CN101192918B

CN101192918B - A method and system for processing encrypted stream in broadcast network

Info

Publication number: CN101192918B
Application number: CN200610145363XA
Authority: CN
Inventors: 夏正勋
Original assignee: ZTE Corp
Current assignee: ZTE Corp
Priority date: 2006-11-24
Filing date: 2006-11-24
Publication date: 2011-05-11
Anticipated expiration: 2026-11-24
Also published as: CN101192918A

Abstract

The invention discloses a method and a system for processing the encrypted streams in a broadcast network. The system comprises: a first key managing module and a first datagram processing module in a sender and a key managing module and a second datagram processing module in a receiver. The method comprises the steps that: the first key managing module generates a key and sends the key to the second key managing module; the second key managing module receives and saves the key; the first datagram processing module uses the key to encrypt the datagram and sends the datagram to the second datagram processing module and attaches a specific field containing the key information to the datagram after being encrypted; the second datagram processing module receives the datagram after being encrypted and searches for the key in the second key managing module according to the information of the key in the specific field of the datagram; after the key is found, the second datagram processing module uses the key to decrypt the datagram. The application of the method and the system of the invention saves the storage space of the receiver and ensures the integrity of the data transmission.

Description

Handle the method and system of encryption stream in a kind of radio network

Technical field

The present invention relates to broadcast network system, be specifically related to handle in a kind of radio network the method and system of encryption stream.

Background technology

In broadcast network system, for the consideration of fail safe, the data of transmitting on radio network are generally encryption stream, are intercepted and captured in transmission course to prevent data.For the level of confidentiality higher data, adopt the mode of pressing message encryption usually, that is to say that common one or more message just adopts a key, in this case, the client of network also needs to receive key usually when receiving ciphertext.Just adopting in the broadcast network system of a key at one or more messages, when message arrived prior to the key corresponding with message, system did such processing usually: the current message that receives of buffer memory or abandon the message that receives.And adopt this method to have following shortcoming: the one, if the buffer memory message has then increased the expense of the memory space of receiving terminal; The 2nd, if abandon the message that receives, then may cause data content imperfect.

Summary of the invention

Technical problem to be solved by this invention is to provide the method and system of handling encryption stream in a kind of radio network, with the memory space of saving receiving terminal and the integrality that guarantees the transmission data.

In order to solve the problems of the technologies described above, the invention provides the system that handles encryption stream in a kind of radio network, comprising: first key management module in the transmitting terminal, first message processing module (MPM), second key management module in the receiving terminal, second message processing module (MPM), wherein:

Described first key management module is used to generate key and this key is sent to second key management module;

Described second key management module is used to receive and preserve the key that first key management module is sent;

Described first message processing module (MPM) is used to use key to be message encryption, and the message after second message processing module (MPM) sends this encryption, simultaneously to specific fields that includes the information of this key of the COM Continuation of Message after this encryption;

Described second message processing module (MPM) is used for searching this key according to the information that is additional to the specific fields key of message in second key management module, and after finding this key, using it is message deciphering after encrypting;

Wherein, described key is sent out prior to message corresponding with it.

Wherein, the one or more keys of the described second key management module buffer memory.

Wherein, described specific fields mark message uses key corresponding with it to encrypt.

Wherein, described first message processing module (MPM) is used with the corresponding key of message and is encrypted for it, and described second message processing module (MPM) is used with the corresponding key of message and is decrypted deciphering for it.

In order to solve the problems of the technologies described above, the present invention and then the method for handling encryption stream in a kind of radio network is provided, this method comprises:

(1) first key management module generates key and this key is sent to second key management module;

(2) second key management module receive and preserve the key that first key management module is sent;

(3) first message processing module (MPM)s use described key to be message encryption, and the message after second message processing module (MPM) sends this encryption, simultaneously to specific fields that includes this key information of the COM Continuation of Message after this encryption;

(4) second message processing module (MPM)s are received message, and search this key according to the information of key in the specific fields that is additional to this message in second key management module;

(5) find described key after, using it is message deciphering after encrypting;

Wherein, described key is sent out prior to message corresponding with it.

Wherein, use is encrypted or is deciphered for it with the corresponding key of message.

Handle the method and system of encryption stream in a kind of radio network of the present invention, saved the memory space of receiving terminal and guaranteed the integrality of transmission data.

Description of drawings

Fig. 1 is according to the configuration diagram of handling the system of encryption stream in the described a kind of radio network of the embodiment of the invention;

Fig. 2 is according to the implementation process schematic diagram of handling the method for encryption stream in the described a kind of radio network of the embodiment of the invention.

Embodiment

The present invention is described in further detail below in conjunction with accompanying drawing.

With reference to figure 1, for handling the configuration diagram of the system of encryption stream in the described a kind of radio network of the embodiment of the invention.First key management module in transmitting terminal, first message processing module (MPM), second key management module in receiving terminal, second message processing module (MPM), wherein,

At transmitting terminal: first key management module is responsible for producing key, and sends second key management module in the receiving terminal to; The secret key encryption message that first message processing module (MPM) uses first key management module to produce, and send it in the receiving terminal second message processing module (MPM);

At receiving terminal: second key management module is responsible for receiving and storage key; Message after the encryption that first message processing module (MPM) is sent in the second message processing module (MPM) receiving end/sending end, and use the corresponding key of storing in second key management module of message to decipher this message with after encrypting.

With reference to figure 2, for handling the implementation process schematic diagram of the method for encryption stream in the described a kind of radio network of the embodiment of the invention.In the present embodiment, each message uses different secret key encryptions, and receiving terminal is 2 keys of buffer memory (also can store more a plurality of according to implementing the environment difference) only also.In conjunction with doing following agreement among Fig. 2: n represents order, and the message of same order is corresponding with key, and for example: message Data (n) is corresponding with Key (n), shows that Data (n) encrypts, deciphers with key K ey (n).On order of transmission, key is arranged in the present embodiment always prior to transfer of data, and key is prior to order transmission of message.As shown in Figure 2, on a time point of system: when message processing module (MPM) message transmission Data (n), key management module transmission security key Key (n+1).Detailed process is as follows:

Step 1: transmitting terminal transmits key K ey (n+1) to receiving terminal.Before this, key K ey (n) is the end of transmission, and is received the key management module storage of end.

Step 2: transmitting terminal transmits to receiving terminal and encrypts message Data (n), and wherein, this message of specific fields mark that is additional to message should be encrypted, decipher with key K ey (n).

Step 3: receiving terminal is received key K ey (n+1), upgrades the key of local storage.The key of current storage is: Key (n) and Key (n+1).

Step 4: receiving terminal is received and is encrypted message Data (n), can know that according to the specific fields in the message this message needs key K ey (n) deciphers.

Step 5: receiving terminal is searched the key of this locality storage, finds key K ey (n), uses key K ey (n) to come decrypted message Data (n).

Compare with the method that traditional broadcast system encryption stream is processed, the present invention has following advantage: the one, and the expense that the buffer memory key is encrypted message than buffer memory is little, has saved memory space; The 2nd, by sending in advance key, can effectively avoid the situation of dropping packets, guaranteed the integrality of the transmission of data.

Claims

1. handle the system of encryption stream in the radio network, it is characterized in that, comprising: first key management module in the transmitting terminal, first message processing module (MPM), second key management module in the receiving terminal, second message processing module (MPM), wherein:

Described first message processing module (MPM) is used to use key to be message encryption and the message after second message processing module (MPM) sends this encryption, simultaneously to specific fields that includes the information of this key of the COM Continuation of Message after this encryption;

Wherein, described key is sent out prior to message corresponding with it.

2. the system as claimed in claim 1 is characterized in that, the one or more keys of the described second key management module buffer memory.

3. the system as claimed in claim 1 is characterized in that, described specific fields mark message uses key corresponding with it to encrypt.

4. the system as claimed in claim 1 is characterized in that, described first message processing module (MPM) is used with the corresponding key of message and encrypted for it, and described second message processing module (MPM) is used with the corresponding key of message and is decrypted for it.

5. handle the method for encryption stream in the radio network, it is characterized in that this method comprises:

(3) first message processing module (MPM)s use described key to be message encryption and the message after second message processing module (MPM) sends this encryption, simultaneously to specific fields that includes the information of this key of the COM Continuation of Message after this encryption;

(5) find described key after, using it is message deciphering after encrypting;

Wherein, described key is sent out prior to message corresponding with it.

6. method as claimed in claim 5 is characterized in that, described specific fields mark message uses key corresponding with it to encrypt.

7. method as claimed in claim 5 is characterized in that, uses with the corresponding key of message and encrypts or decipher for it.