CN1761315A - Implementation method for replacing conditional receiving system in two stages - Google Patents

Implementation method for replacing conditional receiving system in two stages Download PDF

Info

Publication number
CN1761315A
CN1761315A CN 200510105787 CN200510105787A CN1761315A CN 1761315 A CN1761315 A CN 1761315A CN 200510105787 CN200510105787 CN 200510105787 CN 200510105787 A CN200510105787 A CN 200510105787A CN 1761315 A CN1761315 A CN 1761315A
Authority
CN
China
Prior art keywords
subordinate
cas
program
drm
user
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN 200510105787
Other languages
Chinese (zh)
Other versions
CN100477784C (en
Inventor
戴成
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Sumavision Technologies Co Ltd
Original Assignee
Sumavision Technologies Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Sumavision Technologies Co Ltd filed Critical Sumavision Technologies Co Ltd
Priority to CNB2005101057879A priority Critical patent/CN100477784C/en
Publication of CN1761315A publication Critical patent/CN1761315A/en
Application granted granted Critical
Publication of CN100477784C publication Critical patent/CN100477784C/en
Expired - Fee Related legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Landscapes

  • Two-Way Televisions, Distribution Of Moving Picture Or The Like (AREA)

Abstract

Cooperation between digital royalty management (DRM) and conditional acceptance system (CAS) accomplishes two stages conditional acceptance function of digital TV. DRM server is setup at upper level (content provider), and DRM client end is setup at lower level (program operator). DRM server scrambles content of digital media down loaded from upper level. DRM server uses signature of cryptographic key to encrypt program. After encryption, the encrypted program is down loaded to DRM client end, which decrypts the encrypted program. After signature is validated, the cryptographic key for encrypting program is encrypted and sent to CAS in lower level so as to realize control of program source. After obtaining permission from DRM server, DRM client end sends users's certificate to CAS in lower level, and then through the CAS, certificates are sent to users. It is needed to apply for reception permission from DRM client end when users in lower level to watch programs in upper level.

Description

A kind of replacement method that realizes conditional receiving system in two stages
Technical field
The invention belongs to the digital television broadcasting category, relate to a kind of replacement method that realizes conditional receiving system in two stages.
Background technology
Along with the digital television broadcasting industry the carrying out of China, it is the one-product operation theory of principal income that CAS breaks with the advertisement as broadcast television industry, realizes the technical foundation and the strong instrument of multi-channel management income, more and more receives the concern of operator.CAS (Conditional Access System, condition receiving system) is a whole set of system that the user is provided authorization control, empowerment management and terminal set-top box program receiving.The scrambling that has realized video, audio frequency and data message at front end is transmitted, and set-top box has realized the process that the program descrambling receives endways.The user buys program, utilizes the set-top box that links to each other with TV to watch the program of purchase.In the transportation of CAS, higher level (program provider) and subordinate (program operator) often will run on the same stage, this just relates to the problem how operator of the superior and the subordinate controls oneself program, user and mandate, so, present multistage CAS operation scheme has just been arranged.In the now general multistage CAS operation scheme; require the CAS of the superior and the subordinate must adopt identical cas system; do not support to adopt different cas systems; like this; though multistage CAS has played the effect of protection copyright with the mode that directly controls to the user; but this practice has hindered the development of downstream operator, has also brought great resistance for the popularization of Digital Television.The reality that the dual role of program provider and operator of subordinate exist can exist in considerable time from now on, and the Digital Television industry of China develops again, so DRM is incorporated into Digital Television for we and this problem is solved in the IPTV field.DRM (Digital rights management, digital copyright management) is a kind of method of protecting digital multimedia content not to be subjected to illegal infringement.The DRM technology judges by encrypted digital content and additional information whether the user has the right to use this content, only uses those users that obtained the authorization are open to guarantee content.Combine by DRM and CAS, when realizing the multistage operation of Digital Television, can promote the fast development of Digital Television industry.
Summary of the invention
The purpose of this invention is to provide a kind of replacement method that realizes conditional receiving system in two stages, realize effective control and the management of the superior and the subordinate program, user and mandate separately.
For achieving the above object, the invention provides a kind of replacement method that realizes conditional receiving system in two stages, match by DRM and CAS and realize the operation on the same stage of two-stage operator, mainly comprise:
A, locate to place a DRM server higher level (content supplier), locate to place a drm agent and a CAS in subordinate (program operator), it is integrated for subordinate that the higher level formulates a drm agent standard interface, behind the CAS of the subordinate integration standard interface, cooperate with drm agent the user is controlled;
B, higher level pass digital media content DRM server scrambling down, pass down in real time via satellite, after the DRM server signs the ciphered program key, encrypt, by passing to drm agent under VPN (Virtual Private Network)/IP (Internet Protocol), drm agent to ciphered program be decrypted, by behind the certifying signature, the ciphered program key is encrypted with ServiceKey (business cipher key), send to the CAS of subordinate, pass to the user under the CAS of subordinate, after the user obtains ServiceKey, the enabling decryption of encrypted program key is watched program;
C, drm agent are given the CAS of subordinate with user certificate after the permission that obtains the DRM server, by passing to the user place under the CAS of subordinate, be saved in the user smart card, thus the control that realization is opened an account to the user of subordinate;
The user of subordinate watches higher level's program, need watch permission to the drm agent application, drm agent is after the permission that obtains the DRM server, after watching permission, feed back to the CAS of subordinate with user certificate signature, encryption, by passing to user smart card under the CAS of subordinate, in smart card, behind deciphering, the certifying signature, preserve ServiceKey in user smart card;
The scrambled program that D, the user of subordinate watch the higher level to pass down obtains the ciphered program key with the ServiceKey deciphering and can normally watch program.
Above-mentioned steps A is described, and the higher level is not as long as the standard interface of working out a drm agent for the integrated use of subordinate, requires that subordinate must adopt the CAS same with the higher level.
Described in the above-mentioned steps B, the scrambling of higher level's program can be used the DRM server, also can use existing scrambling system, just need pass to the DRM server to the ciphered program key.
Described in the above-mentioned steps B, higher level's scrambled program can real-time Transmission, passes under also can be when subordinate needs.
Described in the above-mentioned steps B, higher level's scrambled program can be by transmitting including but not limited to satellite, wired, wireless, IP, VPN channel.
Described in the above-mentioned steps B, when the DRM server passed the ciphered program key down, key will be done safe handling.
Described in the above-mentioned steps B, drm agent to ciphered program be decrypted, by behind the certifying signature, the ciphered program key is encrypted with ServiceKey, send to the CAS of subordinate, pass to the user under the CAS of subordinate, after the user obtains ServiceKey, the enabling decryption of encrypted program key is watched program.
Described in the above-mentioned steps C, the content of watching permission including but not limited to ServiceKey, watch number of times.
Described in the above-mentioned steps C, the deposit position of user certificate and the deposit position of ServiceKey are including but not limited to smart card.
Description of drawings
Further specify characteristics of the present invention below in conjunction with drawings and Examples.
Accompanying drawing 1 does not have a kind of scheme block diagram that realizes the replacement method of conditional receiving system in two stages of CAS for the higher level.
Accompanying drawing 2 has a kind of scheme block diagram that realizes the replacement method of conditional receiving system in two stages of CAS for the higher level.
Embodiment
Please refer to accompanying drawing 1, do not have a kind of scheme block diagram that realizes the replacement method of conditional receiving system in two stages of CAS for the higher level.Whole proposal is divided into two parts of higher level (content supplier) and subordinate (program operator), and in this programme, higher level's program Channel Transmission via satellite follows this programme similar to subordinate by the situation of other Channel Transmission.The higher level, one or more TS (transport stream) stream of program provider is input to multiplexing formation one road TS stream of multiplexer (101), TS stream after multiplexing outputs to the DRM server and carries out scrambling (102), TS after the scrambling spreads and gives QPSK (Quadrature Phase Shift Keying modulation) modulator and carry out modulation treatment (103), the corresponding qpsk modulator of each road TS stream is handled the back through qpsk modulator and is transmitted into satellite channel (105) by transmitter (104); Simultaneously, after DRM server (102) signs the ciphered program key, encrypt, by passing to each drm agent (112) under the VPN/IP.In subordinate, drm agent deciphering, certifying signature send to the CAS of subordinate after by the back ciphered program key that obtains being encrypted with ServiceKey.Satellite receiver (107) is antenna (106) received signal and be converted into TS stream from satellite channel via satellite, TS stream with this locality enters multiplexer scrambler (108) together again, simultaneously, multiplexing scrambler and the CAS of subordinate cooperate the scrambling of finishing subordinate's program, the encryption of data and to the transparent transmission of higher level's program, the TS of output flows through and enters HFC (cable television network) (109) after QAM (quadrature amplitude modulation) modulator is handled, send into set-top box (110), set-top box is handled TS stream, and the TS after will handling sends into the CAS module in the set-top box, give smart card, smart card is by ServiceKey enabling decryption of encrypted program key, and give set-top box with program key, finish authorizing the descrambling of program by set-top box.
Please refer to accompanying drawing 2, a kind of scheme block diagram that realizes the replacement method of conditional receiving system in two stages of CAS is arranged for the higher level.Whole proposal is divided into two parts of higher level (content supplier) and subordinate (program operator), and in this programme, higher level's program Channel Transmission via satellite follows this programme similar to subordinate by the situation of other Channel Transmission.The higher level, one or more TS stream of program provider is input to multiplexing scrambler (101), and and higher level CAS (110) cooperate and to finish the scrambling of program and the encryption of data, TS after the scrambling spreads and gives qpsk modulator and carry out modulation treatment (102), the corresponding qpsk modulator of each road TS, the TS that handles through qpsk modulator transmitter (103) of flowing through is transmitted into satellite channel (104); Simultaneously, DRM server (111) obtains the ciphered program key from CAS, after ciphered program key signature, encryption, by passing to each drm agent (112) under the VPN/IP.In subordinate, drm agent deciphering, certifying signature send to the CAS of subordinate (113) after by the back ciphered program key that obtains being encrypted with ServiceKey.Satellite receiver (106) is antenna (105) received signal and be converted into TS stream from satellite channel via satellite, TS stream with this locality enters multiplexing scrambler (107) together again, simultaneously, multiplexing scrambler and the CAS of subordinate cooperate the scrambling of finishing subordinate's program, the encryption of data and to the transparent transmission of higher level's program, the TS of output flows through and enters HFC after QAM modulator (108) is handled, send into set-top box (109), set-top box is handled TS stream, and the TS stream after will handling is sent into set-top box CAS module, give smart card, smart card is by ServiceKey enabling decryption of encrypted program key, and give set-top box with program key, finish authorizing the descrambling of program by set-top box.

Claims (14)

1, a kind of replacement method that realizes conditional receiving system in two stages mainly comprises:
A, locate to place a DRM (digital copyright management) server higher level (content supplier), locate to place a drm agent and a CAS (condition receiving system) in subordinate (program operator), it is integrated for subordinate that the higher level formulates a drm agent standard interface, behind the CAS of the subordinate integration standard interface, cooperate with drm agent the user is controlled;
B, higher level pass digital media content DRM server scrambling down, pass down in real time via satellite, after DRM server for encrypting program key signature, the encryption, by passing to drm agent under VPN (Virtual Private Network)/IP (Internet Protocol), drm agent to ciphered program be decrypted, by behind the certifying signature, the key of ciphered program is encrypted with ServiceKey (business cipher key), send to the CAS of subordinate, pass to the user under the CAS of subordinate, after the user obtains ServiceKey, the enabling decryption of encrypted program key is watched program;
C, drm agent are given the CAS of subordinate with user certificate after the permission that obtains the DRM server, by passing to the user place under the CAS of subordinate, be saved in the user smart card, thus the control that realization is opened an account to the user of subordinate; The user of subordinate watches higher level's program, need watch permission to the drm agent application, drm agent is after the permission that obtains the DRM server, after watching permission, feed back to the CAS of subordinate with user certificate signature, encryption, by passing to user smart card under the CAS of subordinate, in smart card, behind deciphering, the certifying signature, preserve ServiceKey in user smart card;
The scrambled program that D, the user of subordinate watch the higher level to pass down obtains the ciphered program key with the ServiceKey deciphering and can normally watch program.
2, a kind of replacement method that realizes conditional receiving system in two stages according to claim 1, it is characterized in that B is the control procedure of DRM to program source, C is the control procedure that drm agent is provided certificate and the user watches permission, does not have any restricting relation between B and the C.
3, a kind of replacement method that realizes conditional receiving system in two stages according to claim 1 is characterized in that subordinate can be for a plurality of, and a drm agent and a CAS need place in each subordinate.
4, a kind of replacement method that realizes conditional receiving system in two stages according to claim 1, it is characterized in that when the higher level has CAS, by CAS scrambled number media content, without the scrambling of DRM server, only need CAS that the ciphered program key is passed to the DRM server, higher level CAS need not be identical CAS with the CAS of subordinate.
5, a kind of replacement method that realizes conditional receiving system in two stages according to claim 1 is characterized in that the program of higher level with DRM protection oneself, between subordinate and user, and the program that the mode that subordinate combines with DRM and the CAS of subordinate accurately draws oneself up.
6, a kind of replacement method that realizes conditional receiving system in two stages according to claim 1 is characterized in that higher level's scrambled program does not need descrambling to subordinate, and the user of subordinate need obtain the permission of higher level DRM server, just can watch program.
7, a kind of replacement method that realizes conditional receiving system in two stages according to claim 1, it is characterized in that higher level among the B to the signal transmission form of subordinate including but not limited to the satellite-signal transmission means.
8, a kind of replacement method that realizes conditional receiving system in two stages according to claim 1 is characterized in that the higher level descends to pass including but not limited to real-time to the transmission of subordinate among the B.
9, a kind of replacement method that realizes conditional receiving system in two stages according to claim 1, the deposit position that it is characterized in that the deposit position of user certificate among the C and ServiceKey is including but not limited to smart card.
10, a kind of replacement method that realizes conditional receiving system in two stages according to claim 1 is characterized in that the CAS of subordinate is a carrier, and subordinate can change other carriers, is used for transmission including but not limited to ServiceKey, license passport information.
11, a kind of replacement method that realizes conditional receiving system in two stages according to claim 1, when it is characterized in that the DRM server passes the ciphered program key down by VPN/IP, key will be done safe handling.
12, a kind of replacement method that realizes conditional receiving system in two stages according to claim 1, it is characterized in that the ciphered program key need pass down after the encryption once more through ServiceKey among the B, control the user by the mode of control ServiceKey and watch, wherein ServiceKey can have other title.
13, a kind of replacement method that realizes conditional receiving system in two stages according to claim 1, the content that it is characterized in that watching among the C permission including but not limited to ServiceKey, watch number of times.
14, a kind of replacement method that realizes conditional receiving system in two stages according to claim 1, it is characterized in that the higher level can grasp information including but not limited to subordinate's customer volume, watch number of times, watch the time limit.
CNB2005101057879A 2005-09-29 2005-09-29 Implementation method for replacing conditional receiving system in two stages Expired - Fee Related CN100477784C (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CNB2005101057879A CN100477784C (en) 2005-09-29 2005-09-29 Implementation method for replacing conditional receiving system in two stages

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CNB2005101057879A CN100477784C (en) 2005-09-29 2005-09-29 Implementation method for replacing conditional receiving system in two stages

Publications (2)

Publication Number Publication Date
CN1761315A true CN1761315A (en) 2006-04-19
CN100477784C CN100477784C (en) 2009-04-08

Family

ID=36707232

Family Applications (1)

Application Number Title Priority Date Filing Date
CNB2005101057879A Expired - Fee Related CN100477784C (en) 2005-09-29 2005-09-29 Implementation method for replacing conditional receiving system in two stages

Country Status (1)

Country Link
CN (1) CN100477784C (en)

Cited By (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1921614B (en) * 2006-09-27 2010-06-23 华为技术有限公司 Method and system for media data scrambling
CN101815071A (en) * 2010-04-01 2010-08-25 北京数码视讯科技股份有限公司 Method, device and system for applying for digital certificate
CN102027753A (en) * 2008-02-19 2011-04-20 索尼公司 Encryption system for satellite delivered television
CN102111651A (en) * 2009-12-24 2011-06-29 北京视博数字电视科技有限公司 Method for recording program, method for broadcasting program, front end and terminal equipment
CN101583012B (en) * 2008-05-12 2011-08-03 北京视博数字电视科技有限公司 Method for realizing two-stage condition receiving system and front end and final end of two-stage condition receiving system
CN102263995A (en) * 2011-08-22 2011-11-30 广州长嘉电子有限公司 Simulcrypt-technology-based conditional access method and system
CN102387407A (en) * 2010-08-31 2012-03-21 国基电子(上海)有限公司 System and method for realizing broadcasting network conditional access (CA)
CN101569133B (en) * 2006-12-28 2014-02-26 英特尔公司 Protecting independent vendor encryption keys with a common primary encryption key
CN105141976A (en) * 2015-08-14 2015-12-09 湖南兆华世纪新媒体技术有限公司 Hierarchical encryption method for television programs in digital television broadcasting network

Cited By (11)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1921614B (en) * 2006-09-27 2010-06-23 华为技术有限公司 Method and system for media data scrambling
CN101569133B (en) * 2006-12-28 2014-02-26 英特尔公司 Protecting independent vendor encryption keys with a common primary encryption key
CN102027753A (en) * 2008-02-19 2011-04-20 索尼公司 Encryption system for satellite delivered television
CN102027753B (en) * 2008-02-19 2013-06-19 索尼公司 Encryption system for satellite delivered television
CN101583012B (en) * 2008-05-12 2011-08-03 北京视博数字电视科技有限公司 Method for realizing two-stage condition receiving system and front end and final end of two-stage condition receiving system
CN102111651A (en) * 2009-12-24 2011-06-29 北京视博数字电视科技有限公司 Method for recording program, method for broadcasting program, front end and terminal equipment
CN101815071A (en) * 2010-04-01 2010-08-25 北京数码视讯科技股份有限公司 Method, device and system for applying for digital certificate
CN101815071B (en) * 2010-04-01 2014-04-16 北京数码视讯科技股份有限公司 Method, device and system for applying for digital certificate
CN102387407A (en) * 2010-08-31 2012-03-21 国基电子(上海)有限公司 System and method for realizing broadcasting network conditional access (CA)
CN102263995A (en) * 2011-08-22 2011-11-30 广州长嘉电子有限公司 Simulcrypt-technology-based conditional access method and system
CN105141976A (en) * 2015-08-14 2015-12-09 湖南兆华世纪新媒体技术有限公司 Hierarchical encryption method for television programs in digital television broadcasting network

Also Published As

Publication number Publication date
CN100477784C (en) 2009-04-08

Similar Documents

Publication Publication Date Title
CN100477784C (en) Implementation method for replacing conditional receiving system in two stages
CA2173176C (en) Data security scheme for point-to-point communication sessions
US7706534B2 (en) Pay per minute for DVB-H services
CN106936770B (en) A kind of HLS index list encrypted antitheft catenary system and method
US8619983B2 (en) Digital TV conditional access system and method of using the same for transmitting and receiving digital data
US20010017920A1 (en) Secure distribution of video on-demand
US20110238991A1 (en) Content decryption device and encryption system using an additional key layer
WO2006109913A1 (en) Broadcasting content protection/management system
WO2014070679A1 (en) Systems and methods for securely providing streaming media content on-demand
CN101207794B (en) Method for enciphering and deciphering number copyright management of IPTV system
CN101202883B (en) System for numeral copyright management of IPTV system
WO2007106586A2 (en) Decryption key reuse in ancrypted digital data stream distribution systems
CN102340702A (en) IPTV (Internet protocol television) network playing system and rights management and descrambling method based on USB (Universal serial bus) Key
CN103281572B (en) The DVB conditional receiving device of integrated master data, normal data descrambling
CN101442660B (en) System for receiving download type digital television condition and dynamic download method thereof
CN101621664A (en) Method and system for managing digital rights
CA2856456C (en) Method, cryptographic system and security module for descrambling content packets of a digital transport stream
KR101175354B1 (en) System and method for securing content by using a number of conditional access systems
KR20060113091A (en) Conditional access system in digital receiver
CN100588244C (en) Method and system for implementing broadcasting network condition receiving
EP2373017A2 (en) Broadcast transceiver and pcmcia scrambler with reception limitation function implemented by using dvb-ci interface
JP2004208107A (en) Scrambled broadcast system, broadcast transmission device, and reception device
JP5613066B2 (en) Conditional reception system, conditional reception method, and conditional reception program
JP4569232B2 (en) VOD system
US20240056651A1 (en) Digital rights management using a gateway/set top box without a smart card

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C14 Grant of patent or utility model
GR01 Patent grant
CF01 Termination of patent right due to non-payment of annual fee
CF01 Termination of patent right due to non-payment of annual fee

Granted publication date: 20090408

Termination date: 20200929