CN100442839C - Information transmitting method and apparatus for interactive digital broadcast television system - Google Patents
Information transmitting method and apparatus for interactive digital broadcast television system Download PDFInfo
- Publication number
- CN100442839C CN100442839C CNB031308066A CN03130806A CN100442839C CN 100442839 C CN100442839 C CN 100442839C CN B031308066 A CNB031308066 A CN B031308066A CN 03130806 A CN03130806 A CN 03130806A CN 100442839 C CN100442839 C CN 100442839C
- Authority
- CN
- China
- Prior art keywords
- control word
- information
- cipher key
- scrambling control
- internet
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Expired - Fee Related
Links
Images
Abstract
The present invention discloses an information transmitting method of an interactive digital broadcasting television system, which comprises the following procedures: 1) a front end of the system transmits scrambled information transmitting flows with service information to all user terminals in the system by a broadcasting network; 2) the front end which receives user information of the user terminals by an interactive network generates conditional reception information for each user terminal accessing the system and respectively transmits the conditional reception information to the user terminals by the interactive network; 3) the user terminals descramble the information transmitting flows received from the broadcasting network according to the conditional reception information to obtain service information. Simultaneously, the present invention discloses an information transmitting device of an interactive digital broadcasting television system. A conditional reception information processing module is used at the front end of the system, and an intelligence card system at a terminal comprises a decoding module and a user identity certifying module. The present invention has the advantages of simple and convenient realization, decoding difficulty enhancement and information transmission security enhancement.
Description
Technical field
The present invention relates to the information transmission technology of digital broadcast television system, particularly a kind of information transferring method of interactive digital broadcast television system and device.
Background technology
At present; digital video broadcasting (DVB) standard in Europe is ripe; insert (CA) system according to the condition in the digital broadcast television system platform of this standard foundation and have the safeguard protection effect; and realize " scrambling is to the user " by CA system transmissions information, can thoroughly solve " scrambling is to wired TV station " puzzlement on charging problem.
Because the CA system relates to whole television network broadcast, comprise digital TV front-end, transmission network and user side, the CA system is by carrying out real-time scrambling to digital television program and information at television transmission network front end, carry out the descrambling reduction at user side, it is the safety system that to resist the Digital Television of malicious attack, its main Security Target is: prevent the digital cable customers authorization device because commercial object is forged in a large number or duplicated by the bootlegger, and stop forbidden digit TV programme or information to be sneaked in the digital video broadcasting network.Simultaneously; the CA system is to the online mandate of charges paid user; can make the TV user of paying normally watch program, unpaid TV user can't be watched program, so the CA system also is a kind of charging control system that is basic goal to protect the television operator interests, utilizes encryption technology to realize.
Present CA system, at the design of One-to-All Broadcast television system, the implementation method of its transmission information is referring to Fig. 1, and Fig. 1 is the realization block diagram of CA system transmissions information in the existing unidirectional digital broadcast television system.As shown in Figure 1, the fore-end 110 of existing digital broadcast television system comprises: recombiner 111, scrambler 112, encryption equipment 113, encryption equipment 114, business information (SI) generator 115, SAS Subscriber Authorization System 116, control word (CW) generator 117, program information management system 118 and Subscriber Management System 119, and SAS Subscriber Authorization System 116 and Subscriber Management System 119 also can be collectively referred to as the user authorization management system; User terminal part (STB) comprises: descrambler 132, separate recombiner 131, decipher 133, decipher 134, safe processor 135.Decipher 133 in the terminal part 130, decipher 134, safe processor 135 are combined, and their function is realized by a smart card system 136.
In above-mentioned unidirectional digital broadcast television system, the fail safe of CA system transmissions information concentrates on terminal fully, provides its detailed process below.
At fore-end, existing CA system adopts triple key mechanisms to come the transmission program is encrypted:
1, with scrambler 112, control word according to 117 generations of control word (CW) generator, to the pseudo-random sequence generator start trigger, produce new pseudo random sequence business information is carried out scrambling, control word is one group of random number, every a few second change at random once, receiving terminal will be under the control of same control word descrambling;
2, use business cipher key (SK) that the control word that control word (CW) generator 117 produces is encrypted with encryption equipment 114, generate the CW ciphertext, put into Entitlement Control Message (ECM);
3, use individual subscriber distributing key (PDK) that the customer management information that SK and Subscriber Management System 119 provide is encrypted with encryption equipment 113, formation comprises the Entitlement Management Message (EMM) of SK ciphertext, customer management information comprises user's name, address, intelligent card numbers, bill etc., and EMM inserted and transmits stream (TS stream) once in per 8～10 seconds.
4, ECM, the EMM after the encryption, Program Specific Information (PSI) and business information are compound through recombiner 111, again after scrambler 112 scramblings, form TS stream and be transferred to user terminal part 130, that is to say that all information of prior art all are transferred to user terminal part 130 by radio network 120 by radio network 120.
5, in user terminal part 130, existing CA system is deciphered the EMM in the TS stream by decipher 134 usefulness PDK earlier, takes out SK, sends to safe processor 135, and judges whether this terminal has the right to receive professional.If have the right, then use business cipher key SK that the control word CW among the ECM is deciphered out by decipher 133, then CW is offered descrambler 132 and use.This control word of descrambler 132 usefulness is carried out descrambling, and the business information behind the descrambling sends to separates recombiner 131; Otherwise can not receive business information.Wherein, owing to SK, CW, PDK are relevant with the condition access, be the important information that user terminal receives business information, so the condition that can be called as receives information.
The scheme of existing CA system transmissions information from above because of CA is subjected to the restriction of unilateral network, makes this scheme not only complicated, and have some shortcomings aspect fail safe as can be seen:
1, the ability that depends on terminal is concentrated in its fail safe, in case algorithm is cracked all being exposed to fully under the stolen threat of separating Anywhere in the systemic effect field.
2, existing C A system can't authenticate concrete service authorization, so be difficult to prevent illegal business.
3, because of the one-way of existing CA system configuration, the complete and apparatus bound of its enciphering and deciphering algorithm has enough opportunity analysiies to crack scheme fully so steal the person of separating, and ancillary methods such as backup algorithm also can't remedy this essential defect, so the existing system poor stability.
4, in order to guarantee that the new user who inserts can in time obtain authorized user message EMM, must periodically on broadcast channel, send EMM message, take valuable bandwidth resources, increase expense.
Maturation along with interactively digital TV Broadcasting Techniques, the interactive digital broadcast television system has appearred, make interactive television day by day to popularize, this is a kind of two-way mutual system that abundant information and entertainment service are provided, it is on the basis of unidirectional distribution service, increase interactive function, form two-way channel.
The interactive digital broadcast television system is to design according to the interactive broadcast television network configuration that DVB proposes.Referring to Fig. 2, the interactive broadcast television network configuration framework schematic diagram that Fig. 2 proposes for DVB.This structure is divided 3 parts: front end, communication network, set-top box.
Front end is made of 4 modules:
Broadcasting service supply module 211 (Broadcast Service Provider): in order to broadcasting service to be provided.
Radio network adapter 213 (Broadcast Network Adaptor): in order to the adaptable interface between broadcasting service supply module and the radio network to be provided.
Interactive service supply module 212 (Interactive Service Provider): in order to interactive service to be provided.
Internet adapter 214 (Interactive Network Adaptor): in order to the adaptable interface between the interactive service supply module and the Internet to be provided.
Wherein, the business of interactive service supply module 212 also can be passed through radio network adapter 213, sends to user terminal with the form of broadcasting.
Communication network divides 2 parts:
Radio network 221 (Broadcasting Delivery Media): in order to the route of transmission of broadcasting service to be provided.
The Internet 222 (Interactive Network): in order to the route of transmission of interactive service to be provided.
Set-top box links to each other with user terminal, and it comprises 3 parts:
Broadcast interface 231 (Broadcast Interface Module): set-top box and broadcast medium's communication interface are provided.
Interactive interface 232 (Intractive Interface Module): set-top box and Internet communication interface are provided.
Unit, machine top 233 (Set Top Unit): other functional units of set-top box.
Wherein, transmitting network has two, and one is the radio network 221 of carrying broadcast channel (BC:Broadcast Channel), and another is the Internet 222 of carrying exchange channels (IC:Interaction Channel).Radio network 221 is unidirectional, sends audio/video flow and data to the terminal use from network side, and it also can carry the descending exchange channels of the Internet.Comprise two kinds of passages in the Internet 222, i.e. uplink interaction passage (Return interaction path) and descending exchange channels (Forward interaction path).The uplink interaction passage, the service providing server from the user terminal to the network side is used for asking the transmission with response message.Descending exchange channels to giving the terminal use, is used for carrying out the transmission of data download and request and response message from the service providing server of network side.
The user not only can participate in selecting by uplink interaction channel inverse signal like this, watch program by descending exchange channels programme information simultaneously, video on demand, TV shopping, video education, e-bank, rich email are provided, and what interactive entertainment etc. were various is to satisfy terminal and net interactive service.
Under above-mentioned interactive broadcast television network configuration framework, message transmission can be realized by following steps:
User's access protocol of step 1, the use Internet itself is with user terminal access interaction network;
Step 2, user terminal are by carrying out authentication, access interaction digital broadcast television system mutually with front end;
Step 3, utilize CA system transmissions information.
Summary of the invention
In view of this, main purpose of the present invention is to provide a kind of information transferring method of interactive digital broadcast television system, the fail safe of message transmission in the increase system.
Another object of the present invention is to provide a kind of information carrying means of interactive digital broadcast television system, the fail safe of message transmission in the assurance system.
According to an above-mentioned purpose, the invention provides a kind of information transferring method of interactive digital broadcast television system, this method may further comprise the steps:
1) fore-end of this system sends the business information transport stream of process scrambling control word scrambling by radio network all user terminals in system;
2) fore-end receives the user profile of user terminal by the Internet, and be the business cipher key (SK) or the business cipher key of each user terminal generation encryption of connecting system, and the Entitlement Control Message (ECM) of generation user terminal, this information is sent to user terminal by radio network; Or be the scrambling control word (CW) of each user terminal generation encryption of connecting system; Fore-end sends to user terminal with the business cipher key of described encryption or scrambling control word or business cipher key respectively by the Internet;
3) user terminal is according to the business cipher key or the business cipher key of the described encryption that receives from the Internet, the Entitlement Control Message that receives is decrypted, obtain the scrambling control word, or obtain the scrambling control word according to the scrambling control word deciphering of the described encryption that receives from the Internet, the business information transport stream that receives from radio network is carried out descrambling, obtain business information.
Fore-end is that each user terminal of connecting system generates the business cipher key of encrypting (SK), and described Entitlement Control Message can comprise scrambling control word (CW) is carried out encrypted ciphertext;
Described step 3) can be decrypted for: the user terminal business cipher key to the encryption that receives from the Internet, obtain business cipher key, with this business cipher key the Entitlement Control Message that receives from radio network is decrypted, obtain the scrambling control word, carry out descrambling with this scrambling control word to receiving transport stream, obtain business information from radio network.
To described business cipher key (SK) carry out method of encrypting can for: use public key algorithm to encrypt; The method that the business cipher key of described encryption is decrypted can for: use the public key algorithm corresponding to be decrypted with the business cipher key cryptographic algorithm.
To described business cipher key (SK) carry out method of encrypting can for: with the PKI that fore-end is preserved, use RSA cryptographic algorithms that business cipher key is encrypted;
The method that the business cipher key of described encryption is decrypted can for: with the private key that user terminal is preserved, use the RSA decipherment algorithm to be decrypted, business cipher key deciphered out.
To described scrambling control word (CW) carry out method of encrypting can for: use symmetric key algorithm to encrypt; The method that Entitlement Control Message is decrypted is decrypted for using symmetric key algorithm.
To described scrambling control word (CW) carry out method of encrypting can for: as key, use high-level data encryption standard (AES) cryptographic algorithm that the scrambling control word is encrypted with business cipher key;
The method that described Entitlement Control Message is decrypted can for: with the business cipher key after the deciphering, use the AES decipherment algorithm that the scrambling control word of encrypting is decrypted, obtain the scrambling control word.
To described scrambling control word (CW) carry out method of encrypting can for: as key, use the 3DES cryptographic algorithm that the scrambling control word is encrypted with business cipher key;
The method that described Entitlement Control Message is decrypted can for: with the business cipher key after the deciphering, use the 3DES decipherment algorithm that the scrambling control word of encrypting is decrypted, obtain the scrambling control word.
Fore-end is that each user terminal of connecting system generates the scrambling control word of encrypting, described step 2) can for: fore-end carries out encryption as key to the scrambling control word with the individual subscriber distributing key (PDK) of user terminal, and the scrambling control word after encrypting is sent to user terminal;
Described step 3) can be decrypted with the scrambling control word of individual subscriber distributing key (PDK) to the encryption that receives from the Internet for: user terminal, obtain the scrambling control word, carry out descrambling with this scrambling control word to receiving transport stream, obtain business information from radio network.
Described step 2) may further include: the scrambling control word was revised once every the scheduled time.
Step 2) described condition receives information and can be business cipher key; Step 2) may further include, fore-end generates the Entitlement Control Message (ECM) of user terminal, and this information is sent to user terminal by radio network.
Fore-end is that each user terminal of connecting system generates business cipher key, and described Entitlement Control Message can comprise with business cipher key scrambling control word (CW) is carried out encrypted ciphertext;
Described step 3) can be used the business cipher key that receives from the Internet for: user terminal the Entitlement Control Message that receives from radio network is decrypted, obtain the scrambling control word, carry out descrambling with this scrambling control word to receiving transport stream, obtain business information from radio network.
According to another above-mentioned purpose, the invention provides a kind of information carrying means of interactive digital broadcast television system, comprise fore-end and user terminal part, its fore-end comprises recombiner, scrambler, control word generator, user authorization management system; Recombiner links to each other with scrambler respectively with control word generator, and scrambler links to each other with radio network;
Terminal part comprises separates recombiner, descrambler, smart card system; Separating recombiner links to each other with descrambler, smart card system links to each other with descrambler, descrambler links to each other with radio network, and described fore-end further comprises condition and receives message processing module, and it links to each other respectively with user authorization management system, control word generator and the Internet; And the user authorization management system links to each other with the Internet;
Recombiner is business information, or business information and Entitlement Control Message send to scrambler after compound; Scrambler carries out sending by radio network after the scrambling to business information with the scrambling control word that control word generator produces;
The scrambling control word that business cipher key (SK) that the user authorization management system produces and control word generator produce, or the scrambling control word condition that sends to of individual subscriber distributing key of preserving and control word generator generation receives message processing module; Condition receives the business cipher key (SK) that message processing module produces scrambling control word and user authorization management system or the individual subscriber distributing key of preserving and handles the back and send by the Internet, and the scrambling control word encrypt is formed Entitlement Control Message with business cipher key (SK), be sent to recombiner;
Described terminal part further comprises the interaction process unit, and this interaction process unit links to each other with the Internet; Described smart card system comprises deciphering module and authenticating user identification module, and this smart card system links to each other with the Internet;
The authenticating user identification module is undertaken finishing authentication alternately by interaction process unit and wireless interaction network; And the interaction process unit of terminal part and the user authorization management system of front end carry out information interaction, finish professional application, with terminal part access interaction digital broadcast television system;
Deciphering module will be deciphered from the business cipher key (SK) of the encryption of Internet reception by the interaction process unit and obtain business cipher key, the Entitlement Control Message that receives from radio network is decrypted obtains the scrambling control word, or be decrypted according to the scrambling control word of the individual subscriber distributing key of preserving to the encryption that receives from the Internet, obtain the scrambling control word, send to descrambler; Descrambler carries out descrambling according to the scrambling control word to the business information that receives from radio network, and the business information behind the descrambling sent to separates recombiner; Recombiner is separated the compound user of exporting to business information.
Described condition receives message processing module and can further comprise: first encryption equipment and second encryption equipment;
First encryption equipment, business cipher key with the generation of user authorization management system, the scrambling control word that the scrambling control word generator produces is encrypted, form Entitlement Control Message, and send to recombiner, recombiner carries out this Entitlement Control Message compound with business information, send by radio network;
Second encryption equipment is encrypted the business cipher key that the user authorization management system produces, and sends by the Internet;
Described deciphering module can further comprise: first decipher and second decipher;
Second decipher is decrypted the business cipher key of the encryption that receives from the Internet, and the business cipher key that obtains sends to first decipher,
First decipher, the business cipher key that solves with second decipher to what receive from radio network, and is separated the Entitlement Control Message that obtains after compound and is decrypted by separating recombiner, obtains the scrambling control word and sends to descrambler.
Described first encryption equipment can be the symmetric key algorithm encryption equipment, for example is AES encryption equipment or 3DES encryption equipment; First decipher can be the symmetric key algorithm decipher, for example is AES decipher or 3DES decipher.
Described second encryption equipment is the encryption equipment of public key algorithm, for example is the rsa encryption device, and it is encrypted with the PKI that the user authorization management system preserves; Second decipher is the decipher of the public key algorithm corresponding with second encryption equipment, for example is the RSA decipher, and it is decrypted with the private key that smart card system is preserved.
Described condition receives message processing module can be an encryption equipment; The individual subscriber distributing key that it is preserved with the user authorization management system is encrypted the scrambling control word that the scrambling control word generator produces, and is sent by the Internet;
Described deciphering module can be a decipher; Its individual subscriber distributing key of preserving with the authenticating user identification module is decrypted the scrambling control word of the encryption that receives from the Internet, and the scrambling control word that obtains sends to descrambler.
Described condition receives message processing module can be an encryption equipment; Business cipher key with the generation of user authorization management system, the scrambling control word that the scrambling control word generator produces is encrypted, form Entitlement Control Message, and send to recombiner, recombiner carries out this Entitlement Control Message compound with business information, send by radio network; And this business cipher key sent by the Internet;
Described deciphering module can be a decipher; It uses the business cipher key that receives from the Internet, to what receive from radio network, and separates the Entitlement Control Message that obtains after compound and is decrypted by separating recombiner, obtains the scrambling control word and sends to descrambler.
The described Internet can be the wireless interaction network, comprise: global system for mobile communications (GSM) network or Wideband Code Division Multiple Access (WCDMA) (WCDMA) cordless communication network, or CDMA 2000 cordless communication networks, or the time-division synchronously-code division multiple access (TD-SCDMA) network.
When the Internet was global system for mobile communications (GSM) network, described authentication module can be the SIM card module; When the Internet is Wideband Code Division Multiple Access (WCDMA) (WCDMA) cordless communication network, or the time-division synchronously-during code division multiple access (TD-SCDMA) network, described authentication module can be the usim card module; When the Internet was CDMA 2000 cordless communication networks, described authentication module can be the R-UIM card module.
By technical scheme of the present invention as seen, the information transferring method of interactive digital broadcast television system of the present invention and device thereof, business information and condition reception information are issued from the radio network or the Internet respectively, made full use of the advantage of interactive digital broadcast television system, though realize easyly, increased the difficulty that cracks, improved the fail safe of message transmission, and can save overhead, have wide range of applications.
Description of drawings
Fig. 1 is the realization block diagram of CA system transmissions information in the existing unidirectional digital broadcast television system;
The interactive broadcast television network configuration framework schematic diagram that Fig. 2 proposes for DVB;
Fig. 3 is the information carrying means schematic diagram of the present invention's first preferred embodiment;
Fig. 4 is the information carrying means schematic diagram of the present invention's second preferred embodiment;
Fig. 5 is the information carrying means schematic diagram of the present invention's the 3rd preferred embodiment.
Embodiment
For making the purpose, technical solutions and advantages of the present invention clearer, below in conjunction with three embodiment and accompanying drawing, the present invention is described in more detail.
The information transferring method of interactive digital broadcast television system of the present invention and device thereof, main thought is that business information and condition reception information are issued from the radio network or the Internet respectively, increase the difficulty that cracks, improve the fail safe of message transmission, the inventive method is applicable to the interactive digital broadcast television system of the multiple Internet simultaneously, for example: global system for mobile communications (GSM) network, or Wideband Code Division Multiple Access (WCDMA) (WCDMA) cordless communication network, or CDMA 2000 cordless communication networks, or the time-division synchronously-wireless interaction networks such as code division multiple access (TD-SCDMA) network.
Referring to Fig. 3, Fig. 3 is the information carrying means schematic diagram of the present invention's first preferred embodiment.This device comprises fore-end 310 and user terminal part 330, and its fore-end 330 comprises recombiner 311, scrambler 312, control word generator 313, user authorization management system 314, condition reception message processing module 315; Recombiner 311 links to each other with scrambler 312 respectively with control word generator 313, and scrambler 312 links to each other with radio network 320; Condition receives message processing module 315 and links to each other respectively with recombiner 311, user authorization management system 314, control word generator 313 and the Internet 321; User authorization management system 314 links to each other with the Internet 321; Wherein, condition reception message processing module 315 comprises AES encryption equipment 316 and rsa encryption device 317.Here AES encryption equipment 316 also can use the encryption equipment of other symmetric key algorithms, the encryption equipment that rsa encryption device 317 also can use other public key algorithms.
Terminal part 330 comprises separates recombiner 331, descrambler 332, smart card system 333, interaction process unit 336; Separate recombiner 331 and link to each other respectively with descrambler 332, smart card system 333, smart card system 333 links to each other respectively with descrambler 332, interaction process unit 336, and descrambler 332 links to each other with radio network 320, and interaction process unit 336 links to each other with the Internet 321; Wherein, smart card system 333 comprises AES decipher 334 and RSA decipher 335 and authenticating user identification module 336.Here AES decipher 334 also can use the decipher of other symmetric key algorithms corresponding with the encryption equipment of fore-end, the decipher that RSA decipher 335 also can use the corresponding public key algorithm of other and the encryption equipment of fore-end.
At fore-end 310:
Recombiner 311 sends to scrambler 312 with business information after compound; The scrambling control word that scrambler 312 usefulness control word generators 313 produce carries out sending by radio network 320 after the scrambling to business information;
The scrambling control word condition that sends to that business cipher key that user authorization management system 314 produces and control word generator 313 produce receives message processing module 315; The AES encryption equipment 316 that condition receives in the message processing module 315 is used business cipher key, the scrambling control word is encrypted, form Entitlement Control Message, and send to recombiner 311, recombiner 311 carries out this Entitlement Control Message compound with business information, send by radio network 320; Condition receives the rsa encryption device 317 in the message processing module 315, and the encrypted public key N and the e that preserve with the user authorization management system encrypt business cipher key, send by the Internet 321;
At terminal part 330:
Authenticating user identification module 336 is undertaken finishing authentication alternately by interaction process unit 337 and wireless interaction network 321; And the interaction process unit 337 of terminal part 330 carries out information interaction with the user authorization management system 314 of fore-end 310, finishes professional application, with terminal part 330 access interaction digital broadcast television systems;
RSA decipher 335, the decrypted private key N and the d that preserve with smart card system 333 are decrypted the business cipher key of the encryption that receives from the Internet 321, and the business cipher key that obtains sends to AES decipher 334; AES decipher 334 is used this business cipher key, to what receive from radio network 320, and separates the Entitlement Control Message that obtains after compound and is decrypted by separating recombiner 331, obtains the scrambling control word and sends to descrambler 332; Descrambler 332 carries out descrambling according to this scrambling control word to the business information that receives from radio network 320, and the business information behind the descrambling sent to separates recombiner 331; 331 pairs of business information of recombiner are separated the compound user of exporting to.
In the present embodiment, become a point-to-point service request by periodic broadcast transmission EMM message and only pass the business cipher key of once encrypting, greatly reduced expense; Aes algorithm has been used in encryption to CW, has improved the CW safety of transmission greatly; SK has used RSA Algorithm to business cipher key, and PKI do not need to transmit, and is retained in the DVB front end, has greatly improved the fail safe of RSA Algorithm; Because employed two cryptographic algorithm all are disclosed algorithms, help the standardization of system equipment.
Referring to Fig. 4, Fig. 4 is the information carrying means schematic diagram of the present invention's second preferred embodiment.This device comprises fore-end 410 and user terminal part 430, and its fore-end 410 comprises recombiner 411, scrambler 412, control word generator 413, user authorization management system 414, condition reception message processing module 415; Recombiner 411 links to each other with scrambler 412 respectively with control word generator 413, and scrambler 412 links to each other with radio network 420; Condition receives message processing module 415 and links to each other respectively with user authorization management system 414, control word generator 413 and the Internet 421; User authorization management system 414 links to each other with the Internet 421; Wherein, condition reception message processing module 415 is an encryption equipment 416.
At fore-end 410:
Recombiner 411 sends to scrambler 412 with business information after compound; The scrambling control word that scrambler 412 usefulness control word generators 413 produce carries out sending by radio network 420 after the scrambling to business information;
The scrambling control word condition that sends to that individual subscriber distributing key that user authorization management system 414 preserves and control word generator 413 produce receives message processing module 415, and the scrambling control word of each program was revised once in one hour or one day; Condition receives message processing module 415 usefulness individual subscriber distributing key the scrambling control word is encrypted, and sends by the Internet 421.
At terminal part 430:
Authenticating user identification module 435 is undertaken finishing authentication alternately by interaction process unit 436 and wireless interaction network 421; And the interaction process unit 436 of terminal part 430 carries out information interaction with the user authorization management system 414 of fore-end 410, finishes professional application, with terminal part 430 access interaction digital broadcast television systems;
Decipher 434 takes out the individual subscriber distributing key scrambling control word of the encryption that receives from the Internet 420 is decrypted from authenticating user identification module 435, scrambling control word after the deciphering sends to descrambler 432, descrambler 432 carries out descrambling according to this scrambling control word to the business information that receives from radio network 420, and the business information behind the descrambling sent to separates recombiner 431; 431 pairs of business information of recombiner are separated the compound user of exporting to.
In the present embodiment, CW encrypts the back and transmits by the wireless interaction network, and renewal frequency is that the CW of each program changed once in one hour or one day, makes and no longer transmits ECM and EMM message on the broadcast channel, has greatly reduced the expense of bandwidth; CW transmits on the wireless interaction networking, and is transmitted on broadcast channel by the TS stream that CW encrypts, and has increased cracker's difficulty, has improved the fail safe of system.
Referring to Fig. 5, Fig. 5 is the information carrying means schematic diagram of the present invention's the 3rd preferred embodiment.This device comprises fore-end 510 and user terminal part 530, and its fore-end 510 comprises recombiner 511, scrambler 512, control word generator 513, user authorization management system 514, condition reception message processing module 515; Recombiner 511 links to each other with scrambler 512 respectively with control word generator 513, and scrambler 512 links to each other with radio network 520; Condition receives message processing module 515 and links to each other respectively with recombiner 511, user authorization management system 514, control word generator 513 and the Internet 521; User authorization management system 514 links to each other with the Internet 521; Wherein, condition reception message processing module 515 is an encryption equipment 516.
At fore-end 510:
The scrambling control word condition that sends to that business cipher key that user authorization management system 514 produces and control word generator 513 produce receives message processing module 515; The encryption equipment 516 that condition receives in the message processing module 515 is used business cipher key, the scrambling control word is encrypted, form Entitlement Control Message, and send to recombiner 511, recombiner 511 carries out this Entitlement Control Message compound with business information, send by radio network 520; The message processing module 515 of condition reception simultaneously directly sends business cipher key by the Internet 521.
At terminal part 530:
Authenticating user identification module 535 is undertaken finishing authentication alternately by interaction process unit 536 and wireless interaction network 521; And the interaction process unit 536 of terminal part 530 carries out information interaction with the user authorization management system 514 of fore-end 510, finishes professional application, with terminal part 530 access interaction digital broadcast television systems;
Decipher 534 is used the business cipher key that receives from the Internet 521, to what receive from radio network 520, and separates the Entitlement Control Message that obtains after compound and is decrypted by separating recombiner 531, obtains the scrambling control word and sends to descrambler 532; Descrambler 532 carries out descrambling according to this scrambling control word to the business information that receives from radio network 520, and the business information behind the descrambling sent to separates recombiner 531; 531 pairs of business information of recombiner are separated the compound user of exporting to.
In the present embodiment, SK transmits by the wireless interaction network, makes and no longer transmits EMM message on the broadcast channel, has greatly reduced the expense of bandwidth; SK message transmits on the wireless interaction networking, and ECM message transmits on broadcast channel, has increased the difficulty that cracks, and has improved the fail safe of system.
Authenticating user identification module 336,435 and 535 among above-mentioned three embodiment, different different according to the Internet: when the Internet was global system for mobile communications (GSM) network, this authentication module was a GSM mobile handset SIM card module commonly used; When the Internet is Wideband Code Division Multiple Access (WCDMA) (WCDMA) cordless communication network, or the time-division synchronously-during code division multiple access (TD-SCDMA) network, described authentication module can be the usim card module; When the Internet was CDMA 2000 cordless communication networks, described authentication module can be the R-UIM card module.In the foregoing description decipher function and authenticating user identification module have been integrated in the smart card system, made full use of the existing capability of authenticating user identification module, on authentication of user's access authentication and business authentication, will communicate by letter and radio, TV and film industries have merged.
By the above embodiments as seen, the information transferring method of interactive digital broadcast television system of the present invention and device thereof, made full use of the advantage of interactive digital broadcast television system, though realize easy, but increased the difficulty that cracks, improved the fail safe of message transmission, and can save overhead, had wide range of applications.
Claims (21)
1, a kind of information transferring method of interactive digital broadcast television system is characterized in that, this method may further comprise the steps:
1) fore-end of this system sends the business information transport stream of process scrambling control word scrambling by radio network all user terminals in system;
2) fore-end receives the user profile of user terminal by the Internet, and be the business cipher key (SK) or the business cipher key of each user terminal generation encryption of connecting system, and the Entitlement Control Message (ECM) of generation user terminal, this information is sent to user terminal by radio network; Or be the scrambling control word (CW) of each user terminal generation encryption of connecting system; Fore-end sends to user terminal with the business cipher key of described encryption or scrambling control word or business cipher key respectively by the Internet;
3) user terminal is according to the business cipher key or the business cipher key of the described encryption that receives from the Internet, the Entitlement Control Message that receives is decrypted, obtain the scrambling control word, or obtain the scrambling control word according to the scrambling control word deciphering of the described encryption that receives from the Internet, the business information transport stream that receives from radio network is carried out descrambling, obtain business information.
2, information transferring method as claimed in claim 1 is characterized in that: fore-end is that each user terminal of connecting system generates the business cipher key of encrypting (SK), and described Entitlement Control Message comprises scrambling control word (CW) is carried out encrypted ciphertext;
Described step 3) is: user terminal is decrypted the business cipher key of the encryption that receives from the Internet, obtain business cipher key, with this business cipher key the Entitlement Control Message that receives from radio network is decrypted, obtain the scrambling control word, carry out descrambling with this scrambling control word to receiving transport stream, obtain business information from radio network.
3, information transferring method as claimed in claim 2 is characterized in that: described business cipher key (SK) is carried out method of encrypting is: use the PKI of public key algorithm to encrypt; The method that the business cipher key of described encryption is decrypted is: the private key with public key algorithm is decrypted.
4, information transferring method as claimed in claim 3 is characterized in that: described business cipher key (SK) is carried out method of encrypting is: with the PKI that fore-end is preserved, use RSA cryptographic algorithms that business cipher key is encrypted;
The method that the business cipher key of described encryption is decrypted is: with the private key that user terminal is preserved, use the RSA decipherment algorithm to be decrypted, business cipher key is deciphered out.
5, information transferring method as claimed in claim 2 is characterized in that: described scrambling control word (CW) is carried out method of encrypting is: use symmetric key algorithm to encrypt; The method that Entitlement Control Message is decrypted is decrypted for using symmetric key algorithm.
6, information transferring method as claimed in claim 5 is characterized in that: described scrambling control word (CW) is carried out method of encrypting is: as key, use high-level data encryption standard (AES) cryptographic algorithm that the scrambling control word is encrypted with business cipher key;
The method that described Entitlement Control Message is decrypted is: with the business cipher key after the deciphering, use the AES decipherment algorithm that the scrambling control word of encrypting is decrypted, obtain the scrambling control word.
7, information transferring method as claimed in claim 5 is characterized in that: described scrambling control word (CW) is carried out method of encrypting is: as key, use the 3DES algorithm that the scrambling control word is encrypted with business cipher key;
The method that described Entitlement Control Message is decrypted is: with the business cipher key after the deciphering, use the 3DES algorithm that the scrambling control word of encrypting is decrypted, obtain the scrambling control word.
8, information transferring method as claimed in claim 1, it is characterized in that, fore-end is that each user terminal of connecting system generates the scrambling control word of encrypting, described step 2) be: fore-end carries out encryption as key to the scrambling control word with the individual subscriber distributing key (PDK) of user terminal, and the scrambling control word after encrypting is sent to user terminal;
Described step 3) is: user terminal is decrypted with the scrambling control word of individual subscriber distributing key (PDK) to the encryption that receives from the Internet, obtain the scrambling control word, carry out descrambling with this scrambling control word to receiving transport stream, obtain business information from radio network.
9, information transferring method as claimed in claim 8 is characterized in that, described step 2) further comprise: the scrambling control word was revised once every the scheduled time.
10, information transferring method as claimed in claim 1 is characterized in that: fore-end is that each user terminal of connecting system generates business cipher key, and described Entitlement Control Message comprises with business cipher key scrambling control word (CW) is carried out encrypted ciphertext;
Described step 3) is: user terminal uses the business cipher key that receives from the Internet that the Entitlement Control Message that receives from radio network is decrypted, obtain the scrambling control word, carry out descrambling with this scrambling control word to receiving transport stream, obtain business information from radio network.
11, a kind of information carrying means of interactive digital broadcast television system comprises fore-end and user terminal part, and its fore-end comprises recombiner, scrambler, control word generator, user authorization management system; Recombiner links to each other with scrambler respectively with control word generator, and scrambler links to each other with radio network;
Terminal part comprises separates recombiner, descrambler, smart card system; Separate recombiner and link to each other with descrambler, smart card system links to each other with descrambler, and descrambler links to each other with radio network, it is characterized in that:
Described fore-end further comprises condition and receives message processing module, and it links to each other respectively with user authorization management system, control word generator and the Internet; And the user authorization management system links to each other with the Internet;
Recombiner is business information, or business information and Entitlement Control Message send to scrambler after compound; Scrambler carries out sending by radio network after the scrambling to business information with the scrambling control word that control word generator produces;
The scrambling control word that business cipher key (SK) that the user authorization management system produces and control word generator produce, or the scrambling control word condition that sends to of individual subscriber distributing key of preserving and control word generator generation receives message processing module; Condition receives the business cipher key (SK) that message processing module produces scrambling control word and user authorization management system or the individual subscriber distributing key of preserving and handles the back and send by the Internet, and the scrambling control word encrypt is formed Entitlement Control Message with business cipher key (SK), be sent to recombiner;
Described terminal part further comprises the interaction process unit, and this interaction process unit links to each other with the Internet; Described smart card system comprises deciphering module and authenticating user identification module, and this smart card system links to each other with the Internet;
The authenticating user identification module is undertaken finishing authentication alternately by interaction process unit and wireless interaction network; And the interaction process unit of terminal part and the user authorization management system of front end carry out information interaction, finish professional application, with terminal part access interaction digital broadcast television system;
Deciphering module will be deciphered from the business cipher key (SK) of the encryption of Internet reception by the interaction process unit and obtain business cipher key, the Entitlement Control Message that receives from radio network is decrypted obtains the scrambling control word, or be decrypted according to the scrambling control word of the individual subscriber distributing key of preserving to the encryption that receives from the Internet, obtain the scrambling control word, send to descrambler; Descrambler carries out descrambling according to the scrambling control word to the business information that receives from radio network, and the business information behind the descrambling sent to separates recombiner; Recombiner is separated the compound user of exporting to business information.
12, information carrying means as claimed in claim 11 is characterized in that, described condition receives message processing module and further comprises: first encryption equipment and second encryption equipment;
First encryption equipment, business cipher key with the generation of user authorization management system, the scrambling control word that the scrambling control word generator produces is encrypted, form Entitlement Control Message, and send to recombiner, recombiner carries out this Entitlement Control Message compound with business information, send by radio network;
Second encryption equipment is encrypted the business cipher key that the user authorization management system produces, and sends by the Internet;
Described deciphering module further comprises: first decipher and second decipher;
Second decipher is decrypted the business cipher key of the encryption that receives from the Internet, and the business cipher key that obtains sends to first decipher,
First decipher, the business cipher key that solves with second decipher to what receive from radio network, and is separated the Entitlement Control Message that obtains after compound and is decrypted by separating recombiner, obtains the scrambling control word and sends to descrambler.
13, information carrying means as claimed in claim 12 is characterized in that: described first encryption equipment is the symmetric key algorithm encryption equipment; First decipher is the symmetric key algorithm decipher.
14, information carrying means as claimed in claim 13 is characterized in that: described first encryption equipment is the AES encryption equipment; First decipher is the AES decipher.
15, information carrying means as claimed in claim 13 is characterized in that: described first encryption equipment is the 3DES encryption equipment; First decipher is the 3DES decipher.
16, information carrying means as claimed in claim 12 is characterized in that: described second encryption equipment is the encryption equipment of public key algorithm; Second decipher is the decipher of the public key algorithm corresponding with second encryption equipment.
17, information carrying means as claimed in claim 16 is characterized in that: described second encryption equipment is the rsa encryption device, and it is encrypted with the PKI that the user authorization management system preserves; Second decipher is the RSA decipher, and it is decrypted with the private key that smart card system is preserved.
18, information carrying means as claimed in claim 11 is characterized in that: it is an encryption equipment that described condition receives message processing module; The individual subscriber distributing key that it is preserved with the user authorization management system is encrypted the scrambling control word that the scrambling control word generator produces, and is sent by the Internet;
Described deciphering module is a decipher; Its individual subscriber distributing key of preserving with the authenticating user identification module is decrypted the scrambling control word of the encryption that receives from the Internet, and the scrambling control word that obtains sends to descrambler.
19, information carrying means as claimed in claim 11 is characterized in that: it is an encryption equipment that described condition receives message processing module; Business cipher key with the generation of user authorization management system, the scrambling control word that the scrambling control word generator produces is encrypted, form Entitlement Control Message, and send to recombiner, recombiner carries out this Entitlement Control Message compound with business information, send by radio network; And this business cipher key sent by the Internet;
Described deciphering module is a decipher; It uses the business cipher key that receives from the Internet, to what receive from radio network, and separates the Entitlement Control Message that obtains after compound and is decrypted by separating recombiner, obtains the scrambling control word and sends to descrambler.
20, information carrying means as claimed in claim 11, it is characterized in that, the described Internet is the wireless interaction network, comprise: global system for mobile communications (GSM) network or Wideband Code Division Multiple Access (WCDMA) (WCDMA) cordless communication network, or CDMA 2000 cordless communication networks, or the time-division synchronously-code division multiple access (TD-SCDMA) network.
21, information carrying means as claimed in claim 20 is characterized in that: when the Internet was global system for mobile communications (GSM) network, described authentication module was the SIM card module; When the Internet is Wideband Code Division Multiple Access (WCDMA) (WCDMA) cordless communication network, or the time-division synchronously-during code division multiple access (TD-SCDMA) network, described authentication module is the usim card module; When the Internet was CDMA 2000 cordless communication networks, described authentication module was the R-UIM card module.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CNB031308066A CN100442839C (en) | 2003-05-09 | 2003-05-09 | Information transmitting method and apparatus for interactive digital broadcast television system |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CNB031308066A CN100442839C (en) | 2003-05-09 | 2003-05-09 | Information transmitting method and apparatus for interactive digital broadcast television system |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN1549595A CN1549595A (en) | 2004-11-24 |
| CN100442839C true CN100442839C (en) | 2008-12-10 |
Family
ID=34322674
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CNB031308066A Expired - Fee Related CN100442839C (en) | 2003-05-09 | 2003-05-09 | Information transmitting method and apparatus for interactive digital broadcast television system |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN100442839C (en) |
Families Citing this family (19)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101213838B (en) * | 2005-06-30 | 2011-04-06 | 皇家飞利浦电子股份有限公司 | Method and system for providing conditional access to data in MHP or OCAP broadcast system |
| CN100584008C (en) * | 2006-05-09 | 2010-01-20 | 中国科学院研究生院 | Scrambling non-scrambling transmission flow real-time authenticating device and television device with same |
| CN1845599B (en) * | 2006-05-17 | 2010-09-01 | 中国移动通信集团公司 | Method for obtaining and updating service key in mobile television service |
| CN101166259B (en) * | 2006-10-16 | 2010-11-10 | 华为技术有限公司 | Mobile phone TV service protection method, system, mobile phone TV server and terminal |
| EP1916598A1 (en) * | 2006-10-23 | 2008-04-30 | Nagravision S.A. | Method for loading and managing an application in a mobile equipment item |
| CN101212642B (en) * | 2006-12-25 | 2012-06-27 | 北京握奇数据系统有限公司 | Broadcast signal processing method, system, and receiver |
| CN101442661B (en) * | 2007-11-21 | 2010-07-14 | 中国移动通信集团公司 | Method and mobile terminal for playing stream medium program |
| CN100562098C (en) * | 2008-01-03 | 2009-11-18 | 济南市泰信电子有限责任公司 | Digital television conditional access system and handling process thereof |
| CN101500227B (en) * | 2008-01-28 | 2011-01-19 | 中兴通讯股份有限公司 | Method and system for binding mobile phone terminal by multimedia broadcast content |
| CN101499866B (en) * | 2008-02-01 | 2011-12-07 | 中兴通讯股份有限公司 | Service cipher key transmitting method in multimedia broadcast service |
| CN101282456B (en) * | 2008-04-11 | 2010-08-04 | 青岛海信电器股份有限公司 | Method and apparatus for receiving digital television condition |
| CN101568070B (en) * | 2008-04-23 | 2012-11-28 | 中兴通讯股份有限公司 | Mobile terminal management system and method |
| CN101312459B (en) * | 2008-05-29 | 2011-05-04 | 北京创毅视讯科技有限公司 | Transmission method, distribution method and transmission system for authentication management information |
| CN101594521B (en) * | 2009-06-26 | 2012-07-18 | 中兴通讯股份有限公司 | Method, terminal and system for realizing interactive service of mobile TV data card |
| CN101917393A (en) * | 2010-05-26 | 2010-12-15 | 中兴通讯股份有限公司 | Information transmission method and system as well as data card |
| CN102111660B (en) * | 2011-03-28 | 2012-11-28 | 博视联（苏州）信息科技有限公司 | Interactive type intelligent network television |
| CN102665102B (en) * | 2012-05-09 | 2014-11-05 | 山东泰信电子股份有限公司 | System and method for counting quantity of digital television users |
| CN103546767B (en) * | 2012-07-16 | 2017-01-25 | 航天信息股份有限公司 | Content protection method and system of multimedia service |
| CN105959738B (en) * | 2016-06-22 | 2018-11-30 | 北京数字太和科技有限责任公司 | A kind of bidirectional conditional reception system and method |
Citations (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO1997050249A1 (en) * | 1996-06-24 | 1997-12-31 | Stentor Resource Centre Inc. | Interactive reverse channel for direct broadcast satellite system |
| US5870474A (en) * | 1995-12-04 | 1999-02-09 | Scientific-Atlanta, Inc. | Method and apparatus for providing conditional access in connection-oriented, interactive networks with a multiplicity of service providers |
| CN1273490A (en) * | 1999-05-07 | 2000-11-15 | 朗迅科技公司 | Cipher method and device for limitting inserting transfered program content |
| EP1150506A2 (en) * | 2000-04-28 | 2001-10-31 | Nokia Corporation | A method and system for providing secure subscriber content data |
| US20020001386A1 (en) * | 2000-06-30 | 2002-01-03 | Koichiro Akiyama | Broadcast receiving method and apparatus and information distributing method and apparatus |
| EP1182874A1 (en) * | 2000-08-24 | 2002-02-27 | Canal+ Technologies Société Anonyme | Digital content protection system |
| US6560340B1 (en) * | 1995-04-03 | 2003-05-06 | Scientific-Atlanta, Inc. | Method and apparatus for geographically limiting service in a conditional access system |
-
2003
- 2003-05-09 CN CNB031308066A patent/CN100442839C/en not_active Expired - Fee Related
Patent Citations (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US6560340B1 (en) * | 1995-04-03 | 2003-05-06 | Scientific-Atlanta, Inc. | Method and apparatus for geographically limiting service in a conditional access system |
| US5870474A (en) * | 1995-12-04 | 1999-02-09 | Scientific-Atlanta, Inc. | Method and apparatus for providing conditional access in connection-oriented, interactive networks with a multiplicity of service providers |
| WO1997050249A1 (en) * | 1996-06-24 | 1997-12-31 | Stentor Resource Centre Inc. | Interactive reverse channel for direct broadcast satellite system |
| CN1273490A (en) * | 1999-05-07 | 2000-11-15 | 朗迅科技公司 | Cipher method and device for limitting inserting transfered program content |
| EP1150506A2 (en) * | 2000-04-28 | 2001-10-31 | Nokia Corporation | A method and system for providing secure subscriber content data |
| US20020001386A1 (en) * | 2000-06-30 | 2002-01-03 | Koichiro Akiyama | Broadcast receiving method and apparatus and information distributing method and apparatus |
| EP1182874A1 (en) * | 2000-08-24 | 2002-02-27 | Canal+ Technologies Société Anonyme | Digital content protection system |
Also Published As
| Publication number | Publication date |
|---|---|
| CN1549595A (en) | 2004-11-24 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN100442839C (en) | Information transmitting method and apparatus for interactive digital broadcast television system | |
| US5590200A (en) | Apparatus and method for securing communication systems | |
| CN1171454C (en) | Method and apparatus for encrypted data stream transmission | |
| CN100366083C (en) | Method for operating conditional access system for broadcast applications | |
| CN101166259B (en) | Mobile phone TV service protection method, system, mobile phone TV server and terminal | |
| CN102598694B (en) | Method for accessing services by a user unit | |
| CN101076109B (en) | Two-way CA system of digital TV-set and method for ordering and cancelling programm based on it | |
| CN101282456B (en) | Method and apparatus for receiving digital television condition | |
| JP4691244B2 (en) | Limited reception device and security module of limited reception system, limited reception system, limited reception device authentication method, and encryption communication method | |
| CN100502496C (en) | Digital TV user authentication system based on mobile device | |
| CN101626484A (en) | Method for protecting control word in condition access system, front end and terminal | |
| CN101018317A (en) | A virtual intelligent card security authentication method and system | |
| CN100364332C (en) | Method for protecting broadband video-audio broadcasting content | |
| CN102714593A (en) | Methods for decrypting, transmitting and receiving control words, storage medium for executing said methods | |
| CN100551034C (en) | A kind of mobile multi-media service implementation method and condition receiving system | |
| CN100547955C (en) | A kind of method of protecting mobile multimedia service, system and equipment | |
| CN100544238C (en) | A kind of charging method of digital multimedia broadcasting system and Apparatus and system | |
| TWI448920B (en) | Methods for transmitting, receiving and identifying, security processor and information-recording carrier for these methods | |
| CN103546767B (en) | Content protection method and system of multimedia service | |
| CN100544429C (en) | A kind of mobile phone TV services content protecting method | |
| CN1753487B (en) | Control system of watching digital TV and its method | |
| CN103747300A (en) | Conditional access system capable of supporting mobile terminal | |
| CN102238422B (en) | Digital television broadcasting conditional access system | |
| CN101119170A (en) | Frequency modulated subcarrier based user management method | |
| CN101714904B (en) | Key management system and method |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C14 | Grant of patent or utility model | ||
| GR01 | Patent grant | ||
| CF01 | Termination of patent right due to non-payment of annual fee |
Granted publication date: 20081210 Termination date: 20180509 |
|
| CF01 | Termination of patent right due to non-payment of annual fee |