The above and other aspects, features and advantages of certain exemplary embodiments of the present invention will be more apparent from the following detailed description taken in conjunction with the accompanying drawings, in which:
Throughout the drawings, it should be noted that like reference numbers are used to depict the same or similar elements, features and structures.
The following description with reference to the accompanying drawings is provided to assist in a comprehensive understanding of exemplary embodiments of the invention as defined by the claims and their equivalents. It includes various specific details to assist in that understanding but these are to be regarded as merely exemplary. Accordingly, those of ordinary skill in the art will recognize that various changes and modifications of the embodiments described herein can be made without departing from the scope and spirit of the invention. Also, descriptions of well-known functions and constructions are omitted for clarity and conciseness. For convenience, the present invention uses names of entities that Open Mobile Alliance (OMA), i.e. a standard organization of a device application has been defining. However, it goes without saying that the standards and names do not limit the scope of the present invention which can be applied to a system having similar technical background.
The present invention provides a method for giving and taking an RO between devices in an environment to which a DRM is applied. To this end, exemplary embodiments of the present invention provide two methods, which include a method for directly providing an RO between devices, and a method for providing an RO based on a network server, such as an RI. Therefore, since the RO can be mutually given and taken between devices, it is possible to freely reproduce a content between multiple devices.
The methods will be described with reference to
First, in order to directly give and take an RO between devices, mutual authentication must be performed between the devices. A secure channel is established between a device-110 and a device-220 through such mutual authentication. If the secure channel is established through the mutual authentication, the device-110 can separate information of the right from an RO for its own content and transmit an RO for the separated right to the device-220. The device-220 transmits a confirmation message after receiving the RO for the separated right, so that the device-220 can use the RO transferred from the device-110.
Hereinafter, a construction and an operation of a device having the above-described functions will be described with reference to
In an exemplary implementation, the application module 100 includes a module as a media player for receiving a decrypted content and reproducing the received content.
The registration module 110 performs resignation, service subscription, content usage management and the like. That is, the registration module 110 performs an operation according to the registration of a device and a service provider. The authentication module 120 manages authentication protocol execution of a UIM, such as a smart card including the user's identity, with a network, and generates and verifies a message by using its sub-module. The rights management module 130 manages the reproduction of the content according to a right within the device. The content management module 140 performs secure decryption of the content and interpretation of the content. The move management module 150 manages an RO to be moved to a counterpart device.
The modules 100 to 150 interwork with the crypto library module 160 and perform encryption, decryption, electronic signature, etc. The secure storage module 170 stores an encryption key, and the UIM IF module 190 communicates with a user identification module. The communication module 180 transmits and receives data through a network. In particular, the communication module 180 receives a message from a network, and transmits a response message with respect to the received message.
Hereinafter, the process of message transmission and reception between devices for RO movement according to an exemplary embodiment of the present invention will be described with reference to
In step 200, the device-110 transmits a list of contents for an RO to be transmitted to the device-220. For example, the device-110 transmits the names of content for a right to be transferred, to the device-220.
Then, a user selects and designates desired contents to be received in the device-220 from the list of contents. In step 210, the device-220 transmits an identifier (ID) for the designated content to the device-110. The above-described operations are performed in each move management module 150 constructed within the device-110 and the device-220.
The device-110 receives the content ID designated by the device-220, thereby recognizing which content right to transfer. In step 220, the device-110 loads information of the right associated with the designated content into a message, and transmits the message to the device-220. Herein, the information of the right denotes information of the right included in the RO. For example, the device-110 transmits information, indicating that the device-110 possesses a right capable of playing an MP3 file ten times, to the device-220. In this case, the move management module 150 of the device-110 receives information of the corresponding right from the rights management module 130, generates the received information into a message constructed in the format as shown in Table 1 below, and forwards the generated message to the device-220.
In Table 1, “permission” indicates a class of a usage right for a content and “constraint” indicates the amount of a right based on the usage right. A typical example of the permission includes “play” allowing the reproduction of the content, and “print” allowing printing of the content. A typical example of the constraint includes “count” indicating the number of usage permission, and “start time/end time” indicating time allowed for use of the content.
When the device-220 receives the message constructed in the format as shown in Table 1, the device-220 transmits specified right information on a desired part selected by the user from among the entire right information to the device-110 in step 230. For example, when the device-110 transmits information, indicating that the device-110 possesses the right capable of playing a specific MP3 file ten times, to the device-220 in step 220, the device-220 may transmit a message, which indicates that the device-220 wants to obtain a right capable of playing the MP3 file five times from among the right capable of playing the MP3 files ten times, to the device-110 in step 230. In this case, the device-220 appoints a value, indicating the amount of the right the device-220 wants to receive, to a corresponding constraint of each permission and transmits the message including the appointed value. The response message transmitted from the device-220 to the device-110 as described above is constructed in the format as shown in Table 2 below.
Table 2 shows a case where a right as much as a constraint Y11 is set for the permission X1, and a right as much as a constraint Y21 is set for the permission X2. That is, the Y11 and the Y21 are values appointed by the device-220. As described above, the device-220 can appoint a right as much as the device-220 wants at the constraints according to a class of a usage right for a content.
In step 240, the device-110 generates a right as much as the device-220 designates in the form of an RO message, and transmits the generated message to the device-220. The message format forwarded to the device-220 includes each field of Device-1 ID (i.e. identity information of the device-110), an RO containing a right, a TS (i.e. time stamp), and an electric signature. That is, when the rights management module 130 of the device-110 generates as much RO as the device-220 designates and forwards the generated RO to the move management module 150, the move management module 150 forwards the RO to the device-220 in the format of the message.
After receiving the message, the device-220 transmits a reception confirmation message to the device-110 in step 250. Then, the rights management module 130 of the device-110 removes a permission and a constraint of the transferred right from its own right. That is, the device-110 removes a permission and a constraint representing a right transferred to the device-220. For example, if the device-110 transfers the right capable of playing a specific MP3 file five times to the device-220, the device-110 removes the transferred right capable of playing a file five times from among its own right (i.e. an entire right) capable of playing a file ten times.
Hereinafter, a method for giving and taking an RO between the device-110 and the device-220 through the RI relay will be described. Exemplary embodiments of the present invention will be separately described as follows. An exemplary embodiment of the present invention deals with a method for right transmission from the device-110 to the device-220 through the RI, another exemplary embodiment of the present invention deals with a method for right transmission through the RI based on the OMA DRM v2.0, and yet another exemplary embodiment of the present invention deals with a method by which the device-220 receives the RO from the device-110 based on a message that the device-110 transmits to the RI.
Referring to
As such, if the device-110 transmits information of a right in the form of a message, the RI 30 transmits a confirmation message with respect to the received message to the device-110 in step 310. In step 320, the RI 30 forwards the message from the device-110 to the device-220.
If the device-220 receives the message, the device-220 notifies a user that the message is received. In step 330, the device-220 transmits a message indicating which content right to take. Herein, the right is designated according to the user selection. In this case, according to the user selection, the move management module 150 within the device-220 transmits a response message indicating approval or disapproval for the right. If the device-220 transmits a response message indicating disapproval for the right to the RI 30 (e.g. “No”), the RI 30 determines that the device-220 denies the reception of the right, and thus terminates the processes according to a current protocol.
In contrast, if the RI 30 receives a response message indicating approval for the right from the device-220 (e.g. “Ok”), the RI 30 generates an RO based on the information of the right received from the device-110. In step 340, the RI 30 forwards information including the generated RO, an ID of the device-110, an ID of the device-220, a TS, and data obtained by adding its own electric signature for such information, to the device-220. The move management module 150 of the device-220 receives the message having the format as described above, and the move management module 150 forwards the RO included in the received message to the rights management module 130. Therefore, the device-220 stores the RO transferred from the device-110 in the secure storage module 170 so as to use the stored RO at the time of content reproduction.
In step 350, the move management module 150 of the device-220 transmits a confirmation message, indicating that the right has been safely received, to the RI 30. In step 360, the RI 30 transmits the confirmation message to the device-110. Then, the rights management module 130 of the device-110 removes a permission and a constraint indicating the right transferred from its own right.
Since steps 400 and 410 of
In step 430, the device-220 having the received ROAP Trigger message recognizes that the device-220 must bring the RO from the RI 30, and thus transmits an RO request message to the RI 30 based on OMA RM v2.0. In step 440, the RI 30 generates an RO based on the preliminarily received information of the right, and forwards the generated RO to the device-220 by using the RO response message in the OMA DRM v2.0. In step 450, the RI 30 transmits a confirmation message, indicating that the RI 30 has transferred the RO to the device-220, to the device-110. Therefore, the device-110 removes a permission and a constraint indicating the right transferred from among its own right.
Hereinafter, according to yet another exemplary embodiment of the present invention, a method by which the device-220 receives the RO through the RI based on the message transmitted by the device-110 will be described with reference to
Referring to
When the device-220 receives the message, the device-220 notifies a user that the message is received. In step 530, the device-220 transmits the message, indicating which content right to take. Herein, the right is designated according to the user's selection. In this case, the move management module 150 within the device-220 transmits a response message indicating approval or disapproval for the right according to the user selection. If the device-220 transmits a response message, indicating disapproval for the right (e.g. “No”), to the RI 30, the RI 30 determines that the device-220 denies the reception of the right, and thus terminates the processes based on a current protocol.
In contrast, if the device-220 transmits a response message indicating approval for the right (e.g. “Ok”), the RI 30 performs steps 540 to 560 similar to steps 340 to 360 of
In the above exemplary embodiments, one device separates a partial RO from an entire RO and then provides the separated partial RO to another device. However, according to another exemplary embodiment, the entire RO may include a separate transferable RO, so that the separate RO can be provided to another device.
Exemplary embodiments of the present invention provide a method for giving and taking an RO between different devices, so that it is possible to freely reproduce a content among a plurality of devices based on the RO.
While the invention has been shown and described with reference to certain exemplary embodiments thereof, it will be understood by those skilled in the art that various changes in form and details may be made therein without departing from the spirit and scope of the invention as defined by the appended claims and their equivalents.
| Number | Date | Country | Kind |
|---|---|---|---|
| 10-2006-92438 | Sep 2006 | KR | national |