This present invention concerns a method for controlling access to a content by a terminal as well as a terminal, a content operating-rights server, an automatic distributor of second parts of content, a supplier server of parts of content, a data medium and a system for implementation of the process.
Some television channels transmit programmes, also called content, to receivers, while controlling access by these receivers to the programmes distributed. A known method of access control to the distributed content consists of scrambling the content and communicating one or more unscrambling keys to the receivers authorised to receive this content. There exist different implementation variants of this access control method.
A first variant consists of breaking down the content into packets of data, marking the packets using either an even indicator or an odd indicator, and scrambling the packets marked by the even indicator using a first scrambling key and the packets of data marked by the odd indicator using a second scrambling key which is different from the first.
The distributed content can be broken down into several data streams. For example, for each type of audio and video data, a content can be broken down into a basic data stream, and into one or more additional data streams intended to improve the quality of the signal conveyed by the basic stream. Each receiver can thus adapt the quality of the received signal to its own capabilities, by using the basic stream and one or more additional streams where appropriate. In this event, a second variant for implementation of the process of access control to the distributed content consists of scrambling only one of the streams, such as the basic audio stream, so as to downgrade the sound quality of the audio component of the content. Only those receivers with the correct key are able to play the audio component of the content with optimal sound quality.
A third variant consists of breaking down the content into an elementary data stream, whose restoration leads to a discernible, but not directly usable, component of the content, and into a additional data stream that allows a full restoration of the content, and scrambling the additional stream only.
These different methods of access control to the content consist of protecting the content by scrambling all or part of the content. However the totally or partially scrambled contents are exposed to the risk of piracy and fraudulent copying.
The technical problem of the invention is therefore to propose a process to control access to a content by a terminal which allows the risk of piracy and fraudulent copying to be limited.
This problem is solved by the fact that the process includes the following stages, designed:
The first part of the content, stored in the terminal, does not, on its own, allow the content to be restored correctly. In order to restore the content, the terminal must retrieve the second part of the content from the external medium and then combine the two parts of the content.
In one particular embodiment of the invention, the values of bytes of the content are read off in a random manner, and the read-off values of these bytes are recorded in the memory of the medium, forming the second part of the content, and their respective positions in the content. Such a method of byte sampling is suitable for all type of coding.
In a variant, the values of bytes of the content are read off in a targeted manner, and the read-off values of the bytes are recorded in the memory of the medium, forming the second part of the content, and their respective positions in the content. Such a byte sampling method allows the essential bytes of the original content to be read off in such a manner as to disrupt the latter in a predictable manner.
In order to obtain the first part of the content, it is possible to delete the bytes whose values have been read off or to modify the values of the bytes read off.
Advantageously,
Thus, in order to reconstitute the content, the terminal must not only have access to the memory medium storing the second part of the content, but the operating rights for the content attributed to the holder of the medium must also be valid. These operating rights for the content can consist, for example, of a period of usage or in a number of uses. The granting of operating rights for the content to the terminal allows the risks of piracy to be reduced even more.
Advantageously, a network address of a operating-rights server is saved in the memory of the medium and, in order to verify the validity of the operating rights, the terminal connects to the rights server over the network.
Advantageously again, the terminal retrieves the first part of the content in accordance with one of the following methods:
It is preferable that the medium be introduced into an automatic distributor, which records the second part of the content in the memory of the medium.
In a variant, the second part of the content is saved in the memory of the medium at the end of manufacture of the said medium.
The invention also concerns a terminal for implementation of the process described above, including the means to acquire a first part of a content, the means for reading an external memory medium and the means to reconstitute the said content by combination of the first part of the content and a second part of the content extracted from the memory of the external medium.
The invention also concerns a content operating-rights server for the implementation of the process described previously, including a user database containing, for each user, user identification data and operating rights for the user associated with a given content, the means for connection to a network and the means for authorisation of use, arranged, on receipt of a request from a user terminal, so as to verify the validity of the operating rights for the said user associated with a content in order to authorise or interdict the use of the said content.
The invention also concerns an automatic distributor of second content parts, for implementation of the process described previously, including the means for acquisition of second content parts, the resources for a man-machine interface arranged to allow a user to select one of the second content parts, and the means to save the second part of selected content in a memory of an external memory medium.
The invention also concerns a server supplying first and second content parts, for implementation of the process described previously, including a content database containing a multiplicity of content and the means to split each content of the base into a first and a second content part, and the means to send the said first and second parts.
The invention also concerns a data medium for implementation of the process described previously, intended to contain a part of a content, used to reconstitute the said content.
The invention finally concerns a system for implementation of the process described previously, including
The invention will be better understood using the following description of a particular method of implementation of the process to control access to a content by a terminal, and of a particular form of implementation of the different devices or arrangements for the implementation of the process in accordance with the invention, with reference to the appended diagrams in which:
The system shown in
The supplier server (6) of reduced content and of associated extracted contents includes a content database (60), a scrambling module (61), a content-splitting module (62), a transmission module (63) and a connection module (64) to the IP private network (8).
Straight away, it can be seen that an identification reference is attributed to each content.
The content database (60) contains a multiplicity of contents and, for each content, the identification reference of this content, descriptive information on this content, a scrambling key, and a corresponding unscrambling key. The descriptive information on a content contains the title of the content, its period, a summary, information on the people associated with this content (director, actors, producer, etc.) and other information of such a nature as to interest a potential consumer of the content.
The splitting module (62), linked to the database (60) and to the transmission module (63), is intended to split the database content (60) into a first and a second part, which are respectively called “reduced content” and “extracted content”. The operation of “splitting” a content consists of reading off the values of bytes of this content, by locating the respective positions of these bytes. The bytes whose values are read off are here chosen in a random manner. These bytes are here deleted from the original content. All of the bytes read off form the extracted content while the original content, having “shed” the bytes read, constitutes the reduced content.
The scrambling module (61), interposed between the database (60) and the splitting module (62), is intended to scramble the content using the scrambling key stored in the database (60) and to supply the corresponding unscrambling key to the transmission module (63).
The transmission module (63), linked to the connection module (64) to the IP network (8), is intended to transmit
The automatic distributor (3) includes a local database (30), a saving module (31), a man-machine interface assembly (32), an extracted contents acquisition module (33), a smartcard slot (34), a connection module (35) to the rights server (4) and a connection module (36) to the IP private network (8). All these elements are connected to a central unit (37) which controls the operation of the automatic distributor (3).
The database (30) contains extracted contents and, for each of these extracts, the identification reference of the original content (that is of the content from where the extract is taken), descriptive information relating to this content, the respective positions in the original content of the bytes read and forming the extracted content, and the unscrambling key of the original content. The database (30) could be external to the automatic distributor (3).
The man-machine interface assembly (32) includes a input keyboard (320), a display screen (321) and a man-machine interface application (322) allowing a user to view on the screen (321) a list of the content for which extracts are stored in the database (30), and to select one contents from this list in order to control the saving of the corresponding extract in the memory of a card placed in the slot (34).
The saving module (31), linked to the database (30), is intended to extract from the database (30) the extract of a content selected by the user using the MMI application (322), the respective positions in the original content, bytes whose values have been read off and which form this extracted content, as well as the identification reference and the unscrambling key of the original content, and to save all this information in a smartcard placed in the slot (34).
The acquisition module (33), linked to the database (30) and to the IP private network (8) by means of the connection module (36), is intended to acquire the extracted contents and information relating to this content (identification reference, descriptive information and positions in the original content of the bytes read), from the supplier (6) over the IP private network (8). When the supplier (6) receives new content, it so informs the automatic distributor (3). The latter then connects to the supplier (6) and retrieves the extracts of the new content. In a variant, the automatic distributor (3) could connect regularly to the supplier (6) in order to retrieve the extracts of the new content. In accordance with another variant, the automatic distributor (3) could have no database. In this event, for each extracted content requested by a user, the automatic distributor would connect to the supplier (6) in order to retrieve the requested extracted content.
The connection module (35) to the rights server (4), linked to the IP connection module (36), allows the automatic distributor (3) to connect to the rights server (4) and thus to put the holder of a smartcard (2) in contact with the operating-rights server (4) in order to enable the holder of the card (2) to acquire operating rights for a content.
The server (4) is intended to supply, to users, operating rights that are associated with content. A right to use a content is here composed of a predetermined period of use, during which the holder of the operating right can freely use the content. In a variant, the operating right could be a predetermined number of uses, that is of restorations of the content. The server (4) includes a user database (40), a module (41) for management of the database (40), a use authorisation module (42), a transaction module (43), an Internet connection module (44) and a module (45) for connection to the IP private network (8).
For each user, the user database (40) contains an identifier and a confidential user code as well as any operating rights for the user associated with one or more contents, with the identification reference of the content or contents concerned.
The use authorisation module (42), linked to the database (40) and to the Internet connection module (44), is intended to verify the validity of operating rights for users associated with content, in order to authorise or interdict the use of this content by these users.
The transaction module (43) is linked to the Internet (9) by means of the Internet connection module (44), and to the IP private network (8) by means of the interface (45). This module (43) is intended to perform transactions for the purchase of operating rights for content by users.
The management module (41) is linked to the database (40), to the connection module (45), and to the transaction module (43). This module (41) records, modifies and deletes information in the database (40), taking account in particular of information supplied by users, by means of the transaction module (43), and regularly updates the operating rights for the users in the database (40).
The Web site (5), hosted by an Internet server (9), is linked to a database (50) containing a multiplicity of reduced content and, for each reduced content, the identification reference of the original content and the descriptive information of the content (title, period, summary, etc.) on the basis of which the users can choose whether or not they wish to acquire this content. The site (5) is arranged so as to present, to visitor terminals, a list of the content for which reduced contents are stored in the database (50) and, for each of these contents, the corresponding descriptive information (title, summary, period, etc.), and to allow the terminals to obtain a copy of this reduced content.
The reading terminal (1) includes a man-machine interface (10), an internet browser (11), a smartcard reader (12), a content reader (13), an internet connection module (14), a reduced-content storage memory (15) and central control unit (15).
The man-machine interface (10) includes an input keyboard (100), a viewing screen (101) and a sound generating device (102). The screen (101) and the equipment (102) are connected to two digital/analogue (DAC) converters (respectively 103 and 104) intended to convert the video data and the audio data into a video signal and an audio signal.
The Internet browser (11), linked to the Internet connection module (14), allows the terminal (1) to navigate on the Internet, and in particular to connect to Web sites.
The card reader (12) is arranged to receive and to read smartcards.
The content reader (13) includes a module (130) for the acquisition of reduced content, a module (131) for the control of reading, a module (132) for the reconstitution and decoding of the content and a man-machine interface module (133).
The acquisition module (130), linked to the memory (15), is intended to acquire reduced content by downloading it from the Web site (5) using the browser (11), and storing this reduced content in the memory (15).
The control module (131), linked to the reconstitution and coding module (132) and to the man-machine interface module (133), is intended to trigger the reading of a content after first performing certain checks, as will be explained later.
In view of the restoration of a content by the terminal (1), the module (132) is intended to reconstitute the content concerned by combination of the corresponding reduced content, stored in the memory (15), and the extract of the content stored in the smartcard placed in the reader (12), and then to unscramble and decode the reconstituted content. The operations of combination, unscrambling and decoding are executed here by a single application, so that it is extremely difficult to gain access from the outside to the intermediate result of each of these operations. In a variant, the three operations (reconstitution, unscrambling and decoding) could be executed by one single-block hardware element. One single-block module could also execute the operations of combination, unscrambling, decoding and digital/analogue conversion of the audio data and/or video data. This same module could also execute the restoration operation on the audio and/or video signal.
The man-machine interface module (133), linked to modules 130 and 131, allows to a user:
All the elements of the terminal (1) are linked to the central unit (15), intended to control the operation of the terminal (1).
A card distributor, namely an automatic distributor or a specialist vendor, provides a user with the smartcard (2) which contains:
The identifier and the confidential user code are transmitted in parallel to the server (4) and stored in the user database (40) of the latter.
The process to control access to a content by the terminal (1) will now be explained, with reference to
With reference to
The stages aiming to acquire and restore a given content (C1), using the terminal (1), will now be described. By definition, we will describe as “C1R” and “EC1” the reduced content and the extract of the content (C1) respectively.
In stage 21, the terminal (1) acquires the reduced content (C1R) by downloading it from the Web site (5). To this end, using the browser (11), the terminal (1) connects to the Web site (5) which provides it with a list of the reduced contents available. Under the control of a user, the terminal (1) selects the reduced content (C1R) and sends to the site (5) a request for acquisition of the reduced content (C1R) selected. On receipt of this request, the site (5) sends to the terminal (1), over the Internet 9, the protected (that is scrambled) selected reduced content, (C1R), the reference identification of the original content (C1), and the descriptive information on this content (C1). The protected reduced content (C1R), as well as the reference identification and the descriptive information on the content (C1), are stored in the memory (131). The protected reduced content (C1R) thus acquired cannot be used on its own to restore the original content (C1), even after unscrambling. In order to restore the original content, the terminal (1) must retrieve the additional extracted content (EC1).
In stage 22, the holder of the smartcard (2) acquires operating rights for the content (C1) from its terminal (1). To this end, with reference to
Stage 23 consists of saving the extracted content (EC1) to the smartcard (2). To this end, with reference to
Since stages 21, 22 and 23 are independent of each other, they can therefore be implemented in any order, unless the saving of an extracted content to the smartcard (2) is subordinated to the prior purchase of operating rights, in order to limit the risk of fraud.
In stage 24, under the control of module 131, terminal 1 carries out checks before restoring the content (C1).
To this end, with reference to
In stage 25, the terminal (1) reads the content (C1). To this end, with reference to
In addition, the terminal (1) regularly verifies the validity of the operating rights for the terminal (1) associated with the content (C1), by calculating the remaining period of use of the content (C1), using a chronometer within the terminal (1) (not shown). After expiry of the received remaining authorised period of use, the terminal (1) inhibits the reading of the content.
In the event of interruption of the operation of the terminal (1) before the end of the authorised period of use, the terminal (1) must reconnect to the rights server (4) and again ask it for an authorisation to use the content (C1).
In the above description, the terminal (1) acquires the reduced content by downloading it from a Web site (5). In a variant, one could envisage that the terminal (1) acquires the reduced content (C1R) in accordance with one of the following methods:
For each extracted content requested by a user, the automatic distributor (3) could provide the user with a memory medium containing the desired extracted content and the information relating to the original content (positions of the bytes read, reference identification, and unscrambling key), instead of saving these data to the personal smartcard of the user. In this event, the automatic distributor could save, in the memory medium, the identifier and the confidential code of the user, supplied by the latter or, in a variant, the user could enter his identifier and his confidential code into the reading terminal. The extracted content could be recorded in the memory medium at the end of manufacture of the said medium.
The automatic distributor (3) could also distribute CD-ROMs or other types of data media, containing reduced content.
The content need not be scrambled, with splitting of the content itself allowing access to the content to be controlled.
Inversely, one could also scramble the extracted content, that is the values of bytes read off and the respective positions of these bytes in the original content. In this event, one could save the corresponding unscrambling key to the smartcard 2.
Instead of integrally retrieving the reduced content before the stage of reconstitution of the original content, the terminal could acquire the reduced content in “streaming” mode, that is in real time as required, from a Web site, and then reconstitute, unscramble, decode and restore the content in real time, as the reduced content is received.
Instead of reading off the values of bytes in a random manner from the original content, one could read off the values of bytes chosen in a targeted manner, so as to read off the essential bytes. In this way, the content is disrupted in a more reliable manner.
Also, instead of deleting the bytes whose values have been read off in the original content, one could modify them by changing their values.
In the above description, the automatic distributor (3) directly retrieves the extracted contents from the supplier (6). In a variant, the automatic distributor (3) connects to the Web site (5) in order to consult the reduced content available and then, when so requested, the Web site (5) indicates to him the address of the supplier of content (6) from which the corresponding extracted contents are available. In fact, one could envisage having several suppliers of content. Likewise, one could envisage several Web sites (5) supplying reduced content.
In order to reduce the risks of fraud, one could subordinate the saving of a extracted content to the smartcard (2) to the prior purchase of operating rights for this content. In the above description, the identification of the user and holder of the smartcard (2) is effected by recognition of his identifier and his confidential code. Of course, one could also arrange for another method of identification.
The automatic distributor (3) could include a module for acquisition of the extracted contents by downloading from an extracted content supplier server, such as server 6.
Number | Date | Country | Kind |
---|---|---|---|
02/01972 | Feb 2002 | FR | national |
Filing Document | Filing Date | Country | Kind | 371c Date |
---|---|---|---|---|
PCT/FR03/00338 | 2/4/2003 | WO | 5/10/2005 |