CN101286189A - Method, apparatus and system for carrying permission rights information - Google Patents
Method, apparatus and system for carrying permission rights information Download PDFInfo
- Publication number
- CN101286189A CN101286189A CNA2007101069644A CN200710106964A CN101286189A CN 101286189 A CN101286189 A CN 101286189A CN A2007101069644 A CNA2007101069644 A CN A2007101069644A CN 200710106964 A CN200710106964 A CN 200710106964A CN 101286189 A CN101286189 A CN 101286189A
- Authority
- CN
- China
- Prior art keywords
- permission
- license info
- destination device
- authority information
- restriction
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Landscapes
- Storage Device Security (AREA)
Abstract
The invention discloses a method for transmitting permission authority information, the method comprises the following steps that: a source device carries out the division of rights in a permission to obtain permission information containing part of the rights in the permission; and the source device sends the permission information to a target device. The invention simultaneously discloses a communication device and a communication system. The usage of the invention can realize the division of the rights in the state of permission and the stateless permission and the transmission of part of the rights in the state of permission and the stateless permission.
Description
Technical field
The present invention relates to the digital copyright management technical field, relate in particular to the method, equipment and the system that transmit permissions information.
Background technology
(Digital Rights Management DRM) mainly by the use of claim limitation and content protecting scheme control figure content, protects content owner's legitimate rights and interests in digital copyright management.The publisher of digital content (Content Issuer, CI) with after the encrypt digital content, the user downloads to the encrypted digital content packet on the terminal device; (Rights Issuer RI) is responsible for distribution and the corresponding licence of digital content to rights issuer, and comprising content key and corresponding authority, this content key is used for decrypts digital content.Terminal device has only and has content data packets (wherein comprising the necessary information of decrypts digital content) and licence simultaneously, could normally use the digital content of being bought.DRM agency (DRMAgent) module in the terminal device utilizes the PKI of terminal device to decrypt license key, obtain content key in the licence with decrypts digital content by this license key, and according to the concrete use of the control of the authority information in licence user to digital content.
Authority in the licence mainly comprises right and restriction two classes.According to the difference of the restriction that is comprised, licence can be divided into state permission and stateless permission.There is state to permit and is meant the permission that includes number of times (count), cumulative time restriction such as (accumulated) state.Stateless is permitted the permission that does not comprise the state restriction under all authority that is meant in the licence or only comprise time period (datetime) restriction.
At present the permission interactive mode that defines in OMA (Open Mobile Alliance, the Open Mobile Alliance) standard has the transfer, copy, derivation of permission etc.In the OMA standard, the object of the transfer of permission, copy, derivation can be permission (Rights) integral body, also can be the part authority among the Rights, and said here part right or restriction are defined as follows:
Partial Rights A subset of a set of Rights，such that the Partial Rights are equally or more
(part authority) restrictive than those in the set.
(subclass of original authority information, this subclass may be equivalent to or less than the set of original authority)
Defined the message flow of Rights global transfer among the SRM TS (SRM technical manual), Fig. 1 shows Device to SRM Move (equipment is to the transfer of the SRM) flow process among the SRM TS, wherein, DRM Agent passes to SRMAgent (SRM agency), the concrete parameter-definition such as the following table of this message with concrete Rights (comprise original RO, status information, REK, reach the relevant descriptive information of other RO) in RightsInstallationRequest (request is installed in permission) message:
| The Parameters parameter | Protection Requirement protects requirement | Description describes |
| Handle ID handle sign | Integrity needs integrity protection | Same Handle ID of the InstallationSetupRequest in Table 6 is identical with InstallationSetupRequest implication in the table 6 |
| Rights Meta Data Rights metadata | Integrity needs integrity protection | Refer to section 5.xxx saves with reference to 5.xxx |
| Rights Object Container permission object container | Integrity needs integrity protection | Refer to section 5.xxx saves with reference to 5.xxx |
| State Information status information | Integrity needs integrity protection | Refer to section 5.xxx.This parameter is not present if the Rights Object Container contains a.Rights Object.that is stateless. saves with reference to 5.xxx.If the permission object that is comprised in the permission object container is stateless, this parameter will be left in the basket. |
| REK authority encryption key | Integrity﹠amp; Confidentiality needs integrality and Confidentiality protection | Refer to section 5.xxx saves with reference to 5.xxx |
As seen, the deficiencies in the prior art are, permission integral body can only be transmitted the transmission of part right in can not realizing permitting.And, according in the existing standard to the definition of status information (State Information), can only be used to represent have the consumption status information of state permission, therefore, utilize existing procedure can't realize the transmission of stateless permission part right.
Summary of the invention
The embodiment of the invention provides a kind of method and system that transmit permissions information, cuts apart the right in state permission and the stateless permission is arranged in order to realization, and to the transmission of part right in state permission and the stateless permission is arranged.
The embodiment of the invention provides a kind of method that transmits permissions information, and the method comprising the steps of:
Source device is cut apart the right in the permission, obtains comprising the License Info of part right in the described permission;
Described source device transmits described License Info to destination device.
The embodiment of the invention also provides a kind of method that merges permissions information, and the method comprising the steps of:
The licence sign of determining local two or more permissions is identical;
Right in described two or more permissions is merged.
The embodiment of the invention also provides a kind of communication facilities, comprising:
First cuts apart module, is used for the right of permission is cut apart, and obtains comprising the License Info of the part right in the described permission;
Communication module is used for transmitting described License Info to destination device.
The embodiment of the invention also provides a kind of communication facilities, comprising:
Determination module is used for determining that the licence sign of local two or more permissions is identical;
First merges module, is used for the right of described two or more permissions is merged.
The embodiment of the invention also provides a kind of communication system, comprising:
Source device is used for the right of permission is cut apart, and obtains comprising the License Info of the part right in the described permission; And, transmit described License Info;
Destination device is used to receive the License Info that described source device transmits.
In the embodiment of the invention, source device is cut apart the right in the permission, obtain comprising the License Info of the part right in the described permission, and transmit described License Info to destination device, can realize there being the right in the permission of state permission and stateless to cut apart, and to have state permission and stateless permit in the transmission of part right.
Description of drawings
Fig. 1 be in the embodiment of the invention equipment among the SRM TS to the permission transfer protocol process flow diagram of SRM;
Fig. 2 is the structural representation of a kind of communication system in the embodiment of the invention;
Fig. 3 is the structural representation of a source device in the embodiment of the invention;
Fig. 4 is in the embodiment of the invention transferring to the part authority information in the stateless permission processing flow chart of destination device;
Fig. 5 exports to the processing flow chart of destination device for part authority information in the state permission will be arranged in the embodiment of the invention;
Fig. 6 identifies the processing flow chart that identical permission merges for source device in the embodiment of the invention with licence;
Fig. 7 is the structural representation of source device or destination device in the embodiment of the invention.
Embodiment
In the embodiment of the invention, right during source device will be permitted (permission) (constraint) is cut apart, obtain comprising the License Info of the part right in this permission, and transmit this License Info to destination device, cut apart the right in state permission and the stateless permission is arranged with realization, and to the transmission of part right in state permission and the stateless permission is arranged.
A kind of structure of communication system comprises as shown in Figure 2 in the embodiment of the invention: source device 200, destination device 201; Wherein, source device 200 is used for the right of permission is cut apart, and obtains comprising the License Info of the part right in this permission; And, transmit this License Info; Destination device 201 is used to receive the License Info that described source device transmits.
The structure of a source device comprises as shown in Figure 3 in the embodiment of the invention: cut apart module 300, communication module 301; Wherein, cut apart module 300, be used for the right of permission is cut apart, obtain comprising the License Info of the part right in this permission; Communication module 301 is used for transmitting this License Info to destination device.
When the right of source device in will permitting cut apart, can also further cut apart the restriction of right correspondence.At this moment, cut apart module 300 and can cut apart module 3000 and second by first and cut apart module 3001 and form, first cuts apart the right that module 3000 is used for cutting apart permission, and second cuts apart the restriction that module 3001 is used to cut apart the right correspondence.First cuts apart module 3000 and second cuts apart the function of module 3001 and can be finished by different modules, also can be finished by same module.
Right and/or restriction during source device can will be permitted according to user's request are cut apart, and right and/or restriction in also can will permitting according to the request of destination device are cut apart.For example, the user can trigger the part authority information of source device in destination device transmission permission, and selects the part authority information of transmission by man-machine interface.Destination device also can trigger the part authority information of source device in its transmission permission, and specifies the part authority information that transmits in triggering message.
Source device is after the request that receives user or destination device, and right and/or restriction in will permitting according to this request are cut apart.The permission here can be the stateless permission, and also can be has the state permission.Corresponding, cutting apart the License Info to be transmitted that obtains can be the part authority information of stateless permission, also can be the part authority information that the state permission is arranged.
Source device, can represented with original permission and its status information cutting apart the License Info to be transmitted that obtains when cutting apart the right in the permission and/or restriction.For the stateless permission, an instantiation is as follows:
The part authority information transmits on (Partial move) preceding original device:
Original RO:
Permission01
Permission02
Permission03
Status information:
Permission01
Permission02
Permission03
The part authority information transmits the RO on the destination device of (Partial move) back:
Original RO:
Permission01
Permission02
Permission03
Status information:
Permission01
Permission03
Wherein, the authority information and the status information of the stateless permission in the source device are in full accord, include right: permission01, permission02, permission03.After the right in this stateless permission is cut apart, obtain License Info to be transmitted, comprising the part authority information in the original permission, be that License Info is after transmitting, destination device only obtains the part authority information in this stateless permission: permission01+permission03 on the source device, and permission02 still is retained in this stateless permission of source device.Certainly, if during (datetime) restriction that includes the time period in the stateless permission, also can cut apart this time period restriction.
As follows to another instantiation that the right in the stateless permission and/or restriction are cut apart:
Original RO:
......
<permission>
<play/>
<display/>
<print/>
</permission>
......
License Info to be transmitted after cutting apart:
<stateInfo>
<play/>
<display/>
</stateInfo>
Wherein, if being cut apart the License Info that obtains, above-mentioned stateless permission is sent to destination device, then after transmitting, only be left the print right in this stateless permission on the source device, and destination device will obtain including the License Info of play and display right.
For the state permission is arranged, an instantiation is as follows:
The part authority information transmits the RO on (Partial move) preceding source device:
Original RO:
Permission01
Constraint01
Permission02
Constraint02
Constraint03
Permission03
Status information:
Permission01
Constraint01
Permission02
Constraint02
Constraint03
Permission03
The part authority information transmits the RO on the destination device of (Partial move) back:
Original RO:
Permission01
Constraint01
Permission02
Constraint02
Constraint03
Permission03
Status information:
Permission01
Constraint01-b
Permission02
Constraint02
Constraint03
Wherein, authority information and status information that the state permission is arranged in the source device are in full accord, include right: permission01, permission02, permission03, and restriction constraint02, the constraint03 of the restriction constraint01 of permission01 correspondence, permission02 correspondence.After right in this being had the state permission and restriction are cut apart, obtain License Info to be transmitted, comprising the part authority information in the original permission, be that License Info is after transmitting, destination device obtains on the source device this part authority information in the state permission: part restriction (the constraint01-b)+permission02 of permission01 correspondence, this has during state permits and another part of permission01 correspondence restriction (constraimt01-a) and permission03 still stay source device.Constraint01-a here and the summation of constraint01-b should with the constraint01 equivalence, even constraint01 is the restriction of number of times (count) or cumulative time (accumulated), and then the summation of the addition of constraint01-a and constraint01-b should equal constraint01; If constraint01 is time period (datetime) restriction, then constraint01-a and constraint01-b should be mutual Uncrossed subclass in the constraint01 time corresponding section.
As follows to another instantiation that has right in the state permission and/or restriction to cut apart:
Original RO:
......
<permission>
<play>
<constraint>
<count>10<count/>
<system>
<context>
<version>1.0<version>
<uid>XYZ</uid>
</context>
</system>
</constraint>
</play>
<print/>
</permission>
......
License Info to be transmitted after cutting apart:
<stateInfo>
<play>
<constraint>
<count>6<count/>
<system>
<context>
<version>1.0<version>
<uid>XYZ</uid>
</context>
</system>
</constraint>
</play>
</stateInfo>
Wherein, be sent to destination device if will be above-mentioned have state to permit to cut apart the License Info that obtains, then after transmitting, on the source device this has and only remainingly in the state permission includes the play right that is restricted to count=4 and the License Info of print right, and destination device will obtain including the License Info of the play right that is restricted to count=6.
For situation about existing in the permission at the right of a plurality of media contents, the right at different media contents can be cut apart, cut apart the License Info that obtains comprising in the described permission at all or part of right of part of media content.An instantiation is as follows:
Original RO:
<o-ex:permission>
<o-ex:asset o-ex:idref＝″Asset-1″/>
<o-ex:asset o-ex:idref＝″Asset-2″/>
<o-dd:display/>
</o-ex:permission>
<o-ex:permission>
<o-ex:asset o-ex:idref＝″Asset-2″/>
<o-dd:print/>
</o-ex:permission>
After above-mentioned permission cut apart, it was as follows to obtain two parts of License Infos respectively:
RO-1 after cutting apart:
......
<o-ex:permission>
<o-ex:asset o-ex:idref＝″Asset-2″/>
<o-dd:display/>
</o-ex:permission>
<o-ex:permission>
<o-ex:asset o-ex:idref＝″Asset-2″/>
<o-dd:print/>
</o-ex:permission>
......
RO-2 after cutting apart:
......
<o-ex:permission>
<o-ex:asset o-ex:idref＝″Asset-1″/>
<o-dd:display/>
</o-ex:permission>
......
Wherein, first＜permission under right (＜display 〉) can be used for two contents (Asset-1, Asset-2) simultaneously, and second＜permission under right (＜print 〉) only can be used for content Asset-2.After permission was cut apart, obtain being respectively applied for two permissions of Asset-1, Asset-2: a permission only comprised the right of corresponding A sset-2, i.e. display and print right; Another permission only comprises the right of corresponding A sset-1, i.e. display right.
Obviously,, the right at whole media contents can be cut apart, cut apart the License Info that obtains comprising in the described permission at the part right of full content for situation about existing in the permission at the right of a plurality of media contents.An instantiation is as follows:
Original RO:
<o-ex:permission>
<o-ex:asset o-ex:idref＝″Asset-1″/>
<o-ex:asset o-ex:idref＝″Asset-2″/>
<o-dd:display/>
<o-dd:print/>
</o-ex:permission>
After above-mentioned permission cut apart, it was as follows to obtain two parts of License Infos respectively:
RO-1 after cutting apart:
......
<o-ex:permission>
<o-ex:asset o-ex:idref＝″Asset-1″/>
<o-ex:asset o-ex:idref＝″Asset-2″/>
<o-dd:display/>
</o-ex:permission>
......
RO-2 after cutting apart:
<o-ex:permission>
<o-ex:asset o-ex:idref＝″Asset-1″/>
<o-ex:asset o-ex:idref＝″Asset-2″/>
<o-dd:print/>
</o-ex:permission>
......
Certainly, for situation about existing in the permission at the right of a plurality of media contents, also the restriction at the right correspondence of different media contents can be cut apart, cut apart the License Info that obtains and comprise in the described permission all or part of right and/or restriction at the part of media content, or at the part right and/or the restriction of whole media contents.
After right during source device will be permitted and/or restriction are cut apart, cut apart the License Info that includes part authority information in the original permission that obtains to the destination device transmission, certainly, source device is that source device allows this License Info is sent to destination device to the precondition that destination device transmits License Info.Source device transmits License Info to destination device can multiple mode, as shifting (move), duplicate (copy), deriving (export) etc.
Cut apart in the License Info to be transmitted that obtains and can comprise: licence sign, original authority information, destination device can with the disabled authority information of authority information, destination device, according to destination device can with authority information be the new permission, the key information that generate of destination device, sign one of them or combination in any.
Wherein, the licence sign is used to identify License Info to be transmitted, and this sign can be consistent with original permission, also can generate a new licence sign corresponding to License Info to be transmitted.
Original authority information is meant the original authority in the permission.For example, original authority information can only be the authority information in the original permission; It also can be original permissions descriptive language (XML RO), if original permissions descriptive language, also can further comprise the signature of rights issuer (RI) in the License Info that transmits to original permission, this signature can be used for verifying original permission integrality and can not distorting property (promptly be used to verify wherein authority information whether with rights issuer generated consistent).
If include the authority information that original authority information and destination device can be used in the License Info that transmits, then destination device can be directly according to should the consumption of available authority information permit, carry original authority information here in the License Info mainly be used to verify original permission integrality and can not distorting property.
If include original authority information and the disabled authority information of destination device in the License Info that transmits, then destination device can calculate described original authority information and the disabled authority information of destination device, obtain authority information and consumption permission that destination device can be used, carry original authority information here in the License Info and mainly be the integrality that is used to verify original permission and can not distorting property.
If include in the License Info that transmits according to destination device can with authority information be destination device generate new permission the time, destination device can directly be consumed the new permission of this generation.
Key information is meant the association key that is used for the enabling decryption of encrypted content, and key information can be the content key plaintext, also can be the content key of encrypting, and also can be other keys that can untie encrypted content indirectly.
In addition, source device can be signed or MAC (message authentication code) to the License Info that transmits, thereby prevents that License Info from being distorted in transport process.
In one embodiment, the treatment scheme that the part authority information in the stateless permission is transferred to destination device comprises as shown in Figure 4:
Step 400, user trigger source device the part authority information in the permission of stateless are transferred to destination device, and select the part authority information that shifted by man-machine interface.
Step 401, source device are cut apart right and/or restriction in local this stateless permission according to user's triggering message, obtain License Info to be transferred.
Step 402, source device will be cut apart the License Info that obtains and be transferred to destination device.This step may comprise repeatedly mutual between source device and destination device.If the License Info that destination device obtains comprises the signature of RI, destination device might also need to verify this signature, has only signature verification to pass through, further the permission of this License Info correspondence of consumption.
After step 403, destination device receive the License Info of source device transfer, according to the consumption of the authority information in this License Info permission.At this moment, source device can't use the part authority that is transferred in the original permission.
In one embodiment, will there be treatment scheme that part authority information in the state permission exports to destination device as shown in Figure 5, comprise:
Step 500, user trigger source device has the part authority information in the state permission to export to destination device with one, and selects the part authority information of being derived by man-machine interface.
Step 501, source device are according to user's triggering message, and this has right and/or restriction in the state permission to cut apart to this locality, obtains License Info to be derived.
At this moment, if the source device support purpose equipment place B of DRM system, source device can be cut apart the License Info that the destination device that obtains can be used according to original permission, and the right expression language generation of the B of DRM system meets the new permission of the B of DRM system, and promptly source device is directly newly permitted the part authority information of representing in the original permission that destination device can use with one.
Step 502, source device will be cut apart the License Info that obtains and be transferred to destination device.This step may comprise repeatedly mutual between source device and destination device.If the License Info that destination device obtains comprises the signature of RI, destination device might also need to verify this signature, has only signature verification to pass through, further the permission of this License Info correspondence of consumption.
After step 503, destination device receive the License Info of source device transfer, according to the consumption of the authority information in this License Info permission.At this moment, source device can't use the part authority that is transferred in the original permission.
At this moment, if the License Info that the source device that destination device receives is derived comprises the authority information that original authority information+destination device can be used, then destination device need be by the mapping relations of A of DRM system and the B of DRM system right expression language, the format conversion of original authority information and available authority information is become the form of the B of DRM system available rights information and the corresponding permission of consumption;
If the License Info that the source device that destination device receives is derived comprises original authority information and the disabled authority information of destination device, destination device can calculate available authority information according to this original authority information and disabled authority information earlier, and then this available authority information carried out format conversion, obtain meeting the available authority information of the B of DRM system authority information form, and the corresponding permission of consumption;
If the License Info that the source device that destination device receives is derived comprises the new permission that meets the B of DRM system authority information form that source device generates, then destination device can directly be consumed this new permission.
During part authority information in transmitting permission, be sent to the licence sign that comprises in the License Info on the destination device may with original license identify identical, also may be different.Because the permission that is sent on the destination device may be transferred back to source device once more, under the identical situation of licence sign, source device can merge the identical permission of this licence sign.
In one embodiment, source device identifies treatment scheme that identical permission merges as shown in Figure 6 with licence, comprising:
Step 600, equipment 1 are sent to equipment 2 with the part authority information that a local licence is designated the licence of lid001.After transmission is finished, will exist two parts of licences to be designated lid001 but the mutually different License Info of authority information on equipment 1 and the equipment 2 respectively.For convenience of description, the part authority information is after transmitting in will permitting here, and the permission on the equipment 1 is called lid001-A, and the permission on the equipment 2 is called lid001-B, and the sign of the licence on equipment 1 and the equipment 2 is lid001.
Step 601, user have used (all not ruing out of) after permission lid001-B a period of time on the equipment 2, should permit again that slave unit 2 sent back equipment 1.After transmission is finished, exist two parts of licences to be designated the permission of lid001 on the equipment 1 simultaneously.
Step 602, equipment 1 are when determining that two parts of licences signs of local existence are the permission of lid001, and the prompting user can permit merging, if the user agrees to merge, and then equipment 1 these two permissions of merging.
Specifically when merging, equipment 1 is at first in determining lid001-B and lid001-A after the right of existence corresponding to same group of a plurality of digital contents, promptly exist top level＜permission, this right and corresponding restriction are merged, promptly directly with this top level＜permission under the corresponding constraint of different permission items (as play, display, print etc.) merge respectively, the authority after the merging should be the union of original two authorities.Secondly, after having right among equipment 1 definite lid001-B and the lid001-A corresponding to same digital content, promptly＜permission under＜asset idref attribute when identical, this right and corresponding restriction are merged, be about to should＜permission down different permission items (as play, display, print etc.) accordingly constraint merge respectively, the authority after the merging should be the union of original two authorities.Then, equipment 1 merges other right that exists among lid001-B and the lid001-A and corresponding restriction.
It is as follows that source device identifies the instantiation that identical permission merges with licence:
Original RO1:
<rights>
<o-ex:context>
<o-dd:version>2.0</o-dd:version>
<o-dd:uid>RightsObjectID</o-dd:uid>
</o-ex:context>
......
<o-ex:permission>
<o-dd:play>
<constraint>
<count>10<count/>
</constraint>
</0-dd:play>
</o-ex:permission>
<o-ex:permission>
<o-ex:asset o-ex:idref＝″Asset-1″/>
<o-dd:print/>
</o-ex:permission>
<o-ex:permission>
<o-ex:asset o-ex:idref＝″Asset-2″/>
<o-dd:print/>
</o-ex:permission>
......
Original RO2:
<rights>
<o-ex:context>
<o-dd:version>2.0</o-dd:version>
<o-dd:uid>RightsObjectID</o-dd:uid>
</o-ex:context>
......
<o-ex:permission>
<o-dd:play>
<constraint>
<count>5<count/>
</constraint>
</0-dd:play>
<o-dd:display/>
</o-ex:permission>
<o-ex:permission>
<o-ex:asset o-ex:idref＝″Asset-2″/>
<o-dd:edit/>
</o-ex:permission>
......
RO after original RO1 and original RO2 merge:
<rights>
<o-ex:context>
<o-dd:version>2.0</o-dd:version>
<o-dd:uid>RightsObjectID</o-dd:uid>
</o-ex:context>
......
<o-ex:permission>
<o-dd:play>
<constraint>
<count>15<count/>
</constraint>
</0-dd:play>
<o-dd:display/>
</o-ex:permission>
<o-ex:permission>
<o-ex:asset o-ex:idref＝″Asset-1″/>
<o-dd:print/>
</o-ex:permission>
<o-ex:permission>
<o-ex:asset o-ex:idref＝″Asset-2″/>
<o-dd:print/>
<o-dd:edit/>
</o-ex:permission>
......
Wherein, earlier the number of times restriction count=5 under the Play right among restriction count=10 of the number of times under the Play right among the RO1 and the RO2 is merged into the restriction of the number of times under Play right count=15 among the RO; Again with RO1＜asset〉idref be right print and the RO2＜asset of Asset-2 idref be that the right edit of Asset-2 merges into RO＜asset idref be right print and the edit of Asset-2; Again with RO1＜asset〉idref be right print and the RO2＜asset of Asset-1 idref be that the right print of Asset-1 merges into RO＜asset idref be the right print of Asset-1, display right among the RO2 is merged into display right among the RO.Certainly, the order that merges can be adjusted arbitrarily, for example, earlier other right and the corresponding restriction that exists in two permissions merged, again right and the corresponding restriction corresponding to same digital content that all exists in two permissions merged, at last right and the corresponding restriction corresponding to same group of a plurality of digital contents that all exists in two permissions merged.
The permission number that merges can be two, also can certainly, need to satisfy the condition that merges for more than two, and the licence that comprises in the permission promptly to be combined sign is identical.In the enforcement, source device also can be divided into a plurality of permissions with original permission, transmits part authority information in the original permission to destination device several times.In the case, destination device also can merge a plurality of permissions that include identical licence sign that receive.
Based on same inventive concept, the embodiment of the invention provides a source device or destination device, and its structure comprises as shown in Figure 7: determination module 700, merging module 701; Wherein, determination module 700 is used for determining that the licence sign of local two or more permissions is identical; Merge module 701, be used for the right of described two or more permissions is merged.
Owing to when source device or the right of destination device in will permitting merge, can also further merge the restriction of right correspondence.At this moment, merging module 701 can be made up of the first merging module 7010 and the second merging module 7011, and first merges the right that module 7010 is used for merging permission, and second merges the restriction that module 7011 is used to merge the right correspondence.First merges module 7010 can be finished by different modules with second function that merges module 7011, also can be finished by same module.
One of ordinary skill in the art will appreciate that all or part of step in the foregoing description method is to instruct relevant hardware to finish by program, this program can be stored in the computer-readable recording medium, and storage medium can comprise: ROM, RAM, disk or CD etc.
In the embodiment of the invention, source device is cut apart right and/or restriction in the permission, obtain License Info to be transmitted, and provide License Info described to be transmitted to destination device, can realize there being the right in state permission and the stateless permission to cut apart, and to the transmission of part right in state permission and the stateless permission is arranged, also can realize the restriction that the right correspondence in state permission and the stateless permission is arranged is cut apart, and to the transmission of the corresponding restriction of part right in state permission and the stateless permission is arranged.
Obviously, those skilled in the art can carry out various changes and modification to the present invention and not break away from the spirit and scope of the present invention.Like this, if of the present invention these are revised and modification belongs within the scope of claim of the present invention and equivalent technologies thereof, then the present invention also is intended to comprise these changes and modification interior.
Claims (25)
1, a kind of method that transmits permissions information is characterized in that the method comprising the steps of:
Source device is cut apart the right in the permission, obtains comprising the License Info of part right in the described permission;
Described source device transmits described License Info to destination device.
2, the method for claim 1, it is characterized in that, described permission is during at the permission of a plurality of media contents, and the described License Info that obtains after cutting apart comprises in the described permission all or part of right at the part of media content, or at the part right of full content.
3, the method for claim 1 is characterized in that, when described source device is cut apart the right in the permission, also further cuts apart the restriction of right correspondence.
As claim 1,2 or 3 described methods, it is characterized in that 4, described source device is cut apart right and/or restriction in the permission according to the request of user or described destination device.
As claim 1,2 or 3 described methods, it is characterized in that 5, described permission is the stateless permission or the state permission is arranged.
6, method as claimed in claim 3 is characterized in that, the restriction in the described permission comprises number of times, cumulative time, time period one of them or combination in any.
7, the method for claim 1 is characterized in that, described License Info comprises authority information, the key information that licence sign, original authority information, destination device can be used;
Or described License Info comprises licence sign, original authority information, the disabled authority information of destination device, key information;
Or, described License Info comprise licence sign, according to destination device can with authority information be new permission, the key information that destination device generates.
8, method as claimed in claim 7 is characterized in that, described License Info also comprises signature.
9, method as claimed in claim 7 is characterized in that, after described destination device receives the License Info of described source device transmission, according to the consumption of the authority information in this License Info permission.
10, method as claimed in claim 9 is characterized in that, when the License Info that described destination device receives comprises the authority information that original authority information and destination device can use, directly according to should the consumption of available authority information permitting;
Or, when the License Info that described destination device receives comprises the disabled authority information of original authority information and destination device, obtain authority information and the consumption permission that destination device can be used according to described original authority information and the disabled authority information of destination device;
Or, the License Info that described destination device receives comprise according to destination device can with authority information be destination device generate new permission the time, directly consume the new permission of this generation.
11, as claim 1,2 or 3 described methods, it is characterized in that, described destination device returns to described source device with License Info, the licence sign that comprises in the License Info that described source device determine to receive and the licence of local permission identify when identical, with the right in the License Info of described reception and the described local permission and/or limit merging.
12, method as claimed in claim 11 is characterized in that, right during License Info and described this locality of described reception are permitted and/or restriction comprise step when merging:
After determining all to exist in the License Info of described reception and the described local permission right, this right and corresponding restriction are merged corresponding to same group of a plurality of digital contents;
After determining all to exist in the License Info of described reception and the described local permission right, this right and corresponding restriction are merged corresponding to same digital content;
Other right that exists in the License Info of described reception and the described local permission and corresponding restriction are merged.
13, the method for claim 1 is characterized in that, describedly is transmitted as transfer, derives or duplicate.
14, method as claimed in claim 13, it is characterized in that, described being transmitted as when deriving, if the License Info that described destination device receives and the form of local authority information are inequality, then described destination device is with the form of the format conversion cost ground authority information of the described License Info that receives.
15, a kind of method that merges permissions information is characterized in that the method comprising the steps of:
The licence sign of determining local two or more permissions is identical;
Right in described two or more permissions is merged.
16, method as claimed in claim 15 is characterized in that, when the right in described two or more permissions is merged, also further merges the restriction of right correspondence.
17, as claim 15 or 16 described methods, it is characterized in that, right and/or restriction in described two or more permissions comprised step when merging:
After determining all to exist in described two or more permissions right, this right and corresponding restriction are merged corresponding to same group of a plurality of digital contents;
After determining all to exist in described two or more permissions right, this right and corresponding restriction are merged corresponding to same digital content;
Other right and the corresponding restriction that exist in described two or more permissions are merged.
As claim 15 or 16 described methods, it is characterized in that 18, described two or more permissions are for to cut apart the permission that obtains to right in the original permission and/or restriction.
19, a kind of communication facilities is characterized in that, comprising:
First cuts apart module, is used for the right of permission is cut apart, and obtains comprising the License Info of the part right in the described permission;
Communication module is used for transmitting described License Info to destination device.
20, equipment as claimed in claim 19 is characterized in that, also comprises:
Second cuts apart module, is used for further cutting apart the restriction of right correspondence when described first cuts apart right that module will permit and cut apart.
21, a kind of communication facilities is characterized in that, comprising:
Determination module is used for determining that the licence sign of local two or more permissions is identical;
First merges module, is used for the right of described two or more permissions is merged.
22, equipment as claimed in claim 21 is characterized in that, also comprises:
Second merges module, is used for further merging the restriction of right correspondence when the described first merging module merges the described right that two or more are permitted.
23, a kind of communication system is characterized in that, comprising:
Source device is used for the right of permission is cut apart, and obtains comprising the License Info of the part right in the described permission; And, transmit described License Info;
Destination device is used to receive the License Info that described source device transmits.
24, system as claimed in claim 23 is characterized in that, when described source device is cut apart the right in the permission, also further cuts apart the restriction of right correspondence.
25, as claim 23 or 24 described systems, it is characterized in that, described destination device returns to described source device with License Info, the licence sign that comprises in the License Info that described source device determine to receive and the licence of local permission identify when identical, with the right in the License Info of described reception and the described local permission and/or limit merging.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CNA2007101069644A CN101286189A (en) | 2007-04-11 | 2007-05-14 | Method, apparatus and system for carrying permission rights information |
Applications Claiming Priority (3)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN200710100582 | 2007-04-11 | ||
| CN200710100582.0 | 2007-04-11 | ||
| CNA2007101069644A CN101286189A (en) | 2007-04-11 | 2007-05-14 | Method, apparatus and system for carrying permission rights information |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN101286189A true CN101286189A (en) | 2008-10-15 |
Family
ID=40058391
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CNA2007101069644A Pending CN101286189A (en) | 2007-04-11 | 2007-05-14 | Method, apparatus and system for carrying permission rights information |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN101286189A (en) |
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2014187077A1 (en) * | 2013-05-21 | 2014-11-27 | 北大方正集团有限公司 | Server, system and digital right merging method |
| CN105959406A (en) * | 2016-06-27 | 2016-09-21 | 乐视控股（北京）有限公司 | User right splitting method and system |
-
2007
- 2007-05-14 CN CNA2007101069644A patent/CN101286189A/en active Pending
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2014187077A1 (en) * | 2013-05-21 | 2014-11-27 | 北大方正集团有限公司 | Server, system and digital right merging method |
| CN105959406A (en) * | 2016-06-27 | 2016-09-21 | 乐视控股（北京）有限公司 | User right splitting method and system |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN102057382B (en) | Temporary domain membership for content sharing | |
| US8983872B2 (en) | Apparatus and method for digital rights management | |
| CN101379756B (en) | Method of transferring digital rights | |
| CN101821746B (en) | Device and method for backup of rights objects | |
| JP5355695B2 (en) | Technology for content management using group permissions | |
| US20060282391A1 (en) | Method and apparatus for transferring protected content between digital rights management systems | |
| US7630940B2 (en) | Content sharing system and method | |
| CN102918864B (en) | For managing the method and system of the encryption key of broadcast service | |
| EP1586186A2 (en) | Categorization of host security levels based on functionality implemented inside secure hardware | |
| EP1805638A1 (en) | Contents encryption method, system and method for providing contents through network using the encryption method | |
| CN100471110C (en) | Method and apparatus for managing digital rights using portable storage device | |
| CN104221023A (en) | Digital rights management | |
| CN101425112B (en) | Digital exequatur sending system and digital work decipher operation method | |
| US20080313085A1 (en) | System and method to share a guest version of rights between devices | |
| US20090180621A1 (en) | Adaptive secure authenticated channels for direct sharing of protected content between devices | |
| CN101043403A (en) | Field based digital copyright protecting family network system | |
| US8391497B2 (en) | Method for importing rights object and rights issuer | |
| WO2006065012A1 (en) | System for issuing licenses to protect multi-level distributed digital contents and method thereof | |
| CN101286189A (en) | Method, apparatus and system for carrying permission rights information | |
| US20090245514A1 (en) | Forensic decryption tools | |
| CN101184087A (en) | Field transforming method, equipment and system | |
| CN101465845A (en) | Method and apparatus for transferring permission | |
| JP2003216500A (en) | Digital copyright managing system | |
| CN101089865B (en) | Method, device and system for field grant transfer | |
| CN101727547A (en) | Device and method used for protecting DRM license file |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C02 | Deemed withdrawal of patent application after publication (patent law 2001) | ||
| WD01 | Invention patent application deemed withdrawn after publication |
Open date: 20081015 |