Digital content security method and digital content security platform using same

Abstract

A digital content security method according to a technical aspect of the present invention is a digital content security method performed in a digital content security platform that operates in conjunction with a content providing terminal and a user terminal, the method comprising the steps of: receiving digital content uploaded from the content providing terminal; generating header data for the digital content, and performing encoding by applying a scramble chain key of a hierarchical structure to the header data and content data of the digital content, thereby generating encrypted digital data; and storing the header data and the encrypted digital data.

Description

Digital content security method and digital content security platform using the same

[0001] The present invention relates to a digital content security method and a digital content security platform using the same.

[0002] With the advancement of IT technology, digital content is being used in a variety of environments. However, these digital contents are prone to problems such as file copying, unauthorized use, and distribution.

[0003] To address these issues, digital rights management technologies, such as DRM (Digital Rights Management), are being developed and implemented by applying encryption technology to digital content. For an overview of these technologies, see Korean Patent Publication No. 10-2022-0082633.

[0004] However, these conventional DRM technologies have several limitations. Specifically, to ensure security, they require the construction and management of a separate DRM database. Furthermore, they are limited to pre-built content. They are vulnerable to streaming features, and their encryption methods utilize a combination of public encryption algorithms, requiring a separate key management system.

[0005] Therefore, there is a growing need for security technology for digital content that can overcome the limitations of conventional DRM technology and efficiently and reliably authenticate and manage digital content data.

[0006] One technical aspect of the present invention is to solve the problems of the above-mentioned prior art, and to provide a digital content security method and a digital content security platform using the same, which can encode digital content by applying a hierarchical structured scramble chain key between header data and content data.

[0007] In addition, one technical aspect of the present invention is to provide a digital content security method and a digital content security platform using the same, which can ensure stability from hacking or cracking by performing forensic marking using a scramble chain method.

[0008] In addition, one technical aspect of the present invention is to provide a digital content security method and a digital content security platform using the same, which can easily protect content based on software and thus lower the barrier to entry without requiring separate hardware or complex DRM systems.

[0009] The above objects and various advantages of the present invention are readily apparent to those skilled in the art.

[0010] One technical aspect of the present invention proposes a digital content security method. The digital content security method is a digital content security method performed on a digital content security platform that operates in conjunction with a content providing terminal and a user terminal, comprising the steps of: receiving digital content uploaded from the content providing terminal; generating header data for the digital content; performing encoding by applying a hierarchical scramble chain key to the header data and content data of the digital content to generate encrypted digital data; and storing the header data and the encrypted digital data.

[0011] In one embodiment, the digital content security method may further include the steps of authenticating a user of the user terminal, confirming content playback authority based on the authority confirmation of the authenticated user, and providing the encrypted digital data to the user terminal based on the confirmed content playback authority.

[0012] In one embodiment, the digital content security method may further include the step of authenticating a provider of the content providing terminal and setting the provider as a content holder of the uploaded digital content.

[0013] In one embodiment, the step of generating the encrypted digital data may include the step of generating the header data including content identification information of the digital content, content holder information, data block information, and first encryption key information.

[0014] In one embodiment, the step of generating the encrypted digital data may further include the step of dividing the digital content into a plurality of content data blocks, the step of generating a plurality of printing data for each of the plurality of content data blocks, and the step of inserting the plurality of printing data into the plurality of content data blocks by forensic marking.

[0015] In one embodiment, the printing data may include content holder information, content information, and a second encryption key index.

[0016] In one embodiment, the step of generating the encrypted digital data may further include the step of selecting a second encryption key from the second encryption key index using the first encryption key information of the header data, and the step of encrypting the corresponding content data block with the second encryption key and performing encoding by applying a hierarchical structured scramble chain key.

[0017] In one embodiment, the digital content security platform may directly receive the digital content through a public network for the content providing terminal, and may configure and share a blockchain network for the user terminal, while generating second encrypted digital data, which is a copy data for the encrypted digital data, and setting the second encrypted digital data as ledger data to configure the blockchain network.

[0018] Another technical aspect of the present invention proposes a storage medium. The storage medium is a storage medium storing computer-readable instructions, which, when executed by a computing device, cause the computing device to perform the following operations: receiving digital content uploaded from the content providing terminal; generating header data for the digital content; performing encoding by applying a hierarchical scramble chain key to the header data and content data of the digital content to generate encrypted digital data; and storing the header data and the encrypted digital data.

[0019] Another technical aspect of the present invention proposes a digital content security platform. The digital content security platform is a digital content security platform that operates in conjunction with a content providing terminal and a user terminal, and includes a content upload unit that receives digital content uploaded from the content providing terminal, a scramble chain encoding unit that generates header data for the digital content, and performs encoding by applying a hierarchical scramble chain key to the header data and content data of the digital content to generate encrypted digital data, and a content management unit that stores and manages the header data and the encrypted digital data.

[0020] In one embodiment, the digital content security platform may further include a content distribution management unit that authenticates a user of the user terminal, verifies content playback rights based on the authenticated user's authority, and provides the encrypted digital data to the user terminal based on the verified content playback rights.

[0021] The provider of the above content providing terminal can be authenticated and the provider can be set as the content holder of the uploaded digital content.

[0022] In one embodiment, the header data may include content identification information of the digital content, content holder information, data block information, and first encryption key information.

[0023] In one embodiment, the scramble chain encoding unit may divide the digital content into a plurality of content data blocks, generate a plurality of printing data for each of the plurality of content data blocks, and then insert the plurality of printing data into the plurality of content data blocks by performing forensic marking.

[0024] In one embodiment, the printing data may include content holder information, content information, and a second encryption key index.

[0025] In one embodiment, the scramble chain encoding unit may select a second encryption key from the second encryption key index using the first encryption key information of the header data, and encrypt the corresponding content data block with the second encryption key to perform encoding using a hierarchical structured scramble chain key.

[0026] In one embodiment, the content upload unit directly receives the digital content through a public network for the content providing terminal, and the content distribution management unit configures and shares a blockchain network for the user terminal, and creates second encrypted digital data, which is copy data for the encrypted digital data, and sets the second encrypted digital data as ledger data to configure the blockchain network.

[0027] The solutions to the above problems do not exhaustively enumerate the features of the present invention. The various solutions to the problems of the present invention can be understood in more detail by referring to the specific embodiments described below.

[0028] According to one embodiment of the present invention, by encoding digital content by applying a hierarchical structured scramble chain key between header data and content data, the security of the digital content can be guaranteed while providing a fast response.

[0029] In addition, according to one embodiment of the present invention, by performing forensic marking using a scramble chain method, there is an effect of ensuring stability from hacking or cracking and enabling rapid decryption.

[0030] In addition, according to one embodiment of the present invention, content can be protected simply on a software basis by utilizing SDK or the like without separate hardware or complex DRM systems, thereby facilitating content protection and lowering the barrier to entry.

[0031] The effects of the invention described above are not all enumerated in the various effects of the present application, and these various effects can be easily understood from the specific embodiments of the detailed description.

[0032] FIG. 1 is a drawing for explaining a digital content security platform according to one embodiment of the present invention.

[0033] FIG. 2 is a flowchart illustrating a method for securing digital content through a digital content security platform according to one embodiment of the present invention.

[0034] Figure 3 is a block diagram illustrating the digital content security platform illustrated in Figure 1.

[0035] FIG. 4 is a flowchart illustrating an example of a digital content security method performed in the content upload unit illustrated in FIG. 3.

[0036] FIG. 5 is a flowchart illustrating an example of a digital content security method performed in the scramble chain encoding unit illustrated in FIG. 3.

[0037] FIGS. 6 to 9 are diagrams for explaining a process of generating encrypted digital data by performing encoding using a hierarchical structured scramble chain key.

[0038] Figure 10 is a flowchart illustrating an example of a digital content security method performed on a user terminal.

[0039] FIG. 11 is a drawing for explaining a digital content security platform according to another embodiment of the present invention.

[0040] FIG. 12 is a flowchart illustrating a content distribution management method in another embodiment illustrated in FIG. 11.

[0041] FIG. 13 is a diagram illustrating an exemplary computing operating environment of a platform server that describes an example of a digital content security platform according to one embodiment of the present invention.

[0042] Hereinafter, preferred embodiments of the present invention will be described with reference to the attached drawings.

[0043] However, the embodiments of the present invention may be modified in various other forms, and the scope of the present invention is not limited to the embodiments described below. Furthermore, the embodiments of the present invention are provided to more fully explain the present invention to those of ordinary skill in the art.

[0044] That is, the above-mentioned purpose, features and advantages are described in detail below with reference to the attached drawings, so that those with ordinary skill in the art to which the present invention pertains can easily practice the technical idea of ​​the present invention. In describing the present invention, if it is determined that a detailed description of a known technology related to the present invention may unnecessarily obscure the gist of the present invention, a detailed description thereof will be omitted. Hereinafter, a preferred embodiment according to the present invention will be described in detail with reference to the attached drawings. In the drawings, the same reference numerals are used to indicate the same or similar components.

[0045] Additionally, the singular expressions used herein include plural expressions unless the context clearly dictates otherwise. In this application, terms such as "consist of" or "comprises" should not be construed to necessarily include all of the various components or various steps described in the specification, and should be construed to mean that some of the components or some of the steps may not be included, or that additional components or steps may be included.

[0046] Furthermore, various components and their subcomponents are described below to explain the system according to the present invention. These components and their subcomponents may be implemented in various forms, such as hardware, software, or a combination thereof. For example, each component may be implemented as an electronic component for performing its function, or may be implemented as software itself operable in an electronic system or as a functional element of such software. Alternatively, each component may be implemented as an electronic component and its corresponding operating software.

[0047] The various techniques described herein may be implemented with hardware, software, or, where appropriate, a combination of both. Terms such as "unit," "server," and "system," as used herein, may be treated as equivalent to computer-related entities, i.e., hardware, a combination of hardware and software, software, or software in execution. Furthermore, each function executed in the system of the present invention may be configured as a module unit and recorded in a single physical memory or distributed and recorded between two or more memories and storage media.

[0048] Although various flowcharts are disclosed to explain embodiments of the present invention, these are provided for the convenience of explaining each step, and each step is not necessarily performed in the order of the flowchart. That is, each step in the flowchart may be performed simultaneously, in the order shown in the flowchart, or in an order opposite to the order shown in the flowchart.

[0049]

[0050] FIG. 1 is a drawing for explaining a digital content security platform according to one embodiment of the present invention, and FIG. 2 is a flowchart for explaining a digital content security method through a digital content security platform according to one embodiment of the present invention.

[0051] Referring to FIG. 1, a digital content security platform (hereinafter, abbreviated as security platform) (300) operates in conjunction with a content providing terminal (100) and a user terminal (500), provides data encryption for digital content provided by the content providing terminal (100), and supports decryption of digital content with rapid response for the user terminal (300).

[0052] In this specification, digital content refers to digital data related to content, and content here is used to encompass not only creative works such as movies, music, and videos, but also various other contents such as SW source code.

[0053] A content providing terminal (100) is a terminal that provides digital content, and may include not only companies that own digital content but also individual users. The content providing terminal (100) refers to a terminal that provides source digital content to the security platform (300), and the user terminal (500) refers to a terminal that receives secured digital content from the security platform (300) and uses it, such as by viewing it.

[0054] The user terminal (500) may be a variety of computing devices capable of driving secured content, and for example, various electronic devices such as VR-only devices, smart phones, personal computers (PCs), tablet PCs, laptop computers, personal digital assistants (PDAs), portable multimedia players (PMPs), navigation devices, slate PCs, ultrabooks, wearable devices (e.g., smartwatches, smart glasses, HMDs), etc., may be applied.

[0055] Referring further to Figure 2, the content provider terminal (100) can upload digital content and related information to the security platform (300) (S311). Here, the digital content-related information may include content holder (copyright holder) information, as well as the content work title, creation date, modification date, consent for content use, country and location, whether the content is derivative, and the copyright expiration date.

[0056] The security platform (300) receives digital content and information thereon (S321), and can generate header data for the digital content using the received data and information (S322). Thereafter, the security platform (300) can perform encoding by applying a hierarchical scramble chain key to the header data and content data of the digital content to generate encrypted digital data (S323).

[0057] That is, in the present application, the security platform (300) applies a hierarchical structured encryption key management method to header data and content data of digital content, and by implementing this encryption key management in the form of a scrambled chain key, even when content data is transmitted by dividing it into blocks, encryption and decryption can be performed very stably and quickly.

[0058] For example, an encryption key can be operated on a security platform (300) and a user terminal (500) based on a symmetric encryption method, and in this case, encryption and decryption are implemented very quickly, so that security can be provided stably and quickly even in an environment such as real-time streaming. The security of key management is important for this symmetric encryption method, and in one embodiment of the present application, by applying a hierarchical scramble chain key management method to this encryption key, the security of key management can be improved while providing fast and safe security.

[0059] Thereafter, the security platform (300) can store and manage header data and encrypted digital data. When a user terminal (500) requests transmission of digital content (S331), the security platform (300) verifies user authentication and the user's content playback authority, and if properly approved, can transmit header data and encrypted digital data for the corresponding content to the user terminal (500) (S324). The user terminal (500) can decrypt the received encrypted digital data to generate digital content (S332).

[0060] In the above example, decryption is performed directly at the user terminal (500), and this enables faster decryption by utilizing a symmetric key method.

[0061]

[0062] Hereinafter, with reference to FIGS. 3 to 11, various embodiments of a digital content security method according to the present application and a digital content security platform using the same will be described in more detail.

[0063]

[0064] FIG. 3 is a block diagram illustrating the digital content security platform illustrated in FIG. 1. FIG. 3 discloses components of the security platform (300), including a content upload unit (310), a scramble chain encoding unit (320), a content management unit (330), and a content distribution management unit (340). Depending on the embodiment, each component may be implemented as a separate server or computing device to form a single security platform. However, this is not limited thereto, and each component may be implemented as physically or logically separated, or, depending on the embodiment, may be implemented as an integrated unit. The operation of each component will be described below.

[0065] The content upload unit (310) can receive digital content and related information from a content providing terminal (100) and perform uploading. The content upload unit (310) can perform authentication of the content provider, etc.

[0066] The scramble chain encoding unit (320) can perform encryption by performing encoding using a hierarchical structured scramble chain key on digital content and related information uploaded by the content upload unit (310).

[0067] That is, the scramble chain encoding unit (320) can generate header data for digital content and perform encoding by applying a hierarchical structured scramble chain key to the header data and content data of the digital content to generate encrypted digital data.

[0068] Various embodiments of this scramble chain encoding unit (320) are described in more detail below with reference to FIGS. 5 to 9.

[0069] Encrypted digital data, which is encrypted digital content, is provided to the content management unit (330), and the content management unit (330) performs storage and management of such encrypted digital data.

[0070] The content distribution management unit (340) can manage the distribution of encrypted digital data to the user terminal (500) by linking with the user terminal (500).

[0071] The content distribution management unit (340) can authenticate a user of a user terminal (500), confirm content playback rights based on the authority confirmation of the authenticated user, and provide the encrypted digital data to the user terminal (500) based on the confirmed content playback rights.

[0072] Data distribution between the content distribution management unit (340) and the user terminal (500) can be implemented in various ways. For example, the content distribution management unit (340) provides an SDK (Self Develop Kit) to an authenticated user, and the user can perform authentication and data transmission and reception through the content distribution management unit (340) via the SDK (Self Develop Kit).

[0073] These SDKs can be embedded in media players installed on user devices, or implemented as add-ons. These SDKs can support various operating systems, such as Windows, Mac, iOS, Android, and Linux.

[0074] In one embodiment, the user-side SDK may be implemented in a hierarchical structure. For example, the SDK may be divided into a core SDK and a media SDK. The core SDK may include essential functions for licensing and decryption, such as an SDK license authentication API, a content authentication API, and a decryption API. The media SDK may include various functions for executing media, such as a media codec, a media player, media playback speed control, embedded advertisement support, and video / audio filter functions.

[0075]

[0076] FIG. 4 is a flowchart illustrating an example of a digital content security method performed in the content upload unit illustrated in FIG. 3.

[0077] Referring to FIG. 4, the content upload unit (310) can authenticate the provider of the content providing terminal (S410) and set the provider of the content providing terminal as a content holder (copyright holder, etc.) (S420).

[0078] Afterwards, the content upload unit (310) can receive content data for digital content (S430), and can also receive the related information described above or directly generate the related information.

[0079] The content upload unit (310) can generate content identification information for identifying uploaded content (S440), and then notify the scramble chain encoding unit (320) of the upload of digital content.

[0080]

[0081] FIG. 5 is a flowchart illustrating an example of a digital content security method performed in the scramble chain encoding unit (320) illustrated in FIG. 3, and FIGS. 6 to 9 are drawings for explaining a process of generating encrypted digital data by performing encoding using a hierarchical structured scramble chain key.

[0082] The scramble chain encoding unit (320) receives original digital content. For example, the digital content may be in various digital file formats such as MP4 or H.26x.

[0083] Thereafter, the scramble chain encoding unit (320) can transcode the original digital content into multiple digital contents using a transcoder. For example, the original digital content can be transcoded into multiple resolutions to create multiple digital contents for each resolution. Additionally, various digital contents, such as thumbnails and previews, can be transcoded and created based on the original content.

[0084] Thereafter, the scramble chain encoding unit (320) can perform identification information storage and encryption for each digital content to generate final encrypted digital data. This encryption process is described in more detail with reference to FIG. 5.

[0085] Referring to FIG. 5, the scramble chain encoding unit (320) can generate header data including content identification information, content holder information, data block information, and first encryption key information for digital content (S510).

[0086] Figure 6 illustrates an example of such header data. In addition to content identification information, content holder information, data block information, and first encryption key information, the header data may further include various content-related information, depending on the embodiment, such as the content work title, creation date, modification date, content use consent, country and location, whether the content is derivative work, and the copyright expiration date.

[0087] The first encryption key information of the header data is a key used for managing a hierarchical scramble chain key, and the first encryption key of the header data is hierarchically associated with the printing data assigned to each content data block described below and is used to determine an encryption key.

[0088] Referring back to FIG. 5, the scramble chain encoding unit (320) can divide digital content into multiple content data blocks (S520). Information about the divided content data blocks can be stored as data block information in a header file, including, for example, the size, number, and file type of the content data blocks.

[0089] In one embodiment, the scramble chain encoding unit (320) can dynamically control the size of the content data block. For example, the second encryption key index described below may be a set of a plurality of second encryption keys having different encryption and decryption speeds, and may include encryption / decryption speed information. The scramble chain encoding unit (320) can variably set the size of the content data block in response to the encryption / decryption speed of the second encryption key selected from the second encryption key index. For example, the encryption / decryption speed information may be divided into three levels: fast, normal, and slow, and the scramble chain encoding unit (320) can preset the size of the content data block by dividing it into an expanded size, a normal size, and a reduced size correspondingly. Thereafter, the size of the data block can be dynamically set to have a size inversely proportional to the speed, such as setting the size of the content data block to a reduced size when the second encryption key selected from the second encryption key index is fast. In this case, multiple content data blocks may be set to have different sizes depending on the encryption / decryption speed of the selected second encryption key, i.e., may be set to have unequal sizes. Through this embodiment, the encryption / decryption speed of the entire encrypted data itself can be improved overall.

[0090] The scramble chain encoding unit (320) can generate a plurality of printing data corresponding to each of the divided plurality of content data blocks (S530).

[0091] Printing data is a separate data structure that is individually generated for each of multiple content data blocks and is individually mapped and associated, i.e., 1:1. For example, printing data may include content holder information, content information, and a second encryption key index. Figure 7 is a diagram illustrating such printing data (621) and content data blocks (622).

[0092] Since the printing data is linked to the content holder information, such as the copyright holder, and the content information, even when the encrypted digital data is fragmented, it is possible to verify and securely process the related information for each data block. As described below, each content data block (622) is encrypted based on the second encryption key index of the printing data (621), so that individual authorization verification and forensic verification are possible for each data block, and encryption / decryption is supported, thereby greatly enhancing security.

[0093] Referring again to FIG. 5, the scramble chain encoding unit (320) selects a second encryption key from a second encryption key index using the first encryption key information of the header data (S540), and encrypts the corresponding content data block with the second encryption key to perform encoding using a hierarchical structured scramble chain key (S550).

[0094] Fig. 8 is a diagram illustrating encoding using a scramble chain key of this hierarchical structure. Referring further to Fig. 8, the scramble chain encoding unit (320) can confirm the first encryption key information in the header data and use this to select the second encryption key from the second encryption key index.

[0095] In one embodiment, the first encryption key information may be combined with content information to select a second encryption key. For example, the first encryption key information may be a random number within a specific numerical range, and may be associated with, for example, added to, the identification information of a content data block of the content information. The second encryption key may be selected from a second encryption key index based on a value obtained by associating the random number of the first encryption key information with the identification information of the content data block. Here, the second encryption key index may be index data including a plurality of second encryption keys, and any one key selected from the second encryption key indexes may be used for encryption and decryption as the second encryption key.

[0096] In this way, by setting an individual encryption key for each data block along with a multi-stage hierarchical key selection process, individual and stable security and management are possible for each content data block.

[0097] Referring back to FIG. 5, the scramble chain encoding unit (320) can then sequentially associate multiple encrypted content data blocks to generate encrypted digital data. FIG. 9 illustrates such encrypted digital data, and it can be seen that one header data, multiple content data blocks transmitted sequentially thereto, and printing data corresponding 1:1 to them are sequentially formed to form encrypted digital data.

[0098] For example, the scramble chain encoding unit (320) can insert printing data into each content data block with forensic marking to generate encrypted digital data. Since various conventional methods are possible for this forensic marking, no specific method is limited herein.

[0099]

[0100] In the above, various embodiments of a security platform (300) are disclosed with reference to FIGS. 3 to 9, and below, an example of a digital content security method performed in a user terminal is described with reference to FIG. 10.

[0101] Referring to FIG. 10, a user terminal (500) can receive encrypted digital data from a security platform (300) (S1010). As previously described, user authentication and authorization verification may be performed for this purpose.

[0102] The user terminal (500) can verify the first encryption key information in the header data (S1020). For example, the user terminal (500) can verify the first encryption key information using a preset algorithm via the SDK. Alternatively, the user terminal (500) can perform a preset authentication procedure with the security platform (300) to confirm the first encryption key using the first encryption key information.

[0103] Thereafter, the user terminal (500) can extract printing data by differentially processing each content data block (S1030). This is a case where forensic marking has been performed, so if forensic marking is omitted, this step can also be omitted.

[0104] Thereafter, the user terminal (500) can perform decoding by applying a hierarchical structured scramble chain key. That is, the user terminal (500) selects a second encryption key from the second encryption key index of the printing data using the first encryption key information (S1040), decrypts the corresponding content data block with the second encryption key, and then connects a plurality of content data blocks to generate content data (S1050).

[0105] This decryption process corresponds to the encryption process described with reference to FIG. 9, so it can be easily understood with reference to the description of FIG. 9.

[0106]

[0107] FIG. 11 is a drawing for explaining a digital content security platform according to another embodiment of the present invention.

[0108] Referring to FIG. 11, the security platform (300) provides a content security service to a content providing terminal (100) through a public network (NT1), and further enhances security by managing encrypted data for the security content to a user terminal (500) through a blockchain network (NT2).

[0109] As in the above-described embodiment, if a shared environment between a content provision terminal (100) and a user terminal (500) is established solely through a public network (NT1), it becomes difficult for the creator to confirm content usage history monitoring when sharing or distributing content through a third-party platform or user terminal other than the user. Therefore, in order to enable the creator to manage the tracking and monitoring of his or her content usage history by applying the content history tracking and monitoring function even when the content is shared or distributed on a third-party social media platform (YouTube, Kakao Share, Instagram, etc.) other than a secure platform, a separate blockchain network may be used to perform content distribution and tracking monitoring for other than these.

[0110] To this end, even if the creator's content is shared or distributed on a third-party platform by applying private or hybrid blockchain technology, it can be tracked and monitored even if the content is serviced on a third-party platform if a security platform (300) is used.

[0111] This will be explained in more detail with reference to Fig. 12.

[0112] FIG. 12 is a flowchart illustrating a content distribution management method in another embodiment illustrated in FIG. 11, which is further described with reference to FIG. 12.

[0113] The content upload unit (310) directly receives digital content from content providing terminals via a public network, and the platform (300) generates encrypted digital data as described above with reference to FIGS. 1 to 10. Thereafter, the content distribution management unit (340) shares this with user terminals via a blockchain network.

[0114] Referring to FIG. 12 for further details, when the security process is completed by the security platform and encrypted digital data is generated, the content distribution management unit (340) can create second encrypted digital data by duplicating the generated encrypted digital data (S1210).

[0115] The content distribution management unit (340) can manage encrypted digital data as storage data for internal management (S1220).

[0116] The content distribution management unit (340) can configure a blockchain network by setting the second encrypted digital data as ledger data (S1220).

[0117] The content distribution management unit (340) can perform distribution and tracking of content even when shared with a third party by sharing data with users based on the configured blockchain network (S1240).

[0118] In this embodiment, the creators can increase the convenience of use by providing content security and tracking functions through a public network, and the users can share and secure content using a blockchain network, thereby enhancing security and effectively tracking content distribution.

[0119]

[0120] FIG. 13 is a diagram illustrating an exemplary computing operating environment of a platform server that describes an example of a digital content security platform according to one embodiment of the present invention.

[0121] FIG. 13 is intended to provide a general and simplified description of a suitable computing environment in which embodiments of the platform server (300) may be implemented, and with reference to FIG. 13, a computing device is illustrated as an example of the platform server (300).

[0122] The computing device may include at least a processing unit (303) and a system memory (301).

[0123] A computing device may include multiple processing units that cooperate to execute a program. Depending on the exact configuration and type of the computing device, the system memory (301) may be volatile (e.g., random access memory (RAM), non-volatile (e.g., read-only memory (ROM), flash memory, etc.), or a combination thereof. The system memory (301) includes a suitable operating system (302) for controlling the operation of the platform, such as the WINDOWS operating system from Microsoft Corporation. The system memory (301) may also include one or more software applications, such as program modules, applications, etc.

[0124] The computing device may include additional data storage (304), such as a magnetic disk, an optical disk, or a tape. Such additional storage may be removable storage and / or non-removable storage. Computer-readable storage media may include volatile and non-volatile, removable and non-removable media implemented in any method or technology for storing information, such as computer-readable instructions, data structures, program modules, or other data. System memory (301), storage (304) are both examples of computer-readable storage media. Computer-readable storage media may include, but are not limited to, random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, CD-ROMs, DVDs or other optical storage, magnetic tape, magnetic disk storage or other magnetic storage devices, or any other medium that stores desired information and can be accessed by the computing device (300).

[0125] The input device (305) of the computing device may include, for example, a keyboard, a mouse, a pen, a voice input device, a touch input device, and comparable input devices. The output device (306) may include, for example, a display, a speaker, a printer, and other types of output devices. Since these devices are well known in the art, a detailed description thereof will be omitted.

[0126] The computing device may also include a communication device (307) that allows the device to communicate with other devices over a network, such as a wired or wireless network, a satellite link, a cellular link, a local area network, and comparable mechanisms, for example in a distributed computing environment. The communication device (307) is one example of a communication medium, which may include computer-readable instructions, data structures, program modules, or other data therein. By way of example and not limitation, communication media includes wired media, such as a wired network or direct-connection, and wireless media, such as acoustic, RF, infrared, and other wireless media.

[0127] Methods according to various embodiments of the present application may be implemented in the form of program commands that can be executed through various computer means and recorded on a computer-readable medium. The computer-readable medium may include program commands, data files, data structures, etc., alone or in combination. The program commands recorded on the medium may be those specially designed and configured for the embodiments or may be those known and available to those skilled in the art of computer software. Examples of computer-readable recording media include magnetic media such as hard disks, floppy disks, and magnetic tapes, optical media such as CD-ROMs and DVDs, magneto-optical media such as floptical disks, and hardware devices specially configured to store and execute program commands, such as ROMs, RAMs, and flash memories. Examples of program commands include not only machine language codes generated by a compiler, but also high-level language codes that can be executed by a computer using an interpreter, etc. The hardware devices described above may be configured to operate as one or more software modules to perform the operations of the embodiments, and vice versa.

[0128]

[0129] Although the embodiments described above have been described by way of limited examples and drawings, those skilled in the art will appreciate that various modifications and variations can be made based on the above description. For example, appropriate results can still be achieved even if the described techniques are performed in a different order than described, and / or components of the described systems, structures, devices, circuits, etc. are combined or combined in a different manner than described, or are replaced or substituted with other components or equivalents.

[0130] Therefore, other implementations, other embodiments, and equivalents to the claims also fall within the scope of the claims described below.

Claims

1. A digital content security method performed on a digital content security platform that is linked with a content providing terminal and a user terminal. A step of receiving digital content uploaded from the above content providing terminal; A step of generating header data for the digital content, and performing encoding by applying a hierarchical scramble chain key to the header data and content data of the digital content to generate encrypted digital data; and A step of storing the above header data and the above encrypted digital data; comprising; Methods for securing digital content.

2. In the first paragraph, the digital content security method, A step of authenticating a user of the user terminal, confirming the content playback authority based on the authority confirmation of the authenticated user, and providing the encrypted digital data to the user terminal based on the confirmed content playback authority; further comprising; Methods for securing digital content.

3. In the first paragraph, the digital content security method, A step of authenticating the provider of the content providing terminal and setting the provider as the content holder of the uploaded digital content; further comprising; Methods for securing digital content.

4. In the first paragraph, the step of generating the encrypted digital data comprises: A step of generating the header data including content identification information, content holder information, data block information, and first encryption key information of the digital content; Methods for securing digital content.

5. In the fourth paragraph, the step of generating the encrypted digital data comprises: A step of dividing the above digital content into a plurality of content data blocks; A step of generating a plurality of printing data for each of the plurality of content data blocks; and A step of inserting the plurality of printing data into the plurality of content data blocks by forensic marking; further comprising; Methods for securing digital content.

6. In paragraph 5, the printing data is Including content holder information, content information, and a second encryption key index, Methods for securing digital content.

7. In the 6th paragraph, the step of generating the encrypted digital data is: A step of selecting a second encryption key from the second encryption key index using the first encryption key information of the header data; and A step of encrypting the corresponding content data block with the second encryption key and performing encoding by applying a hierarchical structured scramble chain key; further comprising; Methods for securing digital content.

8. In paragraph 1, the digital content security platform, For the above content providing terminal, the above digital content is received directly through a public network, For the above user terminals, a blockchain network is configured and shared, Creating a second encrypted digital data, which is a copy data of the above encrypted digital data, and setting the second encrypted digital data as ledger data to configure the blockchain network. Methods for securing digital content.

9. In a storage medium storing computer-readable instructions, The above instructions, when executed by a computing device, cause the computing device to: An action of receiving digital content uploaded from a content providing terminal; An operation of generating header data for the digital content and performing encoding by applying a hierarchical scramble chain key to the header data and content data of the digital content to generate encrypted digital data; and To perform an operation of storing the above header data and the above encrypted digital data; Storage media.

10. As a digital content security platform that operates in conjunction with content providing terminals and user terminals, The above digital content security platform, A content upload unit that receives digital content uploaded from the above content providing terminal; A scramble chain encoding unit that generates header data for the digital content and performs encoding by applying a hierarchical scramble chain key to the header data and content data of the digital content to generate encrypted digital data; and A content management unit that stores and manages the above header data and the encrypted digital data; Digital content security platform.

11. In paragraph 10, the digital content security platform, A content distribution management unit further comprising: authenticating a user of the user terminal, confirming content playback rights based on the authenticated user's authority, and providing the encrypted digital data to the user terminal based on the confirmed content playback rights; Digital content security platform.

12. In paragraph 10, the content upload unit, Authenticate the provider of the above content providing terminal and set the provider as the content holder of the above uploaded digital content. Digital content security platform.

13. In paragraph 10, the header data is: Including content identification information, content holder information, data block information and first encryption key information of the above digital content, Digital content security platform.

14. In the 13th paragraph, the scramble chain encoding unit, Dividing the above digital content into a plurality of content data blocks, generating a plurality of printing data for each of the plurality of content data blocks, and then inserting the plurality of printing data into the plurality of content data blocks by forensic marking. Digital content security platform.

15. In paragraph 14, the printing data is: Including content holder information, content information, and a second encryption key index, Digital content security platform.

16. In the 15th paragraph, the scramble chain encoding unit, Using the first encryption key information of the header data, a second encryption key is selected from the second encryption key index, and encoding is performed by applying a hierarchical structured scramble chain key by encrypting the corresponding content data block with the second encryption key. Digital content security platform.

17. In paragraph 11, The above content upload unit directly receives the digital content through a public network for the content providing terminal, The above content distribution management department, For the above user terminals, a blockchain network is configured and shared, Creating a second encrypted digital data, which is a copy data of the above encrypted digital data, and setting the second encrypted digital data as ledger data to configure the blockchain network. Digital content security platform.

Images