首页> 外国专利> Method and system for license audit and management in DRM environment

Method and system for license audit and management in DRM environment

机译:DRM环境下的许可证审计和管理方法及系统

摘要

A method and a system for auditing and managing a license in a DRM environment are provided to manage all the processes from issuing the license to abolish the license, to monitor an illegal security threat, and to cope with the illegal security threat. A method for auditing and managing a license in a DRM environment comprises the following several steps. A forensic agent checks whether there exists a license hash profile in use(S210). If there does not exist the license hash profile, the forensic agent generates a new license hash profile(S220), records an alarm logo on a generation reason of the license hash profile(S250) and reports the alarm logo to a forensic management server(S260). If there exists the license hash profile, the forensic agent calls the license hash profile(S230) and compares cyclically the called license hash profile with the license file stored at a user terminal(S231). If the called license hash profile is not the same as the file stored at the user terminal, the forensic agent repeats the steps S250 and S260. If there exists the license hash profile, the forensic agent monitors system calls like an access, a modification, an addition, a deletion, a movement, a copy or a file opening by using the license stored at the user terminal(S240). If the forensic agent detects an item identical to a system call signature of a rule set while monitoring the system calls, the forensic agent recognizes the detected item as an abnormal behavior(S241) and repeats the steps S250 and S260.
机译:提供了一种用于在DRM环境中审核和管理许可证的方法和系统,以管理从发布许可证到废除许可证,监视非法安全威胁以及应对非法安全威胁的所有过程。在DRM环境中审计和管理许可证的方法包括以下几个步骤。法医代理检查使用中是否存在许可证哈希配置文件(S210)。如果不存在许可证哈希简档,则取证代理生成新的许可证哈希简档(S220),根据许可证哈希简档的生成原因记录警报徽标(S250),并将警报徽标报告给司法鉴定管理服务器(S250)。 S260)。如果存在许可证哈希简档,则取证代理调用许可证哈希简档(S230),并将所调用的许可证哈希简档与存储在用户终端的许可证文件循环比较(S231)。如果被叫许可证哈希简档与用户终端上存储的文件不同,则取证代理重复步骤S250和S260。如果存在许可证哈希简档,则取证代理通过使用存储在用户终端上的许可证来监视系统调用,例如访问,修改,添加,删除,移动,复制或文件打开(S240)。如果法医代理在监视系统调用的同时检测到与规则集的系统调用签名相同的项目,则法医代理将检测到的项目识别为异常行为(S241)并重复步骤S250和S260。

著录项

  • 公开/公告号KR100957195B1

    专利类型

  • 公开/公告日2010-05-11

    原文格式PDF

  • 申请/专利权人

    申请/专利号KR20070136740

  • 发明设计人 정병옥;고병수;신용태;

    申请日2007-12-24

  • 分类号G06F15;G06F17;G06F21;

  • 国家 KR

  • 入库时间 2022-08-21 18:31:14

相似文献

  • 专利
  • 外文文献
  • 中文文献
获取专利

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号