Samsung Electronics Co., Ltd.

Bong-seon Kim

Young-sun Yoon

Sung-hyu Han

Jae-heung Lee

Myung-Sun Kim

Sun-nam Lee

Su-hyun Nam

Yong-kuk You

Chang-sup Ahn

So-young Lee

Ji-Young Moon

Jun-bum Shin

Myung-sun Kim

Moon-young Choi

A digital content protection apparatus and method for digital rights management (DRM) are provided in which a content file including a plurality of content parts is imported such that a header is included which stores location information required for decoding each of the content parts. Therefore, the number of content parts constituting the content file can be recognized, and a license that is required for the use of each of the content parts can be acquired by analyzing header information without necessitating the parsing of the transport packets of the content file. Accordingly, preparation time for using content can be reduced.

Method and apparatus for importing content having plurality of parts

A method of and apparatus for encrypting and/or decrypting content according to broadcast encryption scheme. The decryption method includes: determining whether or not a revoked device among devices that have licenses for predetermined content is present; and according to the determination result, selectively decrypting a content key encrypted by using a key to prevent the revoked device from decrypting the predetermined content. By doing so, an unnecessary encryption process and decryption process that occur when there is no revoked device are avoided.

Method and apparatus for efficiently encrypting/decrypting digital content according to broadcast encryption scheme

A key management, user registration and deregistration for a digital rights management (DRM) system in a home network, using a hierarchical node topology. In the key management, node information is generated by allocating a pair of keys (a public key and a private key) to each node. A node tree is made by generating link information using the pair of keys and a content key. The link information is delivered from an upper node to a lower node using the node tree. The link information is obtained by encrypting a private key of a 'TO' node using a public key of a 'FROM' node. Accordingly, it is possible to realize a DRM system that protects content and easily accomplishes a binding mechanism and a revocation mechanism.

Key management method using hierarchical node topology, and method of registering and deregistering user using the same

A method and an apparatus for managing domains are provided. The method of managing one or more domains performed by a domain manager located in a home network includes determining whether to register a first device located in the home network to a domain, and providing data required to share content between the first device and a second device registered to the domain according to the determination. In the method and apparatus, content can be shared by connecting the devices with one another including a user, and the burden of content providers for management can be reduced.

Method and apparatus for managing domain

Provided are a method and apparatus for acquiring data regarding a domain for the protection of digital content, and more particularly, a method and apparatus for acquiring domain information and domain-related data in which content received from an external source is converted into content that complies with a set of rules of a digital rights management (DRM) system and a license for the use of the result of the conversion is issued by receiving domain information including a domain key identifier from a domain information providing apparatus and receiving an updated domain key that is a valid domain key currently being used in a domain from a DRM object providing apparatus.

Method and apparatus for acquiring domain information and domain-related data

A content import method in a digital rights management (DRM) system imports transport streams received from outside a domain, generates a content file, and regularly inserts information in the form of transport packets necessary for decrypting encrypted content into a payload of the content file. Accordingly, even if usage constraint information (UCI) included in the received content changes, packaging is possible. When a device pertaining to the domain receives half of an imported content file via streaming, transport packets of the received half of the imported content file can be promptly decrypted without a time delay.

Method and apparatus for importing a transport stream

A method of processing digital content performed by an apparatus for storing digital content. In the method, a hardware regional code extracted from a memory of a content storage device is compared with a firmware regional code extracted from firmware, and the digital content is selectively encrypted and stored according to a corresponding regional code only when the hardware regional code matches the firmware regional code.

Method of encrypting and storing digital content using firmware regional code and apparatus therefor

A method and apparatus for protecting digital content in a digital rights management (DRM) system are provided. The method includes: determining a usage rule for content included in a first content file based on usage constraint information included in the first content file; and generating a second content file complying with this usage rule. According to the method and apparatus, the security requirement of content creators and content providers can be satisfied and at the same time the requirement of content consumers for freer usage can be satisfied.

Method and apparatus for importing content

Provided is a method of controlling content access in a home network. The method includes: (a) defining a predetermined sub group and allocating a sub group key for the sub group; and (b) checking whether a user belongs to the sub group and transmitting the sub group key to a user device requested by the user, wherein the user device obtains an encrypted content key using a domain key and the sub group key. Since a content key is twice encrypted using a domain key and a sub group key and transmitted to a user device, it is possible to provide authorized content access to a user.

Method of controlling content access and method of obtaining content key using the same

A method of packaging broadcast contents are provided. The method includes: extracting a copy control bit from input broadcast contents and determining whether the broadcast contents will be stored after being encrypted based on the extracted copy control bit; creating usage rule information which includes an encryption method of the broadcast contents if it is determined that the broadcast contents will be stored after being encrypted; extracting the copy control bit from each new broadcast content sequentially input and detecting broadcast contents which include copy control bits indicating that the broadcast contents will be stored without being encrypted; and encrypting the input broadcast contents through the broadcast contents before the detected broadcast contents using the encryption method and packaging and storing the encrypted broadcast contents and the usage rule information. Therefore, the unauthorized copying of broadcast contents transmitted through a digital broadcast receiver can be prevented.

Method of packaging broadcast contents

Provided are a transport stream structure of image data, a transmitting and receiving apparatus and method thereof. A transport stream structure of image data includes a header compressed by a lossless compression algorithm; an additional information field for additional information of image data, the additional information field being generated based on compressing the header by using the lossless compression algorithm; and a payload including the image data. The transport stream structure of the image data, the transmitting and receiving apparatus and method thereof enables inserting the additional information without changing the size of the related art transport stream structure of the image data.

Transport stream structure of image data having additional information inserted, and method and apparatus for transmission and reception thereof

Provided is a method of preventing digital content from being used despite the presence of copy control information. In the method, a security apparatus capable of restricting use of contents generates a nonce with respect to a storage device and stores the nonce in the storage device and a memory separated from the storage device when content is stored in the storage device; updates the nonces stored in the memory and storage device when movement of the content occurs; and permits use of the content only when the nonce of the storage device, which is stored in the memory, is equal to the nonce stored in the storage device if the content is requested for use, thereby preventing a disk cloning attack.

Method and apparatus for forbidding use of digital content against copy control information

A method for transmitting content to a user device from a home server in a home network is provided. The method includes: receiving an allocated user public key and a user private key of a user to whom the home server belongs; generating an arbitrary session public key and a session private key, generating an encrypted session private key by encrypting the session private key using a device public key that is a public key of the user device, and transmitting the encrypted session private key to the user device; and transmitting the content encrypted using a predetermined content key and a content key encrypted using the session private key to the user device. According to the method, by binding the content to each user, instead of to each device, the content can be safely and conveniently shared.

Growing community of inventors

Seongnam-si, South Korea

Bong-seon Kim