earticle

영어

Content abusing is increasingly common with the rapid development of the Internet, which damages the benefits of copyright owners, how to effectively prevent the abuse of digital contents is a big challenge. In this paper, we propose a secure DRM scheme supporting dynamic authorization, which first encrypts content with content encryption key (CEK), and then protects CEK based on distributed attribute-based encryption. At last encrypted CEK will be packaged and distributed with encrypted content, which eliminates independent key management and reduces the burden on the DRM server. In our scheme, user is labeled with a set of attributes and CEK is associated with access policy, only the user whose attributes satisfy access policy of content can recover CEK, which also achieves fine-grained access control. Moreover, to improve Muller et al.’s DRM scheme, our scheme achieves dynamic authorization by adding action control in the license, while the action control is related to user’s payment. Hence, when the user accesses the content, attributes comparison and license checking must be enforced, which lowers the trust required in DRM client. The analysis and comparison show our scheme is efficient and secure.