The embodiment of the invention provides a dynamic digital right management method and a
system based on an identification
password. The method mainly includes: a KGC generates identification
password public and private key pairs of a user and sets the key pairs in a USBKEY; a
client activates the USBKEY according to a personal identification
password PIN password inputted by the user, and obtains an identification password private key of the user set in the USBKEY;
digital signature operation of a message is performed by employing the identification password private key of the user, signature information is obtained, and the message and the signature information are transmitted to a right management platform
server; the right management platform
server obtains an identification password public key of the user via the KGC, signature
verification operation of the signature information is performed, and after the passing of the signature
verification, media files are processed online according to the authority of the user. According to the method and the
system, identity
authentication and data
encryption operation of dynamic digital right safety protection can be performed by employing the identification password public and private key pairs of the user, the
client does not adopt a digital
certificate, the problem of complicated management of the digital certificates is avoided, and the operation speed of the
system is increased.