Secure Watermarking Protocols for Digital Content Transactions

隨著資訊技術與網路設備的進步，數位內容可以更加簡單快速地經由網際網路進行複製與傳遞，因此，經由網際網路進行數位內容產品交易的條件也日趨成熟。但是也由於數位內容可以容易的被複製與傳播，建立一套能保護數位內容所有權的交易機制是目前數位內容交易無法避免的挑戰。 買-賣浮水印協定係透過將買方身份識別資訊經由強韌而且不可見的浮水印嵌入方式予以嵌入到數位內容中，而該內嵌之買方身份識別資訊將會隨著數位內容的複製而被複製，當有盜版出現時可以經由此內嵌之買方身分識別來追蹤盜版來源，達到數位內容保護與管理的目的以遏阻非法盜版行為的發生。 本文除應用RSA非對稱式加密與秘密同態機制，提出了一個符合現實生活中買賣交易行為、可彈性調整加密範圍數位內容買賣浮水印協定，強化了目前研究中對於數位內容買-賣浮水印協定的安全性，並進一步的考量二手商品交易行為，在可彈性調整加密範圍數位內容買賣浮水印協定基礎上，提出一個結合數位內容二手買賣與盜版追蹤的二手數位內容買賣浮水印協定，達到讓參予買賣的角色可以在安全的情形下完成二手數位內容所有權的移轉並從中獲取相對應利益的目標的數位內容轉賣浮水印協定來增強了目前數位內容買賣浮水印協定研究中對於二手交易欠缺之處，解決了數位內容買賣浮水印協定中所可能遭遇的重要安全性議題，如：買方權益、盜版追蹤、資訊不連結、共謀、買方需要參與仲裁、中間者攻擊及匿名性問題。使整體數位內容買賣浮水印協定更趨完整。As the digital technology had grown rapidly and the popularity of the Internet, digital media (such as music, images, movies etc.) have been adopted widely. It's become more and more maturity about digital content transaction over Internet. However, this kind of trend also increases the risk of the unauthorized distribution of digital content. Therefore, digital content's ownership or copyright protection has become an imperative issue. Buyer-seller watermarking protocol permit the seller inserts a unique digital watermark, without causing serious degradation, into digital content to be sold secretly. This unique digital watermark can be extracted from a replica found in the market. Using the extraction watermark mechanism, the seller can identify the truthfulness of the digital content clearly. And the ownership of the digital content can be protected through this way. In this paper, we have proposed a flexible encryption blocks selection buyer-seller watermarking protocol integrated the RSA asymmetric encryption system and homomorphism mechanism to protect the ownership of digital contents and fit real life. And consider the secondhand transaction in the real life. We also propose a buyer-reseller watermarking protocol based on the flexible encrypt blocks selection buyer-seller watermarking protocol to offer a solution of secondhand transaction. In our scheme, it's more light data transport requirement than other schemes. All roles in protocol will benefit by their participation. Our scheme can overcome various of the known attacks and security problems in the buyer-seller watermark protocol, such as buyer's right problem, unbinding problem, piracy tracing problem, conspiracy problem, buyer's participation in the dispute resolution problem, man-in-the-middle attack problem and anonymous problem. Furthermore, the seller and arbiter can verify the buyer's watermark without decrypting it in our scheme. Hence, the proposed protocols become more practical.第一章 緒 論............................................1 1.1 研究背景.........................................1 1.2 研究動機.........................................2 1.3 研究目的.........................................3 1.4 論文架構.........................................4 第二章 買-賣浮水印協定基礎............................. 6 2.1 理論基礎.........................................6 2.1.1 數位憑證.........................................6 2.1.2 RSA公開金鑰......................................8 2.1.3 秘密同態.........................................8 2.1.4 數位浮水印.......................................9 2.2 安全性議題......................................10 2.2.1 買方權益問題....................................10 2.2.2 資訊不連結問題..................................11 2.2.3 盜版追蹤問題....................................12 2.2.4 共謀問題........................................12 2.2.5 買方需要參與仲裁問題............................13 2.2.6 中間者攻擊問題..................................13 2.2.7 匿名性問題......................................14 第三章 數位內容買賣浮水印協定..........................15 3.1 文獻探討........................................15 3.2 協定架構........................................17 3.3 協定流程........................................19 3.3.1 符號說明. ......................................19 3.3.2 協定流程說明....................................20 3.3.2.1 數位內容買賣註冊協定流程........................20 3.3.2.2 數位內容買賣起始協定流程........................21 3.3.2.3 數位內容買賣浮水印產生協定流程..................21 3.3.2.4 數位內容買賣浮水印驗證協定流程..................23 3.3.2.5 數位內容買賣浮水印嵌入協定流程..................24 3.3.2.6 數位內容買賣盜版仲裁協定流程....................26 第四章 數位內容買賣浮水印協定安全性議題分析與比較......30 4.1 數位內容買賣浮水印協定安全性議題分析............30 4.1.1 數位內容買賣浮水印協定買方權益問題分析..........30 4.1.2 數位內容買賣浮水印協定資訊不連結問題分析........30 4.1.3 數位內容買賣浮水印協定盜版追蹤問題分析..........31 4.1.4 數位內容買賣浮水印協定共謀問題分析..............32 4.1.5 數位內容買賣浮水印協定買方需要參與仲裁問題分析..32 4.1.6 數位內容買賣浮水印協定中間者攻擊問題分析........33 4.1.7 數位內容買賣浮水印協定匿名性問題分析............33 4.2 與相關研究比較..................................34 4.3 小結............................................35 第五章 數位內容轉賣浮水印協定..........................36 5.1 文獻探討........................................36 5.2 協定架構........................................38 5.3 協定流程........................................40 5.3.1 符號說明........................................40 5.3.2 協定流程說明....................................41 5.3.2.1 數位內容轉賣註冊協定流程........................41 5.3.2.2 數位內容轉賣起始協定流程........................42 5.3.2.3 數位內容轉賣浮水印產生協定流程..................43 5.3.2.4 數位內容轉賣所有權與浮水印驗證協定流程..........44 5.3.2.5 數位內容轉賣浮水印嵌入協定流程..................45 5.3.2.6 數位內容轉賣盜版仲裁協定流程....................46 第六章 數位內容轉賣浮水印協定安全性議題分析與比較......50 6.1 數位內容轉賣浮水印協定安全性議題分析............50 6.1.1 數位內容轉賣浮水印協定買方權益問題分析..........50 6.1.1.1 新買方權益問題..................................50 6.1.1.2 轉賣方(原買方)權益問題..........................50 6.1.2 數位內容轉賣浮水印協定資訊不連結問題分析........50 6.1.3 數位內容轉賣浮水印協定盜版追蹤問題分析..........51 6.1.4 數位內容轉賣浮水印協定共謀問題分析..............51 6.1.5 數位內容轉賣浮水印協定買方需要參與仲裁問題分析..51 6.1.6 數位內容轉賣浮水印協定中間者攻擊問題分析........51 6.1.7 數位內容轉賣浮水印協定匿名性問題分析............51 6.2 與相關研究比較..................................52 6.3 小結............................................53 第七章 結論與未來展望..................................54 7.1 結論............................................54 7.2 未來展望........................................55 參考文獻 ................................................5