Before receiving the first information, the third device authenticates the first device. 4. The method of claim 1, wherein the step of moving the first information to the second device comprises, before the third device moves the first information to the second device, by the third device The third device authenticates the second device. 5. The method of claim 1, wherein the first information is a domain environment. 6. The method of claim 1, wherein the first information includes at least a domain key to decode a domain rights object. 7. The method of claim 1, wherein the third device is a multimedia entity. 8. The method of claim 7, wherein the third device is a secure removable media (SRM) or a smart card. 9. The method of claim 1, further comprising moving, by the second device, the first information to a fourth device, whereupon the second device leaves the particular domain. 10. The method of claim 9, further comprising the second device moving at least one of domain content and domain rights objects to the fourth device. 11. The method according to claim 1, wherein the third device is a device detachably mountable from the first device or the second device.

Images