KR101110672B1 - Host security module virtualization system under downloadable conditional access system - Google Patents

Abstract

The present invention relates to a system and method for virtualizing a host security module in a DCAS environment to secure security between client modules that are downloaded and operated on a host when receiving a plurality of different CASs in an online manner to manage eligibility. By applying a virtual machine under the operating system of the host and configuring the system so that a plurality of operating systems independently operate based on the virtual machine, the CAS client module operates independently of the security module and the CAS client module in each operating system. It is effective to ensure high security between modules.

CAS, DCAS, Client Module, Host, Set Top Box, Digital Cable Broadcast

Description

HOST SECURITY MODULE VIRTUALIZATION SYSTEM UNDER DOWNLOADABLE CONDITIONAL ACCESS SYSTEM}

The present invention relates to a system and method for virtualizing a host security module in a downloadable conditional access system (DAS) environment, and in particular, between client modules downloaded and operated to a host when receiving a plurality of different CASes in an online manner to manage eligibility. The present invention relates to a host security module virtualization system and method in a DCAS environment to secure security.

CAS (Conditional Access System), which is currently used in cable broadcasting systems and satellite broadcasting systems, is a system that allows users to receive only the authorized contents by encrypting the broadcast contents so that the broadcast contents can be viewed. .

In the conventional system for receiving a cable broadcast, most of the CA system uses a cable card in the form of a smart card or a PCMCIA card, and provides a CAS implemented in such a physical card offline to be mounted on a host.

In the case of CAS provided through such a physical card, it takes a long time to reissue the card due to a defect or security reasons, and thus, it is difficult to quickly deal with a defect or security and incurs additional costs.

In addition, since a different device is used depending on a company that develops and provides a CAS, when a plurality of different CASs are used for fair competition, a separate physical device needs to be added to a host.

As a result, the existing CAS method has a high dependency on the CAS company and causes a lot of costs for card issuance and management.

Therefore, the necessity of introducing a downloadable CAS (DCAS) has been increased to induce such a slow response, a high cost resolution, and a fair competition, and various studies for the introduction of the DCAS have been conducted.

DCAS is a technology that enables CAS to be downloaded online to a host (ie, set-top box) safely, and is being developed to enhance safety and convenience while complying with current Open Cable standards.

The basic features of the DCAS are to securely download a secure client module, that is, a CAS client module, to a security module mounted on the host, and to securely manage the eligibility for CA.

On the other hand, in the DCAS environment, it is essential to increase the security by changing the CAS client module according to periodic or event occurrences. For fairness, a plurality of CAS client modules must be able to be used simultaneously.

In other words, it is possible to provide services while updating CAS client modules for each broadcaster as needed, and to allow one host to support a plurality of broadcasters. In the case of a host using an existing physical card, a dedicated host specialized for each broadcasting company is used, but in a DCAS type host that can download and use a CAS client module, one host can cope with a variety of operators. In order to download a plurality of broadcaster CAS client modules and select a required service, a desired service can be used through the corresponding CAS client module. This may increase the user's freedom of service selection in a situation where local service providers and local service providers may be mixed, and also increase the universality of the host.

However, since this method was not considered when using an existing physical card, it is necessary to cope with a plurality of services by using a method of operating a plurality of CAS client modules as if a plurality of applications are run in the configuration of the host provided. Should be.

When a plurality of different CAS client modules simultaneously operate on a single operating system, the CAS client modules share the resources of the single operating system with each other, and the shared resources lower the security of each CAS client module. This will occur.

Therefore, when a host is required to simultaneously execute a plurality of CAS client modules to support a plurality of services, a new type of system capable of increasing security between corresponding CAS client modules is required.

An object of the embodiments of the present invention for improving the above-mentioned problem is to apply a virtual machine to the operating system of the host under the configuration of the system to operate a plurality of operating systems independently of each other based on the virtual machine, and then the security module in each operating system And the CAS client module to operate independently, to provide a host security module virtualization system and method in the DCAS environment to secure the security between the CAS client modules.

Another object of the embodiments of the present invention is to apply a hypervisor on a physical resource of a host to execute a plurality of operating systems in a virtualized manner, and separate the CAS client module for each operating system to fundamentally block shared resource generation between client modules. To provide a host security module virtualization system and method in a DCAS environment.

Another object of the embodiments of the present invention is to implement a host security module virtualization system in a DCAS environment to increase reliability according to an operating system error by operating a different CAS client module for each operating system independently by executing a plurality of operating systems through a virtualization method; To provide a way.

In order to achieve the above object, the host security module virtualization system in a DCAS environment according to an embodiment of the present invention includes a physical resource layer of the host; A virtual machine layer configured on the physical resource layer; An operating system layer including a plurality of operating systems each independently executed using virtualized resources provided by the virtual machine layer; And an application layer on which a security module application for operating and downloading each CAS operating module independently of each operating system of the operating system layer is installed.

The virtual machine layer is configured as a virtualization emulator that is directly installed and executed in the physical resource layer of the host, rather than a separate operating system, and virtualizes the resources of the physical resource layer so that a plurality of operating systems can operate. Do it.

The operating system is an embedded OS applied to a host for receiving digital cable broadcasting, and a plurality of identical operating systems may be installed.

In the application layer, all applications applied to the host for receiving the digital cable broadcast may be installed for each OS, and these may be service-only applications of a service provider supporting each.

In the operating system layer and the application layer, each operating system and an application layer according to the same are executed at the same time, and the operating system and the application are preferably selected according to the user's selection information.

Host security module virtualization method in a DCAS environment according to another embodiment of the present invention is to install a virtual machine in the physical resource layer of the host, a plurality of operating systems on the virtual machine, CAS client module for each operating system A host configuration step of installing a security module application for downloading and executing; And a host operation step of virtualizing the resources of the physical resource layer and providing the resources to the respective operating systems, each of the operating systems operating independently and executing a security module application installed in the corresponding operating system.

The host configuring step may further include installing applications for providing a service according to a host operation for each operating system.

Host security module virtualization system and method in a DCAS environment according to an embodiment of the present invention after applying a virtual machine to the operating system of the host and configure the system so that a plurality of operating systems independently operate based on the virtual machine, each By operating the security module and the CAS client module independently in the operating system, it is possible to secure a high security between the CAS client modules.

A host security module virtualization system and method in a DCAS environment according to an embodiment of the present invention apply a hypervisor on a physical resource of a host to execute a plurality of operating systems in a virtualized manner, and separate and operate a CAS client module for each operating system. By blocking the generation of shared resources among client modules, it is possible to securely support multiple services in a download-type CAS environment. Through this, it is possible to select services from various service providers and ensure universality of the host. It has an effect.

Host security module virtualization system and method in a DCAS environment according to an embodiment of the present invention by running a plurality of operating systems independently through a virtualization method to operate different CAS client modules for each operating system to reduce the possibility of operating system errors and security according to operating system errors This has the effect of rethinking performance reliability.

BRIEF DESCRIPTION OF THE DRAWINGS The above and other objects, features and advantages of the invention will become more apparent from the following detailed description of the present invention when taken in conjunction with the accompanying drawings.

FIG. 1 shows an example of a digital cable broadcasting system in a DCAS environment. As shown, a headend system 20 of an arbitrary service provider providing a service to a user or a wide area user in a predetermined region, and the headend. It consists of the host 40 of the user connected via the system 20 and the cable network 30. The illustrated host 40 is a device generally known as a set top box, and is called a host 40 in a cable broadcasting system.

The head-end system 20 includes an authentication server 21 for securely providing a CAS client module to the host 40 by using an external trusted certification authority 10 for authentication of the host 40, and the host. The key management server 22 which manages all the key information generated in the mutual authentication process between the 40 and the headend system 20, the billing server 23 which manages the information about billing, and after authentication is completed. A download server 24 that delivers the CAS client module to the host 40 and a Cable Modem Termination System (CMTS) 25 for actual communication.

The host 40 connected to the headend system 20 and the cable network 30 performs authentication with the authentication server 21 of the headend system 20 and accordingly results in the DCAS client module 46. It includes a security module 45 to download and selectively restore the scrambled broadcast signal provided by the head-end system 20 by the CAS according to the receiving authority.

In this DCAS environment, the security module 45 of the host 40 performs an authentication process with the headend system 20 of the service provider to which the host 40 subscribes to provide the corresponding headend system 20. It is used while updating the CAS client module 46.

On the other hand, for this authentication process, in general, the authentication server 21 and the key management server 20 of the head-end system 20 may need information about the host 40 in advance, the specific service provider The security module 45 of the host 40 may be configured exclusively for the service provider so as to be specialized in the CAS client module 46 provided by the headend system 20 of the host 40.

This is because the service provided by the digital cable system has been made by regional service providers divided by region, and by using such a dedicated host, the existing host cannot be used as it is when a user moves a service. A subscription process and a host replacement were required.

However, according to the demand for diversification of services and the arrival of wide-area providers, or according to the demand for universal use of the host according to the movement, the necessity of a configuration that enables a single host to cope with a plurality of service providers is increasing day by day.

Therefore, there is a need for an environment in which a security module application must receive a plurality of CAS client modules from different service providers and execute them simultaneously.

FIG. 2 shows a system configuration for executing a plurality of CAS client modules received from a plurality of operators using a host system currently provided, and is configured on the physical resource layer 51 of the host 50 as shown. In the host operating system installed in the OS layer 52, applications for service support corresponding to the application layer are installed. The security module application 53, which is one of the applications operating in the corresponding operating system, receives the plurality of CAS client modules 54 and 55 and operates them simultaneously to provide a service.

A plurality of service providing applications for supporting a plurality of service providers may be installed on the operating system layer 52, and one of the plurality of CAS client modules 54 and 55 may be used to switch a service desired by a user. . To this end, the security module application 53 must manage a plurality of CAS client modules 54 and 55 at the same time, and share the resources of the OS layer 50 to execute these individual CAS client modules 54 and 55 in common. Will be used.

That is, in a host system using a single operating system, a limited resource is inevitably shared between a plurality of CAS client modules 54 and 55 that are downloaded and operated by a plurality of security module applications 53. Independence for each CAS client module 54, 55 by sharing cannot be maintained at the operating system level.

3 illustrates a CAS operating state at a software level according to the system configuration shown in FIG. 2. In the software model 60 of the host as illustrated, a security module application 62 running on a single operating system is operated. Since the plurality of CAS client modules 63 and 64 are performed in a single process 61, when the process 61 is hacked, the state change such as authentication or eligibility of the CAS client modules 63 and 64 is hacked. Information can be inferred through mutual relations, thus reducing security.

Operating system resource sharing between these CAS client modules can be a serious security threat to DCAS that requires the highest level of security at the software level. Service sharing is difficult.

4 illustrates a host system according to an embodiment of the present invention for completely solving this problem.

4 is configured to configure a plurality of operating systems and to operate only one CAS client module for each operating system in order to prevent a plurality of CAS client modules from sharing operating system resources of mutual hosts.

As shown, the host 100 includes a physical resource layer 110, a virtual machine layer 120 configured on the physical resource layer 110 to virtualize the physical resources and provide the virtual resources to a plurality of operating systems. An operating system layer configured with a plurality of operating systems 130 and 140 operating by using resources of the physical resource layer 110 virtually provided by the virtual machine layer 120, and each operating system 130 and 140 of the operating system layer. The security layer applications 131 and 141 and CAS client modules 132 and 142 installed and executed respectively on the application layer are configured.

In the application layer, service applications for supporting a service of a service provider corresponding to each operating system 130 and 140 may be installed.

That is, by allowing a plurality of operating systems to operate at the same time on one host and each operating system does not share resources at the operating system level, it is possible to configure a secure DCAS support host that can cope with a plurality of service providers.

In order to perform this virtualization, that is, hypervisor function, a new type of host-only virtualization machine suitable for the characteristics of limited host-based systems must be configured. In general, such a hypervisor is mainly used in server-class equipment to use a plurality of different large operating systems, and a solution for this cannot be directly applied to equipment with limited hardware such as a host. In particular, in the case of such a hypervisor, a plurality of different operating systems are used in a single device, so that the same or similar operating system is separated from an operating system of the present invention. It is not used to increase security.

However, in the embodiment of the present invention, the highest level of security in this manner, focusing on the fact that the application running on each operating system does not share operating system resources with each other due to the complete division of processes according to the individual installation and operation of the operating system. This ensures the independence of CAS client module execution in a DCAS environment that must be guaranteed first. That is, it operates in a manner of installing a plurality of the same operating system, and if necessary, it is possible to install a plurality of similar operating systems with different versions, a plurality of similar operating systems specialized for a specific service may be installed, and in some cases, different operating systems may be installed. have. However, it is preferable that the same two operating systems are basically installed, and dedicated applications specialized for the service are installed for each operating system and applied to operate in each service.

On the other hand, the performance of the main core applied to the host is continuously improving, and since the design for the hypervisor is applied to the high-performance core that is the prototype of the main core, the hypervisor technology is limited to the limited functions and uses of the host. According to the virtual machine can be implemented for the virtualization of the physical resources of the host.

There are currently similar virtualization methods such as installing a virtual machine on the base operating system and adding a guest operating system, but this is for the limited use of the guest operating system, and the resources not only share the base operating system but also the basic operating system. It is not suitable for securing reliability and independence of execution of a plurality of CAS client modules that need to restore a large amount of scrambled broadcast signals at high speed in view of a large operating system load and a decrease in overall service performance.

Accordingly, as shown in FIG. 1, after the virtual machine layer 120 is directly built on the physical resource layer 110, operating system 130 of a level at which a service support application for an individual service provider can operate thereon. It is most suitable to configure the 140 in the operating system layer 140, through which it is possible to ensure the security of the complete CAS client module (132, 142).

FIG. 5 illustrates a software model 200 of a host according to an embodiment of the present invention, and provides a virtualization emulator 210 operating in a virtual machine as shown to virtualize physical resources so that they are not duplicated in each operating system. The configuration of the security module applications 221 and 231 independently performed by the independent processes 220 and 230 of each operating system and the CAS client modules 222 and 232 operated therefrom may be visually confirmed.

Therefore, by applying a virtual machine to a host to operate a plurality of CASs completely independently from a host rather than using a plurality of different operating systems on a single hardware, a service of a plurality of service providers can be supported even in a DCAS environment. It is possible to provide hosts with the highest level of security, which in turn enables the host to be generalized.

In the above described and illustrated with respect to preferred embodiments according to the present invention. However, the present invention is not limited to the above-described embodiments, and various changes and modifications may be made by those skilled in the art without departing from the scope of the present invention. .

1 is a configuration diagram of a digital cable broadcasting system to which the downloadable CAS method is applied.

2 is a conceptual diagram illustrating a hardware configuration when a plurality of CAS client modules using an existing host is applied.

3 is a conceptual diagram illustrating a software model when a plurality of CAS client modules using an existing host is applied.

4 is a conceptual diagram illustrating a hardware configuration when a plurality of CAS client modules using a host according to an embodiment of the present invention is applied.

5 is a conceptual diagram illustrating a software model when a plurality of CAS client modules according to an embodiment of the present invention is applied.

Claims (11)

A physical resource layer of the host; A virtual machine layer configured on the physical resource layer; An operating system layer including a plurality of operating systems each independently executed using virtualized resources provided by the virtual machine layer; Including an application layer in which a security module application that operates independently for each operating system of the operating system layer to download and execute the CAS client module is installed. The virtual machine layer is configured as a virtualization emulator that is directly installed and executed in the physical resource layer of the host, rather than a separate operating system, and virtualizes the resources of the physical resource layer so that a plurality of operating systems can operate. Host security module virtualization system in the DCAS environment, characterized in that. delete The host security module virtualization system of claim 1, wherein the operating system is an embedded OS applied to a host for receiving a digital cable broadcast. The host security module virtualization system of claim 1, wherein all the applications applied to the host for receiving the digital cable broadcast are installed for each operating system in the application layer. 2. The host security of claim 1, wherein the operating system layer and the application layer are simultaneously executed by each operating system and the application layer, and a use cloud system and an application are selected according to user selection information. Modular Virtualization System. The host security module virtualization system of claim 1, wherein the virtual machine layer includes a virtualization aerator for separating and providing resources by different processes for each operating system of the operating system layer. The host security module virtualization system of claim 1, wherein the operating system layer is installed and operated at the same time by two operating systems for the same host. The host security module virtualization system of claim 1, wherein the application layer is installed with a different operator application for each operating system of the operating system layer. A host configuration step of installing a virtual machine in a physical resource layer of the host, installing a plurality of operating systems on the virtual machine, and installing a security module application for downloading and executing a CAS client module for each operating system; The virtual machine virtualizes the resources of the physical resource layer and provides resources to the respective operating systems. Each operating system operates independently and includes a host operation step of executing a security module application installed in the corresponding operating system. The host configuration step of the host security module virtualization method in the DCAS environment, characterized in that further comprising the step of installing applications for providing a service according to the host operation for each operating system. delete The method of claim 9, wherein in the host operation, one of the operating systems is selected according to user selection information for providing a service, and a service corresponding to the operating system is provided according to execution of a corresponding security module application and applications for providing a service. Host Security Module Virtualization Method in DCAS Environment.

Images