CN101529462A - Method and system for providing content subscription service - Google Patents
Method and system for providing content subscription service Download PDFInfo
- Publication number
- CN101529462A CN101529462A CN200680055786A CN200680055786A CN101529462A CN 101529462 A CN101529462 A CN 101529462A CN 200680055786 A CN200680055786 A CN 200680055786A CN 200680055786 A CN200680055786 A CN 200680055786A CN 101529462 A CN101529462 A CN 101529462A
- Authority
- CN
- China
- Prior art keywords
- content
- content item
- client
- licence
- data
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/60—Protecting data
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
-
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q50/00—Information and communication technology [ICT] specially adapted for implementation of business processes of specific business sectors, e.g. utilities or tourism
- G06Q50/10—Services
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
- H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/60—Network structure or processes for video distribution between server and client or between remote clients; Control signalling between clients, server and network components; Transmission of management data between server and client, e.g. sending from server to client commands for recording incoming content stream; Communication details between server and client
- H04N21/63—Control signaling related to video distribution between client, server and network components; Network processes for video distribution between server and clients or between remote clients, e.g. transmitting basic layer and enhancement layers over different transmission paths, setting up a peer-to-peer communication via Internet between remote STB's; Communication protocols; Addressing
- H04N21/633—Control signals issued by server directed to the network components or client
- H04N21/6332—Control signals issued by server directed to the network components or client directed to client
- H04N21/6334—Control signals issued by server directed to the network components or client directed to client for authorisation, e.g. by transmitting a key
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L2463/00—Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00
- H04L2463/101—Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00 applying security measures for digital rights management
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Hardware Design (AREA)
- Theoretical Computer Science (AREA)
- General Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Business, Economics & Management (AREA)
- General Physics & Mathematics (AREA)
- Physics & Mathematics (AREA)
- Computing Systems (AREA)
- General Health & Medical Sciences (AREA)
- Tourism & Hospitality (AREA)
- Health & Medical Sciences (AREA)
- General Business, Economics & Management (AREA)
- Strategic Management (AREA)
- Primary Health Care (AREA)
- Marketing (AREA)
- Human Resources & Organizations (AREA)
- Economics (AREA)
- Multimedia (AREA)
- Bioethics (AREA)
- Software Systems (AREA)
- Storage Device Security (AREA)
- Management, Administration, Business Operations System, And Electronic Commerce (AREA)
- Two-Way Televisions, Distribution Of Moving Picture Or The Like (AREA)
- Television Signal Processing For Recording (AREA)
Abstract
Description
技术领域 technical field
本发明涉及内容递送领域。更具体地,本发明涉及分发由数字许可证管理的数字内容的领域。The present invention relates to the field of content delivery. More specifically, the present invention relates to the field of distributing digital content governed by digital licenses.
背景技术 Background technique
数字视频内容、音频内容或其它类型内容的提供者对于经由因特网递送这种内容而没有有效地进行内容保护常常是不情愿的。尽管对于内容提供者来说存在经由因特网提供内容的技术,然而不管有没有所有者的授权,数字内容都理所当然地容易复制。因特网允许内容从所有者递送,但是同样的技术也允许普遍地分发未授权的、复制的内容。Providers of digital video content, audio content, or other types of content are often reluctant to deliver such content via the Internet without effective content protection. While technology exists for content providers to provide content via the Internet, digital content is of course easy to copy with or without the authorization of the owner. The Internet allows content to be delivered from the owner, but the same technology also allows unauthorized, copied content to be distributed generally.
数字版权管理(DRM)是近年来已逐步使用的数字内容保护模型,来作为用于保护文件分发的方法。DRM通常包括技术和商业模型的复杂集合,以保护数字媒体或其它数据并且向内容所有者提供收入。Digital Rights Management (DRM) is a digital content protection model that has come into use in recent years as a method for protecting file distribution. DRM typically includes a complex collection of technologies and business models to protect digital media or other data and provide revenue to content owners.
许多已知的DRM系统使用存储设备,例如计算机的硬盘驱动器组件,其包含内容所有者提供的一组未加密内容(或其它数据)。存储设备中的内容驻留在防火墙后面的可信区域内。在可信区域内,可对存储设备上驻留的内容加密。内容服务器从存储设备接收加密的内容并且封装加密的内容用于分发。许可证服务器拥有关联于加密的内容的权限和使用规则的描述,以及关联的加密密钥。(内容服务器和许可证服务器有时是内容提供商(例如工作室)或服务提供商拥有或控制的内容提供商系统的一部分。)播放设备或客户端从内容服务器接收加密的内容用于显示并且从许可证服务器接收指定访问权限的许可证。Many known DRM systems use a storage device, such as a computer's hard drive component, that contains an unencrypted set of content (or other data) provided by the content owner. The content on the storage device resides in a trusted zone behind a firewall. Within the trusted zone, content residing on the storage device may be encrypted. A content server receives encrypted content from a storage device and packages the encrypted content for distribution. A license server holds a description of rights and usage rules associated with encrypted content, and associated encryption keys. (The content server and the license server are sometimes part of the content provider's system owned or controlled by the content provider (such as a studio) or service provider.) The playback device or client receives encrypted content from the content server for display and downloads it from the The license server receives licenses for the specified access rights.
某些DRM处理由以下处理组成:请求内容项、用内容密钥加密该项、在内容数字许可证中存储内容密钥、将加密的内容分发到播放设备、向播放设备递送包括内容密钥的数字许可证文件、以及解密内容文件并且在数字许可证中指定的使用规则下播放它。Some DRM processing consists of requesting a content item, encrypting the item with a content key, storing the content key in a content digital license, distributing the encrypted content to a playback device, delivering to the playback device a digital license file, and decrypt the content file and play it under the usage rules specified in the digital license.
然而,由于越来越多的内容递送到终端用户,这些已知的DRM方案对于内容或服务提供商的服务器可能造成负担。对于每个用户对特定内容项进行的每个请求,需要服务器创建“包”(“package”),包括生成解密密钥、生成内容许可证、和加密内容本身。However, these known DRM schemes can place a burden on the content or service provider's servers due to the increasing amount of content being delivered to end users. For each request made by each user for a particular content item, the server is required to create a "package" ("package"), including generating a decryption key, generating a content license, and encrypting the content itself.
对于包括商业的预订(subscription)模型的分发,使用其中为订户“包装”每个内容项的已知DRM方案对内容提供商服务器造成了越来越多的负担。如果用户预先为用于内容预订的一个许可证支付,则可能出现由此用户可访问的内容随着时间的过去而增加并且可能超过所支付的内容的情况。For distribution involving a subscription model of commerce, using known DRM schemes in which each content item is "packaged" for the subscriber places an increasing burden on the content provider's server. If a user pays in advance for a license for content subscription, it may happen that the content accessible by this user increases over time and may exceed the content paid for.
因此,期望一种保护机制的改善方法和系统来完成所保护的数据或媒体的递送。Accordingly, an improved method and system of protection mechanisms are desired to accomplish the delivery of protected data or media.
发明内容 Contents of the invention
公开了分发由数字许可证管理的数字内容的方法和系统。根据本发明的某些实施例,便于将许可证和内容颁发到用户,以使得在已接收许可证之后,一个许可证可管理客户端设备接收的多个内容项的使用权限。而且,许可证具有位于所许可内容标识字段中的数据,其在许可证由用户接收之后保持不变。因此,本发明的实施例可用作预订商业模型的一部分,由此向客户端颁发一个许可证,其后可将多个内容项发送到客户端并且由其在该一个许可证的控制下使用。Methods and systems for distributing digital content governed by digital licenses are disclosed. According to some embodiments of the present invention, licenses and content are facilitated to be issued to users such that, after a license has been received, one license can govern usage rights for multiple content items received by a client device. Also, the license has data located in the licensed content identification field that remains unchanged after the license is received by the user. Thus, embodiments of the present invention can be used as part of a subscription business model whereby a client is issued a license, after which multiple content items can be sent to the client and used by it under the control of the one license .
在一个方面中,将具有用于所许可内容的标识数据的许可证发送到客户端。第一内容项在许可证由客户端接收之后发送到客户端。第一内容项具有第一内容标识数据,并且第一内容项的至少一部分为加密形式。类似地,第二内容项在许可证由客户端接收之后发送到客户端。第二内容项具有不同于第一内容标识数据的第二内容标识数据。第二内容项的至少一部分为加密形式。In one aspect, a license is sent to the client with identification data for the licensed content. The first content item is sent to the client after the license is received by the client. The first content item has first content identification data, and at least a portion of the first content item is in encrypted form. Similarly, the second content item is sent to the client after the license is received by the client. The second content item has second content identification data different from the first content identification data. At least a portion of the second content item is in encrypted form.
如果第一内容标识数据对应于用于所许可内容的标识数据,则解密第一内容项。类似地,如果第二内容标识数据对应于用于所许可内容的标识数据,则解密第二内容项。在许可证发送到客户端之后,用于所许可内容的标识数据保持不变。If the first content identification data corresponds to identification data for the licensed content, the first content item is decrypted. Similarly, if the second content identification data corresponds to identification data for the licensed content, the second content item is decrypted. The identification data for the licensed content remains unchanged after the license is sent to the client.
在另一方面中,第一内容项和第二内容项在不同的时间点发送到客户端,其中时间点彼此间隔至少大约一天的时间间隔。In another aspect, the first content item and the second content item are sent to the client at different points in time, wherein the points in time are separated from each other by an interval of at least about one day.
在另一方面中,许可证具有第一子密钥,第一内容项具有第二子密钥,并且第二内容项具有第三子密钥。使用第一和第二子密钥生成第一解密密钥,并且使用第一和第三子密钥生成第二解密密钥。使用第一解密密钥解密第一内容项,并且使用第二解密密钥解密第二项。In another aspect, the license has a first subkey, the first content item has a second subkey, and the second content item has a third subkey. A first decryption key is generated using the first and second subkeys, and a second decryption key is generated using the first and third subkeys. The first content item is decrypted using the first decryption key, and the second item is decrypted using the second decryption key.
在另一实施例中,将具有用于所许可内容的标识数据和具有播放计数数据的许可证发送到客户端。第一内容项在许可证由客户端接收之后发送到客户端。第一内容项的至少一部分为加密形式。第一内容项具有第一内容标识数据并且由N个离散可用子内容项组成,其中N是大于2的整数。如果第一内容标识数据对应于用于所许可内容的标识数据,则解密N个离散可用子内容项的P个的至少一部分,其中P是小于N的整数,并且其中P对应于播放计数数据。用于所许可内容的标识数据和播放计数数据在许可证发送到客户端之后保持不变。在其它实施例中,N个离散可用子内容项可由N个电视节目组成,或者可由N个音乐作品组成。In another embodiment, the license is sent to the client with identification data for the licensed content and with play count data. The first content item is sent to the client after the license is received by the client. At least a portion of the first content item is in encrypted form. The first content item has first content identification data and is composed of N discretely available sub-content items, where N is an integer greater than two. If the first content identification data corresponds to identification data for the licensed content, decrypting at least a portion of P of the N discretely available sub-content items, where P is an integer less than N, and where P corresponds to play count data. Identification data and play count data for licensed content remain unchanged after the license is sent to the client. In other embodiments, the N discretely available sub-content items may consist of N television programs, or may consist of N musical compositions.
在又一实施例中,提供了用于发送到客户端并且用于许可供客户端使用的第一组多个内容项的数据结构。第一组多个内容项中的每一个具有第一内容标识字段。数据结构包括第一许可证标识字段,用于指定第一组多个内容项中的每一个的身份,并且用于保存对应于第一组多个内容项中的每一个的身份的第一组标识数据。在数据结构发送到客户端的时间点之后,第一许可证标识字段和多个第一内容标识字段适于当客户端接收第一组多个内容项时允许客户端使用第一组多个内容项。第一组标识数据适于在数据结构发送到客户端之后保持不变。In yet another embodiment, a data structure for sending to a client and for licensing a first plurality of content items for use by the client is provided. Each of the first plurality of content items has a first content identification field. The data structure includes a first license identification field for specifying the identity of each of the first plurality of content items and for storing a first set of identities corresponding to each of the first plurality of content items. Identification data. After the point in time when the data structure is sent to the client, the first license identification field and the plurality of first content identification fields are adapted to allow the client to use the first plurality of content items when the client receives the first plurality of content items . The first set of identification data is adapted to remain unchanged after the data structure is sent to the client.
对于本发明存在另外的方面。因此应当理解,前面仅仅是本发明某些实施例和方面的简短概述。下面引用另外的实施例和方面。还应当理解,可对于所公开实施例做出许多改变,而不偏离本发明的精神或范围。因此前面的概述不旨在限制本发明的范围。而是,本发明的范围应由所附权利要求及其等效物确定。There are additional aspects to the invention. It is therefore to be understood that the foregoing is only a brief summary of certain embodiments and aspects of the invention. Further embodiments and aspects are cited below. It should also be understood that many changes may be made to the disclosed embodiments without departing from the spirit or scope of the invention. The foregoing summary is therefore not intended to limit the scope of the invention. Rather, the scope of the invention should be determined by the appended claims and their equivalents.
附图说明 Description of drawings
根据结合附图所作的优选实施例的以下描述,本发明的这些和/或其它方面和优点将变得明显和更容易理解,在附图中:These and/or other aspects and advantages of the present invention will become apparent and better understood from the following description of preferred embodiments taken in conjunction with the accompanying drawings, in which:
图1是用于分发内容的根据某些实施例的内容提供系统的简化框图;Figure 1 is a simplified block diagram of a content providing system according to some embodiments for distributing content;
图2是根据本发明一个实施例的用于客户端设备的硬件环境的简化框图;Figure 2 is a simplified block diagram of a hardware environment for a client device according to one embodiment of the present invention;
图3是用于分发内容的根据某些实施例的内容提供系统的一部分的简化框图;Figure 3 is a simplified block diagram of a portion of a content providing system according to some embodiments for distributing content;
图4是根据本发明某些实施例的数字许可证的简化图;Figure 4 is a simplified diagram of a digital license according to some embodiments of the invention;
图5是根据本发明某些实施例的一个数字内容项的简化图;Figure 5 is a simplified diagram of a digital content item according to some embodiments of the invention;
图6是根据本发明某些实施例的另一数字内容项的简化图;Figure 6 is a simplified diagram of another digital content item according to some embodiments of the present invention;
图7是根据本发明某些实施例的另一数字内容项的简化图;Figure 7 is a simplified diagram of another digital content item according to some embodiments of the present invention;
图8是根据本发明某些实施例的另一数字内容项的简化图;Figure 8 is a simplified diagram of another digital content item according to some embodiments of the present invention;
图9是示出根据本发明一个实施例的标识字段值的指定的图;和Figure 9 is a diagram illustrating assignment of an identification field value according to one embodiment of the present invention; and
图10是根据本发明某些实施例的分发内容的方法的简化流程图。Figure 10 is a simplified flowchart of a method of distributing content according to some embodiments of the invention.
具体实施方式 Detailed ways
现在将详细参考本发明的实施例,其示例在附图中示出,其中遍及附图同样的标号指代同样的元件。将会明白,可使用其它实施例,并且可做出结构和操作的变化,而不会偏离本发明的范围。Reference will now be made in detail to embodiments of the present invention, examples of which are illustrated in the accompanying drawings, wherein like numerals refer to like elements throughout. It is to be understood that other embodiments may be utilized and structural and operational changes may be made without departing from the scope of the present invention.
参考图1,示出了应用本发明的内容提供系统10的示例配置。内容提供系统10处理受保护内容,其可包括视频数据、音频数据、图像数据、文本数据等。许可证服务器12、内容服务器14、和计费服务器16的每个都连接到客户端18并且经由网络20彼此连接,所述网络20例如是因特网。在该示例中,仅示出了一个客户端18,但是本领域技术人员将会理解,任何数量的客户端可连接到网络20。Referring to FIG. 1 , there is shown an example configuration of a content providing system 10 to which the present invention is applied. The content providing system 10 processes protected content, which may include video data, audio data, image data, text data, and the like. Each of the license server 12, the content server 14, and the billing server 16 is connected to the client 18 and to each other via a network 20, such as the Internet. In this example, only one client 18 is shown, but those skilled in the art will understand that any number of clients may be connected to the network 20 .
内容服务器14向客户端18提供内容。许可证服务器12授予客户端18使用内容所必需的具有预订区24的许可证22。计费服务器16用于当向客户端18授予许可证22时对客户端18计费。尽管示出的实施例示出了与客户端18通信的三个服务器,将会理解,所有这些服务器功能可包括在比这里示出的三个服务器数量更少或更多的服务器中。Content server 14 provides content to clients 18 . The license server 12 grants the client 18 a license 22 with a subscription area 24 necessary to use the content. The billing server 16 is used to bill the client 18 when the license 22 is granted to the client 18 . Although the illustrated embodiment shows three servers in communication with clients 18, it will be appreciated that all of these server functions may be included in fewer or more servers than the three servers shown here.
图2示出了客户端18的示例配置。参考图2,中央处理器(CPU)30执行如只读存储器(ROM)32中存储的或从存储单元34载入到随机存取存储器(RAM)36的程序所引导的各种处理操作。RAM 36也存储CPU30按需执行各种处理操作所必需的数据等。FIG. 2 shows an example configuration of client 18 . Referring to FIG. 2 , a central processing unit (CPU) 30 performs various processing operations as directed by programs stored in a read only memory (ROM) 32 or loaded from a storage unit 34 into a random access memory (RAM) 36 . The RAM 36 also stores data and the like necessary for the CPU 30 to perform various processing operations as required.
CPU 30、ROM 32、和RAM 36经由总线38互连。总线38还连接由例如键盘和鼠标组成的输入设备40、由例如基于CRT或LCD的显示单元和扬声器组成的输出设备42、例如基于硬盘驱动器的存储单元34、和例如基于调制解调器、网络接口卡(NIC)或其它终端适配器的通信设备44。CPU 30, ROM 32, and RAM 36 are interconnected via bus 38. The bus 38 also connects input devices 40, such as a keyboard and mouse, output devices 42, such as a CRT or LCD-based display unit and speakers, a storage unit 34, such as a hard drive-based, and a modem-based, network interface card ( NIC) or other communication device 44 of the terminal adapter.
ROM 32、RAM 36和/或存储单元34存储用于使能客户端18操作的操作软件。缓冲器46经由网络20接收并缓冲来自内容服务器14(图1)的流化加密内容的连续部分,同时使用解密所加密内容所需的关联解密密钥(未示出)。加密的内容和关联的解密密钥发送到解码器48。解码器48使用关联于内容的解密密钥解密并解码内容。ROM 32, RAM 36 and/or storage unit 34 store operating software for enabling client 18 operation. Buffer 46 receives and buffers successive portions of streaming encrypted content from content server 14 (FIG. 1) via network 20 while using an associated decryption key (not shown) required to decrypt the encrypted content. The encrypted content and associated decryption key are sent to decoder 48 . Decoder 48 decrypts and decodes the content using a decryption key associated with the content.
通信设备44经由网络20执行通信处理,发送从CPU 30提供的数据,并且向CPU 30、RAM 36、和存储单元34输出从网络20接收的数据。存储单元34利用CPU 30传送信息以存储和删除信息。通信设备还与其它客户端传输模拟信号或数字信号。The communication device 44 performs communication processing via the network 20, transmits data supplied from the CPU 30, and outputs data received from the network 20 to the CPU 30, the RAM 36, and the storage unit 34. The storage unit 34 transfers information using the CPU 30 to store and delete information. Communication devices also transmit analog or digital signals with other clients.
总线38还按需与驱动器50连接,在所述驱动器50上装载例如磁盘、光盘、磁光盘、或半导体存储器,用于将从这些记录介质的任一个读取的计算机程序或其它数据安装到存储单元34内。The bus 38 is also connected as needed with a drive 50 on which, for example, a magnetic disk, an optical disk, a magneto-optical disk, or a semiconductor memory is loaded, for installing a computer program or other data read from any of these recording media into a storage medium. Inside unit 34.
尽管未示出,内容服务器14、许可证服务器12、和计费服务器16(图1)也都配置为具有与图2中示出的客户端18的配置基本上相同的配置的计算机。尽管图2示出了客户端18的一种配置,然而候选实施例包括机顶盒、个人计算机、便携式播放设备、或任何其它类型的计算机设备。Although not shown, the content server 14, the license server 12, and the billing server 16 (FIG. 1) are also all configured as computers having substantially the same configuration as that of the client 18 shown in FIG. Although FIG. 2 shows one configuration of client 18, alternative embodiments include set-top boxes, personal computers, portable playback devices, or any other type of computer device.
在内容提供系统10中,许可证和内容服务器12、14向客户端18发送许可证22和内容(图1)。要求许可证22使得客户端18能够使用(即呈现、再现、复制、执行等)通常是加密形式的受保护内容。In the content providing system 10, license and content servers 12, 14 send licenses 22 and content to clients 18 (FIG. 1). A license 22 is required to enable a client 18 to use (ie present, render, copy, execute, etc.) the protected content, typically in encrypted form.
由服务提供商组织使用一个或多个加密密钥来配置和加密每个内容项。客户端18基于许可证信息和内容来解密和再现所接收的内容项。在某些实施例中,许可证信息包括使用权限,例如超过其就不可以使用内容项的截止日期、可使用内容的次数、内容可复制到记录介质,例如CD的次数、以及可将内容取出到便携式设备的次数。Each content item is provisioned and encrypted by the service provider organization using one or more encryption keys. The client 18 decrypts and renders the received content item based on the license information and the content. In some embodiments, the license information includes usage rights, such as an expiration date beyond which the content item cannot be used, the number of times the content can be used, the number of times the content can be copied to a recording medium, such as a CD, and the number of times the content can be taken out. to the portable device.
图3示出了根据本发明实施例的用于向内容授予权限和用于使用内容的机制。Fig. 3 illustrates a mechanism for granting rights to content and for using content according to an embodiment of the present invention.
参考图3,示出了许可证服务器62、许可证64、客户端66、和多个内容项。许可证服务器62由可信颁发商拥有或控制并且将许可证64颁发到属于用户的客户端66。通过客户端66下载或接收而可得到的是多个内容项,在这个示例中包括:Referring to Figure 3, a license server 62, a
(i)包含标题为“Sex and the City-系列1”、“Sex and the City-系列2”、“Sex and the City-系列3”、“Sex and the City-系列4”和“Sex and the City-系列5”的五个电视节目系列的五个主要内容项68a-68e;(i) contains titles "Sex and the City-
(ii)包含标题为“剪辑:Sex and the City-系列1”、“剪辑:Sexand the City-系列2”、“剪辑:Sex and the City-系列3”、“剪辑:Sexand the City-系列4”和“剪辑:Sex and the City-系列5”的五个剪辑或附赠(bonus)音轨的五个剪辑内容项70a-70f,其中每一个关联于具有类似标题的主要内容项68a-68f。(ii) contains titles "Clip: Sex and the City-
(iii)标题为“视频预览#1”、“视频预览#2”等,直到“视频预览#10”的十个视频预览内容项72a-72j,包含对十个电影、其它电视节目(可以是其它的“Sex and the City”节目或不同的电视节目)、或其它类型的视频内容的预览;和(iii) Ten video
(iv)标题为“音频预览#1”、“音频预览#2”等,直到“音频预览#10”的十个音频预览项74a-74j,包含对十个音乐作品,例如歌曲或乐器,或者其它类型的音频内容的预览。(iv) ten
取决于许可证64授予的条件和权限,这些内容项的一个或多个可由客户端66使用。然而,如果许可证64未对这些内容项的一个或多个授予权限,则它们不能被使用,尽管它们可以以不可用形式由客户端66接收并且存储。Depending on the conditions and rights granted by the
图4是根据本发明一个实施例的许可证64和在许可证64内包含的某些数据或信息的简化表示。参考图4,许可证64具有预订区76和子密钥区78。子密钥区78包含一个或多个子密钥80,其如下面进一步所说明的,可用于生成一个或多个解密密钥。预订区76包含主要内容标识字段82、预览标识字段86、剪辑标识字段84、和播放计数字段88。如下面进一步所说明的,值或属性数据可插入到这些字段中,用于控制客户端66对某些内容项的访问或使用。Figure 4 is a simplified representation of a
图5是标题为“Sex and the City-系列1”的主要内容项68a的简化表示。参考图5,内容项68a具有预订区102、子密钥区104、和内容区106。子密钥区104包含一个或多个子密钥108,其可由客户端66与许可证64中包含的一个或多个关联子密钥80(图4)组合,由此使用算法来导出用于内容的一个或多个解密密钥(未示出)。因此,为了增强DRM安全性,客户端66必须具有许可证64和内容项68a两者以便从许可证64和内容项68a中的每一个提取子密钥,其继而用于导出一个或多个解密密钥。Figure 5 is a simplified representation of the main content item 68a entitled "Sex and the City -
预订区102包含主要内容标识字段110,其中可放置对应于该主要内容项,“Sex and the City-系列1”68a的身份的值或属性数据。内容区106包含十个离散可用子内容项,在该示例中为组成系列“Sex and the City-系列1”68a主要内容的十段片段或节目112a-112j。在该示例中,片段112a-112j被命名为“系列1-片段1”、“系列1-片段2”、到“Series1-片段10”。尽管图5示出了内容项“Sex and the City-系列1”68a,将会理解,剩余的四个主要内容项68b-68e(图3)具有类似的内容结构。The subscription area 102 contains a primary content identification field 110 in which value or attribute data corresponding to the identity of the primary content item, "Sex and the City-
而且,将会理解,候选实施例包括不仅是电视系列的主要内容项,还包括可彼此有关(如在电视系列中)或可彼此无关的电视节目的集合的主要内容项。主要内容项还可包括电影、纪录片、戏剧作品、演讲、音乐视频、音乐作品和其它音频、可视、或音频/可视内容。这些主要内容项可以包括或可以不包括离散可用的子内容项。Also, it will be appreciated that alternative embodiments include not only primary content items of a television series, but also collections of television programs that may be related to each other (as in a TV series) or may be unrelated to each other. Primary content items may also include movies, documentaries, theatrical productions, lectures, music videos, musical compositions, and other audio, visual, or audio/visual content. These primary content items may or may not include discretely available sub-content items.
图6是标题为“剪辑:Sex and the City-系列1”的附赠音轨或剪辑内容项70a的简化表示。参考图6,剪辑内容70a具有预订区114、子密钥区116、和剪辑内容区118。子密钥区116包含子密钥120,其可由客户端66与许可证64中包含的关联子密钥80(图4)组合,由此使用算法导出用于该剪辑内容项70a的解密密钥。Figure 6 is a simplified representation of a bonus track or clip content item 70a entitled "Clip: Sex and the City -
预订区114包含剪辑标识字段122,其中可放置对应于该剪辑内容项“剪辑:Sex and the City-系列1”70a身份的值或属性数据。内容区118包含关联于系列的主要内容项“Sex and the City-系列1”68a的附赠音轨或剪辑内容124。尽管图6示出了剪辑内容项“剪辑:Sex and the City-系列1”70a,将会理解,剩余的四个剪辑内容项70b-70e(图3)具有类似的内容结构。The reservation area 114 contains a clip identification field 122 in which value or attribute data corresponding to the identity of the clip content item "Clip: Sex and the City-
图7是标题为“音频预览#1”的音频预览内容项74a的简化表示。参考图7,内容74a具有预订区126、子密钥区128、和预览内容区130。子密钥区128包含子密钥132,其可由客户端66与许可证64中包含的关联子密钥80(图4)组合,由此使用算法导出用于该音频预览内容74a的解密密钥(未示出)。Figure 7 is a simplified representation of an audio
预订区126包含预览标识字段134,其中可放置对应于该音频预览内容项“音频预览#1”74a身份的值或属性数据。内容区130包含对应于正被预览的完整版本的音频内容(未示出)的音频预览内容136本身。尽管图7示出了音频预览内容项“音频预览#1”74a,将会理解,剩余的九个音频预览内容项74b-74j(图3)具有类似的内容结构。The
图8是标题为“视频预览#1”的视频预览内容项72a的简化表示。参考图8,内容项72a具有预订区138、子密钥区140、和预览内容区142。子密钥区140包含子密钥144,其可由客户端66与许可证64中包含的关联子密钥80(图4)组合,由此使用算法来导出用于该视频预览内容72a的解密密钥(未示出)。Figure 8 is a simplified representation of a video
预订区138包含预览标识字段146,其中可放置对应于该视频预览内容项“视频预览#1”72a的身份的值或属性数据。内容区142包含对应于正被预览的完整版本的视频内容(未示出)的视频预览内容148本身,所述视频内容可以是电影、电视系列或片段、音乐视频、或其它视频内容。尽管图8示出了视频预览内容项“视频预览#1”72a,将会理解,剩余的九个视频预览内容项72b-72j(图3)具有类似的内容结构。The
下面是本发明一个实施例的操作的描述。图9是根据此示例示出放置在主要内容项68a-68e、剪辑内容项70a-70e、音频预览内容项74a-74j、和视频预览内容项72a-72j(图3)的标识字段中的属性或值数据的指定的图。换言之,在该示例中,用于标题为“Sex and the City-系列1”的主要内容项68a的内容标识字段110(图5)包含值或属性“1”。类似地,用于标题为“Sex and the City-系列2”的主要内容项68b的内容标识字段110包含值或属性“2”,等等。对于剪辑内容70a-70e(图3)建立类似的值指定模式。然而,视频和音频预览内容项使用不同的标识系统。所有的视频预览内容字段项146(图8)包含相同的值,在该示例中为值“2”。类似地,所有的音频预览内容字段项134(图7)包含值“1”。The following is a description of the operation of one embodiment of the invention. FIG. 9 shows attributes placed in the identification fields of the main content items 68a-68e, clip content items 70a-70e, audio
然而,将会理解,本发明的其它实施例可使用包括另一编号系统或字母数字命名或变量等在内的标识字段值或属性的不同系统。However, it will be understood that other embodiments of the invention may use a different system of identifying field values or attributes including another numbering system or alphanumeric designation or variables, or the like.
利用如此填入的各种内容项的标识字段,便于将许可证和内容颁发给用户,以使得在已接收许可证64之后一个许可证可管理由客户端66接收的多个内容项的使用权限。而且,许可证64的标识字段82、84、86、88中的数据在许可证64被接收之后保持不变。因此,本发明的某些实施例可用作预订商业模型的一部分,由此将一个许可证颁发给客户端,并且此后多个内容项可发送到该客户端并且由其在该一个许可证的控制下使用。内容项可在相隔用户所期望的且内容提供商允许的大约一小时、一天、一周或其它时间间隔以后的时间点发送到客户端例如,如果用户支付并接收了具有主要内容标识字段82的值为“1”的许可证64,那么客户端66将仅能够使用标题为“Sex and the City-系列1”的内容项68a。然而,系列1中的所有十个片段112a-112j将是可用的。换言之,客户端66读取许可证64中找到的主要内容标识字段数据并且将该数据与在主要内容项68a本身中找到的内容标识字段数据相比较。如果数据相互对应(例如,它们匹配或落入值的范围内等),那么客户端66可通过使用如前所述利用子密钥生成的一个或多个解密密钥来使用内容。其它内容项,例如“Sex andthe City-系列2”等,尽管潜在地能够由客户端66下载或接收,然而在该示例中不能在该许可证64下被使用。With the identification fields of the various content items so populated, it is facilitated to issue licenses and content to users such that after a
许可证64中的播放计数字段88(图4)指明可使用任何给定主要内容项系列内的多少片段。假设许可证64的内容标识字段82在其中具有适当的值数据,如果播放计数字段为空,那么可使用所有片段。另一方面,例如,如果许可证64具有内容标识字段值“3”,和播放计数字段值“5”,那么客户端66仅可使用标题为“Sex and the City-系列3”的内容68c的任何五个片段。然而,在该示例中,在该许可证64下,不可以使用多于五个的不同的片段。Play count field 88 (FIG. 4) in
作为另一示例,如果许可证64具有包含表达式:“1≤[content i.d.]≤5”的主要内容标识字段82,并且播放计数字段88为空,那么客户端66将能够使用所有五个“Sex and the City”系列68a-68e的每一个中的所有十个片段。作为又一示例,如果许可证的主要内容标识字段82包含表达式:“1||4”,并且播放计数字段为空,那么客户端66将能够使用仅两个特定主要内容项:“Sex and the City-系列1”68a和“Sex and the City-系列4”68d中的每一个的所有十个片段。As another example, if the
客户端66以类似方式使用许可证64的预订区76中的剪辑内容标识字段84(图4)的内容。剪辑内容字段84中的数据指明哪些剪辑或附赠音轨内容项允许客户端66使用。因此,例如,如果许可证64具有包含值“2”的主要内容标识字段82和包含值“2”的剪辑内容标识字段84,那么客户端66将不仅能够使用标题为“Sex and the City-系列2”的主要内容68b,还能够使用剪辑内容“剪辑:Sex and the City-系列2”70b。根据某些商业模型,这种许可证64将比在剪辑标识字段中没有值的许可证花费更多的钱,因为用户将能够查看关联于主要内容的剪辑或附赠音轨,以及查看主要内容本身。Client 66 uses the contents of clip content identification field 84 (FIG. 4) in
音乐和视频预览标识字段134、136(图7&8)以不同的方式操作。许可证预览标识字段86(图4)允许使用以下所有的情况:一种预览(例如视频或音频)或另一种或两者。因此,例如,如果许可证64中的预览标识字段86包含值“1”,那么客户端66可使用标题为“音频预览#1”、“音频预览#2”、...“音频预览#10”的所有十个音频预览内容项,但是客户端66不能使用任何视频预览内容项(图9)。另一方面,如果许可证64中的预览标识字段86包含值“2”,那么客户端66可使用标题为“视频预览#1”、“视频预览#2”、...“视频预览#10”的所有十个视频预览内容项,但是不能使用任何音频预览内容项。在候选实施例中,然而,音频和视频预览内容可以在其它布置中编组,或可用它们各自的标识字段的每一个中的唯一值来单独地标识。在该情况下,可通过类似于前述的主要内容项的方式来控制对预览内容的访问。The music and video preview identification fields 134, 136 (FIGS. 7 & 8) operate differently. The license preview identification field 86 (FIG. 4) allows the use of all of the following: one preview (eg video or audio) or the other or both. Thus, for example, if
图10是根据本发明某些实施例的分发内容的方法的简化流程图。具有用于所许可内容的标识数据的许可证发送到客户端160。随后,第一内容项在许可证由客户端接收之后发送到客户端162。第一内容项具有第一内容标识数据,并且第一内容项的至少一部分为加密形式。然后就第一内容标识数据是否对应于用于所许可内容的标识数据做出判定164。如果数据对应,那么解密第一内容项的加密部分168。Figure 10 is a simplified flowchart of a method of distributing content according to some embodiments of the invention. A license is sent to the client 160 with identification data for the licensed content. Subsequently, the first content item is sent to the client 162 after the license is received by the client. The first content item has first content identification data, and at least a portion of the first content item is in encrypted form. A determination is then made 164 as to whether the first content identification data corresponds to identification data for the licensed content. If the data correspond, then the encrypted portion 168 of the first content item is decrypted.
接下来,第二内容项发送到客户端170。第二内容项具有不同于第一内容标识数据的第二内容标识数据,并且第二内容项的至少一部分为加密形式。然而,如果框164表示的确定示出了数据不对应,那么不能解密第一内容项,并且代替地,过程进行到框170,其中第二内容项发送到客户端。就第二内容标识数据是否对应于用于所许可内容的标识数据做出判定174。如果数据不对应,那么过程停止172。另一方面,如果数据对应,那么解密第二内容项的加密部分176。遍及上述过程,用于所许可内容的标识数据在许可证发送到客户端之后保持不变。Next, the second content item is sent to the client 170 . The second content item has second content identification data different from the first content identification data, and at least a portion of the second content item is in encrypted form. However, if the determination represented by block 164 shows that the data does not correspond, then the first content item cannot be decrypted, and instead the process proceeds to block 170 where the second content item is sent to the client. A determination is made 174 as to whether the second content identification data corresponds to identification data for the licensed content. If the data does not correspond, the process stops 172 . On the other hand, if the data correspond, then the encrypted portion 176 of the second content item is decrypted. Throughout the process described above, the identification data for the licensed content remains unchanged after the license is sent to the client.
因此,提供了分发由数字许可证管理的数字内容的方法和系统。根据某些实施例,便于将许可证和内容颁发到用户,使得在许可证被接收之后一个许可证可管理客户端设备接收的多个内容项的使用权限。而且,许可证具有在许可证已由用户接收之后仍保持不变的所许可内容标识字段中的数据。因此,本发明的实施例可用作预订商业模型的一部分,由此,一个许可证颁发到客户端,其后多个内容项可发送到该客户端并且由其在该一个许可证的控制下使用。Accordingly, methods and systems for distributing digital content governed by digital licenses are provided. According to some embodiments, the issuance of licenses and content to users is facilitated such that, after a license is received, one license can govern usage rights for multiple content items received by a client device. Also, the license has data in the Licensed Content Identification field that remains unchanged after the license has been received by the user. Thus, embodiments of the present invention can be used as part of a subscription business model whereby one license is issued to a client, after which multiple content items can be sent to the client and be under the control of the one license use.
尽管上面的描述引用了本发明的特定实施例,将会理解,可做出许多修改而不会偏离本发明的精神。权利要求旨在覆盖如将会落入本发明的真实范围和精神内的这些修改。目前公开的实施例因此在所有方面被认为是说明性和非限制性的,本发明的范围由权利要求而不是前述描述来指示,并且在权利要求等同物的含意和范围内的所有改变因此旨在被包含于其中。While the above description refers to particular embodiments of the invention, it will be understood that many modifications may be made without departing from the spirit of the invention. The claims are intended to cover such modifications as would fall within the true scope and spirit of the invention. The presently disclosed embodiments are therefore to be considered in all respects as illustrative and non-restrictive, the scope of the invention being indicated by the claims rather than the foregoing description, and all changes which come within the meaning and range of equivalency of the claims are therefore intended to be is included in it.
Claims (41)
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| PCT/US2006/028853 WO2008013526A1 (en) | 2006-07-25 | 2006-07-25 | Method and system for providing a content subscription service |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN101529462A true CN101529462A (en) | 2009-09-09 |
Family
ID=38981751
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN200680055786A Pending CN101529462A (en) | 2006-07-25 | 2006-07-25 | Method and system for providing content subscription service |
Country Status (5)
| Country | Link |
|---|---|
| EP (1) | EP2044567A4 (en) |
| JP (1) | JP4959796B2 (en) |
| KR (1) | KR101301360B1 (en) |
| CN (1) | CN101529462A (en) |
| WO (1) | WO2008013526A1 (en) |
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107567625A (en) * | 2015-09-15 | 2018-01-09 | 谷歌有限责任公司 | Group license encryption and decryption |
| CN108804879A (en) * | 2017-05-03 | 2018-11-13 | 思科技术公司 | The method and system shared for content and service |
Family Cites Families (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US7065787B2 (en) | 2002-06-12 | 2006-06-20 | Microsoft Corporation | Publishing content in connection with digital rights management (DRM) architecture |
| CA2499356A1 (en) * | 2003-01-14 | 2004-07-29 | Matsushita Electric Industrial Co., Ltd. | Content reproduction device, license issuing server, and content reproduction system |
| US7716288B2 (en) | 2003-06-27 | 2010-05-11 | Microsoft Corporation | Organization-based content rights management and systems, structures, and methods therefor |
| US7933409B2 (en) | 2004-03-09 | 2011-04-26 | Panasonic Corporation | Content playback device |
| JP4734175B2 (en) * | 2006-05-22 | 2011-07-27 | 日本電信電話株式会社 | Content usage control system and content usage control method |
-
2006
- 2006-07-25 WO PCT/US2006/028853 patent/WO2008013526A1/en active Application Filing
- 2006-07-25 JP JP2009521725A patent/JP4959796B2/en not_active Expired - Fee Related
- 2006-07-25 EP EP20060800319 patent/EP2044567A4/en not_active Ceased
- 2006-07-25 CN CN200680055786A patent/CN101529462A/en active Pending
- 2006-07-25 KR KR1020097003752A patent/KR101301360B1/en not_active Expired - Fee Related
Cited By (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107567625A (en) * | 2015-09-15 | 2018-01-09 | 谷歌有限责任公司 | Group license encryption and decryption |
| CN108804879A (en) * | 2017-05-03 | 2018-11-13 | 思科技术公司 | The method and system shared for content and service |
| CN108804879B (en) * | 2017-05-03 | 2022-04-29 | 思科技术公司 | Method and system for content and service sharing |
Also Published As
| Publication number | Publication date |
|---|---|
| EP2044567A1 (en) | 2009-04-08 |
| JP2009545787A (en) | 2009-12-24 |
| JP4959796B2 (en) | 2012-06-27 |
| WO2008013526A1 (en) | 2008-01-31 |
| KR20090045266A (en) | 2009-05-07 |
| EP2044567A4 (en) | 2011-06-22 |
| KR101301360B1 (en) | 2013-09-16 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US20190272513A1 (en) | Use of media storage structure with multiple pieces of content in a content-distribution system | |
| US11234033B2 (en) | Decentralized content distribution | |
| US7613303B2 (en) | Controlling delivery of broadcast encryption content for a network cluster from a content server outside the cluster | |
| JP2002507868A (en) | Method and apparatus for continuous control and protection of media content | |
| CN101164069A (en) | Method and apparatus for detecting the falsification of metadata | |
| WO2004084017A2 (en) | A method and system for implementing digital rights management | |
| EP2485174B1 (en) | Media storage structures for storing content and devices for using such structures | |
| US9311492B2 (en) | Media storage structures for storing content, devices for using such structures, systems for distributing such structures | |
| US20140380063A1 (en) | Information processing device, information storage device, information processing system, information processing method, and program | |
| US7827113B2 (en) | Method and system for providing a content subscription service | |
| CN101529462A (en) | Method and system for providing content subscription service | |
| KR101073836B1 (en) | An efficient management and operation method of the license on the digtal rights management system | |
| CN101742273B (en) | Method and system digital for processing digital content according to a workflow | |
| US20250094542A1 (en) | Media Management and Distribution Systems and Methods | |
| HK1103145A (en) | Use of media storage structure with multiple pieces of content in a content-distribution system |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C02 | Deemed withdrawal of patent application after publication (patent law 2001) | ||
| WD01 | Invention patent application deemed withdrawn after publication |
Application publication date: 20090909 |