Method and system for the information protection of digital content

• US 7,484,103 B2
• Filed: 01/10/2003
• Issued: 01/27/2009
• Est. Priority Date: 01/12/2002
• Status: Active Grant

• Current Assignee: Hwan-Chul Lee, Je-Hak Woo, Sang-Young Cho, Seog-Kyoon Shin, Seong-Ho Jeong, Seong-Il Kim, Young-Soo Ha
• Original Assignee: Hwan-Chul Lee, Je-Hak Woo, Sang-Young Cho, Seog-Kyoon Shin, Seong-Ho Jeong, Seong-Il Kim, Young-Soo Ha
• Inventors: Jeong, Seong-Ho, Ha, Young-Soo, Lee, Hwan-Chul, Kim, Seong-Il, Shin, Seog-Kyoon, Cho, Sang-Young, Woo, Je-Hak
• Primary Examiner(s): Vu; KimYen
• Assistant Examiner(s): Dada; Beemnet W
• Application Number:
  US10/501,254
• Publication Number:
  US 20050086501A1
• Time in Patent Office: 2,209 Days
• Field of Search: 713/167, 713/189, 713/193, 713/151, 713/152, 380/201, 726/26, 726/27, 726/30, 709/223, 709/225
• US Class Current: 713/189
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]

Abstract

The present invention relates to the information protection of digital content transferred by streaming and download service through wire or wireless Internet network. The information protection system in this invention suggests a drastic prevention method of copyrights infringement such as illegal copy and unauthorized distribution of digital content, by using of the encryption, decryption, distribution, and authentication technologies. This invention suggests the control technology of general viewer program, not the specific viewer program for information protection, using a network filter driver for streaming and file system filter driver for download service. The main function of network and file system filter driver is the filtering operation such as a hooking, changing, decrypting, and restoring of message and data packet, and transferring to the viewer program. The main idea and technology of this invention suggest higher secure and efficient digital information protection system for live/VOD/HTTP streaming and download service.

Claims

1. A multimedia contents protecting system for preventing multimedia contents, which are sent to an application program running on a client system, from leaking without permission through the use of an information providing system and the client system, the information providing system and the client system each having a Central Processing Unit (CPU), a volatile storage (memory), a non-volatile storage (hard disk) and an input/output device (keyboard, monitor, etc.), and being connected to each other through wired or wireless internal communication means or means for communicating with an external network, comprising:

the information providing system comprising,

encryption means (110) for encrypting original contents using one or more encryption keys and generating an encrypted contents package (121),

provision means (120) for holding the encrypted contents package (121) and providing the encrypted contents package (121) to users on line, and

a Digital Rights Management (DRM) server (130) for managing generation of the encryption keys and performing various authentication operations; and

the client system comprising,

filtering means located between an application program (144) on a higher layer and a device driver on a lower layer for repeating a process of hooking data packet of the encrypted contents package (121) with messages between the application program and the device driver, converting the data packet to a format corresponding to decryption, decrypting the encrypted data packet using one or more decryption keys, and sending the decrypted data packet to the application program,

control means for starting and terminating the application program and controlling the filtering means, and

an application program (144) for receiving the contents from the filtering means and playing the contents.

2. The multimedia contents protecting system as set forth in claim 1, wherein the encryption means (110) is a contents packager (112) that receives the encryption keys generated by the DRM server (130) and encrypts the contents.

3. The multimedia contents protecting system as set forth in claim 1, wherein the provision means (120) is a contents server (122) to which the contents package (121) encrypted by the encryption means (110) is uploaded, and the contents server (122) is a streaming server (122a) that provides the encrypted contents in a streaming manner, a Web server (122b) that allows the encrypted contents to be selected or being provided to a download service, or a File Transfer Protocol (FTP) server.

4. The multimedia contents protecting system as set forth in claim 1, wherein the DRM server (130) comprises:

a DRM server DataBase (DB) (131) for storing various data including contents information, the encryption keys, user information and application program information of the DRM server (130);

a DRM server component (132) for controlling management of generation of the encryption keys and issuance of licenses;

a DRM license issuer (133) for issuing an encrypted license package in response to a request from the control means of the client system; and

a DRM administrator (134) for performing various setting and administration of the DRM server.

5. The multimedia contents protecting system as set forth in claim 1, wherein the information providing system further comprises connecting means for enabling a connection to a billing server (150) or payment gateway server (160) to bill users for pay services.

6. The multimedia contents protecting system as set forth in claim 1, wherein the filtering means performs a filtering operation in kernel mode in response to an instruction of the control means, and comprises a network filter driver (404) to which a network driver (403) is connected, or file filter driver (407) that converts and restores a file offset and a file length message requested by the application program (144) with respect to the file system (405).

7. The multimedia contents protecting system as set forth in claim 1, wherein the control means is a DRM controller (141) that is automatically activated to initiate the application program (144) when a user selects contents in the provision means (120) in the case of a streaming manner or when a user issues a command to open contents downloaded to a non-volatile storage in the case of a downloading manner, accesses the DRM server (130) to allow the contents and the user to be authenticated and receive the license package (143) including decryption key, terminates the filtering operation depending on termination of the application program (144), and controls the filtering means.

8. The multimedia contents protecting system as set forth in claim 1, wherein the application program (144) is not a dedicated viewer program having a function of decrypting the contents package, but a general application program capable of playing data in format of the contents package.

9. The multimedia contents protecting system as set forth in claim 1, wherein the client system further comprises storage means that revises or edits contents that the application program (144) have decrypted and read in, and encrypts and stores the revised or edited contents, and the filtering means further comprises an encryption means for encrypting the contents.

10. The multimedia contents protecting system as set forth in claim 1, wherein the filtering means is located on an uppermost end of layers of the device driver in a direction toward the application program (144).

11. The multimedia contents protecting system as set forth in claim 6, wherein the network filter driver (404) uses a Transmission Control Protocol (TCP), or User Diagram Protocol (UDP) further having a function of correcting received data.

12. The multimedia contents protecting system as set forth in any of claims 1 to 11, wherein the client system (140) further comprises storage means for storing a continuous contents packets which are downloaded during transferring and playing the continuous contents packets in the case of a streaming manner.

13. The multimedia contents protecting system as set forth in any of claims 1 to 11, wherein the encrypted contents package (121) is transferred in one of a Video On Demand (VOD) streaming manner, a real-time live streaming manner, a complete downloading manner and a Hyper Text Transfer Protocol (HTTP) streaming manner, or off line in a storage medium, such as Compact Disk (CD) or Digital Versatile Disk (DVD).

14. The multimedia contents protecting system as set forth in claim 13, wherein the transferring is performed in a real-time live streaming manner, and the original contents are input through a multimedia receiving device and a encoding system, and the encrypted contents are transferred to the provision means (120) through the network driver of the encoding system, and the encoding system further comprises a network filter driver disposed upstream of the network driver for generating the encrypted contents through real-time hooking and encryption with respect to the original contents.

15. The multimedia contents protecting system as set forth in claim 1, wherein the encrypted contents package (142) comprises at least a data object portion that are encrypted contents (142a) and a header object portion that are non-encrypted meta data (142b).

16. The multimedia contents protecting system as set forth in claim 15, wherein the header object portion comprises a DRM package header for recording information on contents and encryption of the encrypted contents package (142).

17. The multimedia contents protecting system as set forth in claim 16, wherein the DRM package header includes one or more information of a version number, a contents Uniform Resource Identifier (URI) length, a contents type length, a contents URI, a contents type, a header length, a data length, an encryption method, a rights issuer Uniform Resource Locator (URL), a contents name, a contents description, a contents vendor, an icon URI, a digital signature, and a contents server URL.

18. The multimedia contents protecting system as set forth in claim 15, wherein the data object portion is fully encrypted or partially encrypted in predetermined portion on frame basis.

19. The multimedia contents protecting system as set forth in claim 1, wherein the client system further comprises storing means for storing the encrypted contents package to a non-volatile storage means.

20. The multimedia contents protecting system as set forth in claim 1, wherein the control means receives encrypted license package (143) from the DRM server (130) in response to a request for authentication, and the encrypted license package (143) comprises:

a decryption key (143a) portion for being used in decryption of the encrypted contents package; and

usage authority information (143b) portion including at least a count of use and a period of use of the contents and terminal restriction information.

21. A multimedia contents protecting method of preventing multimedia contents, which are sent to an application program running on a client system, from leaking without permission through the use of an information providing system and the client system, the information providing system and the client system each having a CPU, a volatile storage (memory), a non-volatile storage (hard disk) and an input/output device (keyboard, monitor, etc.), and being connected to each other through wired or wireless internal communication means or means for communicating with an external network, comprising:

an encrypting and uploading step of an encrypted contents package (121) converted from an original contents (111) using encryption keys being uploaded to the information providing system through the communication means;

an initiating and connecting step of the client system being connected to the information providing system to initiate streaming or downloading service by selection of encrypted contents package (121) in the information providing system using the input device of the client system;

a decrypting and playing step of the client system making the encrypted data played through the output device by the application program (144), by a filtering operation repeating a process of hooking data packet of the encrypted contents package (121) with messages between the application program (144) on a higher layer and the device driver on a lower layer, converting the data packet to a format corresponding to decryption, decrypting the encrypted data packet using one or more decryption keys, and sending the decrypted data packet to the application program, during transferring in the case of a streaming manner, or in response to a play signal after downloading in the case of a downloading manner; and

a terminating step of the client system terminating the operation of the application program (144) and the filtering operation and disconnecting connection to the information providing system in the case of a streaming manner, when a termination command of the application program (144) is detected.

22. The multimedia contents protecting method as set forth in claim 21, wherein the information providing system comprises

encryption means (110) for encrypting original contents using one or more encryption keys and generating a encrypted contents package (121),

provision means (120) for holding the encrypted contents package (121) and providing the encrypted contents package (121) to users on line, and

a Digital Rights Management (DRM) server (130) for managing generation of the encryption keys and performing various authentication operations;

and

the encrypting and uploading step comprises;

a step of the encryption means (110) requesting (S21) and obtaining (S22) an authentication with respect to the DRM server (130);

a step of the encryption means (110) requesting (S23) and obtaining (S24) one or more encryption keys with respect to the DRM server (130);

a step of the encryption means (110) encrypting an original contents using the encryption keys;

a step of the encryption means (110) requesting (S25) and obtaining (S26) an authentication with respect to the provision means (120); and

a step of the encryption means (110) sending (S27) the encrypted contents package (121) to the (122) provision means (120).

23. The multimedia contents protecting method as set forth in claim 21, wherein

the information providing system comprises

encryption means (110) for encrypting original contents using one or more encryption keys and generating a encrypted contents package (121),

provision means (120) for holding the encrypted contents package (121) and providing the encrypted contents package (121) to users on line, and

a Digital Rights Management (DRM) server (130) for managing generation of the encryption keys and performing various authentication operations;

and

the initiating and connecting step comprises;

a step of the provision means (120) sending (S31) contents identification information and user identification information to the client system, when an open command of the application program (144) is issued with respect to the encrypted contents package (121) after download completed in the case of a downloading manner, or when the contents in the provision means (120) are selected in the case of a streaming manner;

a step of the client system requesting (S32) contents and user authentication and receiving (S33) license authentication including one or more decryption keys and usage authority information with respect to the DRM server (130);

a step of the client system sending (S34) to the application program (144), an URL of the provision means (120) in the case of a streaming manner, a position of the non-volatile storage device where the contents are stored in the case of a complete downloading manner, and both the URL of the provision means (120) and the position of the non-volatile storage device in the case of a HTTP streaming manner, after initiating the application program (144); and

a step of the client system requesting (S35) the contents data, to the provision means (120) in the case of a streaming manner, to the file system in the case of a downloading manner, and to both the provision means (120) and the file system in the case of a HTTP streaming manner.

24. The multimedia contents protecting method as set forth in claim 23, further comprising:

a connection preparing step of examination of a handler and registration of a process being performed after the initiation of the application program (144) by the client system; and

a connecting step of registration of a next process and ascertainment and storing of a remote port being performed.

25. The multimedia contents protecting method as set forth in claim 24, wherein the client system comprises filtering means located between an application program (144) on a higher layer and a device driver on a lower layer for performing a filtering operation repeating a process of hooking data packet of the encrypted contents package (121) with messages between the application program and the device driver, converting the data packet to a format corresponding to decryption, decrypting the encrypted data packet using one or more decryption keys, and sending the decrypted data packet to the application program, and

the connection preparing step comprises:

a step of the application program (144) being temporarily stopped after initiation;

a step of the handler being determined whether zero or not by a message between the application program (144) and the device driver hooked by the filtering means;

a step of the message being sent to the device driver after deletion of an address handle to cancel connection if the handler is zero, and a process being determined whether registered in the filtering means or not if the handler is not zero;

a step of the message being sent to the device driver as it is if the process is not registered, and a changed message being sent to the device driver after an address handle being registered, my event handler being set, and a local port being stored if the process is registered; and

a step of the application program (144) receiving a ready message from the device driver by sending the message.

26. The multimedia contents protecting method as set forth in claim 24, wherein

the client system comprises filtering means located between an application program (144) on a higher layer and a device driver on a lower layer for performing a filtering operation repeating a process of hooking data packet of the encrypted contents package (121) with messages between the application program and the device driver, converting the data packet to a format corresponding to decryption, decrypting the encrypted data packet using one or more decryption keys, and sending the decrypted data packet to the application program, and

the connecting step comprises:

a step of a process being determined (801) whether registered in the filtering means or not by a message between the application program (144) and the device driver hooked by the filtering means;

a step of the message being sent to the device driver as it is if the process is not registered, and the number of the remote port being determined whether a predetermined number or not if the process is registered; and

a step of the message being sent to the device driver as it is if the number of the remote port is not a predetermined number, the message being sent to the device driver as it is after the number of the remote port is stored in an address handle structure having local port connected to the remote port if the number of the remote port is a predetermined number.

27. The multimedia contents protecting method as set forth in claim 21, wherein

the encrypting and playing step comprises:

a step of the data packet being sent periodically to the application program (144) along with control information, from the non-volatile storage device in the case of downloading manner, or from the information providing system in the case of streaming manner;

a step of the data packet being hooked (403) by the filtering operation;

a step of the number of a remote port being determined whether a predetermined number or not after my event handler is activated;

a step of the data packet being sent to the application program (144) as it is if the number of the remote port is not a predetermined number, the data packet being sent to the application program after decryption (905) by the decryption keys if the number of the remote port is a predetermined number; and

a step of the multimedia contents being played by repeating the above steps.

28. The multimedia contents protecting method as set forth in claim 27, further comprising:

a step of the encrypted contents being determined whether to be stored in the non-volatile storage device or not before the decryption (905); and

a step of the encrypted contents being decrypted (905) as it is if the choice is no storing in the non-volatile storage device, and the encrypted contents being decrypted (905) after being stored in the non-volatile storage device if the choice is storing in the non-volatile storage device.

29. The multimedia contents protecting method as set forth in claim 21, wherein the terminating step comprises:

the step of a termination message of the application program (144) being monitored in every cycle wherein the contents data packet is decrypted and played; and

the step of returning to the decrypting and playing step if the termination message is not detected, and disconnecting connection to the information providing system or the non-volatile storage device after termination of the application program (144) and deletion of the address handle if the termination message is detected.

30. A computer-readable storage medium for storing a computer-executable multimedia contents protecting method of preventing multimedia contents, which are sent to an application program running on a client system, from leaking without permission through the use of an information providing system and the client system, the information providing system and the client system each having a CPU, a volatile storage (memory), a non-volatile storage (hard disk) and an input/output device (keyboard, monitor, etc.), and being connected to each other through wired or wireless internal communication means or means for communicating with an external network, the multimedia contents protecting method comprising:

an encrypting and uploading step of an encrypted contents package (121) converted from an original contents (111) using encryption keys being uploaded to the information providing system through the communication means;

an initiating and connecting step of the client system being connected to the information providing system to initiate streaming or downloading service by selection of encrypted contents package (121) in the information providing system using the input device of the client system;

a decrypting and playing step of the client system making the encrypted data played through the output device by the application program (144), by a filtering operation repeating a process of hooking data packet of the encrypted contents package (121) with messages between the application program (144) on a higher layer and the device driver on a lower layer, converting the data packet to a format corresponding to decryption, decrypting the encrypted data packet using one or more decryption keys, and sending the decrypted data packet to the application program, during transferring in the case of a streaming manner, or in response to a play signal after downloading in the case of a downloading manner; and

a terminating step of the client system terminating the operation of the application program (144) and the filtering operation and disconnecting connection to the information providing system in the case of a streaming manner, when a termination command of the application program (144) is detected.