KR100622936B1 - System for managing notes of authentication - Google Patents

Abstract

The present invention relates to a certificate management system for enabling the use of a certificate stored in a user's terminal in the set-top box. The public certificate management system includes a terminal for transmitting a packet including identification information and public certificate information about a set-top box input from a user, and a database storing information about the identification information and an IP address for the set-top box. An integrated information relay configured to read identification information of the set-top box from the packet received from the terminal, retrieve the IP address corresponding to the read-out set-top box identification information from the database, and transmit the packet to the retrieved IP address. The server has a set-top box which receives the packet from the integrated information relay server, reads the certificate from the transmitted packet, and stores it in an internal memory, so that the set-top box can use the certificate stored in the terminal.

According to the present invention, the certificate stored in the user's terminal can be uploaded to the set-top box to be used in the set-top box.

Set Top Box, TV Home Banking, Certificate

Description

Certified Certificate Management System {SYSTEM FOR MANAGING NOTES OF AUTHENTICATION}

1 is a block diagram showing the overall certificate management system according to a preferred embodiment of the present invention.

FIG. 2 is a block diagram illustrating a configuration of an integrated information relay server in the certificate management system of FIG. 1.

3 is a flowchart sequentially explaining the operation of the certificate management program installed in the terminal of the certificate management system according to an embodiment of the present invention.

4 is a flowchart sequentially explaining the operation of the integrated information relay server of the certificate management system according to an embodiment of the present invention.

5 is a flowchart sequentially illustrating the operation of the certificate management daemon program installed in the set-top box of the certificate management system according to an embodiment of the present invention.

Figure 6 is a flow chart illustrating the overall operation of the certificate management system according to a preferred embodiment of the present invention.

7 is a flowchart illustrating an overall operation of a certificate management system according to another embodiment of the present invention.

8 is a block diagram showing the overall certificate management system according to another embodiment of the present invention.

FIG. 9 is a flowchart illustrating an overall operation of a public certificate management system according to the embodiment of FIG. 8.

10 is a flowchart sequentially illustrating a partner of a public certificate management system according to another embodiment of the present invention.

11 is a flowchart sequentially showing the operation of a public certificate management system according to another embodiment of the present invention.

 <Explanation of symbols for the main parts of the drawings>

100, 700: TV

110, 710: Set Top Box

120, 720: user's terminal

130, 730: integrated information relay server

132: database

740: subscriber management server

750: IP address allocation server

The present invention relates to a certificate management system and a method thereof, and more particularly, to a certificate management system and a method for enabling a digital set-top box to use a certificate stored in a PC.

Recently, as communication technology has been developed, a payment system using a mobile communication terminal such as a mobile phone or a PDA has been proposed and used, and various services using a digital TV have been proposed as the digital broadcasting technology has been developed.

In this regard, Korean Patent Application No. 10-2002-49719 relates to a "home shopping method using a digital set-top box," which uses the digital set-top box to purchase information of a product appearing when viewing a predetermined VOD. At the same time, it offers a way to make home shopping possible. In the above application, the payment method may be selected among payment by credit card, payment by Giro, and payment by TV home banking.

In addition, Korean Utility Model Registration No. 20-325343 relates to a "digital set-top box," which enables automatic reservation recording of broadcast programs and interworking with the Internet, but also allows VOD services. The present invention discloses a digital set-top box that can be securely checked, securely managed, and enables discount coupons or points, cash and credit payments.

As described above, with the development of digital broadcasting technology, various services such as TV home banking using TV or electronic commerce using TV have been proposed. However, in order to provide such services, authentication of a user must be preceded. In general, users store and manage official certificates on a recording medium such as a PC or a CD. However, there is no method of authenticating a user using an existing public certificate on TV home banking or TV commerce.

Therefore, the present applicant intends to propose a method in which the user's PC and the set-top box can be used together with one certificate.

An object of the present invention for solving the above problems is to provide a certificate management system that can be used in the set-top box of the certificate stored in the user's terminal or PC.

A feature of the present invention for achieving the above-described technical problem relates to a certificate management system for enabling the use of a certificate stored in the user's terminal in the set-top box,

 A terminal for transmitting a packet including identification information and public certificate information about the set-top box input from the user to the outside;

And a database storing identification information about the set-top box and information on the IP address, reading identification information about the set-top box from a packet received from the terminal, and reading an IP address corresponding to the read-out set-top box identification information. An integrated information relay server for retrieving from a database and transmitting the packet to the retrieved IP address;

The set-top box receives the packet from the integrated information relay server and reads the certificate from the transmitted packet and stores it in an internal memory, so that the set-top box can use the certificate stored in the terminal.

Certified certificate management system according to another feature of the present invention,

A terminal for transmitting a packet including identification information of the set-top box input from the user and IP address and certificate information to the outside;

An integrated information relay server for reading the set-top box IP address from the packet received from the terminal and transmitting the packet to the read set-top box IP address;

The set-top box receives the packet from the integrated information relay server and reads the certificate from the transmitted packet and stores it in an internal memory, so that the set-top box can use the certificate stored in the terminal.

Certified certificate management system according to another feature of the present invention,

A terminal for transmitting a packet including identification information and public certificate information about the set-top box input from the user to the outside;

Subscriber management server for storing and managing the identification information for the set-top boxes and the MAC address corresponding to the identification information of each set-top box,

An IP address assignment server that assigns an IP address to each MAC address of the set-top box and stores and manages the assigned IP address information;

The MAC address of the set-top box is retrieved from the subscriber management server by using the set-top box identification information read from the packet received from the terminal, and is assigned to the set-top box from the IP address assignment server using the retrieved MAC address. An integrated information relay server for retrieving an IP address and transmitting a packet received from the terminal to the retrieved IP address;

The set-top box receives the packet from the integrated information relay server and reads the certificate from the transmitted packet and stores it in an internal memory, so that the set-top box can use the certificate stored in the terminal.

Integrated information relay server according to another aspect of the present invention,

An interface unit for receiving a predetermined packet from an external terminal or set-top box or transmitting a predetermined packet to the set-top box,

A database storing set top box identification information and IP address information read from packets transmitted from the set top box through the interface unit;

And a control unit for reading set-top box identification information from a packet received from an external terminal, retrieving an IP address corresponding to the read set-top box identification information from the database, and transmitting a packet received from the terminal to the retrieved IP address. By doing so, it is possible to transmit a packet including a public certificate transmitted from the terminal to the set-top box.

Hereinafter, the configuration and operation of a public certificate management system according to a preferred embodiment of the present invention with reference to the accompanying drawings will be described in detail.

1 is a block diagram showing an overall certificate management system according to a preferred embodiment of the present invention. Referring to FIG. 1, the public certificate management system includes a set-top box (hereinafter referred to as STB) 110 connected to a television 100, a terminal 120 capable of accessing the Internet such as a computer, a personal digital assistant (PDA), and the like. An integrated information relay server 130 is connected to the set-top box or the terminal via the Internet. Hereinafter, each component described above will be described in detail.

First, as shown in FIG. 2, the integrated information relay server 130 includes an interface unit 134, a database 132, and a control unit 136, and is configured to identify a specific certificate that is transmitted from a user terminal. Will be sent to the box. Hereinafter, each part which comprises the said integrated information relay server is demonstrated concretely.

The interface unit 134 receives a predetermined packet from an external terminal or a set top box or transmits a predetermined packet to the set top box.

The database 132 stores and manages information on the set-top box identification information and the IP address read from the packet transmitted from the set-top box through the interface unit. Information on the set-top box stored in the database includes the STB identification information corresponding to the STB serial number, IP (Internet Protocol) address assigned to each STB, the STB identification information is a smart card ID mounted on each STB Can be used.

The control unit 136 controls the overall operation of the integrated information relay server, reads the set-top box identification information from a packet received from an external terminal, and obtains an IP address corresponding to the read set-top box identification information from the database. Search and transmit the packet received from the terminal to the searched IP address.

On the other hand, the user's terminal is installed with a certificate management program for transmitting the stored public certificate to a specific set-top box. Hereinafter, the operation of the certificate management program will be described sequentially with reference to FIG. 3.

First, when a certificate transmission request from the user occurs (step 300), the set-top box identification information and the user password are input from the user (steps 310 and 320). In this case, the user inputs after confirming identification information output on the screen of the set-top box. Next, if the input password matches the pre-stored password (step 330), read the official certificate stored in the terminal (step 340), and encrypts the set-top box identification information to be transmitted to the integrated certificate and the authentication certificate integrated information Send to the relay server (step 350).

Next, an operation of the controller of the integrated information relay server will be described in detail with reference to FIG. 4.

First, the integrated information relay server receives identification information and IP address information from a specific set-top box (step 400), and stores and manages it in a database (step 410). When receiving a packet including set-top box identification information and public certificate information from the user's terminal (step 420), the set-top box identification information is read from the received packet, and the IP address corresponding to the read-out set-top box identification information is read from the database. Search (step 430). After transmitting the received packet to the set-top box corresponding to the retrieved IP address (step 440), the process ends.

In order to receive the public certificate from the integrated information relay server, a certificate management daemon program must be installed in the set-top box. Hereinafter, a certificate management daemon program operating in the set-top box will be described in detail with reference to FIG. 5.

First, the set-top box displays the set-top box identification information on the screen of the television in response to a request from the user (step 500), and then transmits the unique identification number and IP address information of the set-top box to the integrated information relay. Send to server (step 510). Next, a packet is received from the integrated information relay server (step 520), and the public certificate is read from the received packet, and stored and managed in an internal memory (step 530).

Hereinafter, with reference to Figure 6, the operation of the certificate management system according to a preferred embodiment of the present invention as a whole will be described.

First, the set-top box displays the set-top box identification information on the screen in response to a request from the user (step 200), and then transmits the identification information and the IP address of the set-top box to the integrated information relay server (step 210). The server stores the received identification information and the IP address in the database (step 220). On the other hand, the user terminal receives the identification information and the user password of the set-top box to transmit the certificate from the user (step 230), and is requested to transmit the certificate. Accordingly, the terminal transmits the set-top box identification information and the public certificate encrypted packet to the integrated information relay server (step 240). The integrated information relay server reads the set-top box identification information from the received packet, retrieves the IP address of the set-top box corresponding to the identification information from the database (step 250), and sends the received packet to the set-top box of the retrieved IP address. Retransmit (step 260). The set-top box reads the certificate from the received packet and stores and manages it in the internal memory (step 270).

Hereinafter, with reference to Figure 7, the configuration and operation of the certificate management system according to another embodiment of the present invention will be described in detail. Authorized certificate management system according to the present embodiment is composed of a user's terminal, set-top box and integrated information relay server.

Referring to FIG. 7, in response to a user's request, the set-top box first displays a unique identification number and assigned IP address information of the set-top box on the screen of the television (step 600). On the other hand, the user checks the unique identification number and IP address information of the set-top box displayed on the screen of the TV, and inputs the unique identification number and IP address information to the terminal and requests the transmission of the authentication certificate to the set-top box. (Step 610). In response to the request, the terminal encrypts the unique identification number, IP address and public certificate of the set-top box and transmits the stored packet to the integrated information relay server (step 620). The integrated information relay server reads the IP address from the received packet and retransmits the packet to the set-top box corresponding to the read IP address (step 630). The set top box reads the certificate from the received packet and stores and manages it in the internal memory (step 640).

8 and 9, the configuration and operation of the certificate management system according to another embodiment of the present invention will be described in detail. In the certificate management system according to the present embodiment, as shown in FIG. 8, a user's terminal 720, a television 700, a set-top box 710 connected to the television, an integrated information relay server 730, and a subscriber. A management server (Subscriber Management Server; 740) and an IP address assignment server (750).

Here, the subscriber management server 740 and the IP address assignment server 750 are servers installed in an internal system such as a broadcaster connected to the set-top box and the network. The subscriber management server includes a unique identification number of the set-top box and MAC address information of each set-top box. In addition, the IP address assignment server 750 generally uses a Dynamic Host Configuration Protocol (DHCP) server, and allocates an IP address to each set-top box, and stores IP address information assigned to MAC addresses of each set-top box. And manage.

Hereinafter, with reference to Figure 9, the operation of the certificate management system according to the present embodiment will be described in detail.

First, the set-top box displays the identification information of the set-top box on the screen of the television according to the user's request (step 800). On the other hand, the user who has identified the identification information displayed on the screen of the TV enters the identification information into his terminal, requests the transmission of the authentication certificate to the set-top box (step 810), and the authentication certificate at the request from the user After encrypting the identification information and the public certificate of the set-top box to be transmitted, packetized and transmitted to the integrated information relay server (step 820). The integrated information relay server reads identification information of the set-top box from the packet, retrieves MAC address information of the set-top box corresponding to the read identification information from the subscriber management server (step 830), and allocates the IP address. The IP address information allocated to the set-top box corresponding to the MAC address is retrieved from the server (step 840). Next, the integrated information relay server retransmits the received packet to the set-top box of the retrieved IP address (step 850), and the set-top box reads the certificate from the received packet and stores and manages it in the internal memory (step 860). ).

Hereinafter, the configuration and operation of the official certificate management system according to another embodiment of the present invention will be described in detail.

10 is a flowchart sequentially illustrating the operation of the public certificate management system according to the present embodiment. This embodiment may be applied to a case where the set-top box is connected to the integrated information relay server and the internal network, and the user terminal is connected to the Internet and has a public IP address.

In the certificate management system according to the present embodiment, the integrated information relay server receives the set-top box identification information from the set-top box and maintains the current connection using the set-top box identification information as a key when a socket connection is made. Here, the set top box identification information uses a smart card ID in the set top box.

In addition, the integrated information relay server receives the set-top box identification information from the user terminal and the socket connection is made.

On the other hand, the user terminal is provided with a daemon program that can accept the socket of the set-top box, and executes the daemon program according to the request from the integrated information relay server, when receiving a connection request from the set-top box and the socket directly set The connection is made and the certificate is sent.

The operation of the system according to the present embodiment will be described in detail with reference to FIG. 10.

First, the set-top box transmits its identification information to the integrated information relay server to make a socket connection (step 1100), and displays the identification information on the screen of the television (step 1110).

The integrated information relay server maintains the current connection using the set-top box identification information in which the socket connection is made (step 1120).

On the other hand, the user terminal transmits the set-top box identification information to be transmitted to the integrated information relay server to form a socket connection (step 1130).

On the other hand, the integrated information relay server forms a socket connection with the user terminal having a public IP address, and then transmits the IP address information of the user terminal to the set-top box corresponding to the set-top box identification information received from the user terminal; In step 1140, the user terminal requests execution of a daemon program that can accept the socket of the set-top box (step 1150).

The user terminal which is requested to execute the daemon program from the integrated information relay server executes the daemon program and waits for a connection request from the set-top box (step 1160).

The set-top box receiving the public IP address information of the user terminal forms a direct socket connection with the user terminal using the public IP address information (step 1170), and uses a socket connection directly formed between the set-top box and the user terminal. Send the public certificate (step 1180).

Hereinafter, the configuration and operation of the public certificate management system according to another embodiment of the present invention will be described in detail with reference to FIG. 11. The public certificate management system according to the present embodiment may be applied when both the set-top box and the user terminal are connected to an internal network in a firewall.

 First, the set-top box transmits its identification information to the integrated information relay server to establish a socket connection (step 1200), and displays the identification information on the screen of the television (step 1210).

The integrated information relay server maintains the current connection using the set-top box identification information in which the socket connection is made (step 1220).

On the other hand, the user terminal transmits the set-top box identification information to be transmitted to the integrated information relay server to form a socket connection (step 1230).

Meanwhile, the integrated information relay server forming a social connection with the user terminal searches for a socket connection with the set-top box corresponding to the set-top box identification information received from the user terminal (step 1240), and the socket with the retrieved set-top box. And a socket with the user terminal (step 1250).

Through this process, through the socket formed between the user terminal and the set-top box, and transmits the certificate (step 1260).

In the certificate management system according to the present embodiment, the connection between the integrated information relay server and the set-top box may be made first, or the connection between the integrated information relay server and the user terminal may be made first.

Although the present invention has been described above with reference to preferred embodiments thereof, this is merely an example and is not intended to limit the present invention, and those skilled in the art do not depart from the essential characteristics of the present invention. It will be appreciated that various modifications and applications which are not illustrated above in the scope are possible. For example, in an embodiment of the present invention, a user authentication procedure may be further added in a user terminal, and a password and a process for packets transmitted and received in the system may be modified in various forms to increase the efficiency of the system. can do. And differences relating to such modifications and applications should be construed as being included in the scope of the invention defined in the appended claims.

According to the present invention, by uploading the certificate stored in the user's computer to the set-top box can be used together in the set-top box, the user can conveniently TV home banking or TV electronic commerce.

Claims (7)

A terminal for transmitting a packet including set-top box identification information and public certificate information input from a user to the outside; And a database storing information on the set-top box identification information and the IP address, reading the set-top box identification information from the packet received from the terminal, and retrieving the IP address corresponding to the read-out set-top box identification information from the database. Integrated information relay server for transmitting the packet to the retrieved IP address; A set-top box which receives the packet from the integrated information relay server, reads the certificate from the transmitted packet, and stores it in an internal memory; Equipped with a public certificate management system to enable the set-top box to use the public certificate stored in the terminal.  A terminal for transmitting a packet including set-top box identification information, an IP address, and a certificate information input from a user to the outside; An integrated information relay server for reading a set-top box IP address from the packet received from the terminal and transmitting the packet to the read set-top box IP address; A set-top box which receives the packet from the integrated information relay server, reads the certificate from the transmitted packet, and stores it in an internal memory; Equipped with a public certificate management system to enable the set-top box to use the public certificate stored in the terminal.  A terminal for transmitting a packet including set-top box identification information and public certificate information input from a user to the outside; A subscriber management server for storing and managing the set-top box identification information and the MAC address corresponding to the identification information of each set-top box; An IP address allocation server for allocating an IP address to each MAC address of the set-top box and storing and managing the allocated IP address information; The MAC address of the set-top box is retrieved from the subscriber management server by using the set-top box identification information read from the packet received from the terminal, and is assigned to the set-top box from the IP address assignment server using the retrieved MAC address. An integrated information relay server searching for an IP address and transmitting a packet received from the terminal to the found IP address; And A set-top box which receives the packet from the integrated information relay server, reads the certificate from the transmitted packet, and stores it in an internal memory; Equipped with a public certificate management system to enable the set-top box to use the public certificate stored in the terminal. An interface unit for receiving a predetermined packet from an external terminal or set-top box or transmitting a predetermined packet to the set-top box; A database storing set top box identification information and IP address information read from a packet transmitted from the set top box through the interface unit; A control unit for reading set top box identification information from a packet received from an external terminal, retrieving an IP address corresponding to the read set top box identification information from the database, and transmitting a packet received from the terminal to the retrieved IP address; Including, the integrated information relay server for transmitting a packet including a public certificate transmitted from the terminal to the set-top box. In the certificate management system for transmitting a certificate from the user terminal to the set-top box, The certificate management system further includes an integrated information relay server, The user terminal is characterized in that it comprises a daemon program that can accept the socket of the set-top box, The integrated information relay server, Receive the set-top box identification information from the set-top box and form a socket connection with the set-top box, or receive the set-top box identification information from the user terminal and form a socket connection with the user terminal, Transmitting the IP address of the user terminal to the set-top box corresponding to the set-top box identification information received from the user terminal, The user terminal executes the daemon program according to the request of the integrated information relay server to wait for a connection request from the set-top box,  The user terminal and the set-top box is a public certificate management system, characterized in that for transmitting a public certificate after forming a direct socket connection.   In the certificate management system for transmitting a certificate from the user terminal to the set-top box, The certificate management system further includes an integrated information relay server, The integrated information relay server, Receive the set-top box identification information from the set-top box and form a socket connection with the set-top box, receive the set-top box identification information from the user terminal, and form a socket connection with the user terminal, It is characterized in that the socket for the set-top box corresponding to the set-top box identification information received from the user terminal and the socket of the user terminal,  Certified certificate management system, characterized in that for transmitting a certificate using a socket formed between the user terminal and the set-top box. The system of any one of claims 1 to 3, 5 and 6, wherein the set top box identification information is ID information of a smart card of the set top box.

Images