CN101547337B - Browsing locking method of digital programs, digital television terminal and safety device - Google Patents

Browsing locking method of digital programs, digital television terminal and safety device Download PDF

Info

Publication number
CN101547337B
CN101547337B CN200810102900A CN200810102900A CN101547337B CN 101547337 B CN101547337 B CN 101547337B CN 200810102900 A CN200810102900 A CN 200810102900A CN 200810102900 A CN200810102900 A CN 200810102900A CN 101547337 B CN101547337 B CN 101547337B
Authority
CN
China
Prior art keywords
packet
time
safety device
deciphering
terminal
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN200810102900A
Other languages
Chinese (zh)
Other versions
CN101547337A (en
Inventor
王天星
王文军
王宇
李伟东
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Beijing Shibo Digital TV Technology Co Ltd
Original Assignee
Beijing Shibo Digital TV Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Beijing Shibo Digital TV Technology Co Ltd filed Critical Beijing Shibo Digital TV Technology Co Ltd
Priority to CN200810102900A priority Critical patent/CN101547337B/en
Publication of CN101547337A publication Critical patent/CN101547337A/en
Application granted granted Critical
Publication of CN101547337B publication Critical patent/CN101547337B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Landscapes

  • Two-Way Televisions, Distribution Of Moving Picture Or The Like (AREA)
  • Storage Device Security (AREA)

Abstract

The invention provides a browsing locking method of digital programs, a digital television terminal and a safety device. The method comprises the following steps: a terminal safety device counts the quantity of data packets which decrypt different program streams simultaneously; whether the quantity exceeds a preset value or not is judged; and if the judged result shows that the quantity exceeds the preset value, the safety device dose not decrypt the received data packets. The invention effectively restricts the quantity of different program streams simultaneously decrypted by the safety device, thereby restricting the quantity of digital programs descrambled at the terminal, namely restricting the quantity of programs televiewed by terminal users, preventing a plurality of televisions from simultaneously televiewing a plurality of sets of programs using one card, effectively protecting the vital interests of service providers and guaranteeing the legitimate rights of the service providers.

Description

The browsing locking method of digital program, digital TV terminal and safety device
Technical field
The present invention relates to digital television techniques, particularly a kind of browsing locking method of digital program, digital TV terminal and safety device.
Background technology
As everyone knows, condition receiving system CAS is meant and is used for controlling the system that the user receives broadcast service, realizes the paid service of broadcast system usually through empowerment management.
Fig. 1 is the digital television conditional access system structural representation.As shown in Figure 1, this CA system comprises front end 101 and terminal 102.Wherein, front end 101 comprises Entitlement Control Message Generator (ECMG:Entitlement Control Message Generator) 104, EMM Generator (EMMG:Entitlement Management Message Generator) 106; Terminal 102 comprises the terminal security unit, can be smart card 112.
Like Fig. 1, shown in 2, the scrambler/SCS103 of front end 101 utilizes control word (CW:Control Word) that the digital program stream that broadcasts is carried out scrambling;
ECMG104 receives control word CW, in ECMG104, utilizes service key that control word CW is encrypted, and in Entitlement Control Message (ECM:Entitlement Control Message), together transmits with digital program stream;
Service key also is provided for EMMG106 when giving ECMG104, encrypt transmission in Entitlement Management Message (EMM:Entitlement Management Message) through user key.
At the terminal 102, the code stream that the multiplexer 107 of reception/filter element 108 receiving front-ends 101 at terminal 102 is seen off receives the EMM authorization message of giving oneself according to the numbering of smart card 112 from code stream, then the EMM authorization message is delivered in the smart card 112.
Smart card 112 is preserved this authorization message, and utilizes pre-buried user key that EMM is deciphered at EMM processing unit 112b, decrypts authorization key (service key) and storage.
Reception/the filter element 108 at terminal 102 filters out from code stream and the corresponding ECM stream of institute's current channel according to ECM bag identification number; Deliver to smart card 112 then; Smart card 112 is deciphered ECM according to the service key that stores; Obtain control word CW, see control word CW off smart card 112 then and give descrambler 111, descrambler 111 will carry out descrambling to program according to this CW.
But; In correlation technique; The quantity of smart card 112 not being deciphered program simultaneously limits, and causes authorized user to use a sheet smart card, a plurality of receiving terminal like this, and promptly multimachine one card can be watched multiple programs simultaneously; Thereby can't guarantee service provider's vital interests effectively, bring enormous economic loss to the service provider.Along with popularizing of DTV, it is more and more urgent that the solution of this problem also becomes.
Above-mentioned smart card 112 generally can adopt eight bit CPU monolithic chip, and the relevant criterion of this smart card is mainly the ISO7816 series standard.The data message that in above-mentioned smart card, writes comprises; Manufacturer's information data (information of CAS manufacturer, smart card numbering), operator's data (writing down each operator's manufacturer's information, smartcard version number, identification number etc.), subscriber control information data (record be the information that the user can revise through STB), AC information data (recording smart card attribute of user, the area code of using like addressing), encrypted message data (recording user is written into the version of PIN code), machine card corresponding data (record be that this is stuck in the corresponding numbering of machine card in the use), wallet data (credit line of each wallet and spent count), IPPV data (record be to watch the IPPV of each operator information recorded), key information data (user key, service key etc.).Every sheet smart card all has a unique identification number and numbering in the front end data storehouse.
Summary of the invention
The object of the present invention is to provide a kind of browsing locking method of digital program; Limited the quantity that safety device is deciphered different program streams simultaneously effectively through this method; Thereby limited the quantity of terminal descrambling digital program; Prevent one the card multimachine watch multiple programs simultaneously, protected service provider's vital interests effectively, ensured service provider's just rights and interests.
The object of the present invention is to provide a kind of receiving terminal; Limited the quantity that safety device is deciphered different program streams simultaneously effectively through this terminal; Thereby limited the quantity of terminal descrambling digital program stream; Prevent one the card multimachine watch multiple programs simultaneously, protected service provider's vital interests effectively, ensured service provider's just rights and interests.
The object of the present invention is to provide a kind of safety device, limited safety device effectively through this safety device and deciphered the quantity of different program streams simultaneously, thereby limited the quantity of terminal descrambling digital program, prevent that the card multimachine from watching multiple programs simultaneously.
For realizing above-mentioned purpose, the present invention provides a kind of browsing locking method of digital program, and this method comprises: terminal safety device is added up the quantity of data packets of deciphering different program streams simultaneously; Judge whether this quantity surpasses preset value; If judged result is for being that then this safety device is not deciphered the packet that receives; If judged result is then deciphered packet for not.
For realizing above-mentioned purpose, the present invention also provides a kind of digital TV terminal, and this terminal comprises descrambling unit and broadcast unit; This terminal also comprises:
Filtration/receiving element is used for the packet that receiving front-end sends;
Safety device comprises first processing unit at least, and this first processing unit is used to receive carrying program identification and issuing the time of said filtration/receiving element transmission; Perhaps program identification, issue time and deciphering Cycle Length at the packet of internal information; This packet is resolved, simultaneously the quantity of data packets of deciphering different program streams is added up, judge whether this quantity surpasses preset value; If judged result is for being that then this safety device is not deciphered packet; If judged result is then deciphered packet for not.
For realizing above-mentioned purpose, the present invention also provides a kind of safety device, wherein; This safety device comprises first processing unit at least; What this first processing unit was used for that receiving terminal filtration/receiving element transmits carries program identification and issues the time, perhaps program identification, issue time and deciphering Cycle Length at the packet of internal information, this packet is resolved; Simultaneously the quantity of data packets of deciphering different program streams is added up; Judge that whether this quantity surpass preset value, if judged result is for being that then this safety device is not deciphered packet; If judged result is then deciphered packet for not.
The beneficial effect of embodiment of the present invention is, has limited safety device effectively and has deciphered the quantity of different program streams simultaneously, thereby limited the quantity of terminal descrambling digital program, prevents that the card multimachine from watching multiple programs simultaneously; Also can prevent other user's infringement or attacks, protect service provider's vital interests effectively, ensure service provider's just rights and interests.
Description of drawings
Accompanying drawing described herein is used to provide further understanding of the present invention, constitutes the application's a part, does not constitute qualification of the present invention.In the accompanying drawings:
Fig. 1 is that condition receiving system constitutes sketch map in the correlation technique;
Fig. 2 is a condition receiving system scrambling descrambling sketch map shown in Figure 1;
Fig. 3 is that the terminal constitutes sketch map in the condition receiving system of embodiment of the present invention;
Fig. 4 is the formation sketch map of first processing unit among Fig. 3;
The browsing locking method flow chart of Fig. 5 embodiment of the present invention.
Embodiment
For making the object of the invention, technical scheme and advantage clearer,, the present invention is explained further details below in conjunction with execution mode and accompanying drawing.At this, exemplary embodiment of the present invention and explanation thereof are used to explain the present invention, but not as to qualification of the present invention.
At first term involved in the present invention " is browsed " and described: browse being meant that the terminal use watches two or more programs simultaneously in the present invention.Browse locking and be meant the control user quantity of watch programs simultaneously.
Below in conjunction with accompanying drawing the present invention is elaborated.
Execution mode one
The present invention also provides a kind of digital TV terminal, and is as shown in Figure 3, and this terminal comprises descrambling unit 303 and broadcast unit 305 at least; Wherein, this terminal also comprises:
Filtration/receiving element 301 is used for the packet that receiving front-end sends;
Safety device 302; At least comprise the first processing unit 302a, this first processing unit 302a is used for carrying program identification, issue the time and/or deciphering the packet of Cycle Length at internal information of receiving filtration/receiving element 301 transmission, and this packet is resolved; Simultaneously the quantity of data packets of deciphering different program streams is added up; Judge that whether this quantity surpass preset value, if judged result is for being that then this safety device is not deciphered packet; If judged result is then deciphered packet for not.
From the above; Limited the quantity that safety device 302 is deciphered different program streams simultaneously effectively through this terminal; Thereby limited the quantity of terminal descrambling digital program; Prevent one the card multimachine watch multiple programs simultaneously, protected service provider's vital interests effectively, ensured service provider's just rights and interests.
As shown in Figure 3, this safety device 302 also comprises the second memory cell 302b, and this second memory cell 302b is connected with the first processing unit 302a, is used to store this preset value.
This safety device 302 also comprises the second processing unit 302c; This second processing unit 302c is used for the packet that comprises this preset value that receiving filtration/receiving element 301 transmits; This packet is resolved, obtaining this preset value, and deposit the preset value that obtains in memory cell 302c.
As shown in Figure 4, the first processing unit 302a comprises:
Resolution unit 401 is used for the packet that receives is resolved, to obtain the time that issues, program identification and/or the deciphering Cycle Length in this packet;
Statistic unit 402 is connected with resolution unit 402, is used for according to this program identification, issues the time and/or the deciphering Cycle Length is added up the quantity of data packets of deciphering different programs simultaneously, and statistics is transmitted;
Judging unit 403 is used for the statistics that receiving and counting unit 402 transmits, and judges whether this quantity surpasses the preset value that stores, if judged result is for being then to notify 405 pairs of packets of decryption unit not decipher; If judged result then notifies 405 pairs of packets of decryption unit to decipher for not;
Decryption unit 405 is used for according to the service key of judged result and storage the packet that receives being deciphered, and obtaining descrambled control words CW, and this descrambled control words CW is sent to descrambling unit 303; Descrambling unit 303 is delivered to broadcast unit 305 and is play after according to this CW scrambled program stream being carried out descrambling.
Wherein, but memory cell 302c also the program identification that goes out of storing and resolving, issue time and/or deciphering Cycle Length.
As shown in Figure 4; This terminal also comprises Tip element 304; Be used to receive the judged result that judging unit 403 transmits; When the judged result of this judging unit 403 surpasses preset value for the quantity of data packets of deciphering different program streams simultaneously, then send this judged result to this Tip element 304, this Tip element 304 information that will prestore is presented at broadcast unit 305;
Like this, this terminal also comprises first memory cell 306, and this first memory cell 306 is used to store information.
In this execution mode, this safety device 302 can be smart card.Like this, this digital TV terminal can be made up of STB and smart card, and this smart card can be inserted in the STB.
From the above; The quantity that safety device is deciphered different programs has simultaneously been limited at this terminal effectively; Thereby limited the quantity of terminal descrambling digital program; Prevent one the card multimachine watch multiple programs simultaneously, protected service provider's vital interests effectively, ensured service provider's just rights and interests.
Execution mode two
The present invention provides a kind of browsing locking method of digital program, below in conjunction with accompanying drawing 3-5 this method is elaborated.
This method comprises: 302 pairs of quantity of data packets of deciphering different program streams simultaneously of terminal safety device are added up; Judge whether this quantity surpasses preset value; If judged result is for being that then 302 pairs of packets that receive of this safety device are not deciphered.
Through this method; Limit safety device 302 effectively and deciphered the quantity of different program streams simultaneously; Thereby limited the quantity of terminal descrambling digital program, promptly limited the quantity that the terminal use watches program, prevent one the card multimachine watch multiple programs simultaneously; Protect service provider's vital interests effectively, ensured service provider's just rights and interests.
In this execution mode; When these safety device 302 refusals are deciphered the packet that receives; The Tip element 304 at notice terminal shows relevant information; For example this information can be " quantity of watching program is above the quantity that allows to watch ", but is not limited thereto, and also can adopt other signal language.
In this execution mode, if being this quantity, judged result do not surpass preset value, then 302 pairs of packets that receive of this safety device are deciphered, to obtain scrambling control word CW; CW is sent to descrambling unit 303 with this scrambling control word; Descrambling unit 303 utilizes this control word CW that the program stream of scrambling is carried out descrambling; Program stream behind the descrambling is sent to broadcast unit 305.
In this execution mode, this preset value is the quantity of data packets higher limit of this safety device 302 deciphering different program streams, is to allow the terminal use to watch limit value on the quantity of different programs simultaneously; When the different programs of watching simultaneously as the terminal use surpassed this higher limit, safety device 302 refusal deciphering were in this execution mode; Safety device 302 can be refused all packets are deciphered; Can not obtain control word CW this moment, also can't carry out descrambling to the program stream of scrambling, like this; The terminal use can not continue watch programs, and this terminal provides relevant information simultaneously.Have only the quantity of deciphering different programs simultaneously when this safety device 302 during less than this higher limit, safety device 302 continues packet is deciphered.Wherein, operator can limit this preset value according to actual needs, for example, can be 1,2 or a plurality of.
Before the quantity of data packets that 302 pairs of terminal safety devices are deciphered different program streams was simultaneously added up, this method also comprises: front end was provided with this preset value; Generation comprises the packet of this preset value; Send this packet that comprises preset value to the terminal.
After the terminal receives this packet, this packet is sent to safety device 302,302 pairs of these packets that comprise preset value of safety device are resolved, to obtain and to store this preset value.Wherein, this packet can be the EMM packet.
Before the quantity of data packets that 302 pairs of this safety devices are deciphered different program streams is simultaneously added up, also comprise:
Front end sends packet to the terminal, and wherein, this packet carries the information that comprises program identification, issues the time; Perhaps carry the information that comprises program identification, issues time and deciphering Cycle Length.
This terminal is sent to safety device 302 with this packet after receiving packet; 302 pairs of these packets of this safety device are resolved, to obtain program identification, to issue the time; Perhaps obtain and comprise program identification, issue the time and decipher Cycle Length.Wherein, this program identification (ID), issue the time and/or the deciphering Cycle Length can issue through ECM bag.Wherein, this deciphering Cycle Length can be Crypto Period length, like 10S, but is not limited thereto, and also can be other numerical value.
Like this, 302 pairs of quantity of data packets of deciphering different program streams simultaneously of safety device are added up, and can adopt following mode:
Safety device 302 is deciphered periodicity according to the program identification that obtains with the current accumulative total of the packet that issues the different programs of time statistics deciphering; Judge that this current accumulative total deciphers periodicity whether more than or equal to preset deciphering periodicity; If judged result is for being, then deciphers periodicity and confirm that this safety device deciphers the quantity of data packets of different programs simultaneously according to this program identification and current accumulative total.
In this execution mode, preset deciphering periodicity can be set arbitrarily according to actual needs.For example; Can be set at 10 deciphering cycles in this execution mode; Like this, if the current accumulative total of the ECM packet of current deciphering is deciphered periodicity more than or equal to 10 deciphering during the cycle, can think this ECM packet of continuous deciphering; Be continuous descrambling program stream, thereby think that this terminal use watches this program.
From the above; Can confirm that safety device deciphers the ECM quantity of data packets of different programs simultaneously according to different program identifications through adopting aforesaid way; Be the quantity that the user watches program simultaneously, thereby judge whether this quantity surpasses preset value, if then refusal is deciphered the ECM packet.
In this execution mode, during the information that comprise program identification when this packet carries, issues the time, decipher periodicity according to the program identification and the current accumulative total of the packet that issues time statistics deciphering different program streams, can adopt following mode:
Whether the time that issues of more current decrypted data packet issuing the time greater than the corresponding last decrypted data packet of this program identification that prestores; If comparative result, is then judged the time that issues of current decrypted data packet and the difference of the time of decrypted data packet at last for being and whether is less than or equal to the scheduled time; If judged result is for being, then the last deciphering periodicity of this last decrypted data packet of basis obtains current accumulative total and deciphers periodicity.In this execution mode, store issuing the time of current decrypted data packet, this is issued time issuing the time as the last decrypted data packet of judging next time; Store current accumulative total and decipher periodicity, and this current accumulative total is deciphered the deciphering periodicity that periodicity was judged as next time.Wherein, Preset Time can be set arbitrarily according to actual needs, and pre-deposits in the safety device.Wherein, can issue packet to the terminal through front end, terminal safety device 302 is resolved this packet and is obtained this Preset Time, and stores in this Preset Time to the safety device 302.
In this execution mode; If time that issues of more current decrypted data packet whether greater than the comparative result of time that issues of the corresponding last decrypted data packet of this program identification that prestores for denying; Then this method comprises: 302 pairs of these packets of safety device are deciphered, to obtain descrambled control words CW; CW is sent to descrambling unit 303 with this descrambled control words; Descrambling unit 303 utilizes this control word CW that the program stream of scrambling is carried out descrambling; Program stream behind the descrambling is sent to broadcast unit 305.Therefore, in this case, safety device 302 continues decrypted data packet, makes the terminal use can continue watch programs.
In this execution mode, should can be set to 1 deciphering cycle, 2 deciphering cycles or a plurality of deciphering cycle the scheduled time.In this execution mode, be set to 2 deciphering cycles.
In this execution mode; For more accurate, this Preset Time can be set at 1 deciphering cycle, for example; Difference when time that issues that safety device 302 is judged current decrypted data packet and the time of last decrypted data packet is less than or equal to 1 deciphering during the cycle; Safety device 302 this ECM packet of deciphering continuously in these 2 deciphering cycles is described, in this case, current accumulative total is deciphered periodicity=decipher at last periodicity+1.
In addition; This Preset Time can be set at 2 deciphering cycles; For example; Difference when time that issues that safety device 302 is judged current decrypted data packet and the time of last decrypted data packet is less than or equal to 2 deciphering during the cycle, explain that safety device 302 deciphers this ECM packet in the situation in the cycle of deciphering of being separated by one, and this situation also is regarded as deciphering continuously this ECM packet.In this case, current accumulative total is deciphered periodicity=decipher at last periodicity+2.In this execution mode, when the difference of the corresponding time that issues of decrypted data packet at last of the time that issues of judging current decrypted data packet with this program identification that prestores greater than the scheduled time, when deciphering the cycle, will decipher the periodicity zero clearing as 2.
In addition, issuing the time of the time that issues of the more current decrypted data packet last decrypted data packet corresponding again with other program identification that prestores; Whether the difference of the time that issues of judging the last decrypted data packet that time that issues of current decrypted data packet is corresponding with other program identification is greater than the scheduled time, like 2 deciphering cycles; If judged result is for being, then that other program identification is corresponding relative recording deletion, is deciphered information deletion such as periodicity at interocclusal record during like the issuing of last decrypted data packet.Like this, through removing data useless in the table, watched the terminal use originally exactly but the programme information now do not seen from the deletion of table the inside, thereby can save memory space greatly.And the like, decipher periodicity more than or equal to preset deciphering periodicity until current accumulative total, during like 10 deciphering periodicities; Can confirm safety device 302 continuous decrypted data packet in continuous 10 deciphering cycles, thereby can confirm that the user watches this program, therefore; Can confirm that safety device 302 deciphers the quantity of different programs simultaneously, when this quantity during greater than preset value 2, these safety device 302 refusal deciphering; And display reminding information, forbid that the user continues to watch.
In this execution mode, safety device 302 can be smart card.
Below in conjunction with accompanying drawing 3-5 the execution mode of browsing locking method of the present invention is elaborated.
As shown in Figure 5, this method comprises:
Step 501, front end is provided with preset value, and this preset value is the higher limit that safety device 302 is deciphered different programs simultaneously, promptly allows the user to browse the quantity of different programs simultaneously; As shown in table 1, be the descriptor (BrowserDataDescriptor) that the higher limit of browsing different programs simultaneously is set.
Table 1
Grammer Note
BrowserData(){
CardSN The smart card numbering
OperatorID Operator's numbering
PrivateData Operator's private information
BrowseLimit Smart card is browsed the upper limit of program simultaneously
}
Operator can be provided with this preset value according to actual needs, and for example, with safety device 302, the higher limit of browsing program in the time of like the smart card correspondence is 2 in this execution mode.
Step 502 generates the packet that comprises this preset value, in this execution mode, can in EMMG, generate the EMM packet, and this EMM packet is issued to the terminal;
Step 503, terminal are sent to safety device 302 with this EMM packet after receiving this EMM packet, and 302 pairs of these EMM packets of this safety device are resolved, and obtaining preset value wherein, and this preset value are stored; Wherein, preset value is deposited among the second memory cell 302b of safety device 302.
Step 504, in this execution mode, with front end program identification being set is that example describes with the deciphering Cycle Length.
In this execution mode, front end is provided with program identification and deciphering Cycle Length, and generates together with the time that issues and to comprise this program stream, program identification, deciphering Cycle Length, issue the packet of time and be issued to the terminal; Wherein, can in ECMG, generate this ECM packet, and this ECM packet is issued to the terminal; It is as shown in table 2 for the descriptor of program identification and deciphering Cycle Length is set; Wherein, this deciphering Cycle Length can be arbitrary value, is set to 10 seconds in this execution mode.
Table 2
Grammer Note
ProgramData(){
OperatorID Operator's numbering
PrivateData Operator's private information
ProgramID Program number
CPDuration The deciphering Cycle Length
}
Step 505, the reception/filter element 301 at terminal receives this ECM packet, and this ECM packet is sent to safety device 302; 401 pairs of these ECM packets of the resolution unit of this safety device 302 are resolved, and obtaining program identification, to decipher Cycle Length and issue the time, and store this program identification and deciphering Cycle Length to the second memory cell 302b simultaneously, and are as shown in table 3.
Wherein, table 3 is in safety device 302, to store the program stream information of deciphering simultaneously.The record that comprises in the table 3 is the number of programs of interior descrambling of a period of this terminal (like 2 deciphering cycles).Wherein, preceding 3 fields are to add according to the information in the ECM bag; Issuing the time of the last deciphering of LastECMTime record ECM packet is referred to as issuing the time of last decrypted data packet; CPCount is the number in the deciphering cycle of continuous watch programs, is referred to as to decipher periodicity.
Table 3
Grammer Note
ProgramInfo{
OperatorID The inner ID of operator
ProgramID The program identification that front end issues through ECM
CPDuration The deciphering cycle that front end issues through ECM
LastECMTime Decipher the time of ECM packet at last
CPCount Decipher periodicity at last
}
Like this, the statistic unit 402 of safety device 302 according to the program identification in this ECM packet, decipher Cycle Length, the time that issues, the deciphering periodicity that issue the last decrypted data packet of time and storage add up the quantity that this safety device 302 is deciphered the ECM bag of different programs simultaneously.
Concrete mode is following:
1) statistic unit 402 of safety device is deciphered periodicity according to the program identification and the current accumulative total of the packet that issues time statistics deciphering different program streams; In this execution mode, can adopt following mode:
At first, the time that issues of more current decrypted data packet issuing the time whether greater than the corresponding last decrypted data packet of this program identification that prestores;
If comparative result, then judges the time that issues of current decrypted data packet and the difference of the time that issues of decrypted data packet at last for being and whether is less than or equal to the scheduled time, as this scheduled time be 1 deciphering cycle or 2 deciphering cycles;
If judged result is for being, then deciphers periodicity and obtain current accumulative total and decipher periodicity according to prestoring; And store the time that issues of current decrypted data packet and decipher periodicity.In addition, can delete the time that issues and deciphering periodicity of last decrypted data packet simultaneously, with the time that issues the issuing the time of this current decrypted data packet as the last decrypted data packet of adding up usefulness next time; This current accumulative total is deciphered periodicity as the deciphering periodicity of adding up usefulness next time.
Wherein, if this scheduled time is 1 deciphering during the cycle, if judged result is for being that then current accumulative total is deciphered periodicity for deciphering periodicity+1 at last;
If this scheduled time is 2 deciphering during the cycle, if judged result is for being, then current accumulative total is deciphered periodicity for deciphering periodicity+2 at last, and a deciphering cycle also thinks to decipher continuously program because this situation is separated by.
If the difference of the time that issues of the current decrypted data packet of judgement and the time that issues of last decrypted data packet then should add up to decipher the periodicity zero clearing at last greater than the scheduled time.
In this execution mode; If time that issues of more current decrypted data packet whether greater than the comparative result of time that issues of the corresponding last decrypted data packet of this program identification that prestores for denying; Then this method comprises: 405 pairs of these packets of the decryption unit of safety device 302 are deciphered, to obtain descrambled control words CW; CW is sent to descrambling unit 303 with this descrambled control words; Descrambling unit 303 utilizes this control word CW that the program stream of scrambling is carried out descrambling; Program stream behind the descrambling is sent to broadcast unit 305.Therefore, in this case, safety device 302 continues decrypted data packet, makes the terminal use can continue watch programs.
Therefore, through above-mentioned judgment mode, can prevent other users' infringement or attack effectively.
Then, the time that issues of the more current decrypted data packet last decrypted data packet corresponding with other program identification that prestores issues the time; Whether the difference of the time that issues of judging the last decrypted data packet that time that issues of current decrypted data packet is corresponding with other program identification is greater than the scheduled time, like 2 deciphering cycles; If judged result is for being, then with the relevant information deletion that other program identification is corresponding in the table 3, to save the memory space of the second memory cell 302b.
2) whether statistic unit 402 these current accumulative totals of judgement decipher periodicity more than or equal to preset deciphering periodicity, like 10 deciphering cycles;
3), then decipher periodicity and confirm that this safety device deciphers the quantity of data packets of different programs simultaneously according to this program identification and current accumulative total if judged result is for being.Even the corresponding ECM packet of a certain program identification of deciphering in 10 continuous deciphering cycles is then explained continuous 10 the corresponding program streams of this program identification of deciphering cycle descrambling in this terminal, can confirm that then the terminal use watches this program;
And the like, can decipher periodicity according to this program identification and current accumulative total and can confirm that safety device deciphers the quantity of data packets of different programs simultaneously.
Step 506, when statistic unit 402 counted the quantity of deciphering different program streams simultaneously, judging unit 403 judged that whether this quantity is greater than preset value, as 2;
Step 507,508; If judged result is that this quantity is greater than preset value in step 506; Then the safety device refusal is deciphered the ECM packet; And judging unit 403 is sent to the Tip element 304 at terminal with this judged result, and the Tip element 304 at this terminal can be presented at broadcast unit 305 with the information that is pre-stored in first memory cell 306, can be " watch the quantity of program to surpass allow watch quantity " like this information.At this moment; The quantity of the different programs that the terminal use watches simultaneously surpasses preset value, and therefore, safety device 302 refusals are deciphered packet; Thereby the terminal use can not continue to watch program; Have only when safety device 302 when the quantity of decrypted data bag is less than preset value simultaneously, safety device 302 just can continue decrypted data packet, and this terminal use can continue normal watch programs.
If judged result is for being less than or equal to preset value 2 in step 506, then execution in step 509;
Step 509,405 pairs of packets that receive of the decryption unit of safety device 302 are deciphered, to obtain descrambled control words CW; CW is sent to descrambling unit 303 with this descrambled control words; Descrambling unit 303 utilizes this control word CW that the program stream of scrambling is carried out descrambling; Program stream behind the descrambling is sent to broadcast unit 305.
Step 510, broadcast unit 305 is play the program behind the descrambling.
In addition, in yet another embodiment of the present invention, in step 504, front end can only be provided with program identification, and like this, front end will comprise program stream, program identification, issue the ECM packet of time is issued to the terminal.
Like this; When whether the difference of the time that issues of judging current decrypted data packet and the time that issues of last decrypted data packet is less than or equal to the scheduled time; Wherein " scheduled time " can be provided with at front end in advance; And at first be issued to the terminal, after 302 pairs of these packets of terminal safety device are resolved, obtain this scheduled time and storage through packet.As this scheduled time be 1 deciphering cycle or 2 deciphering cycles; In this case, statistic unit 402 can judge that concrete judgment mode repeats no more as stated according to this scheduled time here.
From the above; Limited the quantity that safety device is deciphered different program streams simultaneously effectively through this method; Thereby limited the quantity of terminal descrambling digital program, prevent one the card multimachine watch multiple programs simultaneously, prevent user's abuse and malicious attack behavior effectively; Protect service provider's vital interests, ensured service provider's just rights and interests.
Execution mode three
The present invention also provides a kind of safety device, and the formation of this safety device such as Fig. 4 and execution mode one are said, repeat no more here.
From the above; The present invention has limited the quantity that safety device is deciphered different program streams simultaneously effectively; Thereby limited the quantity of terminal descrambling digital program, prevent one the card multimachine watch multiple programs simultaneously, prevent user's abuse and malicious attack behavior effectively; Protect service provider's vital interests, ensured service provider's just rights and interests.
Above-described embodiment; The object of the invention, technical scheme and beneficial effect have been carried out further explain, and institute it should be understood that the above is merely embodiment of the present invention; And be not used in qualification protection scope of the present invention; All within spirit of the present invention and principle, any modification of being made, be equal to replacement, improvement etc., all should be included within protection scope of the present invention.

Claims (24)

1. the browsing locking method of a digital program is characterized in that, this method comprises:
The safety device at terminal is added up the quantity of data packets of deciphering different program streams simultaneously;
Judge whether this quantity surpasses preset value;
If judged result is for being that then said safety device is not deciphered the packet that receives; If judged result is that then said safety device is not deciphered the packet that receives, to obtain descrambled control words; Said descrambled control words is sent to the descrambling unit;
The said descrambled control words of said descrambling unit by using is carried out descrambling to the program stream of scrambling; Program stream behind the descrambling is sent to broadcast unit.
2. method according to claim 1 is characterized in that, when said safety device was not deciphered the packet that receives, this method also comprised: said terminal shows relevant information.
3. method according to claim 1 is characterized in that, before said safety device was added up the quantity of data packets of deciphering different program streams simultaneously, this method also comprised:
Front end is provided with said preset value;
Generation comprises the packet of this preset value;
Send this packet that comprises preset value to said terminal.
4. method according to claim 3 is characterized in that, this method also comprises:
Said terminal is sent to said safety device with the packet that receives;
Said safety device receives the packet that comprises preset value;
This packet is resolved, to obtain said preset value;
Store said preset value.
5. method according to claim 1 is characterized in that, before said safety device is added up the quantity of data packets of deciphering different program streams simultaneously, also comprises:
Front end sends packet to said terminal; Wherein, this packet carries program identification and issues the time; Perhaps carry program identification, issue time and deciphering Cycle Length;
Said terminal is sent to said safety device with this packet after receiving this packet;
Said safety device is resolved this packet, to obtain program identification and to issue time or program identification, issue the time and decipher Cycle Length.
6. method according to claim 5 is characterized in that, said safety device is added up the quantity of data packets of deciphering different program streams simultaneously, comprising:
Said safety device is deciphered periodicity according to the program identification and the current accumulative total of the packet that issues time statistics deciphering different program streams;
Judge that this current accumulative total deciphers periodicity whether more than or equal to preset deciphering periodicity;
If judged result is for being, then deciphers periodicity and confirm that said safety device deciphers the quantity of data packets of different program streams simultaneously according to said program identification and current accumulative total.
7. method according to claim 6 is characterized in that, when said packet carried program identification and issues the time, said current accumulative total of adding up the packet of deciphering different program streams according to the program identification and the time that issues was deciphered periodicity, comprising:
Whether the time that issues of more current decrypted data packet issuing the time greater than the corresponding last decrypted data packet of this program identification that prestores;
If comparative result, is then judged the time that issues of current decrypted data packet and the difference of the time that issues of decrypted data packet at last for being and whether is less than or equal to the scheduled time that prestores;
If judged result is for being, then the last deciphering periodicity of this last decrypted data packet of basis obtains current accumulative total and deciphers periodicity.
8. method according to claim 7 is characterized in that, before said safety device was added up the quantity of data packets of deciphering different program streams simultaneously, this method also comprised:
Front end is provided with the said scheduled time, and generates the packet that comprises this scheduled time;
Send this packet that comprises the scheduled time to said terminal;
Said terminal is sent to said safety device with the packet that receives;
Said safety device is resolved the packet that comprises this scheduled time, to obtain the said scheduled time;
The said scheduled time is stored.
9. method according to claim 7 is characterized in that, the said scheduled time is the multiple of said deciphering Cycle Length or deciphering Cycle Length.
10. method according to claim 6; It is characterized in that; When comprising program identification when said packet carries, issue the time and deciphering Cycle Length, said current accumulative total of adding up the packet of deciphering different program streams according to the program identification and the time that issues is deciphered periodicity, comprising:
Whether the time that issues of more current decrypted data packet issuing the time greater than the corresponding last decrypted data packet of this program identification that prestores;
If whether the time that issues that comparative result, is then judged current decrypted data packet for being is less than or equal to said deciphering Cycle Length that carries or the multiple of deciphering Cycle Length with the difference of the time that issues of last decrypted data packet;
If judged result is for being, then the last deciphering periodicity of this last decrypted data packet of basis obtains current accumulative total and deciphers periodicity.
11., it is characterized in that this method also comprises: store issuing the time of the corresponding said current decrypted data packet of said program identification according to claim 7 or 10 described methods; Store said current accumulative total and decipher periodicity.
12. according to claim 7 or 10 described methods, it is characterized in that, if time that issues of more current decrypted data packet whether greater than the comparative result of time that issues of the corresponding last decrypted data packet of this program identification that prestores for denying that then this method comprises:
Said safety device is deciphered this packet, to obtain descrambled control words;
Said descrambled control words is sent to the descrambling unit;
The said descrambled control words of descrambling unit by using is carried out descrambling to the program stream of scrambling;
Program stream behind the descrambling is sent to broadcast unit.
13., it is characterized in that this method also comprises according to claim 7 or 10 described methods:
Issuing the time of the last decrypted data packet that the time that issues of more current reception packet is corresponding with other program identification that prestores;
Judge the last decrypted data packet that time that issues of current reception packet is corresponding with other program identification the time that issues difference whether greater than the scheduled time, or greater than the multiple of deciphering Cycle Length or deciphering Cycle Length;
If judged result is for being then that other program identification is the corresponding time that issues that comprises last decrypted data packet and the information deletion of deciphering periodicity.
14. method according to claim 10; It is characterized in that; If whether the difference of the time that issues of judging current decrypted data packet and the time that issues of last decrypted data packet is less than or equal to the judged result of multiple of the said deciphering Cycle Length that carries or deciphering Cycle Length for denying that this method also comprises: should add up to decipher the periodicity zero clearing at last.
15. a digital TV terminal, this terminal comprises descrambling unit and broadcast unit; It is characterized in that this terminal comprises:
Filtration/receiving element is used for the packet that receiving front-end sends;
Safety device, this safety device comprises first processing unit at least, this first processing unit is used to receive carrying program identification and issuing the time of said filtration/receiving element transmission; Perhaps program identification, issue time and deciphering Cycle Length at the packet of internal information; This packet is resolved, simultaneously the quantity of data packets of deciphering different program streams is added up, judge whether this quantity surpasses preset value; If judged result is for being that then this safety device is not deciphered packet; If judged result is then deciphered packet for not.
16. terminal according to claim 15 is characterized in that, said safety device also comprises memory cell, and this memory cell is connected with said first processing unit, is used to store said preset value.
17. terminal according to claim 16; It is characterized in that; Said safety device also comprises second processing unit, and this second processing unit is used to receive the packet that comprises said preset value that said filtration/receiving element transmits, and this packet is resolved; Obtaining said preset value, and deposit the preset value that obtains in said memory cell.
18. terminal according to claim 15 is characterized in that, said first processing unit comprises:
Resolution unit is used for said packet is resolved, with obtain said program identification with issue the time, perhaps program identification, issue the time and the deciphering Cycle Length;
Statistic unit; Be connected with said resolution unit; Be used for according to said program identification with issue the time, perhaps program identification, issue the time and the deciphering Cycle Length is added up the quantity of data packets of deciphering different program streams simultaneously, and statistics is transmitted;
Judging unit is used to receive the statistics that said statistic unit transmits, and judges whether this quantity surpasses the preset value that stores, if judged result is for being then to notify decryption unit that packet is not deciphered; If judged result then notifies decryption unit that packet is deciphered for not;
Decryption unit is used for according to the service key of judged result and storage the packet that receives being deciphered, and obtaining descrambled control words, and this descrambled control words is sent to the descrambling unit.
19. terminal according to claim 18; It is characterized in that; Said terminal also comprises Tip element; Be used to receive the judged result that said judging unit transmits, when the judged result of said judging unit surpassed preset value for the quantity of data packets of deciphering different programs simultaneously, the information that then will prestore was sent to said broadcast unit.
20. terminal according to claim 19 is characterized in that, said terminal also comprises memory cell, is connected with said Tip element, is used to store said information.
21. safety device; It is characterized in that said safety device comprises first processing unit at least, this first processing unit is used for carrying program identification and issuing the time of receiving terminal filtration/receiving element transmission; Perhaps program identification, issue time and deciphering Cycle Length at the packet of internal information; This packet is resolved, simultaneously the quantity of data packets of deciphering different program streams is added up, judge whether this quantity surpasses preset value; If judged result is for being that then this safety device is not deciphered packet; If judged result is then deciphered packet for not.
22. safety device according to claim 21 is characterized in that, said safety device also comprises memory cell, and this memory cell is connected with said first processing unit, is used to store said preset value.
23. safety device according to claim 22; It is characterized in that; Said safety device also comprises second processing unit, and this second processing unit is used for the packet that comprises said preset value that receiving terminal filtration/receiving element transmits, and this packet is resolved; Obtaining said preset value, and deposit the preset value that obtains in said memory cell.
24. safety device according to claim 21 is characterized in that, said first processing unit comprises:
Resolution unit is used for said packet is resolved, with obtain said program identification with issue the time, perhaps program identification, issue the time and the deciphering Cycle Length;
Statistic unit; Be connected with said resolution unit; Be used for according to said program identification with issue the time, perhaps program identification, issue the time and the deciphering Cycle Length is added up the quantity of data packets of deciphering different program streams simultaneously, and statistics is transmitted;
Judging unit is used to receive the statistics that said statistic unit transmits, and judges whether this quantity surpasses the preset value that stores, if judged result is for being then to notify said decryption unit that packet is not deciphered; If judged result then notifies said decryption unit that packet is deciphered for not;
Decryption unit is used for according to the service key of judged result and storage the packet that receives being deciphered, and obtaining descrambled control words, and this descrambled control words is sent to the descrambling unit.
CN200810102900A 2008-03-28 2008-03-28 Browsing locking method of digital programs, digital television terminal and safety device Active CN101547337B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN200810102900A CN101547337B (en) 2008-03-28 2008-03-28 Browsing locking method of digital programs, digital television terminal and safety device

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN200810102900A CN101547337B (en) 2008-03-28 2008-03-28 Browsing locking method of digital programs, digital television terminal and safety device

Publications (2)

Publication Number Publication Date
CN101547337A CN101547337A (en) 2009-09-30
CN101547337B true CN101547337B (en) 2012-10-03

Family

ID=41194167

Family Applications (1)

Application Number Title Priority Date Filing Date
CN200810102900A Active CN101547337B (en) 2008-03-28 2008-03-28 Browsing locking method of digital programs, digital television terminal and safety device

Country Status (1)

Country Link
CN (1) CN101547337B (en)

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN115174136B (en) * 2022-05-23 2024-02-02 北京旷视科技有限公司 Data acquisition and data transmission method, terminal, server and storage medium

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1642266A (en) * 2004-01-18 2005-07-20 北京中电华大电子设计有限责任公司 Technical method for realizing machine-card separation of top box of digital TV set
CN1649410A (en) * 2005-02-03 2005-08-03 上海交通大学 Machine and card separation condition receiving plug-in unit for digital TV receiver based on intelligent card

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1642266A (en) * 2004-01-18 2005-07-20 北京中电华大电子设计有限责任公司 Technical method for realizing machine-card separation of top box of digital TV set
CN1649410A (en) * 2005-02-03 2005-08-03 上海交通大学 Machine and card separation condition receiving plug-in unit for digital TV receiver based on intelligent card

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
JP特开2001-333406A 2001.11.30

Also Published As

Publication number Publication date
CN101547337A (en) 2009-09-30

Similar Documents

Publication Publication Date Title
KR101081160B1 (en) Method and apparatus for protecting the transfer of data
KR101120689B1 (en) Smartcard dynamic management
KR101070506B1 (en) System for receiving broadcast digital data comprising a master digital terminal, and at least one slave digital terminal
EP2699014A1 (en) Terminal based on conditional access technology
US8612354B2 (en) Method for controlling digital rights of the “Play N times” type for a digital audio and/or video content and device implementing this method
CN102075812B (en) Data receiving method and system of digital television
EP2612503A1 (en) Method and system for decrypting a transport stream
KR101529362B1 (en) Method for the allocation and management of substcriptions for the reception of broadcast products
CA2735397A1 (en) Tracing unauthorized use of secure modules
CN101626484A (en) Method for protecting control word in condition access system, front end and terminal
US20040250274A1 (en) Conditional access system and copy protection
KR101803974B1 (en) A method and apparatus for decrypting encrypted content
CN101547337B (en) Browsing locking method of digital programs, digital television terminal and safety device
CN100438617C (en) Pay television, method for revoking rights in such a system, associated decoder and smart card, and message transmitted to such a decoder
CN101583012B (en) Method for realizing two-stage condition receiving system and front end and final end of two-stage condition receiving system
CN101729746B (en) Televiewing control method and device
CN103988513B (en) For method, encryption system and the security module of the content packet for descrambling digital transport stream
CN101998163A (en) Entitlement management method, terminal equipment and front end
CN103634624A (en) Digital television live broadcasting method and system based on IP (Internet protocol) network
CN101686310A (en) Method and device for receiving condition
CN102170595A (en) Disabling a cleartext control word loading mechanism in a conditional access system
CN101489098A (en) Service unsubscription method, system and terminal thereof for conditional receiving system
KR100499451B1 (en) Method for preventing duplicated process of entitlement management message in conditional access system
EP3264306B1 (en) Reinforcing the security of a pay television system
KR100487246B1 (en) Method for preventing illegal relay broadcast

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C14 Grant of patent or utility model
GR01 Patent grant