CN100556135C - The transmission of content and the method for protection and device - Google Patents

Abstract

A method and device for transmitting and protecting content. By introducing the IPMP tool information located at the head of the content data stream and the IPMP tool management function unit located in front of the content decoder as a pre-processing module, the IPMP tool can be obtained from the IPMP tool information, and the MPEG-n IPMP can be accurately defined (Intellectual Property Management and Protection) System Realizable Standard. In order to improve the security and terminal compatibility of different IPMP systems, the user authentication output is defined while proposing a 2-layer structure. The complexity in the terminal is simplified by defining different characteristics in the acquisition of the IPMP tool.

Description

Method and device for transmitting and protecting content

This application is a divisional application of the patent application with application number: 02800507.4 and application date: 2002.2.26.

technical field

The present invention relates to the transfer and protection of content, especially the application program that the protected content can be utilized by different IPMP (Intellectual Property Management and Protection, intellectual property management and protection) systems, and the same content can be protected by different IPMP systems.

Background technique

With the advancement of communication technology, people can deliver multimedia data or content to any desired place at any convenient time, and the requirements for content delivery are getting higher and higher. Information that enables users to enjoy the content easily and efficiently while being satisfied with its convenience and flexibility. On the other hand, although the owner of the content also hopes to satisfy the customer's request, at the same time, he is worried about his property being used illegally. Therefore, the contradiction between these two aspects must be resolved.

Now, various protection technologies for protecting contents such as data encryption, electronic watermark, password, etc. have been developed. These can be installed in most content delivery applications. In order to transmit the content in a protected state, different systems can adopt different kinds of mechanisms and protection techniques. In this case, all terminals and content usage devices can only reproduce or utilize content provided by the same content provider. That is, if the terminal or device is replaced, different content cannot be reproduced.

In the MPEG standardization organization, standardization work of an IPMP system including a terminal is in progress. All terminals can reproduce protected content encrypted and protected according to the same IPMP standard regardless of the IPMP tool used. Such a terminal is composed of a content decoder for audio and video decoding, and the terminal can release the protection of the protected content before the content can be encrypted and reproduced. Therefore, it is necessary to obtain protection information, that is, IPMP tool information, and be able to use it in the terminal.

On the other hand, in order to allow a vendor to have the flexibility to select a tool suitable for his own IPMP system, it is not possible to fix the IPMP tool to a certain tool in advance. Thus, in order to improve flexibility and security at the same time, some standard methods and interfaces must be defined.

According to the prior art user authentication and acquisition of IPMP tools, for example, as in MPEG-2 or MPEG-4, whether or not the same decoding is used, the installation of the tools is very different for each vendor. In this case, it is difficult to reproduce different contents provided by different contents providers in the same terminal. In other words, the same protected content cannot be reproduced under different IPMP systems.

Contents of the invention

(technical problem to be solved in the present invention)

In order to be able to use the same protected content in different IPMP systems, the present invention defines IPMP systems with the same structure. Provide a standard method that enables users who install IPMP systems to firmly form the overall system from encoding to channel delivery, and finally to the terminal.

(solution)

First, the IPMP tool information is placed at the head of the actual content stream other than the content ID, and is defined as one specific packet including the following items.

• The type of IPMP tools used to protect the content.

• The location type of the IPMP tool.

· The location of the IPMP tool can be obtained.

The IPMP tool information flag is configured as a header at the head of the data packet. The IPMP tool management function is located in front of the content decoder, and is designed as a module capable of syntactically analyzing the IPMP tool information sent through the content stream and obtaining an IPMP tool that unprotects the content stream.

In order to improve security and terminal compatibility and to determine the output requirements for any different user authentication methods, a 2-layer security structure is introduced.

The IPMP tool ID is defined by a predetermined information table, which can be coded in advance or downloaded to the terminal. In order to use the same IPMP tool ID for the same IPMP tool, it is necessary for the content provider side and the terminal side to refer to the same information table.

The terminal can be pre-encoded by an existing IPMP tool that is considered to be a standard IPMP tool, and in the terminal, if its capabilities allow, it can download the licensed IPMP tool information according to the IPMP tool information transmitted by the content data stream. Log in to the IPMP tool. The encryption key is further encrypted on the basis of the 2-layer security structure, and can be inserted into the IPMP data field, and delivered to the terminal together with the content data stream. On the content provider side, the content is encoded by using an existing encoding technology such as MPEG-2 or MPEG-4, and encrypted by using an existing IPMP tool such as DES or AES. It is also possible to embed electronic watermarks in the content before encoding.

Meanwhile, the content ID is generated based on content copyright information, content creation information, and the like. The IPMP tool information is generated based on the IPMP tool information used for content protection. The IPMP tool information includes an IPMP tool ID, a location type, and a location of the IPMP tool. The IPMP tool information flag is placed at the head, and the IPMP tool information, content ID, and content are linked thereafter.

Any terminal can acquire content or access content, but reproduction cannot be performed without a valid license and corresponding or IPMP tool. On the terminal side, the content data flow is transmitted through the IPMP tool management function module, and the IPMP tool is obtained locally or remotely after the verification of the IPMP tool. The obtained IPMP tool can be used in the terminal at this time.

The content data stream passes through the content decoder, and then the IPMP data decoding module activates the user authentication module, and sends a request to the content provider by providing the user's terminal ID, content ID and IPMP tool ID. Pass the license to the terminal after the user authentication has been fully completed. Finally, the encrypted key is deciphered, and the encrypted content is deciphered, and the content is decrypted so that it can be reproduced on the terminal.

(compared to the beneficial effect of the prior art)

By importing and configuring the IPMP tool information package at the head of the content data stream, and performing grammatical analysis on the IPMP tool information, the IPMP tool management function module of the IPMP tool is obtained, and the same protected content is realized in different types of IPMP systems. regeneration.

The 2-layer structure not only improves security, but also fixes the output structure of different user authentication methods, improving compatibility between terminals. In such a configuration, user authentication can be installed in different ways for different providers, increasing mutual usability. Different characteristics are defined according to the complexity and flexibility of terminals used to obtain IPMP tools, so that different terminals can use the same standard, and the scope of use is expanded.

The present invention provides a method for reading out content in a terminal that accepts content and distribution of data streams containing intellectual property management and protection tool information flags, content IDs, and intellectual property management and protection tool information from a provider, and is characterized in that , including: the step of syntactically analyzing the data stream; the step of detecting the information flag of the intellectual property management and protection tool, the content ID and the information of the intellectual property management and protection tool; reading the intellectual property management contained in the detected information of the intellectual property management and protection tool Steps of protecting tool ID information, location type ID information, and location information of intellectual property management protection tools; steps of specifying a password decoding tool for decoding passwords used in content based on information of intellectual property management protection tool IDs ; According to the information of the location type ID, the step of detecting the type of the location where the password decryption tool exists; and according to the information on the location of the intellectual property management protection tool, the step of specifically determining the location where the password decryption tool exists.

The present invention also provides a device for reading content in a terminal. The terminal receives the content delivered from the provider and the data stream containing the intellectual property management and protection tool information flag, content ID and intellectual property management and protection tool information content and reads the content. A terminal device for producing content, characterized in that the device includes: a device (300) for grammatical analysis of the data stream; a device for detecting the intellectual property management and protection tool information sign, content ID and intellectual property management and protection tool information (301, 202); and read the intellectual property management and protection tool according to the information of the intellectual property management and protection tool ID contained in the detected intellectual property management and protection tool information, the information of the location type ID and the information of the position of the intellectual property management and protection tool Devices (301, 213, 214, 215); according to the information of the intellectual property management protection tool ID, determine the device (301, 205, 206) of the password decoding tool used to decode the password used in the content; according to the information of the location type ID Information, a device for detecting the type of location where the cryptography tool exists (301, 219); and a device for specifically determining the location where the cryptography tool exists according to information on the location of the intellectual property management protection tool (302, 220) .

Description of drawings

FIG. 1 is a diagram showing a conventional IPMP system for delivering and protecting content related to the present invention.

Fig. 2 is a diagram showing an IPMP tooltip packet placed at the front end of a content stream.

Fig. 3 is a diagram showing a state in which the IPMP tool management function works in conjunction with the MPEG-4 IPMP system.

Fig. 4 is a diagram showing a state in which the IPMP tool management function works in conjunction with the MPEG-2 system.

Fig. 5 is the figure that represents the state that user authentication module cooperates MPEG-4 IPMP system and IPMP tool management function module to carry out work.

Fig. 6 is a diagram showing a state in which the user authentication module cooperates with the MPEG-2 system and the IPMP tool management function module.

Fig. 7 is a diagram showing the structure of a content ID format composed of eight blocks.

Fig. 8 is a diagram showing a format structure of an authentication result.

Detailed ways

Fig. 1 shows an IPMP system related to the present invention. The content owner of unit 10 provides content through various content providers A, B, and C of units 11 , 15 and 19 . The three groups of IPMP systems are different IPMP systems. Acquisition and authentication of the IPMP tool are performed using a common or different user authentication tool selected from the common IPMP tool table. Units 12, 16 and 110 may be of different user authentication methods, or may be of the same user authentication method. The acquisition method of the IPMP tool is shown in units 13, 17 and 111. These are the IPMP tools selected from the shared IPMP tool table.

Therefore, even if content codes and content usage terminals are different from each other as shown in blocks 14, 18, and 112, IPMP tools can be acquired from a common table. Even if content provider B delivers protected content, terminal A can acquire the IPMP tool used by content provider B from the common table, and can play back with the acquired IPMP tool. In this embodiment, the so-called tool refers to a tool for decoding encrypted content and reading digital watermark information pre-embedded in the content, but it may also include authentication reading tools and charging setting tools. That is to say, in the prior art, the protected content delivered by the content provider B can only be reproduced on the terminal B contracted with the content provider B, but not on the terminals A and C not contracted with the content provider B. to regenerate. However, in the present invention, the protected content delivered by the content provider B can be performed not only on the terminal B contracted with the content provider B, but also on the terminals A and C not contracted with the content provider B. regeneration.

In order to provide such a system, it is necessary to use means for delivering content from a provider as follows.

That is: a device that converts content into a content data stream through encoding;

A device for encrypting encoded content data streams using data encryption tools;

means for generating a content ID corresponding to the content;

Means for generating IPMP (intellectual property protection) tool information including information necessary for decrypting encrypted content data streams using data encryption tools;

means for generating an IPMP tool information flag indicating the presence of IPMP tool information;

A device for constructing a data flow through the IPMP tool information flag and the connected IPMP tool information, content ID and encrypted content data stream.

In addition, in order to receive a data stream containing content delivered from a provider and read out the content, a terminal device having the following configuration is required:

Syntactic analysis means for data streams;

A device that detects the IPMP tool information flag, content ID, and IPMP tool information;

A device that acquires an IPMP tool based on the detected IPMP tool information.

These devices will be described below.

The upper part in FIG. 2 shows the configuration of the data flow passing through point P in FIG. 1, and shows the data flow prepared by provider A. In FIG. First, there is a packet header 201 of information data, followed by an IPMP tool information packet 202 . There is also a package header 203 for the content, followed by a content package 204 . In the packet header 201 or the IPMP tool information packet 202, an IPMP tool information flag is included to indicate that the IPMP tool information exists. The IPMP tool information flag may also be included elsewhere within the data stream. For example, it may also be included in any position of block 203 or 204 . In the IPMP tool information packet 202, the content ID and the information of the IPMP tool for the content ID form a pair, and there are one or more pairs. Here, it means that there are 2 information pairs. The first information pair includes content ID1 205 and IPMP tool information 206 for content ID1, and the second information pair includes content ID2 207 and IPMP tool information 208 for content ID2. Content 1 of the content package 204 includes content corresponding to content ID1 in the first information pair (for example, music 1), and content 2 includes content corresponding to content ID2 in the second information pair (for example, music 2). Different data encryption tools may also be used for content 1 and content 2.

The middle portion in FIG. 2 shows detailed IPMP information 206 for content ID1. Information on IPMP tools from multiple providers is included here. In the example shown here, the IPMP tool information 211 of content provider A and the IPMP tool information 212 of content provider B are included. Needless to say, the IPMP tool information of content provider C and content provider D can also be included. The IPMP tool information of the content provider A includes an IPMP tool ID 213, an IPMP tool name 214, and an IPMP tool location identification factor 215. The IPMP tool ID 213 is, for example, a tool for interpreting encrypted data, that is, it is determined as a decryption tool. The IPMP tool name 214 is used to indicate the name of the decryption tool. The IPMP tool location identification factor 215 indicates the location (for example, the homepage of the Internet) where the decryption tool can be obtained. The IPMP tool name 214 can also be omitted. Since Table 1, which will be described later, is pre-recorded in each terminal of the end user, so as long as the IPMP tool ID 213 is known, the IPMP tool name 214 can be obtained from Table 1.

The IPMP tool ID 213, as shown in Table 1, is determined with an ID composed of 8 bits, and is common in all terminal machines. As the IPMP tool location identification factor 215, as described below, for example, the address of a homepage is written.

The lower part in FIG. 2 shows the specific content of the IPMP tool location identification factor 215 . The IPMP tool location identification factor 215 includes information that the tool program specified by the IPMP tool name 214 can be obtained, specifically, the location type 219 and the detailed location 220 . The location type 219 is, for example, the Internet, and the specific location 220 is, for example, the address of the home page.

FIG. 3 shows the configuration of the terminal A. As shown in FIG. Terminal A has an IPMP tool management function unit 300 that receives an external input signal. The IPMP tool management function unit 300 includes an IPMP tool information syntax analysis unit 301 , an IPMP tool acquisition unit 302 , and a result storage unit 303 . The result storage unit 303 is connected to the IPMP tool database 321 . The data in Table 1 and the acquired IPMP tool software are stored in the IPMP tool database 321 . In addition, the IPMP tool database 321 also includes a module 322 for deciphering the key. The IPMP tool management function unit 300 is connected to the decoder interface 304 . A decoder 305 is included in the decoder interface 304 .

After the decoder interface 304, it includes a sound decoding buffer 306, an image decoding buffer 307, an object descriptor decoding buffer 308, a scene binary data (binary data for scene) (BIFS) decoding buffer 309 and an IPMP decoding buffer 310. The binary data of the scene includes data indicating the placement position of the segmented scene. The audio signals, image signals and BIFS signals output by 306, 307 and 309 are still encrypted.

The sound decoding buffer 306 is connected with the sound decryptor through the control point 331, the image decoding buffer 307 is connected with the image decryptor 312 through the control point 332, the target descriptor decoding buffer 308 is directly connected with the target descriptor decryptor 313, and the scene binary Data (binary data for scene) (BIFS) decoding buffer 309 is connected with BIFS decryptor 314 through control point 333. In addition, the IPMP decoding buffer 310 is connected to the IPMP system 324 . In the figure, control points 331 to 339 represented by circles including multiple points are IPMP control points, and necessary processing (pseudo-random sequence decoding, digital watermarking) is applied to data passing through the control points using tools in the IPMP system 324. detection, copy protection, etc.).

In this embodiment, pseudo-random sequence decoding is performed at the control points 331 , 332 , and 333 . The tools (software) necessary for decoding the pseudo-random sequence are obtained from the IPMP system 324 (including the IPMP tool database 321).

The audio decryptor 311 is connected to the audio synthesis buffer 315 through the control point 334 , the image decryptor 312 is connected to the image synthesis buffer 316 through the control point 335 , and the BIFS decryptor 314 is connected to the decryptor BIFS317 through the control point 336 .

In this embodiment, digital watermark detection is performed at control points 334 , 335 , and 336 . Tools (software) necessary for digital watermark detection are acquired from the IPMP system 324 (including the IPMP tool database 321).

Audio desynthesis buffer 315 is connected to synthesizer 318 through control point 337 , image synthesis buffer 316 is connected to synthesizer 318 through control point 338 , and BIFS decryptor 317 is connected to synthesizer 318 through control point 339 and BIFS tree 319 . The combiner 318 is further connected to a rental system 320 as an output.

In this embodiment, other digital watermark detection and copy protection processing are performed at the control points 337, 338, and 339. Tools (software) necessary for digital watermark detection and copy protection processing are obtained from the IPMP system 324 (including the IPMP tool database 321).

The content data flow shown in Fig. 2, such as the data flow of MPEG4, is input in the IPMP tool management function part 300, detects the content data packet 202 by detecting the packet header 201, then sends it to the IPMP tool information syntax Analysis section 301 . In addition, the content data packet 204 detected by the packet header 203 is sent to the decoder interface 304 of the next stage. The detected IPMP tool information packet 202 is interpreted by the IPMP information syntax analysis unit 301 to identify the provider that is the source of the data stream.

In the IPMP tool acquisition unit 302, if the provider is the provider A, the information 211 of the IPMP tool A used by the provider A is read. If the provider is provider B, the information 212 of the IPMP tool B used by provider B is read. The read results are temporarily stored in the result storage unit 303 and also stored in the IPMP tool database 321 .

Also, the content data packets 204 delivered to the decoder interface 304 are decoded into audio signals, video signals, OD signals, and BIFS signals, and are sent to respective processing circuits. Then perform the above-mentioned processing.

Next, the present invention is divided into four parts, and each part is described in detail.

IPMP tool information and IPMP tool management functions

Next, the IPMP tool information and the IPMP tool management function will be described. The definitions of IPMP tool information and IPMP tool management functions are as follows: Regarding the concept of IPMP, IPMP information is defined as "information necessary for the specified IPMP tool to correctly process the protected specified content". The IPMP tool is defined as "The so-called IPMP tool refers to a module that performs IPMP functional operations such as authentication, encryption, and electronic watermarking in a prescribed method. An IPMP tool can perform more than one IPMP functional operation. It can also be used as a tool for adjusting other IPMP tools. The IPMP tool.".

In the present invention, a scheme of importing the definition of IPMP tool information is proposed. That is, "the so-called IPMP tool information refers to the information necessary for the IPMP tool management function to identify the IPMP tool and obtain the IPMP tool. It includes the unique identification factor of the IPMP tool, the location identification factor of the IPMP tool, and the IPMP tool and content The relevant information between IDs. The IPMP tool should exist in the first packet of the entire content data stream.".

In addition, a scheme of IPMP tool management function is proposed. That is, "the so-called IPMP tool management function refers to an information body that only processes the IPMP tool information to obtain the IPMP tool necessary for the use of the entire content data stream. The IPMP tool management function part should be placed in the content before the decoder.".

IPMP information

As defined in the IPMP tool information, this should be the first packet placement location of the entire content stream. The specific structure of the data packet is given the most concise illustration in FIG. 2 . The IPMP tool information package shall include all the IPMP tool information necessary to utilize the specially protected content. When the content contains multiple types of content, for example, when the first part of the content is provided by content provider A and the second part is provided by content provider B, it is necessary to establish a relationship with different IPMP tools Information should be grouped according to the respective content ID.

The content ID format (cIDf) is defined as a content ID format composed of eight block parts as shown in FIG. 7 . In FIG. 7 , for example, the "Content Attribute" box includes information on the author and content, and the "Copyright Attribute" box includes specific matters related to copyright background such as who and ownership form. Each ID of the content should assign, for example, a content owner ID, a content copyright holder ID, and a recording device ID in designated attribute boxes, respectively. In the case of content recording performed as work, it is possible for photographers to rationally combine and use such a complicated content ID coding system.

Therefore, the IPMP tool information for each content ID should be composed of each IPMP tool information, and the order of each IPMP tool information is not important.

Each IPMP tool information should also be composed of two main parts, namely IPMP tool ID and IPMP tool location identification factor. The IPMP tool ID can identify the tool in a definite way, and can be defined in the terminal, stored in advance, or downloaded to the terminal. Table 1 shows an example of the created information table, and serially shows available IPMP tool IDs.

Table 1 Available IPMP tool IDs

In addition, the first 3 bits can be used to indicate the classification of IPMP tools such as encryption and electronic watermarking. The IPMP tool name is a name used to store the IPMP tool in the IPMP tool management function unit, and can be obtained from the loaded table. The location identification factor represents the transfer information body, and there may be more than one location identification factor for one IPMP tool. The IPMP tool management function part acquires a tool using each identification factor. If the beginning and end of the initial location identification factor of IPMP tool A can be clearly identified, the next location identification factor is skipped. If not, then the second location identification factor is identified next.

Example:

Local: Inside or around the end system.

External: external to the specified end system (http:, ftp:)

The identification factor of IPMP tools consists of two parts: location type and specific location. The location type is any one of the following. The corresponding relationship between location types and specific locations is shown in Table 2 below.

Table 2 Types of locations and specific locations

type of location specific location local N/A around N/A Able to perform remote download Website (http, ftp...) Cannot perform remote download Remote locations for Java servlets, etc. Intra-content data flow Include the IPMP tool itself in this section ... ...

Wherein, for example, local means located in the receiving terminal. Perimeter means within a certain machine in the main network including the receiving terminal. The ability to perform remote download means that the interpretation software can be downloaded from the website. The inability to perform remote downloading means decentralized processing, for example, it means transferring encrypted data to a certain website, performing decryption processing there, and then returning the decrypted data. The data stream within the content means that the interpreted data exists within the data stream.

IPMP tool management function

IPMP tool management functions shall be performed prior to system decoding. This function performs syntax analysis on the IPMP tool information in the first packet of the input content stream, and performs the necessary actions described in detail in this chapter. In FIG. 3, the state of the IPMP tool management function suitable for the MPEG4-IPMP system is shown. The IPMP tool DB shown in FIG. 3 is a database that stores all the results obtained by the IPMP tool.

The IPMP tool management function performs the following four operations.

• Step 1: Parsing the IPMP tool information present in the initial packet of the content stream.

• Step 2: Acquire the necessary IPMP tools specified by the IPMP tool information.

- Step 3: Save the obtained result in the IPMP tool DB that the IPMP system will refer to later.

• Step 4: Transition the input packet only to the Demux (decoder) layer. (transparently)

After the IPMP tool management function receives the content data stream, it immediately finds out the IPMP tool information packet mark as the unique data packet header in all the content data streams, and finds out the original content data stream. In the case of not finding the sign of the IPMP tool information package, skip to step 4, so that all data are only transitioned to the DeMux layer, and in the case of not being found, perform step 2.

In the second step, the IPMP tool management function acquires each IPMP tool with reference to the location type identification factor and the specific location identification factor. If there are multiple location identification factors associated with one IPMP tool, the IPMP tool should be obtained first using location identification factor 1, and then acquired using location identification factor 2 if the initial acquisition fails. When the acquisition succeeds every time, the acquisition result must be saved in the IPMP tool DB (step 3), and when all the IPMP tools have been completely acquired, return to step 2.

In the case where the location identification factor type is "local", the IPMP tool management function part searches in the current terminal according to the specified IPMP tool name or IPMP tool ID, and if found, saves the result in the IPMP tool DB . When the location identification factor type is "peripheral device", the IPMP tool management function part searches all peripheral devices based on the specified IPMP tool name or IPMP tool ID, and if found, saves the result in the IPMP tool DB middle. In the case where the location identification factor type is "capable of remote download", the IPMP tool management function connects to the specified remote address, downloads the IPMP tool according to the specified IPMP tool name or IPMP tool ID, and if the download is successful, saves the result in in the IPMP tool DB.

In the case where the type of location identification factor is "remote download not possible", the IPMP tool management function only saves the remote address in the IPMP tool DB. In the case where the location identifier type is "internal content data stream", the IPMP tool management function saves a binary data stream (for example, in a file), and assigns an IPMP tool name to the stored information body. In step 3, the obtained result is saved in the IPMP tool DB. There are four information bodies in the IPMP tool DB, and Table 3 shows an example thereof.

Table 3 Four information bodies of IPMP tool DB

Content ID IPMP tool ID IPMP tool name IPMP tool location 0000000011000100 00101001 DESDecrypt.dll C:￥ipmptools￥DesDecrypt.dll 0000000011000100 00100110 hard key LPT1 0000000011000100 00100010 JAVA servlet1 10.2.3.1/servlet1

When the IPMP system (group) needs to generate a certain IPMP tool in the future, it refers to the IPMP tool DB and uses the tool ID, tool name or current content ID to find the position of the certain IPMP tool (if necessary). This structure including the IPMP tool management function and the IPMP tool DB is applicable to any MPEG system. Referring to FIG. 4, the IPMP tool management function applicable to the MPEG2-IPMP system will be described below. In FIG. 4 , the portion surrounded by a dotted line corresponds to the portion surrounded by a dotted line in FIG. 3 , and is schematically illustrated.

Required output for user authentication

Although the standardization of the user authentication method cannot be launched yet, it is necessary to constitute the standardization of the authentication result. In order to publicly and properly utilize the protected content, the authentication result must pass the MPEG-nIPMP system. Therefore, it is proposed to set a benchmark for the authentication result, as shown in Figure 8, which must be composed of at least three fields.

Legitimacy (legality) indicates whether the user (terminal) is a legitimate user, and the result is expressed as true or false. Utilization rules should include specific information about the user's content access rights (eg, whether only 1 reproduction is permitted or multiple reproductions are permitted). The license is explained below. The content is scrambled, as shown in the IPMP data, and the technology in which the scrambling key is transmitted into the content data stream (for example, IPMP ES of MPEG4-IPMP) is known. For added security, a double layer of security is achieved by further encrypting the scramble key. The second layer key used to decode the scrambled content is called a "license". A "license" is a minimum condition for utilizing protected content. Licenses should be obtained from the license server through a secure channel during non-standard user authentication processing.

This proposal of two-layer security is based on the previous proposal M6473 presented at the "Proposal on the possibility of updating the IPMP system" at the La Baule conference. The upper part further imports 1 signal layer. Regardless of any kind of user authentication method used by the IPMP terminal, the above-mentioned authentication result must be determined and notified during user authentication. As shown in Fig. 5, the user authentication module cooperating with the MPEG-4IPMP system proposes a request to the content agency to issue a license to the user after user authentication. As shown in FIG. 6, a solution consisting of the same two-layer security suitable for MPEG-nIPMP can be realized.

In FIG. 5 , the interpretation software is acquired by the IPMP tool acquisition unit 302 via the Internet, and is temporarily stored in the result storage unit 303 , and then recorded in the IPMP tool database 321 . The interpretation software cannot be directly used for execution, in order to open the interpretation software must have the interpretation key. The decoding key for opening the decoding software is detected from the content data stream by the IPMP tool information syntax analysis unit 301 in an encrypted state. The encrypted decoding key is sent to the IPMP system 324 through the decoder 304 and the IPMP decoding buffer 310 . On the other hand, the license key is sent from the license server 501 via the Internet. The license key is sent to the IPMP system 324 after the nonstandard user authentication unit 502 performs user authentication. An IPMP decoding module 503 is provided in the IPMP system 324 . The IPMP decoding module 503 decodes the encrypted decryption key using the license key, and generates the decryption key. The above-mentioned decoding software can be executed by using the decoding key.

Features that can be realized by IPMP system

Due to the different application programs, terminals or providers, the requirements for the IPMP system are also different, so it is difficult to unify them all with one standard. This problem is basically caused by the IPMP tools being loaded or able to be downloaded. Regarding the actual installation of the hardware, most of the tools are either pre-installed or embedded inside, although the host computer can usually download certain tools. Regarding mobile or portable terminals, in order to simplify the installation, an IPMP tool that completes coding is also required. The PC application has very good compatibility, so a tool that can be downloaded or coded can be used.

As shown in Table 4, as long as it is possible to specify three types of profiles compatible with three types of terminals represented by low-complexity portable terminals, high-complexity host terminals, and flexible PC terminals, then any IPMP can be installed. In the terminal of the system, the IPMP tool can be used most suitably.

Table 4 Summary of 3 types for different terminals

When a tool is coded in a terminal, it is necessary to define a type recommended/fixed as a standard of an IPMP tool so that a manufacturer can install it in a terminal. In the present invention, introduction of such items has the following advantages. That is, the definition of the IPMP tool information clearly indicates where and how to store the IPMP tool-related information such as the location identification factor.

By introducing the IPMP tool management function and IPMP tool information, it solves the problem of unpredictable delay when it is necessary to acquire a new IPMP tool in the process of using content. As shown in FIG. 3 and FIG. 5 , various IPMP tools necessary at present or in the entire content stream are acquired and stored correctly before decoding processing is performed. And, by performing these processes, installation of IPMP can be performed systematically and easily. By introducing the IPMP tool management function and IPMP tool information, the requirements of IPMP can also be satisfied, and functions suitable for MPEG-n can also be realized as shown in FIG. 4 .

Even if the method used for user authentication is an original non-standard method, the authentication result can be clearly defined in the present invention. And in order to improve security, it also proposes a solution of layer 2 security protection for IPMP. As shown in Figure 6, the proposed solution can be applied in MPEG-nIPMP system. Also, by defining 3 characteristics for 3 possible terminal types, IPMP terminals can be clearly classified, which surely paves the way for expanded standardization of IPMP.

Claims (13)

1. A method of reading content in a terminal that accepts delivery of content and data streams containing intellectual property management and protection tool information flags, content IDs, and intellectual property management and protection tool information from a provider, characterized in that, include: The step of syntactically analyzing the data stream; Steps for detecting the information mark of the intellectual property management and protection tool, the content ID, and the information of the intellectual property management and protection tool; The step of reading the information of the intellectual property management and protection tool ID, the information of the location type ID and the location information of the intellectual property management and protection tool included in the detected intellectual property management and protection tool information; Steps to determine the password interpretation tool for decoding the password used in the content according to the information of the ID of the intellectual property management protection tool; the step of detecting the type of location where said cryptographic tool exists based on the information of the location type ID; and According to the information on the location of the intellectual property management protection tool, the step of specifically determining the location where the password decryption tool exists. 2. The method according to claim 1, characterized in that: the intellectual property management protection tool ID is a password decoding tool for decoding the password used in the content. 3. The method according to claim 2, wherein the password deciphering tools are different according to different contents. 4. The method according to claim 2, wherein the password decryption tool is encrypted by an encryption key. 5. The method according to claim 4, wherein the decryption key used to decrypt the encryption key is further encrypted by a license key. 6. The method according to claim 1, wherein the step of determining said password deciphering tool utilizes an information table, which includes: information on a plurality of intellectual property management protection tool IDs; and determining information corresponding to each knowledge Information about the password decryption tool for the property rights management protection tool ID. 7. The method according to claim 6, wherein the information table is stored by both the provider-side device and the terminal-side device. 8. The method according to claim 1, wherein the password decoding tool is pre-encoded by the terminal and saved. 9. The method according to claim 1, wherein the password decryption tool is obtained after downloading. 10. The method according to claim 1, further comprising the step of reading out the digital watermark information embedded in the content after reading out the content when the digital watermark information is embedded in the content. 11. The method according to claim 10, wherein the intellectual property management and protection tool information is a tool for interpreting electronic watermark information. 12. The method according to claim 1, characterized in that the interface used for the communication of the intellectual property management and protection tool matches the interface required at the terminal. 13. A device for reading content in a terminal that accepts content and a data stream including an intellectual property management and protection tool information flag, content ID, and intellectual property management and protection tool information from a provider, characterized in that, The unit includes: means (300) for parsing the data stream; A device (301, 202) for detecting the information mark of the intellectual property management and protection tool, the content ID, and the information of the intellectual property management and protection tool; and A device (301, 213, 214, 215) for reading the information of the intellectual property management and protection tool ID, the information of the location type ID, and the information of the location of the intellectual property management and protection tool contained in the detected intellectual property management and protection tool information ; According to the information of intellectual property management and protection tool ID, determine the device (301, 205, 206) of the password decoding tool for decoding the password used in the content; means (301, 219) for detecting the type of location where said cryptographic tool is present, based on the location type ID information; and According to the information on the location of the intellectual property management protection tool, specifically determine the means for the location where the password decryption tool exists (302, 220).

Images