CN114880629B - Content copyright protection method for distributed open environment - Google Patents

Abstract

The present invention discloses a content copyright protection method for a distributed open environment. The authentication and licensing node of a content chain generates corresponding keys in response to key requests from different requesting parties and distributes them to corresponding requesting parties. Different requesting parties use the keys allocated to them to perform encryption and decryption operations according to their attributes. The keys include content encryption keys, user identity public and private keys, device public and private keys, and node public and private keys. When a reader purchases content object data in a publishing system, the publishing system uses the content encryption key encrypted by the user public key to form a user content license. The license authentication node uses the device public key to encrypt the user content license to form a user reading content license. When a user wants to obtain the purchased content object data, the license authentication node verifies the user's transaction record and issues the user reading content license. The user decrypts and reads the content through the user reading content license. The present invention greatly improves the security of content copyright stored in a distributed open environment.

Description

A content copyright protection method for distributed open environment

Technical Field

The present invention relates to the technical field of copyright protection, and in particular to a content copyright protection method in a distributed open environment.

Background technique

In traditional content copyright protection methods, content is stored on the server side, and the client can only obtain content in real time. In addition, due to the platform's sole control over user copyright content, when the server side fails or the copyright company corresponding to the platform stops providing services, the copyright content purchased by the user cannot be guaranteed.

In order to solve the above problems, some existing technologies apply distributed autonomous networks to the field of content copyright and manage content copyright in a distributed manner to protect content copyright from infringement. However, the content object data itself is open access and can be obtained by anyone, and there are few research solutions to solve the content copyright protection problem in the entire process from content publishing, content acquisition to content reading.

In addition, the security and integrity of content and its encryption keys during storage, as well as the security of content encryption keys during transmission, are also challenges faced in content copyright protection;

Therefore, in response to the above problems, it is necessary to propose a distributed content copyright protection method.

Summary of the invention

The purpose of the present invention is to provide a content copyright protection method in a distributed open environment in view of the technical defects existing in the prior art.

The technical solution adopted to achieve the purpose of the present invention is:

A content copyright protection method in a distributed open environment, wherein the authentication and permission node of the content chain responds to key requests from different requesters, generates corresponding keys and distributes them to the corresponding requesters, and different requesters use the keys to perform encryption and decryption operations according to their attributes; the keys include:

Content encryption key, used to encrypt copyright content object data;

The user's public and private keys are used to authenticate the reader's identity and authorize the reader when reading. The user's public key is used to encrypt the content encryption key. If the reader has the right to use a certain content object data, the user's private key is used to decrypt the content encryption key and decrypt the content object data for reading;

The public and private keys of the device are used to authenticate and authorize the device that the user uses to read copyrighted content. The authorized device can read copyrighted content. The public key of the device is used to encrypt the content encryption key. When the reader uses the reading device to read, the device that has passed the authentication of the license authentication node can use the device private key to decrypt the content encryption key.

The node public and private keys are used for identity authentication of content chain nodes in the consensus process, including signing and verifying transactions by nodes. The node public key is used to verify transactions, and the node private key is used to sign transaction information when the node initiates a transaction. The transaction information of readers purchasing content object data is synchronized from other nodes in the content chain to the license authentication node;

At the same time, when readers purchase content object data in the publishing system, the publishing system uses the content encryption key encrypted with the user's public key to form a user content license, and the license authentication node uses the device public key to encrypt the user content license to form a user reading content license.

After the key is generated, different storage strategies are adopted to achieve secure storage; the key storage strategies are as follows:

User identity public and private keys: saved by the reader personally, and a symmetric key is generated using the user's username and password. The symmetric key is used to encrypt the user identity public and private keys and store them in the authentication permission node;

Node public and private keys, device public and private keys: Node public and private keys, device public and private keys are stored by the node and device respectively, and the public keys of the node and device are stored in the authentication node;

Content encryption key: saved by the publishing system;

User content permission: saved by the permission authentication node.

The key distribution strategy is as follows:

User identity public and private key distribution: When a reader user registers, he/she applies for the user identity public and private keys from the license authentication node; when the reader reads, if there is no user private key in the reader, he/she applies to the license authentication node to send the user private key. After the license authentication node successfully verifies the user identity, it returns the user private key to the reader;

Node public and private key distribution: When other nodes in the content chain join the content chain, they send a node authentication request to the license authentication node. The license authentication node generates node public and private keys for the content chain node to be added, and returns the node public and private keys to the content chain node;

Distribution of device public and private keys: When a user uses a new reading device, the reading terminal applies for the device public and private keys from the license authentication node. At this time, the license authentication node authenticates the new reading device and returns the device public and private keys to the new reading terminal after the authentication is passed;

Content encryption key distribution: When a publisher uploads content, the publishing node in the content chain connected to the publishing system applies to the license authentication node for the content encryption key. After accepting the request, the license authentication node returns the content encryption key to the publishing node, and the publishing node returns the content encryption key to the publishing system.

User content license distribution: When a reader purchases content object data, the publishing system generates a user content license and sends the user content license to the license authentication node for storage through the publishing node connected to the publishing system;

Distribution of user reading content permission: When a reader reads the purchased content object data, the permission authentication node generates a user reading content permission and returns the user reading content permission to the reader.

Among them, when distributing keys, the license authentication node will sign the generated key with its own private key. When the receiving end receives the key, it uses the public key of the license authentication node to verify whether the key is distributed by the license authentication node.

Among them, when the publishing node publishes the content object data, it uses the received content encryption key to encrypt the copyright content object data, and stores the copyright content object data in the publishing node, and stores the copyright content object data in the nodes of the other two content chains, thereby realizing the distributed storage of the same content object data in the three nodes of the content chain in the form of three backups.

When a user wants to obtain the purchased content object data, the license authentication node verifies the user's transaction record and distributes the user's content reading license, and the user decrypts and reads the content through the user's content reading license.

The step of the user obtaining the purchased content object data includes:

Get the license header: The reader initiates a request to the license authentication node to obtain the license header. After receiving the request, the license authentication node verifies whether the user has the access permission based on the transaction data synchronized from other nodes in the content chain. After the verification is passed, the user content license corresponding to the content is asymmetrically encrypted using the device public key to obtain the user's content reading permission, which is returned to the reader as the license header;

Obtaining the license body: The reader obtains the content object data from the content node of the content chain. The reader first obtains the node ID of the content storage from the content chain node, and then accesses the corresponding content node according to the node ID to obtain the encrypted content object data;

After receiving the license header, the user uses the device private key and the user private key to decrypt it, obtains the original content encryption key, and uses the content encryption key to decrypt the content object data in the license body.

The specific interaction process between the license authentication node and the reader, user, other nodes in the content chain, database, and publishing node is:

1) When the reader user registers, the registration information form is submitted to the license authentication node for registration authentication; the reader obtains the user's private key from the license authentication node; the reader initiates device license authentication to the license authentication node; when the reader reads content at the reading end, if there is no content license, it initiates a content license authentication request to the license authentication node;

2) The license authentication node verifies the user information, checks whether it meets the registration requirements and returns the user's public and private keys to the user; after verifying the user information, the license authentication node returns the user's private key; after verifying the device license, the device public and private keys are returned; the license authentication node verifies whether the user has the content license authority based on the transaction record, and if the verification is successful, the user's public and private keys for reading content are returned;

3) Other nodes in the content chain apply to the license authentication node for the node public and private keys, and synchronize the transaction records to the license authentication node; the license authentication node encrypts the generated node public and private keys and returns them to other nodes in the content chain;

4) The license authentication node adds, deletes, modifies, and queries the user identity public and private keys, node public and private keys, device public and private keys, content encryption keys, and user content license information to the database; the database performs the corresponding operations and returns the results;

5) When the publisher publishes content, the publishing node connected to the publishing system applies for the content ID and content encryption key from the licensing authentication node; after the licensing authentication node generates the corresponding content ID and content encryption key, it returns them to the publishing node, and the publishing node then returns the content ID and content encryption key to the connected publishing system, which will be saved by the publishing system.

The content copyright protection method in a distributed open environment provided by the present invention solves the problem of a platform's single control over user copyright content by distributing the copyright content.

The present invention provides a secure key management mechanism to manage the relevant keys in the content copyright protection process, including user identity public and private keys, node public and private keys, device public and private keys, content encryption keys, user content licenses, and user content reading licenses.

The present invention provides a secure key storage and distribution mechanism. By adopting different storage strategies, it ensures that the key is safe and reliable during storage and transmission. The key is generated in a centralized manner (i.e., a licensed authentication node) and shared by all sites, thus solving the problem of weak security of key generation in distributed sites.

The present invention realizes the security and reliability of the content itself by encrypting and storing the content object data and verifying its integrity; and ensures that the user can use the content only after obtaining authorization through the content license authentication method.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 is a diagram showing the interaction between a license authentication node and other nodes according to an embodiment of the present invention.

FIG. 2 is a diagram showing a structure of storage and distribution of license authentication node keys according to an embodiment of the present invention.

FIG. 3 is a flow chart of content license authentication according to an embodiment of the present invention.

Detailed ways

The present invention will be further described in detail below in conjunction with the accompanying drawings and specific embodiments. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not used to limit the present invention.

In the embodiment of the present invention, a node represents a plurality of unit structures that are interconnected to form a digital content chain network. The plurality of unit structures constituting the content chain communicate with each other to form a network structure, which is different from the meaning of the sequentially arranged nodes in the traditional blockchain.

The content copyright protection method of the distributed open environment of the embodiment of the present invention is implemented through a content chain, which is a service network oriented to content distribution and absorbs the advantages of a distributed autonomous network. The content chain includes a license authentication node and other nodes, such as a content node for storing content object data. Other nodes in the content chain synchronize transaction records with the license authentication node, and the license authentication node verifies whether the user has content licensing authority based on the transaction records.

In the content chain, content nodes are set up to store copyright content object data, and the copyright content object data can be stored in the content node in the form of three copies. Copyright content metadata and content node IDs storing copyright content object data are stored in the node blocks by reaching a consensus in the content chain, thereby realizing distributed storage of copyright content.

The distributed content copyright protection method of the embodiment of the present invention implements effective protection of distributed stored copyright content based on the license authentication node in the above-mentioned content chain.

In order to effectively protect the content copyright in such a distributed open environment, an embodiment of the present invention provides a key protection mechanism, including the following types of keys and licenses:

User identity public and private keys: User identity public and private keys are asymmetric keys. The public key in the user identity public and private keys is called the user public key, and the private key in the user identity public and private keys is called the user private key.

Node public and private keys: Node public and private keys are asymmetric keys, consisting of the public and private key pairs of other nodes in the content chain. The public key in the node public and private keys is called the node public key, and the private key in the node public and private keys is called the node private key.

Device public and private keys: Device public and private keys are asymmetric keys. The public key in the device public and private keys is called the device public key, and the private key in the device public and private keys is called the device private key.

Content encryption key: The content chain encryption key is a symmetric key used to encrypt content object data.

User content license: The result of encrypting the content encryption key with the user's public key is called a content user license.

User content reading permission: The result of encrypting the user content permission using the device public key is called the user content reading permission.

Among them, the content encryption key selects a symmetric key with fast encryption speed and suitable for encrypting large amounts of data, and symmetrically encrypts the copyright content object data when the copyright content object data is stored. The user and device public and private keys select asymmetric keys with higher security. The user and device public keys are used to encrypt the content encryption key, and the user and device private keys are used by authorized readers and devices to decrypt the content encryption key, and use the decrypted content encryption key to decrypt and read the copyright content; the node public and private keys also select asymmetric keys. The private key is used to sign the transaction information when the node initiates the transaction, and the public key is used to verify the signature of the transaction information.

The content encryption key is used to encrypt copyright content object data to ensure the security of copyright content object data during storage and transmission;

Among them, the user's public and private keys are used to authenticate the reader's identity and authorize the reader when reading. If the reader has the right to use a certain content object data, the user's private key can be used to decrypt and read the content object data, thereby protecting the content copyright.

Among them, the public and private keys of the device are used to authenticate and authorize the device used by the user to read the copyrighted content. The authorized device can read the copyrighted content, preventing unauthorized devices from maliciously obtaining the copyrighted content and protecting the security of the copyrighted content. When readers use the reading device to read, the device that has been authenticated by the license authentication node can use the device private key to decrypt the content encryption key.

Among them, the node public and private keys are used for identity authentication of content chain nodes in the consensus process, including signing and verifying transactions by nodes, to ensure the safety and reliability of nodes joining the content chain. Since the transaction information of readers purchasing content is synchronized from other nodes in the content chain to the licensing authentication node, the safety and reliability of user transaction information is guaranteed.

In the embodiment of the present invention, the interaction process between the license authentication node and various roles related to the content chain (including readers, users, other nodes of the content chain except the license authentication node, database, and publishing node) is shown in FIG1:

1) When a reader user registers, the registration information form is submitted to the license authentication node for registration authentication; the reader obtains the user's private key from the license authentication node; the reader initiates device license authentication to the license authentication node; when the reader reads content at the reading end, if there is no content license, it initiates a content license authentication request to the license authentication node.

2) The license authentication node verifies the user information, checks whether it meets the registration requirements and returns the user's public and private keys to the user; after verifying the user information, the license authentication node returns the user's private key; after authenticating the device, the device's public and private keys are returned; the license authentication node verifies whether the user has content licensing authority based on transaction records, and if the verification is successful, the user's public and private keys for reading content are returned.

3) Other nodes in the content chain apply to the license authentication node for the node public and private keys; other nodes in the content chain synchronize the transaction records to the license authentication node.

4) The license authentication node encrypts the generated node public and private keys and returns them to other nodes in the content chain.

5) The license authentication node adds, deletes, modifies and queries user identity public and private keys, node public and private keys, device public and private keys, content encryption keys, user content licenses and other information to the database.

6) The database executes the corresponding operation and returns the result.

7) When the publisher publishes content, the publishing node connected to the publishing system applies for the content ID and content encryption key from the license authentication node.

8) After the license authentication node generates the corresponding content ID and key, it returns it to the publishing node. The publishing node then returns the content ID and content encryption key to the connected publishing system, which will be saved by the publishing system.

The publishing node is a node for publishing content among other nodes in the content chain connected to the publishing system. The publishing node and the node for backing up and storing content object data can be called content nodes, that is, nodes for storing content object data.

Among them, in the embodiment of the present invention, the license authentication node manages the relevant keys in the content copyright protection process, including user identity public and private keys, node public and private keys, device public and private keys and content encryption keys.

In the embodiment of the present invention, according to different requirements in content copyright protection, the license authentication node generates the corresponding keys for copyright content, users, devices, and nodes.

In the embodiment of the present invention, for different keys, different storage strategies are adopted after the keys are generated to achieve safe and stable storage to ensure the security of public and private key storage.

The different key storage strategies are as follows:

User identity public and private keys: After the reader obtains the user identity public and private keys, the reader stores them locally. At this time, the user private key may be lost. The reader's user identity public and private keys are stored in the license authentication node, and the database may have security risks. Therefore, the authentication and permission nodes need to encrypt the public and private keys when storing them. Specifically, the specific storage method of the user identity public and private keys is: use the user's username and password to generate a symmetric key, and use the symmetric key to encrypt the user identity public and private keys and store them in the authentication and permission node.

Node public and private keys, device public and private keys: Since node public and private keys and device public and private keys are not kept by individuals but stored in nodes and devices and are not easily lost, only the public keys of nodes and devices need to be stored in the licensing authentication node.

Content encryption key: After the content encryption key is distributed to the publishing system, the publishing system can independently decide on the publication, sale and removal of the content. At the same time, in order to avoid the leakage of content encryption keys when the license authentication node is attacked, which will cause huge losses to the content object data, the content encryption key is saved by the publishing system after the license authentication node generates it.

User content license: When a reader purchases content object data in the publishing system, the publishing system will send the content encryption key encrypted with the user's public key as the user content license to the license authentication node through the connected publishing node, which will be saved by the license authentication node.

In an embodiment of the present invention, in order to achieve effective protection, after the authentication and permission node generates the corresponding key, the key is distributed through the following process: each module or each end requests a key from the permission authentication node, and the permission authentication node verifies it. If the key already exists, the key is read from the database and the result is returned; otherwise, the corresponding key is generated according to the rules and the result is returned.

Specifically, the key distribution strategy is as follows:

Distribution of user identity public and private keys: When a reader user registers, he/she applies for the user identity public and private keys from the license authentication node; when the reader reads, if there is no user private key in the reader, he/she needs to apply to the license authentication node to send the user private key. After the license authentication node successfully verifies the user identity, it returns the user private key to the reader.

Node public and private key distribution: When other nodes in the content chain want to join the content chain, they send a node authentication request to the licensing authentication node. The licensing authentication node generates node public and private keys for the content chain node and returns the node public and private keys to the content chain node.

Distribution of device public and private keys: When a user uses a new reading device, the reading end needs to apply for the device public and private keys from the licensing authentication node. At this time, the licensing authentication node authenticates the device and returns the device public and private keys to the reading end after the authentication is passed.

Content encryption key distribution: When the publisher uploads content, the publishing system applies for the content encryption key from the license authentication node through the connected publishing node. The license authentication node returns the content encryption key after accepting the request.

User content license distribution: When a reader purchases content object data, the publishing system generates a user content license and sends the generated user content license to the license authentication node through the publishing node connected to the publishing system for storage.

Distribution of user reading content permission: When a reader reads the purchased content object data, the permission authentication node generates a user reading content permission and returns it to the reader.

It should be noted that, in the embodiment of the present invention, when distributing keys, the license authentication node will sign the generated key using its own private key. After the receiving end receives the key, it can use the public key of the license authentication node to verify the received key to ensure that the key is distributed by the license authentication node, thereby ensuring the reliability of the key.

Through the above key distribution technology, when different modules need corresponding keys, the license authentication node sends keys to the corresponding modules according to different key distribution strategies, realizing a safe and fast key distribution method and ensuring the security of the license key transmission process.

In the embodiment of the present invention, when the copyrighted content object data is encrypted and stored, the content encryption key generated by the license authentication node is used to encrypt and store in the form of three backups to ensure the security of the content object data itself.

Specifically, copyrighted content object data is distributedly stored using symmetric encryption using content encryption keys. When publishing content, the publishing system requests the content encryption key from the license authentication node through the connected publishing node; after the license authentication node generates the content encryption key, it sends the content encryption key to the publishing node, which then sends it to the connected publishing system. The publishing system saves the content encryption key and uses it to encrypt the copyrighted content, distributing the copyrighted content in the content chain in the form of three backups. When a reader purchases a piece of content, the publishing system uses the user's public key to encrypt the content encryption key of the content to form a user content license, and sends the user content license to the license authentication node through the connected publishing node for storage.

In the embodiment of the present invention, when a user wants to obtain the purchased content object data, the license authentication node verifies the user's transaction record and issues the user's content reading license, and the user decrypts and reads the content through the user's content reading license. Specifically, when the user obtains the purchased content, the license authentication node is requested to obtain the content license. The specific process is shown in Figure 3. This process includes the steps of obtaining the license header and obtaining the license body.

Obtaining the license header means that the reader initiates a request to obtain the license header from the license authentication node. At this time, after receiving the request, the license authentication node verifies whether the user has the permission to obtain the content based on the transaction data synchronized from other nodes in the content chain. After the verification is passed, the user content license corresponding to the content is asymmetrically encrypted using the device public key to obtain the user's content reading permission, which is returned to the reader as the license header to ensure key security.

Obtaining the license body means that the reader obtains the content object data from the content node of the content chain. The reader first obtains the node ID of the content storage from the content link node, and then accesses the corresponding content node according to the node ID to obtain the encrypted content object data.

After receiving the license header, the user uses the device private key and the user private key to decrypt it, obtains the original content encryption key, and uses the content encryption key to decrypt the content object data in the license body.

The basic principles and main features of the present invention and the advantages of the present invention are shown and described above. It is obvious to those skilled in the art that the present invention is not limited to the details of the above exemplary embodiments, and the present invention can be implemented in other specific forms without departing from the spirit or basic features of the present invention.

Therefore, no matter from which point of view, the embodiments should be regarded as illustrative and non-restrictive, and the scope of the present invention is limited by the appended claims rather than the above description. Therefore, it is intended that all changes falling within the meaning and scope of the equivalent elements of the claims are included in the present invention, and any figure signs in the claims should not be regarded as limiting the claims involved.

In addition, it should be understood that although the present specification is described according to implementation modes, not every implementation mode contains only one independent technical solution. This narrative method of the specification is only for the sake of clarity. Those skilled in the art should regard the specification as a whole. The technical solutions in each embodiment can also be appropriately combined to form other implementation modes that can be understood by those skilled in the art.

Claims (7)

1. The content copyright protection method of the distributed open environment is characterized in that an authentication permission node of a content chain responds to key requests from different requesters, corresponding keys are generated and distributed to corresponding requesters, and the different requesters utilize the distributed keys to carry out encryption and decryption operations according to the attribute of the keys; the key includes:

a content encryption key for encrypting copyrighted content object data;

The user identity public-private key is used for authenticating the identity of a reader when the reader reads and authorizing the reader, the user public key is used for encrypting the content encryption key, and if the reader has the right to use certain content object data, the content encryption key is decrypted by using the user private key, and the content object data is decrypted and read;

the public and private keys of the device are used for authenticating and authorizing the device for reading the copyrighted content by the user, the authorized device can read the copyrighted content, the public key of the device is used for encrypting the content encryption key, and when the reader reads by using the reading device, the device passing the authentication by the permission authentication node can decrypt the content encryption key by using the private key of the device;

The node public key is used for signing and verifying the transaction, the node public key is used for verifying the transaction, the node private key signs transaction information when the node initiates the transaction, and the transaction information of readers buying content object data is synchronized to the permission authentication node by other nodes of the content chain;

Meanwhile, when readers purchase content object data by the release system, the release system uses a content encryption key encrypted by a user public key to form a user content license, and a license authentication node uses a device public key to encrypt the user content license to form a user reading content license;

The interaction flow of the license authentication node with the reader, the user, other nodes of the content chain, the database and the publishing node is specifically as follows:

1) When the reader user registers, submitting the registration information form to a permission authentication node for registration and authentication; the reader acquires a user private key from the permission authentication node; the reader initiates device license authentication to the license authentication node; when a reader reads the content, under the condition that the content permission is not available, a reader initiates a content permission authentication request to a permission authentication node;

2) The license authentication node verifies the user information, checks whether the user information meets the registration requirement, and returns the public and private keys of the user identity to the user; after the license authentication node verifies the user information, returning the user private key; after the permission authentication of the equipment, returning the public and private keys of the equipment; the license authentication node verifies whether the user has the content license rights according to the transaction record, and returns the public and private keys of the content read by the user after the verification is passed;

3) The other nodes of the content chain apply for the public and private keys of the nodes from the permission authentication node, and synchronize the transaction record to the permission authentication node; the license authentication node encrypts the generated node public and private key and returns the encrypted node public and private key to other nodes of the content chain;

4) The license authentication node adds and deletes the public and private keys of the user identity, the public and private keys of the node, the public and private keys of the equipment, the content encryption key and the user content license information to the database; the database executes corresponding operation and returns the result;

5) When a publisher publishes the content, a publishing node connected with the publishing system applies for a content ID and a content encryption key from a permission authentication node; the license authentication node generates a corresponding content ID and a content encryption key, and then returns the corresponding content ID and the content encryption key to the issuing node, and the issuing node returns the content ID and the content encryption key to the connected issuing system, so that the issuing system stores the content ID and the content encryption key.

2. The method for protecting content copyrights in a distributed open environment according to claim 1, wherein after said key is generated, secure storage is implemented using different storage policies; the key storage strategy is as follows: user identity public-private key: the reader is stored personally, a user name and a password of a user are adopted to generate a symmetric key, and the symmetric key is used for encrypting and storing the public and private keys of the user identity in an authentication permission node;

Node public-private key, device public-private key: the public and private keys of the node and the public and private keys of the equipment are respectively stored by the node and the equipment, and meanwhile public keys of the node and the equipment are stored in the authentication node in a permission mode;

content encryption key: the method comprises the steps of storing by a release system;

User content permissions: is maintained by the license authentication node.

3. The method for protecting content copyrights in a distributed open environment according to claim 1, wherein said key distribution strategy is as follows: user identity public and private key distribution: when a reader user registers, a public and private key of the user identity is applied to a permission authentication node; when a reader reads, if no user private key exists in the reader, the user private key is applied to the permission authentication node, and after the permission authentication node successfully verifies the user identity, the user private key is returned to the reader;

node public and private key distribution: when other nodes of the content chain join the content chain, a node authentication request is sent to a permission authentication node, the permission authentication node generates a node public and private key for the content chain node to be joined, and the node public and private key is returned to the content chain node;

and (5) distributing public and private keys of equipment: when a user uses a new reading device, the reading terminal applies a public and private key of the device to a permission authentication node, at the moment, the permission authentication node authenticates the new reading device, and after the authentication is passed, the public and private key of the device is returned to the new reading terminal;

Content encryption key distribution: when a publisher uploads the content, a publishing node in a content chain connected with the publishing system applies a content encryption key to a permission authentication node, the permission authentication node returns the content encryption key to the publishing node after receiving the request, and the publishing node returns the content encryption key to the publishing system;

user content license distribution: when readers purchase the content object data, the issuing system generates user content permissions and sends the user content permissions to a permission authentication node for storage through an issuing node connected with the issuing system;

User read content license distribution: when readers read purchased content object data, the license authentication node generates a user reading content license and returns the user reading content license to the readers.

4. A content copyright protection method in a distributed open environment according to claim 3, wherein, at the time of key distribution, the license authentication node signs the generated key with its own private key, and after the receiving end receives the key, verifies the received key with the public key of the license authentication node to verify whether the key is distributed by the license authentication node.

5. The method according to claim 1, wherein the distribution node encrypts the rights content object data using the received content encryption key and stores the rights content object data in the distribution node and the copies of the rights content object data in the nodes of the other two content links when distributing the content object data, thereby realizing distributed storage of the same content object data in three nodes of the content links in the form of three copies.

6. The method for protecting content copyrights in a distributed open environment according to claim 1, wherein when a user wants to acquire purchased content object data, the license authentication node verifies the user's transaction record and distributes the user's read content license, and the user decrypts the read by the user's read content license.

7. The method for protecting content copyrights in a distributed open environment as recited in claim 6, wherein the step of a user acquiring purchased content object data comprises: acquisition permission header: the reader initiates a request for acquiring the license header to the license authentication node, after the license authentication node receives the request, the license authentication node verifies whether the user has the acquisition authority according to the transaction data synchronized from other nodes in the content chain, after the verification is passed, the user content license corresponding to the content is asymmetrically encrypted by using the device public key, the user content license is obtained, and the user content license is returned to the reader as the license header;

Obtaining a licence body: the reader acquires content object data from a content node of a content chain, firstly acquires a node id of a stored content from the content node, and then accesses a corresponding content node according to the node id to acquire encrypted content object data;

After receiving the license header, the user decrypts the license header by using the device private key and the user private key to obtain an original content encryption key, and decrypts the content object data in the license body by using the content encryption key.