Rights violation detection in multi-level digital rights management system

A multi-level digital rights management (DRM) system consists of owner, multiple levels of distributors and consumers. The distributors and consumers are given redistribution and usage rights using redistribution and usage licenses respectively. However, both redistribution and usage licenses can be violated by a malicious distributor/consumer to bypass the permissions and constraints in them. Thus, it is required to detect such violations. In this paper, we deal with the redistribution rights violation using a process called license validation. The problem of validation becomes complex when there exists multiple redistribution licenses for the same content with the distributors. In such cases, large number of comparisons may be needed and it may become difficult in real time in a large and distributed multi-level DRM system. Hence, we propose a bit-vector transform based license organization technique to do the validation efficiently. The proposed license organization method is compatible with the DRM related tasks such as license revocation and constraint range revocation. Mathematical analysis and experimental results show that the proposed license organization technique can do the validation efficiently.     

面向数字权利保护的许可证管理方案及应用

提出一种数字权利管理模型,该模型的权利描述语言和许可证管理语言均采用一种基于逻辑框架的语言LucScript,使数字权利描述和许可证管理具有统一的逻辑语义。该模型采用逻辑许可池的方式管理许可证,对比现存方法,在许可证更新和增量更新,权利迁移灵活性和方便性,使用支付模式,合理使用权限等方面都具有优势。对该模型的管理和运行机制进行了分析和说明,最后给出了该模型的应用方法,并将该模型与相关的数字权利管理模型进行了对比。     

开源许可证的选择:挑战和影响因素

开发者通常会为其开源代码选择不同的开源许可证来约束其使用条件,以期能有效地保护知识产权和维持软件的长远发展.然而,现有的开源许可证种类繁杂,开发者难以了解不同开源许可证间的差异,并且难以通过现有的开源许可证选择工具做出合适的选择——其使用要求开发者了解开源许可证相关条款并明确自己的业务需求.学术界虽然对开源许可证已有研...     

开源许可证合规性研究

随着开源概念的逐步深入,开源软件成为软件发展的潮流.同时,开源软件的使用受各类开源许可证约束.开源参与者在开发过程中该如何为自己的开源软件选择合适的许可证,确保高效合理地使用社区群体智慧劳动成果,仍是一个亟需解决的问题.为此,首先分析和解读了开放源代码促进会认证的常用开源许可证,通过对许可证条款内容和结构的研究,得到开源许可证框架及许可证兼容性推导模型,并将该模型应用于对我国自主研发的木兰宽松许可证的分析和解读.最后,基于上述工作研发了开源许可证选择工具,为开源开发者对许可证的理解和合规使用提供了参考和决策支持.     

Managing license compliance in free and open source software development

License compliance in Free and Open Source Software development is a significant issue today and organizations using free and open source software are predominately focusing on this issue. The non-compliance to licenses in free and open source software development leads to the loss of reputation and the high costs of litigation for organizations. Towards an automated compliance management, we use the Open Digital Rights Language to implement the clauses of open source software licenses in a machine interpretable way and propose a novel algorithm that analyzes compatibility between free and open source software licenses. Also, we describe a framework that inductively manages compliance of license clauses in a free and open source software development. We simulate and evaluate the formalized license compliance management by analyzing a real-time open source software project GRASS.     

Service licensing: conceptualization, formalization, and expression

Service licensing enables a broader usage of services and a means for designing business strategies and relationships. A service license describes the terms and conditions that permit the use of and access to a service, in a machine interpretable way, which services can understand. The distribution of services spanning across organizational boundaries raises problems related to intellectual value that are less explored in service-oriented research. Being a way to manage the rights between service consumers and service providers, licenses become significant in services. As the nature of services differs significantly from traditional software and components, services prevent the direct adoption of software and component licenses. The concept of preserving certain rights of owner and presenting certain rights to consumer, addressed by service licensing, is incipient in the field of service-oriented computing. We propose a formalization of licensing clauses for an unambiguous definition of a service license. We extend the Open Digital Rights Language to implement the clauses of service licensing, in a machine interpretable way. We illustrate the concepts of service licensing based on a case study of service license compliance verification in a real world scenario.     

A generic interoperability testing framework and a systematic development process for automated interoperability testing

Interoperability is a prerequisite to allow users to access systems implemented by different vendors seamlessly. A good baseline to achieve interoperability is the implementation of a common set of standards. However, this is often not sufficient as different implementations of a standard are not necessarily interoperable. Therefore, different implementations of systems need to be assessed for interoperability by applying interoperability testing. In this article, we present a generic framework that enables automated interoperability testing with message checks, which assess the compliance of messages exchanged between systems. The goal of this framework is the provision of a basic functionality of interoperability test entities, the definition of a generic interoperability test environment, and guidelines for the specification of automated interoperability tests. The framework also considers aspects related to interoperability testing including verdicts, automation, and limitations of the system under test. Through the application of the framework, interoperability of systems can be assessed, systems can be validated, and standards can be improved. In addition, we present a systematic development process for automated interoperability tests to formalize the development and specification of an interoperability test system. We also consider aspects and critical issues, which are important for the development of a complete interoperability test system. The framework and the process are language and system technology independent. We present their application in a case study that includes interoperability tests for the Internet Protocol Multimedia Subsystem (IMS) using the Testing and Test Control Notation Version 3 (TTCN-3).     

数字图书馆网格互操作框架

随着全球数字图书馆(DLs)的迅猛发展,互操作成为亟待解决的重要问题。目前DLs互操作的主要解决方案包括:分布式搜索、元数据收集、中间件技术等,在实现大规模的数字图书馆互操作方面都存在一定的局限性。文章通过对已有方案的分析和对比,指出各自的优势和不足,并在OAI-PMH框架的基础上,结合先进的网格技术,提出全新的数字图书馆互操作框架—数字图书馆网格DLGrid,为解决大规模数字图书馆的互操作提供一种新途径。     

Don't judge a software license by its cover

Software licenses are of vital concern to vendors and users. Software vendors use contracts, called licenses, to make sure that their products are used in a way that will benefit them. Users want to know the conditions that licenses impose on software so they can buy software that meets their needs. Beyond this, however, licenses and their enforceability are not always a straightforward matter. Are you bound by the conditions of a license even if the license is inside a container of shrinkwrap software, and you can't see its terms until after you buy the product? What if you can't see the license until you load your software into your computer and its terms appear on the monitor? This is particularly an issue with software sold by phone or mail, or over the Internet. In some of these cases, buyers purchase only a serial number or security code that activates publicly accessible software. In many cases, buyers don't even receive a solid product. They receive only a stream of electrons that contains data, an application program, instructions, and license conditions. The thorny legal issues that these situations raise recently confronted the US Court of Appeals for the Seventh Circuit, which hears appeals of cases from US District Courts in Illinois, Indiana, and Wisconsin. The changing nature of the software business has raised questions about the enforceability of shrinkwrap licenses     

Economic modelling for trout management: an introduction and case study

Trout stocks in Lake Taupo, New Zealand are managed by the Department of Conservation to sustain the fishery and enhance angler opportunity. Efficient management requires funds. These funds are generated from license sales. The revenue from license sales is determined by demand for the licenses and their price. This study reports estimates of the price elasticity of demand for trout licenses. These estimates show how license sales, revenue, royalties and funds for stock enhancement change with price changes and different elasticity estimates.     

基于逻辑证书的数字权利动态描述模型研究*

数字权利的动态描述一直都是DRM应用系统研究的热点。提出了一种基于逻辑证书的数字权利的动态描述模型。在定义好相关的逻辑证书和逻辑规则后,利用逻辑推理的方法深入探讨和分析该模型中数字证书逻辑推理过程,通过逻辑推理的方法实现数字权利的动态描述。最后通过简单实例,验证了该方法的可行性。     

新疆水利电子证照共享服务平台系统设计与实现

取水许可电子证照系统是水利部统一开发,要求各省水行政主管部门负责实施的一项重要工作。为推进新疆水利取水许可电子证照建设工作,新疆拟建设水利电子证照共享服务平台系统,实现全国取水许可电子证照库与新疆各地在线政务服务平台、取水许可审批系统、电子印章管理系统等的信息对接。分析新疆水利取水许可证照审批需求,采用多层架构的 B/S 结构和 Java 语言、Web Service 等技术方法,从总体架构、技术线路、平台设计、应用系统方面对新疆水利厅电子证照共享服务平台的构架方案及建设可行性进行探讨,并对平台系统的应用情况进行论述,为同类项目建设提供技术借鉴。     

一种采用一阶动态逻辑表示的数字权限描述模型

针对已有数字权限描述模型的动态语义描述能力较弱问题,提出了一个能够描述权限动 作状态的数字产品权限描述模型DDRM。基于一阶动态逻辑,定义了一个用于描述数字权限概念的 一阶动态逻辑符号系统DrFDL,并在DDRM模型基础上给出了DrFDL的语义结构(该语义结构能够 反映动作的动态特性)。基于DDRM模型还给出了一个表达权限证书的文法,应用DrFDL逻辑语言 给出了该文法生成的权限证书的形式语义,并探讨了该证书的确定性和有效性。     

Determining the Proper Number and Price of Software Licenses

Software houses sell their products by transferring usage licenses of various software components to the customers. Depending on the kind of software, there are several different license types that allow controlled access of services. The two most popular types are the fixed license, which gives access rights for an identified workstation, and the floating license, which restricts the number of simultaneous users to a certain bound. The latter of these types is advantageous when the users do not demand full-time services and occasional lack of access is bearable. The problem of deciding the number of floating licenses is studied in the present paper. Based on the expected usage profile of the software, we calculate the minimal number of licenses that guarantees that the customers get service better than a given lower bound. The problem is studied by using certain queuing models, known as the Erlang toss system, the Erlang delay system, and the Engset model. None of these analytic models consider, however, the transient period that we analyze by means of simulation and by the so-called modified offered load approximation. We also give simple formulas presenting how the number of software licenses needed to keep the probability of nonaccess below a given blocking level grows as a function of the offered load, which is the proportion of the time used in the case that all requests were successful. Results of the study may be used for setting license prices and for determining the proper number of licenses.     

并行计算机中基于令牌的许可证管理

提出一种适用于并行计算机系统的基于令牌的许可证管理模型。该模型将软件许可证的使用显式分开为申请与检出两步,许可证的释放分开为检入和回收两步,并由资源管理系统代理软件进行许可证资源的申请和回收。在此模型中,软件许可证的使用将由资源管理系统完全控制与调度,避免了现有模型中存在的资源管理系统外作业使用许可证、作业错误指定许可证信息、应用进程残留等情景下,出现用户作业因许可证不可用而造成的运行失败或资源浪费。设计了两种在现存遗留应用软件和许可证管理软件上实现基于令牌的许可证管理模型的方法,充分表明了此模型的现实意义。     

基于DRM证书机制的数字作品分发方案

针对消费者分发需求多样化与数字版权管理系统中严格限定传播范围之间的矛盾，建立分发模型描述各种分发问题，其中，用户之间的分发和设备之间的分发得以区别描述。在该模型的基础上提出一种采用双证书机制的分发方案。将数字作品分割后，通过使用独立密钥并配合相关的链型证书机制和分发权限管理，使消费者成为分发过程的参与人。分发权限的继承性赋予了消费者在分发过程中的控制权利。