KR101860129B1 - Security device for media player and streaming security system including the same - Google Patents

Abstract

The present invention discloses a security device of a player and a streaming security system including the same. A streaming security system plays back content and includes video tags, 3 ^rd party plugins (for example, Flash, Silverlight, PPAPI plugin, NPAPI plugin, ActiveX, etc.) provided by the HTML5 protocol, and Reproducing means composed of any one of the applications; And an operating system and a program of an environment for driving the playback means in a stream section of the content, and provides a security function for the content, and when the program registered in advance with respect to the playback means is executed, Controlling said playback means to stop playback of said content if said operating system is running under a condition previously set in relation to said playback means; stopping the stream for said content; And a second function for performing at least one of displaying a notification window so as to recognize the security function, and the security device is installed in the user terminal.

Description

TECHNICAL FIELD [0001] The present invention relates to a security device of a player and a streaming security system including the secure device.

BACKGROUND OF THE INVENTION 1. Field of the Invention [0002] The present invention relates to security technology of contents, and more particularly, to a security device of a player protecting streaming or playing content and a streaming security system including the same.

In recent years, with the growth of the Internet and smart terminals, streaming services for playing contents on the Internet in real time are increasing. The increase of such streaming service is highlighting the problem of security for contents.

Meanwhile, HTML5 (Hypertext Markup Language 5) is a next-generation web language standard. Cross-browsing is supported. It does not need to install various ActiveX and Plug-In based web browsers. And freely reproduce the content.

However, video players and video tags of this standard, especially HTML5, have an advantage of providing interoperability regardless of the types of web browsers and operating systems, but they are not suitable for paid contents service because they are vulnerable to security. Therefore, there is a demand for a security technique for contents when reproducing contents through video players and video tags of standard standards.

On the other hand, DRM (Digital Rights Management) technology is an encryption technology for prevention of illegal copying of contents and management of usage rights, thereby preventing users from illegally using or distributing copyrighted contents.

Such DRM technology is applied not only to recently downloaded contents but also to streamed contents.

However, video players and video tags of standard specifications have a disadvantage in that they can not reproduce DRM-applied contents. Therefore, there is a demand for a technique capable of reproducing DRM-applied content in a video player and a video tag of standard specifications.

SUMMARY OF THE INVENTION It is an object of the present invention to provide a security device of a player for playing streamed content and a streaming security system including the same.

SUMMARY OF THE INVENTION The present invention has been made to solve the above-mentioned problems occurring in the prior art, and it is an object of the present invention to provide a security device of a player supporting a DRM-enabled content in an environment where DRM (Digital Rights Management) .

The streaming security system of the present invention includes a video tag, a 3 ^rd party plug-in (for example, Flash, Silverlight, PPAPI plug-in, NPAPI plug-in, ActiveX, etc.) And an application; And a security device installed in the user terminal, the security device providing at least one of a first security function and a second security function for the content, monitoring an operating system and a program of an environment driving the playback device in a stream section of the content; Wherein the first security function forcibly terminates the previously registered program when a program registered in advance with respect to the reproducing means is executed, Performing at least one of controlling the playback means to stop playback of the content when the operating system is started under a set condition, stopping the stream for the content, and displaying a notification window for the user to recognize .

The security device of the player of the present invention may be a video tag, a 3 ^rd party plug-in (for example, Flash, Silverlight, PPAPI plug-in, NPAPI plug-in, A stream module for streaming the content to one playback means and confirming playback rights for the content; And a security module for monitoring an operating system and a program of an environment for driving the reproducing means in a stream section of the content and providing at least one of a first security function and a second security function for the content, 1 security function forcibly terminates the pre-registered program when a program registered in advance with respect to the reproducing means is executed, wherein the second security function is a function for allowing the operating system And controlling the playback means to stop the playback of the content when the drive is started, stopping the stream for the content, and displaying a notification window for the user to recognize.

A streaming security system of the present invention includes: a security device for temporarily storing streamed content, confirming a playback right for the content, decrypting the content to be reproducible, and streaming the decrypted content in real time; A video tag provided in the HTML5 protocol, a 3 ^rd party plug-in (for example, flash, silverlight, PPAPI plug-in, NPAPI plug-in, ActiveX, etc.) And playback means for playing back the content to be streamed, wherein the security device is installed in a user terminal.

As described above, the present invention can protect the streamed content from the screen capture program and playback obstruction elements.

In addition, the present invention supports a DRM (Digital Rights Management) content to be played by a player because the DRM content is decrypted and streamed by confirming the playback right of the content.

In addition, since the present invention temporarily stores transmitted contents in a cache and streams the contents, the amount of contents requested to the streaming server can be reduced to reduce traffic.

1 is a block diagram illustrating a security device of a player and a streaming security system including the same according to an embodiment of the present invention.
2 is a diagram for explaining a security system for streaming NON-DRM contents.
3 is a diagram illustrating a security system for streaming DRM content.
4 is a block diagram illustrating an internal structure of a stream module according to an embodiment of the present invention.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings. It is to be understood that the terminology used herein is for the purpose of description and should not be interpreted as limiting the scope of the present invention.

The embodiments described in the present specification and the configurations shown in the drawings are preferred embodiments of the present invention and are not intended to represent all of the technical ideas of the present invention and thus various equivalents and modifications Can be.

Although the player's security device and the streaming security system according to the embodiment of the present invention exemplify playing the content in the web browser 20, the present invention is not limited thereto, and the player may be a playback means for playing the content in the user terminal . Here, the player may be a video tag or a 3 ^rd party plug-in provided in the HTML5 protocol, and may be downloaded and installed in the user terminal. For example, a 3 ^rd party plugin is Flash, Silverlight, PPAPI plugin, NPAPI plugin, ActiveX.

1 is a block diagram illustrating a security device of a player and a streaming security system including the same according to an embodiment of the present invention.

1, the streaming security system of the present invention includes a streaming server 10 for transmitting content, a player 22 for playing content in the web browser 20, a security device 30 for protecting the content to be played back, And a management server 40.

The streaming server 10 encrypts the content and transmits the content to the user terminal 50 in order to prevent interception of the transmission period. For example, the streaming server 10 may be configured to transmit content through Secure Sockets Layer (SSL) / Hypertext Transfer Protocol (HTTP).

The streaming server 10 may be configured to include at least one of playback right information for a block including a plurality of key frames for the content and playback right information for the key frame in the content and to stream. For example, the streaming server 10 transmits playback rights information and copyright information to DRM (Digital Rights Management) packed contents. Here, the reproduction right information may include a reproduction right and a reproduction period.

The player 22 may be a video tag or a 3 ^rd party plug-in (for example, Flash, Silverlight, PPAPI plug-in, NPAPI plug-in, ActiveX) provided in the HTML5 protocol. In addition, the player 22 may be configured as an application installed in the user terminal.

The security device 30 includes an environment for driving the player 22, an environment of an operating system (OS) of the user terminal in the service level of the streaming server 10 for protecting the content to be reproduced, installed in the user terminal 50 And controls to block the screen capture of the playback disturbance component and the content according to the monitoring result. Here, the service level may be defined as a section for streaming contents. The security device 30 may be configured to be activated when the web browser 20 is executed or may be configured to be activated in the content stream period.

The security device 30 and the player 22 confirm mutual security status.

The security device 30 stops the content stream if the security status of the player 22 is not confirmed and the player 22 stops the content playback if the security status of the security device 30 is not confirmed. Here, the security state may include at least one of a communication state, an on-off state, a synchronization state, etc. between the security device 30 and the player 22.

For example, the security device 30 confirms the security status of the player 22, provides a security status signal to the streaming server 10, and the streaming server 10 transmits the content according to the security status signal at the service level . Here, the streaming server 10 may be configured to stop the content transmission when a security status signal is not received from the security device 30 at the service level or when the communication state between the security device 30 and the player 22 is lost.

The security device 30 analyzes the metadata of the program executed in the operating system (OS) of the user terminal 50 to determine whether to execute the playback disturbance element and the screen capture program, to block the reproduction interference element, And terminates screen capture through remote access and virtual operating system. For example, the security device 30 recognizes the screen capture program 54 through metadata such as file name, process name, manufacturer, version, and language of the executed program, forcibly terminates the screen capture program, And to provide the history and the playback history to the management server 40.

The security device 30 analyzes at least one of the CPU utilization pattern, the network usage rate pattern, and the disk I / O pattern of the user terminal 50 to determine whether the program suspected to be a screen capture program is executed. If a suspicious program is detected, A notification window may be displayed on the terminal, and the CPU utilization pattern, the network utilization pattern, and the disk I / O pattern information may be provided to the management server. For example, the security device 30 may be configured to recognize suspicious capture programs or playback disturbance elements 52 by comparing patterns previously sensed with patterns previously stored in the pattern DB 36. [

The management server 40 stores the CPU usage pattern, the network usage rate pattern, and the disk input / output pattern information of the user terminal 50 in the big data DB 42 in the big data format. For example, the management server 40 may be configured to analyze the big data to determine a suspicious program as a screen capture program, and to provide a blocking signal for stopping the content transmission to the streaming server 10.

The security device 30 can be configured to control the player 22 to insert a watermark for tracking the outflow of the content into the content. For example, the security device 30 may monitor the environment of the operating system and configure the player to insert a watermark into the content if a suspicion of a capture program occurs. Here, the watermark may be login information, an IP address, a MAC address, or a predetermined mark as user-specific information.

The security device 30 supports a cache function for temporarily storing contents for traffic reduction, checks the reproduction right for the contents protection, controls the contents access according to the reproduction right confirmation, and decrypts the contents when the reproduction right is confirmed , And the content is streamed to the player 22. For example, the security device 30 may be configured to stream content to the player 22 in a Secure Sockets Layer (SSL) manner to prevent interception of the transmission period.

The security device 30 includes a stream module 32 and a security module 34 (see FIG. 3).

The stream module 32 stores the content transmitted from the streaming server 10, confirms the reproduction right for the content, decodes the content to be reproducible by the player, and streams the decrypted content to the player. The stream module 32 stores contents in a cache on a block-by-block basis including a plurality of key frames, confirms the reproduction right for each block of the stored contents, or confirms reproduction right for each key frame. Here, the streaming server 10 may be configured to include at least one of the reproduction right information for the block including a plurality of key frames and the reproduction right information for the key frame in the content to be streamed.

The security module 34 monitors an operating system and a program executed in the user terminal 50 in a stream section of the content, and the security module 34 corresponds to at least one of a case in which a pre-registered program is executed and a case in which the operating system is operated under preset conditions And to perform at least one of forcibly terminating the program to be executed, stopping the stream for the content, and displaying a notification window for the user to recognize.

2 is a diagram for explaining a security system for streaming NON-DRM contents.

Referring to FIG. 2, the streaming server 10 streams NON-DRM contents through SSL / HTTP in response to a streaming request of NON-DRM contents (S1).

The security device 30 and the player 22 check the mutual security status (S2). The security device 30 stops the content stream if the security status of the player 22 is not confirmed and the player 22 stops the content playback if the security status of the security device 30 is not confirmed.

The security device 30 provides a security status signal to the streaming server 10 (S3). Here, if the security status signal is not received from the security device 30 at the service level, the streaming server 10 determines that the security device 30 is abnormal and stops the stream of the content.

The security device 30 monitors the environment of the OS of the user terminal for protecting the content to be reproduced and controls the screen capture program 54 for the content to block the reproduction disturbance element 52 and the content according to the monitoring result (S4).

The security device 30 analyzes the metadata of the program executed in the operating system of the user terminal 50 to primarily monitor whether the screen capture program 54 is executed or not, , A network utilization pattern, and a disk I / O pattern to monitor whether a program suspected to be a screen capture program and a playback obstruction element are executed.

When the security device 30 detects the screen capture program, it forcibly terminates the program, and when the at least one of the CPU usage pattern, the network usage rate pattern, and the disk input / output pattern of the user terminal 50 is driven under preset conditions, And stopping the stream for the content and displaying a notification window for the user to recognize.

3 is a diagram illustrating a security system for streaming DRM content.

Referring to FIG. 3, the streaming server 10 streams the DRM content in response to a streaming request of the DRM content (S1). Digital rights management (DRM) can be defined as digital rights management information for preventing illegal copying of content and managing usage rights. In the embodiment of the present invention, DRM can be described as including an index or a mark that defines authority for playback. For example, the streaming server 10 may include at least one of playback right information for each block including a plurality of key frames and playback right information for each key frame, and may include the content.

The stream module 32 of the security device 30 stores the content transmitted from the streaming server 10 in the cache, confirms the playback right for the content, and when the playback right is confirmed, the player 22 can reproduce the content , And streams the decrypted content to the player 22 in an SSL manner (S2). Here, the stream module 32 stores contents in a cache on a block-by-block basis including a plurality of key frames, and confirms playback permission of the stored contents on a block-by-block basis. In addition, the present embodiment can be configured to check reproduction authority for each key frame.

The security device 30 and the player 22 check the mutual security status (S2). The security device 30 stops the content stream if the security status of the player 22 is not confirmed and the player 22 stops the content playback if the security status of the security device 30 is not confirmed.

The security device 30 provides a security status signal to the streaming server 10 (S3). Here, if the security status signal is not received from the security device 30 at the service level, the streaming server 10 determines that the security device 30 is abnormal and stops the stream of the content.

The security module 34 monitors an operating system (OS) installed in the user terminal 50 and a program to be executed. The security module 34 controls to block the playback interrupt factors and the screen capture for the content according to the monitoring result (S4).

The security module 34 analyzes the metadata of the program executed in the operating system of the user terminal 50 and monitors whether or not the screen capture program is executed. The security module 34 analyzes the CPU usage pattern of the user terminal 50, Patterns and disk I / O patterns are analyzed and the screen capture program monitors the execution of suspicious programs.

When the security module 34 detects the screen capture program, the security module 34 forcibly terminates the program and when the at least one of the CPU usage pattern, the network usage rate pattern, and the disk input / output pattern of the user terminal 50 is driven under preset conditions, And stopping the stream for the content and displaying a notification window for the user to recognize.

4 is a block diagram showing the internal structure of the stream module 32 according to the embodiment of the present invention.

4, the stream module 32 changes the origin address (Origin URL (Uniform Resource Locator)) of the content requested to be accessed by the player 22 to the virtual location address (virtual URL) And a back office part 70 for controlling the streaming of the content corresponding to the streaming request of the player 22. [ The application part 60 and the back office part 70 may be configured to have the same level or different levels of physical hierarchical relationship.

In general, a location address (URL) may include a communication protocol, a delimiter, a domain, a directory, a file name, and a file format, and an origin URL means information having a physical address on the network. The virtual location address is a modified location address of the original location address generated by an arbitrary rule.

The application part 60 may include an origin URL receiving unit 62, an authenticating unit 64, and a driving and virtual URL generating unit 66.

The original location address receiver 62 receives the original location address of the content corresponding to the access request information and delivers it to the authentication unit 64. The authentication unit 64 performs validity authentication of the original location address corresponding to the access request do. Then, the driving and virtual URL generating unit 66 provides a start command for the content stream to the back office part 70, and generates and supplies the virtual position address corresponding to the original position address to the player 22. [

The back office part 70 includes a streamer 72, a front-end part 74, a cache 76, a DRM manager 78, and a decryption part 79.

The front-end unit 74 receives the streaming request of the player 22 and streams the content to the player 22. [ Here, the player 22 can request streaming to the front-end unit 74 using the virtual location address.

The cache 76 stores the content streamed from the streaming server 10 in units of blocks including at least one key frame. A key frame refers to a designated frame which is the most central among the frames representing the continuous motion of the content expressed on the screen, such as the start frame and the end frame of the motion. Keyframes within the content may exist at regular time intervals, intermediate frames between keyframes may be processed softly, and the resulting scrolling may be processed naturally.

The content may include DRM information. The DRM information is intended to protect the rights and interests of the content provider by preventing unauthorized use of the digital content, and may include information for preventing illegal copying and tampering. DRM can be defined as digital rights management information. More specifically, the DRM may be described as including an index or a mark that defines authority for playback in connection with an embodiment of the present invention.

The content block may include a certain amount of content data including an encryption key and a key frame, and one or a plurality of key frames may be included in each block.

The streamer 72 receives the streaming request of the player 22 from the front-end unit 74, requests content streaming from the streaming server 10, and transmits the content transmitted from the streaming server 10 to the cache 76 ).

The DRM manager 78 confirms the playback authority for the content stored in the cache 76 and delivers the content for which the playback right is determined to be valid to the decryption unit 79. [

If the DRM manager 78 determines that the playback right is valid, the decryption unit 79 decrypts the content using an encryption key that is matched on a block-by-block or key-frame basis, and provides the decrypted content to the front-end unit 74 do.

The front-end unit 74 streams the content to the player 22 in an SSL encryption scheme to prevent interception of the transmission period.

Meanwhile, the streaming security system of the present invention includes a web browser 20 for displaying contents to be distributed on-line, an operating system installed in the user terminal and a program to be executed, A security device (30) that performs at least one of blocking streaming of the content and forcibly terminating the program if it is at least one of a first state in which the terminal is driven and a second state in which a pre- ). ≪ / RTI >

Here, the content may be defined as including at least one of text, image, audio, video (moving picture), and the predetermined condition includes at least one of a CPU usage pattern, a network utilization pattern, and a disk input / output pattern of a user terminal .

10: streaming server 20: web browser
22: Player 30: Security device
40: management server 50: user terminal

Claims (15)

Reproducing means for reproducing the content and composed of any one of Video Tag, 3 ^rd party plug-in and application provided in the HTML5 protocol; And
Monitors an operating system and a program of an environment for driving the reproducing means in a stream section of the content, analyzes metadata of a program executed in an operating system of the user terminal, recognizes a screen capture program corresponding to a program registered in advance, And provides a first security function for the user terminal, recognizes a playback interruption factor by analyzing whether the CPU usage pattern, the network usage rate pattern, and the disk input / output pattern of the user terminal are driven under predetermined conditions, And a security device installed in the user terminal,
Wherein the first security function forcibly terminates the previously registered program when the previously registered program is executed in association with the reproducing means,
Wherein the second security function controls the playback means to stop playback of the content if the CPU usage pattern of the user terminal, the network utilization pattern, and the disk input / output pattern of the user terminal are driven with the preset conditions, , Stopping the stream for the content, and displaying a notification window for the user to recognize,
The security device controls the playback device to insert a watermark for tracing an outflow of the content into the content if the condition for performing the second security function is satisfied, Furthermore,
Wherein the watermark includes user-specific information. The method according to claim 1,
The security device and the playback device check the mutual security status, and the mutual security status may be determined as a result of checking at least one of a communication status, an on-off status, and a synchronization status between the security device and the playback device And if the security status is not verified, the security device aborts the stream for the content and the playback means aborts playback. delete The method according to claim 1,
The security device further provides the management server with at least one of a watermark, a CPU utilization pattern, a network utilization pattern, and a disk input / output pattern of the user terminal if the condition for performing the second security function is satisfied,
Wherein the management server analyzes pattern information of the user terminal as big data and manages the pattern information. The method according to claim 1,
Wherein the security device is activated together when the playback means is activated. The method of claim 1, wherein
Wherein the security device further blocks screen capturing through the virtual operating system if the condition for performing the second security function is satisfied. Streaming a content to a playback means of any one of a Video Tag, a 3 ^rd party plug-in, and an application provided in the HTML5 protocol, storing the content in a block unit composed of one or more key frames, A stream module for confirming a reproduction right per unit and the key frame; And
Monitors an operating system and a program of an environment for driving the reproducing means in a stream section of the content, analyzes metadata of a program executed in an operating system of the user terminal, recognizes a screen capture program corresponding to a program registered in advance, And a security function for recognizing a playback interruption factor and providing a second security function by analyzing whether the CPU usage pattern, the network usage rate pattern, and the disk input / output pattern of the user terminal are all driven under preset conditions Module,
Wherein the first security function forcibly terminates the previously registered program when the previously registered program is executed in association with the reproducing means,
Wherein the second security function controls the playback means to stop playback of the content if the CPU usage pattern of the user terminal, the network utilization pattern, and the disk input / output pattern of the user terminal are driven with the preset conditions, , Stopping the stream for the content, and displaying a notification window for the user to recognize,
The security module controls the playback means to insert a watermark for tracing an outflow of the content into the content if the condition for performing the second security function is satisfied, Furthermore,
Wherein the watermark includes user-specific information. delete 8. The method of claim 7,
Wherein the stream module encrypts the content to prevent interception of the transmission period and transmits the encrypted content to the playback means. A method of reproducing a content, comprising the steps of: storing a content to be streamed in a block unit composed of one or more key frames; confirming permission to reproduce the content by the block unit and the key frame; decoding the content to be reproducible; A streaming security device; And
And playback means which is composed of any one of video tag, 3 ^rd party plug-in and application provided in the HTML5 protocol and reproduces the content streamed from the security device,
The security device is installed in a user terminal, monitors an operating system and a program of an environment for driving the reproducing means in a stream section of the content, analyzes metadata of a program executed in the operating system of the user terminal, Recognizing the corresponding screen capture program and providing a first security function for the content, analyzing whether the CPU usage pattern, the network usage rate pattern, and the disk input / output pattern of the user terminal are driven under predetermined conditions, And provides a second security function,
The security device controls the playback device to insert a watermark for tracing an outflow of the content into the content if the condition for performing the second security function is satisfied, Furthermore,
Wherein the watermark includes user-specific information. delete delete 11. The method of claim 10,
Wherein the secure device encrypts the content and transmits the content to the playback means to prevent interception of a transmission interval. 11. The method of claim 10,
Wherein the streaming server for streaming the content to the security device includes at least one of playback right information for a block including a plurality of key frames and playback right information for the key frame in a header of the content, . delete

Images