【作者】 裴庆祺；

【导师】 马建峰；

【作者基本信息】 西安电子科技大学 ， 密码学， 2007， 博士

【摘要】 数字媒体内容保护的对象通常包括文本、图像、音频、视频等媒体介质。数字技术的迅速发展和广泛应用,互联网、电信移动网络等新兴传输方式和手机、机顶盒、电脑等多媒体终端极大地拓展了数字媒体内容的传输范围。由于数字媒体具备易于无损复制、分发等特性,借助数字技术和互联网随意批量复制和发行受知识产权保护的数字媒体产品和内容的现象普遍存在。如果缺乏对数字媒体的版权管理和内容保护将导致严重的负面现象,由此滋生的大量盗版及不规范使用行为不但会对数字媒体产业造成巨大的冲击,而且也会对我们的经济、社会和文化造成多重的伤害。目前,数字版权保护方面的问题已经引起了各国政府、法律、媒体和工业等各方的共同关注。实际的经验和近年来的探讨表明,仅凭法律手段难以保护数字内容的版权,相关技术手段也是极其重要的。本文重点研究DRM系统中域管理、接入认证、密钥管理、权限管理等问题,在深入分析现有技术、标准和系统的基础上,提出了若干新的思想和方案来解决DRM系统的应用问题。论文的研究成果主要有:1.提出一种新的域管理模型,使得对外能够隐藏域内的组成情况,并且被授权的设备可以为域购买域许可,许可服务器能够验证该设备为某个域的域成员,当域内出现违法设备时,也可以追查出来。2.提出了新的用户域中的DRM设备认证方法,能够满足DRM系统在设备间身份认证上的需要,并设计出两套适合DRM系统的接入认证方案,一个是基于PKI的接入认证方案,另一个为基于身份的接入认证方案。3.提出了基于秘密共享技术的DRM密钥管理方法,能够在域内有效设备之间合理共享密钥,同时,能够提高密钥的抗毁性,即使部分密钥部件毁坏,也可以正确恢复密钥。为此,还提出一个基于身份的秘密共享方案,一个基于身份可自证实身份的秘密共享方案。4.在家庭网络体系结构的基础上提出一种基于PMI的DRM权限管理方案,该方案通过建立权限—属性链(RO-AO)的方式和RBAC管理机制满足了家庭网络的DRM权限管理需求,并根据家庭网络的实际用户类型设计了分级的角色继承模型。更多还原

【Abstract】 The object of digital media content protection usually includes text, image, audio, video and other mediums. With the rapid development of digital technologies and the extensive applications, the Internet, mobile networks and other emerging telecommunications modes and mobile phones, set-top boxes, computers and other multimedia terminals have greatly expanded the transmission scope of digital media content.As the digital medium have the characteristics of being lossless reproduced and distributed, the phenomenon of using digital technology and the internet freely to reproduce and distribute the digital media products and the content protected by intellectual property is widespread. If there is no digital media copyright management and content protection, which will lead to serious negative phenomena, breeding massive piracy and the non-standard use would not only have enormou effect on digital media industry, but also greatly injure our economics, sociality and culture.Currently, digital copyright protection issue has caused a common concern from national governments, law, media and industry, and other parties. Practical experience and the study in recent years show that it is not just legal mean to protect the copyright of digital content, and it is extremely important to adopt related technical measures. This paper focuses on the domain management, access authentication, key management, rights management and other issues in DRM system. On the basis of deep analysis of existing technologies, standards and systems, some new ideas and schemes to solve the application problems of DRM system are proposed. The main research results are as follows:1. A new domain management model which can hide components within the domain is proposed, and an authorized devices can purchase the domain license for the domain. License server can verify the device whether it is a member of some certain domain. When an illegal device appeared in the domain, it can also be traced .2. A new DRM device authentication method in the user domain to meet the authentication requirement between the devices in a DRM system, as well as two access authentication schemes suitable for DRM system are all proposed. One scheme is based on PKI, and the other is based on identity.3. A DRM key management method based on secret sharing technology is proposed. It can achieve the reasonable key sharing between the legal devices. Meanwhile, it can improve the survivability of the keys. Even though some keys are damaged, it can also recover the keys correctly. Hence, an identity-based secret sharing scheme and an identity-based identity proving scheme are also proposed.4. A PMI-based DRM scheme on the basis of the architecture of home networks is propose, which can meet the demands of the rights management requirement in home networks by establishing RO-AO chain and the RBAC management mechanism. According to the actual user types in home network, a role hierarchy model is designed.更多还原