ES2579179T3 - Método y aparato para gestión de derechos de grano fino de contenido de flujo continuo - Google Patents

Método y aparato para gestión de derechos de grano fino de contenido de flujo continuo Download PDF

Info

Publication number
ES2579179T3
ES2579179T3 ES06727549.5T ES06727549T ES2579179T3 ES 2579179 T3 ES2579179 T3 ES 2579179T3 ES 06727549 T ES06727549 T ES 06727549T ES 2579179 T3 ES2579179 T3 ES 2579179T3
Authority
ES
Spain
Prior art keywords
rights
encrypted
content
stream
keys
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
ES06727549.5T
Other languages
English (en)
Other versions
ES2579179T8 (es
Inventor
Pekka Llmani Lahtinen
Jukka Antero Alve
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Nokia Technologies Oy
Original Assignee
Nokia Technologies Oy
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Nokia Technologies Oy filed Critical Nokia Technologies Oy
Application granted granted Critical
Publication of ES2579179T3 publication Critical patent/ES2579179T3/es
Publication of ES2579179T8 publication Critical patent/ES2579179T8/es
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/20—Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
    • H04N21/23—Processing of content or additional data; Elementary server operations; Server middleware
    • H04N21/234—Processing of video elementary streams, e.g. splicing of video streams or manipulating encoded video stream scene graphs
    • H04N21/2347—Processing of video elementary streams, e.g. splicing of video streams or manipulating encoded video stream scene graphs involving video stream encryption
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
    • H04L63/0457—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload wherein the sending and receiving network entities apply dynamic encryption, e.g. stream encryption
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q50/00—Information and communication technology [ICT] specially adapted for implementation of business processes of specific business sectors, e.g. utilities or tourism
    • G06Q50/10—Services
    • G06Q50/18—Legal services
    • G06Q50/184—Intellectual property management
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/06—Network architectures or network communication protocols for network security for supporting key management in a packet data network
    • H04L63/062—Network architectures or network communication protocols for network security for supporting key management in a packet data network for key distribution, e.g. centrally by trusted party
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/06—Network architectures or network communication protocols for network security for supporting key management in a packet data network
    • H04L63/068—Network architectures or network communication protocols for network security for supporting key management in a packet data network using time-dependent keys, e.g. periodically changing keys
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
    • H04L63/104—Grouping of entities
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
    • H04L9/0819—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s)
    • H04L9/0822—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) using key encryption key
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/20—Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
    • H04N21/25—Management operations performed by the server for facilitating the content distribution or administrating data related to end-users or client devices, e.g. end-user or client device authentication, learning user preferences for recommending movies
    • H04N21/254—Management at additional data server, e.g. shopping server, rights management server
    • H04N21/2541—Rights Management
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/20—Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
    • H04N21/25—Management operations performed by the server for facilitating the content distribution or administrating data related to end-users or client devices, e.g. end-user or client device authentication, learning user preferences for recommending movies
    • H04N21/258—Client or end-user data management, e.g. managing client capabilities, user preferences or demographics, processing of multiple end-users preferences to derive collaborative data
    • H04N21/25866—Management of end-user data
    • H04N21/25875—Management of end-user data involving end-user authentication
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/20—Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
    • H04N21/25—Management operations performed by the server for facilitating the content distribution or administrating data related to end-users or client devices, e.g. end-user or client device authentication, learning user preferences for recommending movies
    • H04N21/266—Channel or content management, e.g. generation and management of keys and entitlement messages in a conditional access system, merging a VOD unicast channel into a multicast channel
    • H04N21/26606—Channel or content management, e.g. generation and management of keys and entitlement messages in a conditional access system, merging a VOD unicast channel into a multicast channel for generating or managing entitlement messages, e.g. Entitlement Control Message [ECM] or Entitlement Management Message [EMM]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/20—Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
    • H04N21/25—Management operations performed by the server for facilitating the content distribution or administrating data related to end-users or client devices, e.g. end-user or client device authentication, learning user preferences for recommending movies
    • H04N21/266—Channel or content management, e.g. generation and management of keys and entitlement messages in a conditional access system, merging a VOD unicast channel into a multicast channel
    • H04N21/26613—Channel or content management, e.g. generation and management of keys and entitlement messages in a conditional access system, merging a VOD unicast channel into a multicast channel for generating or managing keys in general
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
    • H04N21/43—Processing of content or additional data, e.g. demultiplexing additional data from a digital video stream; Elementary client operations, e.g. monitoring of home network or synchronising decoder's clock; Client middleware
    • H04N21/44—Processing of video elementary streams, e.g. splicing a video clip retrieved from local storage with an incoming video stream or rendering scenes according to encoded video stream scene graphs
    • H04N21/4405—Processing of video elementary streams, e.g. splicing a video clip retrieved from local storage with an incoming video stream or rendering scenes according to encoded video stream scene graphs involving video stream decryption
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
    • H04N21/43—Processing of content or additional data, e.g. demultiplexing additional data from a digital video stream; Elementary client operations, e.g. monitoring of home network or synchronising decoder's clock; Client middleware
    • H04N21/44—Processing of video elementary streams, e.g. splicing a video clip retrieved from local storage with an incoming video stream or rendering scenes according to encoded video stream scene graphs
    • H04N21/4408—Processing of video elementary streams, e.g. splicing a video clip retrieved from local storage with an incoming video stream or rendering scenes according to encoded video stream scene graphs involving video stream encryption, e.g. re-encrypting a decrypted video stream for redistribution in a home network
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
    • H04N21/45—Management operations performed by the client for facilitating the reception of or the interaction with the content or administrating data related to the end-user or to the client device itself, e.g. learning user preferences for recommending movies, resolving scheduling conflicts
    • H04N21/462—Content or additional data management, e.g. creating a master electronic program guide from data received from the Internet and a Head-end, controlling the complexity of a video stream by scaling the resolution or bit-rate based on the client capabilities
    • H04N21/4623—Processing of entitlement messages, e.g. ECM [Entitlement Control Message] or EMM [Entitlement Management Message]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
    • H04N21/45—Management operations performed by the client for facilitating the reception of or the interaction with the content or administrating data related to the end-user or to the client device itself, e.g. learning user preferences for recommending movies, resolving scheduling conflicts
    • H04N21/462—Content or additional data management, e.g. creating a master electronic program guide from data received from the Internet and a Head-end, controlling the complexity of a video stream by scaling the resolution or bit-rate based on the client capabilities
    • H04N21/4627—Rights management associated to the content
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/60—Network structure or processes for video distribution between server and client or between remote clients; Control signalling between clients, server and network components; Transmission of management data between server and client, e.g. sending from server to client commands for recording incoming content stream; Communication details between server and client 
    • H04N21/63—Control signaling related to video distribution between client, server and network components; Network processes for video distribution between server and clients or between remote clients, e.g. transmitting basic layer and enhancement layers over different transmission paths, setting up a peer-to-peer communication via Internet between remote STB's; Communication protocols; Addressing
    • H04N21/633—Control signals issued by server directed to the network components or client
    • H04N21/6332—Control signals issued by server directed to the network components or client directed to client
    • H04N21/6334—Control signals issued by server directed to the network components or client directed to client for authorisation, e.g. by transmitting a key
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/60—Network structure or processes for video distribution between server and client or between remote clients; Control signalling between clients, server and network components; Transmission of management data between server and client, e.g. sending from server to client commands for recording incoming content stream; Communication details between server and client 
    • H04N21/63—Control signaling related to video distribution between client, server and network components; Network processes for video distribution between server and clients or between remote clients, e.g. transmitting basic layer and enhancement layers over different transmission paths, setting up a peer-to-peer communication via Internet between remote STB's; Communication protocols; Addressing
    • H04N21/633—Control signals issued by server directed to the network components or client
    • H04N21/6332—Control signals issued by server directed to the network components or client directed to client
    • H04N21/6334—Control signals issued by server directed to the network components or client directed to client for authorisation, e.g. by transmitting a key
    • H04N21/63345—Control signals issued by server directed to the network components or client directed to client for authorisation, e.g. by transmitting a key by transmitting keys
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/80—Generation or processing of content or additional data by content creator independently of the distribution process; Content per se
    • H04N21/83—Generation or processing of protective or descriptive data associated with content; Content structuring
    • H04N21/835—Generation of protective data, e.g. certificates
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N7/00—Television systems
    • H04N7/16—Analogue secrecy systems; Analogue subscription systems
    • H04N7/167—Systems rendering the television signal unintelligible and subsequently intelligible
    • H04N7/1675—Providing digital key or authorisation information for generation or regeneration of the scrambling sequence
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2209/00—Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
    • H04L2209/56—Financial cryptography, e.g. electronic payment or e-cash
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2209/00—Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
    • H04L2209/60—Digital content management, e.g. content distribution
    • H04L2209/603—Digital right managament [DRM]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2463/00—Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00
    • H04L2463/101—Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00 applying security measures for digital rights management

Landscapes

  • Engineering & Computer Science (AREA)
  • Signal Processing (AREA)
  • Computer Security & Cryptography (AREA)
  • Multimedia (AREA)
  • Databases & Information Systems (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Business, Economics & Management (AREA)
  • Technology Law (AREA)
  • Tourism & Hospitality (AREA)
  • Computer Graphics (AREA)
  • Primary Health Care (AREA)
  • Strategic Management (AREA)
  • Economics (AREA)
  • General Health & Medical Sciences (AREA)
  • Human Resources & Organizations (AREA)
  • Marketing (AREA)
  • Operations Research (AREA)
  • Health & Medical Sciences (AREA)
  • Physics & Mathematics (AREA)
  • General Business, Economics & Management (AREA)
  • General Physics & Mathematics (AREA)
  • Theoretical Computer Science (AREA)
  • Entrepreneurship & Innovation (AREA)
  • Two-Way Televisions, Distribution Of Moving Picture Or The Like (AREA)

Abstract

Un método que comprende: (A) recibir un flujo de datos encriptados (2001), que corresponden a una única sesión multi-media, desde un sistema de comunicaciones (2000), comprendiendo el flujo de datos una pluralidad de porciones encriptadas, respectivamente, mediante una pluralidad de claves de tráfico (2205); (B) recibir un mensaje de flujo de clave encriptada, incluyendo el mensaje de flujo de clave encriptada la pluralidad de claves de tráfico; y (C) usar la pluralidad de claves de tráfico para desencriptar las respectivas porciones del flujo de datos encriptados, en el que el mensaje de flujo de clave encriptada está separado del flujo de datos encriptados, y estando caracterizado por que cada porción del flujo de datos encriptados está incluida en la misma ráfaga de datos de segmento de tiempo como el respectivo mensaje de flujo de clave encriptada.

Description

imagen1
imagen2
imagen3
imagen4
imagen5
imagen6
imagen7
imagen8
5
15
25
35
45
55
65
recepción 1926 puede ordenar el servicio (contenido) y recibir en consecuencia el correspondiente objeto de derechos (RO) 1933, que permite al usuario desencriptar el contenido del servicio ordenado. En la realización, el objeto de derechos 1933 normalmente no contiene claves de IPSec 1905.
El dispositivo de recepción 1926 procesa las ráfagas de segmento de tiempo con el módulo de procesamiento de ráfagas 1927. Los paquetes recibidos se desencriptan mediante el módulo de desencriptación 1929 con una clave proporcionada mediante el módulo de extracción de clave 1931 para obtener el contenido 1935. Las claves se determinan desde el objeto de derechos 1933. Las claves normalmente se entregan en un carrusel de SA como ficheros de SA protegidos de DRM. El objeto de derechos 1933 permite al dispositivo de recepción 1926 extraer las claves.
La Figura 20 muestra un sistema 2000 que soporta servicios de IPDC de DVBH de acuerdo con una realización de la invención. El contenido multimedia 2001 (que corresponde a los datagramas de contenido) se encripta mediante el módulo de encriptación 2003 aplicando claves de IPSec 2005. El sistema de transmisión 2025 obtiene tanto datagramas de contenido encriptados desde el módulo de encriptación 2003 como las correspondientes claves desde el DRM 2009. El sistema de transmisión 2025 forma datagramas correspondientes que contienen las claves que corresponden a encriptar los datagramas de contenido. El sistema de transmisión 2025 inserta tanto los datagramas de contenido encriptados como los datagramas correspondientes en una ráfaga de segmento de tiempo, que se transmite al dispositivo de recepción 2026 a través de un canal de comunicaciones. Aunque la Figura 20 no muestra explícitamente un módulo de radio, la realización puede proporcionar capacidad de señal inalámbrica para transmitir la ráfaga de segmento de tiempo al dispositivo de recepción 2026 a través de un canal inalámbrico.
El dispositivo de recepción 2026 procesa una ráfaga de segmento de tiempo recibida, en la que los datagramas de contenido encriptados y los correspondientes datagramas (que contienen las correspondientes claves que se usan para encriptar los datagramas de contenido recibidos) se separan (demultiplexan) mediante el módulo de procesamiento de ráfagas 2027. En la realización, el dispositivo de recepción 2026 comprende un receptor de banda ancha para recibir señales de DVB que incluyen ráfagas de segmentos de tiempo y un transceptor para comunicaciones bidireccionales en una red inalámbrica. Las comunicaciones bidireccionales soportan pedido de servicio por un usuario, mensajería de OMA, e instalación de módulo de extensión de seguridad. La realización soporta diferentes configuraciones de señal, en las que se incluyen las claves en un flujo de clave separado o en las que se incluyen las claves en componentes multimedia como se ha analizado anteriormente con las Figuras 416. El módulo de extracción de claves 2031 extrae las claves desde los datagramas correspondientes para desencriptar los datagramas de contenido, como se realiza mediante el módulo de desencriptación 2029. El módulo de desencriptación proporciona el contenido desencriptado 2035 a una aplicación (no mostrada) de modo que el contenido pueda presentarse.
Adicionalmente, el objeto de gestión de derechos 2023 (como se determina mediante el generador de objetos de derechos 2022) se transmite por separado al dispositivo de recepción 2026 en respuesta a un pedido de compra. En consecuencia, el dispositivo de recepción 2026 recibe el objeto de derechos 2033 para determinar si se permite procesar al dispositivo de recepción 2026 el contenido recibido.
La Figura 21 muestra un diagrama de flujo 2100 para transmitir datos para los servicios de IPDC de DVBH en el sistema 2000 de acuerdo con una realización de la invención. En la etapa 2101, el aparato de transmisión (por ejemplo, el sistema de transmisión 2025) determina si un datagrama de contenido obtenido debería incluirse en la ráfaga de segmento de tiempo actual. Si no, se envía la ráfaga de segmento de tiempo (con datagramas de contenido previamente obtenidos y claves asociadas) al dispositivo de recepción en la etapa 2109.
Si el datagrama de contenido obtenido debiera incluirse en la ráfaga de segmento de tiempo actual, la etapa 2103 determina la clave correspondiente y encripta el datagrama de contenido con la clave en la etapa 2105. En la etapa 2107 el datagrama de contenido encriptado y la correspondiente información de clave (que corresponde a un datagrama correspondiente que puede incluirse en el componente multimedia o en un flujo de clave) se inserta en la ráfaga de segmento de tiempo actual.
La Figura 22 muestra un sistema 2200 que soporta servicios de IPDC de DVBH de acuerdo con una realización de la invención. En la Figura 22, los elementos 2201, 2203, 2205, 2222, 2223, 2227, 2229, 2231, 2233, y 2235 corresponden a los elementos 2001, 2003, 2005, 2022, 2023, 2027, 2029, 2031, 2033, y 2035 como se muestra en la Figura 20. Como con el sistema 2000, el sistema 2200 transmite datagramas de contenido y la información de clave correspondiente en la misma ráfaga de segmento de tiempo. La información de clave se proporciona al sistema de transmisión 2225 mediante el generador de mensaje de clave 2206. El generador de mensaje de clave puede encriptar adicionalmente las claves de modo que se transmita la información de clave encriptada al dispositivo de recepción 2226 mediante el sistema de transmisión 2225. El DRM 2209, en conjunto con el generador de objetos de derechos 2222, proporciona el objeto de derechos 2233 que corresponde al servicio de IPDC de DVBH al dispositivo de recepción 2226.
Los ficheros de política de IPSec 2211 (que pueden contener información de asociación de seguridad) se transmiten por separado en el carrusel de SA 2221 desde el servicio (contenido) y los mensajes de clave que se multiplexan y
10
imagen9
imagen10
imagen11
imagen12
5
15
25
35
45
55
65
puede incluir el vector, pueden usarse otros formatos y protocolos para proporcionar el valor de categoría asociado con el RI. Además, en una realización un número de bits y/o combinaciones de bits en el vector puede reservarse para uso futuro.
En otra realización de la invención, un número de bits y/o combinaciones de bits en el KSM, que pueden o pueden no haberse reservado para otros fines, pueden mapearse a los valores de categoría o interpretarse como los valores de categoría. Además, ciertas localizaciones en el KSM podrían usarse para proporcionar una indicación en cuanto a si un tipo de programa podría verse. Un RO podría determinar cuál valor de categoría basándose en el valor de categoría mediante el KSM y a continuación mirar en el lugar apropiado en el KSM para determinar qué derecho de uso existe, tal como si el contenido pudiera visualizarse. Como cada RO podría configurarse para mirar en diferentes localizaciones con el KSM para determinar los derechos de uso, el control individualizado que puede variar con cada KSM podría proporcionarse fácilmente.
Como se muestra, el usuario ha recibido en este caso cuatro RO desde el RI N.º I, cada uno con una clase de derechos de usuario. La ventaja de usar clases de derechos de uso es que el número total y tamaño de objetos de derechos puede ser menor que en el caso de un conjunto completo de RO si los derechos de uso se ofrecen para comprar en el nivel de segmentos de programa. Cuando el usuario recibe el KSM que lleva el TK real, la combinación de bits en la posición que corresponde a la posición RI N.º I permite al usuario seleccionar el RO que corresponde a esta compra. Por ejemplo un valor de 0 en el RI N.º I indicaría RO1, un valor de 1 indicaría RO2, un valor de 2 indicaría RO3 y un valor de 3 indicaría el RO4. A medida que los TK pueden cambiarse de segmento de programa a segmento de programa, el usuario puede usar sus derechos de la manera que ha pedido (comprado). Debería observarse que el usuario está ‘escuchando’ al KSM que se le ha anunciado (dirección de IP y número de puerto).
Por ejemplo, en un servicio de difusión de televisión portátil, basándose en programaciones de programas de televisión, los RI eligen una de las 4 categorías para cada programa, las comunican al difusor, y el difusor a continuación incluye las categorías en los KSM. Para un RI, las cuatro categorías pueden ser 1) únicamente permitida presentación en directo, 2) almacenamiento y reproducción permitidos durante 48 horas, 3) almacenamiento y reproducción permitidos indefinidamente y 4) almacenamiento, reproducción y copiado a otros dispositivos permitido indefinidamente. Este ejemplo, sin embargo, es meramente ilustrativo y pueden proporcionarse otras combinaciones de derechos de uso.
En la situación anterior todos los comparadores del conjunto de RO desde el RI pueden tener el mismo conjunto de derechos. Por ejemplo, un RI N.º J en el KSM 3340 puede corresponder a una oferta de paquete particular mientras un segundo RI N.º J+1 puede corresponder a una oferta de paquete diferente. Debería indicarse, sin embargo, que la categoría de programa para cada RI es particular a la TK, por lo tanto el mismo conjunto de RO puede proporcionar diferentes derechos de uso para diferentes TK, y adicionalmente, diferentes conjuntos de RO pueden proporcionar diferentes conjuntos y/o combinaciones de derechos de uso.
Por lo tanto, para un conjunto de RO el RO1 puede proporcionar derechos de uso de visión únicamente mientras que otro conjunto de RO el RO1 puede proporcionar desplazamiento en el tiempo.
Además, en ambas soluciones, debe recordarse que la condicionalidad basándose en las categorías únicamente complementa los derechos de uso globales en el RO, haciéndolo más dinámico: muchos derechos de uso es probable que sean incondicionales y por lo tanto no dependientes del valor de variable de REL de categoría de programa.
De manera similar, en ambas soluciones, en lugar de proporcionar condicionalidad en los derechos de uso de un único RO, la información de categoría de programa enviada en el KSM puede usarse como alternativa para seleccionar uno de un conjunto de RO complejos, o posiblemente uno de varios RO hijos relacionados al mismo RO padre.
Por lo tanto, los aspectos de la presente invención proporcionan una manera eficaz en ancho de banda de entregar derechos aplicables a todos los abonados, pero que pueden variar de programa a programa y de periodo de tiempo a periodo de tiempo, mientras aún permite la riqueza completa del REL para definir estos derechos para cada categoría de programa. La invención puede aplicarse a servicios de IPDC a través de DVBT, DVBH, MediaFLO, Difusión de OMA y otros sistemas.
Como puede apreciarse por un experto en la materia, un sistema informático con un medio legible por ordenador asociado que contiene instrucciones para controlar el sistema informático puede utilizarse para implementar las realizaciones ejemplares que se desvelan en el presente documento. El sistema informático puede incluir al menos un ordenador tal como un microprocesador, procesador de señales digitales y circuitería electrónica de periféricos asociada.
Aunque la invención se ha descrito con respecto a ejemplos específicos que incluyen actualmente modos preferidos para llevar a cabo la invención, los expertos en la materia apreciarán que hay numerosas variaciones y
15
imagen13

Claims (1)

  1. imagen1
    imagen2
ES06727549.5T 2005-05-12 2006-04-13 Método y aparato para gestión de derechos de grano fino de contenido de flujo continuo Active ES2579179T3 (es)

Applications Claiming Priority (3)

Application Number Priority Date Filing Date Title
US127780 2005-05-12
US11/127,780 US9225698B2 (en) 2005-05-12 2005-05-12 Fine grain rights management of streaming content
PCT/IB2006/001047 WO2006120516A2 (en) 2005-05-12 2006-04-13 Fine grain rights management of streaming content

Publications (2)

Publication Number Publication Date
ES2579179T3 true ES2579179T3 (es) 2016-08-05
ES2579179T8 ES2579179T8 (es) 2016-09-13

Family

ID=37396925

Family Applications (1)

Application Number Title Priority Date Filing Date
ES06727549.5T Active ES2579179T3 (es) 2005-05-12 2006-04-13 Método y aparato para gestión de derechos de grano fino de contenido de flujo continuo

Country Status (14)

Country Link
US (3) US9225698B2 (es)
EP (2) EP3076581A1 (es)
JP (1) JP2008545289A (es)
KR (1) KR101011521B1 (es)
CN (1) CN101199157B (es)
AU (1) AU2006245453B2 (es)
BR (1) BRPI0612027B1 (es)
ES (1) ES2579179T3 (es)
MX (1) MX2007013885A (es)
PL (1) PL1880505T3 (es)
RU (1) RU2403681C2 (es)
TW (1) TWI455589B (es)
WO (1) WO2006120516A2 (es)
ZA (1) ZA200710452B (es)

Families Citing this family (33)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US9225698B2 (en) 2005-05-12 2015-12-29 Nokia Technologies Oy Fine grain rights management of streaming content
CN1322388C (zh) * 2005-08-15 2007-06-20 华为技术有限公司 对具有拷贝导出权限的版权进行限制的方法及装置
US8893302B2 (en) * 2005-11-09 2014-11-18 Motorola Mobility Llc Method for managing security keys utilized by media devices in a local area network
US20070107011A1 (en) * 2005-11-10 2007-05-10 Zhi Li System and method for differentiated service levels in an internet protocol television network
EP2288196B1 (en) * 2006-01-11 2018-02-21 Qualcomm Incorporated Wireless communication methods and apparatus supporting synchronization
KR100809292B1 (ko) * 2006-02-24 2008-03-07 삼성전자주식회사 디지털 저작권 관리 장치 및 방법
WO2007097604A1 (en) * 2006-02-27 2007-08-30 Samsung Electronics Co., Ltd. Method and system for protecting broadcast service/content in a mobile broadcast system, and method for generating short term key message therefor
WO2008002208A1 (en) * 2006-06-29 2008-01-03 Telefonaktiebolaget Lm Ericsson (Publ) A method and arrangement for purchasing streamed media.
US20080059409A1 (en) * 2006-09-06 2008-03-06 Marie Jose Montpetit Method and Apparatus for Controlling Access to Content Streamed to Remote Devices
US8739304B2 (en) * 2006-11-10 2014-05-27 Sony Computer Entertainment Inc. Providing content using hybrid media distribution scheme with enhanced security
US8752199B2 (en) * 2006-11-10 2014-06-10 Sony Computer Entertainment Inc. Hybrid media distribution with enhanced security
US20080219436A1 (en) 2007-03-05 2008-09-11 General Instrument Corporation Method and apparatus for providing a digital rights management engine
KR20090029634A (ko) * 2007-09-18 2009-03-23 한국전자통신연구원 콘텐츠 보호 제공방법과 보호된 콘텐츠 소비방법 및 그 장치
CN101132414A (zh) * 2007-09-28 2008-02-27 中兴通讯股份有限公司 移动多媒体广播业务中传输密钥的加密方法及***
US9209983B2 (en) * 2007-11-19 2015-12-08 Cisco Technology, Inc. Generating a single advice of charge request for multiple sessions in a network environment
US9202237B2 (en) * 2007-11-27 2015-12-01 Cisco Technology, Inc. Generating a single billing record for multiple sessions in a network environment
US9892390B2 (en) * 2007-12-12 2018-02-13 Microsoft Technology Licensing, Llc Digital content packaging, licensing and consumption
KR20090076765A (ko) * 2008-01-09 2009-07-13 삼성전자주식회사 방송 모바일 통합 서비스 시스템에서의 전자 서비스 가이드발견 방법 및 장치
US9628205B2 (en) * 2008-01-28 2017-04-18 Samsung Electronics Co., Ltd. Method and apparatus for transmitting and receiving broadcast service data in a broadcasting communication system, method for configuring the broadcast service data, and frame including the broadcast service data
KR101407196B1 (ko) 2008-01-28 2014-06-13 삼성전자주식회사 방송통신 시스템에서 방송 서비스 데이터 송수신 방법 및 장치와 상기 방송 서비스 데이터 구성 방법 및 상기 방송 서비스 데이터를 포함하는 프레임
EP2259544B1 (en) * 2009-06-02 2012-08-08 Irdeto Access B.V. Controlling the validity period of a decryption key
US8571994B2 (en) * 2009-06-26 2013-10-29 Disney Enterprises, Inc. Method and system for allocating access to digital media content
EP2280544A1 (en) * 2009-07-07 2011-02-02 Irdeto Access B.V. Secure transmition and recording of a content
KR101273142B1 (ko) * 2011-10-21 2013-06-17 주식회사 캐스트이즈 서비스 키를 사용한 주문형 비디오 서비스용 스트리밍 파일 목록 결정 장치 및 방법
US9549024B2 (en) * 2012-12-07 2017-01-17 Remote Media, Llc Routing and synchronization system, method, and manager
EP3080743B1 (en) * 2013-12-12 2020-12-02 McAfee, LLC User authentication for mobile devices using behavioral analysis
US11234105B2 (en) * 2014-09-29 2022-01-25 Visa International Service Association Methods and systems for asset obfuscation
US10992461B2 (en) * 2015-11-20 2021-04-27 Genetec Inc. Secure layered encryption of data streams
US10915647B2 (en) 2015-11-20 2021-02-09 Genetec Inc. Media streaming
TWI575402B (zh) * 2016-03-25 2017-03-21 晨星半導體股份有限公司 計算裝置與資料處理方法
WO2018138724A1 (en) * 2017-01-24 2018-08-02 Six Degrees Space Ltd Asymmetric content protection of large datastreams
US11423161B1 (en) 2018-05-26 2022-08-23 Genetec Inc. System and media recording device with secured encryption
US11184417B2 (en) * 2019-10-08 2021-11-23 Qualcomm Incorporated System and apparatus for providing network assistance for traffic handling in downlink streaming

Family Cites Families (19)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7069451B1 (en) * 1995-02-13 2006-06-27 Intertrust Technologies Corp. Systems and methods for secure transaction management and electronic rights protection
AUPO894297A0 (en) * 1997-09-02 1997-09-25 Nec Australia Pty Ltd A distribution system
US7277941B2 (en) * 1998-03-11 2007-10-02 Commvault Systems, Inc. System and method for providing encryption in a storage network by storing a secured encryption key with encrypted archive data in an archive storage device
ATE325505T1 (de) 1998-09-01 2006-06-15 Irdeto Access Bv Sicheres datensignalübertragungssystem
US20030018581A1 (en) * 2000-02-16 2003-01-23 Bratton Timothy R. Delivering media data to portable computing devices
US20020026478A1 (en) 2000-03-14 2002-02-28 Rodgers Edward B. Method and apparatus for forming linked multi-user groups of shared software applications
US7050583B2 (en) * 2001-03-29 2006-05-23 Etreppid Technologies, Llc Method and apparatus for streaming data using rotating cryptographic keys
JP2003152698A (ja) 2001-11-15 2003-05-23 Nippon Hoso Kyokai <Nhk> コンテンツ利用制御送信方法、コンテンツ利用制御受信方法およびコンテンツ利用制御送信装置、コンテンツ利用制御受信装置ならびにコンテンツ利用制御送信プログラム、コンテンツ利用制御受信プログラム
ATE443970T1 (de) 2001-12-11 2009-10-15 Ericsson Telefon Ab L M Methode des rechtmanagements für strömende media
US7394968B2 (en) * 2002-01-24 2008-07-01 Lsi Corporation Enhanced personal video recorder including user play programming
WO2003098919A1 (en) 2002-05-21 2003-11-27 Koninklijke Philips Electronics N.V. Conditional access system
WO2004077911A2 (en) 2003-03-03 2004-09-16 Sony Ericsson Mobile Communications Ab Rights request method
AU2003244970A1 (en) 2003-06-25 2005-01-04 Nokia Corporation Digital rights management
EP1499061A1 (en) 2003-07-17 2005-01-19 Deutsche Thomson-Brandt Gmbh Individual video encryption system and method
GB2407947A (en) 2003-11-05 2005-05-11 Nokia Corp Distributing digital rights for DVB broadcast data to mobile terminals over, and in response to requests over, a separate PLMN cellular network
AU2004288307B2 (en) * 2003-11-11 2010-04-22 Nokia Corporation System and method for using DRM to control conditional access to broadband digital content
US7602908B2 (en) * 2003-12-22 2009-10-13 Aol Llc System and method for using a streaming protocol
KR100811046B1 (ko) * 2005-01-14 2008-03-06 엘지전자 주식회사 브로드캐스트/멀티캐스트 서비스에서 디지털 저작권관리방법
US9225698B2 (en) 2005-05-12 2015-12-29 Nokia Technologies Oy Fine grain rights management of streaming content

Also Published As

Publication number Publication date
TWI455589B (zh) 2014-10-01
MX2007013885A (es) 2008-01-24
KR20080007654A (ko) 2008-01-22
EP1880505B8 (en) 2016-09-14
EP1880505A4 (en) 2013-12-04
AU2006245453B2 (en) 2009-12-17
KR101011521B1 (ko) 2011-01-31
PL1880505T3 (pl) 2016-10-31
BRPI0612027A2 (pt) 2010-10-13
EP1880505B1 (en) 2016-05-25
BRPI0612027B1 (pt) 2020-11-03
TW200711475A (en) 2007-03-16
AU2006245453A1 (en) 2006-11-16
US20160099921A1 (en) 2016-04-07
CN101199157B (zh) 2012-10-03
WO2006120516A2 (en) 2006-11-16
ZA200710452B (en) 2008-11-26
JP2008545289A (ja) 2008-12-11
EP3076581A1 (en) 2016-10-05
US20220116368A1 (en) 2022-04-14
ES2579179T8 (es) 2016-09-13
EP1880505A2 (en) 2008-01-23
US20060259433A1 (en) 2006-11-16
RU2403681C2 (ru) 2010-11-10
US9225698B2 (en) 2015-12-29
US11627119B2 (en) 2023-04-11
RU2007144827A (ru) 2009-06-20
CN101199157A (zh) 2008-06-11
WO2006120516A3 (en) 2007-01-04

Similar Documents

Publication Publication Date Title
ES2579179T3 (es) Método y aparato para gestión de derechos de grano fino de contenido de flujo continuo
US7698568B2 (en) System and method for using DRM to control conditional access to broadband digital content
US7925203B2 (en) System and method for controlling broadcast multimedia using plural wireless network connections
AU2004288307B2 (en) System and method for using DRM to control conditional access to broadband digital content
CN105409234A (zh) 用于执行输送i/o的***及方法
JP2008172391A (ja) マルチストリーム配信装置およびマルチデスクランブル装置
KR20060105862A (ko) 서비스 제공자와 다수의 단말기 간에 브로드캐스트 서비스를 지원하는 컨텐츠 보호 방법 및 장치
US20100325415A1 (en) Controlling Media Distribution
KR20060105934A (ko) 브로드캐스트 서비스를 지원하는 서비스 제공자와 단말기간에 디지털 저작권 관리 컨텐츠 공유 방법 및 장치,그리고 그 시스템
US7836300B2 (en) Security integrated circuit
US20110302416A1 (en) Method and system for secured communication in a non-ctms environment
US20070203843A1 (en) System and method for efficient encryption and decryption of drm rights objects
US20060008088A1 (en) Software plug-in framework to modify decryption methods in terminals
JP2006518134A (ja) デコーダ及びスマートカードに関連した有料テレビジョンシステム、そのようなシステムにおける権利失効方法、及びそのようなデコーダに送信されたメッセージ
JP2007104074A (ja) ストリームコンテンツ受信システム
KR101609095B1 (ko) 콘텐츠 전송 네트워크에서의 데이터 보안 장치 및 그 방법
US20230370438A1 (en) Method for transmitting data
JP5132651B2 (ja) ライセンス情報送信装置およびライセンス情報送信プログラム
JP2008092187A (ja) 受信装置、送信装置及び通信方法
JP2008011406A (ja) 受信装置および送信装置
KR102190886B1 (ko) 조건부 액세스 시스템의 컨트롤 워드 보호
JP2009017323A (ja) 限定受信システム、限定受信システムの送信装置、及び限定受信システムの受信装置。
JP2016063538A (ja) 送信装置および受信装置
JP5391315B2 (ja) ライセンス情報受信装置、ライセンス情報受信プログラムおよびライセンス情報受信方法
JP2012151747A (ja) 限定受信システム、限定受信方法、および限定受信プログラム