CN101567779A - OMA DRM mobile stream media rights management system facing multicast service - Google Patents
OMA DRM mobile stream media rights management system facing multicast service Download PDFInfo
- Publication number
- CN101567779A CN101567779A CNA2008101046416A CN200810104641A CN101567779A CN 101567779 A CN101567779 A CN 101567779A CN A2008101046416 A CNA2008101046416 A CN A2008101046416A CN 200810104641 A CN200810104641 A CN 200810104641A CN 101567779 A CN101567779 A CN 101567779A
- Authority
- CN
- China
- Prior art keywords
- multicast
- content
- key
- watermark
- service
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Landscapes
- Two-Way Televisions, Distribution Of Moving Picture Or The Like (AREA)
- Mobile Radio Communication Systems (AREA)
Abstract
The invention relates to a mobile stream media digital rights management system facing a multicast service, which adopts a multilayer encryption mechanism, a video watermark authentication mechanism, a logic grouping mechanism and the like based on compatible OMA DRM 2.0 standard. A multicast user logic grouping mechanism at a server end and a system processing flow of a client joining multicast service stream are the key content of the invention. The system has the advantages that: 1) the system is compatible with OMA DRM 2.0 and provides a solution of content protection for wide application of a mobile multicast stream media service in a third generation mobile communication system; 2) the system provides a multicast receiver logic grouping strategy, reduces bandwidth consumption for transmitting a plurality of secondarily-encrypted content keys and provides support for concurrent users; 3) the system adopts MD5 summary algorithm and the video watermark authentication technology to provide the data integrity and the accuracy verification in the multicast transmission process; and 4) the system embeds a removable watermark sequence into motion vectors of original video data, has low complexity of watermark related operations, and eliminates video quality reduction possibly caused by watermark embedding.
Description
Technical field
The present invention relates to mobile flow medium system for numeral copyright management towards multicast service, mainly be on the basis of DRM 2.0 standards that compatible OMA (Open Mobile Alliance) formulates, adopt mechanism such as multi-layer security, video watermark authentication, logic groups, the digital rights management function at mobile multicast streaming media service is provided.
Technical background
Streaming Media has the feature that download on the limit, play on the limit, need not the complete downloads of media data of user, has significantly reduced user's waiting time, and mobile flow medium service has become one of of paramount importance value added data business of mobile operator.Multicast has advantages such as the network bandwidth of saving as a kind of important way of transport stream media data, can support thousands of users with lower cost, has become one of main application model of streaming media service.
To the copyright protection of mobile flow medium content, guarantee the legal propagation of media content at mobile Internet, the legitimate interests of protection mobile video content supplier and mobile operator have become the main problem of paying close attention in 3G (Third Generation) Moblie enforcement and professional the development.
The OMA tissue has successively been formulated DRM 1.0 standards and DRM 2.0 standards.Wherein DRM 2.0 standards have become in the recent period both at home and abroad at the topmost digital copyright management solution of mobile device as comparatively perfect mobile digital copyright management solution.OMA DRM 2.0 standards have simply been described the Streaming Media application scenarios, similar with other stream media rights management solutions, clearly do not provide solution at the multicast streaming media service, acquiescence adopts uses unique constant content encryption key in the Streaming Media multicast transmission process, exist the serious safety problem that in long Streaming Media transmission period key may be shared by a plurality of multicast recipients.Other adopt the content protecting scheme of multi-layer security system such as condition reception mainly to consider broadcast type or unicast type business, can't directly apply to multicast service.
Summary of the invention
The objective of the invention is to: the mobile multicast streaming media service that carries out copyright management and content protecting at needs; a kind of complete compatible OMA DRM 2.0 standards are proposed; strengthened the system for numeral copyright management of content protecting ability and fail safe, and provide whether streaming medium content and key information are attacked the function of checking in multicast transmission process.
The technical solution that realizes the object of the invention is: towards the OMADRM mobile stream media rights management system of multicast service, this system is made up of server end and a plurality of client.Server end mainly is made of content distributing server and copyright Distributor, for supporting the multicast streaming media service, content distributing server is divided into Web server, streaming media server and three logic subsystem of packing data server, and the copyright Distributor is divided into key management, right objects generation and three logic subsystem of ROAP protocol server.
The basic thought of this solution is fully based on OMA DRM 2.0 standards, employing is at two layers of time-varying ciphering mechanism (20 seconds transformation periods) of multicast streaming media service, utilize the video watermark authentication techniques to carry the digital digest of superencipher content key, reach the purpose that the integrality and the correctness of multicast transmission are verified.For reducing the bandwidth that transmission superencipher content key consumes, logic groups mechanism is proposed, a plurality of multicast recipients are divided into maximum 20 logical groups.
Typical application scene and interaction flow are formed (as shown in Figure 1) by following steps:
1) streaming media server among the content distributing server CI transmits the multicast flow label to Web server and copyright Distributor RI, and indicates this stream and only support multicast transmission pattern (shown in the arrow 1);
2) client is browsed Web server, with the interested multicast flow label of the mutual download of Web server, can select the suitable means of payment (shown in the arrow 2) simultaneously;
3) client is obtained the address of corresponding copyright Distributor from the multicast flow label, and by rights object acquisition protocol ROAP to this server registration and ask right objects (shown in the arrow 3);
4) the ROAP protocol server among the copyright Distributor RI transmits user and ordering information (shown in the arrow 4) thereof to key management module and right objects maker;
5) key management module among the copyright Distributor RI for this reason the multicast Media Stream produce corresponding two layers of key of 20 content-encrypts, each is logical groups of correspondence respectively, and gives the packing data server of CI and the right objects generation module (shown in the arrow 5) of RI with 20 cipher key distribution;
6) the right objects generation module among the copyright Distributor RI generates the right objects of the two layers of key of content-encrypt that comprise the 1st logical groups correspondence for first user who orders multicast stream, distribute 1 logical groups of this user to the, and logical groups numbering under right objects and the user is distributed to ROAP protocol server (shown in the arrow 6);
7) the ROAP protocol server among the copyright Distributor RI sends to client based on the ROAP agreement and comprises the response of right objects, and notifies this user, its logical groups to be numbered the 1st (shown in the arrow 7);
8) right objects and the logical groups label received of client stores is then to streaming media server request stream medium data (shown in the arrow 8);
9) the packing data server among the content distributing server CI adopts watermark embedding, content time-varying ciphering and the PDCF packing processing procedure that the back is about to provide, and after the multicast media data is handled, passes to streaming media server (shown in the arrow 9);
10) streaming media server sends the media data of encrypting after packing to client with multicast fluidisation transmission means, and the PDCF that client is about to provide according to the back separates package, contents decryption and watermark extraction process process and handles (shown in the arrow 10) accordingly.
More than being the handling process that first client adds multicast service stream, below is that other client adds the system handles flow process of multicast service stream thereafter, and this is one of core content of the present invention.
11) client is browsed Web server, with the interested multicast flow label of the mutual download of Web server, can select the suitable means of payment (shown in the arrow 11) simultaneously;
12) client is obtained the address of corresponding RI from the multicast flow label, and by rights object acquisition protocol ROAP to this server registration and ask right objects (shown in the arrow 12);
13) the ROAP protocol server transmits user and ordering information (shown in the arrow 13) thereof to key management module and right objects maker;
14) the right objects generation module is carried out the multicast user logic grouping mechanism that provides later, for this client is distributed suitable logical groups, generation comprises the right objects of two layers of key of content-encrypt of this logical groups correspondence, and logical groups numbering under right objects and the user is distributed to ROAP protocol server (shown in the arrow 14);
15) the ROAP protocol server sends to client based on the ROAP agreement and comprises the response of right objects, and notifies this user its corresponding logical groups numbering (shown in the arrow 15);
16) the client application adds corresponding multicast service stream, and separates package, contents decryption and watermark extraction process process according to the PDCF that the back is about to provide and handle (shown in the arrow 16) accordingly.
Description of drawings
Fig. 1 system handles flow process
Fig. 2 server end multicast users packet transaction process
Fig. 3 server end media data is encrypted packing process
Fig. 4 client media data is separated the package decrypting process
Fig. 5 watermark sequence structure
Fig. 6 superencipher multicast content key sequence
Fig. 7 watermark embed process
Fig. 8 watermark extraction process
Fig. 9 watermark removes process
Embodiment
1) server end multicast user logic packet transaction process
It is one of core content of the present invention that the logic groups of multicast users is handled, by logic groups mechanism, avoid distributing different two layers of keys of content-encrypt for each multicast users, reduced the bandwidth consumption of transmitting behind a plurality of superenciphers that content key and summary thereof produced, the effective support to a large amount of multicast users is provided.And effectively the logic groups strategy has very crucial effect to effectively preventing the shared contents encryption key of a plurality of multicast recipients.Concrete processing procedure (seeing accompanying drawing 2) is as follows:
1. server obtains the information that newly adds access customer, if current multicast recipient's number less than 20, then is assigned to a logical groups that does not have other multicasts recipient with this multicast recipient; Otherwise forward step 2 to;
2. according to the multicast recipient user information corresponding in the database, the user who as far as possible features such as geographical position is had marked difference is distributed in same logical groups, effectively to prevent carrying out sharing of contents encryption key between a plurality of users in the same logical groups.
It is pointed out that for present mobile operator/value-added service provider some characteristic information that obtains the mobile subscriber usually is eaily, this provides the foundation for the realization of above-mentioned strategy.
2) the server end media data is encrypted packing process
The packing data server is (seeing accompanying drawing 3) to the encryption of watermark embedding, media data and the processing procedure of PDCF packing:
1. generated 128 new content keys every 20 seconds, two layers of key of 20 content-encrypts based on the RI appointment adopt 128 AES cryptographic algorithm that content key is encrypted, and forming 20 length is 128 content keys (shown in the arrow 1) behind the superencipher;
2. adopting the MD5 algorithm is the computings of making a summary of 128 content keys behind the superencipher to 20 length, forms the summary (shown in the arrow 2) of key behind 128 superenciphers;
3. according to structure shown in Figure 5, produce 136 watermark sequence structure based on the summary of key behind 128 superenciphers, wherein 8 origin identification are 0xA7 (original position that is mainly used in watermark information is synchronous), adopt watermarking algorithm that watermark sequence is embedded into (shown in the arrow 3) in the original media data then;
4. use current contents encryption key, the media data after the adding watermark is carried out 128 AES encrypt, generate the media data (shown in the arrow 4) after encrypting;
5. be that 128 content keys behind the superencipher are formed bit sequences as shown in Figure 6 with 20 length, and the media data after encrypting is encapsulated in the PDCF packet, the media data (shown in the arrow 5) that formation can the fluidisation transmission.
Watermarking algorithm adopts simple removable watermark mechanism, can play the effect of multicast transmission authentication and digital signature on the one hand, is convenient on the other hand remove watermark at receiving terminal, eliminates watermarked negative effect to media quality.Specifically processing procedure is as shown in Figure 7:
1. extract motion vector (shown in the arrow 1) in the video data from original audio-video frequency media data;
2. the horizontal component of motion vector is on duty with 2, making its least significant bit LSB is 0 (shown in the arrow 2);
3. watermark sequence is placed on the LSB of each motion vector horizontal component by the bit order order, produces the audio, video data (shown in the arrow 3) of moisture official seal breath.
3) the client media data is separated the package decrypting process
Client is (seeing accompanying drawing 4) to PDCF decapsulation, media data deciphering, watermark extracting and the processing procedure that removes:
1. client is resolved after receiving right objects, and obtaining length is two layers of key of content-encrypt (shown in the arrow 1) of 128 bits;
2. from the encryption of receiving packing media data, isolate content key (if present) and encrypted media data (shown in the arrow 2) behind the superencipher that 20 group length are 128 bits by the PDCF format analysis;
3. client is according to the logical groups numbering of this locality storage, is content key (shown in the arrow 3) the logical groups correspondence, behind the superencipher under content key behind the superencipher of 128 bits extracts from 20 group length;
4. utilize two layers of key of content-encrypt that content key affiliated logical groups correspondence, behind the superencipher is carried out the AES deciphering and obtain 128 content decryption key (shown in the arrow 4);
5. the content decryption key of utilizing previous step to obtain is decrypted the encrypted media data, obtains the media data (shown in the arrow 5) that carries watermark information;
6. carry out watermark extracting and remove operation, obtain corresponding original media data and the watermark sequence (shown in the arrow 6) that comprises cipher key digest;
7. adopting the MD5 algorithm is the computing of making a summary of content key behind the superencipher of 128 bits to 20 group length, obtains the summary (shown in the arrow 7) that this locality calculates;
8. summary in the watermark sequence and the local digest value that calculates are compared,, then original media data is decoded and play if both are identical; Otherwise the content of multimedia after stopping within 20 seconds is play, to guarantee the integrality and the correctness (shown in the arrow 8) of data in the multicast transmission process.
The concrete processing procedure of watermark extracting operation is as shown in Figure 8:
1. from the video data of the audio, video data of moisture official seal breath, extract motion vector (shown in the arrow 1);
2. obtain 1 bit of the LSB of motion vector horizontal component as watermark sequence in order, a plurality of bits form the watermark sequence (shown in the arrow 2) that client terminal local extracts.
The concrete processing procedure that watermark removes operation is as shown in Figure 9:
1. from the video data of the audio, video data of moisture official seal breath, extract motion vector (shown in the arrow 1);
2. with motion vector horizontal component value divided by 2, and fractions omitted part reverts to original motion vector value, obtains original audio-video frequency media data (shown in the arrow 2).
Main feature of the present invention
Change content encryption scheme such as condition receiving system related to less copyright management and content protecting solution for multicast service when the OMA DRM mobile stream media rights management system towards multicast service of the present invention provided OMA DRM2.0 standard with other, and its remarkable advantage is:
Become content encryption scheme such as condition reception during 1) with respect to OMA DRM2.0 standard and other, complete compatibility is provided OMA DRM 2.0 standards, for multicast service, total solution comparatively, for the Mobile Multicast streaming media service at the third generation Extensive use provides the technical support of content protecting aspect in the GSM;
2) proposed the multicast receiver logic grouping strategy, reduced the bandwidth of transmitting the content key behind a plurality of superenciphers and disappeared Consumption provides the effective support to a large amount of concurrent multicast users. Take full advantage of existing information of mobile user, effectively prevent same patrolling A plurality of multicast receivers of collecting in the group are shared contents encryption key;
3) adopt MD5 digest algorithm and video watermark authentication techniques, provide data integrity in the multicast transmission process and just Really effective checking of property;
4) native system is embedded into removable watermark sequence in the motion vector of original video data, the watermark of server and client H.263 and H.264 the associative operation complexity is low, can be widely used in various video compression standard such as MPEG-1/2/4,, tool Higher versatility is arranged, and eliminated the video quality decline that the watermark embedding may cause.
Claims (5)
1, OMA DRM mobile stream media rights management system towards multicast service is characterized in that: on complete compatible OMADRM 2.0 standard base, adopt the multicast receiver logic grouping mechanism, the multicast recipient is assigned in the different logical groups; Copyright Distributor RI is a plurality of two layers of key that the multicast allocated for media streams is identical with the logical groups number, and for applying for that the drm agent that adds the multicast Media Stream distributes the logical groups numbering of appointment and two layers of key of this logical groups correspondence; The contents encryption key that becomes when content distributing server CI uses is encrypted the multicast stream medium data, and a plurality of two layers of key that use the RI appointment are encrypted the media data of back after encrypting respectively to content key and are placed on transmission in the PDCF bag, remedied present OMA DRM2.0 standard still needleless the deficiency of the solution of multicast streaming media service is strengthened the multicast content fail safe of stream media rights management system.
2, according to right 1 described two layers of content-encrypt and multicast receiver logic grouping mechanism towards multicast service, it is characterized in that: the multicast recipient adds the interaction flow of multicast service.
3, according to right 1 described multicast receiver logic grouping mechanism, it is characterized in that: the copyright Distributor carries out the handling process of logic groups to the user of application adding multicast service.
4, according to right 1 described two layers of content-encrypt mechanism towards multicast service, it is characterized in that: a plurality of superencipher content keys that use MD5 digital digest algorithm that a plurality of two layers of key are formed after to the content key encryption computing of making a summary, and summary info is embedded in the multimedia video data by removable digital watermark, guarantee integrality and the correctness of a plurality of superencipher content keys in multicast transmission process, finish the authentication of Streaming Media multicast transmission.
5, according to right 4 described removable watermark mechanism of carrying the digital digest of superencipher content key, it is characterized in that: based on motion vector, have than the embedding and the extraction of the removable video watermark of high universalizable and remove method.
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CNA2008101046416A CN101567779A (en) | 2008-04-22 | 2008-04-22 | OMA DRM mobile stream media rights management system facing multicast service |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CNA2008101046416A CN101567779A (en) | 2008-04-22 | 2008-04-22 | OMA DRM mobile stream media rights management system facing multicast service |
Publications (1)
Publication Number | Publication Date |
---|---|
CN101567779A true CN101567779A (en) | 2009-10-28 |
Family
ID=41283749
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CNA2008101046416A Pending CN101567779A (en) | 2008-04-22 | 2008-04-22 | OMA DRM mobile stream media rights management system facing multicast service |
Country Status (1)
Country | Link |
---|---|
CN (1) | CN101567779A (en) |
Cited By (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN103152321A (en) * | 2011-12-06 | 2013-06-12 | 索尼公司 | Digital rights management of streaming contents and services |
CN103581128A (en) * | 2012-07-27 | 2014-02-12 | 联芯科技有限公司 | Streaming media digital rights management method, terminal and streaming media server |
CN108171022A (en) * | 2017-12-14 | 2018-06-15 | 安徽新华传媒股份有限公司 | A kind of flow medium digital copyright management system |
CN108513037A (en) * | 2018-04-03 | 2018-09-07 | 优视科技有限公司 | Multi-media processing method and its device, storage medium, electronic product |
-
2008
- 2008-04-22 CN CNA2008101046416A patent/CN101567779A/en active Pending
Cited By (7)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN103152321A (en) * | 2011-12-06 | 2013-06-12 | 索尼公司 | Digital rights management of streaming contents and services |
CN103152321B (en) * | 2011-12-06 | 2016-06-29 | 索尼公司 | The method and system of the digital rights management of streaming medium content and service |
CN103581128A (en) * | 2012-07-27 | 2014-02-12 | 联芯科技有限公司 | Streaming media digital rights management method, terminal and streaming media server |
CN103581128B (en) * | 2012-07-27 | 2017-03-08 | 联芯科技有限公司 | Flow medium digital copy-right protection method and terminal and streaming media server |
CN108171022A (en) * | 2017-12-14 | 2018-06-15 | 安徽新华传媒股份有限公司 | A kind of flow medium digital copyright management system |
CN108513037A (en) * | 2018-04-03 | 2018-09-07 | 优视科技有限公司 | Multi-media processing method and its device, storage medium, electronic product |
WO2019192375A1 (en) * | 2018-04-03 | 2019-10-10 | 阿里巴巴集团控股有限公司 | Multimedia processing method and device thereof, storage medium, and electronic product |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
CN102333236B (en) | Video content encryption and decryption system | |
CN101491078B (en) | Method, apparatus and system for secure distribution of content | |
KR100939430B1 (en) | Method for managing digital rights of broadcast/multicast service | |
CN1859084B (en) | Enciphering and deciphering method for request broadcast stream media data of mocro soft media format | |
CN101719910B (en) | Terminal equipment for realizing content protection and transmission method thereof | |
US7653940B2 (en) | Tracing and identifying piracy in wireless digital rights management system | |
CN101977190B (en) | Digital content encryption transmission method and server side | |
US20080267409A1 (en) | Encryption processing for streaming media | |
JP5557897B2 (en) | Digital media content protection system and method | |
US20100100742A1 (en) | Transport Stream Watermarking | |
KR102206142B1 (en) | Method for watermarking media content and system for implementing this method | |
CN100401769C (en) | Method for enciphering and deciphering living-broadcasting flow-medium data | |
CN101019370A (en) | Method of providing conditional access | |
CN103873895A (en) | DVB/IPTV dual-mode interactive business protection system | |
CN101282326A (en) | Method, system and hand-hold terminal fro management of digital copyright of binding terminal | |
AU2006202335A1 (en) | Inter-entity coupling method, apparatus and system for content protection | |
CN110213669B (en) | Video content anti-theft system and method based on TS (transport stream) slices | |
CN101350918B (en) | Method for protecting copyright of video content | |
CN102075790A (en) | Method for distributing and encrypting streaming media | |
CN103237010A (en) | Server side for providing digital content in encryption mode | |
CN101567782A (en) | OMA DRM stream media rights management system based on multilayer encryption system | |
CN101567779A (en) | OMA DRM mobile stream media rights management system facing multicast service | |
CN100364332C (en) | Method for protecting broadband video-audio broadcasting content | |
CN100461199C (en) | Method and device for encrypting and de-encrypting digital content | |
CN103237011A (en) | Digital-content encryption transmission method and server side |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
C06 | Publication | ||
PB01 | Publication | ||
C02 | Deemed withdrawal of patent application after publication (patent law 2001) | ||
WD01 | Invention patent application deemed withdrawn after publication |
Open date: 20091028 |