Secure and Efficient Digital Rights Management Mechanisms with Privacy Protection

doi:10.1007/s12204-014-1523-5

上海交通大学学报（英文版） ›› 2014, Vol. 19 ›› Issue (4): 443-447.doi: 10.1007/s12204-014-1523-5

Secure and Efficient Digital Rights Management Mechanisms with Privacy Protection

HUANG Jheng-jia1 (黄政嘉), LU Pei-chun2 (卢佩君), JUANG Wen-shenq2* (庄文胜), FAN Chun-i1 (范俊逸), LIN Zheng-yang2 (林政扬), LIN Chun-hung2 (林俊宏)

(1. Department of Computer Science and Engineering, National Sun Yat-sen University, Kaohsiung 804, Taiwan, China; 2. Department of Information Management, National Kaohsiung First University of Science and Technology, Kaohsiung 811, Taiwan, China)

发布日期:2014-10-13
通讯作者: JUANG Wen-shenq (庄文胜) E-mail:wsjuang@nkfust.edu.tw

Secure and Efficient Digital Rights Management Mechanisms with Privacy Protection

HUANG Jheng-jia1 (黄政嘉), LU Pei-chun2 (卢佩君), JUANG Wen-shenq2* (庄文胜), FAN Chun-i1 (范俊逸), LIN Zheng-yang2 (林政扬), LIN Chun-hung2 (林俊宏)

(1. Department of Computer Science and Engineering, National Sun Yat-sen University, Kaohsiung 804, Taiwan, China; 2. Department of Information Management, National Kaohsiung First University of Science and Technology, Kaohsiung 811, Taiwan, China)

Published:2014-10-13
Contact: JUANG Wen-shenq (庄文胜) E-mail:wsjuang@nkfust.edu.tw

摘要/Abstract

摘要： In the Internet or cloud computing environments, service providers provide more and more content services. Users can use these convenient content services in daily life. The major data of the user are maintained by the service providers except that some personal privacy data are stored at the client device. An attacker may try to invade the systems, and it will cause the damage of users and service providers. Also, users may lose their mobile devices and then it may cause the data disclosure problem. As a result, the data and privacy protection of users become an important issue in these environments. Besides, since many mobile devices are used in these environments, secure authentication and data protection methods must be efficient in these low resource environments. In this paper, we propose an efficient and privacy protection digital rights management (DRM) scheme that users can verify the valid service servers and the service servers can ensure the legal users. Since the key delegation center of the third party has the robust security protection, our proposed scheme stores the encrypted secret keys in the key delegation center. This approach not only can reduce the storage space of the user devices, but also can recover the encrypted secret keys in the key delegation center when a user loses her/his devices for solving the device losing problem.

关键词: identity authentication, elliptic curve cryptosystem, privacy protection, digital rights management(DRM)

Abstract: In the Internet or cloud computing environments, service providers provide more and more content services. Users can use these convenient content services in daily life. The major data of the user are maintained by the service providers except that some personal privacy data are stored at the client device. An attacker may try to invade the systems, and it will cause the damage of users and service providers. Also, users may lose their mobile devices and then it may cause the data disclosure problem. As a result, the data and privacy protection of users become an important issue in these environments. Besides, since many mobile devices are used in these environments, secure authentication and data protection methods must be efficient in these low resource environments. In this paper, we propose an efficient and privacy protection digital rights management (DRM) scheme that users can verify the valid service servers and the service servers can ensure the legal users. Since the key delegation center of the third party has the robust security protection, our proposed scheme stores the encrypted secret keys in the key delegation center. This approach not only can reduce the storage space of the user devices, but also can recover the encrypted secret keys in the key delegation center when a user loses her/his devices for solving the device losing problem.

Key words: identity authentication, elliptic curve cryptosystem, privacy protection, digital rights management(DRM)

中图分类号:

TP 309.2

HUANG Jheng-jia1 (黄政嘉), LU Pei-chun2 (卢佩君), JUANG Wen-shenq2* (庄文胜), FAN Chun-i1. Secure and Efficient Digital Rights Management Mechanisms with Privacy Protection[J]. 上海交通大学学报（英文版）, 2014, 19(4): 443-447.

HUANG Jheng-jia1 (黄政嘉), LU Pei-chun2 (卢佩君), JUANG Wen-shenq2* (庄文胜), FAN Chun-i1 (范俊逸), LIN Zheng-yang2 (林政扬), LIN Chun-hung2 (林俊宏). Secure and Efficient Digital Rights Management Mechanisms with Privacy Protection[J]. Journal of shanghai Jiaotong University (Science), 2014, 19(4): 443-447.

参考文献

[1] Delettre C, Boudaoud K, Riveill M. Cloud computing,security and data concealment [C]// Proceedings of 2011 IEEE Symposium on Computers and Communications (ISCC). Piscataway, USA: IEEE,2011: 424-431.
[2] Chen D, Zhao H. Data security and privacy protection issues in cloud computing [C]//Proceedings of 2012 International Conference on Computer Science and Electronics Engineering (ICCSEE). Piscataway,USA: IEEE, 2009: 647-651.
[3] Jang E, Koh B, Choi Y. An authentication mechanism of digital contents in pervasive computing environment [C]//Proceedings of 2008 International Conference on Information Security and Assurance (ISA).Piscataway, USA: IEEE, 2008: 527-533.
[4] Hartung F, Ramme F. Digital rights management and watermarking of multimedia content for mcommerce applications [J]. Communications Magazine,IEEE, 2000, 38(11): 78-84.
[5] Ei Aimani L, Raekow Y. Reselling digital content [C]//Proceedings of ARES’10 International Conference on Availability, Reliability and Security. Piscataway,USA: IEEE, 2010: 391-396.
[6] Azad M M, Ahmed A H S, Alam A. Digital rights management [J]. International Journal of Computer Science and Network Security, 2010, 10(11): 24-33.
[7] Adobe content server [EB/OL]. (2013-10-28). http://en.wikipedia.org/wiki/adobe content server, 2013.
[8] Feijo B. Visualization, digital content, and simulation[J]. MultiMedia, IEEE, 2009, 16(1): 8-12.
[9] US 20020077988 A1, Distributing digital content [S].
[10] Liu Q, Safavi-Naini R, Sheppard N P. Digital rights management for content distribution [C]//Proceedings of the Australasian Information Security Workshop Conference on ACSW Frontiers. Darlinghurst, Australia:Australian Computer Society, 2003: 49-58.
[11] US 6697944 B1, Digital content distribution, transmission and protection system and method, and portable device for use therewith [S].
[12] Lin Lun-yu. Design and implementation of a mechanism for document protection and recording: Using PDF and TXT documents as examples [D]. Hsinchu,China: Institute of Computer Science and Engineering,National Chiao Tung University, 2008 (in Chinese).
[13] Lu Pei-chun, Juang Wen-shenq. Secure and efficient data and privacy protection mechanisms in cloud computing[C]//Proceedings of the 18th Conference on Information Management & Practice. Taipei, China:CSIM, 2012 (in Chinese).
[14] Wu S, Zhu Y. Efficient and secure password-based authenticated key exchange protocol [C]//Proceedings of 2006 International Conference on Computational Intelligence and Security. Piscataway, USA: IEEE, 2006:1269-1272.
[15] Amara M, Siad A. Elliptic curve cryptography and its application [C]//Proceedings of 2011 7th International Workshop on Systems, Signal Processing and their Applications. Piscataway, USA: IEEE, 2011: 247-250.
[16] FIPS-PUB-198, The keyed-hash message authentication code [S].

Secure and Efficient Digital Rights Management Mechanisms with Privacy Protection

Secure and Efficient Digital Rights Management Mechanisms with Privacy Protection

可视化

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 11

编辑推荐

Metrics

本文评价

[1]	GUO Fei (郭非), CAO Zhenfu (曹珍富), LIU Zhusen (刘竹森), CAO Nanyuan (曹楠源). A Privacy-Preserving Aggregation and Authentication Scheme Towards Mobile Users in Smart Grid[J]. Journal of Shanghai Jiao Tong University (Science), 2020, 25(1): 37-43.
[2]	GUO Jie*(郭捷), XU Jia-yun (徐家运), BAO Jia-li (鲍佳立). Region of Interest Based Selective Encryption Scheme for Privacy Protection in H.264 Video[J]. 上海交通大学学报（英文版）, 2014, 19(4): 385-391.
[3]	XIAO Ji-nian1 (肖佶年), JIA Yun-zhe1 (贾蕴哲), FU Er-dong1 (付尔东),HUANG Zheng1* (黄征), L. Audio Authenticity: Duplicated Audio Segment Detection in Waveform Audio File[J]. 上海交通大学学报（英文版）, 2014, 19(4): 392-397.
[4]	WANG Liang-liang1* (王亮亮), CHEN Ke-fei2 (陈克非),MAO Xian-ping1 (毛贤平), WANG Yong-tao. Efficient and Provably-Secure Certificateless Proxy Re-encryption Scheme for Secure Cloud Data Sharing[J]. 上海交通大学学报（英文版）, 2014, 19(4): 398-405.
[5]	MAO Xian-ping1 (毛贤平), CHEN Ke-fei2*(陈克非), LONG Yu1 (龙宇), WANG Liang-liang1 (王亮亮). Attribute-Based Signature on Lattices[J]. 上海交通大学学报（英文版）, 2014, 19(4): 406-411.
[6]	SHEN Zhong-hua (沈忠华), YU Xiu-yuan (于秀源) . Threshold Signature Scheme with Threshold Verification Based on Multivariate Linear Polynomial[J]. 上海交通大学学报（英文版）, 2011, 16(5): 551-556.
[7]	WANG Chih-hung (王智弘), WEI Shih-yi (魏仕益). Highly Resilient Key Distribution Strategy for Multi-level Heterogeneous Sensor Networks by Using Deployment Knowledge[J]. 上海交通大学学报（英文版）, 2011, 16(5): 593-599.
[8]	LO Nai-wei (罗乃维), YEH Kuo-hui (叶国晖). Simple Three-Party Password Authenticated Key Exchange Protocol[J]. 上海交通大学学报（英文版）, 2011, 16(5): 600-603.
[9]	CHIEN Hung-yu (简宏宇). Provably Secure Authenticated Diffie-Hellman Key Exchange for Resource-Limited Smart Card[J]. 上海交通大学学报（英文版）, 2014, 19(4): 436-439.
[10]	WANG Chih-hung* (王智弘), TU Tai-yuan (涂泰源). Keyword Search Encryption Scheme Resistant Against Keyword-Guessing Attack by the Untrusted Server[J]. 上海交通大学学报（英文版）, 2014, 19(4): 440-442.
[11]	HE Jun* (何俊), ZHENG Shi-hui (郑世慧). Intrusion Detection Model with Twin Support Vector Machines[J]. 上海交通大学学报（英文版）, 2014, 19(4): 448-454.