WO2010127540A1

WO2010127540A1 - Method and system of television program distribution

Info

Publication number: WO2010127540A1
Application number: PCT/CN2009/075402
Authority: WO
Inventors: 惠毅; 徐明良
Original assignee: 中兴通讯股份有限公司
Priority date: 2009-05-04
Filing date: 2009-12-08
Publication date: 2010-11-11
Also published as: CN101552903A; CN101552903B

Abstract

The present invention discloses a method of television program distribution including that: a mobile terminal sends a program certificate authentication request corresponding to the requested program to a China Mobile Multimedia Broadcasting CMMB program distribution platform through an access point AP; the CMMB program distribution platform verifies a program digital certificate and the signature of the mobile terminal on the program digital certificate included in the program certificate authentication request and distributes an access code of the requested program to the mobile terminal after the verification passes. The present invention also discloses a system of television program distribution. Based on the present invention, television program distribution can be performed according to user's authorizations.

Description

Method and system for distributing television programs

The present invention relates to television program distribution technology, and more particularly to a method and system for distributing television programs. Background technique

With the gradual maturity of 3G networks and the improvement of the performance of mobile terminals, mobile TV services using mobile terminals to watch TV programs are developing rapidly. The portability of mobile terminals makes mobile TV services of mobile terminals more widely displayed than traditional TV services. Influence.

The mobile terminal TV service based on the China Mobile Multimedia Broadcasting (CMMB) solution is developing rapidly, and operators are increasingly investing in the operation of CMMB-based mobile terminal TV services. Users can enjoy on mobile terminals. To the wonderful TV show content. The difference in viewing requirements of type programs is also increasing. Operators need to effectively manage the distribution of mobile terminal TV programs, and need to distribute programs according to different types and permissions of users. There is no prior art solution for distributing television programs to legitimate mobile terminals based on the user's rights. Summary of the invention

In view of the above, an object of the present invention is to provide a method and system for distributing television programs, which can distribute television programs according to the authority of the user.

In order to achieve the above object, the technical solution of the present invention is achieved as follows:

The present invention provides a method for distributing a television program, the method comprising: When requesting the program, the mobile terminal sends a program certificate authentication request corresponding to the requested program to the China Mobile Multimedia Broadcasting CMMB program distribution platform through the access point AP;

The CMMB program distribution platform verifies the program digital certificate included in the program certificate authentication request and the signature of the program digital certificate by the mobile terminal, and after the verification is passed, according to the authority information in the program digital certificate, And transmitting an access code of the requested program to the mobile terminal through an AP.

The method further includes: before the sending, by the mobile terminal, the program certificate authentication request to the CMMB program distribution platform, the method further includes:

And when the mobile terminal requests the program, sending, by the AP, a program distribution request containing the program identifier of the requested program to the CMMB program distribution platform;

When the CMMB program distribution platform determines that the requested program exists according to the program identifier, the AP sends a program certificate providing request to the mobile terminal through the AP to acquire a program digital certificate of the requested program.

The program digital certificate in the program certificate authentication request is: a program digital certificate corresponding to the requested program that is pre-issued by the CMMB program distribution platform that the mobile terminal has queried locally to the mobile terminal;

The program digital certificate includes at least:

a mobile terminal certificate, configured to identify the identity of the mobile terminal;

The permission information indicates a receiving permission of the mobile terminal for the requested program;

Issuer signature, indicating the signature of the issuer of the program digital certificate. Verifying that the mobile terminal certificate is legal and valid, and if valid, the verification of the mobile terminal certificate is passed;

Verify that the issuer signature is correct, and if correct, the issuer's signature is verified; Whether the information is consistent, if they are consistent, the verification of the authority information is passed;

When the verification of the mobile terminal certificate, the issuer's signature, and the authority information is all passed, the verification of the digital certificate of the program is passed. Includes:

Verifying that the mobile terminal corresponding to the IMEI number in the signature is legal, and if it is legal, a risk certificate of the IMEI number is passed;

Verifying whether the local database of the CMMB program distribution platform contains the information of the mobile terminal, and if so, the verification of the mobile terminal information is passed;

When the verification of the IMEI number and the mobile terminal information is all passed, the verification of the signature of the mobile terminal to the program digital certificate is passed.

The rights information includes: a receiving permission of the mobile terminal for the requested program, a program identifier of the requested program, and/or a category or level of the requested program;

Correspondingly, the access code of the requested program is distributed to the mobile terminal according to the rights information, specifically: after the mobile terminal has the right to receive the requested program, the access code of the requested program is included in the program certificate authentication. In response, and distributed to the mobile terminal through the AP;

Correspondingly, the method further comprises: the mobile terminal receiving the program content of the requested program using the access code.

The program digital certificate further includes an AP certificate for identifying the identity of the AP. Correspondingly, the method further includes: adding an AP signature to the authentication request, and forwarding the template to the CMMB program distribution platform;

The CMMB program distribution platform parses the AP from the program certificate authentication request a certificate, and verifying whether the certificate is a legal certificate and whether the signature is correct; when the certificate is a legal certificate, and the signature of the file is correct, and the mobile terminal of the program digital certificate distribution platform determines that the mobile terminal has Receiving the requested program and distributing the access code to the mobile terminal via the UI.

The present invention also provides a television program distribution system, the system comprising: a mobile terminal, a UI, and a CMMB program distribution platform, wherein:

The mobile terminal, when requesting a program, is configured to send, to the CMMB program distribution platform, a program certificate authentication request corresponding to the requested program;

The CMMB program distribution platform is configured to verify a program digital certificate included in the program certificate authentication request and a signature of the program digital certificate by the mobile terminal, and after the verification is passed, according to the program digital certificate Authorization information, distributing an access code of the requested program to the mobile terminal;

And the AP is configured to forward the program certificate authentication request sent by the mobile terminal to the CMMB program distribution platform; and is further configured to forward the access code distributed by the CMMB program distribution platform to the mobile terminal.

And the mobile terminal transmitting a program distribution request for the program identification of the program to the CMMB program distribution platform;

Correspondingly, the CMMB program distribution platform is further configured to: when determining that the requested program exists according to the program identifier, send a program certificate providing request to the mobile terminal by using an AP, and obtain a program digital certificate of the requested program.

The CMMB program distribution platform is further configured to determine, according to the rights information included in the program digital certificate, that the mobile terminal has the right to receive after verifying the program digital certificate and the mobile terminal's signature of the program digital certificate After the requested program, the requested program will be connected. The input code is included in the program certificate authentication response, and is distributed to the mobile terminal by the AP; correspondingly, the mobile terminal is further configured to receive the program content of the requested program by using the access code.

In the television program distribution method and system of the present invention, the CMMB program distribution platform verifies the signature of the mobile terminal and the program digital certificate included in the program certificate authentication request of the requested program transmitted by the mobile terminal, and after the verification is passed, according to the program number The permission information in the certificate distributes the access code of the requested program to the mobile terminal, and the mobile terminal can receive the corresponding program content by using the access code. The above-mentioned verification of the signature of the mobile terminal and the verification of the program digital certificate can realize distributing the television program to the legitimate mobile terminal, and distributing the television programs with different rights to the mobile terminal having the corresponding signing authority.

In addition, the present invention ensures the security of television program distribution through the WAPI protocol; meanwhile, according to the rights of the mobile terminal to the program, that is, the authority information, the user has different rights to different programs; on the basis of satisfying the different needs of the program for the user The CMMB service operator can establish a corresponding relationship with the tariff package according to the permission information such as the program type (such as the service type) in the digital certificate of the program, thereby achieving refined operation and improving the experience of the mobile terminal user watching the mobile terminal television program. DRAWINGS

1 is a schematic flow chart of a method for distributing a television program according to the present invention;

2 is a schematic diagram of message interaction of a television program distribution process according to an embodiment of the present invention; FIG. 3 is a schematic diagram of a data structure of a program digital certificate according to an embodiment of the present invention;

Figure 4 is a block diagram showing the structure of a television program distribution system embodying the present invention. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS As shown in FIG. 1, a method for distributing a television program according to the present invention includes:

101: The mobile terminal sends an CMMB to the CMMB through an access point (AP, Access Point) when requesting the program. The program distribution platform transmits a program certificate authentication request corresponding to the requested program.

The program certificate authentication request includes a program digital certificate of the mobile terminal and a signature of the digital certificate of the program by the mobile terminal (the signature of the mobile terminal).

102: The CMMB program distribution platform verifies the signature of the mobile terminal and the program digital certificate included in the program certificate authentication request, and after the verification is passed, according to the authority information in the program digital certificate, the access code of the requested program is distributed to the mobile terminal.

It should be noted that the distribution scheme of the present invention can be implemented based on the Wireless Local Area Network Authentication and Privacy Infrastructure (WAPI), which can ensure the security of television program distribution. Contains the following steps:

Step 210: The mobile terminal starts the CMMB service.

For example, the user can start the CMMB service by selecting the CMMB service function option provided by the mobile terminal.

Step 220: The mobile terminal sends a program distribution request to the CMMB program distribution platform through the AP.

The program distribution request includes a program that the user needs to receive (view), that is, a program identification of the requested program.

Step 230: The CMMB program distribution platform determines whether there is a corresponding program according to the program identifier included in the program distribution request.

If yes, executing step 231, the CMMB program distribution platform sends a program certificate providing request to the mobile terminal through the AP, requesting the mobile terminal to provide a program digital certificate corresponding to the program, and then performing step 240;

If not, executing step 232, the CMMB program distribution platform sends a program distribution failure response to the mobile terminal through the AP, where the response may include a specific failure reason, if the request is not available. The program ends with this process.

Step 240: The mobile terminal sends a program certificate authentication request to the CMMB program distribution platform through the AP.

After receiving the program certificate providing request, the mobile terminal pre-issues the program digital certificate corresponding to the requested program in advance to the CMMB program distribution platform obtained by the local query, and then sends a program certificate authentication request to the CMMB program distribution platform through the AP. The request includes a program digital certificate corresponding to the requested program, and a signature of the digital certificate of the program by the mobile terminal.

The data structure of the program digital certificate is shown in Figure 3. The program digital certificate contains: Permission information: Indicates the mobile terminal's right to receive the program. The rights information includes: a mobile terminal's right to receive the requested program (whether or not it is entitled to receive), the program identification of the requested program, and/or the category or level of the requested program.

Mobile terminal certificate: It is used to identify the identity of the mobile terminal, including the public key of the mobile terminal and the validity period of the certificate. The mobile terminal certificate can be an X.509 v3 certificate or a GBW certificate (national standard substance certificate).

Issuer's signature: The signature of the issuer of the program digital certificate is generated by encrypting other fields in the program digital certificate using the private key owned by the issuer of the program digital certificate (the CMMB program distribution platform in this embodiment) The ciphertext.

Step 250: After receiving the program certificate authentication request sent by the mobile terminal, the CMMB program distribution platform verifies the program digital certificate included in the request and the signature of the mobile terminal, and if the verification is passed, step 260 is performed; if the verification fails, The program certificate authentication request is discarded, and the process ends.

The above verification operations on the program digital certificate include:

a: Verify that the mobile terminal certificate in the program digital certificate is legal and valid, for example: whether the certificate has been revoked, whether the certificate has expired, etc. The specific verification method can refer to document RFC3280. If valid, the verification passes.

b: Verify that the issuer's signature in the program's digital certificate is correct. If correct, the verification is passed.

It should be noted that, according to the principle of digital signature, the issuer signature is generated by encrypting other fields in the program digital certificate by using the private key owned by the issuer of the program digital certificate (the CMMB program distribution platform in this embodiment). In ciphertext, any modification to the program's digital certificate will result in a change in the issuer's signature value. Therefore, by verifying the correctness of the issuer's signature of the program digital certificate, it can be known whether the rights information contained in the program digital certificate is complete and true.

c: Verify that the permission information contained in the program digital certificate is consistent with the permission information (the contract information of the contract) stored in the local database, and if the agreement is the same, the verification is passed. This step is mainly performed to prevent the signing information of the mobile terminal from changing after the digital certificate is issued.

Only the verification of the above three items can be passed to determine the verification of the digital certificate of the program. The above verification operation on the signature of the mobile terminal is:

a. Verify that the mobile terminal corresponding to the IMEI number in the signature is legal, that is, verify that the IMEI number of the current mobile terminal is consistent with the IMEI number in the signature, and if yes, the verification is passed; b. verify whether the CMMB program distribution platform contains If the information of the mobile terminal is included, the certificate is passed.

Only the verification of the above two items can be passed to determine the verification of the signature of the mobile terminal.

Step 260: After the program digital certificate included in the program certificate authentication request and the signature verification of the mobile terminal are passed, the CMMB program distribution platform determines, according to the rights information included in the program digital certificate, whether the mobile terminal has the right to receive the requested program, such as a program. A:

If the privilege is received, step 261 is executed, and the CMMB program distribution platform sends the access code of the requested program to the mobile terminal by using the AP in the program certificate authentication response; If there is no permission to receive, step 262 is executed, and the CMMB program distribution platform sends a program distribution failure response to the mobile terminal through the AP, and the response may include a specific reason for the failure, such as the mobile terminal does not have the right to receive the program.

In addition, the CMMB program distribution platform may also include an access code of all programs that the mobile terminal has permission to receive in the program certificate authentication response to the mobile terminal.

According to the rights of the mobile terminal to the program, that is, the rights information, the user has different rights to different programs; on the basis of satisfying the different needs of the program, the CMMB service operator can according to the program type (such as the service type) in the program digital certificate. ) and other rights information, and the corresponding relationship with the tariff package, to achieve refined operation, improve the experience of mobile terminal users watching mobile TV programs.

Step 270: After receiving the program certificate authentication response, the mobile terminal parses out the program to be received, such as the access code of program A, and uses the access code to receive the content of the program.

In addition, the program digital certificate of the present invention may further include an AP certificate for identifying the identity of the AP, including: the public key of the AP and the validity period of the certificate; and the AP certificate may be an X.509 v3 certificate or a GBW certificate.

Correspondingly, the process shown in FIG. 2 may further include the following steps:

In step 240, the mobile terminal needs to send a program certificate authentication request to the CMMB program distribution platform through the AP. After receiving the program certificate authentication request sent by the mobile terminal, the AP signs the program certificate authentication request, that is, adds the AP in the program certificate authentication request. The signature is then sent to the CMMB program distribution platform for the program certificate authentication request containing the AP signature.

In step 250, when verifying the program digital certificate and the signature of the mobile terminal, the CMMB program distribution platform also needs to verify the AP certificate and the AP signature: After receiving the program certificate authentication request, the CMMB program distribution platform parses the AP certificate. And verifying the AP certificate and the AP signature. If the AP certificate is a legal certificate and the AP signature is correct, the mobile terminal accesses the CMMB program distribution platform through the legal AP, and the verification succeeds. If the AP certificate is not valid, or the AP signature is incorrect, the CMMB program distribution platform considers that the mobile terminal accesses the CMMB program distribution platform through the illegal AP, and the verification fails, and the current process ends. When the AP certificate is invalid or the AP signature is incorrect, the CMMB program distribution platform does not send the access code of the requested program to the mobile terminal, so as to prevent the access code from being acquired by the illegal AP.

For the method of verifying the AP certificate, refer to the document RFC3280. If the AP certificate is a legal certificate, the beta CMMB program distribution platform can verify the AP signature by using the AP's public key contained in the AP certificate.

It should be noted that if the program certificate authentication request includes the AP certificate and the AP signature, the signature of the mobile terminal, the mobile terminal certificate, the issuer signature, and the rights information must be verified when the program digital certificate and the signature of the mobile terminal are verified. When the authentication of the AP certificate and the AP signature are all passed, the verification of the digital certificate of the program and the signature of the mobile terminal can be determined, and the subsequent steps are continued.

In order to implement the above distribution method, the present invention provides a distribution system. As shown in FIG. 4, the system includes: a mobile terminal 10, a CMMB program distribution platform 20, and an AP 30, wherein: the mobile terminal 10, when requesting a program, uses Sending a program certificate authentication request corresponding to the requested program to the CMMB program distribution platform 20;

The CMMB program distribution platform 20 is configured to verify the program digital certificate included in the program certificate authentication request and the signature of the program digital certificate by the mobile terminal, and after the verification is passed, according to the authority information in the program digital certificate, The access code of the requested program is distributed to the mobile terminal 10;

The AP 30 is configured to forward the program certificate authentication request sent by the mobile terminal 10 to the CMMB program distribution platform 20; and is further used to forward the access code distributed by the CMMB program distribution platform 20 to the mobile terminal 10.

The mobile terminal 10 transmits a program certificate authentication request to the CMMB program distribution platform 20. And further used to send, by the AP 30, a program distribution request containing the program identifier of the requested program to the CMMB program distribution platform 20;

Correspondingly, the CMMB program distribution platform 20 is further configured to: when determining that the requested program exists according to the program identifier, send a program certificate providing request to the mobile terminal 10 through the AP 30 to obtain a program digital certificate of the requested program.

The CMMB program distribution platform 20, after verifying the verification of the program digital certificate and the signature of the mobile terminal to the program digital certificate, is further configured to determine, after determining, according to the rights information included in the program digital certificate, that the mobile terminal 10 is entitled to receive the requested program, The access code of the requested program is included in the program certificate authentication response, and is distributed to the mobile terminal 10 through the AP 30;

Correspondingly, the mobile terminal 10 is further configured to receive the program content of the requested program using the access code.

The above is only the preferred embodiment of the present invention and is not intended to limit the scope of the present invention.

Claims

Claim

A method for distributing a television program, the method comprising:

When requesting the program, the mobile terminal sends a program certificate authentication request corresponding to the requested program to the China Mobile Multimedia Broadcasting CMMB program distribution platform through the access point AP;

The method for distributing a television program according to claim 1, wherein the method further comprises: before the mobile terminal transmits a program certificate authentication request to the CMMB program distribution platform, the method further comprises:

The method for distributing a television program according to claim 1, wherein the program digital certificate in the program certificate authentication request is: a pre-issued to the mobile terminal by the CMMB program distribution platform obtained by the mobile terminal locally. a program digital certificate corresponding to the requested program;

The program digital certificate includes at least:

Issuer signature, indicating the signature of the issuer of the program digital certificate.

A method of distributing a television program according to claim 3, wherein said CMMB The program distribution platform verifies the program digital certificate, including:

Verifying that the mobile terminal certificate is legal and valid, and if valid, the verification of the mobile terminal certificate is passed;

Verify that the issuer's signature is correct. If it is correct, the issuer's signature is verified; if the information is consistent, if the agreement is consistent, the authorization information is verified;

When the verification of the mobile terminal certificate, the issuer's signature, and the authority information is all passed, the verification of the digital certificate of the program is passed.

The method for distributing a television program according to claim 1, wherein the CMMB verifies whether the mobile terminal corresponding to the IMEI number in the signature is legal, and if it is legal, a risk certificate of the IMEI number passes;

6. A method of distributing a television program according to claim 3, characterized in that

Correspondingly, the method further includes: the mobile terminal receiving the request using the access code Seeking the program content of the program.

The method for distributing a television program according to claim 4, 5 or 6, wherein the program digital certificate further comprises an AP certificate for identifying the identity of the AP;

Correspondingly, the method further includes: adding an AP signature to the authentication request, and forwarding the template to the CMMB program distribution platform;

The CMMB program distribution platform parses the AP certificate from the program certificate authentication request, and verifies whether the AP certificate is a legal certificate and whether the AP signature is correct; when the AP certificate is a legal certificate, and The signature of the AP is correct, and the program digital certificate distribution platform determines that the mobile terminal has the right to receive the requested program, and distributes the access code to the mobile terminal through the AP.

8. A television program distribution system, the system comprising: a mobile terminal, an AP, and a CMMB program distribution platform, wherein:

9. The television program distribution system according to claim 8, wherein:

The mobile terminal sends a program certificate authentication request to the CMMB program distribution platform a program distribution request for program identification of a program;

10. The television program distribution system according to claim 9, wherein the CMMB program distribution platform further uses the verification of the program digital certificate and the signature of the mobile terminal on the program digital certificate. After determining, according to the rights information included in the program digital certificate, that the mobile terminal is entitled to receive the requested program, the access code of the requested program is included in the program certificate authentication response, and is distributed to the mobile terminal through the AP;

Correspondingly, the mobile terminal is further configured to receive the program content of the requested program by using the access code.