WO2017006773A1

WO2017006773A1 - Receiver, transmitter, information processing device, and data processing method

Info

Publication number: WO2017006773A1
Application number: PCT/JP2016/068677
Authority: WO
Inventors: 淳北原
Original assignee: ソニー株式会社
Priority date: 2015-07-07
Filing date: 2016-06-23
Publication date: 2017-01-12

Abstract

The present invention pertains to a receiver, a transmitter, an information processing device, and a data processing method that make it possible to collect a more accurate viewing history. The receiver performs a control for: receiving the broadcast waves of a digital broadcast in which an IP transmission scheme is used; acquiring an authentication key transmitted by the broadcast waves; calculating a message authentication code on the basis of the authentication key and viewing history information pertaining to the viewing history of content transmitted by the broadcast waves; and transmitting the message authentication code, together with the viewing history information, to a viewing history server that collects viewing history information. The present feature can be applied, for example, to a television receiver that supports the IP transmission scheme.

Description

Reception device, transmission device, information processing device, and data processing method

The present technology relates to a receiving device, a transmitting device, an information processing device, and a data processing method, and in particular, a receiving device, a transmitting device, an information processing device, and a method that can collect more accurate viewing history. The present invention relates to a data processing method.

In the broadcast field, operations related to viewing history, such as collecting and analyzing content viewing history by users, may be performed. For example, a technique for transmitting viewing history regularly or when necessary is disclosed (for example, see Patent Document 1).

JP 2009-278651 A

By the way, since a technical method for performing operations related to viewing history has not been established, a proposal for collecting more accurate viewing history has been requested when viewing history is collected.

The present technology has been made in view of such a situation, and makes it possible to collect more accurate viewing history when collecting viewing history.

A receiving apparatus according to a first aspect of the present technology includes a receiving unit that receives a broadcast wave of a digital broadcast using an IP (Internet Protocol) transmission method, an acquisition unit that acquires an authentication key transmitted by the broadcast wave, Based on the authentication key and viewing history information related to the viewing history of the content transmitted on the broadcast wave, a calculation unit that calculates a message authentication code, together with the viewing history information, the message authentication code is converted into the viewing history. And a control unit that performs control to transmit the information to a viewing history server that collects information.

The receiving device according to the first aspect of the present technology may be an independent device, or may be an internal block constituting one device. The data processing method according to the first aspect of the present technology is a data processing method corresponding to the above-described receiving device according to the first aspect of the present technology.

In the receiving device and the data processing method according to the first aspect of the present technology, a broadcast wave of a digital broadcast using an IP transmission method is received, an authentication key transmitted by the broadcast wave is acquired, and the authentication key A message authentication code is calculated based on the viewing history information related to the viewing history of the content transmitted on the broadcast wave, and the viewing history information is collected together with the viewing history information and the message authentication code. Control to send to the server is performed.

The information processing device according to the second aspect of the present technology includes viewing history information related to the viewing history of the content transmitted from the receiving device that receives the content, an authentication key from the transmitting device that transmits the content, and the Based on the acquisition unit for acquiring the first message authentication code calculated from the viewing history information, the authentication key transmitted from the transmitting device, and the viewing history information, the second message authentication code is obtained. A calculation unit that calculates, a comparison unit that compares the first message authentication code and the second message authentication code to verify the first message authentication code, and The information processing apparatus includes a processing unit that processes the viewing history information according to a verification result.

The information processing apparatus according to the second aspect of the present technology may be an independent apparatus or may be an internal block constituting one apparatus. The data processing method according to the second aspect of the present technology is a data processing method corresponding to the information processing apparatus according to the second aspect of the present technology described above.

In the information processing device and the data processing method according to the second aspect of the present technology, the viewing history information related to the viewing history of the content and the transmission for transmitting the content transmitted from the receiving device that receives the content. A first message authentication code calculated from an authentication key from the device and the viewing history information is acquired, and based on the authentication key transmitted from the transmitting device and the viewing history information, a second A message authentication code is calculated, the first message authentication code is compared with the second message authentication code, the first message authentication code is verified, and the verification result of the first message authentication code In response, the viewing history information is processed.

A transmission device according to a third aspect of the present technology includes: a generation unit that generates an authentication key to be provided to a reception device that receives content; and a viewing history server that collects viewing history information regarding the viewing history of the content; A transmitting unit that transmits the authentication key together with the content to a plurality of receiving devices by a broadcast wave of digital broadcasting using an IP transmission method, and a providing unit that provides the authentication key to the viewing history server; It is a transmitter provided with.

The transmission device according to the third aspect of the present technology may be an independent device, or may be an internal block constituting one device. A data processing method according to the third aspect of the present technology is a data processing method corresponding to the transmission device according to the third aspect of the present technology described above.

In the transmission device and the data processing method according to the third aspect of the present technology, an authentication key for providing to a receiving device that receives content and a viewing history server that collects viewing history information related to the viewing history of the content Is generated, and the authentication key is transmitted to the plurality of receiving devices together with the content by broadcast waves of digital broadcasting using the IP transmission method, and the authentication key is provided to the viewing history server .

According to the first to third aspects of the present technology, more accurate viewing history can be collected.

It should be noted that the effects described here are not necessarily limited, and may be any of the effects described in the present disclosure.

It is a figure showing the composition of the 1 embodiment of the transmission system to which this art is applied. It is a figure which shows the structural example of a transmitter. It is a figure which shows the structural example of a receiver. It is a figure which shows the functional structural example of a control part. It is a figure which shows the structural example of a viewing-and-listening history server. It is a figure which shows the protocol stack of the IP transmission system to which this technique is applied. It is a figure explaining the flow of collection of viewing history information (CDM). It is a figure which shows the relationship between a key and ID. It is a figure explaining the 1st encryption process of an authentication key. It is a figure explaining the 1st decoding process of an authentication key. It is a figure explaining the 2nd encryption process of an authentication key. It is a figure explaining the 2nd decoding process of an authentication key. It is a figure which shows the example of the syntax of CDM. FIG. 6 is a diagram for explaining the flow of authentication key distribution, message authentication code (HMAC) calculation, and viewing history information (CDM) transmission / reception when signaling is used. It is a figure explaining the 1st transmission method of an authentication key. It is a figure explaining the 2nd transmission method of an authentication key. It is a figure which shows the example of the syntax of a metadata envelope. It is a flowchart explaining a transmission process. It is a flowchart explaining the authentication key delivery process in the case of using signaling. It is a flowchart explaining a reception process. It is a flowchart explaining a broadcast stream reception process. It is a flowchart explaining a viewing history information recording process. It is a flowchart explaining a viewing history server URL acquisition process. It is a flowchart explaining viewing history information transmission processing. It is a flowchart explaining viewing history information reception processing. It is a flowchart explaining a message authentication code verification process. It is a figure explaining the flow of transmission / reception of the distribution of an authentication key, the calculation of a message authentication code (HMAC), and viewing history information (CDM) when a video watermark is used. It is a figure explaining the delivery method of the authentication key at the time of using a video watermark. It is a figure which shows the example of the syntax of a watermark payload. It is a figure which shows the example of the syntax of WM message. It is a figure which shows the example of the syntax of an authentication key message. It is a flowchart explaining the authentication key delivery process in the case of using a video watermark. It is a flowchart explaining the authentication key acquisition process in the case of using a video watermark. It is a flowchart explaining an authentication key acquisition process. It is a figure explaining the flow of transmission / reception of the distribution of an authentication key, the calculation of a message authentication code (HMAC), and viewing history information (CDM) in the case of using audio user data. It is a figure which shows the example of the syntax of SYS meta-frame. It is a figure which shows the example of sysType. It is a figure which shows the example of sysData. It is a flowchart explaining the authentication key delivery in the case of using audio user data. It is a flowchart explaining the authentication key acquisition process in the case of using audio user data. It is a figure which shows the structural example of a computer.

Hereinafter, embodiments of the present technology will be described with reference to the drawings. The description will be made in the following order.

1. 1. System configuration 2. Outline of this technology Specific operation example (1) Method 1: Authentication key transmission using signaling (2) Method 2: Authentication key transmission using video watermark (3) Method 3: Authentication key transmission using audio user data Transmission4. Modification 5 Computer configuration

<1. System configuration>

(Configuration of transmission system)
FIG. 1 is a diagram illustrating a configuration of an embodiment of a transmission system to which the present technology is applied. A system refers to a logical collection of a plurality of devices.

The transmission system 1 includes transmission devices 10-1 to 10-N (N is an integer of 1 or more), reception devices 20-1 to 20-M (M is an integer of 1 or more), a viewing history server 30, a transmission facility 40, And a distribution device 50. The receiving devices 20-1 to 20-M and the viewing history server 30 are connected to each other via a communication line 60.

The transmitting apparatus 10-1 is a transmitter that is installed by the broadcasting station 1 and that supports digital broadcasting standards such as ATSC (Advanced Television Systems Committee). The transmission apparatus 10-1 transmits a digital broadcast signal including content (for example, a television program) and signaling via the transmission facility 40. In addition, the transmission device 10-1 transmits a digital broadcast signal including content and the like to the distribution device 50. The distribution device 50 is installed by MVPD (Multichannel-Video-Programming-Distributors) that provides pay broadcasting such as cable television (CATV) and satellite broadcasting, and distributes the content provided by the transmission device 10-1.

Transmitting devices 10-2 to 10-N are installed by broadcasting stations such as broadcasting station 2 to broadcasting station N. The transmission devices 10-2 to 10-N transmit digital broadcast signals including content and signaling via the transmission facility 40 or the distribution device 50. In the following description, the transmission devices 10-1 to 10-N will be referred to as the transmission device 10 unless it is necessary to distinguish them.

The receiving device 20-1 is a receiver that supports digital broadcasting standards such as ATSC. For example, the receiving device 20-1 is a fixed receiver such as a television receiver or a set-top box, or a smartphone, a mobile phone, a tablet computer, or the like. Mobile receiver. In addition, the receiving device 20-1 may be a device mounted on an automobile such as an in-vehicle television.

The receiving device 20-1 receives (directly receives) the digital broadcast signal transmitted from the transmitting device 10 via the transmission facility 40 as a radio tower by an antenna, and selects a service (channel) by the user. The content (for example, a TV program etc.) corresponding to is reproduced. In addition, the receiving device 20-1 records (accumulates) viewing history information related to content viewing history. Here, as the viewing history information, CDM (Consumption Data Message) defined by ATSC can be used.

The receiving device 20-1 transmits the viewing history information (CDM) attached with a message authentication code such as HMAC (Hash-based Message Authentication Code) via the communication line 60 in accordance with the URL (Uniform Resource Locator) of the viewing history server 30. To the viewing history server 30. Although details will be described later, the message authentication code (HMAC) is calculated based on the authentication key distributed from the transmission device 10 and the viewing history information (CDM). Further, since the URL of the viewing history server 30 (viewing history server URL) is transmitted by being included in the digital broadcast signal from the transmitting device 10, the receiving device 20-1 receives the viewing history server URL included in the digital broadcast signal. Will get and hold.

Similarly to the receiving device 20-1, the receiving device 20-2 is, for example, a fixed receiver such as a television receiver or a mobile receiver such as a smartphone. The receiving device 20-2 receives (indirect reception) content (digital broadcast signal) distributed from the transmitting device 10 via the MVPD distribution device 50, and reproduces the content according to the channel selection operation of the service. To do.

Also, the receiving device 20-2 records (accumulates) content viewing history information (CDM) in the same manner as the receiving device 20-1. Then, the receiving device 20-2 transmits the viewing history information (CDM) attached with the message authentication code (HMAC) to the viewing history server 30 via the communication line 60 in accordance with the viewing history server URL.

The receiving devices 20-3 to 20-M are, for example, a fixed receiver such as a television receiver, a mobile receiver such as a smartphone, and the like, similar to the receiving device 20-1 or the receiving device 20-2.

The receiving devices 20-3 to 20-M receive (directly receive) a digital broadcast signal transmitted from the transmitting device 10 via the transmission facility 40, or distribute it via the MVPD distribution device 50. Content (digital broadcast signal) to be received (indirect reception), and the content corresponding to the channel selection operation of the service is reproduced.

Also, the receiving devices 20-3 to 20-M record (accumulate) content viewing history information (CDM) in the same manner as the receiving device 20-1 or the receiving device 20-2. Then, the receiving devices 20-3 to 20-M transmit the viewing history information (CDM) attached with the message authentication code (HMAC) to the viewing history server 30 via the communication line 60 in accordance with the viewing history server URL. In the following description, the receiving devices 20-1 to 20-M will be referred to as the receiving device 20 when it is not necessary to distinguish them.

The viewing history server 30 is a server that collects and processes viewing history information (CDM) transmitted from a plurality of receiving devices 20. The viewing history server 30 is not related to a single broadcaster, for example, a jointly operated business established by a plurality of broadcasters (for example, the broadcasting stations 1 to N) or a broadcasting company. Provided by a viewing history business operator such as a business by a third party organization (for example, an agency that specializes in audience rating surveys).

The viewing history server 30 receives viewing history information (CDM) attached with a message authentication code (HMAC) transmitted from the receiving devices 20-1 to 20-M via the communication line 60. The viewing history server 30 compares the message authentication code (HMAC) received from the receiving device 20 with the message authentication code (HMAC ′) calculated by itself, and determines whether or not the comparison result matches. The received message authentication code (HMAC) is verified so that only valid viewing history information (CDM) is accumulated (collected).

The viewing history server 30 performs various processes such as viewing history analysis and analysis on the collected viewing history information (CDM). For example, the viewing history server 30 generates a viewing history report regarding the viewing history for each broadcasting station and provides the viewing history report to a device such as the transmission device 10 of each broadcasting station. The viewing history server 30 is supplied with an authentication key used when calculating the message authentication code (HMAC ′) from the transmission device 10.

The configuration of the transmission system 1 has been described above. Next, a configuration example of the transmission device 10, the reception device 20, and the viewing history server 30 configuring the transmission system 1 of FIG. 1 will be described.

(Configuration of transmitter)
FIG. 2 is a diagram illustrating a configuration example of the transmission device 10 of FIG.

2, the transmission device 10 includes a control unit 111, a video data acquisition unit 112, a video processing unit 113, an audio data acquisition unit 114, an audio processing unit 115, a caption data acquisition unit 116, a caption processing unit 117, and a signaling generation unit 118. , A signaling processing unit 119, a multiplexer 120, a transmission unit 121, and a communication unit 122.

The control unit 111 controls the operation of each unit of the transmission device 10.

The video data acquisition unit 112 acquires video data (video component) of content (for example, a TV program) from an external server, camera, or recording medium, and supplies the video data to the video processing unit 113. The video processing unit 113 performs processing such as encoding processing conforming to a predetermined encoding method on the video data supplied from the video data acquisition unit 112 and supplies the processed video data to the multiplexer 120.

The audio data acquisition unit 114 acquires audio data (audio component) of content (for example, a TV program) from an external server, microphone, or recording medium, and supplies the audio data to the audio processing unit 115. The audio processing unit 115 performs processing such as encoding processing conforming to a predetermined encoding method on the audio data supplied from the audio data acquisition unit 114 and supplies the processed audio data to the multiplexer 120.

The subtitle data acquisition unit 116 acquires subtitle data (components of subtitles) of content (for example, a TV program) from an external server or recording medium and supplies the subtitle data to the subtitle processing unit 117. The caption processing unit 117 subjects the caption data supplied from the caption data acquisition unit 116 to a process such as an encoding process based on a predetermined encoding method, and supplies the processed data to the multiplexer 120.

The signaling generation unit 118 generates signaling information used in processing such as content selection and playback, and supplies the signaling information to the signaling processing unit 119. The signaling processing unit 119 processes the signaling information supplied from the signaling generation unit 118 and supplies it to the multiplexer 120. Here, for example, LLS (Link Layer Signaling) signaling information and SLS (Service Layer Layer Signaling) signaling information described later are generated and processed.

The multiplexer 120 includes a video stream supplied from the video processing unit 113, an audio stream supplied from the audio processing unit 115, a subtitle stream supplied from the subtitle processing unit 117, and signaling information supplied from the signaling processing unit 119. And the resulting multiplexed stream (broadcast stream) is supplied to the transmitter 121.

The transmission unit 121 transmits the broadcast stream supplied from the multiplexer 120 as a digital broadcast wave (digital broadcast signal) via the antenna 131.

The control unit 111 includes an authentication key generation unit 151 and an encryption unit 152. The authentication key generation unit 151 generates an authentication key to be provided to the receiving device 20 and the viewing history server 30. The encryption unit 152 encrypts the authentication key generated by the authentication key generation unit 151, and the encrypted authentication key (encrypted authentication key) is converted into the video processing unit 113 according to the methods 1 to 3. To the audio processing unit 115 or the signaling generation unit 118. As a result, the authentication key (encrypted authentication key) is included in the multiplexed stream (broadcast stream) multiplexed by the multiplexer 120 in accordance with the methods 1 to 3.

As will be described in detail later, among the authentication key transmission methods, the transmission method using signaling is referred to as method 1, the transmission method using video watermark as the method 2, and the transmission method using audio user data as the method. Three.

The communication unit 122 exchanges data with the viewing history server 30 (FIG. 1) via various networks (not shown) in accordance with control from the control unit 111. For example, the communication unit 122 transmits (provides) the authentication key generated by the authentication key generation unit 151 to the viewing history server 30. For example, the communication unit 122 receives a viewing history report transmitted from the viewing history server 30 and supplies the viewing history report to the control unit 111. The control unit 111 acquires the viewing history report supplied from the communication unit 122 and performs processing such as presenting the viewing history report, for example.

(Receiver configuration)
FIG. 3 is a diagram illustrating a configuration example of the receiving device 20 in FIG.

In FIG. 3, the receiving device 20 includes a control unit 211, a recording unit 212, an input unit 213, a receiving unit 214, a demultiplexer 215, a video processing unit 216, a video output unit 217, an audio processing unit 218, an audio output unit 219, and subtitles. The processing unit 220 includes a display unit 221, a speaker 222, a communication unit 223, and a secure memory 224. 3 illustrates a configuration including the display unit 221 and the speaker 222, the configuration may not include the display unit 221 and the speaker 222.

The control unit 211 controls the operation of each unit of the receiving device 20. The recording unit 212 is a non-volatile memory such as NVRAM (NonNVolatile RAM), for example, and records various data according to control from the control unit 211. The input unit 213 supplies an operation signal to the control unit 211 in accordance with a user operation.

The receiving unit 214 extracts and demodulates a signal corresponding to a channel selection operation of a service from a digital broadcast wave (digital broadcast signal) received via the antenna 231, and obtains a multiplexed stream (broadcast) Stream) is supplied to the demultiplexer 215.

The demultiplexer 215 separates the broadcast stream supplied from the reception unit 214 into audio, video, and subtitle streams and signaling information. The demultiplexer 215 sends video data (video component) to the video processing unit 216, audio data (audio component) to the audio processing unit 218, subtitle data (subtitle component) to the subtitle processing unit 220, and signaling information. Each is supplied to the control unit 211.

The control unit 211 controls the operation of each unit such as the demultiplexer 215 and the processing unit of each component in order to reproduce the content based on the signaling information supplied from the demultiplexer 215.

The video processing unit 216 subjects the video data supplied from the demultiplexer 215 to, for example, a decoding process based on a predetermined decoding method, and supplies the video data to the video output unit 217. The video output unit 217 outputs the video data supplied from the video processing unit 216 to the display unit 221. As a result, the display unit 221 displays a video of content (for example, a television program) according to the service channel selection operation.

The audio processing unit 218 subjects the audio data supplied from the demultiplexer 215 to processing such as decoding processing conforming to a predetermined decoding method, and supplies the processed audio data to the audio output unit 219. The audio output unit 219 outputs the audio data supplied from the audio processing unit 218 to the speaker 222. As a result, the sound of content (for example, a television program) corresponding to the channel selection operation of the service is output from the speaker 222.

The caption processing unit 220 subjects the caption data supplied from the demultiplexer 215 to a process such as a decoding process based on a predetermined decoding method and supplies the processed data to the video output unit 217. The video output unit 217 causes the caption corresponding to the caption data supplied from the caption processing unit 220 to be displayed superimposed on the video corresponding to the video data supplied from the video processing unit 216. As a result, the display unit 221 displays the caption superimposed on the video of the content (for example, a television program) according to the service channel selection operation.

3, the video processing unit 216, the video output unit 217, the audio processing unit 218, the audio output unit 219, and the caption processing unit 220 constitute a renderer 225 that performs rendering processing. It can be said that.

The communication unit 223 exchanges various data with the viewing history server 30 via the communication line 60 in accordance with control from the control unit 211. The secure memory 224 is a secure memory, and records highly confidential information such as a decryption key for decrypting an encrypted authentication key (encrypted authentication key).

(Functional configuration of control unit)
FIG. 4 is a diagram illustrating a functional configuration example of the control unit 211 in FIG. 3.

4, the control unit 211 includes a broadcast control unit 251, a communication control unit 252, a viewing history information management unit 253, a viewing history server URL acquisition unit 254, a filter unit 255, a decryption unit 256, an authentication key acquisition unit 257, and A message authentication code calculation unit 258 is included.

The broadcast control unit 251 controls each unit such as the reception unit 214, the demultiplexer 215, and the processing unit and output unit of each component in order to reproduce the content included in the digital broadcast signal transmitted from the transmission device 10.

The communication control unit 252 controls the communication unit 223 to exchange various data with the viewing history server 30 via the communication line 60.

The viewing history information management unit 253 manages content viewing history information (CDM). The viewing history information management unit 253 records (accumulates) the viewing history information (CDM) according to the viewing status of the content by the user in the recording unit 212 when it is time to record the viewing history information (CDM). .

The viewing history server URL acquisition unit 254 acquires the viewing history server URL included in the broadcast stream separated by the demultiplexer 215 and records (holds) it in the recording unit 212.

The filter unit 255 performs a filtering process for obtaining a target authentication key (encrypted authentication key) among the authentication keys (encrypted authentication keys) included in the broadcast stream separated by the demultiplexer 215. The decryption unit 256 decrypts the authentication key (encrypted authentication key) obtained as a result of the filtering process by the filter unit 255 using the decryption key read from the secure memory 224.

The authentication key acquisition unit 257 acquires the authentication key decrypted by the decryption unit 256 and records (holds) it in the recording unit 212. Also, the authentication key acquisition unit 257 reads the authentication key recorded in the recording unit 212 and sends it to the message authentication code calculation unit 258 when it is time to transmit the viewing history information (CDM) to the viewing history server 30. Supply.

The viewing history information management unit 253 reads the viewing history information (CDM) and the viewing history server URL from the recording unit 212 when the timing for transmitting the viewing history information (CDM) to the viewing history server 30 is reached. The server URL is supplied to the communication control unit 252 and the viewing history information (CDM) is supplied to the message authentication code calculation unit 258.

The message authentication code calculation unit 258 is supplied with the authentication key from the authentication key acquisition unit 257 and the viewing history information (CDM) from the viewing history information management unit 253. The message authentication code calculation unit 258 calculates a message authentication code (HMAC) based on the authentication key and viewing history information (CDM). The message authentication code calculation unit 258 supplies the viewing control information (CDM) attached with the message authentication code (HMAC) to the communication control unit 252.

The communication control unit 252 is supplied with the viewing history server URL from the viewing history information management unit 253 and the viewing history information (CDM) attached with the message authentication code (HMAC) from the message authentication code calculation unit 258. The communication control unit 252 performs communication so that the viewing history information (CDM) attached with the message authentication code (HMAC) is transmitted to the viewing history server 30 via the communication line 60 based on the viewing history server URL. The unit 223 is controlled.

(Viewing history server configuration)
FIG. 5 is a diagram illustrating a configuration example of the viewing history server 30 of FIG.

5, the viewing history server 30 includes a control unit 311, a communication unit 312, and a viewing history information storage unit 313.

The control unit 311 controls the operation of each unit of the viewing history server 30. The control unit 311 includes a message authentication code acquisition unit 351, an authentication key acquisition unit 352, a message authentication code calculation unit 353, a message authentication code comparison unit 354, a viewing history information management unit 355, and a viewing history information analysis unit 356. The

The communication unit 312 receives the viewing history information (CDM) attached with the message authentication code (HMAC) transmitted from the receiving device 20 via the communication line 60 according to the control from the control unit 311, and receives the control unit 311. To supply. The message authentication code acquisition unit 351 acquires the message authentication code (HMAC) received from the reception device 20 and supplies it to the message authentication code comparison unit 354.

Further, the communication unit 312 receives the authentication key transmitted from the transmission device 10 of the broadcasting station and supplies the authentication key to the control unit 311 according to the control from the control unit 311. The authentication key acquisition unit 352 acquires the authentication key received from the transmission device 10 and supplies it to the message authentication code calculation unit 353.

The message authentication code calculation unit 353 is supplied with the authentication key from the authentication key acquisition unit 352 and the viewing history information (CDM) from the receiving device 20. The message authentication code calculation unit 353 calculates a message authentication code (HMAC ′) based on the authentication key and viewing history information (CDM), and supplies the message authentication code comparison unit 354 with the message authentication code (HMAC ′).

The message authentication code comparison unit 354 is supplied with the message authentication code (HMAC) from the message authentication code acquisition unit 351 and the message authentication code (HMAC ′) from the message authentication code calculation unit 353. The message authentication code comparison unit 354 compares the message authentication code (HMAC) received from the receiving device 20 with the message authentication code (HMAC ′) calculated by the message authentication code calculation unit 353, and the comparison results match. The received message authentication code (HMAC) is verified.

The viewing history information management unit 355 manages viewing history information (CDM). The viewing history information management unit 355 processes the viewing history information (CDM) attached with the message authentication code (HMAC) according to the verification result of the message authentication code (HMAC) by the message authentication code comparison unit 354.

For example, the viewing history information management unit 355 records (accumulates) the viewing history information (CDM) determined to be valid in the viewing history information accumulation unit 313 according to the verification result of the message authentication code (HMAC). . As a result, the viewing history information storage unit 313 collects viewing history information (CDM) sequentially transmitted from the plurality of receiving apparatuses 20 and stores it, for example, for each broadcasting station.

The viewing history information analysis unit 356 reads the viewing history information (CDM) for each broadcasting station from the viewing history information storage unit 313 and analyzes it when it is time to analyze the viewing history information (CDM). The viewing history information analysis unit 356 generates, for example, a viewing history report for each broadcasting station based on the analysis result of the viewing history information (CDM) and supplies the viewing history report to the communication unit 312. The communication unit 312 transmits a viewing history report for each broadcast station to the transmission device 10 of the target broadcast station via various networks (not shown) in accordance with control from the control unit 311.

<2. Overview of this technology>

By the way, in the next generation ATSC standard called ATSC3.0, an IP transmission method is adopted, and data transmission is not a TS (Transport Stream) packet, but an IP / UDP packet, that is, UDP (User Datagram Protocol). It has been decided to use IP (Internet Protocol) packets including packets. In addition, it is expected that an IP transmission method using IP packets will be used in the future even in broadcasting methods other than ATSC 3.0.

In ATSC 3.0, ROUTE (Real-Time Object Delivery Service Unidirectional Transport) and MMT (MPEG Media Transport) coexist as transport protocols. Streams of audio, subtitles, etc. (components) are transmitted. Whether to use ROUTE or MMT as the transport protocol is selected for each broadcaster.

Here, ROUTE is a protocol that extends FLUTE (File Delivery over Unidirectional Transport), which is a protocol suitable for multicast transfer of binary files in one direction. MMT is a transport method used on IP (Internet Protocol), and data such as video and audio can be referred to by setting an IP address and URL (Uniform Resource Locator) using control information. .

Furthermore, in ATSC 3.0, it is assumed that LLS (Link Layer Signaling) signaling information and SLS (Service Layer Layer Signaling) signaling information are specified as signaling, and are described in the LLS signaling information acquired in advance. The SLS signaling information for each service is acquired according to the information to be performed.

Here, the LLS signaling information includes metadata such as SLT (Service List). The SLT includes information (service configuration information) indicating the stream and service configuration in the broadcast network, such as information necessary for channel selection (channel selection information).

The SLS signaling information includes metadata such as USD (User Service Description), LSID (LCT Session Instance Description), MPD (Media Presentation Description), and the like. The USD includes information such as another metadata acquisition destination. LSID is ROUTE protocol control information. MPD is control information for managing the playback of component streams. Note that metadata such as USD, LSID, and MPD is described in a markup language such as XML (Extensible Markup Language). MPD conforms to the MPEG-DASH (Dynamic Adaptive Streaming over HTTP) standard.

(Protocol stack)
FIG. 6 is a diagram illustrating a protocol stack of an IP transmission scheme to which the present technology is applied.

In FIG. 6, the lowest hierarchy is a physical layer. The upper layer adjacent to the physical layer is a layer 2 layer (Layer 2), and the upper layer adjacent to the layer 2 layer is an IP layer. The upper layer adjacent to the IP layer is a UDP layer. That is, an IP packet including a UDP packet (IP / UDP packet) is arranged in the payload of a layer 2 L2 packet (Generic packet) and encapsulated. The physical layer L1 frame (Physical Frame) is composed of a preamble and a data part. In the data part, error correction parity is added to the BB frame obtained by encapsulating multiple L2 packets. After that, data obtained by performing processing related to the physical layer such as interleaving and mapping is mapped.

The upper layers adjacent to the UDP layer are ROUTE, MMT, and SLT. That is, the video, audio, and subtitle streams, the SLS signaling information stream, and the NRT content stream transmitted in the ROUTE session are stored in the IP / UDP packet and transmitted. The NRT content is content distributed by NRT (Non Real Time) broadcasting, and is played back after being temporarily stored in the storage of the receiving device 20. Further, files other than NRT content (for example, application files) may be transmitted in the ROUTE session.

On the other hand, the video, audio, and subtitle streams and the SLS signaling information stream transmitted in the MMT session are stored in the IP / UDP packet and transmitted. The SLT is stored in an IP / UDP packet and transmitted.

In the IP transmission scheme to which the present technology is applied, the above-described protocol stack is adopted, so that the receiving device 20 can select a service (channel) provided by a component stream transmitted in a ROUTE session. In accordance with the channel selection information included in the SLT, SLS signaling information transmitted in the ROUTE session is acquired (S1-1, S1-2). Then, the receiving device 20 connects to the stream of the selected service component according to metadata such as USD, LSID, and MPD (S1-3). As a result, the receiving device 20 outputs video and audio of content (for example, a television program) corresponding to the service channel selection operation.

Further, when selecting a service provided by the component stream transmitted in the MMT session, the receiving device 20 acquires SLS signaling information transmitted in the MMT session according to the tuning information included in the SLT (S2- 1, S2-2). Then, the receiving device 20 connects to the stream of the selected service component according to various metadata (S2-3). As a result, the receiving device 20 outputs video and audio of content (for example, a television program) corresponding to the service channel selection operation.

(Flow of viewing history information (CDM) collection)
FIG. 7 is a diagram illustrating a flow of collecting viewing history information (CDM) in the transmission system 1 of FIG.

7, the HMAC calculation unit 258 corresponds to the message authentication code calculation unit 258 in FIG. Further, in the viewing history server 30 of FIG. 7, the HMAC calculation unit 353 corresponds to the message authentication code calculation unit 353 of FIG. 5, and the HMAC comparison unit 354 corresponds to the message authentication code comparison unit 354 of FIG.

In FIG. 7, the transmission apparatus 10 transmits a broadcast stream by a broadcast wave of a digital broadcast using the IP transmission method (FIG. 6). The receiving device 20 receives the broadcast wave of the digital broadcast transmitted from the transmitting device 20, and reproduces the content by processing components such as video and audio included in the broadcast stream and signaling information. However, the receiving device 20 records (accumulates) viewing history information (CDM) related to the viewing history of the content.

In addition, the transmission device 10 generates an authentication key (authentication key), and the generated authentication key is encrypted by the encryption unit 152 with the encryption key. The transmission device 10 transmits an encrypted authentication key (encrypted authentication key) in a broadcast stream. However, the authentication key (encrypted authentication key) is a method 1 that is a transmission method using signaling, a method 2 that is a transmission method that uses video watermark, or a method 3 that is a transmission method that uses audio user data. It is transmitted by one of the methods. The transmission device 10 also provides the authentication key to the viewing history server 30.

Here, there may be one or more types of authentication keys. When one type of authentication key is employed, all the receiving devices 20, that is, the receiving devices 20-1 to 20-M, operate in common using one authentication key.

On the other hand, when a plurality of authentication keys are employed, an operation using a different authentication key is performed for each manufacturer (receiver manufacturer) of the receiving device 20 or for each receiving device 20. . In this case, information indicating the destination of the key is added to the authentication key. As information indicating this destination, for example, an ID for identifying a receiver manufacturer key (manufacturer key), an ID for identifying a receiver manufacturer (receiver manufacturer ID), or a receiver key ( An ID for identifying (device key) or an ID (receiver ID) for identifying the receiving device 20 can be used.

For example, when the information indicating the destination of the authentication key is the receiver manufacturer ID, the authentication key is encrypted with the receiver manufacturer key. For example, when the information indicating the destination of the authentication key is the receiver ID, the authentication key is encrypted with the receiver key (device key). In the example of FIG. 7, the authentication key is encrypted with the receiver manufacturer key.

The receiving device 20 receives from the transmitting device 10 an authentication key (encrypted authentication key) transmitted by being included in the broadcast stream by any one of methods 1 to 3. At this time, the receiving device 20 confirms that the information (for example, receiver manufacturer ID or receiver ID) indicating the destination added to the authentication key (encrypted authentication key) is the authentication key addressed to itself. In the case shown, an authentication key (encrypted authentication key) is acquired. Here, an authentication key that is not addressed to itself is discarded.

In the receiving device 20, the decryption unit 256 uses the decryption key (for example, the receiver manufacturer key (manufacturer key) or the receiver key (device key)) stored in the secure memory 224, and is addressed to the own device. The authentication key (encrypted authentication key) is decrypted. In the example of FIG. 7, since the authentication key (encrypted authentication key) is encrypted with the receiver manufacturer key, the decryption unit 256 uses the receiver manufacturer key read from the secure memory 224. The authentication key (encrypted authentication key) will be decrypted.

In the receiving apparatus 20, the HMAC calculation unit 258 is supplied with the authentication key decrypted by the decryption unit 256 and the viewing history information (CDM) recorded (accumulated) in the recording unit 212. The HMAC calculation unit 258 calculates a message authentication code (HMAC) based on the authentication key and viewing history information (CDM). The receiving device 20 attaches the message authentication code (HMAC) calculated by the HMAC calculation unit 258 to the viewing history information (CDM), and the viewing history information (CDM) with the message authentication code (HMAC) attached thereto. The data is transmitted to the viewing history server 30 via the communication line 60.

Note that the communication between the receiving device 20 and the viewing history server 30 performed via the communication line 60 is performed by using, for example, HTTPS (Hypertext Transfer Protocol Secure) provided by TLS (Transport Layer Security). It can be done securely.

The viewing history server 30 receives viewing history information (CDM) attached with a message authentication code (HMAC) transmitted from the receiving device 20 via the communication line 60. In the viewing history server 30, the HMAC calculation unit 353 is supplied with the authentication key provided from the transmitting device 10 and the viewing history information (CDM) received from the receiving device 20. The HMAC calculation unit 353 calculates a message authentication code (HMAC ′) based on the authentication key and the viewing history information (CDM), and supplies the message authentication code (HMAC ′) to the HMAC comparison unit 354.

The HMAC comparison unit 354 is supplied with the message authentication code (HMAC ′) from the HMAC calculation unit 353 and the message authentication code (HMAC) attached to the viewing history information (CDM) received from the receiving device 20. The HMAC comparison unit 354 verifies the message authentication code (HMAC) by comparing the message authentication code (HMAC) with the message authentication code (HMAC ′) and determining whether or not the comparison result matches. .

Here, when the comparison result by the HMAC comparison unit 354 matches, the viewing history information (CDM) attached with the message authentication code (HMAC) is recorded and transmitted by the receiving device 20 of the target receiver manufacturer. Since it is proper and valid, the viewing history server 30 processes the viewing history information (CDM). On the other hand, when the comparison result by the HMAC comparison unit 354 does not match, the viewing history information (CDM) attached with the message authentication code (HMAC) is recorded and transmitted by the receiving device 20 of the target receiver manufacturer. The viewing history server 30 does not process (for example, discard) the viewing history information (CDM) because the viewing history server 30 is not valid.

As described above, in the transmission system 1, the viewing history server 30 transmits the viewing history information (CDM) based on the viewing history information (CDM) attached with the message authentication code (HMAC) transmitted from the receiving device 20. Since the receiving device 20 that is the transmission source of the CDM) can be authenticated, accurate viewing history information (CDM) can be collected. Further, since the transmission system 1 performs authentication using a message authentication code (HMAC), the processing load on the receiving device 20 side and the viewing history server 30 side is reduced compared to a method using public key cryptography. Can be reduced.

In addition, in the transmission system 1, since the authentication key is distributed using the broadcast wave of the digital broadcast, the high reliability, broadcast capability, and scalability (scalability) that are the characteristics of the digital broadcast signal are utilized. Thus, the authentication key can be distributed to a large number and various receiving devices 20 at the same time. Furthermore, the fact that the receiving device 20 can periodically update the authentication key used when transmitting the viewing history information (CDM) to the viewing history server 30 has a great merit in terms of security, but is a feature of the digital broadcast signal. By using high reliability, broadcast capability, and extensibility (scalability), the authentication key can be dynamically changed and distributed to an unspecified number of receiving devices 20-1 to 20-M. You can enjoy the benefits.

In addition to the features of the digital broadcast signal described above, the authentication key used for calculating the message authentication code (HMAC) can be specified in a specific group unit by devising the encryption method of the authentication key and the filtering method of the authentication key. It can be changed and distributed for each receiver (for example, receiver manufacturer unit or receiver unit). That is, from the viewing history server 30 side, by verifying the message authentication code (HMAC) sent together with the viewing history information (CDM), the receiving device 20 that is the transmission source of the viewing history information (CDM) can be changed. It can be verified. As a result, for example, the viewing history collection operator operating the viewing history server 30 uses the compensation by cooperating with the collection of viewing history information (CDM) as the trust information when paying the receiver manufacturer. Can do. Incidentally, route protection such as HTTPS is not sufficient when used as such trust information.

Further, the transmission system 1 includes a process of collecting viewing history information (CDM) by transmitting the authentication key in a broadcast stream for each service (broadcast channel), and viewing and listening. It is possible to clearly associate a service for which history information (CDM) is collected.

(Relationship between key and ID)
FIG. 8 is a diagram illustrating the relationship between keys and IDs.

In FIG. 8, the transmitter 10-1 of the broadcasting station 1 manages a receiver manufacturer key list or a receiver key list.

In this receiver manufacturer key list, for example, the receiver manufacturer key (ma_key_A, key_id_A) assigned to the receiver manufacturer A identified by the receiver manufacturer ID which is rec_ma_id_A, rec_ma_id_B Information related to the key for each receiver manufacturer such as the receiver manufacturer key (ma_key_B, key_id_B) assigned to the receiver manufacturer B identified by the receiver manufacturer ID is listed. Yes.

The receiver key list includes, for example, a receiver key assigned to the receivers 20-A1 to 20-A3 manufactured by the receiver manufacturer A, and a receiver 20- manufactured by the receiver manufacturer B. Information relating to keys for each receiver manufactured by each receiver manufacturer, such as receiver keys assigned to B1 to 20-B3, is listed.

Further, in the transmitter 10-2 of the broadcast station 2, as with the transmitter 10-1 of the broadcast station 1, a receiver manufacturer key list in which information on keys for each receiver manufacturer is listed, Alternatively, it manages a receiver key list in which information on keys for each receiver manufactured by each receiver manufacturer is listed.

On the other hand, the receiver manufactured by each receiver manufacturer holds information on the receiver manufacturer of the manufacturer and each receiver.

For example, in the receiver 20-A1 manufactured by the receiver manufacturer A, information on the receiver manufacturer A of the manufacturer (receiver manufacturer ID (rec_ma_id_A), receiver manufacturer key (ma_key_A, key_id_A)) And information regarding each receiver (receiver ID (dev_ID_A1), receiver key (devkeyA1, key_ID_A1)) is held in the secure memory 224.

Similarly, in the receiving device 20-A2 and the receiving device 20-A3 manufactured by the receiver manufacturing company A, information about the receiver manufacturer A of the manufacturer and information about each receiver are held in the secure memory 224. ing.

Further, for example, in the receiver 20-B1 manufactured by the receiver manufacturer B, information on the receiver manufacturer B of the manufacturer (receiver manufacturer ID (rec_ma_id_B), receiver manufacturer key (ma_key_B, key_id_B) )) And information related to each receiver (receiver ID (dev_ID_B1), receiver key (devkeyB1, key_ID_B1)) are held in the secure memory 224.

Similarly, in the receiving device 20-B2 and the receiving device 20-B3 manufactured by the receiver manufacturing company B, information about the receiver manufacturing company B of the manufacturer and information about each receiver are held in the secure memory 224. ing.

As described above, the key is managed in the transmitter 10 of the broadcasting station and the receiver 20 manufactured by each receiver manufacturer. In the transmitter 10, the receiver manufacturer key or the receiver is managed. While the authentication key is encrypted using the key as the encryption key, the receiving device 20 uses the receiver manufacturer key or the receiver key as the decryption key and encrypts the authentication key (encrypted authentication key). Will be decrypted. Hereinafter, encryption and decryption of the authentication key when the receiver manufacturer key or the receiver key is used will be described.

(Encryption and decryption of authentication key using receiver manufacturer key)
First, an encryption key decryption process and a decryption process using a receiver manufacturer key will be described with reference to FIGS.

FIG. 9 schematically shows the encryption processing of the authentication key using the receiver manufacturer key.

As shown in FIG. 9, in the transmission device 10, the encryption unit 152 performs encryption processing of the authentication key. In this encryption process, the authentication key is encrypted using the receiver manufacturer key. Then, the transmission device 10 includes the authentication key (encrypted authentication key) encrypted with the receiver manufacturer key as the encryption key in the broadcast stream by any one of methods 1 to 3. To do.

FIG. 10 schematically shows the decryption process of the authentication key encrypted with the receiver manufacturer key.

As shown in FIG. 10, in the receiving device 20, the decryption unit 256 performs a decryption process of the authentication key (encrypted authentication key) encrypted with the receiver manufacturer key. In this decryption process, the authentication key (encrypted authentication key) encrypted with the receiver manufacturer key included in the broadcast stream from the transmission device 10 is decrypted with the receiver manufacturer key as the decryption key. The Thereby, the receiving device 20 can acquire the authentication key decrypted with the receiver manufacturer key.

As described above, in the authentication key encryption process and decryption process using the receiver manufacturer key, the receiver manufacturer key (encryption key) used in the authentication key encryption process and the authentication key decryption process are used. Since the receiver manufacturer key (decryption key) used has a relationship (common key encryption) as a shared key, the receiver 20 stores the receiver manufacturer stored in the secure memory 224. Using the key (decryption key), the authentication key (encrypted authentication key) transmitted in the broadcast stream can be decrypted.

(Encryption and decryption of authentication key using receiver key)
Next, an encryption key encryption process and a decryption process using a receiver key (device key) will be described with reference to FIGS.

FIG. 11 schematically shows the encryption process of the authentication key using the receiver key.

As shown in FIG. 11, in the transmission device 10, the encryption unit 152 performs encryption processing of the authentication key. In this encryption process, the authentication key is encrypted using the receiver key. Then, the transmission device 10 transmits the authentication key (encrypted authentication key) encrypted with the receiver key as the encryption key by including it in the broadcast stream by any one of methods 1 to 3.

FIG. 12 schematically shows the decryption process of the authentication key encrypted with the receiver key.

As shown in FIG. 12, in the receiving device 20, the decryption unit 256 performs a decryption process of the authentication key (encrypted authentication key) encrypted with the receiver key. In this decryption processing, an authentication key (encrypted authentication key) encrypted with the receiver key included in the broadcast stream transmitted from the transmission device 10 is decrypted with the receiver key as the decryption key. Thereby, the receiving device 20 can acquire the authentication key decrypted with the receiver key.

As described above, in the encryption processing and decryption processing of the authentication key using the receiver key, the receiver key (encryption key) used in the authentication key encryption processing and the receiver key used in the authentication key decryption processing ( Decryption key) has a relationship (common key encryption) as a shared key, so the receiver key (decryption key) is used to decrypt the authentication key (encrypted authentication key) transmitted in the broadcast stream be able to.

In the above-described example, the receiver manufacturer key and the receiver key are described as examples of the shared key. However, a shared key other than the receiver manufacturer key and the receiver key may be used. Good.

(CDM syntax)
FIG. 13 is a diagram illustrating an example of syntax of CDM (Consumption Data Message) in XML format. In FIG. 13, among the elements and attributes, “@” is added to the attribute. Further, the indented element and attribute are specified for the upper element.

In FIG. 13, the CDM element as the root element is an upper element of the protocolVersion attribute, the AVChannel element, and the NRTService element. The protocolVersion attribute specifies the CDM protocol version.

In the AVChannel element, information related to the viewing history for each channel (service) of the distributed content is specified. The AVChannel element is an upper element of the channelNum attribute, serviceType attribute, and ViewInterval element. In the channelNum attribute, a channel number (service ID) is specified. In the serviceType attribute, for example, the type of service such as normal broadcast or audio-only broadcast is specified.

The ViewInterval element is an upper element of the startTime attribute, endTime attribute, usageType attribute, timeShift attribute, viewStartTime attribute, viewEndTime attribute, and DOInterval element. Also, the DOInterval element is a higher element of the doId attribute, startTime attribute, and endTime attribute. In the ViewInterval element, information regarding the viewing history for each channel (service) is specified by these elements and attributes.

In the NRTService element, information related to the viewing history of the NRT service is specified. The NRTService element is an upper element of the serviceID attribute and the NRTInterval element. A service ID is specified in the serviceID attribute.

The NRTInterval element is an upper element of the startTime attribute, endTime attribute, and NRTItem element. The NRTItem element is a higher element of the contentItemId attribute, startTime attribute, and endTime attribute. In the NRTInterval element, information related to viewing history is specified for each NRT service by these elements and attributes.

<3. Specific operation example>

Next, a specific operation example in which the authentication key is distributed by the method 1 to the method 3 will be described.

(1) Method 1: Authentication key transmission using signaling

(Overview of Method 1)
FIG. 14 shows the distribution of the authentication key by the transmission device 10, the calculation of the message authentication code (HMAC) by the reception device 20, and the reception device 20 and the viewing history server 30 when the authentication key is transmitted using signaling. It is a figure explaining the flow of transmission / reception of viewing history information (CDM).

14, the filter 255 corresponds to the filter unit 255 in FIG. 4, and the HMAC calculation unit 258 corresponds to the message authentication code calculation unit 258 in FIG. 4.

In FIG. 14, a transmitting apparatus 10 of a broadcasting station transmits a video or audio (component) stream and a broadcast stream including signaling information as a digital broadcast signal. The receiving device 20 receives a digital broadcast signal transmitted from the transmitting device 10 via the transmission facility 40 (FIG. 1) or the like.

In the receiving device 20, the receiving unit 214 performs demodulation processing on the digital broadcast signal, and supplies signaling information obtained by the demodulation processing to the control unit 211 (FIG. 3). The control unit 211 analyzes the signaling information, and controls a renderer 225 that processes a video or audio (component) stream from the reception unit 214 according to the analysis result.

The renderer 225 reproduces content (for example, a television program) according to the channel selection operation by performing rendering processing on a video or audio (component) stream in accordance with control from the control unit 211. Thereby, viewing history information (CDM) corresponding to the viewing of the content is recorded in the recording unit 212 (FIG. 3).

Here, when the scheme 1 is adopted, since the broadcast stream includes signaling information including an authentication key (hereinafter referred to as authentication key signaling information), the receiving device 20 includes a filter 255 that performs, for example, authentication key signaling. By performing a filtering process using the receiver manufacturer ID on the packet storing the information, only the authentication key (encrypted authentication key) corresponding to the manufacturer of the receiving device 20 can be extracted. .

In the example of FIG. 14, the authentication key (encrypted authentication key) obtained by the filtering process by the filter 255 is encrypted with the receiver manufacturer key (encryption key). The decryption unit 256 reads the receiver manufacturer key (decryption key) held in the secure memory 224 and decrypts the authentication key (encrypted authentication key) obtained by the filtering process. As a result, the authentication key decrypted with the receiver manufacturer key (decryption key) is acquired and supplied to the HMAC calculation unit 258.

In addition to the authentication key decrypted by the decryption unit 256, the viewing history information (CDM) read from the recording unit 212 is supplied to the HMAC calculation unit 258. The HMAC calculation unit 258 calculates a message authentication code (HMAC) based on the authentication key and viewing history information (CDM).

The message authentication code (HMAC) calculated in this way is attached to the viewing history information (CDM) and supplied to the communication unit 223. The communication unit 223 transmits the viewing history information (CDM) attached with the message authentication code (HMAC) to the viewing history server 30 via the communication line 60 in accordance with the viewing history server URL acquired in advance.

The viewing history server 30 receives viewing history information (CDM) attached with a message authentication code (HMAC) transmitted from the receiving device 20 via the communication line 60. Then, the viewing history server 30 compares the message authentication code (HMAC) received from the receiving device 20 with the message authentication code (HMAC ′) calculated by itself, and determines whether or not the comparison result matches. Then, the received message authentication code (HMAC) is verified.

Here, when the comparison result of the message authentication code (HMAC, HMAC ′) matches, the received viewing history information (CDM) attached with the message authentication code (HMAC) is received by the receiving device 20 of the target receiver manufacturer. Is recorded and transmitted and is valid, so the viewing history server 30 processes the viewing history information (CDM). On the other hand, if the comparison result of the message authentication code (HMAC, HMAC ') does not match, the received viewing history information (CDM) attached with the message authentication code (HMAC) is the receiving device of the target receiver manufacturer The viewing history server 30 does not process (for example, discard) the viewing history information (CDM) because it is not recorded and transmitted by 20 and is not valid.

(Authentication key transmission method)
In method 1, the authentication key is transmitted using signaling. Here, as an example of the transmission method, an authentication key is transmitted by encapsulation using a payload packet, and an authentication key is used using signaling metadata. A method for transmitting the data will be described.

FIG. 15 is a diagram for explaining an authentication key transmission method by encapsulation using payload packets.

In FIG. 15, the ROUTE packet stored in the IP / UDP packet is appended with a header (PHY_H), IP header (IP_H), UDP header (UDP_H), and ROUTE header (ROUTE_H) related to the physical layer as the header. Has been. The payload packet of ROUTE packet encapsulates a payload packet including a payload header and a payload.

Here, A in FIG. 15 illustrates a payload packet that stores an authentication key encrypted using a receiver manufacturer key as an encryption key, and FIG. 15B illustrates a receiver key as an encryption key. The payload packet which stored the authentication key encrypted using is illustrated.

In the payload packet of A in FIG. 15, a receiver manufacturer ID indicating the destination of the authentication key and version information are added as the payload header. Further, the payload of the payload packet A in FIG. 15 stores an authentication key (encrypted authentication key) encrypted using a receiver manufacturer key (encryption key).

On the other hand, in the payload packet shown in FIG. 15B, the receiver ID indicating the destination of the authentication key and the version information are added as the payload header. In addition, an authentication key (encrypted authentication key) encrypted using a receiver key (encryption key) is stored in the payload of the payload packet of B in FIG.

FIG. 16 is a diagram for explaining an authentication key transmission method using signaling metadata.

In FIG. 16, the ROUTE packet stored in the IP / UDP packet is appended with a header (PHY_H), IP header (IP_H), UDP header (UDP_H), and ROUTE header (ROUTE_H) related to the physical layer. Has been. In the ROUTE packet payload, an encrypted authentication key (encrypted authentication key) and its encryption information are included in a metadata envelope.

In the example of FIG. 16, the authentication key is encrypted using a receiver manufacturer key (encryption key). However, the authentication key is encrypted using another encryption key such as a receiver key. Also good. Also, the metadata envelope is standardized by 3GPP (3rd Generation Partnership Project).

(Metadata envelope syntax)
FIG. 17 is a diagram illustrating an example of a syntax of an XML format metadata envelope. In FIG. 17, “@” is added to the attribute among the elements and attributes. Further, the indented element and attribute are specified for the upper element.

17, the metadata envelope includes a metadataURI attribute, a version attribute, a validFrom attribute, a validUntil attribute, a contentType attribute, an encryption element, and an authenticationKey element.

The URI for identifying metadata is specified in the metadataURI attribute. In the version attribute, metadata version information is specified. The validFrom attribute specifies the valid start time of metadata. In the validUntil attribute, the valid end time of the metadata is specified. In the contentType attribute, the MIME type of metadata is specified.

Information related to encryption of the authentication key (encryption information) is specified in the encryption element. The encryption element is an upper element of the keyType attribute, keyID attribute, keyVersion attribute, algorithm attribute, and encParameter attribute.

Information indicating the type of encryption key is specified in the keyType attribute. In the keyID attribute, an ID for identifying the encryption key is specified. In the keyVersion attribute, version information of the encryption key is specified. Information related to the encryption algorithm is specified in the algorithm attribute. An encryption parameter is specified in the encParameter attribute.

Authentication key is specified in the authenticationKey element. Since this authentication key is encrypted with the encryption key, it can be decrypted using the decryption key. The authenticationKey element is an upper element of the version attribute. In the version attribute, version information of the authentication key is specified.

Next, the contents of processing executed by each device constituting the transmission system 1 of FIG. 1 when the method 1 is adopted will be described with reference to the flowcharts of FIGS.

(Transmission process)
First, the flow of transmission processing executed by the transmission device 10 of FIG. 1 will be described with reference to the flowchart of FIG.

In step S101, component signaling processing is performed.

In this component signaling process, a video stream (video bit stream) processed by the video processing unit 113 or the like, an audio stream (audio bit stream) processed by the audio processing unit 115 or the like, and a subtitle processing unit 117 or the like is processed. Various processes are performed on the subtitle stream and the signaling information processed by the signaling processing unit 119 and the like, and the stream of each component and the signaling information are in a state in which they can be transmitted as a digital broadcast signal.

In step S102, the transmission unit 121 performs transmission processing. In this transmission process, the stream and signaling information of each component processed in the process of step S101 are transmitted via the antenna 131 as a digital broadcast signal. When the process of step S102 ends, the transmission process of FIG. 18 ends.

The flow of transmission processing has been described above.

(Authentication key distribution process)
Next, a flow of authentication key distribution processing when signaling is used will be described with reference to the flowchart of FIG. This authentication key distribution process is a process executed in parallel with the process of step S101 of FIG. 18 by the transmission apparatus 10 of FIG.

In step S111, the control unit 111 determines whether it is time to distribute the authentication key.

If it is determined in step S111 that it is not the timing to distribute the authentication key, the determination process in step S111 is repeated. On the other hand, if it is determined in step S111 that it is time to distribute the authentication key, the process proceeds to step S112.

In step S112, the authentication key generation unit 151 generates an authentication key to be provided to the receiving device 20 and the viewing history server 30.

In step S113, the encryption unit 152 encrypts the authentication key generated in the process of step S112 using, for example, an encryption key such as a receiver manufacturer key or a receiver key. The authentication key (encrypted authentication key) obtained by the processing in step S113 is supplied to the signaling generation unit 118 when the method 1 is adopted.

In step S114, the signaling generation unit 118 adds an authentication key (encrypted authentication key) to the signaling information based on the authentication key (encrypted authentication key) encrypted in the process of step S113, thereby authenticating. Generate key signaling information.

The flow of authentication key distribution processing has been described above. In this authentication key distribution process, authentication key signaling information including an authentication key (encrypted authentication key) is generated (S114 in FIG. 19) and transmitted by being included in the digital broadcast signal (S102 in FIG. 18). Note that the authentication key generated in the process of step S112 is also provided to the viewing history server 30.

(Reception processing)
Next, the flow of reception processing executed by the reception device 20 of FIG. 1 will be described with reference to the flowchart of FIG. Note that the reception process in FIG. 20 is executed when, for example, a service channel selection operation is performed by a user and a service channel selection event occurs.

In step S201, channel selection processing is performed by the broadcast control unit 251 or the like. In this channel selection process, a service ID (channel number) corresponding to the selected service is acquired, and it is determined whether channel selection information corresponding to the service ID has been acquired.

Here, if channel selection information has already been acquired by the initial scan process or the like, the channel selection information is acquired, while if channel selection information has not been acquired, IP / UDP packets included in the broadcast stream are monitored. Then, SLT (channel selection information included) included in the IP / UDP packet is acquired. And the channel selection process using the channel selection information acquired in this way is performed.

In step S202, broadcast stream reception processing is performed. In this broadcast stream reception process, a broadcast stream is received in accordance with the channel selection process in step S201, and content (for example, a television program) corresponding to the service channel selection operation is reproduced. Details of the broadcast stream reception process will be described later with reference to the flowchart of FIG.

In step S203, it is determined whether or not to end the reception of the broadcast stream. If it is determined in step S203 that reception of the broadcast stream is to be continued, the processing returns to step S202, and the subsequent processing is repeated. In this case, the content reproduction is continued.

Further, for example, when the viewing of the content by the user is finished and it is determined in step S203 that the reception of the broadcast stream is finished, the reception process of FIG. 20 is finished.

The flow of reception processing has been described above.

(Broadcast stream reception processing)
Next, detailed contents of the broadcast stream reception process corresponding to the process of step S202 of FIG. 20 will be described with reference to the flowchart of FIG.

In step S211, the receiving unit 214 performs demodulation processing according to control from the control unit 211, extracts (acquires) the L2 packet from the L1 frame of the physical layer, and encapsulates the IP encapsulated in the payload of the L2 packet. Extract (acquire) / UDP packets.

In step S212, the control unit 211 determines whether the IP / UDP packet type (stream type) acquired in the process of step S211 is a video, audio, and subtitle component, NRT content, or signaling. It is determined whether or not.

If it is determined in step S212 that the stream type is a video, audio, or subtitle component, the process proceeds to step S213. In step S213, video, audio, and subtitle component rendering processing is performed. By this rendering process, the content corresponding to the channel selection operation is reproduced.

If it is determined in step S212 that the stream type is NRT content, the process proceeds to step S214. In step S214, NRT content reception / storage processing is performed. In this reception / accumulation process, NRT content transmitted as a broadcast stream is received and recorded (accumulated) in the recording unit 212.

Furthermore, when it is determined in step S212 that the stream type is signaling, the process proceeds to step S215. In step S215, the control unit 211 determines whether or not the signaling included in the IP / UDP packet (the ROUTE packet) acquired in the process of step S211 is authentication key signaling information.

If it is determined in step S215 that the signaling included in the IP / UDP packet is authentication key signaling information, the process proceeds to step S216. In step S216, the filter unit 255 determines whether the authentication key (encrypted authentication key) included in the authentication key signaling information is an authentication key addressed to the own device. Here, for example, an ID (for example, receiver manufacturer ID or receiver ID) indicating the destination of the authentication key in the payload header added to the payload in which the authentication key (encrypted authentication key) is stored is the secure memory. Whether the authentication key is destined for the own device can be determined based on whether the information matches the information stored in H.224.

If it is determined in step S216 that the authentication key (encrypted authentication key) included in the authentication key signaling information is an authentication key addressed to the own device, the process proceeds to step S217. In step S217, the authentication key acquisition unit 257 determines whether the authentication key (encrypted authentication key) addressed to itself is updated. Here, for example, whether the authentication key (encrypted authentication key) addressed to the device has been updated by checking the version information of the payload header added to the payload storing the authentication key (encrypted authentication key) Whether it can be determined.

If it is determined in step S217 that the authentication key addressed to the own device has been updated, the process proceeds to step S218. In step S218, the decryption unit 256 decrypts the updated authentication key (encrypted authentication key) addressed to itself using the decryption key read from the secure memory 224.

In step S219, the authentication key acquisition unit 257 acquires the authentication key decrypted in the process of step S218. In step S220, the authentication key acquisition unit 257 records the authentication key acquired in step S219 in the recording unit 212. As a result, the receiving device 20 acquires and records (holds) the authentication key transmitted from the transmitting device 10 using the signaling by the method 1.

If it is determined in step S215 that the signaling included in the IP / UDP packet (the ROUTE packet) is not authentication key signaling information, the process proceeds to step S221. In step S221, the control unit 211 performs processing according to signaling other than the authentication key signaling information (for example, LLS and SLS signaling information) included in the IP / UDP packet.

When the process of step S213, S214, S220, or S221 is completed, the process returns to step S202 of FIG. 20, and the subsequent processes are executed. If it is determined in step S216 that the authentication key included in the authentication key signaling information is not an authentication key addressed to the own device, or in step S217, it is determined that the authentication key addressed to the own device has not been updated. In this case, since it is not necessary to decrypt and record the authentication key (encrypted authentication key), the processing of steps S218 to S220 is skipped, and the processing returns to step S202 of FIG.

The flow of broadcast stream reception processing has been described above.

(Viewing history information recording process)
Next, the flow of the viewing history information recording process executed by the receiving device 20 of FIG. 1 will be described with reference to the flowchart of FIG.

In step S221, the viewing history information management unit 253 determines whether it is time to record viewing history information (CDM).

If it is determined in step S221 that it is not time to record viewing history information (CDM), the determination process in step S221 is repeated. On the other hand, if it is determined in step S221 that it is time to record viewing history information (CDM), the process proceeds to step S222.

In step S222, the viewing history information management unit 253 records (accumulates) content viewing history information (CDM) in the recording unit 212. When the process of step S222 ends, the viewing history information recording process of FIG. 22 ends.

So far, the flow of the viewing history information recording process has been described. In this viewing history information recording process, viewing history information (CDM) corresponding to viewing of content (for example, a television program) by a user is recorded at a predetermined timing, so that the recording unit 212 can receive, for example, a service (channel The viewing history information (CDM) is sequentially accumulated. Note that the viewing history information (CDM) is not limited to a predetermined timing and may be continuously recorded.

(Viewing history server URL acquisition processing)
Next, the flow of the viewing history server URL acquisition process executed by the receiving device 20 of FIG. 1 will be described with reference to the flowchart of FIG.

In step S231, the viewing history server URL acquisition unit 254 determines whether or not the viewing history server URL included in the broadcast stream has been received.

In step S231, when it is determined that the viewing history server URL is not included in the broadcast stream and the viewing history server URL is not received, the determination processing in step S231 is repeated. On the other hand, when it is determined in step S231 that the viewing history server URL is included in the broadcast stream and the viewing history server URL is received, the process proceeds to step S232.

In step S232, the viewing history server URL acquisition unit 254 acquires the viewing history server URL included in the broadcast stream. Here, for example, a signaling location descriptor (inet_signaling_location_descriptor) arranged in the SLT which is LLS signaling information, a watermark payload (URI message of the WM message) transmitted as a video watermark, audio user data (SYS metaframe) sysData), or the viewing history server URL is described in the metadata of a TTML (Timed Text Markup Language) document, and the viewing history server URL acquisition unit 254 acquires the viewing history server URL therefrom.

In step S233, the viewing history server URL acquisition unit 254 records (holds) the viewing history server URL acquired in the process of step S232 in the recording unit 212. When the process of step S233 ends, the viewing history server URL acquisition process of FIG. 23 ends.

The flow of viewing history server URL acquisition processing has been described above. In the viewing history server URL acquisition process, the viewing history server URL is stored for each viewing history server 30 in the recording unit 212 by acquiring the viewing history server URL transmitted at a predetermined timing.

(Viewing history information transmission processing)
Next, the flow of viewing history information transmission processing executed by the receiving device 20 of FIG. 1 will be described with reference to the flowchart of FIG.

In step S241, the process waits until a transmission event of viewing history information (CDM) occurs at a predetermined timing. If it is determined in step S242 that a viewing history information (CDM) transmission event has occurred, the process proceeds to step S243.

In step S243, the viewing history server URL acquisition unit 254 performs a viewing history server URL reading process. In this reading process, the process of reading the viewing history server URL recorded (held) in the recording unit 212 is performed by the viewing history server URL acquisition process (step S233) of FIG.

In step S244, it is determined whether or not the viewing history server URL has been successfully read in the reading process in step S243. If it is determined in step S244 that the viewing history server URL has been successfully read, the process proceeds to step S245.

In step S245, the authentication key acquisition unit 257 performs an authentication key read process. In this reading process, a process of reading the authentication key recorded (held) in the recording unit 212 by the broadcast stream receiving process (step S220 in FIG. 21) is performed.

In step S246, it is determined whether or not the authentication key has been successfully read in the reading process in step S245. If it is determined in step S246 that the authentication key has been successfully read, the process proceeds to step S247.

In step S247, the viewing history information management unit 253 performs a viewing history information (CDM) reading process. In this reading process, the viewing history information (CDM) recorded (accumulated) in the recording unit 212 is read by the viewing history information recording process (step S222 in FIG. 22).

In step S248, the message authentication code calculation unit 258 determines the message authentication code (HMAC) based on the authentication key acquired in the reading process in step S245 and the viewing history information (CDM) acquired in the reading process in step S247. ) Is calculated.

In step S249, the communication control unit 252 controls the communication unit 223 to follow the viewing history server URL acquired in the reading process in step S243, along with the viewing history information (CDM) acquired in the reading process in step S247. The message authentication code (HMAC) calculated in the process of step S248 is transmitted to the viewing history server 30 via the communication line 60.

If it is determined in step S244 that reading of the viewing history server URL has failed, or if it is determined in step S246 that reading of the authentication key has failed, the process proceeds to step S250. In step S250, the control unit 211 executes transmission error processing that is performed when transmission of viewing history information (CDM) fails.

When the process of step S249 or S250 is finished, the viewing history information transmission process of FIG. 24 is finished.

The flow of viewing history information transmission processing has been described above. In this viewing history information transmission process, the viewing history server URL, the authentication key, and the viewing history information (CDM) that are appropriately recorded in the recording unit 212 are read at a predetermined timing, and the authentication key and viewing history information (CDM) are read. ), A message authentication code (HMAC) is calculated, and viewing history information (CDM) attached with the message authentication code (HMAC) is transmitted to the viewing history server 30 via the communication line 60 in accordance with the viewing history server URL. Will be.

In the above description, the viewing history information (CDM) appropriately recorded in the recording unit 212 has been described as being transmitted to the viewing history server 30, but the viewing history information (CDM) is not recorded in the recording unit 212. In addition, it may be transmitted immediately to the viewing history server 30 at the timing when the viewing history information (CDM) is generated.

(Viewing history information reception processing)
Finally, the flow of viewing history information reception processing executed by the viewing history server 30 of FIG. 1 will be described with reference to the flowchart of FIG.

In step S301, the communication unit 311 is monitored by the control unit 311 and waits until a reception history information (CDM) reception request from the reception device 20 is generated. If it is determined in step S302 that a viewing history information (CDM) reception request has occurred, the process proceeds to step S303.

In step S303, the communication unit 312 performs server / client connection processing in accordance with control from the control unit 311. In this server / client connection process, the connection (session) between the receiving device 20 and the viewing history server 30 is established, and the receiving device 20 and the viewing history server 30 can communicate via the communication line 60. Become. However, communication between the receiving device 20 and the viewing history server 30 is performed securely using HTTPS provided by TLS, for example.

In step S304, the communication unit 312 receives viewing history information (CDM) and a message authentication code (HMAC) transmitted from the receiving device 20 via the communication line 60. Here, the viewing history information (CDM) attached with the message authentication code (HMAC) transmitted by the viewing history information transmission process (step S249) of FIG. 24 is received.

In step S305, the message authentication code calculation unit 353 and the message authentication code comparison unit 354 perform message authentication code verification processing. In this message authentication code verification process, the message authentication code (HMAC) received from the receiving device 20 is compared with the message authentication code (HMAC ′) calculated by the message authentication code calculation unit 353, and the comparison result A verification result is obtained. Details of the message authentication code verification process will be described later with reference to the flowchart of FIG.

In step S306, the message authentication code comparison unit 354 determines whether the verification result obtained in the process of step S305 (message authentication code verification process) is valid.

If it is determined in step S306 that the verification result of the message authentication code (HMAC) is valid, that is, the viewing history information (CDM) attached with the message authentication code (HMAC) is valid, the process is as follows. The process proceeds to step S307. In step S307, the viewing history information management unit 355 receives the message authentication code (CDM) received in the processing in step S304 and subjected to the processing in step S305 (message authentication code verification processing). Viewing history information (CDM) that is an attachment source of (HMAC) is accumulated in the viewing history information accumulation unit 313.

On the other hand, if it is determined in step S306 that the verification result of the message authentication code (HMAC) is not valid, that is, the viewing history information (CDM) attached with the message authentication code (HMAC) is not valid, The process proceeds to step S308. In step S308, the control unit 311 executes error processing that is performed when the verification result of the message authentication code (HMAC) is not valid.

When the process of step S307 or S308 is completed, the viewing history information reception process of FIG. 25 is terminated.

The flow of viewing history information reception processing has been described above. In the viewing history information reception process, the viewing history information (CDM) attached with the message authentication code (HMAC) is sequentially stored according to the verification result of the message authentication code (HMAC).

Next, the message authentication code verification process corresponding to the process of step S305 in FIG. 25 will be described with reference to the flowchart in FIG. 26, it is assumed that the authentication key provided from the transmission device 10 and the authentication key information related to the authentication key are recorded in the recording unit 212 when the message authentication code verification process of FIG.

In step S311, the authentication key acquisition unit 352 reads the authentication key and authentication key information recorded in the recording unit 212.

In step S312, the message authentication code calculation unit 353 generates a message authentication code (HMAC) based on the authentication key acquired in the process of step S311 and the viewing history information (CDM) received in the process of step S304 in FIG. ') Is calculated.

In step S313, the message authentication code comparison unit 354 compares the message authentication code (HMAC) received in the process of step S304 in FIG. 25 with the message authentication code (HMAC ′) calculated in the process of step S312. .

In step S314, the message authentication code comparison unit 354 determines whether or not these message authentication codes (HMAC, HMAC ′) match based on the comparison result obtained in the process of step S313.

If it is determined in step S314 that the message authentication codes (HMAC, HMAC ′) match, the process proceeds to step S315. In step S315, the message authentication code comparison unit 354 matches the message authentication codes (HMAC, HMAC ′), that is, the viewing history information (CDM) attached with the message authentication code (HMAC) is valid. Returns the verification result.

On the other hand, if it is determined in step S314 that the message authentication codes (HMAC, HMAC ′) do not match, the process proceeds to step S316. In step S316, the message authentication code comparison unit 354 does not match the message authentication codes (HMAC, HMAC ′), that is, the viewing history information (CDM) attached with the message authentication code (HMAC) is valid. Return the verification result that there is no.

When the process of step S315 or S316 is completed, the process returns to the process of step S305 in FIG. 25, and the subsequent processes are executed.

The flow of the message authentication code verification process has been described above.

(2) Method 2: Authentication key transmission using video watermark

(Overview of Method 2)
FIG. 27 shows the distribution of the authentication key by the transmitting device 10, the calculation of the message authentication code (HMAC) by the receiving device 20, the receiving device 20 and the viewing history server when transmitting the authentication key using the video watermark. 3 is a diagram for explaining a flow of transmission / reception of viewing history information (CDM) by 30. FIG.

27, the transmitting apparatus 10 of the broadcasting station transmits a video or audio (component) stream and a broadcast stream including signaling information as a digital broadcast signal. The receiving device 20 receives a digital broadcast signal transmitted from the transmitting device 10 via the transmission facility 40 (FIG. 1) or the like.

In the receiving device 20, the renderer 225 performs a rendering process on a video or audio (component) stream supplied from the receiving unit 214 in accordance with the control from the control unit 211, so that content ( For example, a TV program). Thereby, viewing history information (CDM) corresponding to the viewing of the content is recorded in the recording unit 212 (FIG. 3).

Here, when the system 2 is adopted, an authentication key (encrypted authentication key) is described in a watermark payload transmitted as a video watermark in the broadcast stream (video stream). In the receiving device 20, the filter 255 performs a filtering process using the receiver manufacturer ID on the authentication key (encrypted authentication key) described in the watermark payload, for example. Only the authentication key (encrypted authentication key) corresponding to the manufacturer can be extracted.

In the example of FIG. 27, the authentication key (encrypted authentication key) obtained by the filtering process is encrypted with the receiver manufacturer key (encryption key). Using the key (decryption key), decrypt the authentication key (encrypted authentication key) obtained by the filtering process. Then, the HMAC calculation unit 258 calculates a message authentication code (HMAC) based on the authentication key decrypted by the decryption unit 256 and the viewing history information (CDM) read from the recording unit 212.

The communication unit 223 transmits the viewing history information (CDM) attached with the message authentication code (HMAC) to the viewing history server 30 via the communication line 60 in accordance with the viewing history server URL acquired in advance.

(Authentication key notification method)
FIG. 28 is a diagram showing an authentication key notification method when a video watermark is used.

As shown in FIG. 28, in one video frame, the upper two lines of the video display area can be used as a video watermark. In the two lines used in this video watermark, standard data transmission, which is a method of transmitting 1-bit information amount in one block, and double magnification data transmission, which is a method of transmitting 2-bit information amount in one block. Any one of the data transmission methods can be used.

For example, in FIG. 28, when standard data transmission is used, the first block is "1", the second block is "1", the third block is "0", and the fourth block is “1” is sequentially stored, and one bit of “0” or “1” is also stored for each block in the fifth and subsequent blocks. On the other hand, when 2x data transmission is used, "11" for the first block, "10" for the second block, "01" for the third block, "for the fourth block" 10 "is sequentially stored, and 2 bits including a combination of" 0 "and" 1 "are also stored for each block in the fifth and subsequent blocks.

Also, the video watermark uses two lines of the video bitstream to transmit a watermark payload.

(Watermark payload syntax)
FIG. 29 is a diagram illustrating an example of the syntax of a watermark payload.

The 16-bit run_in_pattern specifies the transmission pattern of the video watermark and the resolution of one area expressed in the range from white to black. As this transmission pattern, one line or two lines are designated. Further, 8 bits to 12 bits are designated as the resolution of one area.

Wm_message () represents the message area of the watermark. 8-bit zero_pad represents zero padding.

(WM message syntax)
FIG. 30 is a diagram illustrating an example of the syntax of the WM message (wm_message) in FIG.

WM message ID is specified in 8-bit wm_message_id. The 8-bit wm_message_length specifies the WM message length.

∙ The 4-bit wm_message_sequence specifies the WM message sequence. In 2-bit fragment_number and 2-bit last_fragment, information about a fragment is specified.

Here, when “0x01” is specified as the WM message ID, a content ID message (content_id_message) is placed. When “0x02” is designated as the WM message ID, a channel ID message (channel_id_message) is arranged. Furthermore, when “0x03” is designated as the WM message ID, a URI message (uri_message) is arranged.

Also, when "0x04" is specified as the WM message ID, an authentication key message (authentication_key) is placed. When an authentication key is described in the watermark payload, an authentication key message is used. Therefore, here, “0x04” is designated as the WM message ID.

The WM message includes error detection codes such as message_CRC_32 and CRC_32.

(Authentication key message syntax)
FIG. 31 is a diagram illustrating an example of the syntax of the authentication key message (authentication_key) in FIG.

4-bit key_type specifies the type of key used for encryption or decryption of the authentication key. The 16-bit key_id specifies the ID of a key used for encryption or decryption of the authentication key. The 8-bit key_version specifies the version of the key used for encryption or decryption of the authentication key.

The 32-bit valid_from specifies the start time of the validity period of the authentication key. The 32-bit valid_until specifies the end time of the validity period of the authentication key.

Authentic key encryption or decryption encryption algorithm is specified in the 4-bit algorithm. In the 8-bit enc_param_length, the encryption parameter length for encryption or decryption of the authentication key is designated. enc_param () is composed of 8 * enc_param_length bits, and specifies encryption parameters for encryption or decryption of the authentication key.

The authentication key length is specified in the 8-bit auth_key_length. The auth_key consists of 8 * auth_key_length bits, and an authentication key is designated. The 8-bit auth_key_version specifies version information of the authentication key.

Next, with reference to the flowcharts of FIGS. 32 to 34, the contents of processing executed in each device constituting the transmission system 1 of FIG. 1 when the method 2 is adopted will be described.

(Authentication key distribution process)
First, the flow of authentication key distribution processing when a video watermark is used will be described with reference to the flowchart of FIG. This authentication key distribution process is a process executed in parallel with the process of step S101 of FIG. 18 by the transmission apparatus 10 of FIG.

In step S121, the control unit 111 determines whether it is time to distribute the authentication key.

If it is determined in step S121 that it is not time to distribute the authentication key, the determination process in step S121 is repeated. On the other hand, if it is determined in step S121 that it is time to distribute the authentication key, the process proceeds to step S122.

In step S122, the authentication key generation unit 151 generates an authentication key to be provided to the receiving device 20 and the viewing history server 30.

In step S123, the encryption unit 152 encrypts the authentication key generated in the process of step S122 using, for example, an encryption key such as a receiver manufacturer key or a receiver key. The authentication key (encrypted authentication key) generated in this way is supplied to the video processing unit 113 when the method 2 is adopted.

In step S124, when processing the video stream, the video processing unit 113 transmits the authentication key (encrypted authentication key) obtained in step S123 as the watermark payload ( Add (describe) to the WM message's authentication key message (authentication_key)).

The flow of authentication key distribution processing has been described above. In this authentication key distribution process, an authentication key (encrypted authentication key) is described in the authentication key message (authentication_key) of the WM message of the watermark payload, and a video watermark that transmits the watermark payload including the authentication key message is transmitted. Is generated (S101 in FIG. 18) and transmitted in a digital broadcast signal (S102 in FIG. 18). Note that the authentication key generated in the process of step S122 is also provided to the viewing history server 30.

(Authentication key acquisition process)
Next, the flow of authentication key acquisition processing when a video watermark is used will be described with reference to the flowchart of FIG. Note that this authentication key acquisition process is a process executed in the receiving device 20 of FIG. 1 while, for example, viewing the content of the service selected according to the channel selection operation by the user.

In step S261, the control unit 211 monitors an operation signal or the like from the input unit 213, and waits until a service channel selection event occurs. If it is determined in step S262 that a service channel selection event has occurred, the process proceeds to step S263.

In step S263, the broadcast control unit 251 performs channel selection processing by controlling the operation of the reception unit 214 and the like based on the channel selection information recorded in the recording unit 212.

In step S264, the broadcast control unit 251 renders video (video), audio, and subtitle components (streams) by controlling the video processing unit 216, the audio processing unit 218, and the subtitle processing unit 220.

In step S265, it is determined whether or not to process the video watermark. If it is determined in step S265 that the process for the video watermark is to be performed, the process proceeds to step S266.

In step S266, the video processing unit 216 determines whether or not an authentication key (encrypted authentication key) is described in the watermark payload (authentication key message (authentication_key) of the WM message) transmitted as the video watermark. To do. If it is determined in step S266 that an authentication key (encrypted authentication key) is described in the watermark payload (authentication key message of the WM message), the process proceeds to step S267.

In step S267, the authentication key acquisition unit 257 and the like execute an authentication key acquisition process. In this authentication key acquisition process, the authentication key (encrypted authentication key) described in the authentication key message (authentication_key) is decrypted and recorded (held) in the recording unit 212. Details of the authentication key acquisition process will be described later with reference to the flowchart of FIG.

On the other hand, if it is determined in step S266 that the encryption authentication key is not described in the watermark payload (the authentication key message of the WM message), the process proceeds to step S268. In step S268, the video processing unit 216 performs another video watermark process (for example, a process for a content ID message, a channel ID message, a URI message, etc.).

When the process of step S267 or S268 is completed, the process proceeds to step S269. If it is determined in step S265 that the process for the video watermark is not performed, the processes in steps S266 to S268 are skipped, and the process proceeds to step S269.

In step S269, it is determined whether or not viewing by the user is terminated. If it is determined in step S269 that viewing does not end, the process returns to step S264, and the subsequent processes are repeated. On the other hand, if it is determined in step S269 that viewing ends, the authentication key acquisition process in FIG. 33 ends.

The flow of authentication key acquisition processing has been described above. In this authentication key acquisition process, when a service tuning event occurs, that is, when viewing content, a watermark payload is transmitted with a video watermark, and an authentication key (encryption key) is added to the authentication key message (authentication_key) of the WM message. Authentication key) is described, the authentication key is acquired and recorded (held).

(Details of authentication key acquisition process)
Here, with reference to the flowchart of FIG. 34, the detailed content of the authentication key acquisition process corresponding to the process of step S267 of FIG. 33 will be described.

In step S271, the filter unit 255 confirms the authentication key message (authentication_key), for example, to determine whether the authentication key (encrypted authentication key) described in the authentication key message is an authentication key addressed to the own device. Determine.

If it is determined in step S271 that the target authentication key (encrypted authentication key) is an authentication key addressed to the own device, the process proceeds to step S272. In step S272, the authentication key acquisition unit 257 checks the authentication key message (authentication_key) to determine whether or not the authentication key (encrypted authentication key) described in the authentication key message has been updated.

If it is determined in step S272 that the target authentication key (encrypted authentication key) has been updated, the process proceeds to step S273. In step S273, the decryption unit 256 decrypts the authentication key (encrypted authentication key) described in the auth_key of the authentication key message (authentication_key).

In step S274, the authentication key acquisition unit 257 acquires the authentication key decrypted in the process of step S273. In step S275, the authentication key acquisition unit 257 records (holds) the authentication key acquired in step S274 in the recording unit 212.

When the process of step S275 is completed, the process returns to the process of step S267 of FIG. 33, and the subsequent processes are executed. If it is determined in step S271 that the target authentication key (encrypted authentication key) is not an authentication key addressed to the own device, or in step S272, the target authentication key (encrypted authentication key) is not updated. If it is determined that the authentication key is determined to be, the processing of steps S273 to S275 is skipped, and the processing for the target authentication key (encrypted authentication key) is not performed.

The flow of authentication key acquisition processing has been described above.

In the authentication key acquisition process of FIG. 33, the case where the authentication key (encrypted authentication key) described in the authentication key message (authentication_key) is acquired at the time of viewing the content has been described as an example. The authentication key transmitted using the video watermark may be acquired and recorded (newly recorded or updated).

Even when the method 2 is adopted, the receiving device 20 executes the viewing history information transmission process of FIG. 24 when it is time to transmit the viewing history information (CDM) to the viewing history server 30, and the video water The message authentication code (HMAC) is calculated from the authentication key acquired from the watermark payload (the authentication key message of the WM message) transmitted by the mark and the viewing history information (CDM) read from the recording unit 212. Then, the message authentication code (HMAC) is transmitted to the viewing history server 30 via the communication line 60 together with the viewing history information (CDM).

As described above, when the method 2 that uses the video watermark is adopted as the method for transmitting the authentication key, the transmitter 10 authenticates the receiver 20 by including the authentication key in the video watermark. The key is distributed. In addition, when the method 2 is adopted, the receiving device 20 that directly receives the antenna can process the watermark payload transmitted as the video watermark, and the receiving device 20 that performs indirect reception via the MVPD. Even if it exists, the watermark payload transmitted as a video watermark can be processed, so the authentication key included in the watermark payload (WM message authentication key message) is surely Can be obtained.

In the above description, the case where the authentication key is included in the video watermark has been described. However, if the audio watermark is usable, the audio watermark is used to authenticate the watermark payload. A key may be included.

(3) Method 3: Transmission of authentication key using audio user data

(Overview of Method 3)
FIG. 35 shows the distribution of the authentication key by the transmitting device 10, the calculation of the message authentication code (HMAC) by the receiving device 20, and the receiving device 20 and the viewing history server when the authentication key is transmitted using audio user data. 3 is a diagram for explaining a flow of transmission / reception of viewing history information (CDM) by 30. FIG.

35, the transmitting apparatus 10 of the broadcasting station transmits a video or audio (component) stream and a broadcast stream including signaling information as a digital broadcast signal. The receiving device 20 receives a digital broadcast signal transmitted from the transmitting device 10 via the transmission facility 40 (FIG. 1) or the like.

Here, when method 3 is adopted, an authentication key (encrypted authentication key) is described in audio user data (Audio User Data) transmitted in a broadcast stream (audio stream). In the receiving device 20, the filter 255 performs a filtering process using the receiver manufacturer ID on the authentication key (encrypted authentication key) described in the audio user data, for example. Only the authentication key (encrypted authentication key) corresponding to the manufacturer can be extracted.

In the example of FIG. 35, since the authentication key (encrypted authentication key) obtained by the filtering process is encrypted with the receiver manufacturer key (encryption key), the decryption unit 256 is the receiver manufacturer. Using the key (decryption key), decrypt the authentication key (encrypted authentication key) obtained by the filtering process. Then, the HMAC calculation unit 258 calculates a message authentication code (HMAC) based on the authentication key decrypted by the decryption unit 256 and the viewing history information (CDM) read from the recording unit 212.

(SYS metaframe syntax)
FIG. 36 is a diagram illustrating an example of the syntax of a SYS metaframe (SysMetaFrame) defined by MPEG-H 3D Audio.

∙ The system type is specified in the 8-bit sysType. In dataLen, the data length is specified. sysData consists of 8 * dataLen bits, and data corresponding to the type specified by sysType is specified.

For example, as shown in FIG. 37, when “1” is specified as the sysType, “SYS_MP2TS”, that is, the data specified by sysData is used by the MPEG2 TS system. Further, when “2” is specified as sysType, it indicates that “SYS_MMT”, that is, data specified by sysData is used by the MMT system.

Also, when “3” is specified as sysType, it indicates that “SYS_DASH”, that is, data specified by sysData is used by the MPEG-DASH system. Note that the value of sysType that is “0” is undefined. In the value of sysType, “4” to “127” are values reserved for future use by the International Organization for Standardization (ISO). Further, “128” to “255” are values reserved for future expansion.

When "128" is specified as sysType by assigning "128" to "SYS_ATSC3.0", for example, among the values for future expansion from "128" to "255" In addition, the ATSC 3.0 system can indicate that data specified by sysData is used.

FIG. 38 is a diagram illustrating an example of the syntax of sysData (sysData_atsc3.0) when “SYS_ATSC3.0” is specified as the sysType.

∙ The version is specified in the 4-bit version. A 4-bit sys_data_type specifies a data type. Here, when “auth_key” is specified as sys_data_type, key_type, key_id, key_id, valid_from, valid_until, algorithm, enc_param_length, enc_param (), auth_key_length, auth_key, and auth_key_version are specified.

4-bit key_type specifies the type of key used for encryption or decryption of the authentication key. The 16-bit key_id specifies the ID of a key used for encryption or decryption of the authentication key.

The authentication key length is specified in the 8-bit auth_key_length. The auth_key consists of 8 * auth_key_length bits, and an authentication key is designated. The authentication key version is specified in 8-bit auth_key_version.

Next, with reference to the flowcharts of FIG. 39 and FIG. 40, the contents of processing executed by each device constituting the transmission system 1 of FIG. 1 when the method 3 is adopted will be described.

(Authentication key distribution process)
First, the flow of authentication key distribution processing when audio user data is used will be described with reference to the flowchart of FIG. This authentication key distribution process is a process executed in parallel with the process of step S101 of FIG. 18 by the transmission apparatus 10 of FIG.

In step S131, the control unit 111 determines whether it is time to distribute the authentication key.

If it is determined in step S131 that it is not time to distribute the authentication key, the determination process in step S131 is repeated. On the other hand, if it is determined in step S131 that it is time to distribute the authentication key, the process proceeds to step S132.

In step S132, the authentication key generation unit 151 generates an authentication key to be provided to the receiving device 20 and the viewing history server 30.

In step S133, the encryption unit 152 encrypts the authentication key generated in the process of step S132 using, for example, an encryption key such as a receiver manufacturer key or a receiver key. The authentication key generated in this way is supplied to the audio processing unit 115 when the method 3 is adopted.

In step S134, when processing the audio stream, the audio processing unit 115 adds the authentication key generated in the process of step S132 to the audio user data (sysData of SYS metaframe).

However, at this time, in the SYS metaframe (SysMetaFrame), “128” (“SYS_ATSC3.0”) is specified as sysType, and sysData_atsc3.0 is used as sysData. In sysData_atsc3.0, “auth_key” is specified as sys_data_type.

The flow of authentication key distribution processing has been described above. In this authentication key distribution processing, sys_data_type that is “auth_key” and auth_key in which an authentication key (encrypted authentication key) is specified are described in sysData_atsc3.0 of the SYS metaframe. Then, an audio stream including a SYS metaframe including the sysData_atsc3.0 is generated (S101 in FIG. 18) and transmitted by being included in the digital broadcast signal (S102 in FIG. 18). Note that the authentication key generated in the process of step S132 is also provided to the viewing history server 30.

(Authentication key acquisition process)
Next, the flow of authentication key acquisition processing when audio user data is used will be described with reference to the flowchart of FIG. Note that this authentication key acquisition process is a process executed in the receiving device 20 of FIG. 1 while, for example, viewing the content of the service selected according to the channel selection operation by the user.

In step S281, the control unit 211 monitors an operation signal from the input unit 213 and waits until a service channel selection event occurs. If it is determined in step S282 that a service channel selection event has occurred, the process proceeds to step S283.

In step S283, the broadcast control unit 251 performs channel selection processing by controlling the operation of the reception unit 214 and the like based on the channel selection information recorded in the recording unit 212.

In step S284, the broadcast controller 251 controls the video processor 216, the audio processor 218, and the caption processor 220, thereby rendering video (audio) and caption components (streams thereof).

In step S285, it is determined whether or not to process the audio user data of the audio stream. If it is determined in step S285 that the process is to be performed on the audio user data, the process proceeds to step S286.

In step S286, the audio processing unit 218 determines whether an authentication key (encrypted authentication key) is described in the audio user data (sysData_atsc3.0 in the SYS metaframe). If it is determined in step S286 that the audio user data (sysData_atsc3.0 in the SYS metaframe) describes an authentication key (encrypted authentication key), the process proceeds to step S287.

In step S287, the authentication key acquisition unit 257 and the like execute an authentication key acquisition process. In this authentication key acquisition process, the authentication key (encrypted authentication key) described in the audio user data (sysData_atsc3.0 in the SYS metaframe) is decrypted and recorded (held) in the recording unit 212. Note that the details of the authentication key acquisition process are the same as those in the flowchart of FIG. 34 described above, and thus detailed description thereof is omitted here.

On the other hand, if it is determined in step S285 that no processing is performed on the audio user data, or in step S286, an authentication key (encrypted authentication key) is described in the audio user data (sysData_atsc3.0 of the SYS metaframe). If it is determined that the process has not been performed, the process proceeds to step S288.

In step S288, it is determined whether viewing by the user ends. If it is determined in step S288 that viewing does not end, the process returns to step S284, and the subsequent processing is repeated. On the other hand, if it is determined in step S288 that viewing is to be terminated, the authentication key acquisition process in FIG. 40 is terminated.

The flow of authentication key acquisition processing has been described above. In this authentication key acquisition process, an authentication key (encrypted authentication key) is described in audio user data (sysData_atsc3.0 in the SYS metaframe) when a service channel selection event occurs, that is, when content is viewed. In this case, the authentication key is acquired and recorded (held).

In the authentication key acquisition process of FIG. 40, the case where the authentication key (encrypted authentication key) described in sysData_atsc3.0 of the SYS metaframe is acquired when viewing the content has been described as an example. Thus, an authentication key transmitted using audio user data may be acquired and recorded (newly recorded or updated).

Even when the method 3 is adopted, the receiving device 20 executes the viewing history information transmission process of FIG. 24 when it is time to transmit the viewing history information (CDM) to the viewing history server 30, and the audio user The message authentication code (HMAC) is calculated from the authentication key acquired from the data (sysData_atsc3.0 of SYS metaframe) and the viewing history information (CDM) read from the recording unit 212, and the viewing history information (CDM The message authentication code (HMAC) is transmitted to the viewing history server 30 via the communication line 60.

As described above, when the method 3 that uses audio user data is adopted as the method for transmitting the authentication key, the authentication key is included in the audio user data so that the transmitting device 10 authenticates the receiving device 20. The key is distributed. In addition, when the method 3 is adopted, the receiving device 20 that directly receives the antenna can process the audio user data, and the audio user data can be processed even if the receiving device 20 performs the indirect reception via the MVPD. Therefore, the authentication key included in the audio user data (sysData_atsc3.0 in the SYS metaframe) can be surely acquired regardless of the reception environment.

In the above description, the case where the authentication key is included in the audio user data (sysData_atsc3.0 of the SYS metaframe) has been described. However, when the video user data is usable, the video user data is used. An authentication key may be included.

<4. Modification>

In the above explanation, ATSC, which is a method adopted in the United States and the like as a standard for digital terrestrial television broadcasting, has been described. However, ISDB (Integrated Services Digital Broadcasting) adopted by Japan and other countries in Europe and other countries It may be applied to DVB (Digital Video Broadcasting) which is a method adopted by the above. Further, the present invention is not limited to terrestrial digital television broadcasting, but may be adopted for satellite digital television broadcasting, digital cable television broadcasting, and the like.

Further, in the above description, as an authentication key transmission method, method 1 using signaling, method 2 using video watermark, and method 3 using audio user data have been described. The authentication key may be transmitted using other methods such as using the metadata of a TTML (Timed Text Markup Language) used in the above, and placing the authentication key there. TTML is a markup language that can specify text display timing, display layout, etc., and is standardized by W3C (World Wide Web).

Furthermore, in the above description, a case where HMAC (Hash-based Message Authentication Code) is used as an example of a message authentication code (MAC) that is short information for authenticating a message has been described. Other message authentication codes other than those may be used.

<5. Computer configuration>

The series of processes described above can be executed by hardware or software. When a series of processing is executed by software, a program constituting the software is installed in the computer. FIG. 41 is a diagram illustrating a configuration example of hardware of a computer that executes the above-described series of processing by a program.

In the computer 900, a CPU (Central Processing Unit) 901, a ROM (Read Only Memory) 902, and a RAM (Random Access Memory) 903 are connected to each other by a bus 904. An input / output interface 905 is further connected to the bus 904. An input unit 906, an output unit 907, a recording unit 908, a communication unit 909, and a drive 910 are connected to the input / output interface 905.

The input unit 906 includes a keyboard, a mouse, a microphone, and the like. The output unit 907 includes a display, a speaker, and the like. The recording unit 908 includes a hard disk, a nonvolatile memory, and the like. The communication unit 909 includes a network interface or the like. The drive 910 drives a removable medium 911 such as a magnetic disk, an optical disk, a magneto-optical disk, or a semiconductor memory.

In the computer 900 configured as described above, the CPU 901 loads the program recorded in the ROM 902 or the recording unit 908 to the RAM 903 via the input / output interface 905 and the bus 904, and executes the program. A series of processing is performed.

The program executed by the computer 900 (CPU 901) can be provided by being recorded on a removable medium 911 as a package medium, for example. The program can be provided via a wired or wireless transmission medium such as a local area network, the Internet, or digital satellite broadcasting.

In the computer 900, the program can be installed in the recording unit 908 via the input / output interface 905 by installing the removable medium 911 in the drive 910. Further, the program can be received by the communication unit 909 via a wired or wireless transmission medium and installed in the recording unit 908. In addition, the program can be installed in the ROM 902 or the recording unit 908 in advance.

Here, in the present specification, the processing performed by the computer according to the program does not necessarily have to be performed in chronological order in the order described as the flowchart. That is, the processing performed by the computer according to the program includes processing executed in parallel or individually (for example, parallel processing or object processing). The program may be processed by one computer (processor), or may be processed in a distributed manner by a plurality of computers.

Note that the embodiments of the present technology are not limited to the above-described embodiments, and various modifications can be made without departing from the gist of the present technology.

Also, the present technology can take the following configurations.

(1)
A receiving unit for receiving a broadcast wave of digital broadcasting using an IP (Internet Protocol) transmission method;
An acquisition unit for acquiring an authentication key transmitted by the broadcast wave;
A calculation unit that calculates a message authentication code based on the authentication key and viewing history information regarding the viewing history of the content transmitted on the broadcast wave;
And a control unit that performs control to transmit the message authentication code together with the viewing history information to a viewing history server that collects the viewing history information.
(2)
The authentication key is transmitted as signaling,
The receiving device according to (1), wherein the acquisition unit acquires the authentication key included in the signaling.
(3)
The receiving apparatus according to (2), wherein an IP packet including a UDP (User Datagram Protocol) packet includes the authentication key encrypted with an encryption key in its payload.
(4)
The receiving device according to (3), wherein the payload header includes information indicating a destination of the authentication key and version information.
(5)
The encryption key is a manufacturer key or receiver key of the receiving device,
The receiving device according to (4), wherein the information indicating the destination of the authentication key is a manufacturer ID or a receiver ID of the receiving device.
(6)
The receiving apparatus according to (3), wherein the authentication key encrypted with the encryption key is included in metadata defined by a predetermined standard together with information related to the encryption.
(7)
A filter unit that filters the authentication key encrypted with the encryption key based on information indicating a destination of the authentication key;
The receiving device according to (4) or (5), further comprising: a decrypting unit that decrypts the authentication key encrypted with the encryption key obtained by filtering based on a decryption key held in advance.
(8)
The authentication key is transmitted by being included in a video or audio watermark constituting the content,
The receiving device according to (1), wherein the acquisition unit acquires the authentication key included in the watermark.
(9)
The authentication key is transmitted by being included in video or audio user data constituting the content,
The receiving device according to (1), wherein the acquisition unit acquires the authentication key included in the user data.
(10)
An acquisition unit configured to acquire destination information indicating a destination of the viewing history server transmitted through the broadcast wave;
A management unit for managing the viewing history information;
The control unit transmits the viewing history information and the message authentication code to the viewing history server via a communication line based on the destination information. Reception according to any one of (1) to (9) apparatus.
(11)
The IP transmission method conforms to ATSC (Advanced Television Systems Committee) 3.0,
The message authentication code is HMAC (Hash-based Message Authentication Code),
The receiving device according to any one of (1) to (10), wherein the viewing history information is CDM (Consumption Data Message) defined by ATSC.
(12)
In the data processing method of the receiving device,
The receiving device is
Receive broadcast waves of digital broadcasting using the IP transmission method,
Obtain an authentication key transmitted on the broadcast wave,
Based on the authentication key and viewing history information regarding the viewing history of the content transmitted on the broadcast wave, a message authentication code is calculated,
A data processing method including a step of performing control to transmit the message authentication code together with the viewing history information to a viewing history server that collects the viewing history information.
(13)
First message authentication calculated from the viewing history information related to the viewing history of the content and the authentication key from the transmitting device that transmits the content and the viewing history information transmitted from the receiving device that receives the content An acquisition unit for acquiring a code;
A calculation unit that calculates a second message authentication code based on the authentication key transmitted from the transmission device and the viewing history information;
A comparison unit that compares the first message authentication code and the second message authentication code to verify the first message authentication code;
An information processing apparatus comprising: a processing unit that processes the viewing history information according to a verification result of the first message authentication code.
(14)
The first message authentication code and the second message authentication code are HMAC,
The information processing apparatus according to (13), wherein the viewing history information is CDM defined by ATSC.
(15)
In the data processing method of the information processing apparatus,
The information processing apparatus is
First message authentication calculated from the viewing history information related to the viewing history of the content and the authentication key from the transmitting device that transmits the content and the viewing history information transmitted from the receiving device that receives the content Get the sign,
Based on the authentication key transmitted from the transmission device and the viewing history information, a second message authentication code is calculated,
The first message authentication code and the second message authentication code are compared to verify the first message authentication code. The viewing history information is determined according to the verification result of the first message authentication code. A data processing method comprising the steps of:
(16)
A receiving unit that receives content, and a generation unit that generates an authentication key for providing to a viewing history server that collects viewing history information related to the viewing history of the content;
A transmitting unit that transmits the authentication key together with the content to a plurality of receiving devices by a broadcast wave of digital broadcasting using an IP transmission method; and a providing unit that provides the authentication key to the viewing history server; A transmission device comprising:
(17)
The transmission device according to (16), wherein the authentication key is transmitted as signaling by the broadcast wave.
(18)
The transmission device according to (16), wherein the authentication key is transmitted by being included in a video or audio watermark constituting the content by the broadcast wave.
(19)
The transmission device according to (16), wherein the authentication key is transmitted by being included in video or audio user data constituting the content by the broadcast wave.
(20)
In the data processing method of the transmission device,
The transmitting device is
Generating an authentication key for providing to a receiving device that receives content, and a viewing history server that collects viewing history information related to the viewing history of the content;
With the broadcast wave of digital broadcasting using the IP transmission method, the authentication key is transmitted together with the content to the plurality of receiving devices,
A data processing method including the step of providing the authentication key to the viewing history server.

1 transmission system, 10 transmission device, 20 reception device, 30 viewing history server, 40 transmission equipment, 50 distribution device, 60 communication line, 111 control unit, 112 video data acquisition unit, 113 video processing unit, 114 audio data acquisition unit, 115 audio processing unit, 116 subtitle data acquisition unit, 117 subtitle processing unit, 118 signaling generation unit, 119 signaling processing unit, 120 multiplexer, 121 transmission unit, 122 communication unit, 151 authentication key generation unit, 152 encryption unit, 211 control Part, 212 recording part, 213 input part, 214 receiving part, 215 demultiplexer, 216 video processing part, 217 video output part, 218 audio processing part, 21 Audio output unit, 220 subtitle processing unit, 221 display unit, 222 speaker, 223 communication unit, 224 secure memory, 251 broadcast control unit, 252 communication control unit, 253 viewing history information management unit, 254 viewing history server URL acquisition unit, 255 Filter unit, 256 decryption unit, 257 authentication key acquisition unit, 258 message authentication code calculation unit, 311 control unit, 312 communication unit, 313 viewing history information storage unit, 351 message authentication code acquisition unit, 352 authentication key acquisition unit, 353 message Authentication code calculation unit, 354 message authentication code comparison unit, 355 viewing history information management unit, 356 viewing history information analysis unit, 900 computer, 901 CPU

Claims

A receiving unit for receiving a broadcast wave of digital broadcasting using an IP (Internet Protocol) transmission method;
An acquisition unit for acquiring an authentication key transmitted by the broadcast wave;
A calculation unit that calculates a message authentication code based on the authentication key and viewing history information regarding the viewing history of the content transmitted on the broadcast wave;
And a control unit that performs control to transmit the message authentication code together with the viewing history information to a viewing history server that collects the viewing history information.
The authentication key is transmitted as signaling,
The receiving device according to claim 1, wherein the acquisition unit acquires the authentication key included in the signaling.
The receiving device according to claim 2, wherein an IP packet including a UDP (User Datagram Protocol) packet has the authentication key encrypted with an encryption key arranged in a payload thereof.
The receiving device according to claim 3, wherein information indicating a destination of the authentication key and version information are arranged in the header of the payload.
The encryption key is a manufacturer key or receiver key of the receiving device,
The receiving apparatus according to claim 4, wherein the information indicating the destination of the authentication key is a manufacturer ID or a receiver ID of the receiving apparatus.
The receiving apparatus according to claim 3, wherein the authentication key encrypted with the encryption key is included in metadata defined by a predetermined standard together with information related to the encryption.
A filter unit that filters the authentication key encrypted with the encryption key based on information indicating a destination of the authentication key;
The receiving device according to claim 4, further comprising: a decrypting unit that decrypts the authentication key encrypted with the encryption key obtained by filtering based on a decryption key held in advance.
The authentication key is transmitted by being included in a video or audio watermark constituting the content,
The receiving device according to claim 1, wherein the acquisition unit acquires the authentication key included in the watermark.
The authentication key is transmitted by being included in video or audio user data constituting the content,
The receiving device according to claim 1, wherein the acquisition unit acquires the authentication key included in the user data.
An acquisition unit configured to acquire destination information indicating a destination of the viewing history server transmitted through the broadcast wave;
A management unit for managing the viewing history information;
The receiving device according to claim 1, wherein the control unit transmits the viewing history information and the message authentication code to the viewing history server via a communication line based on the destination information.
The IP transmission method conforms to ATSC (Advanced Television Systems Committee) 3.0,
The message authentication code is HMAC (Hash-based Message Authentication Code),
The receiving device according to claim 1, wherein the viewing history information is CDM (Consumption Data Message) defined by ATSC.
In the data processing method of the receiving device,
The receiving device is
Receive broadcast waves of digital broadcasting using the IP transmission method,
Obtain an authentication key transmitted on the broadcast wave,
Based on the authentication key and viewing history information regarding the viewing history of the content transmitted on the broadcast wave, a message authentication code is calculated,
A data processing method including a step of performing control to transmit the message authentication code together with the viewing history information to a viewing history server that collects the viewing history information.
First message authentication calculated from the viewing history information related to the viewing history of the content and the authentication key from the transmitting device that transmits the content and the viewing history information transmitted from the receiving device that receives the content An acquisition unit for acquiring a code;
A calculation unit that calculates a second message authentication code based on the authentication key transmitted from the transmission device and the viewing history information;
A comparison unit that compares the first message authentication code and the second message authentication code to verify the first message authentication code;
An information processing apparatus comprising: a processing unit that processes the viewing history information according to a verification result of the first message authentication code.
The first message authentication code and the second message authentication code are HMAC,
The information processing apparatus according to claim 13, wherein the viewing history information is CDM defined by ATSC.
In the data processing method of the information processing apparatus,
The information processing apparatus is
First message authentication calculated from the viewing history information related to the viewing history of the content and the authentication key from the transmitting device that transmits the content and the viewing history information transmitted from the receiving device that receives the content Get the sign,
Based on the authentication key transmitted from the transmission device and the viewing history information, a second message authentication code is calculated,
The first message authentication code and the second message authentication code are compared to verify the first message authentication code. The viewing history information is determined according to the verification result of the first message authentication code. A data processing method comprising the steps of:
A receiving unit that receives content, and a generation unit that generates an authentication key for providing to a viewing history server that collects viewing history information related to the viewing history of the content;
A transmitting unit that transmits the authentication key together with the content to a plurality of receiving devices by a broadcast wave of digital broadcasting using an IP transmission method; A transmission device comprising:
The transmission device according to claim 16, wherein the authentication key is transmitted as signaling by the broadcast wave.
The transmission device according to claim 16, wherein the authentication key is transmitted by being included in a video or audio watermark constituting the content by the broadcast wave.
The transmission device according to claim 16, wherein the authentication key is transmitted by being included in video or audio user data constituting the content by the broadcast wave.
In the data processing method of the transmission device,
The transmitting device is
Generating an authentication key for providing to a receiving device that receives content, and a viewing history server that collects viewing history information related to the viewing history of the content;
With the broadcast wave of digital broadcasting using the IP transmission method, the authentication key is transmitted together with the content to the plurality of receiving devices,
A data processing method including the step of providing the authentication key to the viewing history server.