TWI607333B - Authorized control method and system for digital copyright management - Google Patents
Authorized control method and system for digital copyright management Download PDFInfo
- Publication number
- TWI607333B TWI607333B TW105104703A TW105104703A TWI607333B TW I607333 B TWI607333 B TW I607333B TW 105104703 A TW105104703 A TW 105104703A TW 105104703 A TW105104703 A TW 105104703A TW I607333 B TWI607333 B TW I607333B
- Authority
- TW
- Taiwan
- Prior art keywords
- authorization
- digital
- data
- management
- terminal device
- Prior art date
Links
Classifications
-
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/10—Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM]
- G06F21/105—Arrangements for software license management or administration, e.g. for managing licenses at corporate level
Landscapes
- Engineering & Computer Science (AREA)
- Software Systems (AREA)
- Theoretical Computer Science (AREA)
- Multimedia (AREA)
- Technology Law (AREA)
- Computer Hardware Design (AREA)
- Computer Security & Cryptography (AREA)
- Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Management, Administration, Business Operations System, And Electronic Commerce (AREA)
- Storage Device Security (AREA)
Description
本發明係關於一個授權管控的方法與系統,特別係指一個管控數位版權管理系統之數位內容授權的方法與系統。更進一步,本發明為創造數位版權管理系統與數位內容服務平台之間關係為多對多架構的一種技術。 The present invention relates to a method and system for authorizing management and control, and in particular to a method and system for managing digital content authorization of a digital rights management system. Furthermore, the present invention is a technique for creating a many-to-many relationship between a digital rights management system and a digital content service platform.
數位版權管理系統為一種用以防止數位內容被未經授權的讀取、複製、與傳播的加密保護系統。若一個數位內容服務採用一數位版權管理系統來保護數位內容,當其用戶之終端裝置要讀取一數位內容,就必須取得此數位版權管理系統的授權並獲得解密的資訊。而數位版權管理系統在確認授權的過程中,除要確認一終端裝置是否有讀取一數位內容的權限,也須確保此終端裝置可取得並占用一由數位版權管理系統所配發之數位版權管理裝置許可證。倘若一數位版權管理系統已無可用的數位版權管理裝置許可證,新進的終端裝置將為此無法成功取得授權。故若要管控一數位版權管理系統的內容授權,數位版權管理裝置許可證的管理也是不可或缺的一部分。中華民國專利公開編號20103588A1提出一種授權管理系統及其方法,其透過授權紀錄表紀錄登入時間及識別訊息,於超出授權數量時做為回收授權的判斷依據。然而,其僅管控一系統中之裝置數量,缺乏與數位版權管理系統結合的考量,故不具處理 多種數位版權管理系統之授權請求的功效,也無法依不同數位內容服務平台的需求調控不同數位版權管理系統的數位版權管理裝置許可證數量。 The digital rights management system is an encryption protection system for preventing unauthorized reading, copying, and propagation of digital content. If a digital content service uses a digital rights management system to protect digital content, when the user's terminal device wants to read a bit of content, it must obtain authorization from the digital rights management system and obtain decrypted information. In the process of confirming the authorization, the digital copyright management system must ensure that a terminal device has the right to read a digital content, and also ensure that the terminal device can acquire and occupy a digital copyright distributed by the digital copyright management system. Manage device licenses. If a digital rights management system has no digital rights management device license available, the new terminal device will not be able to successfully obtain authorization for this purpose. Therefore, if you want to control the content authorization of a digital rights management system, the management of digital rights management device licenses is also an indispensable part. The Republic of China Patent Publication No. 20103588A1 proposes an authorization management system and method thereof for recording a login time and an identification message through an authorization record table, and as a judgment basis for a recycling authorization when the authorized amount is exceeded. However, it only controls the number of devices in a system, and lacks the considerations of combining with the digital copyright management system, so it does not have to deal with it. The effectiveness of the authorization requests of various digital rights management systems cannot control the number of digital rights management device licenses of different digital rights management systems according to the needs of different digital content service platforms.
另外,當一個數位內容服務採用一數位版權管理系統時,其用戶的終端裝置就須搭載此數位版權管理系統的數位版權管理終端軟體(DRM client agent)才可解密還原數位內容。然而,近年來隨著各種終端裝置的種類與作業系統推陳出新,不同終端裝置所搭載的數位版權終端軟體不盡相同,且若安裝非原生的數位版權終端軟體也容易因系統環境不相容而無法正常運作。因目前數位版權管理系統仍多採一數位內容服務平台僅使用單一個數位版權管理系統的架構,這將無法因應終端裝置多元化的發展。為使一數位內容服務用戶的各種終端裝置能以不同的數位版權終端軟體讀取受保護的數位內容,數位內容服務就必須同時採用一種以上的數位版權管理系統。然而,數位版權管理的保護機制並未強制統一規格,故不同數位版權管理系統並無法互通,這對於多數位版權管理的需求是一大限制。為提高多個數位版權管理系統的互通性,中華民國專利I315629發明了一種利用轉換不同數位版權管理檔案格式成唯一特定格式之數位版權管理檔案的系統與方法,以解決同一系統支援多種數位版權管理檔案格式的問題。其先將各種數位版權管理系統所加密的數位內容檔案皆轉換成同一格式才提供給終端裝置,故用戶的終端裝置只需安裝其方法之數位版權終端軟體即可解密多種數位版權管理系統的數位內容。不過,各種數位版權管理系統的檔案加密保護方式多屬機密資訊,故要具備各種檔案的轉換技術實屬不易施行。美國專利20150033284A1則提出了一種可產生安全通道、下載及安裝多種數位版權管理終端軟體的方法,以因應多數位版權管理的問題。然而,其方法需先行於終端裝置安裝一特定終端軟體方可施行,故同樣會面臨前述之非原生 軟體系統相容問題。上述前案從數位內容格式、終端裝置兩個面向試圖解決多數位版權管理的問題,但對於內容的授權處理仍缺乏探討。對於一數位內容服務平台而言,若無多種數位版權管理系統統合,將導致不同系統間判定授權的流程缺乏一致性。 In addition, when a digital content service adopts a digital rights management system, the terminal device of the user must be equipped with the digital rights management terminal software (DRM client agent) of the digital rights management system to decrypt and restore the digital content. However, in recent years, with the variety of terminal devices and operating systems, the digital rights terminal software installed in different terminal devices is not the same, and if the non-native digital copyright terminal software is installed, it is easy to be incompatible with the system environment. working normally. Because the current digital rights management system still uses a single digital content service platform to use only a single digital rights management system architecture, this will not be able to cope with the diversification of terminal devices. In order for various terminal devices of a digital content service user to read protected digital content with different digital copyright terminal software, the digital content service must simultaneously adopt more than one digital rights management system. However, the digital copyright management protection mechanism does not enforce uniform specifications, so different digital rights management systems are not interoperable, which is a major limitation for the majority of copyright management needs. In order to improve the interoperability of multiple digital rights management systems, the Republic of China Patent I315629 invents a system and method for converting digital copyright management files into different specific formats by using different digital rights management file formats to solve the same system supporting multiple digital rights management. File format issues. Firstly, the digital content files encrypted by various digital copyright management systems are converted into the same format to be provided to the terminal device, so the user terminal device only needs to install the digital copyright terminal software of the method to decrypt the digits of the plurality of digital copyright management systems. content. However, the file encryption protection methods of various digital copyright management systems are mostly confidential information, so it is difficult to implement various file conversion technologies. U.S. Patent No. 20150033284A1 proposes a method for generating a secure channel, downloading and installing a plurality of digital rights management terminal software, in order to cope with the problem of majority copyright management. However, the method needs to be implemented before the terminal device installs a specific terminal software, so it also faces the aforementioned non-native Software system compatibility issues. The above-mentioned predecessors are aimed at solving the problem of majority copyright management from the digital content format and the terminal device, but there is still a lack of discussion on the authorization processing of the content. For a digital content service platform, without the integration of multiple digital rights management systems, there will be a lack of consistency in the process of determining authorization between different systems.
最後,雖然一數位內容服務可藉由數位版權管理系統保護其的數位內容,但因獨立建設與營運一套數位版權管理系統的成本所費不貲,對於一般中小型的業者具有相當高的引進門檻。因此,若可使一數位版權管理系統能同時供多個數位內容服務使用,即可降低數位內容服務業者所需成本,也可讓數位版權管理系統持有者提升其資源的利用率。 Finally, although a digital content service can protect its digital content through a digital rights management system, the cost of independently building and operating a digital copyright management system is costly, and it has a very high import threshold for small and medium-sized businesses. . Therefore, if a digital rights management system can be used for multiple digital content services at the same time, the cost of the digital content service provider can be reduced, and the digital copyright management system holder can also improve the utilization of resources.
由此可見,上述習用方式仍有諸多缺失,實非一良善之設計,而亟待加以改良。 It can be seen that there are still many shortcomings in the above-mentioned methods of use, which is not a good design, but needs to be improved.
本案發明人鑑於上述習用方式所衍生的各項缺點,乃亟思加以改良創新,並經多年苦心孤詣潛心研究後,終於成功研發完成本件一種適用於數位版權管理的授權管控方法與系統。 In view of the shortcomings derived from the above-mentioned conventional methods, the inventor of the present invention has improved and innovated, and after years of painstaking research, he finally succeeded in researching and developing this authorization control method and system suitable for digital copyright management.
本發明之目的係在於提出一種適用於數位版權管理的授權管控方法與系統,係能以數位版權管理裝置許可證數量的調控機制,統合並處理多個數位版權管理系統的授權請求。 The object of the present invention is to propose an authorization management and control method and system suitable for digital copyright management, which can process and process the authorization requests of multiple digital rights management systems in a unified manner.
本發明之次一目的係在於提供一種適用於數位版權管理的授權管控方法與系統,係在不變更既有數位版權管理系統的架構下,使一個數位內容 服務平台可同時使用多個數位版權管理系統,且使一個數位版權管理系統可同時供多個數位內容服務平台使用。 The second object of the present invention is to provide an authorization management and control method and system suitable for digital copyright management, which is to make a digital content without changing the structure of the existing digital copyright management system. The service platform can simultaneously use multiple digital rights management systems, and enables a digital rights management system to be used by multiple digital content service platforms at the same time.
本發明之再一目的係在於提供一種適用於數位版權管理的授權管控方法與系統,係使一個數位內容服務平台的用戶終端裝置可使用不同的數位版權管理終端軟體,讀取由不同數位版權管理系統保護的數位內容。 A further object of the present invention is to provide an authorization management and control method and system suitable for digital copyright management, which enables a user terminal device of a digital content service platform to use different digital rights management terminal software to read and manage by different digital rights. Digital content protected by the system.
達成上述發明目的之一種適用於數位版權管理的授權管控方法與系統,係基於數位版權管理系統、數位內容服務平台、終端裝置、授權紀錄與統計的資料管理,結合數位版權管理裝置許可證數量的調控機制,以接收並處理數位版權管理系統的數位內容授權請求,及中介數位版權管理系統的授權請求至數位內容服務平台進行判定。因數位版權管理系統的內容授權會受到數位版權管理裝置許可證數量的限制,故在管控數位版權管理系統的授權請求時會同時考量此議題。而不同的數位版權管理系統提供的裝置許可證數量與裝置許可證使用數量之計數方式不一樣,所以一個數位內容服務平台要使用多個數位版權管理系統時,須指定採用之數位版權管理系統的數位版權管理裝置許可證數量與使用數量計數方式。之後,當本系統接收到來自一數位版權管理系統查詢關於一終端裝置之授權請求時,會協同數位版權管理裝置許可證數量的檢驗與調控機制進行授權處理。至於授權與否的判定則依不同數位內容服務平台的需求而定,這可由數位內容服務平台決定、或由系統預設邏輯判定、或佐以來自其他資訊系統與授權請求內容相關聯之資訊做為判定的依據。 An authorization management method and system suitable for digital copyright management to achieve the above object is based on a digital copyright management system, a digital content service platform, a terminal device, an authorization record and statistical data management, and a number of digital rights management device licenses. The control mechanism is configured to receive and process the digital content authorization request of the digital rights management system, and the authorization request of the intermediary digital rights management system to the digital content service platform for determination. The content authorization of the factor-based copyright management system is limited by the number of licenses of the digital rights management device, so this issue is considered at the same time when the authorization request of the digital rights management system is controlled. The number of device licenses provided by different digital rights management systems is different from the number of device licenses used. Therefore, when a digital content service platform uses multiple digital rights management systems, it must specify the digital rights management system. The number of digital rights management device licenses and the number of usage counts. Thereafter, when the system receives an authorization request from a digital rights management system for a terminal device, the system performs authorization processing in cooperation with the verification and regulation mechanism of the number of licenses of the digital rights management device. As for the authorization or not, the decision is based on the needs of different digital content service platforms, which may be determined by the digital content service platform, or determined by the system preset logic, or with information related to the content of the authorization request from other information systems. For the basis of the judgment.
本發明所提出之系統包含三大模組:(一)資料管理模組:用以管理數位版權管理系統、數位內容服務平台、終端裝置、授權紀錄與統計數據之資料,並可接收以下請求:數位版權管理系統的資料登錄請求、數位內容服務 平台的資料登錄請求、數位內容服務平台其終端裝置之資料登錄請求;(二)授權管控模組:用以接收與處理不同數位版權管理系統的授權請求、調用數位版權管理裝置許可證調控模組調控數位版權管理裝置許可證的數量、及向其他資訊系統查詢與授權請求內容相關聯之資料;(三)數位版權管理裝置許可證調控模組:用以檢驗及調控數位版權管理系統中可用的數位版權管理裝置許可證數量。 The system proposed by the invention comprises three modules: (1) a data management module: for managing data of a digital copyright management system, a digital content service platform, a terminal device, an authorization record and statistical data, and receiving the following requests: Data registration request and digital content service of digital copyright management system Data registration request of the platform, data registration request of the terminal device of the digital content service platform; (2) Authorization management and control module: for receiving and processing authorization requests of different digital rights management systems, and calling the digital rights management device license control module Regulating the number of licenses for digital rights management devices and querying other information systems for information related to the content of the authorization request; (3) Digital rights management device license control module: used to verify and regulate the available in the digital rights management system Number of digital rights management device licenses.
本發明所提出之方法,包含下列步驟:1.由資料管理模組接收數位版權管理系統的資料登錄,接著接收數位內容服務平台的資料登錄,其會指定該平台要採用的數位版權管理系統、授權處理子模組與相關資訊,最後接受數位內容服務平台所屬終端裝置的資料登錄,其中須指定該終端裝置所採用之數位版權管理系統;2.完成上述資料登錄後,當授權管控模組接收到來自一數位版權管理系統查詢關於一終端裝置之授權請求時,會依裝置所屬的數位內容服務平台資訊載入其指定的授權處理子模組處理該請求;3.在處理該請求時,會以數位版權管理裝置許可證調控模組,檢驗及調控該裝置所採用之數位版權管理系統的數位版權管理裝置許可證數量,以確保此裝置可取得並占用一數位版權管理裝置許可證;4.通過檢驗後,再進行授權資訊的擷取與授權與否的判定;以及5.最後,回覆授權結果予數位版權管理系統,完成授權管控程序並儲存授權紀錄。 The method provided by the present invention comprises the following steps: 1. Receiving data registration of a digital copyright management system by a data management module, and then receiving data registration of a digital content service platform, which specifies a digital copyright management system to be adopted by the platform, Authorizing the processing sub-module and related information, and finally accepting the data registration of the terminal device belonging to the digital content service platform, wherein the digital copyright management system used by the terminal device is specified; 2. after the above data registration is completed, when the authorization management module receives When an authorization request from a digital rights management system for a terminal device is queried, the request is processed according to the digital content service platform information to which the device belongs, and the request is processed by the specified authorization processing sub-module; 3. when processing the request, The digital rights management device license control module is used to verify and regulate the number of digital copyright management device licenses of the digital rights management system used by the device to ensure that the device can obtain and occupy a digital copyright management device license; After passing the inspection, the authorization information is obtained and authorized. ; And 5. Finally, reply to the authorization result to the digital rights management system, to complete the authorization and control procedures authorization record store.
11‧‧‧資料管理模組 11‧‧‧Data Management Module
12‧‧‧授權管控模組 12‧‧‧Authorized Control Module
121‧‧‧授權處理子模組 121‧‧‧Authorization processing sub-module
13‧‧‧數位版權管理裝置許可證調控模組 13‧‧‧Digital copyright management device license control module
14‧‧‧數據資料庫 14‧‧‧Data Database
21-24‧‧‧數位版權管理系統資料登錄步驟 21-24‧‧‧Digital Copyright Management System Data Registration Procedure
31-36‧‧‧數位內容服務平台資料登錄步驟 31-36‧‧‧Digital Content Service Platform Data Entry Procedure
41-44‧‧‧終端裝置資料登錄步驟 41-44‧‧‧ Terminal device data registration steps
51-55‧‧‧授權請求的處理步驟 51-55‧‧‧ Processing steps for authorization requests
61-66‧‧‧授權判定與授權結果產生步驟 61-66‧‧‧ Authorization decision and authorization result generation steps
71-76‧‧‧數位版權管理裝置許可證的檢驗與調控步驟 71-76‧‧‧Steps for the verification and regulation of digital copyright management device licenses
圖1為本發明一種適用於數位版權管理的授權管控系統之架構圖;圖2為本發明一種適用於數位版權管理的授權管控系統之數位版權管理系統資料登錄流程圖;圖3為本發明一種適用於數位版權管理的授權管控系統之數位內容服務平台資料登錄流程圖;圖4為本發明一種適用於數位版權管理的授權管控系統之終端裝置資料登錄流程圖;圖5為該本發明一種適用於數位版權管理的授權管控系統之授權管控模組處理授權請求的流程圖;圖6為該本發明一種適用於數位版權管理的授權管控系統之授權處理子模組判定授權的流程圖;圖7為該本發明一種適用於數位版權管理的授權管控系統之數位版權管理裝置許可證調控模組的裝置許可證數量檢驗與調控流程圖。 1 is a structural diagram of an authorization management and control system suitable for digital copyright management according to the present invention; FIG. 2 is a flow chart of data registration of a digital copyright management system applicable to an authorized management and control system for digital copyright management according to the present invention; A digital content service platform data registration flow chart suitable for the digital rights management authorization management system; FIG. 4 is a flow chart of the terminal device data registration applicable to the digital rights management authorization management system; FIG. 5 is a suitable application of the present invention. A flow chart of processing an authorization request by an authorization management module of a digital rights management authorization management system; FIG. 6 is a flow chart of determining authorization of an authorization processing sub-module of an authorization management system for digital rights management according to the present invention; It is a flowchart of the device license quantity verification and regulation of the digital copyright management device license control module applicable to the digital rights management authorization control system of the present invention.
請參閱圖1所示,為本發明之授權管控系統架構圖,係包括三大模組:資料管理模組11、授權管控模組12、數位版權管理裝置許可證調控模組13,與一數據資料庫14。其中,資料管理模組用以負責數位版權管理系統資料、數位內容服務平台資料、終端裝置資料、授權紀錄與統計數據四種資料的登錄與管理,並將資料儲存於數據資料庫;授權管控模組基於資料管理模組的資料處理來自數位版權管理系統之授權請求及向至數位內容服務平台取得授權資訊,其包含具有不同授權處理邏輯的不同授權處理子模組121;數位版權管理裝 置許可證調控模組13用於資料登錄與授權管控時,檢驗及調控數位版權管理系統的數位版權管理裝置許可證數量。 Please refer to FIG. 1 , which is a structural diagram of the authorization management system of the present invention, which includes three modules: a data management module 11 , an authorization management module 12 , a digital copyright management device license control module 13 , and a data Database 14. The data management module is responsible for the registration and management of the digital copyright management system data, the digital content service platform data, the terminal device data, the authorization record and the statistical data, and stores the data in the data database; the authorization management model The group processes the authorization request from the digital rights management system based on the data management module and obtains authorization information from the digital content service platform, which includes different authorization processing sub-modules 121 having different authorization processing logics; digital rights management equipment When the license control module 13 is used for data registration and authorization control, the number of digital copyright management device licenses of the digital copyright management system is checked and regulated.
請參閱圖2所示,為本發明系統之資料管理模組的數位版權管理系統資料登錄流程圖,係包含四個步驟:接收數位版權管理系統資料登錄請求21、取得請求中數位版權管理系統名稱、支援數位版權管理裝置許可證使用數量計數方式、數位版權管理裝置許可證數量22、登錄成功並取得數位版權管理系統識別碼23及儲存數位版權管理系統資料於數據資料庫24。首先,本發明之系統要做為一數位版權管理系統的授權管控系統,此數位版權管理系統的資料須先登錄於本系統。在接收到數位版權管理系統資料的登錄請求時,必須取得此數位版權管理系統的名稱、支援數位版權管理裝置許可證使用數量的計數方式及數位版權管理裝置許可證數量等資訊。若成功取得此三項資料,將得到一相對應的數位版權管理系統識別碼,最後將資料儲存於數據資料庫中。 Please refer to FIG. 2, which is a data registration flowchart of the digital copyright management system of the data management module of the system of the present invention, which comprises four steps: receiving a digital copyright management system data login request 21, and obtaining a digital copyright management system name in the request. The digital copyright management device license usage quantity counting method, the digital copyright management device license number 22, the login success and the digital rights management system identification code 23, and the digital rights management system data are stored in the data database 24. First of all, the system of the present invention is to be an authorization management system for a digital copyright management system, and the data of the digital copyright management system must be first registered in the system. When receiving a login request for digital rights management system data, it is necessary to obtain the name of the digital rights management system, the number of ways to support the number of licenses used by the digital rights management device, and the number of digital rights management device licenses. If these three items are successfully obtained, a corresponding digital copyright management system identification code will be obtained, and finally the data will be stored in the data database.
請參閱圖3所示,為本發明系統之資料管理模組的數位內容服務平台資料登錄流程圖,係包含六個步驟:接收數位內容服務平台資料登錄請求31、取得請求中數位內容服務平台名稱、申請採用之數位版權管理系統的識別碼、數位版權管理裝置許可證使用數量計數方式及數位版權管理裝置許可證數量、授權處理子模組識別碼32、確認採用之數位版權管理系統支援此數位內容服務平台所要求之數位版權管理裝置許可證使用數量計數方式33、確認採用之數位版權管理系統是有足夠的可用許可證數量供此數位內容服務平台使用34、登錄成功並取得數位內容服務平台識別碼35及儲存數位內容服務平台資料於數據資料庫36。首先,一數位內容服務平台要使用本系統取得數位版權管理系統的保護與授權機制,須將其平台資料登錄於本系統。在接收到數位內容服務平 台資料的登錄請求時,必須取得此數位內容服務平台的名稱、採用之數位版權管理系統識別碼、數位版權管理裝置許可證使用數量計數方式、數位版權管理裝置許可證數量資訊、以及授權處理子模組識別碼;其中,授權處理子模組識別碼對應到一個用於判定授權的授權處理子模組。若成功取得上述資料,則驗證採用的數位版權管理裝置許可證使用數量計數方式是否為所申請之數位版權管理系統所支援與申請之數位版權管理裝置許可證數量是否少於所申請之數位版權管理系統的可用數位版權管理裝置許可證之數量。若通過上述兩項驗證,將得到一相對應的數位內容服務平台識別碼,最後將資料儲存於數據資料庫中。 Please refer to FIG. 3, which is a flow chart of data registration of the digital content service platform of the data management module of the system of the present invention, which comprises six steps: receiving a digital content service platform data login request 31, and obtaining a digital content service platform name in the request. The identification code of the digital copyright management system applied for the application, the number of digital copyright management device license usage counting methods, the number of digital rights management device licenses, the authorization processing sub-module identification code 32, and the digital copyright management system used for confirmation support this digit. The digital service management device license usage quantity counting method required by the content service platform 33, the digital security management system confirmed to have sufficient available license quantity for the digital content service platform to use 34, the login success and the digital content service platform The identification code 35 and the stored digital content service platform data are in the data repository 36. First of all, a digital content service platform should use this system to obtain the protection and authorization mechanism of the digital copyright management system, and its platform data must be logged into the system. Receiving digital content service flat The registration request of the data must obtain the name of the digital content service platform, the digital copyright management system identification code used, the digital copyright management device license usage count method, the digital copyright management device license quantity information, and the authorization processing device. The module identification code; wherein the authorization processing sub-module identification code corresponds to an authorization processing sub-module for determining authorization. If the above information is successfully obtained, it is verified whether the digital copyright management device license usage count method is the number of digital copyright management device licenses supported and applied by the digital security management system applied for less than the applied digital rights management. The number of available digital rights management device licenses for the system. If the above two verifications are obtained, a corresponding digital content service platform identification code will be obtained, and finally the data will be stored in the data database.
請參閱圖4所示,為本發明系統之資料管理模組的終端裝置資料登錄流程圖,係包含四個步驟:接收終端裝置資料登錄請求41、取得請求中終端裝置唯一識別碼、所屬數位內容服務平台之識別碼、所採用數位版權管理系統之識別碼42、調用數位版權管理裝置許可證調控模組以確認尚有可用的數位版權管理裝置許可證43、儲存終端裝置資料於數據資料庫44。一數位內容服務平台須將其用戶的終端裝置資料登錄於本系統中,其終端裝置才可以讀取受本系統轄下數位版權管理系統加密保護的數位內容。資料登錄時必須提供用於識別此裝置的裝置唯一識別碼、所屬數位內容服務平台之識別碼及所採用數位版權管理系統之識別碼。因一數位內容服務平台可同時採用多種數位版權管理系統,故一終端裝置須指明其所使用的數位版權管理系統。登錄過程中,必須調用數位版權管理裝置許可證調控模組確認尚有可用的數位版權管理裝置許可證數量可供給此裝置使用,若通過檢驗方可成功登錄,並將資料儲存於數據資料庫中,反之則拒絕此裝置的登錄。 Referring to FIG. 4, the terminal device data registration flowchart of the data management module of the system of the present invention includes four steps: receiving a terminal device data registration request 41, obtaining a terminal device unique identification code, and belonging to the digital content. The identification code of the service platform, the identification code of the digital copyright management system used, the digital rights management device license control module are called to confirm that the digital rights management device license 43 is available, and the storage terminal device data is stored in the data database 44. . A digital content service platform must log the user's terminal device data into the system, and the terminal device can read the digital content encrypted by the digital copyright management system under the system. When the data is registered, the unique identification code of the device for identifying the device, the identification code of the digital content service platform to which it belongs, and the identification code of the digital copyright management system used must be provided. Since a digital content service platform can simultaneously adopt multiple digital rights management systems, a terminal device must indicate the digital rights management system it uses. During the login process, the digital rights management device license control module must be called to confirm that the number of digital rights management device licenses available is available for use by the device. If the verification is successful, the data can be stored in the data database. Otherwise, the login of this device is rejected.
請參閱圖5所示,為本發明之系統的授權管控模組12的授權管控流程圖,係包含五個步驟:接收授權請求51、確認裝置唯一識別碼已登錄於本系統中並取得裝置及其所屬數位內容服務平台之相關資料52、以授權處理子模組識別碼載入相對應之授權處理子模組53、向數位版權管理系統回覆授權處理結果54、於資料管理模組中新增授權紀錄與更新裝置資料55。當一終端裝置嘗試解密還原一受數位版權管理系統保護之數位內容,數位版權管理系統會向本發明之系統發出一授權請求以取得是否授權此數位內容予此終端裝置播放的資訊。其中,請求參數必包含一終端裝置的唯一識別碼供以辨識此授權請求是由何裝置所觸發。處理過程首先以裝置唯一識別碼從資料管理模組中取得此裝置、所屬之數位內容服務平台與數位版權管理系統的相關資料。接著,以授權處理子模組識別碼載入相對應之授權處理子模組並提供已取得的相關資料來處理此請求。處理完成後,回覆授權結果予發出請求之數位版權管理系統,並於資料管理模組中新增一筆授權紀錄以紀載請求的內容及授權的結果,且若成功取得授權時,須再記錄此裝置已於一時間點取得並占用一數位版權管理裝置許可證。 Please refer to FIG. 5, which is a flow chart of authorization management and control of the authorization management module 12 of the system of the present invention. The method includes five steps: receiving an authorization request 51, confirming that the device unique identification code has been registered in the system, and acquiring the device and The related information 52 of the digital content service platform to which it belongs, the authorization processing sub-module identification code is loaded into the corresponding authorization processing sub-module 53, the digital copyright management system is replied to the authorization processing result 54, and the data management module is newly added. Authorization record and update device information 55. When a terminal device attempts to decrypt and restore a digital content protected by a digital rights management system, the digital rights management system issues an authorization request to the system of the present invention to obtain information as to whether or not to authorize the digital content to be played by the terminal device. The request parameter must include a unique identifier of a terminal device to identify which device the trigger request is triggered by. The processing first obtains the related information of the device, the digital content service platform and the digital copyright management system from the data management module by using the device unique identification code. Then, the authorization processing sub-module identifier is loaded into the corresponding authorization processing sub-module and the obtained related data is provided to process the request. After the processing is completed, the authorization result is replied to the requesting digital copyright management system, and an authorization record is added to the data management module to record the content of the request and the result of the authorization, and if the authorization is successfully obtained, the record must be recorded again. The device has acquired and occupied a digital rights management device license at one point in time.
請參閱圖6所示,為本發明之系統的授權處理子模組121的授權判定流程圖,係包含以下步驟與處理方式:調用數位版權管理裝置許可證調控模組檢驗數位版權管理裝置許可證數量61、判別授權請求的類型62、數位內容服務平台授權判定63、預設邏輯授權判定64、關聯資料擷取65、轉換授權結果66。處理授權請求時,須先進行數位版權管理置許可證調控機制的檢驗,以確保此裝置可取得一數位版權管理裝置許可證。若通過檢驗,則進行授權請求類型的判斷。本子模組可處理的請求有三種:查詢一終端裝置是否屬於一數位內容服 務平台認可的有效裝置,其中請求參數包含一裝置唯一識別碼,回覆參數則包含是否有效及有效的時間範圍;查詢一終端裝置是否具有讀取一數位內容之權限,其中請求參數包含一裝置唯一識別碼與一數位內容識別碼,回覆參數則包含是否有權限及授權的時間範圍;查詢一終端裝置獲得授權的所有數位內容,其中請求參數包含一裝置唯一識別碼,回覆參數則包含獲得授權的所有數位內容之識別碼與授權的時間範圍。在確認請求的型別後的授權判定則依不同需求設計不同的授權邏輯。其處理方式主要分為兩種:一是將請求轉由終端裝置所屬之數位內容服務平台判定,其過程須轉換原有請求的格式或附加關聯資料後,再次向數位內容服務平台發出請求並接收回覆結果;二是由本子模組的預設邏輯進行處理此請求,其預設邏輯可由不同需求而訂定,例如由一請求中的內容識別碼參數及與其關聯之資料來判定授權的與否與權利;其中,關聯資料的可由請求中的參數至本系統之資料管理模組或其他外部資訊系統擷取。例如取得一終端裝置所屬之電信服務提供者(Internet Service Provider,ISP)的訊息後,並針對特定之提供者一律給予授權。在確認授權後,以將要回覆的數位版權管理系統所需之授權結果格式為標準,轉換數位內容服務平台授權請求判定的結果或子模組預設授權邏輯判定的結果之資料格式,以及填補關聯資料,再將授權結果回傳予數位版權管理系統。 Please refer to FIG. 6 , which is a flowchart of authorization determination of the authorization processing sub-module 121 of the system of the present invention, which includes the following steps and processing methods: calling a digital rights management device license control module to check a digital copyright management device license The quantity 61, the type of the discriminating authorization request 62, the digital content service platform authorization decision 63, the preset logical authorization decision 64, the associated data extraction 65, and the conversion authorization result 66. When processing an authorization request, the digital rights management license control mechanism must be checked to ensure that the device can obtain a digital copyright management device license. If the test is passed, the type of authorization request is judged. There are three types of requests that can be processed by this sub-module: query whether a terminal device belongs to a digital content service. A valid device approved by the platform, wherein the request parameter includes a device unique identification code, and the response parameter includes a valid and valid time range; and querying whether a terminal device has the right to read a digital content, wherein the request parameter includes a device unique The identification code and a digital content identification code, the response parameter includes whether there is a permission and a time range for authorization; querying a terminal device to obtain all digital content of the authorization, wherein the request parameter includes a device unique identification code, and the reply parameter includes the authorized The identification code of all digital content and the authorized time range. The authorization decision after confirming the type of the request design different authorization logic according to different requirements. There are two main treatment methods: one is to transfer the request to the digital content service platform to which the terminal device belongs, and the process must convert the format of the original request or attach the associated data, and then send a request to the digital content service platform and receive it again. Replying to the result; second, the request is processed by the preset logic of the sub-module, and the preset logic can be determined by different requirements, for example, by the content identifier parameter in a request and the data associated with it to determine whether the authorization is authorized or not. And rights; wherein the related data can be retrieved from the parameters in the request to the data management module of the system or other external information system. For example, after obtaining the message of the Internet Service Provider (ISP) to which the terminal device belongs, the authorization is given to the specific provider. After confirming the authorization, the data format of the result of the digital content service platform authorization request determination or the result of the sub-module preset authorization logic determination, and the filling association are converted by the authorization result format required by the digital copyright management system to be replied as a standard. The data is then passed back to the digital rights management system.
請參閱圖7所示,為本發明之系統的數位版權管理裝置許可證調控模組13的數位版權管理裝置許可證的檢驗與調控流程圖,係包含處理流程以新裝置71與舊裝置72分為二種。其中,新裝置指一終端裝置尚未取得並占用一數位版權管理許可證,而舊裝置指一終端裝置已取得並占用一數位版權管理許可證。對一終端裝置進行檢驗時,須取得其所屬數位內容服務平台於此裝置 採用之數位版權管理系統所申請使用之數位版權管理裝置許可證使用數量計數方式與數位版權管理裝置許可證使用數量。其中,計數方式分為三種:累計播放次數制73指一數位內容服務平台所屬終端裝置於本系統成功取得授權的累計次數、累計裝置數量制74指一數位內容服務平台所屬終端裝置於本系統成功取得授權的裝置累計數量、定額裝置數量可回收制75指一數位內容服務平台於本系統的有效裝置累計數量,其中有效裝置表在最近一段時間內曾成功取得授權的裝置。當一新裝置於上述三種計數方式且計數未滿的情況下,可以通過檢驗;若是遇到已滿的情況,只有定額裝置數量可回收制會觸發一移除失效裝置的版權管理許可證76的動作,回收過去一段間內曾被占用的數位版權管理裝置許可證以改供給新裝置使用。其中,此動作為本模組向終端裝置所屬之數位版權管理系統發出一移除數位版權管理裝置許可證的請求,若回覆結果表示移除成功,並於資料管理模組中更新此裝置資料以標記其數位版權管理裝置許可證於一時間點已被回收,最後成功通過檢驗;若回覆結果表示失敗,則為移除失敗。至於舊裝置只有在採用累計播放制且計數已滿的情況下才會檢驗失敗,其餘皆可通過此檢驗機制。在上述內文中,已滿指一數位內容服務平台於一數位版權管理系統之數位版權管理裝置許可證使用數量結果次數或數量以達其平台資料登錄時所申請之數位版權管理裝置許可證數量,反之則為未滿。在處理過程中,已滿與未滿的資訊是藉由資料管理模組的授權統計數據中得知。 Please refer to FIG. 7 , which is a flow chart of the verification and regulation of the digital copyright management device license of the digital rights management device license control module 13 of the system of the present invention, which includes the processing flow with the new device 71 and the old device 72 . For two. Among them, the new device means that a terminal device has not acquired and occupied a digital copyright management license, and the old device refers to a terminal device that has acquired and occupied a digital copyright management license. When testing a terminal device, it must obtain its digital content service platform for this device. The number of digital rights management device license usage counts used by the digital rights management system and the number of digital rights management device licenses used. Among them, the counting method is divided into three types: the cumulative playing number system 73 refers to the cumulative number of times that the terminal device belonging to the digital content service platform successfully obtains authorization in the system, and the cumulative device number system 74 refers to the success of the terminal device belonging to the digital content service platform in the system. The cumulative number of authorized devices and the number of fixed devices can be recovered. The cumulative number of valid devices in the system is 75. The effective device list has successfully obtained authorized devices in the most recent period of time. When a new device is in the above three counting modes and the counting is not full, the inspection may be passed; if the full condition is encountered, only the number of the fixed device retrievable system may trigger the removal of the copyright management license 76 of the failed device. Action, recovering the digital rights management device license that was occupied in the past period to be used for new devices. The action is that the module sends a request for removing the digital rights management device license to the digital rights management system to which the terminal device belongs, and if the reply result indicates that the removal is successful, the device data is updated in the data management module. The digital copyright management device license is marked for recycling at a point in time, and finally passes the test; if the reply result indicates failure, the removal fails. As for the old device, the test fails only when the cumulative play system is used and the count is full, and the rest can pass the test mechanism. In the above text, the number of digital copyright management device licenses used by a digital content service platform in a digital rights management system is the number of times or the number of licenses used to register the platform. Otherwise, it is not full. During processing, the full and underfilled information is known from the authorization statistics of the data management module.
本發明所提供針對數位版權管理系統與數位內容服務平台所設計之一種適用於數位版權管理的授權管控方法與系統,與其他習用技術相互比較時,更具備下列優點: The invention provides an authorization management and control method and system suitable for digital copyright management designed by the digital copyright management system and the digital content service platform. When compared with other conventional technologies, the invention has the following advantages:
1.本發明之授權管控方法與系統,結合數位版權管理裝置許可證數量的檢驗與即時調控,以接收與處理數位版權管理系統的授權請求,故適用於數位版權管理系統的授權控制。 1. The authorization management method and system of the present invention, combined with the verification and immediate regulation of the number of licenses of the digital rights management device, to receive and process the authorization request of the digital rights management system, and thus is applicable to the authorization control of the digital rights management system.
2.本發明以數位版權管理的授權請求處理為基礎,搭配數位版權管理系統、數位內容服務平台、終端裝置與授權紀錄的資訊管理,可在不變更既有數位版權管理系統的架構下,使一數位版權管理系統可供多個數位內容服務平台使用,且使一數位內容服務平台可同時採用多個數位版權管理系統。 2. The invention is based on the processing of the authorization request of the digital copyright management, and the information management of the digital copyright management system, the digital content service platform, the terminal device and the authorization record can be made without changing the structure of the existing digital copyright management system. A digital rights management system can be used by multiple digital content service platforms, and a digital content service platform can simultaneously adopt multiple digital rights management systems.
3.本發明處理數位版權管理的授權請求時,乃以載入授權處理子模組的方式運作。故即時新增與變更一數位內容服務平台授的權處理方式,皆不會影響其他數位內容服務的運行,有利於使一數位版權管理系統可供多個數位內容服務平台使用。 3. The present invention operates in the manner of loading an authorization processing sub-module when processing an authorization request for digital rights management. Therefore, the immediate addition and change of the rights management method of the digital content service platform will not affect the operation of other digital content services, and facilitate the use of a digital rights management system for multiple digital content service platforms.
上列詳細說明乃針對本發明之一可行實施例進行具體說明,惟該實施例並非用以限制本發明之專利範圍,凡未脫離本發明技藝精神所為之等效實施或變更,均應包含於本案之專利範圍中。 The detailed description of the present invention is intended to be illustrative of a preferred embodiment of the invention, and is not intended to limit the scope of the invention. The patent scope of this case.
綜上所述,本案不僅於技術思想上確屬創新,並具備習用之傳統方法所不及之上述多項功效,已充分符合新穎性及進步性之法定發明專利要件,爰依法提出申請,懇請 貴局核准本件發明專利申請案,以勵發明,至感德便。 To sum up, this case is not only innovative in terms of technical thinking, but also has many of the above-mentioned functions that are not in the traditional methods of the past. It has fully complied with the statutory invention patent requirements of novelty and progressiveness, and applied for it according to law. Approved this invention patent application, in order to invent invention, to the sense of virtue.
11‧‧‧資料管理模組 11‧‧‧Data Management Module
12‧‧‧授權管控模組 12‧‧‧Authorized Control Module
121‧‧‧授權處理子模組 121‧‧‧Authorization processing sub-module
13‧‧‧數位版權管理裝置許可證調控模組 13‧‧‧Digital copyright management device license control module
14‧‧‧數據資料庫 14‧‧‧Data Database
Claims (15)
Priority Applications (2)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| TW105104703A TWI607333B (en) | 2016-02-18 | 2016-02-18 | Authorized control method and system for digital copyright management |
| CN201610712431.XA CN107092813B (en) | 2016-02-18 | 2016-08-24 | Authorization control method and system suitable for digital rights management |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| TW105104703A TWI607333B (en) | 2016-02-18 | 2016-02-18 | Authorized control method and system for digital copyright management |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| TW201730801A TW201730801A (en) | 2017-09-01 |
| TWI607333B true TWI607333B (en) | 2017-12-01 |
Family
ID=59648661
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| TW105104703A TWI607333B (en) | 2016-02-18 | 2016-02-18 | Authorized control method and system for digital copyright management |
Country Status (2)
| Country | Link |
|---|---|
| CN (1) | CN107092813B (en) |
| TW (1) | TWI607333B (en) |
Families Citing this family (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN108111534B (en) * | 2018-01-11 | 2021-02-05 | 新华三云计算技术有限公司 | A method and device for controlling authorization |
| CN110430252B (en) * | 2019-07-26 | 2022-06-10 | Oppo广东移动通信有限公司 | Resource data processing method and device, equipment and readable storage medium |
| CN115186237A (en) * | 2022-06-13 | 2022-10-14 | 时代新媒体出版社有限责任公司 | System, method, electronic device and storage medium for copyright resource management |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101171592A (en) * | 2005-05-11 | 2008-04-30 | 株式会社Ntt都科摩 | Digital rights management system, content server, and mobile terminal |
| US20120224696A1 (en) * | 2006-11-13 | 2012-09-06 | Disney Enterprises, Inc. | Interoperable Digital Rights Management |
| TW201325216A (en) * | 2011-12-06 | 2013-06-16 | Ind Tech Res Inst | Method and apparatus for enciphering/deciphering digital rights management object |
| TW201349008A (en) * | 2012-02-16 | 2013-12-01 | Samsung Electronics Co Ltd | Method and apparatus for protecting digital content using device authentication |
-
2016
- 2016-02-18 TW TW105104703A patent/TWI607333B/en active
- 2016-08-24 CN CN201610712431.XA patent/CN107092813B/en not_active Expired - Fee Related
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101171592A (en) * | 2005-05-11 | 2008-04-30 | 株式会社Ntt都科摩 | Digital rights management system, content server, and mobile terminal |
| US20120224696A1 (en) * | 2006-11-13 | 2012-09-06 | Disney Enterprises, Inc. | Interoperable Digital Rights Management |
| TW201325216A (en) * | 2011-12-06 | 2013-06-16 | Ind Tech Res Inst | Method and apparatus for enciphering/deciphering digital rights management object |
| TW201349008A (en) * | 2012-02-16 | 2013-12-01 | Samsung Electronics Co Ltd | Method and apparatus for protecting digital content using device authentication |
Also Published As
| Publication number | Publication date |
|---|---|
| CN107092813A (en) | 2017-08-25 |
| CN107092813B (en) | 2020-08-07 |
| TW201730801A (en) | 2017-09-01 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US10489562B2 (en) | Modular software protection | |
| US7966644B2 (en) | Method, apparatus, and computer program for managing access to documents | |
| US9069936B2 (en) | Licensing verification for application use | |
| US7992001B2 (en) | Preventing execution of software without a dynamically generated key | |
| US20110299679A1 (en) | Controller, control method, computer program, recording medium for computer program, recording apparatus, and manufacturing method for recording apparatus | |
| CN100495421C (en) | An Authentication Protection Method Based on USB Device | |
| CN101213560A (en) | Authentication method, information processing device, recording medium, authentication system, authentication program, and authentication program | |
| CN1489764A (en) | Information storage medium, information processing system, content distribution server, method, program thereof, and storage medium for these programs | |
| CN108664771A (en) | Security system for software and method | |
| JP5598115B2 (en) | Information processing apparatus, information processing method, and program | |
| CN101739361A (en) | Access control method, access control device and terminal device | |
| TWI607333B (en) | Authorized control method and system for digital copyright management | |
| CN111083530B (en) | DRM integration method, system, device and storage medium for Internet broadcast control platform | |
| CN101278300A (en) | license management system | |
| US8385554B2 (en) | Preventing execution of pirated software | |
| JP5009832B2 (en) | Content use management system, information processing apparatus, method, and program | |
| CN1286025C (en) | Method for realizing hard disk protection | |
| CN100596056C (en) | A method for realizing safe access to digital information | |
| JP5552917B2 (en) | Information processing apparatus, information processing method, and program | |
| TW201310275A (en) | Information processing device, information processing method, and program | |
| CN100464341C (en) | Generation and management method for digital content use trace based on reliable computing technology | |
| CN114401117B (en) | Blockchain-based account login verification system | |
| CN1906558A (en) | Authorization code recovering method | |
| CN111222929A (en) | Electronic invoice application method and device supporting dynamic file permission | |
| CN116886318B (en) | Control method for concurrent permission of audio and video equipment |