Method of managing metadata

• US 8,555,071 B2
• Filed: 10/31/2007
• Issued: 10/08/2013
• Est. Priority Date: 09/16/2002
• Status: Expired due to Fees

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: Choi, Yang-lim
• Primary Examiner(s): Flynn, Nathan
• Assistant Examiner(s): DOAN, TRANG T
• Application Number:
  US11/980,642
• Publication Number:
  US 20080072054A1
• Time in Patent Office: 2,169 Days
• Field of Search: 713/176, 717/100
• US Class Current: 713/176
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 9/3239 involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04N 21/8126 involving additional data, e.g. news, sports, stocks, weather forecasts
• CPC Class Codes: H04N 21/8456 by decomposing the content in the time domain, e.g. in time segments
• CPC Class Codes: H04N 21/8543 using a description language, e.g. Multimedia and Hypermedia information coding Expert Group [MHEG], eXtensible Markup Language [XML] information retrieval of semistructured data, the underlying structure being taken into account, e.g. mark-up language structure data G06F16/80

Abstract

Managing metadata in a metadata transmission server by generating a plurality of metadata fragment data by partitioning metadata to be transmitted based upon predetermined segment units, selecting predetermined metadata fragment data from among the plurality of the metadata fragment data, generating metadata-related authentication information using the selected metadata fragment data, and transmitting the selected metadata fragment data and the metadata-related authentication information including data format information indicating type of the selected metadata fragment data. A metadata receiving client uses the transmitted metadata fragment data, the metadata-related authentication information and the metadata format type information to authenticate the received metadata.

Claims

1. A method of managing metadata in a client device that receives the metadata, the method comprising:

reading predetermined metadata fragment data, metadata-related information, and data format information indicating a data format type of the predetermined metadata fragment data, from the received metadata, wherein each of the predetermined metadata fragment data, the metadata-related information, and the data format information are received in a metadata container;

generating, using a processor, metadata-related information by using the predetermined metadata fragment data and the read data format information; and

determining whether the received metadata has been authenticated by comparing the generated metadata-related information with the read metadata-related information.

2. The method of claim 1, wherein the data format information indicates whether the predetermined metadata fragment data has a binary XML format or a text XML format.

3. The method of claim 1, wherein an authentication level flag specifying a metadata authentication level is further included in the metadata container.

4. The method of claim 1, wherein the metadata-related information is metadata digest information obtained by substituting the predetermined metadata fragment data into a unidirectional function.

5. The method of claim 4, wherein the unidirectional function is a hash function.

6. The method of claim 1, wherein a plurality of metadata fragment data and corresponding metadata-related information are included in the metadata container, and each metadata fragment data and the corresponding metadata-related information is connected to each other by pointer information;

and

the metadata-related information reading comprises correlating the received metadata fragment data and a corresponding metadata-related information according to the pointer information.

7. A method of managing metadata in a client device that receives the metadata, the method comprising:

receiving a metadata container including metadata fragment data of the received metadata, metadata-related information, data format information indicating a type of the metadata fragment data, metadata authentication signature information, and an encrypted first encryption key;

generating, using a processor, metadata-related information by using the metadata fragment data of the received metadata and the data format information;

decrypting the encrypted first encryption key using a second encryption key stored in the client device;

generating metadata authentication signature information using the generated metadata-related information and the decrypted first encryption key; and

determining whether the received metadata has been authenticated by comparing the generated metadata authentication signature information with the received metadata authentication signature information.

8. The method of claim 7, wherein the metadata-related information is metadata digest information obtained by substituting the metadata fragment data into a unidirectional function.

9. The method of claim 8, wherein the unidirectional function is a hash function.

10. The method of claim 7, wherein the generated metadata authentication signature information is obtained by substituting the generated metadata-related information and the decrypted first encryption key into a unidirectional function.

11. The method of claim 10, wherein the unidirectional function is a hash function.

12. The method of claim 7, wherein the metadata fragment data, the metadata-related information, the data format information, the metadata authentication signature information, and the encrypted first encryption key are received in a metadata container.

13. The method of claim 7, wherein the data format information indicates whether the metadata fragment data used to generate the metadata-related information has a binary XML format or a text XML format.

14. The method of claim 12, wherein an authentication level flag specifying a metadata authentication level is further included in the metadata container and the determining of the metadata authentication is according to the authentication level flag.

15. The method of claim 12, wherein a plurality of metadata fragment data and corresponding respective metadata-related information and metadata authentication signature information are inserted into the metadata container, and each metadata fragment data and the corresponding metadata-related information and metadata authentication signature information are connected to one another by pointer information;

and

the receiving of the authentication signature information of the metadata fragment data comprises correlating the received metadata fragment data and a corresponding metadata authentication signature information according to the pointer information.

16. A metadata transmission server managing metadata security of a multimedia system, the server comprising:

a programmed computer processor controlling the server according to a process of;

generating, using the processor, a plurality of metadata fragment data by partitioning metadata to be transmitted based upon a predetermined semantic unit,

selecting a predetermined metadata fragment data from among the plurality of metadata fragment data,

generating metadata-related information by using the selected metadata fragment data, and

transmitting a container including the selected metadata fragment data, the metadata-related information, and a header including data format information indicating a data format type of the selected metadata fragment data,

wherein the metadata-related information comprises values obtained by substituting the selected metadata fragment data into a unidirectional function, which function varies depending on the data format type indicated in the header.

17. A multimedia metadata authentication management system, comprising:

a metadata transmission server comprising a programmed computer processor controlling the server according to a process of;

generating, using the processor, a plurality of metadata fragment data by partitioning metadata to be transmitted based upon a predetermined semantic unit,

selecting a predetermined metadata fragment data from among the plurality of metadata fragment data,

generating metadata-related information using the selected metadata fragment data, and

transmitting a container including the selected metadata fragment data, the metadata-related information, and a header including data format information indicating a data format type of the selected metadata fragment data; and

a metadata receiving client comprising a second programmed computer processor controlling the client according to a process of;

receiving the metadata fragment data, the metadata-related information and the data format information indicating the type of the metadata fragment data, transmitted from the metadata transmission server,

generating metadata-related information by using the transmitted metadata fragment data and the data format information, and

determining whether the received metadata has been authenticated by comparing the generated metadata-related information with the transmitted metadata-related information.

18. A metadata authentication system, comprising:

a metadata transmission server comprising a programmed computer processor controlling the server according to a process of;

partitioning to be transmitted metadata into fragments based upon a predetermined semantic unit,

generating a metadata authentication container comprising a metadata fragment of the plurality of partitioned metadata fragments, metadata fragment authentication information obtained from the metadata fragment, and data format information indicating a data format type of the metadata fragment;

transmitting the metadata authentication container; and

a metadata receiving client comprising a programmed computer processor controlling the client according to a process of;

generating metadata fragment authentication information by using the transmitted metadata fragment and the data format information indicating the data format type of the metadata fragment, and

authenticating the transmitted metadata by comparing the generated metadata fragment authentication information with the metadata fragment authentication information included in the transmitted metadata authentication container.

19. The system of claim 18, wherein a format of the metadata authentication container comprises a header section, a metadata fragment section and a metadata fragment authentication information section.

20. The system of claim 19, wherein the metadata authentication container is defined according to a simple object access protocol (SOAP) message.

21. The system of claim 20, wherein the SOAP message comprises a SOAP header comprising the metadata fragment data authentication information and a SOAP body comprising the metadata fragment.

22. The system of claim 18, wherein

the programmed computer processor of the metadata transmission server further:

includes a plurality of the metadata fragments in the metadata authentication container,

allots indexing information to each included metadata fragment, and

includes the indexing information in the metadata authentication container; and

the metadata receiving client further comprises a data storage storing an index list and predetermined metadata fragments, and the programmed computer processor of the metadata receiving client uses the stored predetermined metadata fragments according to the metadata authentication container indexing information and the stored index list to generate the metadata fragment authentication information.

23. The system of claim 18, wherein

the programmed computer processor of the metadata transmission server further:

includes a plurality of the metadata fragments and corresponding metadata fragment authentication information in the metadata authentication container,

includes pointer information connecting each included metadata fragment to the corresponding metadata fragment authentication information; and

the programmed computer processor of the metadata receiving client determines the transmitted container metadata fragment authentication information of the transmitted metadata fragment based upon the pointer information.

24. The system of claim 23, wherein the metadata transmission server comprises a right management protection system to maintain the pointer information as a source level authentication of the transmitted metadata.

25. The system of claim 18, wherein the metadata fragment authentication information is encryption management information regarding encryption of the fragment data.

26. A method of authenticating metadata in a metadata transmission system, the method comprising:

receiving a container comprising a fragment of metadata wherein the fragment has been generated by partitioning metadata based upon a predetermined semantic unit, metadata fragment authentication information generated from the metadata fragment, and data format information indicating a data format type of the metadata fragment;

generating metadata fragment authentication information by using the metadata fragment and the data format information included in the received container; and

authenticating, using a processor, the metadata fragment by comparing the generated metadata fragment authentication information with the metadata fragment authentication information included in the received container.

27. A metadata receiving client receiving metadata from a metadata transmission server via a network, the metadata receiving client comprising:

a programmed computer processor controlling the metadata client according to a process of;

receiving a metadata authentication data container from the metadata transmission server, the container comprising a metadata fragment wherein the metadata transmission server has generated the metadata fragment by partitioning metadata based upon a predetermined semantic unit, metadata fragment authentication information generated from the metadata fragment, and data format information indicating a data format type of the metadata fragment;

generating metadata fragment authentication information by using the transmitted metadata fragment and the data format information indicating the data format type of the metadata fragment; and

authenticating the metadata received in the container by comparing the generated metadata fragment authentication information with the transmitted container metadata fragment authentication information.

28. A non-transitory machine readable storage medium storing at least one computer program controlling networked computers according to a process comprising:

receiving a container comprising a fragment of metadata wherein the fragment has been generated by partitioning metadata based upon a predetermined semantic unit, metadata fragment authentication information generated from the metadata fragment, and data format information indicating a data format type of the metadata fragment;

generating metadata fragment authentication information by using the metadata fragment and the data format information included in the received container; and

authenticating the metadata fragment by comparing the generated metadata fragment authentication information with the metadata fragment authentication information included in the received container.

29. A non-transitory machine readable storage medium storing at least one computer program controlling networked computers according to a process comprising:

reading predetermined metadata fragment data, metadata-related information, and data format information indicating a data format type of the predetermined metadata fragment data, from the received metadata, wherein each of the predetermined metadata fragment data, the metadata-related information, and the data format information are received in a metadata container;

generating metadata-related information by using the predetermined metadata fragment data and the read data format information; and

determining whether the received metadata has been authenticated by comparing the generated metadata-related information with the read metadata-related information.

30. A non-transitory machine readable storage medium storing at least one computer program controlling networked computers according to a process comprising:

receiving a metadata container including metadata fragment data of the received metadata, metadata-related information, data format information indicating a type of the metadata fragment data, metadata authentication signature information, and an encrypted first encryption key;

generating metadata-related information by using the metadata fragment data of the received metadata and the data format information;

decrypting the encrypted first encryption key using a second encryption key stored in the client device;

generating metadata authentication signature information using the generated metadata-related information and the decrypted first encryption key; and

determining whether the received metadata has been authenticated by comparing the generated metadata authentication signature information with the received metadata authentication signature information.