Method and Device for determining a unique content instance identifier, unique content instance identifier and method and device for managing content licenses

Technical field

The invention relates to a method for determining a unique content instance identifier of a content item, wherein said content item has been received by a receiving device and provided to a content management system, to a corresponding device for determining a unique content identifier, to a unique content identifier and to a method and a device for managing content licenses.

Background of the invention

When audiovisual content items are to be protected by means of encryption, it is common practice to maintain a data entity, referred to as content license (at least logically) separately from the content item itself. The content license contains protection related metadata for the content item such as usage rules settings and the content decryption key.

When defining a common system for the protection and management of audiovisual content in the consumer environment it is necessary to identify each content item that is acquired into that system uniquely. This is necessary in order to be able to reliably associate a content license with the associated content item of audiovisual content within said system. Due to the expected large number of devices able to acquire content into such system it ap- pears to be excessively burdensome to devise a new system for content identification that is specific for that system.

Content acquired from many different sources or content providers, e.g. broadcast, DRM or packaged media enters a common sys- tern for its protection and management. Each of these content de-

livery channels could apply a different identification scheme of identifying individual content items.

So there is a need for a uniform method to associate every content license in the system to the associated content item uniquely, by whatever channel, and hence with whatever original content identification scheme and original content identifier the original content was delivered.

Content protection and management systems might operate within one of many home network ecosystems, therefore it needs its own independent method to identify individual items of content.

Such a common content management and protection system is, for example, the proposed DVB-CPCM (Digital Video Broadcast- Content Protection and Copy Management System). The Reference Model of the DVB-CPCM System is disclosed in DVB Blue Book A094, published November 2005. It describes a generic content license, but does not disclose the methods for managing content within the DVB-CPCM System. In particular, the data entities "Content Instance Identifier" as content item identifier and "Content License Creator" are disclosed, but their mode of function and exact meaning are not disclosed.

It is an object of the present invention to provide a method for determining a_unique content instance identifier for each content item handled in a content management system, wherein said content item has been received from one of a plurality of content providers and /or content delivery channels and has been identified by said one of a plurality of content providers with an original content identifier within an original identification scheme.

The wording "content management system" is used throughout this description in embodiments in which the system is dealing mainly with managing content items without specifying whether a

protection scheme is implemented or not, whereas the wording "content management and protection system" is used with respect to embodiments, in which the protection features are emphasized, e.g. with content licenses. However, in a "content management system" as used within this description also protection schemes might be implemented.

It is a further object of the invention to provide a device for determining a unique content instance identifier for each content item handled in a content management and protection system, wherein said content item has been received from one of a plurality of content providers and /or content delivery channels and has been identified by said one of a plurality of content providers with an original content identifier within an original identification scheme.

A still further object of the invention is to provide a unique content instance identifier format for each content item handled in a content management and protection system, wherein said content item has been received from one of a plurality of content providers and /or content delivery channels and has been identified by said one of a plurality of content providers with an original content identifier within an original identification scheme.

A further object of the invention is to provide a method and a de- vice for managing content licenses in a content management and protection system in the consumer environment, wherein content items are handled.

Summary of the invention

The object is achieved in a first aspect by a method for determining a unique content instance identifier (CIID) of a content item, wherein said content item has been received by a receiving device and provided to a content management system and comprises an original content identifier of an original identification scheme, said

method comprising: defining a data structure of said unique content item identifier depending on said original identification scheme, said data structure comprising a first, a second and third part, wherein the size of at least one of said second and third parts depends on the original identification scheme; storing a code in said first part, wherein said code uniquely identifies said original identification scheme; storing said original content identifier, a derivative thereof, and /or a device identifier identifying said receiving device in said second part; storing a freely allocatable value in said third part, such that no duplicate unique content instance identifiers are generated by said device.

With a second aspect a device for determining a unique content instance identifier of a content item is provided, wherein said content item has been received by a receiving device and provided to a content management system and comprises an original content identifier of an original identification scheme, comprising a system controller adapted to: apply a data structure of said unique content item identifier depending on said original identification scheme, said data structure comprising a first, a second and third part, wherein the size of at least one of said second and third parts depends on the original identification scheme; store a code in said first part, wherein said code uniquely identifies said original identification scheme; store said original content identifier, a derivative thereof, and /or a device identifier identifying said receiving device in said second part; store a freely allocatable value in said third part, such that no duplicate unique content instance identifiers are generated by said device.

With a third aspect a unique content instance identifier of a content item is provided, wherein said content item has been received by a receiving device and provided to a content management system and comprises an original content identifier of an original identification scheme, comprising: a data structure depending on said original identification scheme, said data structure comprising a first, a second and third part, wherein the size of at least one of said second and third parts depends on the original identification scheme; said first part comprising a code, wherein said code uniquely identifies said original identification scheme; said second part comprising said original content identifier, a derivative thereof, and /or a device identifier identifying said receiving device in said second part; said third part comprising a freely allocatable value, such that no duplicate unique content instance identifiers exist.

With a fourth aspect a method for managing content licenses in a content management and protection system is provided, wherein content items are handled, comprising: creating by a device, comprised within said system, a content license for a content item to manage the usage of said content item within said system, storing a device identifier of the device which has created the first content license for said content item as a Content License Creator (CLC) field in the content license (CL), such that this value is not changed by any compliant device within said content management and protections system (e.g. DVB-CPCM).

With a fifth aspect a device for managing content licenses in a content management and protection system is provided, wherein content items are handled, comprising: a system controller being adapted to create a content license for a content item to manage the usage of said content item within said system, and to store a device identifier of said device, which has created the first content license for said content item as a Content License Creator (CLC)

field in the content license (CL), such that this value is not changed by any compliant device within said content management and protections system (e.g. DVB-CPCM).

Brief Description of Drawings

The above and other objects, features and advantages of the present invention will become more apparent from the following description of the presently preferred exemplary embodiments of the invention taken in conjunction with the accompanying drawings, in which

Fig.1 shows a generic structure of a content instance identifier in a Common Protection and Management System,

Fig. 2 shows steps of determining a unique content instance identifier,

Fig. 3 shows a table with examples of content instance identi- fier scheme codes,

Fig. 4 shows a structure of a content item identifier for DVB

Broadcast Content at Event Level,

Fig. 5 shows a structure of a content item identifier for DVB

Broadcast Content at Service Level,

Fig. 6 shows a structure of t he content item identifier for

DVB CA System and Acquisition Device Identifier,

Fig. 7 shows a structure of the content item identifier for

DVB-MHP Application and Acquisition Device Identifier,

Fig. 8 shows a structure of a content item identifier for ISAN,

Fig. 9 shows a structure of a content item identifier for truncated ISAN,

Fig. 10 shows schematically method steps to determine a new content license,

Fig. 1 1 shows schematically method steps to acquire new content licenses for additional usage rights.

Detailed Description

A consumer environment contains many different kinds of devices that allow the user to enjoy content in different situations, for example stationary devices in the home, the same at any secondary residence, mobile devices in the car, or handheld portable devices. Content can be delivered to the consumer by various means, for example, via broadcast (cable, satellite or terrestrial), the Internet, from packaged media, mobile /cellular network, or managed broadband services.

Content is generally audio-visual content plus optional accompanying data, such as subtitles, images /graphics, animations, web pages, text, games, software (both source code and object code), scripts or any other information which is intended to be delivered to and consumed by a user. A content item is a discrete instance of content of finite duration. In a content protection and content management and protection system (e.g. DVB-CPCM) each content item is accompanied by a content license carrying associated usage information together with further metadata.

In order to manage the content licenses with respect to their associated content items a unique content instance identifier (CIID) is derived. The allocation of the content instance identifiers (CIID) in the Common Management and Protection System (e.g. DVB-CPCM)

works as follows:

1. Allow a large enough number space to comfortably accommodate all individual content items to be registered in the system, e.g. 128 bits ( 16 bytes). 2. Structure and code the content instance identifier (CIID) to accommodate the import of content applying various defined identification schemes, without requiring a unique registration scheme within the common system, apart from a simple short prefix code.

3. The external, original identification system of the content pro- vider ensures uniqueness of a content item within that original system. This uniqueness is maintained within the common management and protection system by the application of prefix codes for each known external, original system, optionally some local constant value, for example a unique identifier of a device receiv- ing that content, and the re-use of the original system's content identifier within the common system.

4. In the case that the uniqueness of the individually acquired content item is necessary, some identifier from the common system can be applied as a prefix to the external system content iden- tifier, e.g. the unique device or device certificate identifier in the common system.

5. Alternatively, a combination of supplying system identifier (e.g. DVB original network id, CA system id, DVB bouquet id), plus some identifier from the common system, plus a number uniquely generated by that device. Several alternatives are described below.

By allowing and managing various methods for improving and generating partial identifiers, a very flexible content identification scheme can be applied, which uses a fixed length content identi- fier, an can be used to guarantee the uniqueness of all content protected and managed within the common system.

This method also enables a persistent identification of the source of each content item throughout its life in the common system. A device or entity that is cognizant of all of the identifier allocation

schemes can thus determine the origin of the acquired content.

The choice of which variant of content identification to apply in the common system is left for the discretion of the imple- menter/ manufacturer of the device or entity that acquires, or ingests content into the common system.

Fig. 1 shows the structure of the content instance identifier CIID in the common system, based on the example of adopting a 128- bit ( 16-byte) content identifier with a most significant byte MSB and a least significant byte LSB.

The generic common content identifier comprises three constituent parts: - Allocation type discriminator 1 ,

- Pre-allocated part 2,

- Freely allocatable part 3.

Allocation type discriminator 1 is a fixed-length field populated by one of the assigned values, for example the first 8 bits ( 1 byte). The scheme is expandable by reserving unused values of the prefix code for other external identification systems for which inclusion is facilitated by the allocation of a free prefix code to the new system to be accommodated. So some registration authority for the prefix codes is needed, and a specification of the format of the remaining data field in each case.

The scope of the pre-allocated part 2 and the freely allocatable part 3 size depend on the allocation scheme, indicated in byte 0. The pre-allocated part 2 always commences from byte 1 , and occupies a certain fixed-length part of the remaining bytes of the content identifier field, depending on the allocation scheme indicated in byte 0. The_rest of the identifier CIID is left to the freely allocatable range 3. The device or entity that sets the content identifier CIID for each item of acquired content must manage the

freely allocatable part 3 so that no duplicate identifiers CIID occur for different items of content.

In Fig. 2 the method steps for determining a unique content in- stance identifier (CIID) are depicted. In a first step Sl the original identification scheme is determined, in a second step S2 from this determined original identification an identification type is derived, which is stored in a third step S3 in a first part of the content instance identifier CIID. In a forth step S4 an original content iden- tifier used by the content provider or the external system, from which the content item has been received is determined and used to determine and store a pre-allocated part of the content instance identifier CIID in a fifth step S5. In a sixth step S6 the freely allocatable part of the content instance identifier CIID is determined to ensure that each copy of the content item, which is handled within the content management and protection system, is identified uniquely.

Fig. 3 shows a possible list of contributing content identification schemes, just as an example. Each example is described in detail below. In the first column the scheme code is depicted which might be used (the scheme codes are just an example, other scheme codes might be applied as well) as the first part (allocation type discriminator) of the content instance identifier CIID. In the second column there is a verbal description of the original identification scheme used by the original external system, the third column shows a proposal for the length of the pre-allocated part in byte and the forth column shows a proposal for the length of the freely allocatable part in byte. The first row with the exemplary scheme code 00x0 might be used for internal purposes, might be forbidden or could be defined to mean the rest of the 31 bytes are freely allocatable by the device, without any guarantee of uniqueness within the whole system, so when the device will only have access to content that it acquires.

With these examples it is assumed that the common content management and protection system mandates an 8-byte (64-bit) unique device identifier for each device compliant with that system. One such device identifier scheme is the EUI-64, which con- sists of 3 -byte company identifier (for which registrations are managed by the IEEE Registration Authority) and a 5 -byte extension, commonly used to give a unique identifier for each device.

The original delivery-system-specific content identifier might re- main embedded in the content, but it is not necessarily accessible to devices or entities in the common content management and protection system. The system (e.g. DVB-CPCM) adds its content license, including the common content identifier into the content in addition. The system (e.g. DVB-CPCM)_either embeds that in- formation and /or maintains a separate secure content license for that content.

Fig. 4 shows the structure of the content instance identifier CIID in a DVB-SI (DVB-Service Information) system. In DVB broadcast systems, although the audiovisual content arrives as a continuous stream of service events, each event is characterized by the combination of the DVB-SI data fields original network id + service id + event id, each with 2 bytes. In order to distinguish a recorded instance of that content from an instance recorded by a different consumer device, the unique identifier 4 of the device (8 bytes) that first acquired that content is appended to this data triplet, so that 14 bytes are building the pre-allocated part 2 and 1 byte is left for the freely allocatable part.

Fig. 5 shows a scheme, wherein the event identifier is not considered to be significant, hence the pre-allocated part 2 would consist of the DVB original network identifier and the service identifier (each with 2 bytes) and 8 bytes for the device identifier, with 3 bytes left for the freely allocatable part.

Similar schemes are foreseen for ATSC (Advanced Systems Television Committee) broadcast system content, both with and without event-level allocation of content identifiers.

In Fig. 6 the scheme for a DVB CA System Identifier is depicted. This scheme is applied when the Conditional Access (CA) system used to deliver the content maintains its identification within the common management and protection system (2 bytes). Together with 8 bytes of device identifier 4 for the freely allocatable part 5 bytes remain.

In Fig. 7 the identification scheme for DVB-MHP (DVB -Multimedia Home Platform) is depicted. This scheme is applied when content is provided in association with a DVB-MHP software application that runs in the acquisition device. According to the DVB-MHP specification, the application is identified by its 6-byte (48-bit) application identifier, which consists of the 32-bit MHP Organisation Identifier and the 16-bit application identifier number. The unique device identifier (8 bytes) is appended in the pre-allocated part 2 so that 1 byte for the freely allocatable part 3 remains.

In Fig. 8 the identification scheme for using the International Standard Audiovisual Number (ISAN) is depicted. It uses 12 -bytes ISAN code and 3 bytes freely allocatable. There would be no room to make this guaranteed universally unique using the device identifier 4 with a 16-byte identifier, however, as the ISAN refers to one particular produced item of content, it is likely that these 3 bytes will be enough with the envisaged distribution models of such content, i.e. this content would likely be bound to an indi- vidual consumer's domain of compliant devices in the common content management and protection system.

Fig. 9 shows a variant with a truncated ISAN code, whereby the version number part (last 4 bytes) is not used in the pre-allocated part 2. This leaves 7 bytes for the freely allocatable part. This

could then be set according to a unique DRM (digital rights management) license transaction used for the supply of that content to the acquisition device, hence maintaining the uniqueness of its identifier in the common system.

Fig. 10 shows schematically the content management in the Common Content Management and Protection System (e.g. DVB- CPCM). The content license CL is separate from the associated content item 5 (or at least logically separate whereby it could be embedded within the content item 5 at a known location, but encrypted with a different key than used for the content item 5 itself). The content license CL is generated on acquisition of the associated content item at an Acquisition Point AP by the acquisition or receiving device X. A system controller 6 with a security control determines the content license CL and within the content license CL there is stored a data for the content license creator CLC which is the device identifier of device X in this case (CLC=cert_id(X)). Also the content instance identifier CIID is set by the security control of the acquisition device X, e.g. according to the method de- scribed above. A further device Y within the content protection and management system (e.g. DVB-CPCM), which requests to render the content item with the content instance identifier CIID, stores the content item 5. The storing is realized by a storage entity SE. The rendered content item might be also consumed at a consumption point CP. When storing the content item 5 within the further device Y a copy of the content item is performed and a new CIID' is set by the further device Y and a corresponding new license CL' is built. The content license creator field CLC of the content license is the device identifier of the receiving device X, which firstly created the content license.

Other possibilities might be: Local storage:

- CL stored securely in CL repository - Content stored in the device in encrypted form

Streaming over local network:

- CL transferred separately to display device

- Content streamed over local network Receiving device in network creates a copy: - New CL created, with new content identifier (CIID)

- Content and CL storage as for local "storage case" above

The "Content License Creator" field (CLC) for the Copy remains as that of the original acquisition device. This enables a link back to the entity that is authorized to supply a new CL for that content, in case subsequent CL updates are needed as it is depicted in Fig. 1 1 schematically. The content instance identifier CIID is set e.g. by the DVB-CPCM Instance that creates the content license CL for the associated content item.

If a user wants to interact with the content provider of a content item 5 in order to get additional usage rights (e.g. further copies, additional geographical range for usage) it is possible to identify the device, which originally creates the content license CL by the content license creator CLC field. This device (in Fig. 1 1 it is the first device X) is normally the device which has contact to the content provider and can contact the content provider and get an additional content license CL2, which can be forwarded to the second device Y. Therefore the second device Y provides a facility, for example by providing a corresponding defined communications message, to allow the further device Y to initiate a process of acquiring additional rights, via a new content license CL, for that content instance, by sending that message to the receiving device X identified as the content license creator CLC for that content instance.

With respect to the wording of first part 1 , second part 2 and third part 3 it should be made clear that this wording does not imply necessarily an order, in which said first, second and third part are stored within said content instance identifier CIID.