DRM Controller for Compressed File Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing digital rights management methods for compressed files are inadequate as they fail to control access and usage, allow unauthorized distribution of original files, require cumbersome password management, and lack real-time encryption and security features.
Innovation Solution
A method that involves compressing original files, encrypting them using a digital rights management server, and controlling access through a controller module on the user terminal, which hooks into the compression application program to manage file operations, ensuring only authorized users can access and decrypt the files, and automatically encrypts original files upon decompression.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional compression application programs with cryptosystems are used to password-protect compressed files, then users can control access to compressed files, but users who know the password can decompress and distribute original source files, undermining the security purpose
Solution Approach 1:
The system separates the protection mechanism into two layers: the compressed file format itself and the extracted original files. The DRM controller module intercepts and controls the extraction process, applying additional encryption or access controls to original files as they are extracted, preventing users from freely distributing them even if they have the compression password.
Solution Approach 2:
A DRM controller module is introduced as an intermediary between the compression application program and the file system. This module monitors and controls the extraction process, intercepting original files as they are extracted and applying additional security measures such as encryption or usage restrictions, thereby maintaining security control throughout the decompression process.
2Reliability
If individual password protection is applied to each original source file, then security is improved, but the process becomes time-consuming and nearly impossible when dealing with hundreds or thousands of files
Solution Approach 1:
The system combines multiple security operations into a single automated process. Instead of requiring separate password protection for each file, the DRM controller module applies uniform security policies to all extracted files in one batch operation, maintaining security while dramatically improving processing efficiency for large numbers of files.
Solution Approach 2:
Security policies and encryption methods are predetermined and configured in advance by the system administrator. When files are extracted, these pre-configured security measures are automatically applied without requiring manual intervention for each file, enabling efficient processing of large file volumes while maintaining consistent security standards.
3Ease of operation
If password-protected compressed files are distributed to multiple users, then access control is provided, but password distribution through direct contact means becomes pilferable and insecure
Solution Approach 1:
The system extracts the password protection function from the compression application itself and relocates it to a centralized DRM server. Passwords and access credentials are managed centrally on the server, which can securely distribute them to authorized users through encrypted channels, eliminating the need for insecure direct contact distribution methods.
Solution Approach 2:
The DRM server provides a universal platform for managing access to compressed files for multiple users. It handles password distribution, authentication, and access control centrally, supporting multiple users and files through a single secure system rather than requiring separate password management for each user-file pair.
4Reliability
If conventional DRM techniques are applied to digital data, then unauthorized copying and distribution are prevented, but they require checking authority in digital data input/output programs and prohibit unauthorized access
Solution Approach 1:
The DRM controller module serves as an intermediary that integrates seamlessly with the compression application program. It handles all DRM functionality including authentication, encryption, and access control within a single module, eliminating the need for complex authority checking in multiple digital data input/output programs while maintaining comprehensive protection.
Data Source
AI summary
Provided is a method for digital rights management of a compressed file created by compressing one or more original files. The method include the steps of: generating right information on an encrypted compressed file during the encryption of the compressed file by a digital rights management server; checking the user right to the compressed file by controlling a predetermined compression application program by a controller module installed in a user terminal when the user terminal to which the encrypted compressed file is downloaded opens the compressed file using the compression application program; requesting the digital rights management server to provide a certificate to decrypt the encrypted file by the controller module of the user terminal; generating the certificate according to a certificate request from the user terminal and sending the generated certificate to the user terminal by the digital right management server; and decrypting the encrypted compressed file by the controller module of the user terminal based on the received certificate.