臺灣博碩士論文加值系統

近年來，隨著網路的蓬勃發展，帶動了全球數位內容出版業(電子書、電子報、電子雜誌、網路小說、數位學習等)，但也由於網路的普及，造成有價的數位內容被刻意或不經意的廣為流傳，嚴重危害到數位內容版權擁有者的利益，間接也影響了數位內容產業的正常發展
數位版權管理(Digital Right Management, DRM)可用來保護數位內容業者及數位內容。廣義上來說，數位版權管理是利用各種資訊技術，來控制特定的數位內容(如:音樂、電子書、軟體、多媒體檔案等)的使用。這些技術除提供防止消費者任意把內容複製到其他未經授權的設備或未經授權的使用者功能，且對授權內容的操作做了某些特定的限制。
數位版權管理系統通常是設計用來保護大金額、高價值的消費市場或聚焦於保護企業內部有價值之數位資產，在小額消費的普羅市場上，數位版權嚴謹的憑證取得與驗證流程卻反而成為其絆腳石，在本研究中，我們提出了針對小額消費普羅市場的解決方案。
本論文提出了類似悠遊卡機制及應用單點登入( Single Sign On )技術的SAML-based DRM，使得使用者可透過一匿名代號使用。
最後再介紹以SAML-based DRM為基礎，未來可能的發展及研究方向。

In recent year, internet is very popular , and there are many e-publishers (like e-book, e-news, e-magazine, e-learning.......etc.) setting up in internet in the world.
However, following by the internet blooming, the problem of copy right is indeed challenged directly or indirectly by illegal download and illegal free share which disintegrate the profit, benefit, and the business growing for the e-publishers .
Now! Digital Right Management, DRM can help those e-publishers solve these situations. Basically, Digital Right Management, DRM is used to control the using of special e-service (like e-music, e-book, software, e-file...etc.) by various information technology which could provide e-publishers to prevent illegal download or illegal free share from internet, and which could also provide e-publishers to limit consumers' behavior.
The purpose of Digital Right Management, DRM is focusing on protecting the valuable of e-asset for business and the high profit in the consumer market.
However, the processing of Digital Right may be not easy and take too long time to attract new customers in the low-price consumer market. In our thesis, we provide a model to solve this problem.We figure out a new architecture, SAML-based DRM with a similar concept of Single Sign On, which can help users log-in by an anonymous code.
In final, we will introduce and analyse the development in the future of this technology, which will be based on the concept of SAML-based DRM .

摘要 i
誌謝 iii
目錄 iv
圖目錄 v
一、 緒論 1
1.1 研究背景與動機 1
1.2 研究目的 1
1.3 章節概要 4
二、 文獻探討 5
2.1 數位版權管理系統(Digital Right Management, DRM) 5
2.2 裝置式數位版權管理系統(Device-based DRM)–Windows Media DRM 7
2.3 身份認證式數位版權管理系統(Identity-based DRM) 11
2.4 單點登入 (Single Sign On, SSO) 14
2.5 SAML 15
三、 SAML-based DRM 22
3.1 悠遊卡機制 23
3.2 SAML-based DRM運作原理 25
3.3 SAML-based DRM特色 26
3.4 系統架構 27
3.5 系統原理 28
四、 系統實作與成果 37
4.1 系統環境 37
4.2 情境展示-短期租賃 37
4.3 情境展示-頻繁交易 40
五、 結論 43
5.1 總結 43
六、 參考文獻 45

[1] Piyali Mandal, Ashish Thakral, Shekhar Verma, “Watermark Based Digital Rights Management.”IEEE Information Technology Coding and Computing, 2005. ITCC 2005, vol 1.pp.74-78,2005.
[2] Microsoft, “Windows Media-Digital Right Management”, [On-line].Available: http://www.microsoft.com/windows/windowsmedia/howto/articles/drmarchitecture.aspx
[3] Apple, “Thoughts on Music” , [On-line].Available: http://www.apple.com/hotnews/thoughtsonmusic/
[4] 智勝國際,”DRM數位版權保護全方位解決方案”, http://www.caidiy.com/drm/ 。
[5] 優碩科技, http://www.trustview.com.tw/tw/qa.aspx。
[6] OASIS “SAML 2.0”, [On-line].Available: http://www.oasis-open.org/specs/#samlv2.0。
[7] 楊佳泰,「以Xrml為基礎之多媒體數位版權管理機制之研究」, 國立中正大學, 碩士論文, 民國九十四年。
[8] Microsoft, “Digital Right management”, [On-line].Available: http://www.microsoft.com/windows/windowsmedia/tw/drm/
[9] C. Conrado, F.Kamperman, C.J. Schrijen, and W. Jonker, “Privacy in an Identity-based DRM system,”IEEE Proceedings of the 14th International Workshop on Database and Expert Systems Applications (DEXA’03), Prgue, September w2003, pp. 385-395.
[10] 洪啟富,「基於身份與隱私為主體的數位版權管理系統之研究」, 國立清華大學, 碩士論文, 民國九十四年。
[11] David Orrell, Eduserv Athens
Authentication Systems and Single Sign-On (SSO), EuroCAMP, 7-9 November 2005, Porto, Portugal .
[12] Eve Maler, “SAML basics A technical introduction to the Security Assertion Markup Language” , XML Technology Center, Sun Microsystems, Inc.
[13] Wikipedia, “SAML” , [On-line].Available: http://en.wikipedia.org/wiki/SAML
[14] 陳俊廷,「可權限轉移之數位版權管理系統的研究與實現」, 國立交通大學, 碩士論文, 民國九十八年。
[15] 悠遊卡, http://www.easycard.com.tw/
[16] Tom Scavo, Security Assertion Markup Language A Brief Introduction to SAML, NCSA,
[17] Bok-Nyong Park, Jae-Won Kim and Wonjun Lee, “Precetp: A Privacy- Enhancing Licenese Management Protocol For Digital Rights Management”, Proceeding of the 18th International Conference on Advanced Information Networking and Application, Vol. 1, pp.574 - 579, 2004.