Disclosure of Invention
The embodiment of the application provides a processing method, a device, equipment, a medium and a program product based on a media application, which realize the safe playing of copyrighted digital media in the media application on a target operating system by driving the media application and the target operating system to execute key acquisition and decryption functions through self-developed digital rights management equipment.
In one aspect, an embodiment of the present application provides a media application-based processing method, where a media application is run in a target operating system, and the target operating system accesses copyrighted digital media in the media application through a digital rights management device, where the media application-based processing method includes:
Receiving an authorization request for the target copyrighted digital media sent by the media application when the target copyrighted digital media in the media application is requested to be played in the target operating system;
the method comprises the steps of responding to an authorization request, driving a target operating system to generate a server playing context message, wherein the server playing context message is used for requesting an authorization key of target copyrighted digital media from a key server;
Acquiring an authorization key of the target copyrighted digital media from a key server based on the server play context message;
And sending the authorization key to the target operating system, so that the target operating system uses the authorization key to access and play the target copyrighted digital media.
On the other hand, the embodiment of the application provides a processing device based on a media application, the media application is operated in a target operating system, the target operating system accesses copyrighted digital media in the media application through a digital copyrighted management device, and the processing device based on the media application comprises:
A receiving unit, configured to receive an authorization request for a target copyrighted digital medium sent by a media application when the target copyrighted digital medium in the media application is requested to be played in a target operating system;
the system comprises a processing unit, a key server, a target operating system, a server playing context message and a target digital media, wherein the processing unit is used for responding to the authorization request and driving the target operating system to generate the server playing context message;
the processing unit is further used for acquiring an authorization key of the target copyrighted digital media from the key server based on the server playing context message;
and the processing unit is also used for sending the authorization key to the target operating system so that the target operating system can access and play the target copyrighted digital media by using the authorization key.
In one implementation, the authorization key of the target copyrighted digital media is carried in a content key context message, and the processing unit is configured to, when acquiring the authorization key of the target copyrighted digital media from the key server based on the server play context message, specifically:
Transmitting the server playing context information to a key server, enabling the key server to respond to the server playing context information to acquire an authorization key of the target copyright digital media, and encrypting the authorization key of the target copyright digital media by the key server to obtain a content key context information;
And receiving a content key context message returned by the key server.
In one implementation, the target copyrighted digital media is encrypted by using a digital rights management technology, and a protocol decryption service adapted to the digital rights management technology is deployed in the target operating system, wherein the processing unit is used for sending an authorization key to the target operating system, so that when the target operating system uses the authorization key to access and play the target copyrighted digital media, the processing unit is specifically used for:
Transmitting the content key context message to a protocol decryption service in a target operating system, so that the protocol decryption service decrypts the content key context message and acquires an authorization key of the target copyrighted digital media from the decrypted content key context message; and after the protocol decryption service decrypts the target copyright digital media by using the authorization key, the decrypted target copyright digital media is sent to a system player for playing.
In one implementation, the processing unit is further configured to:
Receiving an encryption notification message sent by a target operating system, wherein the encryption notification message is used for indicating that the target copyrighted digital media is encrypted by using a digital copyrighted management technology;
The encrypted notification message is forwarded to the media application such that the media application generates an authorization request for the target copyrighted digital media from the encrypted notification message and sends the authorization request to the digital rights management device.
In one implementation, a process for generating an encrypted notification message by a target operating system includes:
the target operating system acquires a media address of the target copyrighted digital media;
the target operating system acquires a play list of the target copyrighted digital media from a content server corresponding to the media application according to the media address;
The target operating system generates an encryption notification message when the first content attribute field indicates that the target copyrighted digital media is encrypted using digital rights management techniques.
In one implementation, a target operating system obtains a media address of a target copyrighted digital media, comprising:
the target operating system acquires a media address of the target copyrighted digital media from the media application;
When the target copyright digital media in the media application is requested to be played in the target operating system, the media application acquires media information of the target copyright digital media from the content server according to the media identification of the target copyright digital media, wherein the media information comprises at least one of a media address of the target copyright digital media, a certificate address of the target copyright digital media and a second content attribute field of the target copyright digital media, and the second content attribute field is used for the media application to identify whether the target copyright digital media is encrypted by using a digital copyright management technology.
In one implementation, the digital rights management device includes a digital rights management plug-in or a digital rights management program;
the digital rights management device comprises a certificate manager for caching certificate addresses and certificate data of the target copyrighted digital media accessed in the media application, wherein the certificate addresses point to storage locations of the certificate data.
In one implementation, the media application initiates the digital rights management device when the second content attribute field of the target copyrighted digital media indicates that the target copyrighted digital media is encrypted using digital rights management technology, the processing unit further configured to:
Inquiring whether the certificate data of the target copyrighted digital media exist in a certificate manager according to the certificate address of the target copyrighted digital media;
If the certificate data of the target copyrighted digital media does not exist in the certificate manager, acquiring the certificate data of the target copyrighted digital media from the key server according to the storage position pointed by the certificate address of the target copyrighted digital media;
And storing the certificate data and the certificate address of the target copyrighted digital media in a certificate manager in an associated manner.
In one implementation, a process for a target operating system to generate a server play context message includes:
Obtaining certificate data of the target copyrighted digital media from a certificate manager, the certificate data being issued by a key server for the target copyrighted digital media, and
Acquiring a play list of the target copyrighted digital media, wherein the play list comprises media detail information which can be identified by a target operating system and is related to the target copyrighted digital media;
Generating an initial context message based on the credential data and the media detail information;
The initial context message and the certificate data are packaged to generate a server play context message.
In still another aspect, an embodiment of the present application provides a media application-based processing method, where the media application is run in a target operating system, and the target operating system accesses copyrighted digital media in the media application through a digital rights management device, the media application-based processing method includes:
Responding to the request of playing the target copyright digital media in the media application in the target operating system, and sending a media playing request to the target operating system;
Generating an authorization request for the target copyrighted digital media when receiving an encryption notification message returned by the target operating system through the digital copyrighted management device;
The method includes the steps of receiving a request for authorization from a digital rights management device, sending the request for authorization to the digital rights management device, causing the digital rights management device to drive a target operating system to generate a server play context message in response to the request for authorization, the server play context message being used to request an authorization key for a target copyrighted digital media from a key server, causing the digital rights management device to acquire the authorization key for the target copyrighted digital media from the key server based on the server play context message, and causing the digital rights management device to send the authorization key to the target operating system, causing the target operating system to access and play the target copyrighted digital media using the authorization key.
In still another aspect, an embodiment of the present application provides a processing apparatus based on a media application, where the media application is running in a target operating system, and the target operating system accesses copyrighted digital media in the media application through a digital rights management device, the processing apparatus based on the media application includes:
The system comprises a sending unit, a target operating system, a media playing request and a target control unit, wherein the sending unit is used for responding to the request of playing target copyrighted digital media in a media application in the target operating system and sending a media playing request to the target operating system;
The digital rights management system comprises a processing unit, a target copyright management device, a target copyright management unit and a target operation system, wherein the processing unit is used for generating an authorization request for the target copyright digital media when receiving an encryption notification message returned by the target operation system through the digital rights management device;
The digital rights management device is used for receiving the authorization request, sending the authorization request to the digital rights management device, enabling the digital rights management device to drive a target operating system to generate a server playing context message in response to the authorization request, enabling the server playing context message to be used for requesting an authorization key of the target copyrighted digital media from a key server, enabling the digital rights management device to acquire the authorization key of the target copyrighted digital media from the key server based on the server playing context message, and enabling the digital rights management device to send the authorization key to the target operating system, enabling the target operating system to access and play the target copyrighted digital media by using the authorization key.
In one implementation, the digital rights management device is integrated in a media application, and the processing unit is further configured to:
Acquiring a media identifier of a target copyrighted digital media;
Acquiring media information of the target copyright digital media from a content server corresponding to the media application according to the media identifier of the target copyright digital media, wherein the media information comprises at least one of a media address of the target copyright digital media, a certificate address of the target copyright digital media and a second content attribute field of the target copyright digital media;
The digital rights management device is activated when the second content attribute field indicates that the target copyrighted digital media is encrypted using digital rights management techniques.
In yet another aspect, an embodiment of the present application provides a computer apparatus, including:
A processor adapted to execute a computer program;
A computer readable storage medium having a computer program stored therein, which when executed by a processor, implements the above-described media application based processing method.
In yet another aspect, embodiments of the present application provide a computer readable storage medium storing a computer program adapted to be loaded by a processor and to perform the above-described media application based processing method.
In yet another aspect, an embodiment of the present application provides a computer program product, which includes a computer program, which when executed by a processor, implements the above-mentioned media application based processing method.
In the embodiment of the application, a self-developed digital rights management device is provided, so that a target operating system can safely access target copyrighted digital media in a media application running in the target operating system through the digital rights management device. The digital rights management device can drive the target operating system and the media application to execute the key acquisition and decryption functions aiming at the target copyrighted digital media, so that the target copyrighted digital media with the digital rights in the media application can be safely played by the target operating system. The process of executing the key obtaining and decrypting functions for the target copyrighted digital media may include when the target copyrighted digital media in the media application is requested to be played in the target operating system (e.g., the target copyrighted digital media in the media application is triggered to be played by a user, when the media application requests to play the target copyrighted digital media in the target operating system), the media application may send an authorization request for the target copyrighted digital media to the digital copyrighted management device. When the digital rights management device receives an authorization request for the target copyrighted digital media sent by the media application, the target operating system is driven to generate a server playing context message in response to the authorization request, and the server playing context message is used for requesting an authorization key of the target copyrighted digital media from the key server. At this time, after the digital rights management device acquires the server play context message from the target operating system, the digital rights management device acquires the authorization key of the target copyrighted digital media from the key server and sends the authorization key to the target operating system, so that the target operating system can use the authorization key to access and play the target copyrighted digital media. Therefore, on one hand, the digital rights management device provided by the embodiment of the application can well drive the target operating system and the media application to acquire and decrypt the authorization key of the copyrighted digital media, thereby overcoming the defect that the target copyrighted digital media with the digital rights in the media application cannot be played on the target operating system, and improving the safe playing and smooth playing of the target copyrighted digital media in the media application. On the other hand, as known from the above-described process of implementing the key acquisition and decryption functions by the digital rights management device, the process does not involve the media format of the target copyrighted digital media, and has excellent compatibility, in particular, the key acquisition and decryption of the target copyrighted digital media capable of compatibly processing multiple media formats in the media application, and the secure playback of the target copyrighted digital media in multiple media formats in the media application is implemented. On the other hand, the digital rights management device has strong adaptation capability, can drive a target operating system and various operating systems which are in the same ecological system as the target operating system, has a wider application range, and shows excellent cross-platform characteristics.
Detailed Description
The following description of the embodiments of the present application will be made clearly and completely with reference to the accompanying drawings, in which it is apparent that the embodiments described are only some embodiments of the present application, but not all embodiments. All other embodiments, which can be made by those skilled in the art based on the embodiments of the application without making any inventive effort, are intended to be within the scope of the application.
The embodiment of the application provides a processing scheme based on a media application, in particular to self-developed digital rights management equipment integrated in the media application, and the digital rights management equipment is used for realizing the acquisition, decryption and safe playing of a key of a copyrighted digital media in the media application by a target operating system. In order to better understand the embodiments of the present application, technical terms and related concepts related to the processing schemes provided by the embodiments of the present application are briefly described below, where:
(1) Digital media.
Digital media, also known as digital media content, is a type of digitized media content. Content forms of media content may include, but are not limited to, text, graphics, images, audio, video, animation, etc., which enable presentation of the media content through digital media technology, making processing, storage, and dissemination of the media content more efficient and convenient. The media content presented based on these content forms may include, but is not limited to, electronic books, music, video (such as movies and short videos), and software, and the following description will take the media content as video for convenience of explanation.
With the rapid development of digital media technology, media content is also widely used, and copyright management for digital copyrights of digital media is critical to the wide use of media content. Digital rights (which may be simply referred to as copyrights) for digital media refers to the protection of various rights to digital media in a digital environment. At present, a digital rights management technology (DIGITAL RIGHTS MANAGEMENT, DRM) is mainly adopted to realize the management of digital rights of digital media, wherein the digital rights management technology for digital media is an access control technology which is commonly applied to the field of digital media and can prevent the digital media from being illegally copied and maliciously spread in the application process. The digital rights of the digital media are protected by the digital rights management technology, so that the copyright, the propagation right, the recomposition right, the property right and the like of the digital media are protected, and the digital media which are not authorized by the copyright are prevented from being maliciously played, copied and propagated, thereby protecting the legal rights and interests of a copyright holder (which can be called a copyright party or a film source party and the like) of the digital media.
For digital rights management technology, many software vendors have introduced solutions for digital rights management technology, which can be understood as a specific implementation scheme capable of implementing digital rights management. For example, FAIRPLAY STREAMING (FPS) is a solution to a digital rights management technology developed by software vendors, which is alternatively denoted FairPlay, by providing encryption and authorization mechanisms to ensure that only buyers who legally purchase rights can decrypt the copyrighted digital media and securely play the decrypted copyrighted digital media, that is, the FPS technology prevents unauthorized access and copying of the copyrighted digital media by encrypting the digital media and using a key management system. In particular, FPS technology provides a rights encryption mechanism that helps copyright holders encrypt digital media. For example, in order to realize the copyright protection of the digital media, in particular to protect the content of the digital media and prevent copying and distribution of the digital media without copyright authorization, the copyright holder of the digital copyright can encrypt the authored digital media by using the FPS technology (in particular, the copyright encryption mechanism provided by the FPS technology) to obtain the copyright digital media, thus the copyright digital media encrypted by the copyright encryption mechanism can prevent piracy and illegal distribution, and ensure that only the purchaser of the digital copyright purchasing the copyright digital media can smoothly access and play the copyright digital media through legal way. Similarly, FPS technology provides an authorization mechanism to assist a visitor who wants to access the copyrighted digital media to obtain an authorization key (or decryption key, content key) for the copyrighted digital media, so that the visitor performs legal operations (e.g., play, copy, share, etc.) on the copyrighted digital media after decrypting the copyrighted digital media using the authorization key. For convenience of explanation, the processing scheme based on the media application provided by the embodiment of the application will be described by taking the digital rights management technology as an FPS technology as an example.
(2) Media application.
The media application may be referred to as a media application, which is an application capable of playing or exposing digital media, such as an application capable of playing video, where the media application may be referred to as a player application. An application may refer to a computer program for performing a specific task or tasks, and classified according to the manner in which the media application is run, the media application may include, but is not limited to, a client installed in a terminal, an applet that can be used without downloading the installation (as a sub-program of the client), a World wide Web (Web) application that is opened through a browser, and so on.
If the digital media to be accessed in the media application is copyrighted digital media (or encrypted copyrighted digital media), the media application is required to purchase the digital rights of the copyrighted digital media from the copyright holder of the copyrighted digital media (in which case the media application may be understood as the aforementioned visitor to access the copyrighted digital media, such as a network video carrier company or the like that manages the media application), and the media application has access rights to access the copyrighted digital media only after the media application purchases the digital rights of the copyrighted digital media through a legal path.
Further, to achieve successful access to copyrighted digital media in a media application, in addition to ensuring that the media application has access to the copyrighted digital media, the media application is required to be able to provide digital rights management techniques that are approved by the copyright holder (i.e., the same digital rights management techniques that the copyright holder uses to encrypt copyrighted digital media). In this way, the media application can acquire and decrypt the authorization key of the copyrighted digital media through the digital rights management technology, and can also prevent the copyrighted digital media from being maliciously copied in the media application in the process of accessing the copyrighted digital media. That is, in order to protect the digital rights of digital media, a rights holder of digital media may not only encrypt digital media using digital rights management techniques, but also require a media application provided by a network video carrier to be able to provide digital rights management techniques that are acceptable to the rights holder to protect the security of the copyrighted digital media.
For example, after a film source side (such as a film studio) of a film encrypts the film using FPS technology to obtain a copyrighted film, a digital copyright of the copyrighted film may be authorized to a network video operation company under the authorization requirement of the network video operation company. The network video operation company obtains the access right for the copyrighted film, and the media application provided by the network video operation company also needs to provide the digital rights management device approved by the film source party to successfully access the copyrighted film in the media application. The digital rights management device is a device which is adapted to the FPS technology used for encrypting the copyrighted movies and can utilize a specific interface provided by a target operating system (related contents of the target operating system are described in the related description (3) below), and particularly, the digital rights management device is developed/built based on the digital rights management technology-the FPS technology, can acquire keys of the copyrighted movies encrypted by the FPS technology by utilizing the authorization mechanism principle of the FPS technology, and sends the acquired authorization keys to the target operating system through the specific interface provided by the target operating system for decryption.
(3) Operating System (OS).
An operating system is a program built into a computer device that cooperates with various hardware in the computer device to enable interaction between the computer device and a user. Operating systems are the core of computer devices and are mainly responsible for efficiently managing the hardware resources of the computer devices and providing a variety of basic functions, such as file organization, memory allocation, and scheduling. Specifically, the operating system implements the various basic functions mentioned above by providing interfaces, which can be divided into command interfaces and program interfaces according to interface objects. The command interface ① is a set of operation commands (such as keyboard operation commands) provided by the operation system to the user, the user inputs the commands from an input device externally connected with the computer device, the command interpreter receives and interprets the input commands, and then invokes corresponding programs in the operation system to complete corresponding functions which the user wants to realize. ② The program interface is an interface between an operating system kernel and an application program deployed on a computer device, and is configured for the application program to execute to access system resources, and is typically composed of a set of system calls, each of which is called in the application program and is a subroutine capable of performing a specific function.
Given the differences in hardware environments provided by different computer devices, the same system developer often needs to develop an adapted operating system for the different computer devices. For example, apple system developers developed interactive operating systems (INTERACTIVE OPERATING SYSTEM, IOS) for mobile devices (e.g., smartphones, etc.), mac (Macintosh) OS operating systems for Mac devices (e.g., notebook computers, desktop computers, etc.), visionOS operating systems for VisionPro (Apple Vision Pro) devices (a wearable display device, such as a head-mounted display device). The VisionPro device has super-strong spatial calculation and display capability of binocular 4K resolution (4096×2160 pixel resolution), when the VisionPro device is used for playing digital media in media application running in the VisionPro device, a user can obtain better viewing experience, and in order to further improve the playing quality of the digital media in the VisionPro device, a system developer also specially creates a media format AIV (APPLE IMMERSIVE Video) for the VisionPro device, and the AIV format digital media can effectively utilize 3D Video and spatial audio with a viewing angle reaching 180 degrees and 8K resolution (7680×4320 pixel resolution) to endow the viewing user with an immersive sense. It should be noted that the specific interfaces (e.g., the program interfaces provided for the digital rights management device to call) of the parts provided by the operating systems belonging to the Apple ecosystem (i.e., the operating systems developed by Apple corporation and adapted to different devices) are similar (i.e., the functions of the system call provided by the specific interfaces are the same or similar), and all support FPS technology, that is, the operating systems belonging to the Apple ecosystem all support access to digital media encrypted using the FPS technology.
For convenience of explanation, the target operating system mentioned later in the embodiments of the present application is described by taking any operating system supporting the digital rights management technology, i.e., the FPS technology, as an example, where any operating system supporting the digital rights management technology may be an operating system under the Apple ecosystem, or may be other operating systems except the operating system under the Apple ecosystem. Alternatively, the target operating system is an operating system supporting FPS technology under Apple ecosystem, for example, the target operating system may include an IOS operating system, a MacOS operating system, and VisionOS operating systems. Alternatively, the target operating system is other operating systems (i.e., other operating systems than the operating system under Apple ecosystem) that support FPS technology and are provided with a specific interface for the digital rights management device to call, for example, the target operating system may include an android operating system or a hong-and-Monte operating system, and the like.
In practical application, a protocol decryption service (which may be referred to as an FPS service, and the FPS service is used to implement an authorization mechanism in the FPS technology) adapted to the digital rights management technology is deployed in a target operating system supporting the FPS technology. Thus, in the media application, when the target copyrighted digital media encrypted by using the digital rights management technology, i.e., the FPS technology, is requested to be played in the target operating system, the target operating system can decrypt the target copyrighted digital media by using the authorization key of the target copyrighted digital media by using the FPS service, so as to realize safe playing of the target copyrighted digital media. It should be noted that, to realize the target copyrighted digital media encrypted by using the FPS technology in the above-described media application, which can be played smoothly in the target operating system, it is necessary to integrate a digital rights management device developed based on the digital rights management technology, i.e., the FPS technology, in the media application. In this way, the digital rights management device drives the media application and the target operating system to jointly acquire the authorization key of the target copyrighted digital media, and realizes the key acquisition and decryption functions aiming at the target copyrighted digital media, so that the target copyrighted digital media in the media application can be ensured to be safely played in the target operating system.
The embodiment of the application provides a self-developed digital rights management device (or called a DRM plug-in or DRM agent), which is developed based on FPS technology, and the logic provided by the device for driving a media application and a target operating system to acquire an authorization key for target copyrighted digital media is matched with the FPS technology. Meanwhile, the digital rights management device is matched with a specific interface provided by the target operating system, and particularly the digital rights management device can effectively call the specific interface provided by the target operating system to achieve key acquisition and decryption. In short, the processing scheme based on the media application provided by the embodiment of the application specifically comprises self-developed digital rights management equipment based on FPS technology and a processing scheme for decrypting by using the digital rights management equipment to drive the media application and a target operating system to acquire an authorization key. The following description will be given for two parts of a media application-based processing scheme provided in the embodiment of the present application, where:
(1) A self-developed digital rights management device based on FPS technology.
The digital rights management device is integrated into the media application in the form of a proxy or plug-in, and may include a digital rights management plug-in or a digital rights management program. In other words, the digital rights management device, when integrated in a media application, exists as a plug-in (e.g., a digital rights management plug-in) or an extension service (e.g., a digital rights management program). Thus, the digital rights management device can drive the media application and the target operating system to realize the functions of acquiring and decrypting the authorization key for the target copyrighted digital media.
(2) The digital rights management device is used for driving a media application and a target operating system to acquire an authorization key for decryption.
The processing scheme based on the media application can decrypt the target copyrighted digital media issued by the server based on the digital rights management equipment, and repackage the target copyrighted digital media into an unencrypted clear stream to be transmitted to a player (such as a player of visionOS systems) of the target operating system for playing. In a specific implementation, when target copyrighted digital media encrypted by using FPS technology in a media application is requested to be played in a target operating system, the digital rights management device effectively uses a specific interface (such as the aforementioned program interface) provided by the target operating system to drive the media application and the target operating system to jointly execute the target copyrighted digital media to obtain an authorization key. The digital rights management device sends the obtained authorization key of the target copyrighted digital media to the target operating system through a specific interface, and then the FPS service in the target operating system uses the authorization key to realize the decryption function for the target copyrighted digital media. The decrypted target copyright digital media is transmitted to a system player of the target operating system, and the system player plays the decrypted target copyright digital media safely and smoothly.
Therefore, the processing scheme based on the media application provided by the embodiment of the application has at least the following advantages:
① The digital rights management device provided by the embodiment of the application is developed based on a digital rights management technology, and particularly is developed based on an FPS technology. Therefore, as long as the target operating system deployed on the computer device supports the FPS technology, in particular, a protocol decryption service (FPS service) adapted to the FPS technology is deployed, the digital rights management device in the media application supports decryption and playing of the target copyrighted digital media encrypted by the FPS technology in the target operating system, so that the digital rights of the target copyrighted digital media can be protected. In particular, the defect that the current VisionPro equipment does not support playing of target copyrighted digital media encrypted by the FPS technology can be overcome, and the decryption and playing of target copyrighted digital media in AIV format encrypted by the FPS technology can be supported on VisionPro equipment based on the digital rights management equipment.
② The processing scheme based on the media application provided by the embodiment of the application has a wide application range. In particular, the processing scheme based on the media application provided by the embodiment of the application has the diversity of ecosystems in consideration of the fact that the operating systems supporting the FPS technology are various, such as various operating systems under the Apple ecosystem. For example, the digital rights management device provided by the embodiment of the application can be extended to realize the decryption and playing of the target copyrighted digital media encrypted by the FPS technology in the iPhone device based on the IOS system and the decryption and playing of the target copyrighted digital media encrypted by the FPS technology in the Mac device based on the MacOS system besides supporting the realization of the decryption and playing of the target copyrighted digital media encrypted by the FPS technology in the VisionPro device based on the VisionOS system, and the embodiment of the application has excellent cross-platform characteristics. For another example, the digital rights management device provided in the embodiment of the present application may be extended to other operating systems that support the FPS technology and provide a specific interface for the digital rights management device to call, in addition to supporting the decryption and playing of the target copyrighted digital media encrypted by the FPS technology in the operating system under the Apple ecosystem.
③ The processing scheme based on the media application provided by the embodiment of the application has strong format compatibility. Specifically, as can be seen from the above-described processing scheme, the digital rights management device drives the media application and the target operating system, and the process of obtaining and decrypting the key for the target copyrighted digital media does not limit the media format of the target copyrighted digital media, so that the processing scheme based on the media application provided by the embodiment of the application has media format diversity. For example, the digital rights management device provided by the embodiment of the application can be compatible with decryption and playing of the target copyrighted digital media in AIV format and encrypted based on FPS technology besides the decryption and playing of the target copyrighted digital media in AIV format.
For ease of illustration, the digital rights management device, the driving media application and the target operating system for performing authorization key acquisition and decryption functions provided by embodiments of the present application are described below in connection with an exemplary system architecture diagram. Exemplary, a schematic system architecture involved in a media application-based processing scheme provided by an embodiment of the present application may be referred to in fig. 1. As shown in fig. 1, the system architecture includes a terminal device 101 and a server, where the server includes a content server 102 and a key server 103, and the processing scheme based on media application provided in the embodiment of the present application is executed by a computer device, and the computer device may be one or more of the terminal device 101, the content server 102 and the key server 103. The embodiment of the present application does not limit the kinds and the number of the terminal device 101, the content server 102, and the key server 103 included in the system architecture. The following describes the parts/modules that make up the system architecture, respectively, where:
(1) In the system architecture shown in fig. 1, the terminal device 101 is a head-mounted display, and may specifically be VisionPro devices. The VisionPro equipment is provided with a target operating system-VisionOS operating system and a media application, wherein the media application runs in the target operating system, and the digital rights management equipment provided by the embodiment of the application is integrated in the media application. The target operating system can access the copyrighted digital media in the media application through the digital rights management equipment, and particularly the digital rights management equipment can call a specific interface provided by the target operating system to realize that the target operating system and the media application are driven to jointly execute the key acquisition and decryption of the copyrighted digital media in the media application, so that the target operating system is helped to successfully access the copyrighted digital media in the media application through the digital rights management equipment. The digital rights management device integrated in the media application is a core module in a system architecture and can be called as a digital rights management client agent, the digital rights management device comprises a certificate manager (TPCERTIFICATEMGR) and a rights manager (TPFAIRPLAYMGR), the certificate manager is used for caching certificate addresses and certificate data of target rights digital media accessed in the media application, the certificate addresses point to storage positions of the certificate data, and the rights manager is used for driving work scheduling of all parts/modules in the system architecture.
Fig. 1 illustrates an example of a head mounted display as the terminal device 101. In practical applications, the terminal device 101 may be another device supporting the digital rights management technology, where an operating system supporting the FPS technology is deployed, for example, the terminal device 101 may include a smart computer deployed with a MacOS operating system supporting the FPS technology, or a smart phone deployed with an IOS operating system supporting the FPS technology.
(2) The Content Server 102 (Content Server) is a background Server corresponding to a media application running in the terminal apparatus 101. The content server 102 is used for storing and managing digital media content in a media application, and is specifically responsible for storing protected digital media content in the media application, checking the protection state of the digital media when receiving a play request of the media application for the digital media, and ensuring the security and integrity of the digital media.
(3) The key server 103 (KEY SERVER) is a background server for managing authorization keys for copyrighted digital media, and is specifically used to securely create, store, manage and use encryption keys (i.e., authorization keys) for copyrighted digital keys. The key server 103 has a function of a key security module (Key Security Module, KSM), which is a component in the key server and is responsible for receiving and decrypting license requests (i.e. the aforementioned server play context message) for copyrighted digital media from the terminal device 101, and the KSM specifically decrypts the server play context message first, acquires an authorization key according to media detail information of the target copyrighted digital media, and packages it in the content key context message and returns it to the terminal device 101 (specifically, a digital rights management device disposed in the terminal device 101). Other functions of the KSM are also carried in the key server, including but not limited to, an authorization key generation function, a key management and rotation function, a key usage and encryption function, and the like.
Based on the above brief description of the various modules/portions of the system architecture, a general flow of a media application based processing scheme is described below in conjunction with fig. 1. In a specific implementation, when the target copyrighted digital media in the media application in the terminal device 101 is triggered to be played, on one hand, the media application requests the content server 102 for media information of the target copyrighted digital media, and when the media application judges that the target copyrighted digital media is encrypted by using a digital rights management technology (such as FairPlay technology) according to a second content attribute field in the media information returned by the content server 102, the media application starts the integrated digital rights management device. After the digital rights management device is successfully started, a rights manager in the digital rights management device acquires the certificate address of the target rights digital media from the media information, and the rights manager in the digital rights management device acquires and caches the certificate data of the target rights digital media according to the certificate address.
In another aspect, the media application requests that the target copyrighted digital media be played in the target operating system. And when judging that the target copyrighted digital media is the copyrighted digital media encrypted based on the digital rights management technology according to the first content attribute in the play list, the target operating system calls a corresponding interface to inform the digital rights management equipment and inform the media application that the target copyrighted digital media is encrypted. In this way, the media application requests the authorization key by the digital rights management device requesting the target operating system to prepare a server context message (ServerPlaybackContext, SPC), and in particular the digital rights management device obtains the certificate data for the target copyrighted digital media from the certificate manager and sends the certificate data to the target operating system for use in generating the server context message.
Further, after the target operating system generates the server context message, the server context message is sent to the digital rights management device, so that the digital rights management device sends the server context message to the key server 103. The key server 103 returns an authorization key for the target copyrighted digital media to the digital rights management device in response to the server context message sent by the terminal device 101 (e.g., visionPro devices), specifically sent by the digital rights management device in the terminal device 101. After receiving the authorization key of the target copyrighted digital media sent by the key server 103, the digital rights management device sends the authorization key to the target operating system, so that the target operating system can call the FPS service deployed by the target operating system to decrypt the target copyrighted digital media by using the authorization key, and the decrypted target copyrighted digital media is obtained. In this way, the decrypted target copyrighted digital media is directly sent to the system player (denoted by AVPlayer) of the terminal device 101, so that smooth playing of the DRM encrypted (i.e., FPS encrypted) target copyrighted digital media on the terminal device 101 can be realized by the system player.
According to the above description of the media application-based processing scheme and the system architecture provided by the embodiment of the present application, it should also be noted that ① the system architecture shown in fig. 1 mentioned above in the embodiment of the present application is for more clearly describing the technical scheme of the embodiment of the present application, and does not constitute a limitation of the technical scheme provided by the embodiment of the present application. As can be known to those skilled in the art, with the evolution of the system architecture and the appearance of new service scenarios, the technical solution provided by the embodiment of the present application is also applicable to similar technical problems. That is, the system architecture shown in fig. 1 is an exemplary architecture diagram, and the architecture diagram of the image generating system is not limited in this embodiment of the present application. ② In the embodiment of the application, the related data collection and processing should strictly obtain the personal information according to the requirements of related laws and regulations, so that the personal information needs to be informed or agreed (or has the legal basis of information acquisition), and the subsequent data use and processing behaviors are developed within the authorized range of the laws and regulations and the personal information body. For example, when the embodiment of the application is applied to specific products or technologies, such as when playing a target copyrighted digital media, permission or consent of a user needs to be obtained, and collection, use and processing of relevant data (such as obtaining an authorization key of the target copyrighted digital media) need to comply with relevant laws and regulations and standards of relevant regions.
Based on the above-described media application-based processing scheme, the embodiment of the present application proposes a more detailed media application-based processing method, and the media application-based processing method proposed by the embodiment of the present application will be described in detail below with reference to the accompanying drawings. As can be seen from the foregoing related description, the processing method based on the media application provided by the embodiment of the present application relates to interactions between multiple parts or modules, specifically interactions between the digital rights management device, the media application, the target operating system, the content server and the key server. For ease of understanding, different embodiments will be described below with respect to a specific implementation of the digital rights management device, a specific implementation of the media application, and a specific implementation of interactions between all modules.
Referring to fig. 2, fig. 2 is a schematic flow chart of a processing method based on a media application according to an exemplary embodiment of the present application, where the schematic flow chart mainly shows a specific implementation flow of driving the media application and a target operating system to obtain an authorization key for a target copyrighted digital media from the perspective of a digital rights management device, that is, the method flow shown in fig. 2 is applied to the digital rights management device. The method flow shown in fig. 2 may be performed by the aforementioned computer device, which is exemplified by the aforementioned terminal device VisionPro shown in fig. 1. The processing method may include, but is not limited to, steps S201-S204:
s201, when the target copyright digital media in the media application is requested to be played in the target operating system, an authorization request for the target copyright digital media sent by the media application is received.
In a specific implementation, if the user performs a triggering operation on the target copyrighted digital media in the media application, which indicates that the user wants to watch the target copyrighted digital media, the media application requests to play the triggered target copyrighted digital media from the target operating system, that is, determines that the target copyrighted digital media in the media application is requested to be played in the target operating system. In this case, the target operating system obtains, from the media application, a media address of the target copyrighted digital media to be played, where the media address is used to indicate a storage location of media information of the target copyrighted digital media, such as a uniform resource locator (uniform resource locator, URL) of the target copyrighted digital media. The media address of the target copyright digital media in the media application is obtained from the content server by the media application according to the media identifier of the target copyright digital media when the target copyright digital media in the media application is requested to be played in the target operating system, and particularly the media information of the target copyright digital media is obtained from the content server. The media information comprises at least one of a media address of the target copyrighted digital media, a certificate address of the target copyrighted digital media and a second content attribute field of the target copyrighted digital media, wherein the second content attribute field is used for identifying whether the target copyrighted digital media is encrypted by using a digital rights management technology or not by a media application.
Further, considering that the media application has pulled the media information of the target copyrighted digital media from the content server in response to the user's trigger operation for the target copyrighted digital media, the target operating system can directly acquire the media address of the target copyrighted digital from the media application, which is contained in the media information. At this time, the target operating system sends a content attribute acquisition request to the content server corresponding to the media application according to the media address of the target copyrighted digital media, where the content attribute acquisition request is used to request the content server to return a playlist of the target copyrighted digital media. Thus, upon receiving the content attribute acquisition request, the content server returns a playlist of the target copyrighted digital media to the target operating system in response to the content attribute acquisition request. The playlist of the target copyrighted digital media comprises a first content attribute field, wherein the first content attribute field is set for the target operating system and can be identified by the target operating system, and an attribute value of the first content attribute field is used for indicating whether the target copyrighted digital media is encrypted by using a digital rights management technology (such as an FPS technology), if the attribute value is the first attribute value, the target copyrighted digital media is encrypted by using the digital rights management technology, and if the attribute value is the second attribute value, the target copyrighted digital media is not encrypted by using the digital rights management technology.
Further, the target operating system performs content attribute identification processing on a first content attribute field in a play list of the target copyrighted digital media to obtain a target attribute value, if the target attribute value is the first attribute value, it is determined that the first content attribute field indicates that the target copyrighted digital media is encrypted by using a digital copyrighted management technology, the target operating system cannot directly access the target copyrighted digital media, and at the moment, the target operating system needs to inform a media application that the target copyrighted digital media cannot be accessed by the target operating system and requires the media application to acquire an authorization key of the target copyrighted digital media.
Based on the above, in order for the target operating system to play the target copyrighted digital media in the media application, the digital rights management device integrated in the media application drives interaction between the media application and the target operating system to acquire the authorization key of the target copyrighted digital media. Specifically, the digital rights management device receives an encryption notification message generated by the target operating system indicating that the target copyrighted digital media is encrypted using digital rights management techniques. The digital rights management device then forwards the encrypted notification message obtained from the target operating system to the media application, facilitating the media application to know that the target operating system cannot play the target copyrighted digital media. After receiving the encryption notification message sent by the digital rights management device, the media application generates an authorization request for the target copyrighted digital media according to the encryption notification message, and sends the authorization request to the digital rights management device, wherein the authorization request is used for requesting the target copyrighted digital media to be authorized to the target operating system for playing, so that the digital rights management device can drive to execute the operation of acquiring the authorization key of the target copyrighted digital media after receiving the authorization request. After the digital rights management device receives the authorization request for the target copyrighted digital media sent by the media application, step S202 may be performed.
To facilitate an understanding of the above-described implementation, a process for the digital rights management device to receive an authorization request for target copyrighted digital media sent by a media application when the target copyrighted digital media in the media application is requested to be played in the target operating system is described below with reference to fig. 3. As shown in fig. 3, when a target copyrighted digital medium in a media application is subjected to a trigger operation by a user, the media application acquires media information of the target copyrighted digital medium from a content server according to a media identification of the target copyrighted digital medium, the media information including a digital address of the target copyrighted digital medium. When the target copyright digital media in the media application is triggered by the user, the media application further requests the target operating system to play the target copyright digital media, and the target operating system can execute the operation of generating the encryption notification message. If the first content attribute field in the playlist indicates that the target copyrighted digital media is encrypted using digital rights management techniques, the target operating system generates an encryption notification message. Further, the target operating system sends an encryption notification message to the media application through the digital rights management device, so that the media application returns an authorization request to the digital rights management device in response to the encryption notification message, where the authorization request is used to request the digital rights management device to drive the target operating system to acquire an authorization key of the target copyrighted digital media (for a specific implementation procedure, see step S202).
S202, responding to the authorization request, driving the target operating system to generate a server playing context message.
After receiving the authorization request sent by the media application, the digital rights management device determines that the key acquisition operation needs to be executed, and at this time, the digital rights management device drives the target operating system to generate a server playing context message. The server playing context information is used for requesting the authorization key of the target copyrighted digital media from the content server, and the server playing context information comprises media detail information required for playing the target copyrighted digital media content, such as a media identifier (e.g. a content ID) of the target copyrighted digital media, a playing position and the like, and the media detail information is used for requesting the authorization key required for decrypting the target copyrighted digital media from the key server.
In order to ensure the security of the authorization key of the target copyright digital media, a key server for managing the authorization key needs to carry out identity verification on an object (terminal equipment in the embodiment of the application) for requesting the authorization key, and the key server returns the authorization key of the target copyright digital media only under the condition that the verification object is legal and has the key acquisition authority, so that the problems of disclosure of the target copyright digital media and the like caused by malicious stealing of the authorization key are avoided. The embodiment of the application supports the addition of the certificate data issued by the key server in the server playing context message to realize the identity verification of the object requesting the authorization key.
An exemplary process by which the target operating system plays a context message based on the credential data generation server may be as shown in FIG. 4, which may include, but is not limited to, steps s11-s14, wherein:
And s11, the target operating system acquires certificate data of the target copyrighted digital media. The certificate data is issued by the key server for the target copyrighted digital media, and the identity verification of the object holding the certificate data can be realized by verifying the authenticity of the certificate data.
In order to improve the acquisition efficiency of the certificate data, the embodiment of the application supports the pre-caching of the certificate data by the digital rights management equipment. Therefore, when the target operating system needs to acquire the certificate data of the target copyrighted digital media, the time consumption for establishing communication connection with the key server so as to acquire the certificate data according to the certificate address of the target copyrighted digital media can be reduced, the time for starting playing of the target copyrighted digital media is shortened, and the resource loss caused by communication connection is also reduced.
As described above, the digital rights management apparatus includes the certificate manager and the rights manager therein. The embodiment of the application supports that after the media application acquires the media information of the target copyrighted digital media from the content server, if the media application judges that the target copyrighted digital media is encrypted by using a digital rights management technology according to the second content attribute field in the media information, the media application starts the digital rights management equipment. When the digital rights management device is started, the certificate data of the target copyrighted digital media is asynchronously pulled. The process of asynchronously pulling the certificate data of the target copyrighted digital media comprises the steps of inquiring whether the certificate data of the target copyrighted digital media exist in a certificate manager according to the certificate address of the target copyrighted digital media, acquiring the certificate data of the digital media from a key server according to a storage position pointed by the certificate address of the digital media if the certificate data of the digital media do not exist in the certificate manager, and storing the certificate data of the digital media and the certificate address in a related mode to the certificate manager. Wherein the certificate manager stores certificate address-certificate data of the copyrighted digital media in the form of key-value pairs (k-v).
S12, the target operating system acquires a play list of the target copyrighted digital media.
It should be noted that, for the specific implementation process of the target operating system to obtain the playlist of the target copyrighted digital media, reference may be made to the description of the specific implementation process of the target operating system to obtain the playlist in step S201, which is not repeated herein. The playlist acquired by the target operating system includes, in addition to the aforementioned first content attribute field, media detail information that can be identified by the target operating system and is related to the target copyrighted digital media. The media detail information may include, but is not limited to, a video length of the video when the target copyrighted digital media is video, a storage address of each sub-media (e.g., video clip) in the target copyrighted digital media, a video length of each sub-media, and so on.
It should be noted that, in the embodiment of the present application, the order of executing step s11 and step s12 by the target operating system is not limited.
S13, the target operating system generates an initial context message based on the certificate data of the target copyrighted digital media and the media detail information. The initial context message is used to request the key server to return an authorization key for the target copyrighted digital media.
S14, the target operating system packages the initial context message and the certificate data into a server play context message.
In step s13-s14, the certificate data of the target copyrighted digital media is not only involved in the generation of the initial context message, but also packaged into a data packet and directly sent to the key server, so that the key server can judge whether the identity of the computer equipment is legal or not based on the certificate data in the context message played by the server, thereby effectively guaranteeing the security of the authorization key of the target copyrighted digital media.
S203, acquiring an authorization key of the target copyrighted digital media from a key server based on the server play context message.
In order to ensure the security of the authorization key of the target copyrighted digital media in the transmission process, the authorization key of the target copyrighted digital media is transmitted in a content key context message.
In the specific implementation, after the digital rights management device acquires the server playing context message from the target operating system, the digital rights management device sends the server playing context message to the key server, so that the key server responds to the server playing context message to successfully verify the identity of the terminal device, and then acquires the authorization key of the target copyrighted digital media. The key server encrypts the authorization key of the target copyrighted digital media to obtain a content key context message (Content Key Context, CKC), which is an encrypted message containing the authorization key of the target copyrighted digital media and is intended to securely return the authorization key of the target copyrighted digital media to the digital rights management device player, in order to ensure the security of the authorization key of the target copyrighted digital media during transmission. In this way, the digital rights management device receives the content key context message returned by the key server.
And S204, transmitting the authorization key to the target operating system, so that the target operating system uses the authorization key to access and play the target copyrighted digital media.
After the digital rights management device obtains the content key context message from the key server, the content key context message is sent to a protocol decryption service in the target operating system, namely an FPS service, so that the protocol decryption service decrypts the content key context message and then obtains an authorization key of the target copyrighted digital media from the content key context message. And then, the protocol decryption service decrypts the target copyright digital media by using the authorization key of the target copyright digital media to obtain decrypted target copyright digital media. Further, the decrypted target copyrighted digital media can be transmitted to a system player of the target operating system, so that the system player can safely and smoothly play the decrypted target copyrighted digital media.
In summary, the digital rights management device provided in the embodiment of the present application is developed based on the digital rights management technology, specifically, based on the FPS technology. Therefore, as long as the target operating system deployed on the computer device supports the FPS technology, in particular, a protocol decryption service (FPS service) adapted to the FPS technology is deployed, the digital rights management device in the media application supports decryption and playing of the target copyrighted digital media encrypted by the FPS technology in the target operating system, so that the digital rights of the target copyrighted digital media can be protected. In particular, the defect that the current VisionPro equipment does not support playing of target copyrighted digital media encrypted by the FPS technology can be overcome, and the decryption and playing of target copyrighted digital media in AIV format encrypted by the FPS technology can be supported on VisionPro equipment based on the digital rights management equipment.
Referring to fig. 5, fig. 5 is a schematic flow chart of another processing method based on a media application according to an exemplary embodiment of the present application, where the schematic flow chart mainly shows a specific implementation flow of acquiring an authorization key for a target copyrighted digital media from the perspective of the media application, that is, the method flow shown in fig. 5 is applied to the media application. The method flow shown in fig. 5 may be performed by the aforementioned computer device, which is exemplified by the aforementioned terminal device VisionPro shown in fig. 1. The processing method may include, but is not limited to, steps S501-S503:
and S501, in response to the target copyrighted digital media in the media application being requested to be played in the target operating system, sending a media playing request to the target operating system.
The user can execute triggering operation on the target copyrighted digital media which is wanted to be watched in the display screen according to own viewing requirements, at the moment, the media application determines that the user wants to watch the target copyrighted digital media and generates a media playing request, and the media playing request is used for requesting a system player in a target operating system to play the target copyrighted digital media. After receiving the play request sent by the media application, the target operating system may perform a series of operations of obtaining the media address of the target copyrighted digital media, and sending a content attribute obtaining request to a content server corresponding to the media application according to the media address of the target copyrighted digital media, so as to obtain a play list of the target copyrighted digital media, and so on. The series of operations performed after the target operating system receives the play request sent by the media application may refer to the description related to the related content shown in step S201 in the embodiment shown in fig. 2, which is not described herein.
In addition, when the target copyrighted digital media in the media application is requested to be played in the target operating system, the media application needs to acquire a media identifier of the copyrighted digital media, where the media identifier is a flag (such as an ID, a number, etc.) for uniquely identifying the target copyrighted digital media. The media application then obtains media information of the target copyrighted digital media from a content server corresponding to the media application according to the media identification of the target copyrighted digital media, wherein the media information comprises a second content attribute field of the target copyrighted digital media which can be identified by the media application but cannot be identified by the target operating system, and the second content attribute field is used for the media application to identify whether the target copyrighted digital media is encrypted by using a digital rights management technology. When the second content attribute field indicates that the target copyrighted digital media is encrypted using digital rights management techniques, the media application is launched with respect to the digital rights management device. The related content of the management of the certificate data by the digital rights management device after the startup may be referred to the related description of the related content shown in step S201 in the embodiment shown in fig. 2, which is not described herein.
S502, when receiving an encryption notification message returned by the target operating system through the digital rights management device, generating an authorization request for the target copyrighted digital media.
And S503, sending the authorization request to the digital rights management device.
In steps S502-S503, if the target operating system detects that the target copyrighted digital media is encrypted based on the digital rights management technology according to the first content attribute field in the playlist of the target copyrighted digital media, then the target operating system returns an encryption notification message to the media application via the digital rights management device, as described above. Thus, the media application receives the encryption notification message and knows that the target operating system does not have the right to play the target copyrighted digital media, and the media application generates an authorization request. The media application sends an authorization request to the digital rights management device so that the digital rights management device drives the target operating system to generate a server play context message in response to the authorization request, and the server play context message is used for requesting an authorization key of the target copyrighted digital media from the key server. And the digital rights management device acquires the authorization key of the target copyrighted digital media from the key server based on the server playing context message, and transmits the authorization key to the target operating system so that the target operating system can access and play the target copyrighted digital media by using the authorization key.
It should be noted that, after the above-mentioned digital rights management device receives the authorization request sent by the media application, the specific implementation process of driving the target operating system and the media application to jointly obtain the authorization key of the target copyrighted digital media may refer to the specific implementation process shown in steps S201-S204 in the embodiment shown in fig. 2, which is not repeated herein.
In summary, the embodiment of the application can ensure that the copyrighted digital media encrypted by using the digital rights management technology in the media application can only be played through legal authorization and key decryption by integrating the digital rights management equipment in the media application, thereby protecting the copyrights of the copyrighted digital media in the media application and avoiding illegal copying and illegal propagation of the copyrighted digital media. In addition, the embodiment of the application does not limit the media format of the copyrighted digital media, can be compatible with the decryption and playing of the copyrighted digital media which are not in AIV format and are encrypted based on FPS technology besides the decryption and playing of the target copyrighted digital media in AIV format, and can ensure that media application can be compatible with the playing of copyrighted digital media in mass media format, and improve the accommodation capacity of copyrighted digital media of media application. In addition, the embodiment of the application expands the selectivity of the media application to the running environment, and can also be expanded to the running of the media application on the iPhone device based on the IOS system and the running of the media application on the Mac device based on the MacOS system besides supporting the running of the media application on the VisionPro device based on the VisionOS system, so that the media application can be deployed in various devices in a cross-platform mode.
The foregoing embodiment of fig. 2 is an introduction of the media application based processing scheme provided by the embodiment of the present application from the dimension of the digital rights management device, and the embodiment of fig. 5 is an introduction of the media application based processing scheme provided by the embodiment of the present application from the dimension of the media application. In order to facilitate the comprehensive understanding of the overall technical flow of the processing scheme based on the media application, the specific implementation process of the processing method based on the media application is implemented by the interaction among the digital rights management device, the media application, the target operating system, the content server and the key server, which is given below in conjunction with fig. 6, wherein the work scheduling of each module (i.e., the media application, the target operating system, the content server and the key server) in the whole implementation process is completed through direct or indirect driving of the digital rights management device. As shown in fig. 6, the implementation process may include, but is not limited to, steps S601-S615, wherein:
And S601, the media application acquires media information according to the media identifier. Specifically, if any one of the digital media in the media application is triggered to be played by the user, the media application acquires a media identifier (such as an ID) of the any one of the digital media, and pulls media information of the any one of the digital media from a content server corresponding to the media application according to the media identifier request.
S602, the content server returns the media information. Specifically, when the content server receives the information acquisition request of the media application for any one of the digital media, the content server may query the media information of any one of the digital media from the database according to the media identifier of the any one of the digital media, and then return the media information to the media application.
S603, the media application judges whether any digital media is a copyrighted digital media encrypted by using the digital rights management technology. Specifically, the media application includes a first content attribute field in the media information pulled from the content server, and then the media application may identify the first content attribute field to detect whether the any digital media is encrypted using digital rights management techniques.
S604, if yes, the media application starts the digital rights management equipment and performs certificate management. If the media application determines that any of the digital media is copyrighted digital media encrypted using digital rights management techniques, then the any of the digital media may be referred to as target copyrighted digital media. In the case that the media application judges that the target copyrighted digital media is the copyrighted digital media encrypted by using the digital rights management technology according to the first content attribute field, the media application starts the digital rights management device integrated therein. The digital rights management device after being started may perform certificate management, and the specific implementation process of the digital rights management device for performing certificate management may refer to the related description of the related content shown in step s11, which is not described herein.
S605, the media application requests the target operating system to play the target copyrighted digital media. It should be noted that, the execution sequence of step S605 and step S601 is not limited in the embodiment of the present application. For example, when any of the target copyrighted digital media in the media application is triggered to play by the user, the media application may simultaneously perform step S601 and step S605. For another example, when any target copyrighted digital media in the media application is triggered to be played by the user, the media application may execute step S601 first, and then execute step S605. For another example, when any target copyrighted digital media in the media application is triggered to be played by the user, the media application may execute step S605 first and then execute step S601, where the target operating system needs to wait for the media application to acquire the media information from the content server and then execute step S606.
S606, the target operating system acquires a play list according to the media address. Specifically, when receiving a media playing request of a media application for playing the target copyrighted digital media, the target operating system acquires a media address of the target copyrighted digital media from the media application, where the media address is included in the media information. The target operating system then requests a playlist of target copyrighted digital media from the content server based on the media address. Wherein the playlist includes a second content attribute field and media detail information that can be identified by the target operating system.
S607, the target operating system judges whether the target copyrighted digital media is copyrighted digital media encrypted by using the digital rights management technology. As described above, the playlist of the target copyrighted digital medium includes the second content attribute field, so the target operating system determines whether the target copyrighted digital medium is a copyrighted digital medium encrypted by using the digital rights management technology according to the second content attribute field, if so, step S608 is executed, and if not, step S615 is executed.
And S608, if yes, the target operating system sends the encryption notification message to the digital rights management equipment. Specifically, if the target operating system determines that the target copyrighted digital media is encrypted by using the digital rights management technology according to the second content attribute field, the target operating system cannot play the encrypted target copyrighted digital media, and at this time, the target operating system generates an encryption notification message and sends the encryption notification message to the digital rights management device.
S609, the digital rights management device drives the target operating system to generate a server play context message in response to the authorization request. Specifically, the digital rights management device may send the encrypted notification message to the media application after receiving the encrypted notification message sent by the target operating system. If the media application determines that the target operating system is authorized to play the encrypted target copyrighted digital media, the media application generates an authorization request and sends the authorization request to the digital rights management device so that the digital rights management device drives the target operating system to generate a server play context message for requesting an authorization key for the target copyrighted digital media in response to the authorization request.
S610, the target operating system returns the server playing context information. Specifically, the target operating system is driven by the digital rights management device, and generates a server play context message after acquiring the certificate data and the information in the playlist from the digital rights management device. It should be noted that, for the specific implementation process of the target operating system generating server playing context message, reference may be made to the description of the specific implementation process shown in the foregoing steps s13 and s14, which is not repeated herein.
S611, the digital rights management device sends the server play context message to the key server.
S612, the key server returns a content key context message. Specifically, after receiving the server playing context message sent by the digital rights management device, the key server decrypts the server playing context message, and then can query the authorization key of the target copyrighted digital media, package the authorization key into a content key context message, and then return the content key context message to the digital rights management device.
S613, the digital rights management device transmits the content key context message to the protocol decryption service. The protocol decryption service is deployed in the target operating system, and after receiving the content key context message, the protocol decryption service can decrypt the target copyrighted digital media by using the authorization key in the content key context message to obtain decrypted target copyrighted digital media.
And S614, the protocol decryption service sends the decrypted target copyright digital media to a system player for playing.
S615, if not, the unencrypted digital media is sent to a system player for playing. That is, if the target operating system detects that any digital media to be played is not the copyrighted digital media encrypted using the digital rights management technology according to the playlist, it is determined that the target operating system has the right to play the any digital media, the any digital media may be directly sent to the system player for playing.
In summary, steps S601-S615 provide a complete flow of the media application-based processing method provided by the embodiment of the present application from the dimension of interaction between multiple modules. On the one hand, the digital rights management device is developed based on the digital rights management technology, so that as long as the target operating system deployed on the terminal device supports the FPS technology, the digital rights management device in the media application supports decryption and playing of the target copyrighted digital media encrypted by the FPS technology in the target operating system, and can protect the digital rights of the target copyrighted digital media. On the other hand, the processing scheme based on the media application provided by the embodiment of the application has ecological system diversity. For example, the digital rights management device provided by the embodiment of the application can be extended to realize decryption and playing of target copyrighted digital media encrypted by FPS technology in an iPhone device based on an IOS system, and to realize decryption and playing of target copyrighted digital media encrypted by FPS technology in a Mac device based on a MacOS system, and to realize decryption and playing of target copyrighted digital media encrypted by FPS technology in other devices deployed with other operating systems supporting FPS technology and providing specific interfaces for the digital rights management device to call, so that the embodiment of the application has excellent cross-platform characteristics (namely, the characteristic that the processing method based on media application can be deployed to multiple types of devices). In yet another aspect, the media application-based processing scheme provided by the embodiments of the present application has media format diversity. For example, the digital rights management device provided by the embodiment of the application can be compatible with decryption and playing of target copyrighted digital media which are encrypted based on FPS technology and are in addition to the target copyrighted digital media which support AIV format.
The foregoing details of the method of embodiments of the present application are provided for the purpose of better implementing the foregoing aspects of embodiments of the present application, and accordingly, the following provides an apparatus of embodiments of the present application. In the present embodiment, the term "module" or "unit" refers to a computer program or a part of a computer program having a predetermined function and working together with other relevant parts to achieve a predetermined object, and may be implemented in whole or in part by using software, hardware (such as a processing circuit or a memory), or a combination thereof. Also, a processor (or multiple processors or memories) may be used to implement one or more modules or units. Furthermore, each module or unit may be part of an overall module or unit that incorporates the functionality of the module or unit.
Fig. 7 is a schematic structural diagram of a processing device based on a media application according to an exemplary embodiment of the present application, where the processing device based on a media application may be used to perform some or all of the steps in the method embodiments shown in fig. 2 and 6. Referring to fig. 7, the media application is run in a target operating system, and the target operating system accesses copyrighted digital media in the media application through a digital rights management device, the apparatus includes the following units:
A receiving unit 701, configured to receive an authorization request for a target copyrighted digital medium sent by a media application when the target copyrighted digital medium in the media application is requested to be played in a target operating system;
A processing unit 702, configured to drive a target operating system to generate a server play context message in response to the authorization request, where the server play context message is used to request an authorization key of the target copyrighted digital media from the key server;
The processing unit 702 is further configured to acquire an authorization key of the target copyrighted digital media from the key server based on the server play context message;
The processing unit 702 is further configured to send the authorization key to the target operating system, so that the target operating system uses the authorization key to access and play the target copyrighted digital media.
In one implementation, the authorization key of the target copyrighted digital media is carried in a content key context message, and the processing unit 702 is configured to, when acquiring the authorization key of the target copyrighted digital media from the key server based on the server play context message:
Transmitting the server playing context information to a key server, enabling the key server to respond to the server playing context information to acquire an authorization key of the target copyright digital media, and encrypting the authorization key of the target copyright digital media by the key server to obtain a content key context information;
And receiving a content key context message returned by the key server.
In one implementation, the target copyrighted digital media is encrypted by using the digital rights management technology, and a protocol decryption service adapted to the digital rights management technology is deployed in the target operating system, and the processing unit 702 is configured to send the authorization key to the target operating system, so that when the target operating system uses the authorization key to access and play the target copyrighted digital media, the processing unit is specifically configured to:
Transmitting the content key context message to a protocol decryption service in a target operating system, so that the protocol decryption service decrypts the content key context message and acquires an authorization key of the target copyrighted digital media from the decrypted content key context message; and after the protocol decryption service decrypts the target copyright digital media by using the authorization key, the decrypted target copyright digital media is sent to a system player for playing.
In one implementation, the processing unit 702 is further configured to:
Receiving an encryption notification message sent by a target operating system, wherein the encryption notification message is used for indicating that the target copyrighted digital media is encrypted by using a digital copyrighted management technology;
The encrypted notification message is forwarded to the media application such that the media application generates an authorization request for the target copyrighted digital media from the encrypted notification message and sends the authorization request to the digital rights management device.
In one implementation, a process for generating an encrypted notification message by a target operating system includes:
the target operating system acquires a media address of the target copyrighted digital media;
the target operating system acquires a play list of the target copyrighted digital media from a content server corresponding to the media application according to the media address;
The target operating system generates an encryption notification message when the first content attribute field indicates that the target copyrighted digital media is encrypted using digital rights management techniques.
In one implementation, a target operating system obtains a media address of a target copyrighted digital media, comprising:
the target operating system acquires a media address of the target copyrighted digital media from the media application;
When the target copyright digital media in the media application is requested to be played in the target operating system, the media application acquires media information of the target copyright digital media from the content server according to the media identification of the target copyright digital media, wherein the media information comprises at least one of a media address of the target copyright digital media, a certificate address of the target copyright digital media and a second content attribute field of the target copyright digital media, and the second content attribute field is used for the media application to identify whether the target copyright digital media is encrypted by using a digital copyright management technology.
In one implementation, the digital rights management device includes a digital rights management plug-in or a digital rights management program;
the digital rights management device comprises a certificate manager for caching certificate addresses and certificate data of the target copyrighted digital media accessed in the media application, wherein the certificate addresses point to storage locations of the certificate data.
In one implementation, the media application initiates the digital rights management device when the second content attribute field of the target copyrighted digital media indicates that the target copyrighted digital media is encrypted using digital rights management technology, the processing unit 702 being further configured to:
Inquiring whether the certificate data of the target copyrighted digital media exist in a certificate manager according to the certificate address of the target copyrighted digital media;
If the certificate data of the target copyrighted digital media does not exist in the certificate manager, acquiring the certificate data of the target copyrighted digital media from the key server according to the storage position pointed by the certificate address of the target copyrighted digital media;
And storing the certificate data and the certificate address of the target copyrighted digital media in a certificate manager in an associated manner.
In one implementation, a process for a target operating system to generate a server play context message includes:
Obtaining certificate data of the target copyrighted digital media from a certificate manager, the certificate data being issued by a key server for the target copyrighted digital media, and
Acquiring a play list of the target copyrighted digital media, wherein the play list comprises media detail information which can be identified by a target operating system and is related to the target copyrighted digital media;
Generating an initial context message based on the credential data and the media detail information;
The initial context message and the certificate data are packaged to generate a server play context message.
According to one embodiment of the present application, each unit in the media application-based processing device shown in fig. 7 may be separately or completely combined into one or several additional units, or some unit(s) thereof may be further split into a plurality of units with smaller functions, which may achieve the same operation without affecting the implementation of the technical effects of the embodiment of the present application. The above units are divided based on logic functions, and in practical applications, the functions of one unit may be implemented by a plurality of units, or the functions of a plurality of units may be implemented by one unit. In other embodiments of the present application, the image processing apparatus may also include other units, and in practical applications, these functions may also be realized with assistance of other units, and may be realized by cooperation of a plurality of units. According to another embodiment of the present application, a media application-based processing device as shown in fig. 7 may be constructed by running a computer program capable of executing the steps involved in the respective methods as shown in fig. 2 and 6 on a general-purpose computing device such as a computer including a central processing unit (Central Processing Unit, CPU), a random access storage medium (Random Access Memory, RAM), a read-only storage medium (ReadOnly Memory, ROM), etc., and a storage element, and a media application-based processing method of an embodiment of the present application is implemented. The computer program may be recorded on, for example, a computer-readable recording medium, and loaded into and run in the above-described computing device through the computer-readable recording medium.
In the embodiment of the application, a self-developed digital rights management device is provided, so that a target operating system can safely access copyrighted digital media in a media application running in the target operating system through the digital rights management device. The digital rights management device can drive the target operating system and the media application to execute the key acquisition and decryption functions for the copyrighted digital media, so that the safe playing of the copyrighted digital media with digital rights in the media application by the target operating system is realized. The process of executing the key obtaining and decrypting functions for the copyrighted digital media may include the step that when the target copyrighted digital media in the media application is requested to be played in the target operating system (e.g., the target copyrighted digital media in the media application is triggered to be played by a user, when the media application requests to play the target copyrighted digital media in the target operating system), the media application sends an authorization request for the target copyrighted digital media to the digital copyrighted digital media. When the digital rights management device receives an authorization request for the target copyrighted digital media sent by the media application, the target operating system is driven to generate a server playing context message in response to the authorization request, and the server playing context message is used for requesting an authorization key of the target copyrighted digital media from the key server. At this time, after the digital rights management device acquires the server play context message from the target operating system, the digital rights management device acquires the authorization key of the target copyrighted digital media from the key server and sends the authorization key to the target operation, so that the target operating system can access and play the target copyrighted digital media by using the authorization key. Therefore, on one hand, the embodiment of the application provides the digital rights management equipment which can well drive the target operating system and the media application to acquire and decrypt the keys of the copyrighted digital media, thereby overcoming the defect that the copyrighted digital media with the digital rights in the media application cannot be played on the target operating system, and improving the safe playing and smooth playing of the copyrighted digital media in the media application. On the other hand, as known from the above-described process of implementing the key acquisition and decryption functions by the digital rights management device, the process does not involve the media format of the target copyrighted digital media, and has excellent compatibility, in particular, the key acquisition and decryption of copyrighted digital media capable of compatibly processing multiple media formats in a media application, and the secure playback of copyrighted digital media in multiple media formats in the media application is implemented. On the other hand, the digital rights management device has strong adaptation capability, can drive a target operating system and various operating systems which are in the same ecological system as the target operating system, has a wider application range, and shows excellent cross-platform characteristics.
Fig. 8 is a schematic structural diagram of a processing device based on a media application according to an exemplary embodiment of the present application, where the processing device based on a media application may be used to perform some or all of the steps in the method embodiments shown in fig. 5 and 6. Referring to fig. 8, the media application is run in a target operating system, and the target operating system accesses copyrighted digital media in the media application through a digital rights management device, the apparatus includes the following units:
A sending unit 801, configured to send a media playing request to a target operating system in response to a target copyrighted digital media in a media application being requested to be played in the target operating system;
A processing unit 802, configured to generate an authorization request for the target copyrighted digital media when receiving, by the digital rights management device, an encryption notification message returned by the target operating system, the encryption notification message indicating that the target copyrighted digital media is encrypted using digital rights management technology;
The processing unit 802 is further configured to send an authorization request to the digital rights management device, cause the digital rights management device to drive the target operating system to generate a server play context message in response to the authorization request, the server play context message is used to request an authorization key for the target copyrighted digital media from the key server, cause the digital rights management device to acquire the authorization key for the target copyrighted digital media from the key server based on the server play context message, and cause the digital rights management device to send the authorization key to the target operating system, cause the target operating system to access and play the target copyrighted digital media using the authorization key.
In one implementation, the digital rights management device is integrated in a media application, and the processing unit 802 is further configured to:
Acquiring a media identifier of a target copyrighted digital media;
Acquiring media information of the target copyright digital media from a content server corresponding to the media application according to the media identifier of the target copyright digital media, wherein the media information comprises at least one of a media address of the target copyright digital media, a certificate address of the target copyright digital media and a second content attribute field of the target copyright digital media;
The digital rights management device is activated when the second content attribute field indicates that the target copyrighted digital media is encrypted using digital rights management techniques.
According to one embodiment of the present application, each unit in the media application-based processing device shown in fig. 8 may be separately or completely combined into one or several additional units, or some unit(s) thereof may be further split into a plurality of units with smaller functions, which may achieve the same operation without affecting the implementation of the technical effects of the embodiment of the present application. The above units are divided based on logic functions, and in practical applications, the functions of one unit may be implemented by a plurality of units, or the functions of a plurality of units may be implemented by one unit. In other embodiments of the present application, the image processing apparatus may also include other units, and in practical applications, these functions may also be realized with assistance of other units, and may be realized by cooperation of a plurality of units. According to another embodiment of the present application, a media application-based processing device as shown in fig. 8 may be constructed by running a computer program capable of executing the steps involved in the respective methods as shown in fig. 5 and 6 on a general-purpose computing device such as a computer including a central processing unit (Central Processing Unit, CPU), a random access storage medium (Random Access Memory, RAM), a read-only storage medium (ReadOnly Memory, ROM), etc., and a storage element, and a media application-based processing method of an embodiment of the present application is implemented. The computer program may be recorded on, for example, a computer-readable recording medium, and loaded into and run in the above-described computing device through the computer-readable recording medium.
Fig. 9 is a schematic diagram of a computer device according to an exemplary embodiment of the present application. Referring to fig. 9, the computer device includes a processor 901, a communication interface 902, and a computer readable storage medium 903. Wherein the processor 901, the communication interface 902, and the computer readable storage medium 903 may be connected by a bus or other means. Wherein the communication interface 902 is configured to receive and transmit data. The computer readable storage medium 903 may be stored in a memory of a computer device, the computer readable storage medium 903 is used to store a computer program, and the processor 901 is used to execute the computer program stored by the computer readable storage medium 903. The processor 901 (or CPU) is a computing core as well as a control core of the computer device, which is adapted to implement one or more computer programs, in particular to load and execute one or more computer programs for implementing the respective method flows or respective functions.
The embodiment of the application also provides a computer readable storage medium (Memory), which is a Memory device in the computer device and is used for storing programs and data. It is understood that the computer readable storage medium herein may include both built-in storage media in a computer device and extended storage media supported by the computer device. The computer readable storage medium provides storage space that stores a processing system of a computer device. Also stored in this memory space are one or more computer programs, which may be one or more computer programs, suitable for being loaded and executed by the processor 901. The computer readable storage medium may be a high-speed RAM memory, or may be a non-volatile memory (non-volatile memory), such as at least one magnetic disk memory, or may alternatively be at least one computer readable storage medium located remotely from the processor.
In one embodiment, the computer device may be a terminal or a server mentioned in the foregoing embodiment, the computer readable storage medium stores one or more computer programs, the processor 901 loads and executes one or more computer programs stored in the computer readable storage medium to implement corresponding steps in the foregoing media application based processing method embodiment, and in a specific implementation, the processor 901 loads and executes steps of each embodiment of the present application, where the steps of each embodiment of the present application may be referred to in the foregoing description of each embodiment and are not described herein.
Based on the same inventive concept, the principle and beneficial effects of the computer device provided in the embodiments of the present application for solving the problems are similar to those of the processing method based on media application in the embodiments of the method of the present application, and may refer to the principle and beneficial effects of implementation of the method, which are not described herein for brevity.
The embodiment of the application also provides a computer program product, which comprises a computer program, and the processing method based on the media application is realized when the computer program is executed by a processor.
Those of ordinary skill in the art will appreciate that the various illustrative elements and algorithm steps described in connection with the embodiments disclosed herein may be implemented as electronic hardware, or combinations of computer software and electronic hardware. Whether such functionality is implemented as hardware or software depends upon the particular application and design constraints imposed on the solution. Skilled artisans may implement the described functionality in varying ways for each particular application, but such implementation decisions should not be interpreted as causing a departure from the scope of the present application.
In the above embodiments, it may be implemented in whole or in part by software, hardware, firmware, or any combination thereof. When implemented in software, may be implemented in whole or in part in the form of a computer program product. The computer program product comprises one or more computer programs (one or more). When the computer program is loaded and executed on a computer, the flow or functions according to the embodiments of the present application are produced in whole or in part. The computer may be a general purpose computer, a special purpose computer, a network of computers, or other programmable devices. The computer program may be stored in or transmitted across a computer readable storage medium. The computer program may be transmitted from one website, computer, server, or data center to another website, computer, server, or data center by a wired (e.g., coaxial cable, fiber optic, digital subscriber line (Digital Subscriber Line, DSL)) or wireless (e.g., infrared, wireless, microwave, etc.). Computer readable storage media can be any available media that can be accessed by a computer or data storage devices, such as servers, data centers, etc., that contain an integration of one or more available media. The usable medium may be a magnetic medium (e.g., floppy disk, hard disk, magnetic tape), an optical medium (e.g., digital storage technology (Digital Video Disk, DVD)), or a semiconductor medium (e.g., solid state disk (Solid STATE DISK, SSD)), or the like.
The foregoing is merely illustrative of the present application, and the present application is not limited thereto, and any person skilled in the art will readily recognize that variations or substitutions are within the scope of the present application. Therefore, the protection scope of the present application shall be subject to the protection scope of the claims.