CN1320797C - A method for large-scale living broadcast of digital content - Google Patents

Abstract

The invention relates to a method for large-scale live broadcast of digital content, belonging to the technical field of information dissemination. First receive the digital content and perform encryption processing; receive the user's personal registration information and generate an identity identifier; the user obtains the address of the scheduling module from the publishing module; the user sends a scheduling request; the scheduling module sends the scheduling result to the client, and the client selects a live module , initiate a service request to it; the live broadcast module sends digital content to the client; the client requests a license from the license issuing module, and reproduces the digital content according to the license. The method of the present invention can be used to provide live broadcast services to users. By encrypting the live digital content or adding a watermark to the live digital content, the user cannot directly obtain the original digital content from the encrypted digital content. The way of licensing enables content owners to control and manage users' use of the content and prevent users from illegally using the content.

Description

A method for large-scale live broadcast of digital content

technical field

The invention relates to a method for large-scale live broadcast of digital content, in particular to a method for digital rights management of digital content under large-scale live broadcast, and belongs to the technical field of information dissemination.

Background technique

The emergence of digital technology has resulted in the emergence and distribution of a large amount of content in digital form. Digital technology makes the copying of digital content faster, cheaper and less distorted. With the development of the Internet, the dissemination of digital content data has become very easy. Many digital content data are illegally copied and disseminated without control and management, thus harming the interests of content owners. Large-scale live broadcasting, as a method of rapid dissemination of digital content, is becoming more and more widely used. The control and management of digital content under large-scale live broadcast has become a very important issue. Due to the large scale of large-scale live broadcasting, the interaction between the parties participating in the live broadcasting is very complicated, and some existing methods are not suitable for large-scale live broadcasting. The traditional encryption or scrambling method can only control and manage the transmission process of digital content. Once the digital content reaches the user, it loses the control and management of the digital content, and the traditional encryption or scrambling method has no effect on the content. There are only two possibilities for the control and management of the user to use and not to use, and the selectivity is poor.

Contents of the invention

The purpose of the present invention is to propose a method for large-scale live broadcast of digital content. By encrypting the live digital content or adding a watermark to the live digital content, the user cannot directly obtain the original digital content from the encrypted digital content. , by issuing a license, the content owner can control and manage the use of the content by different users in different ways, and prevent users from illegally using the content.

The method for large-scale live broadcast of digital content proposed by the present invention comprises the following steps:

(1) The digital content processing module receives the digital content and encrypts the digital content to obtain three signals, the first of which is the encrypted digital content, which is sent to the live broadcast module, and the second is the content introduction of the digital content, The unique identifier of the digital content and the address of the scheduling module corresponding to the unique identifier are sent to the publishing module, and the third channel is the unique identifier of the digital content and the address of the live broadcast module corresponding to the encrypted digital content, which is sent to to the scheduling module;

(2) The registration module receives the user's personal registration information, generates a unique identifier for the user, and combines the user identifier with the public information in the personal registration information to generate the user's identity identifier;

(3) The user retrieves the introduction of the digital content from the publishing module through the client, and obtains the unique identifier of the required digital content and the address of the scheduling module corresponding to the unique identifier according to the introduction of the digital content;

(4) The user sends a scheduling request to the scheduling module according to the scheduling module address of the above step (3), and sends the unique identifier of the digital content and the user's own identity identifier to it;

(5) After the scheduling module receives the scheduling request, it sends the user's identity identifier to the registration module, and the registration module verifies it, and sends the verification result back to the scheduling module;

(6) The scheduling module checks the verification result. If the verification result is not passed, the scheduling module rejects the user request. If the verification result is passed, the scheduling module performs scheduling according to the unique identifier of the received digital content, and will match the digital content The address of the live broadcast module where the encrypted digital content corresponding to the unique identifier of the content is sent to the client, and the scheduling result is saved at the same time;

(7) The client initiates a service request to the live broadcast module according to the address of the above live broadcast module, and at the same time sends the user identity identifier and the unique identifier of the digital content to the live broadcast module to obtain the digital content;

(8) The live broadcast module sends the received user's identity identifier and the unique identifier of the digital content to the scheduling module, and the scheduling module compares it with the scheduling result saved in the above step (6), and returns the comparison result to the live broadcast module;

(9) The live broadcast module checks the received comparison result. If the comparison result is not passed, the live broadcast module rejects the request of the client. If the comparison result is passed, the encrypted content is provided according to the unique identifier of the received digital content. digital content to the client;

(10) After the client receives the encrypted digital content, it searches for the license corresponding to the digital content. If there is no license, the user initiates a license issuance request to the license issuance module through the client, and at the same time sends his identity The identifier, the requested use right and the unique identifier of the digital content are sent to the license issuing module;

(11) The license issuing module sends the received user identity identifier to the registration module, and the registration module verifies it, and returns the verification result to the license issuing module;

(12) The license issuing module checks the received verification result. If the verification result is not passed, the license issuing module rejects the user's request. Issue a license with the unique identifier of the rights and digital content, send a copy of the issued license to the client, and save the license at the same time;

(13) The client reproduces the received encrypted digital content according to the user's actual needs under the rights permitted in the license.

The encryption processing in the above method includes:

(1) Generate an encrypted key sequence using the key seed;

(2) Use the key in the key sequence to encrypt the digital content according to the encryption algorithm, and after encrypting a fixed-length digital content with a certain key, replace it with another key to the next fixed-length number Content is encrypted for added protection of digital content.

The personal registration information in the above method includes: name, address, password, email, landline phone number, ID number, mobile phone number, and credit card number, among which name, address, email, and landline phone number are public information, and password, identity The certificate number, mobile phone number, and credit card number are not public information.

The method for generating the user identity identifier in the above method includes the following steps:

(1) Select public information from the user's personal registration information;

(2) Each user generates a unique identifier;

(3) Composing the public information in step (1) and the unique identifier in step (2) into a new sequence;

(4) using a hash algorithm to hash the sequence in step (3) to obtain a string of hash values;

(5) Use the private key set by the registration module to encrypt the hash value to obtain the ciphertext;

(6) Put together the sequence of step (3) and the ciphertext of step (5) to obtain the user identity identifier.

The user rights in the above method are: time to watch digital content, number of times to watch digital content, whether to save received digital content, whether to copy saved digital content to others, whether to copy saved digital content to Another device or the ability to distribute any one or more of the stored digital content.

The method for generating a license in the above method includes the following steps:

(1) Generate unique watermark information related to the user;

(2) Encrypt the watermark information in step (1) with the public key of the license issuance module to obtain the watermark ciphertext;

(3) The identity identifier of the user, the unique identifier of the digital content, the key seed used to generate the key sequence of the encrypted digital content, the user's right to use, the validity period of the license and the above-mentioned watermark ciphertext form a sequence;

(4) using a hash algorithm to hash the sequence of step (3) to obtain a string of hash values;

(5) Use the private key of the license issuing module to encrypt the hash value to obtain the ciphertext;

(6) Put together the sequence of the above step (3) and the ciphertext of the step (5) to become a user license. A copy of the license can also be generated and sent to the client. The license issuance module only sends a copy of the issued license to the client. The copy of the license is different from the original license. The validity period of the copy may be shorter than the validity period of the original, which is related to the user's right to use, and the copy is different from the original license. Client dependent, a copy sent to one client cannot be used on another client.

The method for large-scale live broadcast of digital content proposed by the present invention is used to provide live broadcast services to users. During the service process, the live digital content is encrypted, so that users cannot directly obtain the original digital content from the encrypted digital content. By issuing a license, the content owner can control and manage the user's use of the content, and prevent the user from illegally using the content. And when the user saves the digital content, a unique watermark related to the user is added to track the digital content. The digital content is encrypted using a key sequence, making the encrypted digital content more robust and resistant to attacks. The use of licenses provides users with more choices. They can choose to purchase fewer rights at a lower price, or they can choose to purchase more rights at a higher price.

Description of drawings

Fig. 1 is a block flow diagram of the method of the present invention.

In the figure, 1 is that the digital content is sent to the encryption processing module; 2 is that the encryption processing module processes the received original content, generates encrypted content, and then sends it to the live broadcast module, and at the same time generates brief information about the content and sends it to the publishing module , and the unique identifier are sent to the scheduling module; 3 is that the user registers the identity with the registration module through the client to obtain an identity identifier that identifies the user in the system; 4 is that the registration module returns the user's identity identifier to the client; 5 is the user obtains the live broadcast information from the publishing module through the client; 6 is the publishing module returns the live broadcast information to the client; 7 is the user requests the scheduling service from the scheduling module through the client; 8 is the identity sent by the scheduling module to the user through the client The identifier is sent to the registration module for verification; 9 is that the registration module sends the verification result back to the scheduling module; 10 is that the scheduling module performs scheduling and sends the scheduling result back to the client; 11 is that the user requests the live broadcast module through the client service; 12 is that the live broadcast module checks the user to the scheduling module to see if it is the result of scheduling by the scheduling module; 13 is that the scheduling module returns the verification result to the live broadcast module; 14 is that the live broadcast module provides services to the client; 15 is that the user passes through the client Request a license to the license issuing module; 16, the license issuing module requests the registration module to verify the identity of the user; 17, the registration module returns the verification result to the license issuing module; 18, the license issuing module issues a license to the user; 19 The client reproduces the protected content according to the license purchased by the user.

Detailed ways

The method for large-scale live broadcast of digital content proposed by the present invention has a flow chart as shown in Figure 1, including the following steps:

The digital content encryption processing module receives the digital content and encrypts the digital content to obtain three channels of signals, the first channel is the encrypted digital content, which is sent to the live broadcast module, and the second channel is the content introduction and digital content of the digital content The unique identifier of the unique identifier and the address of the scheduling module corresponding to the unique identifier are sent to the publishing module, and the third channel is the unique identifier of the digital content and the address of the live broadcast module corresponding to the encrypted digital content, which is sent to the scheduling module Module; the number of digital content processing module, live broadcast module, scheduling module and publishing module is scalable, can be one, can be multiple, and can be determined according to specific load conditions. The digital content processing module encrypts the digital content by means of key sequence encryption. It does not simply use the same key to encrypt the entire digital content, but uses a series of keys to divide the entire digital content into fixed time-length segments. segments, each encrypted with a different key. For example, if a digital content A has a length of 1 hour, then the keys may be changed every 10 minutes. In this way, a total of 6 keys are needed to encrypt digital content A. Encryption of digital content can flexibly adopt various algorithms, for example, encrypt the DC coefficient of the macroblock in the image with 3DES encryption algorithm.

The registration module receives the user's personal registration information, generates a unique identifier of the user, and combines the user identifier with the public information in the personal registration information to generate the user's identity identifier. First, a secure channel is established between the client and the registration module. Through the secure channel, the client sends the user's personal registration information to the registration module. The registration module generates a unique identifier in the system for the user, and generates a unique identifier for the user. The purpose of the identifier is to distinguish users, because different users may have the same public information, resulting in the same identity identifier of the issued user, which cannot effectively distinguish users. Personal registration information includes name, address, email, fixed phone number, password, ID number, mobile phone number, credit card number, etc. Among them, names, addresses, emails, and landline telephone numbers are public information, while passwords, ID numbers, mobile phone numbers, and credit card numbers are non-public information. For example, the personal registration information of user A is: name=a, address=b, email=c, landline=d, password=e, ID number=f, mobile phone number=g, credit card number=h; then the user The public information of A is a, b, c, d; the unique identifier generated by the registration system for user A is i; the sequence j composed of public information and unique identifiers in a certain format (for example, separated by underscores) is: a_b_c_d_i; Using the hash algorithm MD5 hash sequence j, the hash value k obtained is: 5f5d201f211ff7984814129b80a44ff5, use the private key to encrypt the hash value k with the 3DES encryption algorithm to obtain ciphertext 1, and sequence j and ciphertext 1 according to a certain format (for example, use Separated by underscores) together to get the user identity identifier j_1. There is a certain delay between the time of sending the user ID to the registered user and the time of user registration. During this period, the authenticity of the user registration information must be verified. Only when the registration information is true can the user ID be generated and sent to the user.

The user retrieves the content profile of the digital content owned by the distribution module. The publishing module receives the brief introduction of the digital content, the unique identifier of the digital content and the address of the scheduling module corresponding to the unique identifier delivered by the digital content encryption processing module. A content brief that presents only digital content directly to the user. If the user is interested in a certain digital content, the publishing module sends the unique identifier of the digital content corresponding to the digital content and the address of the scheduling module corresponding to the unique identifier to the client.

After the client obtains the unique identifier of the digital content and the address of the scheduling module corresponding to the unique identifier, it initiates a scheduling request to the scheduling module, and at the same time sends the user's identity identifier and the unique identifier of the digital content to the scheduling module , requesting the scheduling module to schedule the live broadcast module that owns the digital content.

After the scheduling module receives the user's request, it passes the received user ID to the registration module, requesting the registration module to verify the user's identity. The registration module verifies the identity of the user and returns the verification result to the scheduling module.

The scheduling module checks the verification result received, if the verification result is not passed, it means that the user is not a legal user, then the scheduling module rejects the user's request, if the verification result is passed, it means that the user is a legal user, then the scheduling module The content unique identifier is scheduled according to the scheduling algorithm, and the scheduling result is sent back to the user, and the scheduling result is saved at the same time.

After receiving the scheduling result, the client selects the appropriate live broadcast module from the scheduling result according to the selection algorithm, then initiates a service request to the selected live broadcast module, and at the same time sends the user's identity identifier and digital content unique identifier to the live broadcast module.

After the live broadcast module receives the user's request, it passes the received user identity identifier and digital content unique identifier to the scheduling module, and requests the scheduling module to verify. The scheduling module simply compares the received user identity identifier and digital content unique identifier with the saved scheduling result, if there is, the comparison result is passed, if not, the comparison result is not passed, and then compares The result is returned to the live module.

The live broadcast module checks the comparison result, and if the comparison result is not passed, the user's request is rejected; if the comparison result is passed, the live broadcast module sends the encrypted digital content to the client.

After the client receives the encrypted digital content, it first checks whether there is a license corresponding to the digital content. If not, the user sends a request for issuing a license to the license issuing module through the client, and at the same time sends the user's identity The identifier, the requested usage rights and the digital content unique identifier are sent to the license issuing module.

After the license issuance module receives the user's request, it sends the received user ID to the registration module, requesting the registration module to verify the user's identity. The registration module verifies the identity of the user, and returns the verification result to the license issuance module.

The license issuance module checks the verification result received, if the verification result is not passed, it means that the user is not a legitimate user, then the license issuance module rejects the user's request, if the verification result is passed, it means that the user is a legitimate user, then according to the user sent The license is issued based on the incoming identifier, the requested usage rights, and the unique identifier of the digital content.

The method of generating the license is as follows: firstly generate the unique watermark information related to the user; encrypt the watermark information with the public key of the license issuing module to obtain the watermark ciphertext; symbol, the key seed used to generate the key sequence for encrypting digital content, the user's right to use, the validity period of the license and the above watermark ciphertext form a sequence; use a hash algorithm to hash the above sequence to obtain a series of hash values; Use the private key of the license issuing module to encrypt the hash value to obtain the ciphertext; combine the sequence and the ciphertext to form a user license. Licenses may be originals and copies.

The original copy of the license includes the following contents: 1) the ciphertext of the unique watermark information related to the user; 2) the user's identity identifier; 3) the unique identifier of the digital content; 4) the password used to decrypt the encrypted digital content 5) the user's use rights; 6) the validity period of the license; 7) the digital signature of the above six items. Compared with the original license, the copy of the license has one more content-client-specific information. Compared with the original copy of the license, the copy of the license may have a shorter validity period than the original copy, which is related to the user's use rights, and the copy is related to the client. A copy sent to one client cannot be on another client. use. After the license is issued, the license issuing module saves the original copy of the license and the copy of the license, and returns the copy of the license to the client at the same time.

After the client receives the license, it reproduces the received encrypted digital content according to the actual needs of the user under the rights permitted in the license. By default, the client only decodes the received encrypted content and displays it to the user according to the rights granted in the license. If the user requires further processing of the received encrypted digital content, he has to make a request to the client. After the client receives the user's request, it checks whether the license grants the corresponding rights to the user, and if so, executes the user's request, and if not, rejects the user's request. For example, the user owns a license, and the rights granted to the user in the license are only the right to watch. If the user asks the client to save the digital content, since the license does not grant the user this right, the client will After receiving the user's request, check the license and find that there is no such right, then the client will reject the user's request.

According to the above method, by encrypting the live digital content or adding a watermark to the live digital content, the user cannot directly obtain the original digital content from the encrypted digital content, and by issuing a license, the The content owner can control and manage the use of the content by the user, and prevent the illegal use of the content by the user.

Claims (7)

1, the extensive live method of a kind of digital content is characterized in that this method may further comprise the steps:

(1) digital content processing module receiving digital contents, digital content is carried out encryption, to obtain three road signals, wherein the first via is the digital content after encrypting, be sent to live module, the second the tunnel be digital content brief introduction, digital content unique identifier and with the corresponding scheduler module of this unique identifier address, be sent to release module, Third Road be digital content unique identifier and with this encryption after the corresponding live module's address of digital content, be sent to scheduler module;

(2) Registering modules receives user's individual log-on message, generates this user's unique identifier, and this user identifier is combined with public information in the individual log-on message, generates this user's identification identifier;

(3) user by client from the brief introduction of above-mentioned release module key numbers, and according to digital content brief introduction obtain required digital content unique identifier and with the corresponding scheduler module of this unique identifier address;

(4) user sends dispatch request according to the scheduler module address of above-mentioned steps (3) to this scheduler module, and sends the unique identifier of digital content and user's oneself identification identifier to it;

(5) after scheduler module is received dispatch request, user's identification identifier is sent to Registering modules, Registering modules is verified it, and will be verified that the result is recycled to scheduler module;

(6) scheduler module is checked and verified the result, if the result is not for passing through in checking, scheduler module refusing user's request then, if the result is for passing through in checking, then scheduler module is dispatched according to the unique identifier of the digital content that receives, and will be sent to client with the live module's address at digital content place after the corresponding encryption of the unique identifier of this digital content, preserve scheduling result simultaneously;

(7) client is initiated service request according to above-mentioned live module's address to live module, and the unique identifier with User Identity symbol and digital content is sent to this live module simultaneously, to obtain digital content;

(8) live module is sent to scheduler module with the user's that receives the identification identifier and the unique identifier of digital content, the scheduling result comparison that scheduler module is preserved itself and above-mentioned steps (6), and the result of comparison is back to live module;

(9) comparison result received of live module check, if comparison result is not for passing through, the request of then live module refusal client, if comparison result is for passing through, then the unique identifier of the digital content that receives of basis provides digital content after the encryption to client;

(10) after client receives digital content after the encryption, search corresponding licence with this digital content, if no licence, then the user initiates to sign and issue license request by client to the licensing module, uses the unique identifier of right and digital content to be sent to the licensing module oneself identification identifier, request simultaneously;

(11) the licensing module is sent to Registering modules with the User Identity symbol of receiving, Registering modules is verified it, and will be verified that the result is recycled to the licensing module;

(12) the checking result that receives of licensing module check, if the result is not for passing through in checking, the then request of licensing module refusing user's, if the result is for passing through in checking, then the use right of the identification identifier that sends over according to the user, request and the unique identifier of digital content are signed and issued licence, and the licence copy of signing and issuing is sent to client, preserve this licence simultaneously;

(13) reproduce digital content after the encryption of receiving according to user's actual needs under the client right of in licence, permitting.

2, the method for claim 1 is characterized in that the encryption of step (1) comprising:

2.1 use key seed to generate encryption key sequence;

2.2 the key in the use key sequence is encrypted digital content according to cryptographic algorithm;

3, the method for claim 1 is characterized in that individual log-on message comprises in the step (2): name, address, password, Email, landline telephone, identification card number, cell-phone number, credit number.

4, the method for claim 1 is characterized in that the method that generates the User Identity symbol in the step (2) comprises the steps:

4.1 from user's individual log-on message, choose public information;

4.2 each user generates a unique identifier;

4.3 public information in the step 4.1 and the unique identifier in the step 4.2 are formed new sequence;

4.4 use the sequence in the hashing algorithm Hash step 4.3, obtain a string hashed value;

4.5 the private key that uses Registering modules to set is encrypted hashed value, obtains ciphertext;

4.6 the sequence of step 4.3 and the ciphertext of step 4.5 are stitched together, obtain the User Identity symbol.

5, the method for claim 1 is characterized in that the user in the step (10) uses right to be: watch digital content time, watch digital content number of times, can preserve the digital content received, the digital content of preserving can be duplicated, the digital content of preserving can be copied to another equipment and maybe can distribute any or multiple in the digital content of preservation to other people.

6, the method for claim 1 is characterized in that the method that generates licence in the step (12) comprises the steps:

6.1 generate and this user-dependent unique watermark information;

6.2 the PKI with the licensing module is encrypted the watermark information of step 6.1, obtains the watermark ciphertext;

6.3 with the unique identifier of user's identification identifier, digital content, be used to generate the key seed of the key sequence of encrypted digital content, user's use right, the term of validity and the above-mentioned watermark ciphertext composition sequence of licence;

6.4 use the sequence of hashing algorithm Hash step 6.3, obtain a string hashed value;

6.5 occupancy permit is signed and issued the private key of module hashed value is encrypted, and obtains ciphertext;

6.6 the sequence of above-mentioned steps 6.3 and the ciphertext of step 6.5 are stitched together, become user license.

7, method as claimed in claim 6 is characterized in that also comprising: generate a licence copy, and send to client.