CN101373504B - Management method and system for downloading digital content - Google Patents

Abstract

The invention relates to a method and system for controlling the number of digital content downloading devices, belonging to the field of digital copyright protection. Reading of digital content files protected by existing digital copyrights is often limited to reading on one device. When applications are to be downloaded on other devices, they need to be re-downloaded and occupy resources for the number of downloads or the number of copies. The invention includes a client subsystem and a server subsystem, and the server subsystem is mainly composed of five core modules: a download request processing module, a user management module, a download device management module, a user download control module and a download content license issuing module. By adopting the method of the present invention, when conducting a digital content transaction, the user is allowed to download multiple times on the same device, and also allows downloading on a certain number of different devices.

Description

A digital content download management method and system

technical field

The invention belongs to the field of digital content copyright protection, and in particular relates to a digital content download management method and system. the

Background technique

Digital Rights Management (DRM) is a key technology used to protect the transaction and dissemination of digital content. It is used to protect the intellectual property rights of digital content and make the use and dissemination of digital content controllable. Therefore, content providers and operators Businesses prefer to use DRM technology to protect their digital content, effectively control users' download and dissemination, effectively prevent piracy, and protect the legitimate rights and interests of digital content providers and operators. With the rapid development of today's network technology, the application of digital resources has also been rapidly developed, and the resulting economic benefits have also advanced by leaps and bounds. Therefore, DRM technology has received more attention and development, and its application requirements have become more and more diverse. The main performance There are two needs: one is the diversification of electronic devices, from simply reading and using digital resources on PCs to downloading, reading and using digital resources on various mobile devices such as laptops, mobile phones, e-readers, and PDAs, And now users who have multiple devices at the same time have more and more reading needs. Therefore, users hope that after obtaining a license to use digital resources, they hope that they can use them reasonably and legally on various electronic devices they own. The second is to precisely control the application of digital resources. For example, e-book resources use the number of copies to control the number of uses. Through precise control of the application of digital resources, more commercial profits can be created for digital resources. the

In the existing DRM technology, the method of binding digital content and device characteristic information is usually adopted, and the decryption information of the digital content is bound with the device hardware configuration information, so that the digital resource can only be used on the bound device. As long as the digital content is out of the environment of the device, the digital content cannot be used normally. This method effectively controls the download and dissemination of the digital content, so this method is often applied to various DRM systems. In the following application scenarios, the DRM system needs to consider and solve:

After a user conducts a digital content transaction, whether it can be downloaded multiple times on the same device, or whether it can be downloaded on different devices. Because the user will often encounter the situation of changing the operating system and changing the device, the DRM system needs to support the reasonable use of the user. the

Contents of the invention

The object of the present invention is based on DRM technology, through the control of the number of digital content downloading devices, to solve the problem of allowing users to obtain legally licensed digital content after one transaction under the premise of effective digital content copyright protection. Issues with multiple downloads in , also allowing downloads on multiple different devices. the

In order to solve the above problems, the present invention provides a method for controlling the download and use of digital content on multiple devices at the same time when the user is allowed to consume the same digital content license. Refer to Figure 1 for the schematic diagram of the principle of the present invention, and refer to Figure 1 for the specific implementation method figure 2. the

The method mainly includes the following steps:

A: The client sends a download request to the server;

B: The server judges whether to allow the client to download, if it is allowed, go to step C, otherwise, refuse to download;

C: Issue an access license to the digital content to the client. the

Step B further includes:

B1: The server side judges whether the client device is a new device, if so, go to step B2; otherwise get the device number, go to step B3;

B2: Insert device information into the device information table, and judge whether the number of devices in the current device information table is greater than the preset maximum number of devices allowed to download, if yes, refuse to download, otherwise go to step B3; 

B3: Register user download record, go to step C. the

Further, the download request sent by the client to the server specifically includes:

A1: The user logs into the digital content management system and selects the resource information of the digital content to be downloaded;

A2: Obtain the hardware information of the user's electronic device, and encrypt the summary to form the unique identification of the electronic device;

A3: Form a download request address and send a download request to the server. the

Further, the download request address is a download request URL address formed by organizing hardware information, user information and resource information according to the communication protocol between the client and the server. the

Further, the registered user download record specifically includes: the registered user download record, and the download record is saved through security verification calculation. the

Further, the download record includes: user number, digital content resource number, and device number information. the

Further, before issuing the access permission of the digital content to the client, it also includes: judging whether the user download record column verification data is correct, inserting the download record information if correct, calculating the row verification value of the current download record, and calculating the download record table Check the value and save it. the

Further, issuing the digital content access permission to the client specifically includes: issuing a digital content license certificate to the client, encrypting the digital content key with the unique device identifier as characteristic information, obtaining the encrypted key content, and organizing other The license information is sent to the client reader in the form of a license certificate, and after the reader obtains the license, it assigns the user the right to use the resource. the

Further, issuing the access permission of the digital content to the client includes: the server judges whether the current number of allowed downloads is greater than the preset maximum number of downloads, and when it is not greater than the preset maximum number of downloads, sends the client end-issued access licenses for digital content. the

The present invention also provides a digital content download management system, which provides a control system for downloading and using digital content on multiple devices at the same time when a user is allowed to consume the same digital content license, specifically including a client subsystem and a server terminal system, the client subsystem includes:

A digital content reader, for reading digital content, the reader is responsible for sending download request information to the server download request processing module;

The server terminal system includes:

The download request processing module is responsible for parsing the client request to ensure the legitimacy of the request;

User management module, used for user information storage management, security login authentication management;

Download device management module, used for storage of download device information, device registration management;

The user download control module is used for digital content download record storage management and download device validity judgment, and manages the number of download devices;

Download the content license issuance module, which is used to issue certificate files to the client;

The communication between the client subsystem and the server subsystem is accomplished through a communication protocol. the

Further, it also includes a configuration file management module, which is used to read and write configuration files, store some configuration information of the system in the configuration file, and encrypt sensitive data. Verify that configuration files have not been tampered with. the

Further, the user download control module is responsible for the storage management of the user's digital content download record and the validity judgment of the download device. For each resource downloaded by the user, the module is responsible for storing the user information, resource information and download device information as a download record. In terms of management, when a user download request is received, the user's download record is counted to determine the validity of the download resource and the validity of the device. When the same user exceeds the number of download devices allowed by the system, the user is not allowed to continue. Download, and perform certain data verification on user download record information, and store the verification data in the database or configuration file to prevent user download records from being illegally deleted or tampered with. the

Implement the present invention, have following beneficial effect:

On the premise of effective digital content copyright protection, the number of digital content download devices is effectively controlled. In the same transaction, the same device is allowed to download digital content multiple times, and it is also allowed to download digital content in a certain number of different devices. Digital Content Downloads. the

Through the present invention, without affecting the rights and interests of content providers, the application range of digital content is greatly improved, and the convenience for users to use digital content is greatly improved. the

Description of drawings

Fig. 1 is a system structure diagram of the present invention;

Fig. 2 is a database table design diagram of the present invention;

Fig. 3 is the realization method flowchart of the present invention;

Fig. 4 is a flowchart of receiving and processing client requests by the server of the present invention. the

Detailed ways

The following detailed description is only a preferred typical implementation case, and does not limit the scope, application or configuration of the present invention. the

With reference to Fig. 1, realize the preferred system structure Client/Server structure of the method provided by the present invention, be made up of client subsystem 101 (hereinafter referred to as client), server subsystem 100 (hereinafter referred to as server), the communication of client and server is through communication Protocol implementation, what the present embodiment adopted is HTTP communication protocol; Client comprises reader 102, is used for reading digital content, and is responsible for sending download request information to server download request processing module, specifically can adopt popular web browser ( Such as IE/FireFox, etc.) and a reader that supports digital content file formats (such as Founder Apabi Reader). The server is mainly responsible for user management, digital content download management and download device management, including:

The download request processing module 104 is responsible for parsing the client request to ensure the legitimacy of the request;

User management module 103, used for user information storage management, security login authentication management;

Download device management module 105, used for storage of download device information, device registration management;

The user download control module 106 is used for digital content download record storage management and download device validity judgment, and manages the number of download devices;

The download content license issuing module 107 is used to issue the certificate file to the client. the

The following is a detailed description:

The user management module 103 is responsible for user information storage management and security login authentication management. This module ensures the legitimacy of users who download digital content. Therefore, the design also considers that user information cannot be illegally deleted or tampered with. User login passwords also use a Encryption algorithm for encrypted storage. the

The download request processing module 104 is responsible for parsing the client request, completing the format parsing of the communication protocol, ensuring the legitimacy of the request and the legitimacy of the request data, and this module also needs to call and organize other modules. the

The download content license issuance module 107 is responsible for issuing the certificate file. When the user's download request is legally authenticated, the module creates the certificate file and sends it to the client. the

The download device management module 105 is responsible for the storage of download device information, device registration management, and registration of all legal client device information. An important data in the client device information is the unique identifier of the device. the

The user download control module 106 is responsible for the user's digital content download record storage management, download device validity judgment, etc., and each time the user downloads a resource, this module is responsible for storing and managing the user information, resource information, and download device information as a download record , when a download request from the user is received, the user's download records are counted to determine the validity of the download resource and the validity of the device. When the same user exceeds the number of download devices allowed by the system, the user is not allowed to download again. In this module, it is necessary to prevent user download records from being illegally deleted or tampered with, so certain data verification is performed on user download record information, and the verification data is stored in the database or configuration file. the

The storage and management of the data can be completed through a relational database, and the main database table design refers to Figure 2. User information table 601 is used to store user information, including information such as user number UserID, login account LoginID, and login password Password; device information table 603 is used to store client download device information, mainly including device number DeviceID and device feature identifier information HWInfo; resource download record table 602 records the information of resources downloaded by users, including order number OrderID, resource number DocID, download user number UserID, download device number DeviceID, record insertion time InsertTime and row data verification field CRC, which is used for storage Record verification information, use a certain algorithm to generate a hash string for the OrderID, DocID, UserID, DeviceID, InsertTime, etc. of the current record according to a certain algorithm, and store it in the CRC field to verify the data recorded in this line whether it has been tampered with. the

In order to ensure that the record rows in the user resource download record table are not deleted, a certain algorithm is used to generate a hash string for the values of some columns in the table, which is stored in the configuration file. When downloading, it is necessary to perform column If the verification is passed, the download is allowed, otherwise, the user is prohibited from downloading. In this way, the recorded number of user downloads will not be changed. the

In order to further improve the performance of the system, a configuration file management module can also be included, which is mainly responsible for reading and writing operations on the configuration file. Some configuration information of the system is stored in the configuration file, such as the number of devices allowed to download, data verification information, database Information such as connection strings is encrypted for sensitive data, and a security summary is performed on the entire file to verify whether the configuration file has been tampered with. the

The communication protocol is mainly responsible for the secure data transmission and communication between the client and the server. The client sends a request command to the server in the form of HTTP protocol URL QueryString. After receiving the processing request, the server returns the processing result to the client and returns it to the client in XML format. client. The download request command HTTP URL needs to contain the following data items:

UserID   Current User ID DocID The requested resource ID DeviceID   Request client hardware information MAC Encrypted Digest

The UserID, DocID, DeviceID and other information are calculated according to a certain algorithm security summary, so that these information can be organized into a data structure, such as DeviceID＝XXXXXX&UserID＝1&DocID＝1&MAC＝GAXCBECDD＝＝; then pass a certain encryption on this string Algorithm for encryption, Base64 encoding to get the requested data item V1, so as to organize the request URL address for the client, in the format such as http://fangzheng.com/download? RequestData=V1. the

The server side can also pre-set the maximum number of times allowed to download, before allowing the download, first judge whether the current allowed number of downloads is greater than the preset maximum number of times, if so, refuse to download, otherwise, allow the download, and then distribute the digital content to the client access permission. the

Below in conjunction with accompanying drawing 3 and accompanying drawing 4, the implementation method of the present invention is described, emphatically describing the process of receiving and processing client requests at the server side:

Step S21: The user logs into the digital content management system, and selects the resource information of the digital content to be downloaded;

Step S22: The reader obtains the hardware information of the user's electronic device, and encrypts the summary to form a unique identification of the electronic device, forms a download request address, and sends a download request to the server;

The download request address is a download request URL address formed by organizing hardware information, user information and resource information according to the communication protocol between the client and the server. The server presets the maximum number of devices allowed to download. the

Step S23: the server receives and processes the client request;

Step S24: Issue a digital content license certificate to the user. the

Steps S23 and S24 are implemented in the following ways:

After receiving the request from the client, the server analyzes and verifies the legitimacy of the request according to the communication protocol. If the verification request is illegal, it rejects the request and returns an error message to the client; when it is a reasonable request, the server can start from Information such as the user number currently requested, the resource number requested to be downloaded, and the client hardware device are obtained in the communication protocol. the

According to the obtained client hardware device information, query the downloaded device information table to judge whether it is a new device. The judgment is based on the value of HWInfo as the basis for the uniqueness of the device. If the device information does not exist, insert an entry into the downloaded device information table. Create a new device, and obtain the DeviceID. If the device information already exists in the table, obtain the DeviceID, and register the user download record. the

The server side judges, if it is a new device download for a transaction, count the number of records in the user download record table based on UserID and DocID (such as select count(DeviceID) from user download record table where UserID＝m and DocID＝n ), that is, under the condition that the user number UserID and the resource number DocID are the same, the number of devices that the current user downloads the current resource is obtained, and then it is judged whether this number is within the limited range of the number of devices. If the device that downloads the current resource If the number has exceeded the set range value, an error message will be returned and the download is not allowed. If it is within the allowable range, continue to judge whether the check value of the column of the user download record table is correct. the

Determine whether the check value of the column of the user download record table is correct. The column check value is a result obtained after counting all the rows of some fields in the download record table through a certain calculation formula, and then a message summary is performed on the result, and then A character string obtained after Base64 encoding, which is stored in the configuration file information. The system calculates the column verification value through the same process, and then compares it with the value stored in the configuration file. If the value is different, it means that the download record has been illegally modified, and the system returns an error message to the client. If they are the same, proceed to the next step. the

When the device is allowed to download the resource, insert a new record into the user download record table, save UserID, DocID, DeviceID and other information, calculate the row check value and store it in the CRC field, and then calculate the column check of the download record table Values are stored in configuration files. Since the process must be a complete process, it is necessary to use the transaction of the database system to ensure the integrity of the process. As long as an error occurs in one link, the transaction will be rolled back, the operation will be canceled, and an error message will be returned to the client. Only after all the steps are successfully executed, the transaction is submitted at the end, and the access permission of the digital content is finally issued to the client. the

Issuing digital content access licenses to clients is mainly to issue digital content license certificates to clients, encrypt digital content keys with device unique identifiers as characteristic information, obtain encrypted key content, and organize other licensing information The license certificate is formed and sent to the client reader. After the reader obtains the license, it assigns the user the right to use the resource. the

The server side can also pre-set the maximum number of times allowed to download, before allowing the download, first judge whether the current allowed number of downloads is greater than the preset maximum number of times, if so, refuse to download, otherwise, allow the download, and then distribute the digital content to the client access permission. the

The implementation of the present invention has the following beneficial effects: under the premise of effective digital content copyright protection, the number of digital content download devices is effectively controlled, and in the same transaction, the same device is allowed to download digital content multiple times, and the same Allows digital content downloads in a limited number of different devices. the

Obviously, those skilled in the art can make various changes and modifications to the present invention without departing from the spirit and scope of the present invention. Thus, if these modifications and variations of the present invention fall within the scope of the claims of the present invention and their equivalent technologies, the present invention also intends to include these modifications and variations. the

Claims (10)

1. digital content downloading management method may further comprise the steps:

A: the user end to server end sends download request;

B: server end judges whether to allow client downloads, as allowing, forwards step C to, otherwise refusal is downloaded;

C: access permission from digital content to client that provide;

Step B specifically comprises:

B1: server end judges that whether client device is new equipment, in this way, forwards step B2 to; Otherwise obtain device numbering, get into step B3;

B2: in the facility information table, insert facility information, judge that active user in the current device information table downloads the maximum equipment numbers whether the equipment number of current resource is downloaded greater than predefined permission, in this way, refusal is downloaded, otherwise forwards step B3 to;

B3: registered user's Download History forwards step C to.

2. digital content downloading management method as claimed in claim 1 is characterized in that steps A specifically comprises:

A1: the user logins digital content management system, selects to want the resource information of download digital content;

A2: obtain the consumer electronic devices hardware information, and carry out the unique identification that cryptographic digest forms electronic equipment;

A3: form the download request address, send download request to server end.

3. digital content downloading management method as claimed in claim 2 is characterized in that, said download request address is according to the communication protocol between client and the service end, the download request URL address of organizing hardware information, user profile and resource information to form.

4. digital content downloading management method as claimed in claim 3 is characterized in that step B3 further comprises: registered user's Download History, and Download History is carried out the safety check computing preserve.

5. digital content downloading management method as claimed in claim 4 is characterized in that, said Download History comprises: Customs Assigned Number, digital content resource number, device numbering information.

6. digital content downloading management method as claimed in claim 5; It is characterized in that; The access permission that step C provides digital content to client also comprises before: whether judges Download History row checking data is correct; And when correct, insert Download History information, calculate the capable proof test value of current Download History, and calculate Download History tabular proof test value and preservation.

7. like the arbitrary described digital content downloading management method of claim 1-6; It is characterized in that step C specifically comprises: providing the digital content licenses book to client, is that characteristic information is encrypted digital content key with the equipment unique identifier; Key content after obtaining encrypting; And organize other License Info formation license passport to send to client reader, reader is distributed to the rights of using of user to said resource after obtaining permission.

8. digital content downloading management method as claimed in claim 7; It is characterized in that; Step C further comprises: server end is judged the high reps whether number of times that current permission downloads is downloaded greater than predefined permission; And when being not more than the high reps of predefined permission download, provide the access permission of digital content to client.

9. a digital content download management system comprises client-end subsystem and server end subsystem, and said client-end subsystem comprises:

The digital content reader is used for digital content is read, and said reader is responsible for sending download request information to the downloaded request processing module;

Said server end subsystem comprises:

The download request processing module is responsible for client-requested is resolved, and guarantees the legitimacy of request;

User management module is used for user profile storage administration, secure log authentication management;

The download equipment administration module is used for storage, the facility registration management of download equipment information;

The user's download control module is used for storage administration of digital content Download History and download equipment validity and judges;

Download the content permission and provide module, be used to provide certificate file to client;

Accomplish through communication protocol between said client-end subsystem and the server end subsystem and communicate by letter;

Said user's download control module is responsible for user's the storage administration of digital content Download History, download equipment validity and is judged; For resource of the every download of user; Then this module is responsible for user profile, resource information and download equipment information, after receiving the user's download request, just user's Download History being added up as a Download History storage administration; Judge the validity of downloaded resources validity and equipment; When same user counts above the download equipment of system's permission, then do not allow the user to download again, and the user's download recorded information is carried out certain data check; And checking data be stored in the database or configuration file in, prevent that the user's download record is by illegal deletion or distort.

10. digital content download management system as claimed in claim 9; It is characterized in that, also comprise profile management module, be used for read-write operation configuration file; Some configuration informations of storage system in the configuration file; Whether the data for sensitivity are encrypted, and main being responsible for carried out safe summary to whole configuration file, distorted with the checking configuration file.

Images