CN101594294B - Method for transmitting authorization information and conditional access system front-end thereof - Google Patents

Method for transmitting authorization information and conditional access system front-end thereof Download PDF

Info

Publication number
CN101594294B
CN101594294B CN2008101136677A CN200810113667A CN101594294B CN 101594294 B CN101594294 B CN 101594294B CN 2008101136677 A CN2008101136677 A CN 2008101136677A CN 200810113667 A CN200810113667 A CN 200810113667A CN 101594294 B CN101594294 B CN 101594294B
Authority
CN
China
Prior art keywords
queue
authorization information
sending
optimized
user terminal
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN2008101136677A
Other languages
Chinese (zh)
Other versions
CN101594294A (en
Inventor
余书义
吴君鸣
卢增祥
韩坚
王天星
王文军
李伟东
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Beijing Shibo Digital TV Technology Co Ltd
Original Assignee
Beijing Shibo Digital TV Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Beijing Shibo Digital TV Technology Co Ltd filed Critical Beijing Shibo Digital TV Technology Co Ltd
Priority to CN2008101136677A priority Critical patent/CN101594294B/en
Publication of CN101594294A publication Critical patent/CN101594294A/en
Application granted granted Critical
Publication of CN101594294B publication Critical patent/CN101594294B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Landscapes

  • Mobile Radio Communication Systems (AREA)

Abstract

The invention provides a method for transmitting authorization information and a conditional access system front-end thereof. The method comprises that: a conditional access unit transmits the authorization information to a client according to the transmission priority of a transmission queue of the storage authorization information; wherein, the transmission queue comprises an immediate queue, a priority queue, and/or an inertia queue. In the invention, the authorization information is transmitted to the client according to the descending order of the transmission priority, thus satisfying various authorization information transmission requirements, saving bandwidth and resources, improving system performance, guaranteeing the promptness and intactness of reception of the authorization information for users, and preventing the immediate benefit of the operators from being infringed.

Description

Method for sending authorization information and conditional access system front end thereof
Technical Field
The present invention relates to the field of digital television technology, and more particularly, to a method for transmitting authorization information and a conditional access system front end thereof.
Background
As is well known, a Conditional Access System (CAS) is used to control a user to perform Conditional Access to a broadcast service, and to implement a paid service of the broadcast System through authorization management.
As shown in fig. 1, the user orders the program through the head end, and the head end encrypts the Control word CW with the service key and transmits the encrypted Control word CW in the Entitlement Control Message (ECM). The front end encrypts the product key by using the user key, and sends the encrypted product key to the terminal set-top box through the EMM data packet.
The set-top box filters the EMM data packets according to the serial numbers of the smart card, the filtered EMM data packets are sent to the smart card, the smart card decrypts the encrypted product key by using the pre-embedded user key, and the decrypted product key is stored in the smart card.
And the set-top box filters the ECM packet of the current channel according to the identification number of the ECM packet and sends the ECM packet to the intelligent card, the intelligent card decrypts the encrypted control word by using the decrypted product key, and the decrypted control word is returned to the set-top box for descrambling the program. After the digital program is descrambled, the user can watch the authorized product through the display unit of the terminal.
Currently, in a common broadcast television network environment, the transmission of the authorization information is transmitted by unidirectional network broadcasting. In order to ensure that a newly accessed terminal user can timely acquire the authorization information of a relevant user, the CAS must circularly issue the authorization information in a broadcast channel, the EMM data packets generated by the CAS are sequentially placed into a sending queue, when the sending is started, a current sending pointer points to the beginning end of the EMM data packet sending queue, and when one EMM data packet is sent, the sending pointer points to the next EMM data packet of the queue until the sending pointer points to the tail end of the queue, so that the first round of sending is finished. And so on, the EMM packets are sent cyclically as described above.
As is known, different authorization information has different requirements for transmission time and transmission frequency, and if the above cyclic transmission mode is only adopted without specific analysis on the transmission requirement of the authorization information, the transmission mode cannot meet the actual requirement; moreover, by adopting the cyclic sending mode, for the data packets which do not need to be sent or only need to be sent at a low frequency, precious bandwidth can be continuously occupied, so that resource waste is caused; in addition, with the increase of the number of users and the increase of service terminals, the bandwidth occupied by the authorization information issued to the user terminal is larger and larger, and the authorization time is longer, so that the development of the service of an operator is not facilitated.
The invention patent application with application number 200610149683.2, publication number CN1988690A, entitled method for transmitting conditional access information in a mobile multimedia broadcasting network, discloses a method for transmitting conditional access information in a mobile multimedia broadcasting network, which is incorporated herein by reference.
As shown in fig. 2, the user management system classifies users, and mainly distinguishes whether the user receiving device is a one-way multimedia broadcast receiving terminal or a two-way receiving terminal, such as a mobile phone, and if the user receiving device is a one-way multimedia broadcast receiving terminal, the mobile phone number of the user is required to be recorded when registering user data.
The front-end authorization management system preprocesses the service authorization according to the change of the user service authority, simultaneously sends an authorization request to the condition receiving system through a user management system interface, and provides the user category attribute and the mobile phone number.
The front-end condition receiving system receives the authorization request of the user management system, generates the condition receiving information of the user, judges the type of the user terminal, and if the user is a unidirectional multimedia receiving terminal user, the condition receiving information is transmitted along with the transmission stream through the broadcast network; if the mobile phone user is the mobile phone user, the condition receiving information is transferred to a mobile communication interface processing module and then is transmitted to the user terminal through a short message system of the mobile communication network. Thus, after receiving the conditional access information transmitted by the front end, the terminal descrambles the transport stream by using the conditional access information to obtain the program information.
As can be seen from the above, although the bandwidth is saved to a certain extent by adopting a manner of distinguishing different terminal transmission condition receiving information, for the unidirectional multimedia receiving terminal, the authorization information is still sent in a manner of cyclic sending, and the requirements of various authorization information are not analyzed, so for the unidirectional multimedia receiving terminal, the above-mentioned scheme does not fundamentally solve the problem existing in the unidirectional network authorization information transmission process.
Disclosure of Invention
The invention aims to provide an authorization information transmission method. By the method, the conditional access unit can send the authorization information according to the sending priority of the authorization information to be sent, thereby not only meeting the sending requirements of various authorization information, but also saving bandwidth, saving resources, improving the system performance, ensuring the timeliness and integrity of the authorization information received by the user and ensuring the proper interest of the operator not to be infringed.
The invention also aims to provide a conditional access system front end. The front end of the conditional access system can send the authorization information according to the sending priority of the authorization information to be sent, so that the sending requirements of various authorization information are met, the timeliness and the integrity of the authorization information received by a user are ensured, and the personal interests of an operator are ensured not to be infringed.
In order to achieve the above object, the present invention provides a method for sending authorization information, including: the conditional access unit sends the authorization information to the user terminal according to the sending priority of the sending queue storing the authorization information; wherein the sending queue at least comprises an instant queue, an optimized queue and a lazy queue; the sending priority of the instant queue is higher than that of the optimized queue; the sending priority of the optimized queue is higher than that of the inertia queue; the conditional access unit sends the authorization information to the user terminal according to the sequence of the sending priority from high to low.
In order to achieve the above object, the present invention further provides a conditional access system front end, which includes a subscriber management unit, configured to transmit a service request of an end user; in addition, the conditional access system front end further comprises a conditional access unit;
the conditional receiving unit is used for receiving the service request sent by the subscriber management unit, generating corresponding authorization information according to the service request, adding the generated authorization information to a preset sending queue for storing authorization information, and sending the authorization information to a user terminal according to the sending priority of the sending queue; the sending queue comprises an instant queue, an optimized queue and a lazy queue; the sending priority of the sending queue is an instant queue, an optimized queue and an inert queue from high to low; the conditional access unit sends the authorization information to the user terminal according to the sequence of the sending priority from high to low.
The method and the device have the advantages that the authorization information can be sent according to the sending priority of the authorization information to be sent, the sending requirements of various authorization information are met, the bandwidth is saved, the resources are saved, the system performance is improved, the timeliness and the integrity of the authorization information received by a user are ensured, and the personal interests of an operator are not damaged.
Drawings
The accompanying drawings, which are included to provide a further understanding of the invention and are incorporated in and constitute a part of this application, illustrate embodiment(s) of the invention and together with the description serve to explain the principles of the invention. In the drawings:
FIG. 1 is a schematic view in the related art;
fig. 2 is a diagram illustrating the transmission of authorization information in the related art;
FIG. 3 is a schematic diagram of a front-end configuration of a conditional access system according to an embodiment of the present invention;
FIG. 4 is a flow chart of a method for sending authorization information according to an embodiment of the present invention;
fig. 5 is a flowchart of circularly transmitting the authorization information in the optimized queue to the user terminal according to the first transmission period T1 in the embodiment of the present invention;
FIG. 6 is a flowchart of sequentially sending authorization information of an instant queue to a user terminal according to an embodiment of the present invention;
fig. 7 is a flowchart of the authorization information in the optimized queue or lazy queue to the user equipment according to the embodiment of the present invention.
Detailed Description
In order to make the objects, technical solutions and advantages of the present invention more apparent, the present invention will be described in further detail with reference to the following embodiments and accompanying drawings. The exemplary embodiments and descriptions of the present invention are provided to explain the present invention, but not to limit the present invention.
Embodiments of the present invention will be described in detail below with reference to the accompanying drawings.
Implementation mode one
The present invention provides a conditional access system front-end, as shown in fig. 3, the conditional access system front-end includes a conditional access unit 302; the conditional access unit 302 at least includes an authorization information sending unit 302c, where the authorization information sending unit 302c is configured to send the authorization information to the user terminal according to the sending priority of the sending queue storing the authorization information; wherein the sending queue comprises a prompt queue and an optimized queue, and/or a lazy queue.
According to the embodiment, the conditional access front end can send the authorization information according to the preset sending priority, so that the sending requirements of various authorization information are met, the bandwidth is saved, the resources are saved, and the system performance is improved, thereby ensuring the timeliness and integrity of the authorization information received by the user, and ensuring the proper interest of the operator not to be infringed.
In the embodiment of the present invention, the conditional access system front end further comprises a subscriber management unit 301, wherein the subscriber management unit 301 is configured to transmit a service request of an end user;
in addition, the conditional access unit 302 further includes an authorization information generation unit 302a and an authorization information addition unit 302b, where the authorization information generation unit 302a is configured to receive a service request sent by the subscriber management unit 301, and generate corresponding authorization information according to the service request; the authorization information adding unit 302b is configured to add the generated authorization information to a transmission queue storing authorization information. The authorization information generating unit 302a may be an EMMG, and the authorization information generated by the EMMG is an EMM packet, where the EMM packet carries an identification number of the terminal security device and the current time.
In addition, the condition receiving unit 302 further includes a storage unit 302d, and the storage unit 302d includes a first storage unit, a second storage unit, a third storage unit, and a fourth storage unit; wherein, the first memory cell is used for storing the real-time queue; the second storage unit is used for storing the optimization queue; the third storage unit is used for storing the inertia queue; the fourth storage unit is used for storing all the authorization information.
In the embodiment, the sending priority of the sending queue is an instant queue, an optimized queue and an inert queue from high to low; in this way, the grant information transmission unit 302c in the conditional access unit 302 can transmit the grant information to the user terminals in the order of the transmission priority from high to low and the respective transmission frequencies, but the queue arrangement priority and the transmission order are not limited to the above.
The priorities of the above three queues are explained in detail below.
An instant queue: the immediate queue has the highest priority. The information sending unit 302c sends the grant information of the immediate queue only once.
The instant queue is used for storing authorization information generated by the current authorization service instruction. After the authorization information in the instant queue is sent by the information sending unit 302c in the front-end condition receiving unit 302, the terminal security device, such as a smart card, can receive the authorization information immediately when the terminal user is online.
Optimizing the queue: the priority of the optimized queue is lower than that of the instant queue and higher than that of the inert queue.
The optimized queue is used for storing authorization information generated by recent authorization service instructions. When the terminal user is online for a specified time after the information sending unit 302c sends the authorization information of the optimized queue, the terminal security device, such as a smart card, can receive the authorization information in a short time. Sending the entitlement information in the optimized queue may satisfy the needs of the end-user, who may not be sure when the smart card is online due to the non-certainty of the one-way broadcast network, but who may desire to receive the entitlement information quickly in a short time.
An inertia queue: the lazy queue has the lowest priority.
The lazy queue comprises all the information which does not belong to the instant queue and the optimized queue and needs to send the authorization information. For example, if the validity period of the optimization queue is 3 days and the validity period of the lazy queue is 30 days, the authorization information loaded in the lazy queue is the authorization information within the last 3-30 days, and the transmission of the authorization information in the lazy queue can meet the needs of some end users who may not be online for a long time. The number of users of the type is small, so that the low-frequency cyclic transmission can be realized.
Therefore, the front end of the conditional access system not only meets the sending requirements of various authorization information, but also meets the requirements of various terminal users, and the timeliness and the integrity of the terminal users for receiving the authorization information are ensured. And the authorization information is sent according to the preset sending priority and the sending frequency, so that the bandwidth can be saved, the resources can be saved, the system performance can be improved, and the personal interests of operators can be prevented from being infringed.
Second embodiment
The invention also provides a method for sending the authorization information, which comprises the following steps: the conditional access unit 302 sends the authorization information to the user terminal according to the sending priority of the sending queue storing the authorization information; wherein the sending queue comprises a prompt queue and an optimized queue, and/or a lazy queue.
In this embodiment, if the sending queue is an immediate queue, an optimized queue, and a lazy queue, the sending priority of the sending queue may be an immediate queue, an optimized queue, and a lazy queue in order from high to low; the conditional access unit transmits the authorization information to the user terminal in the order of the transmission priority from high to low and the transmission frequency. The sending priority of each queue is as described in the first embodiment, and is not described herein again.
According to the embodiment, the front end of the conditional access system can send the authorization information according to the preset sending priority, so that the sending requirements of various authorization information are met, the timeliness and the integrity of the user for receiving the authorization information are guaranteed, and the proper interest of an operator is protected from being infringed.
In this embodiment, before sending the authorization information to the user terminal, the method may further include: the subscriber management unit 301 transmits a service request of an end user to the conditional access unit 302; the conditional access unit 302 receives the service request, generates corresponding authorization information, and adds the authorization information to a transmission queue storing authorization information. Therefore, the front end of the conditional access system can generate the authorization information according to the sending requirement of the authorization information to be sent.
In this embodiment, the following method can be adopted to add the authorization information to the transmission queue storing the authorization information: firstly, the authorization information is sent to an instant queue for sending, and if the authorization information is sent completely, the authorization information is deleted from the instant queue and added to an optimized queue for sending.
In this embodiment, the conditional access unit 302 transmits the authorization information to the user terminal in the order of the transmission priority from high to low and the transmission frequency, in the following manner:
as shown in fig. 4, in steps 401 and 402, the authorization information sending unit 302c determines whether an immediate queue has authorization information to be sent; and if the judgment result is that the authorization information exists, sequentially sending the authorization information in the instant queue to the user terminal.
Step 403, after the authorization information in the instant queue is sent to the terminal user, or when the judgment result of judging whether the authorization information to be sent exists in the instant queue in step 401 is absent, judging whether the authorization information to be sent exists in the optimized queue, if the judgment result is that the authorization information to be sent exists in the optimized queue, executing step 404;
and step 404, circularly sending the authorization information in the optimization queue to the user terminal.
Step 405, after the authorization information in the optimized queue is sent to the user terminal, or when the judgment result of judging whether the authorization information to be sent exists in the optimized queue in step 403 is non-existent, judging whether the authorization information to be sent exists in the lazy queue, if the judgment result is that the authorization information to be sent exists in the lazy queue, executing step 406;
step 406, circularly sending the authorization information in the lazy queue to the user terminal;
and after the authorization information in the inert queue is sent, returning a null pointer, namely not pointing to the authorization information to be sent.
As can be seen from the above, since the priority of the instant queue is the highest, the authorization information sending unit 302c sends the EMM data packet in the instant queue according to the preset priority, and starts sending the EMM data packet in the optimized queue after sending is completed, where the EMM data packet in the optimized queue is sent repeatedly and cyclically all the time, so as to ensure that the terminal user can receive the authorization instruction information sent by the front end. When the authorization information in the optimized queue is empty, the authorization information in the inert queue is sent, and the requirements of various terminal users can be met through the above modes, so that the terminal users can obtain the authorization information timely and completely, and the personal interests of the terminal users and operators are guaranteed not to be damaged.
Fig. 5 is a flowchart of the process of sending the authorization information in the optimized queue to the ue in a loop. As shown in fig. 5, the following may be used:
step 501, determining whether the new sending period T1 of the optimized queue starts, in this embodiment, determining whether the new sending period T1 of the optimized queue is according to a preset optimized queue state;
step 502, in step 501, if the determination result is yes, the authorization information in the optimized queue is sequentially sent to the user terminal;
step 503, judging whether the authorization information in the optimized queue is sent completely;
step 504, in step 503, if the determination result is that the sending of the authorization information in the sending period T1 is completed, setting the state of the optimized queue to be a sending completed state; in addition, the sending completion time of the optimization queue can also be set as the current time. Thus, in step 501, it can be determined whether the transmission period is a new transmission period according to the set state of the optimized queue, i.e. the completion state.
Step 505, determining whether the sending period T1 satisfies the optimized queue minimum sending period T2, that is, determining whether the sending period T1 is greater than or equal to a preset optimized queue minimum sending period T2; if yes, executing step 501 to start sending the authorization information of the next sending period T1' of the optimized queue;
step 506, in step 505, if the determination result is negative, that is, it is determined that the sending period T1 is less than the preset optimized queue minimum sending period T2, the authorization information in the lazy queue starts to be sent to the user terminal between the time when the sending of the authorization information in the current sending period T1 is completed and the time when the sending period T2 is the optimized queue minimum sending period;
step 507, judging whether the minimum sending period T2 of the optimized queue is reached;
if the minimum transmission period T2 is reached as a result of the determination in step 507, the transmission of the grant information in the lazy queue is terminated, and step 501 is executed to start the transmission of the grant information for the next transmission period T1' of the optimized queue (see step 511).
If the minimum sending period T2 is not reached as a result of the determination in step 507, step 506 is executed until the optimized queue minimum sending period T2 is reached.
In this embodiment, the entitlement information may be an EMM packet.
As can be seen from the above, in order to ensure the priority of the optimized queue and also ensure that the grant information in the lazy queue can be sent with time, the optimized queue minimum sending period T2 is set in the present embodiment. When T1 is greater than or equal to T2, circularly sending the authorization information in the optimization queue; if T1 is less than T2, the grant information in the lazy queue is sent within the time of T2-T1, and when the time reaches T2, the sending of the grant information of a new round of optimized queue is started. The minimum sending period T2 of the optimized queue can be flexibly configured to increase or decrease the sending frequency of the optimized queue.
For example, the preset minimum transmission period T2 of the optimized queue is 10 minutes, if the transmission period T1 of the authorization information of the current optimized queue is 6 minutes, that is, T1 is smaller than T2, the optimized queue must wait for 4 minutes to reach the minimum transmission period T2 before proceeding with the transmission of the EMM packet of the optimized queue of the next cycle. Thus, the EMM packets in the lazy queue are transmitted within the time period from T2 to T1, i.e., within 4 minutes, and the grant information in the lazy queue is transmitted for 4 minutes, and then the transmission of the grant information in the optimized queue for a new transmission period is resumed.
For example, if the transmission period of the grant information of the current optimized queue is T1-15 minutes, that is, the transmission period T1 of the optimized queue is greater than the preset optimized queue minimum transmission period T2, since the priority of the optimized queue is higher than that of the lazy queue, the grant information transmitting unit 302c may always transmit the EMM packets in the optimized queue in a loop, so that there is no chance to transmit the data in the lazy queue, and therefore, the EMM packets in the lazy queue may be transmitted by increasing the validity period T2 of the optimized queue.
In the present embodiment, in step 501, if the determination result of determining whether or not the new transmission cycle is negative is no, step 508 is executed;
and step 508 and 509, sequentially sending the authorization information in the optimized queue to the user terminal in the current sending period, judging whether the sending of the authorization information in the sending period is completed or not, if so, executing step 510, setting a sending completion state, setting sending completion time as the current time, and then returning to step 501 to start sending the authorization information in the next sending period of the optimized queue (see step 511).
In this embodiment, the authorization information in the lazy queue is sent to the user terminal in a circulating manner, which may be as follows:
step 1, sequentially sending the authorization information in the inert queue to a user terminal in a current sending period T3; and step 2, judging whether the sending of the authorization information in the inertia queue in the current sending period T3 is finished, and if so, starting the sending of the authorization information of the inertia queue in the next sending period. If the judgment result is negative, the transmission of the authorization information in the transmission period T3 is continued.
In this embodiment, as shown in fig. 6, in step 402 shown in fig. 4, the authorization information in the immediate queue is sequentially sent to the user terminal, and the following method may be adopted:
step 601, reading the authorization information in the instant queue;
step 602, judging whether a sending condition is met;
step 603, in step 602, if the determination result is yes, sending the authorization information to the user terminal;
step 604, in the instant queue, after the authorization information is sent to the user terminal, the authorization information may be deleted from the instant queue, and the authorization information is added to the optimized queue to continue to be sent periodically. Therefore, the authorization information is removed from the queue after the instant queue sends one authorization information every time, instead of being buffered in the queue for circular sending, so that the proportion of the data volume in the whole data queue of the three queues in the instant queue is not large, but the efficiency is the highest, for a new service, if the user terminal is in an open state, the data can be timely received through the sent authorization information of the instant queue, and the average receiving time is less than 5 seconds.
Step 605, determining whether the authorization message is the last authorization message of the instant queue; if the judgment result is no, reading the next authorization information in the instant queue, and returning to the step 601 until the authorization information in the instant queue is sent.
In addition, in step 602, if the determination result is that the sending condition is not satisfied, the next authorization information in the immediate queue is directly read without sending the authorization information, and the process returns to step 601.
In addition, in step 502 or step 1 shown in fig. 5, the authorization information in the optimized queue or the lazy queue is sequentially sent to the user terminal, and the manner shown in fig. 7 is adopted:
as shown in fig. 7, in step 701, the grant information in the optimized queue or the lazy queue is read;
step 702, judging whether a sending condition is met;
step 703, in step 702, if the determination result is yes, sending the authorization information to the user terminal;
step 704, determining whether the grant message is the last grant message of the optimized queue or the lazy queue; if the judgment result is no, reading the next authorization information in the instant queue, and returning to the step 701 until the authorization information in the optimized queue or the inert queue is sent.
In this embodiment, in steps 602 and 702, it is determined whether the authorization information satisfies the sending condition, and the following method may be adopted:
searching whether the identification number exists in a pre-stored sending time table or not according to the identification number of the terminal safety device carried by the authorization information; and if the searching result is that the identification number does not exist in the sending time table, namely the authorization information is the newly received authorization information, determining that the authorization information meets the sending condition.
In the present embodiment, the identification number of the terminal security device and the current time carried by the authorization information are added to the transmission schedule. Wherein,
in this embodiment, the transmission schedule is stored in the storage unit 302d of the conditional access unit 302, and the transmission schedule is used to store the terminal security device identification number and the specific time of the last transmission authorization information of the security device. As shown in table 1, for the transmission schedule:
TABLE 1
Name of field Description of field
CardID External card number of smart card
TimeStamp Time stamp of last sending EMM packet of the card
If the search result of searching in the sending time table is that the identification number already exists in the sending time table, the method further comprises the following steps: judging whether the difference value between the current time carried by the authorization information and the sending time corresponding to the identification number of the safety device in the sending time table is greater than or equal to a preset value T4; and if the judgment result is yes, determining that the authorization information meets the sending condition. The preset value T4 can be configured according to actual needs, and is flexible in configuration, and if the preset value can be configured to be 1 second.
The preset value T4 is generally referred to as the same-pack interval, which is used for all EMM packets for the same smart card, in the above-mentioned instant, optimized and lazy alignments. This is because the set-top box performs a series of analysis processes after receiving the EMM data packets sent from the front end, and if a plurality of EMM data packets are received at the same time, the set-top box may not be in time to perform the processes, and a packet loss phenomenon is likely to occur. In order to ensure that the terminal set-top box can correctly receive all EMM data packets belonging to the smart card without packet loss or packet leakage, for all EMM data packets belonging to the same smart card, the front end issues the EMM data packets of the same smart card at certain intervals, and the time intervals are the same card packet intervals.
When the grant information in the optimized queue is sent, before the step 603, the method may further include:
judging whether the time carried by the authorization information is less than a preset optimization queue validity period T5;
if the judgment result is yes, returning to the step 601 to continue reading and sending the next authorization information; if the judgment result is that the validity period of the preset optimization queue is greater than the validity period T5 of the preset optimization queue, the authorization information is deleted from the optimization queue. In this way, the authorization information sending unit 302c can send the user data whose authorization has changed within the preset optimization queue validity period T5. The T5 can be configured according to actual needs, for example, it can be configured for 24 hours. Therefore, the authorization information in the optimized queue can be sent for only 24 hours, and when the validity period is exceeded, the system can regularly and automatically maintain and delete the expired authorization information from the optimized queue.
For users who miss immediate data, data may be received through this queue at any time during a 24 hour period. The optimized queue sends new data within 24 hours, and a circular sending mode is adopted. In the whole system data, most of the data is accumulated, and there are not many data in 24 hours, for example, one 20 ten thousand users, a digital television front end with 200 ten thousand data packets, and the latest data in 24 hours may only be 1 ten thousand data packets corresponding to 2000 users. Therefore, compared with all data, the proportion of the optimized queue is small, the time of one round of circulation is fast, the efficiency is high, and a user can receive the data within 1 minute after the set top box is placed from the off state to the on state at any time in the day.
In addition, users who do not receive new data on the current day need to receive the data through the lazy queue. The queue has the lowest priority among the three queues, and the user authorization information can be read from the database of the storage unit 302d for each shift and sent in a cycle. Since the queue transmits all data, the time of one round of circulation is long, and thus, the problem that some users in special cases receive data can be solved by adopting the inertia queue. The time required for the lazy queue to transmit a round can be determined according to the number of the actual authorization information and the transmission bandwidth.
In addition, the conditional access unit 302 may also maintain the grant information in the lazy queue according to actual situations, and may adopt the following manners:
when the authorization information sending unit 302b of the conditional access unit 302 adds the authorization information generated by the authorization information generating unit 302a to the lazy queue, it is determined whether the time of the authorization information exceeds a preset lazy queue validity period T6 according to the current time; and if the judgment result is that the authorization information is not exceeded, adding the authorization information into the inert queue. If the result of the determination is that the validity period T6 of the inertia queue is exceeded, the conditional access unit will not add the authorization information in the database of the storage unit 302d to the inertia queue.
Thus, unlike the optimized queue, the lazy queue does not automatically maintain the expired grant information in the lazy queue, but the condition receiving unit 302 loads the grant information satisfying the time condition from the database of the storage unit 302d of the condition receiving unit 302 into the lazy queue at a daily timing according to the validity period T6 of the lazy queue, for example, 3 months at T6, and then circularly transmits the grant information. Therefore, the expired authorization information exceeding 3 months can not be loaded into the lazy queue any more, and the authorization information in the lazy queue can be ensured to be the latest authorization information in the valid period. The inertia queue does not contain the EMM packets in the optimization queue, and the data packets in the time period from the validity period T5 of the optimization queue to the validity period T6 of the inertia queue are actually loaded in the inertia queue.
Therefore, the invention can meet the sending requirements of various authorization information and the requirements of various terminal users, and ensures the timeliness and integrity of the terminal users for receiving the authorization information. And the authorization information is sent according to the preset sending priority and the sending frequency, so that the bandwidth can be saved, the resources can be saved, the system performance can be improved, and the personal interests of operators can be prevented from being infringed.
The above-mentioned embodiments are intended to illustrate the objects, technical solutions and advantages of the present invention in further detail, and it should be understood that the above-mentioned embodiments are merely exemplary embodiments of the present invention, and are not intended to limit the scope of the present invention, and any modifications, equivalent substitutions, improvements and the like made within the spirit and principle of the present invention should be included in the scope of the present invention.

Claims (20)

1. A method for transmitting authorization information, the method comprising:
the conditional access unit sends the authorization information to the user terminal according to the sending priority of the sending queue storing the authorization information; the sending queue comprises an instant queue, an optimized queue and a lazy queue; the sending priority of the instant queue is higher than that of the optimized queue; the sending priority of the optimized queue is higher than that of the inertia queue; the conditional access unit sends the authorization information to the user terminal according to the sequence of the sending priority from high to low.
2. The method of claim 1, wherein the conditional access unit transmits the authorization information to the user terminal in an order of transmission priority from high to low, and comprises:
judging whether the instant queue has authorization information to be sent or not;
and if the judgment result is that the authorization information exists, sequentially sending the authorization information in the instant queue to the user terminal.
3. The method of claim 2, wherein if the determination result indicates that no authorization information to be sent exists in the immediate queue, the method further comprises:
judging whether authorization information to be sent exists in the optimized queue or not;
and if the judgment result is that the authorization information exists, circularly sending the authorization information in the optimization queue to the user terminal.
4. The method of claim 3, wherein the circularly sending the authorization information in the optimization queue to the user terminal comprises:
step 11, judging whether the state of a preset optimization queue is the start of a new sending period of the optimization queue, and if so, executing step 12;
step 12, sequentially sending the authorization information in the optimized queue to the user terminal in the sending period;
step 13, judging whether the authorization information in the optimized queue in the sending period is sent completely, if so, setting the state of the optimized queue to be a sending complete state;
and 14, starting a new sending period, and repeatedly executing the steps 11 to 13.
5. The method of claim 4, wherein in step 11, if the determination result is negative, the method further comprises: and sequentially sending the authorization information to the user terminal in the current sending period of the optimized queue.
6. The method of claim 4, wherein prior to performing step 14, the method further comprises: and judging whether the sending period is greater than or equal to the minimum sending period of the preset optimization queue, and if so, executing the step 14.
7. The method of claim 6, wherein if the determination result of determining whether the transmission period is greater than or equal to the minimum transmission period of the preset optimized queue is negative, the method further comprises:
circularly sending the authorization information in the inert queue to the user terminal from the moment of finishing sending the authorization information in the sending period;
judging whether the minimum sending period of the optimized queue is reached;
if yes, stopping sending the authorization information in the lazy queue, and executing step 14.
8. The method according to claim 3, wherein if it is determined that there is no authorization information to be sent in the optimized queue as a result of determining whether there is authorization information to be sent in the optimized queue, the method further comprises:
judging whether the authorization information to be sent exists in the inertia queue or not;
and if the judgment result is that the authorization information exists, circularly sending the authorization information in the inert queue to the user terminal.
9. The method of claim 8, wherein the circularly sending the grant information in the lazy queue to the user terminal comprises:
step 21, sequentially sending the authorization information in the inert queue to the user terminal in the current sending period;
step 22, judging whether the sending of the authorization information in the inert queue in the current sending period is finished, if so, executing step 23;
and step 23, starting a new sending period, and repeatedly executing the steps 21 to 22.
10. The method according to claim 2, 4 or 9, wherein the sequentially sending the authorization information in the immediate queue, the optimized queue or the lazy queue to the user terminal comprises:
step 31, reading the authorization information in the instant queue or the optimized queue or the inert queue;
step 32, sending the authorization information to the user terminal;
step 33, judging whether the authorization information is the last authorization information in the instant queue, the optimized queue or the inert queue;
and step 34, if the judgment result is negative, repeating the steps 31-34 until the authorization information is the last authorization information of the instant queue, the optimized queue or the inert queue.
11. The method of claim 10, wherein when sending the authorization information in the immediate queue, after sending the authorization information to the user terminal in step 32, further comprising:
deleting the authorization information from the immediate queue;
adding the authorization information to the optimization queue.
12. The method of claim 10, wherein the step 32 comprises:
judging whether the authorization information meets a sending condition;
if the judgment result is yes, the authorization information is sent to the user terminal;
if the determination result is that the sending condition is not satisfied, the authorization information is not sent to the user terminal, and the step 33 is executed.
13. The method of claim 12, wherein the determining whether the authorization information satisfies a sending condition comprises:
searching whether the identification number exists in a pre-stored sending time table or not according to the identification number of the terminal safety device carried by the authorization information;
if the searching result is that the identification number does not exist in the sending time table, determining that the authorization information meets the sending condition;
and adding the identification number of the terminal safety device carried by the authorization information and the current time into the sending schedule.
14. The method of claim 13, wherein if the lookup result is that the identification number exists in the transmission schedule, the method further comprises:
judging whether the difference value between the current time carried by the authorization information and the sending time corresponding to the identification number of the safety device in the sending time table is larger than or equal to a preset value or not;
and if the judgment result is yes, determining that the authorization information meets the sending condition.
15. The method of claim 14, wherein if it is determined that the transmission condition is satisfied, updating the transmission time corresponding to the security device identification number in the transmission schedule to a current time.
16. The method of claim 10, wherein when sending the grant information in the optimized queue, before step 32, further comprising:
judging whether the time carried by the authorization information is less than the validity period of the preset optimization queue or not;
if yes, go to step 32;
and if the judgment result is negative, deleting the authorization information.
17. The method of claim 7, further comprising: the conditional receiving unit adds the generated authorization information to the lazy queue; wherein, include:
judging whether the time of the authorization information exceeds the validity period of a preset inert queue or not according to the current time;
and if the judgment result is that the authorization information does not exceed the preset authorization value, adding the authorization information into the inert queue.
18. A conditional access system front-end, comprising a conditional access unit;
the condition receiving unit at least comprises an authorization information sending unit, and the authorization information sending unit is used for sending the authorization information to the user terminal according to the sending priority of the sending queue for storing the authorization information; the sending queue comprises an instant queue, an optimized queue and a lazy queue; the sending priority of the sending queue is an instant queue, an optimized queue and an inert queue from high to low; the conditional access unit sends the authorization information to the user terminal according to the sequence of the sending priority from high to low.
19. The conditional access system front-end of claim 18, comprising a subscriber management unit configured to transmit a service request of an end user;
the conditional access unit further includes:
the authorization information generating unit is used for receiving the service request sent by the subscriber management unit and generating corresponding authorization information according to the service request;
and the authorization information adding unit is used for adding the generated authorization information to a sending queue for storing the authorization information.
20. The conditional access system front-end of claim 18, wherein the conditional access unit further comprises a storage unit comprising:
a first storage unit for storing a real-time queue; and/or
A second storage unit for storing an optimization queue; and/or
A third storage unit for storing a lazy queue;
a fourth storage unit for storing all authorization information.
CN2008101136677A 2008-05-29 2008-05-29 Method for transmitting authorization information and conditional access system front-end thereof Active CN101594294B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN2008101136677A CN101594294B (en) 2008-05-29 2008-05-29 Method for transmitting authorization information and conditional access system front-end thereof

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN2008101136677A CN101594294B (en) 2008-05-29 2008-05-29 Method for transmitting authorization information and conditional access system front-end thereof

Publications (2)

Publication Number Publication Date
CN101594294A CN101594294A (en) 2009-12-02
CN101594294B true CN101594294B (en) 2011-12-21

Family

ID=41408748

Family Applications (1)

Application Number Title Priority Date Filing Date
CN2008101136677A Active CN101594294B (en) 2008-05-29 2008-05-29 Method for transmitting authorization information and conditional access system front-end thereof

Country Status (1)

Country Link
CN (1) CN101594294B (en)

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105916031B (en) * 2016-05-09 2020-03-10 青岛海信宽带多媒体技术有限公司 Method and device for processing authorization management information

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1708009A (en) * 2004-06-11 2005-12-14 广州市环网信息高速公路有限公司 Service charge system based on unidirectional digital transmission system and charge mode thereof
CN1859559A (en) * 2005-12-31 2006-11-08 华为技术有限公司 Method for granting power to user in receiving system under digital TV condition
CN101005561A (en) * 2006-07-07 2007-07-25 天栢宽带网络科技(上海)有限公司 Message informing method and system for substituting traditional caption technology

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1708009A (en) * 2004-06-11 2005-12-14 广州市环网信息高速公路有限公司 Service charge system based on unidirectional digital transmission system and charge mode thereof
CN1859559A (en) * 2005-12-31 2006-11-08 华为技术有限公司 Method for granting power to user in receiving system under digital TV condition
CN101005561A (en) * 2006-07-07 2007-07-25 天栢宽带网络科技(上海)有限公司 Message informing method and system for substituting traditional caption technology

Also Published As

Publication number Publication date
CN101594294A (en) 2009-12-02

Similar Documents

Publication Publication Date Title
US20040123313A1 (en) Method for updating key in DCATV conditional access system
CN106155780B (en) node election method and device based on time
EP1659736B1 (en) Conditional access for a multimedia broadcast service using a wireless terminal
US7853198B2 (en) Delivering individualized content over a broadcast network
CN101946486A (en) Systems and methods for advertising insertion notification in a real-time streaming media service
US20060189319A1 (en) Control of a conditional access mechanism
JP2001518255A (en) Smart card for use with receiver of encrypted broadcast signal, and receiver
WO2009094502A1 (en) Efficient broadcast entitlement management message delivery mechanism using a scheduled delivery window
US9538222B2 (en) Device for the allocation and management of subscriptions for the reception of broadcast products
CN102124761B (en) System for maintaining the broadcasting information in usim unlock environment and method thereof
US20090316182A1 (en) Method of integrate managing integrated facsimile data and system thereof
CN102362506A (en) Request signal of an image program according to specific input sources based on the received list to the external display devices
CN1383280A (en) Data broadcast plan system, device, method, recording medium or program
CN101594294B (en) Method for transmitting authorization information and conditional access system front-end thereof
CN107959890B (en) Detection method, device, terminal and storage medium for reserved recording
KR100710335B1 (en) Mobile Telecommunication Device Having Function for Recording Program, Method thereby and System for Transmitting Broadcast Information
CN101646059B (en) Method for sending authorization management information, and conditional access system front-end thereof
CN101645827A (en) Method for sending authorization management information, and conditional access system front-end thereof
CN108924653A (en) Barrage message distributing method, device, equipment and storage medium
CN112887925A (en) Short message pushing method, edge server node and service server node
CN101945247B (en) Message sending method and device thereof
CN110493735B (en) Short message processing method and device
US20100281501A1 (en) System and method for delivering service guide information
US20090019529A1 (en) Method of Processing Authorization Messages Destined for a Plurality of Mobile Receivers and Method of Transmitting Such Messages
CN103686251B (en) System, method and device for playing program stream in multimedia broadcasting service

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C14 Grant of patent or utility model
GR01 Patent grant