CN101196971A - A method and system for implementing authorization management on digital content - Google Patents

Abstract

The invention discloses a method and system for realizing authorization management of digital content, which is applied in the technical field of digital rights management. The index ID of the segment. In the authorization license file, the authorization control is carried out for segments according to business requirements. When the user uses the reading/video software to operate, the software first checks whether the user has the corresponding authority in the authorization license file according to the segment number of the operation object to be obtained. If the user has the corresponding authority, the user is allowed to continue to complete the operation. Use this piece of digital content; if you do not have the corresponding permission, stop the operation on this piece and prompt the user.

Description

A method and system for implementing authorization management on digital content

technical field

The invention relates to the field of digital rights management technology (digital rights management, DRM), in particular to a method and system for implementing authorization management of digital content.

Background technique

In digital content, with the further enrichment and development of applications, there are more and more requirements for different authorization management strategies for different parts of digital content. Adding printing permissions to a certain picture in a book, or controlling a certain segment in an audio and video file, etc. These new business requirements require us to have more precise control over the authorization strategy. At present, for streaming media in digital content, the strategy adopted is to directly control the playback time range in the rights description, and the strategy adopted for print media is to extract some content that requires special control into a separate file , to carry out corresponding authorization control, that is, the granularity of control is based on the entire file. The excerpt means reprocessing and making files, and once the business changes, the files need to be remade, which is less flexible, which affects business development in terms of efficiency, and the splitting and combination of multiple files will cause certain obstacles to users.

Contents of the invention

Embodiments of the present invention provide a method and system for implementing authorization management on digital content, so that digital content can be operated on segments during the authorization process, and more fine-grained control on digital content is realized.

A method for realizing authorization management of digital content, comprising:

Segment digital content and generate digital files; and perform segment operation authority constraints to generate corresponding authorization license files;

When executing the digital file, according to the authorization license file, each segment is operated according to its corresponding operation authority constraint.

According to the above method of the present invention, the segmenting of the digital content specifically includes:

In the digital content, an index table is added, and a segment identifier is stored in each record of the index table and the digital content contained in each segment is indicated.

According to the above-mentioned method of the present invention, specifying the digital content included in each paragraph specifically includes:

use the object number in the digital content to indicate the beginning and end of the digital content contained in the segment; or

List the object number to which each segment points in the index table; or

Use offsets relative to the beginning of the file to indicate the starting and ending positions of the digital content contained in each segment.

According to the above method of the present invention, the digital contents contained in each segment are all different, or partly the same.

According to the above-mentioned method of the present invention, the operation authority restriction of the performing segment is used to generate a corresponding authorization license file, specifically:

Describe the type of operation allowed by the segment, and the corresponding number of allowed operations and/or the time period for which the operation is allowed, and generate the authorization file.

According to the above method of the present invention, said generating digital files and corresponding authorization license files also includes:

Add the storage location identification of the authorized license file in the digital file.

According to the above method of the present invention, after generating the digital file and the corresponding authorization license file, it also includes:

Publish digital files and corresponding authorization license files.

According to the above method of the present invention, when the digital file is executed, according to the authorization license file, each segment is operated according to its corresponding operation authority constraints, including:

Operate the segment in the digital file by the user software, and determine whether the current segment has the corresponding operating authority according to the authorization license file, if so, continue to complete the operation of the segment; if not, stop the operation of the segment segment operation and prompt the user.

According to the above method of the present invention, the operation of the segment in the digital file by the user software specifically includes:

the user software operates on each segment in sequence beginning with the first segment of said digital file; or

The user software operates on each authorized segment starting with any authorized segment in the digital file.

According to the above method of the present invention, said determining whether the current segment has corresponding operation authority according to the authorized license file includes:

determining whether the current segment is authorized in the authorized license file; and

Determine whether the operation of the current segment exceeds the allowable range of the operation authority constraints, including whether the number of operations has exceeded the authorized number of operations and/or whether the operation time has exceeded the authorized operation time.

According to the above method of the present invention, before the user software operates on the segments in the digital file, it also includes:

Judging whether the digital file is a file protected by digital rights management technology DRM, if so, then obtain the authorization license file, and determine the operation authority of each section according to the authorization license file; if not, directly Digital file segments are manipulated.

According to the above method of the present invention, the operation of the digital file by the user software includes: the client that stores the user software logs in to the issuer that issues the digital file and authorizes the license file to perform online operations; or

The client end storing the user software first downloads the digital file and the authorization license file to the local area before performing operations.

According to the above method of the present invention, the digital content includes streaming media and plane media.

A digital content publishing terminal, including: a production module and a publishing module;

The production module is used to segment the digital content, restrict the operation authority of the segment, and generate a digital file and a corresponding authorization license file;

The issuing module is used to issue the digital file and the corresponding authorized license file.

In the above-mentioned digital content distribution terminal of the present invention, the production module includes:

The first production submodule is used to generate an index table, store a segment identifier in each record of the index table and indicate the digital content contained in each segment;

The second production sub-module is used to describe the type of operations allowed for each segment and the corresponding allowed number of operations;

The third production sub-module is used to produce digital files and corresponding authorization license files according to the digital content to be released and the output of the first production sub-module and the second production sub-module, and add the authorization license to the produced digital files ID of the storage location of the certificate file.

A digital content receiver, including a judging module and an operating module;

The judging module is used to determine whether the segment in the digital file has operation authority according to the authorized license file;

The operation module is configured to operate the segments in the digital file according to their corresponding operation authority constraints.

In the digital content receiving end of the present invention, the judging module includes a first judging submodule and a second judging submodule;

The first judging submodule is used to judge whether the current segment has the requested operation type; if so, notify the second judging submodule; otherwise, notify the operating module to stop operating the current segment;

The second judging submodule is used to judge whether the operation of the current segment exceeds the allowable range of operation authority constraints, and if so, notify the operation module to stop operating the current segment; otherwise, notify the operation module to perform corresponding operations on the current segment. operate.

An authorization management system, including: a publishing end and a receiving end;

The publishing end is used for segmenting the digital content, restricting the operating authority of the segment, generating and publishing the digital file and the corresponding authorization license file;

The receiving end is configured to execute the digital file issued by the issuing end, and operate each segment according to its corresponding operating authority constraints according to the authorization license file.

The embodiment of the present invention provides a method and system for more fine-grained protection of digital content, that is, digital content (whether it is streaming media or print media) is divided into segments, numbered in units of segments, and an index table is added , to carry out corresponding authorization control for the segment, effectively avoiding file splitting and combination; and because the content of the segment can be divided according to business needs, and its scope can also be crossed and repeated, realizing more flexible control of the digital content , which meets the flexible requirements of the business and improves the efficiency of business processing; at the same time, this method of authorization management for digital content segments can be applied to existing file formats, and has good versatility for files of different formats.

Description of drawings

FIG. 1 is a flow chart of a digital content segmentation authorization management method in Embodiment 1 of the present invention;

FIG. 2 is a flow chart of a digital content segment authorization management method in Embodiment 2 of the present invention;

FIG. 3 is a schematic structural diagram of a digital content distribution terminal in an embodiment of the present invention;

FIG. 4 is a schematic structural diagram of a digital content receiving end in an embodiment of the present invention.

Detailed ways

Utilize the corresponding digital content (including print media and streaming media) production tools, according to the processing capacity of the file format and business needs, control the authority of the digital content in units of segments, and when the user uses the digital content, according to the authorization license file Use permissions in the corresponding operation.

Embodiment one:

The flow of the digital content segmentation authorization management method provided by Embodiment 1 of the present invention is shown in Figure 1, including the following steps:

Step S101: making a digital file.

Segment digital content and add an index table to the digital file, including segment numbers and what each segment points to.

For DRM-protected digital content, it is also necessary to add the storage location identifier of the authorized license file to the digital file.

When segmenting digital content, different forms of division can be carried out according to needs, such as:

(1) For existing format documents with object numbers, such as CEB documents, directly use the object number of the page number for segmentation, for example, the object number of the first page is 01, the object number of the second page is 10, and the object number of the third page The object number is 11, ......; Correspondingly, the first page is used as the first paragraph, the second page is used as the second paragraph, and the third page is used as the third paragraph, .........; then The index table is shown in Table 1 below:

Table 1

paragraph number starting point end position 1 01 01 2 10 10 3 11 11 .... .... ....

In particular, the index table may not be inserted into the above-mentioned existing document with the object number, and the page number or the object number is directly used as the segment number (that is, the segment identifier) when the user software operates on the existing document.

Generally, by adding corresponding instruction codes in the user software, instruct the user software to directly use the page number or object number as the segment number to perform corresponding operations when it finds that there is no index table in the file.

(2) For the existing format document mentioned in (1), the content contained in each paragraph can also be expressed as shown in Table 2, and its scope can overlap or repeat.

Table 2

paragraph number the object pointed to 1 01, 10 2 10 3 10, 11 .... ....

(3) For digital content without an object number, use the offset relative to the beginning of the file to segment, and its index table is shown in Table 3:

table 3

paragraph number Starting position (expressed as an offset relative to the beginning of the file) End position (expressed as an offset relative to the beginning of the file) 1 0x0000 0x1000 2 0x1000 0x2000 3 0x2000 0x3000 .... .... ....

(4) For digital content without an object number, the content contained in each segment can also be interleaved and repeated.

Step S102: Perform authorization control for segments. Specifically: authorize digital content in units of segments, and create corresponding authorization license files; according to business needs, add segment constraint descriptions to the authorization license file, and specify the segment identification (ie, segment number) and scope involved And the number (or time) of authorization.

In particular, when there are multiple authorizations for the content of a segment, the one with the least number of authorizations shall prevail.

It may also include: encrypting the content of each segment, so as to further ensure the security of its segment authorization.

Step S103: Publish the digital file and its corresponding authorized license file.

Step S104: the user software operates on the digital file.

When the user software operates the digital file, it can read or play online, or download the digital file and the authorized license file to the local for reading or playing.

Step S105: the user software identifies the file format, and judges whether the digital file is a file protected by DRM, if yes, execute step S107, and if not, execute step S106.

Step S106: the user software can continue to operate on the digital file.

Step S107: The user software searches for the authorized license file at the specified location according to the storage location identifier of the authorized license file stored in the digital file.

Step S108: The user software parses the authorization license file to obtain the authorized segment number, scope and authorized times.

Step S109: The user software starts to perform operations from the first segment, and judges whether the current segment (namely the first segment) has been granted the corresponding usage authority, if yes, execute step S110, if not, execute step S111.

Step S110: the user software judges whether the number of times that this section is used has reached the maximum number of times allowed by this section (or whether it has exceeded the time allowed by this section), if not, then add 1 to the use times record of this section, and turn to Go to step S112, if yes, execute step S111.

Step S111: the user software stops the operation of the segment and prompts the user that he does not have the corresponding right to use the segment of digital content, and then executes step S113.

Step S112: the user software continues to complete the operation on the segment and use the segment of digital content; then execute step S113.

Step S113: The user software continues to operate on the next segment, and repeats the above judgment operation process until all the operations of all segments in the file are completed.

The following example illustrates:

Example 1: Realize the viewing authority of pages 2 to 5 in a certain existing format document.

When using the production tool to produce digital files, each page of the existing format document (such as: CEB document) is directly used as a paragraph to produce digital files. At the same time, because this file is protected by DRM, when making it, add at the end of the file Identifier of the storage location of the authorized license file.

Since there are page numbers in the CEB document, and each page corresponds to an object number, for example, the object number of the first page is 01, the object number of the second page is 10, the object number of the third page is 11, .. .....; the page is divided into sections, for example: take the first page as the first paragraph, the second page as the second paragraph, the third page as the third paragraph, ......; Then the index table is shown in Table 4 below:

Table 4

paragraph number starting point end position

1 01 01 2 10 10 3 11 11  …  … ....

To realize that pages 2 to 5 of the CEB document can be viewed, use the authorization tool to add the following code to the authorization license file of the CEB document:

<view>

<constraint>

<segment seg=2>-1</segment>

<segment seg=5>0</segment>

</constraint>

</view>

Among them: the label view indicates the reading authority, the label constraint indicates the constraint, and the label segment indicates the segment authorization. The attribute seg indicates the specific authorization start segment number, and its value indicates the number of authorizations. 0 means no authorization, and -1 means unlimited authorization.

The above-mentioned code added in the authorized license file indicates that after paragraph 2, there is an unlimited number of reading rights until the termination of paragraph 5.

The issuer sends out the prepared digital file of the CEB document and its authorized license file through the network and other media.

When the user uses the reading software to open the CEB file, the user software first judges whether the CEB file is protected by DRM, if not, it can continue to operate and use the CEB file; if so, the user software searches for the authorization license file.

The user software analyzes the authorization license file, and determines that the range of segments allowed to be used is 2-5 segments, and the number of times allowed to be consulted is not limited.

The user software operates the first paragraph (that is, the first page) of the CEB document. According to the analysis result of the authorized license file, since the first paragraph (that is, the first page) has not been granted the corresponding operation authority, continue to operate on the first paragraph. 2 paragraphs (that is, the second page) to operate, since the second paragraph (that is, the second page) has the corresponding use rights, then display the second page to the user, and then continue to operate on the third page, ..... ., until pages 2-5 are displayed to the user. When the fifth page is displayed, continue to the sixth paragraph. Since the sixth paragraph (that is, the sixth page) to the end is not within the scope of authorization, the reading software will prompt the user accordingly and will no longer display the corresponding CEB document. content.

Example 2: Realize that the content of the 20th to 30th minute of the video file cannot be watched, and the rest is not limited.

Make the video content into a video file by using the production tool, and make the digital file by taking the traffic of the digital content within the playing range of each minute as a segment, and add the storage location identification of the authorized license file at the end of the file.

Since the video file has no ready-made identifiers such as the object number, the offset relative to the beginning of the file is used to segment the video file. For example, the content flow of the video file is 1M per minute, and its index table is shown in the table 5 shows:

table 5

paragraph number Starting position (expressed as an offset relative to the beginning of the file) End position (expressed as an offset relative to the beginning of the file) 1 0x00000000 0x10000000 2 0x10000000 0x20000000 3 0x20000000 0x30000000 .... .... ....

To realize that the video content cannot be watched within the range of 20 minutes to 30 minutes, use the authorization tool to add the following code to the authorization license file of the video content:

<display>

<constraint>

<segment seg＝0>-1</segment>

<segment seg=20>0</segment>

<segment seg=30>-1</segment>

</constraint>

</display>

Among them: the label display indicates the playback permission, and the rest are the same as Example 1.

The above-mentioned code added in the authorized license file indicates that segments 0-20 have unlimited playback rights, segments 20-30 have no playback rights, and segments after 30 also have unlimited playback rights.

The publishing end sends out the produced video files and the corresponding authorization license files through the network and other media.

When the user uses the playback software to play the video file, the user software first judges whether the video file is protected by DRM, if not, then you can continue to operate and use the video file; if so, the user software searches for the authorization license file.

The user software analyzes the authorization license file, and determines that the range of segments that are not allowed to be used in the video file is 20-30 segments, and other segments can be played, and the number of times of playback is not limited.

When the user uses the playback software to play the video file, the content from the 1st minute to the 19th minute (that is, paragraph 1 to paragraph 19) can be played. When playing to the 20th minute, because this section has no playback permission, the content of this section cannot be used by the user. The system prompts the user that the user does not have the permission to use, and then continues to execute the next section until the 30th section is executed, and the 31st section is executed. can only be played.

Embodiment two:

When user software operates on digital files, it can only operate on authorized segments. The process is shown in Figure 2, and the specific execution steps are as follows:

Step S201: making a digital file.

Segment digital content and add an index table to the digital file, including segment numbers and what each segment points to. As described in Embodiment 1, there may be many forms for dividing paragraphs, which will not be repeated here.

For DRM-protected digital content, it is also necessary to add the storage location identifier of the authorized license file to the digital file.

Step S202: Perform authorization control for the segment. Specifically: authorize the digital content in units of segments, and create corresponding authorization license files; according to business needs, in the authorization license file, add segment constraint descriptions, and indicate the number of segments involved or the range of segments involved, as well as the The number of authorizations for this segment.

In particular, when there are multiple authorizations for the content of a segment, the one with the least number of authorizations shall prevail.

It also includes encrypting the content of each segment, so as to further ensure the security of its segment authorization.

Step S203: Publish the digital file and its corresponding authorized license file.

Step S204: The user software operates on the digital file.

When the user software operates the digital file, it can read or play online, or download the digital file and the authorized license file to the local for reading or playing.

Step S205: the user software recognizes the file format, and judges that the digital file is a file protected by DRM. If yes, execute step S207; if not, execute step S206.

Step S206: the user software can continue to operate on the digital file.

Step S207: The user software searches for the authorized license file at the specified location according to the storage location identifier of the authorized license file stored in the digital file.

Step S208: The user software parses the authorization license file to obtain the authorized segment number, scope and authorized times.

Step S209: The user software starts to perform operations from any authorized segment, and judges whether the number of times the segment has been used has reached the maximum number of times allowed for the segment, if yes, execute step S210, if not, use the segment Add 1 to the record of times, and execute step S211.

Step 210: the user software stops operating on the segment and prompts the user that he no longer has the right to use the segment of digital content, and then executes step 212.

Step 211: the user software continues to complete the operation and use the piece of digital content; then execute step 212.

Step S212: The user software continues to operate on the next authorized segment, and repeats the above judgment operation process until all operations on all authorized segments in the file are completed.

The following example illustrates:

Example 3: Realize the first chapter in an e-book to be read 10 times for free

The content of the e-book is made into an e-book file by using a production tool, and one page of the e-book is taken as a paragraph, and an index table and an identification of the storage location of the authorized license file are added.

To read the first chapter of the e-book 10 times for free, and it is known that the first chapter of the e-book contains 5 to 20 paragraphs, use the authorization tool to add the following code to the authorization license file of the e-book:

<view>

<constraint>

<segment seg=5>10</segment>

<segment seg=20>0</segment>

</constraint>

</view>

The added above code in the authorization license file indicates that the section starting from section 5 and ending at section 20 can be read 10 times.

The publishing end sends out the prepared e-book file and the corresponding authorization license file through media such as the network.

When the user uses reading software to open the e-book file, the user software first judges whether the e-book is protected by DRM, if not, it can continue to operate and use the e-book file; if so, the user software searches for the authorization license file.

The user software analyzes the authorization license file, and determines that the range of paragraphs allowed to be used in the e-book file is paragraph 5-20, and the number of times allowed to be read is 10 times.

Then the user software directly operates the fifth paragraph of the e-book, and judges whether the number of times this paragraph has been read is greater than the allowed number of times 10, if so, the authorization license does not allow the user software to continue to operate the e-book, and reminds The user no longer has the right to use the e-book; if not, the content of this section is displayed to the user. Then the user software continues to operate on the 6th paragraph, and so on, until it stops when it reaches the 20th paragraph. And prompt the user no longer has permission to use other parts.

Example 4: Realize that the pictures in an e-newsletter can be exported.

Use the production tool to make the content of the electronic newsletter into an electronic newsletter file. Segmentation processing is performed on the e-newsletter. For pictures, the object number of the picture can be used as the identification of the segmentation, and an index table and an identification of the storage location of the authorized license file are added.

To realize that the pictures in the e-newsletter (such as picture 1) can be exported, and it is known that picture 1 is the third paragraph, then use the authorization tool to add the following code in the authorization license file of the e-newsletter:

<export>

<constraint>

<segment seg=3>-1</segment>

<segment seg=4>0</segment>

</constraint>

</export>

Note: The label export indicates the export permission, and the rest are the same as the description in Example 1.

The added above code in the authorization license file indicates that segment 3 (ie picture 1) can be exported unlimited times.

The publishing end sends out the prepared e-newsletter file and its authorized license file through media such as the network.

When the user opens the e-newsletter file with reading software, sees picture 1, and wants to export, the user software first judges whether the e-newsletter is protected by DRM, if not, it can continue to operate and use the e-newsletter file; if so, The user software then looks for the authorization license file.

The user software analyzes the authorization license file and finds that the segment 3 where the picture is located in the authorization license file is allowed to be exported, and the number of times allowed for export is unlimited.

Then the user can continue this operation to export the picture in section 3.

According to the above digital content segment authorization management method of the present invention, a digital content segment authorization management system can be constructed, and the system includes a publishing terminal 30 and a receiving terminal 40 .

Among them, the issuing end 30 is used to segment the digital content, and carry out segment operation authority constraints, generate digital files and corresponding authorization license files and issue them; its structure is shown in Figure 3, including: a production module 301 and a publishing module 302.

The making module 301 is used for making digital content (including streaming media and print media) into digital files. Specifically, it includes segmenting the digital file, adding an index table, and specifying the scope of the segment; restricting the operation authority of the segment in the authorized license file; and adding the storage location identification of the authorized license file in the produced digital file.

The publishing module 302 is used to publish the digital files produced by the production module 301 and the corresponding authorized license files.

Preferably, the production module 301 can be further divided into: a first production sub-module 3011 , a second production sub-module 3012 and a third production sub-module 3013 .

The first production sub-module 3011 is used to generate an index table, store segment identifiers in each record of the index table and specify the digital content contained in each segment.

The second production sub-module 3012 is used to describe the types of operations allowed for each segment and the corresponding allowed number of operations.

The third production submodule 3013 is used to produce digital files and corresponding authorization license files according to the digital content to be released and the output of the first production submodule 3011 and the second production submodule 3012, and include them in the produced digital files Add the ID of the storage location of the authorized license file.

Wherein, the receiving end 40 is used to execute the digital file issued by the issuing end, and according to the authorization license file, operate each segment according to its corresponding operation authority constraints; its structure is as shown in Figure 4, including : a judging module 401 and an operating module 402.

The judging module 401 is used to judge whether the digital content is protected by DRM, if so, find the corresponding authorized license file, and determine whether the segment in the digital file has operation authority according to the authorized license file. If yes, notify the operation module 402 to continue to complete the operation; if not, notify the operation module 401 to continue processing the next segment of digital content.

The operation module 402 is used to operate the segments in the digital files issued by the publisher according to their corresponding operation authority constraints, including reading electronic files, exporting pictures and playing video files, etc.

Preferably, the judging module 401 can be further divided into: a first judging submodule 4011 and a second judging submodule 4012;

The first judging submodule 4011 is used to judge whether the current segment has the requested operation type; if so, notify the second judging submodule 4012; otherwise, notify the operating module 402 to stop operating the current segment;

The second judging sub-module 4012 is used to judge whether the operation of the current segment exceeds the scope allowed by the operation authority constraint, and if so, notify the operation module 402 to stop operating on the current segment; otherwise, notify the operation module 402 to perform corresponding operations on the current segment.

To sum up, the method and system for authorization management of digital content segments provided by the embodiments of the present invention realize digital Flexible control of content authorization management; effectively avoiding the trouble of splitting and assembling when digital content authorization management is performed in the prior art. And because the ranges contained in the segments can be crossed and repeated, the control of the digital content is more flexible. At the same time, segments can be divided according to the object numbers existing in the existing file format, which makes authorization management simple, segment location search convenient, and has good versatility for files of different formats.

The above is only a preferred embodiment of the present invention, but the scope of protection of the present invention is not limited thereto. Any skilled person in the technical field can easily think of changes, Replacement or application to other similar systems shall fall within the protection scope of the present invention. Therefore, the protection scope of the present invention should be determined by the protection scope of the claims.

Claims (19)

1. one kind is carried out the implementation method of empowerment management to digital content, it is characterized in that, comprising:

To the digital content segmentation, generate digital document; And the constraint of the operating right of the section of carrying out, generate corresponding ticket for authorization file;

When carrying out described digital document,, each section operated by its corresponding operating right constraint according to described ticket for authorization file.

2. method according to claim 1 is characterized in that, and is described to the digital content segmentation, specifically comprises:

In digital content, add concordance list, memory paragraph identifies and indicates every section digital content that is comprised in every record of described concordance list.

3. method as claimed in claim 2 is characterized in that, describedly indicates every section digital content that is comprised, and specifically comprises:

Utilize the reference position and the end position of the digital content that the object number section of expression in the digital content comprised; Perhaps

In concordance list, list each section object number pointed; Perhaps

Use side-play amount with respect to file beginning position to indicate the reference position and the end position of the digital content that each section comprise.

4. method as claimed in claim 2 is characterized in that, the digital content that each section comprised is all different, or part is identical.

5. the method for claim 1 is characterized in that, the operating right constraint of the described section of carrying out generates corresponding ticket for authorization file, is specially:

The action type that section is allowed to is described, with and corresponding permission number of operations and/or allow time period of operation, generate described authorization file.

6. the method for claim 1 is characterized in that, described generation digital document and corresponding ticket for authorization file also comprise:

In digital document, add the memory location sign of ticket for authorization file.

7. method according to claim 1 is characterized in that, after described generation digital document and the corresponding ticket for authorization file, also comprises:

Issue digital document and corresponding ticket for authorization file.

8. the method for claim 1 is characterized in that, during the described digital document of described execution, according to described ticket for authorization file, each section is operated by its corresponding operating right constraint, comprising:

By user software the section in the described digital document is operated, and determine according to described ticket for authorization file whether present segment has corresponding operating right, if then continue to finish operation this section; If not, then stop this section operation and prompting user.

9. the method for claim 1 is characterized in that, described user software is operated the section in the described digital document, comprising:

According to concordance list section is operated, memory paragraph identifies and indicates every section digital content that is comprised in every record of described concordance list; Perhaps

Directly with the page number that comprises in the digital content or object number as segment identification, the page number or object number digital content pointed are operated as section.

10. method as claimed in claim 9 is characterized in that, described by user software in the described digital document the section operate, specifically comprise:

By user software first section, operate by each section of ordered pair from described digital document; Perhaps

By any one section beginning that user software is authorized to from described digital document, each section that is authorized to is operated.

11. method as claimed in claim 8 is characterized in that, describedly determines that according to the ticket for authorization file whether present segment has corresponding operating right, comprising:

Determine whether present segment is authorized in the described ticket for authorization file; And

Whether the operation of determining present segment has surpassed the allowed band of operating right constraint, comprises whether number of operations has surpassed the permission number of operations and/or the running time of authorizing and whether surpassed the permission running time of authorizing.

12. method as claimed in claim 8 is characterized in that, described by user software in the described digital document the section operate before, also comprise:

Judge whether described digital document is the file of Digital Right Management technical protection, if then obtain described ticket for authorization file, and according to described ticket for authorization file each section carried out operating right and determine; If not, directly described each section of digital document operated.

13. method as claimed in claim 8 is characterized in that, describedly by user software digital document is operated, and comprising: store the client login described digital document of issue of described user software and the issue end of ticket for authorization file and carry out on-line operation; Perhaps

The client that stores described user software is operated after earlier described digital document and ticket for authorization file being downloaded to this locality again.

14., it is characterized in that described digital content comprises Streaming Media and print media as the arbitrary described method of claim 1-13.

15. a digital content issue end is characterized in that, comprising: make module and release module;

Described making module is used for the digital content segmentation, and the constraint of the operating right of the section of carrying out, and generates digital document and corresponding ticket for authorization file;

Described release module is used to issue described digital document and corresponding ticket for authorization file.

16. digital content issue end as claimed in claim 15 is characterized in that described making module comprises:

First makes submodule, is used to generate concordance list, and memory paragraph identifies and indicate every section digital content that is comprised in every record of described concordance list;

Second makes submodule, is used to describe action type and the corresponding permission operational constraints thereof that each section is allowed to;

The 3rd makes submodule, be used for making the output that submodule and second is made submodule according to digital content to be released and first, make digital document and corresponding ticket for authorization file, and in the digital document of making, add the memory location sign of ticket for authorization file.

17. a digital content receiving end is characterized in that, comprises judge module and operational module;

Described judge module is used for determining according to the ticket for authorization file whether the section of digital document has operating right;

Described operational module is used for the section of described digital document is operated by its corresponding operating right constraint.

18. digital content receiving end as claimed in claim 17 is characterized in that, described judge module comprises that first judges that giving module and second judges submodule;

Described first judges submodule, is used to judge whether present segment has the requested operation type; If then be notified to described second and judge submodule; Otherwise, notify described operational module to the present segment shut-down operation;

Described second judges submodule, is used to judge whether the operation of present segment has surpassed the allowed band of operating right constraint, if then notify described operational module to the present segment shut-down operation; Otherwise, notify described operational module that present segment is carried out respective operations.

19. an authentication management system is characterized in that, comprising: issue end and receiving end;

Described issue end is used for the digital content segmentation, and the constraint of the operating right of the section of carrying out, and generates digital document and corresponding ticket for authorization file cocurrent cloth;

Described receiving end is used to carry out the described digital document of described issue end issue, and according to described ticket for authorization file, each section is operated by its corresponding operating right constraint.

Images