Content protection apparatus and method using binding of additional information to encryption key

A content protection apparatus using binding of additional information to an encryption key, comprising:

• a White-Box Cryptography (WBC) table mapping unit configured to, when encrypted data and bound data are received from a server, extract a white-box cipher required to unbind the bound data from a pre-stored WBC table;
• an unbinding unit configured to unbind an encryption key and additional information of the bound data using the white-box cipher;
• a decryption unit configured to decrypt the encrypted data using the unbound encryption key if the bound data has been unbound;
• and
• a data processing unit configured to provide the decrypted data to a user at a request of the user.

A content protection method using binding of additional information to an encryption key, the method being performed by a server, comprising:

• creating an encryption key required to encrypt data requested by a user terminal and then generating encrypted data in which the data is encrypted;
• generating a White-Box Cryptography (WBC) table to bind the encryption key, which corresponds to the encrypted data, to additional information, which includes authority information about the data;
• generating bound data by binding the encrypted key to the additional information using a cipher included in the WBC table;
• transmitting the encrypted data and the bound data to the user terminal;
• and
• if a request for management of a risk involving the encrypted data or the bound data is received from the user terminal, determining and processing a security risk situation involving the encrypted data or the bound data.

A content protection method using binding of additional information to an encryption key, the method being performed by a user terminal, comprising:

• when encrypted data and bound data are received from a server, unbinding an encryption key and additional information of the bound data using a white-box cipher included in a pre-stored White-Box Cryptography (WBC) table;
• when the bound data is unbound, decrypting the encrypted data using the unbound encryption key;
• and
• playing the decrypted data at a request of a user.