CN104426888B - Method, server and the system that a kind of digital media server limitation accesses - Google Patents
Method, server and the system that a kind of digital media server limitation accesses Download PDFInfo
- Publication number
- CN104426888B CN104426888B CN201310400966.XA CN201310400966A CN104426888B CN 104426888 B CN104426888 B CN 104426888B CN 201310400966 A CN201310400966 A CN 201310400966A CN 104426888 B CN104426888 B CN 104426888B
- Authority
- CN
- China
- Prior art keywords
- digital media
- information
- key information
- control point
- request access
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/0876—Network architectures or network communication protocols for network security for authentication of entities based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L65/00—Network arrangements, protocols or services for supporting real-time applications in data packet communication
- H04L65/60—Network streaming of media packets
Abstract
A kind of method that digital media server limitation accesses includes：The request access information sent to Digital Media control point parses；When including key information in the request access information, extract the key information and verified；After key information is verified, corresponding directory content is mapped to the Digital Media control point by digital media server.A kind of digital media server includes resolution unit, and the request access information suitable for being sent to Digital Media control point parses；Authentication unit, suitable for when including key information in the request access information, extracting the key information and being verified；Transmitting element, suitable for after the key information is verified, corresponding directory content is mapped into the Digital Media control point.The present invention sets access rights using key, safe, flexible.
Description
Technical field
The present invention relates to method, server and the system that a kind of limitation of digital media server accesses.
Background technology
DLNA is a tissue, and the tissue is intended to establish an interoperable platform based on open industrial standard, and really
Vertical Technology design rule, for the relevant product of enterprise development digital home.Its target is formulated according to open industry-standard
The guide and specification of media formats, transmission and protocol interoperability, and other industrial standardization tissues are got in touch with, there is provided mutually behaviour
The property made test, and carry out the formulation and implementation of digital family market plan.DLNA uses UPNP（Universal Plug and
Play, UPnP）Agreement, as long as observing identical agreement, add equipment, the digital media controller of same network
It can be carried out interoperating.The Media Player of Windows operating system just contain DLNA functions, as long as Digital Media controls
Device is connected to same network with it, it is possible to using its service, such as obtains its resource to play or play resource
Above to it etc..
The applying of DLNA shares field in family multi-media will be more and more extensive, but it is as the number for providing media services
Word media server but has the defects of congenital, and the digital media server of standard does not provide any media content protection, as long as
Digital media controller is connected to same LAN with it, it is possible to the service provided using digital media server, so
It is unfavorable for the protection of digital media server content, it is likely that cause leaking for sensitive content.
At present in terms of the method for protection digital media server content, mainly have and service is not provided, such as whole numeral
Media server is closed；Optionally share some contents, such as specify only shared music either picture or only share which figure
Piece, music etc., there are these settings if the Media Player of Windows operating system.It is existing to be serviced by closing, set
Service in a certain respect is only provided（As only proposed music sharing）, and some specified files are only shared to protect digital media service
The content of device, such as the Media Player of Windows operating system, this limitation accesses the mode of digital media server content
Underaction, and it is cumbersome.
Existing be concentrated mainly on digital media server content protecting Patents is verified merely by IP address
The access rights of digital media controller, as Application No. CN201210201179.8 Chinese patent discloses a kind of control
The method and DLNA device of DLNA device Service Privileges, serviced by IP address to pre-set digital media controller and obtain
Corresponding relation, Digital Media verified according to this corresponding relation when digital media controller accesses digital media server
Whether controller can access the content of digital media server.This method also has weak point, because can not ensure numeral
Media controller and digital media server device IP address accessed when connecting to the Net every time all with last time one
Sample, thus will be reset when digital media controller or digital media server reconnect to network every time it is this right
It should be related to, this make it that operation is more cumbersome.
The content of the invention
To solve the above problems, the present invention provides a kind of method of digital media server limitation access, server and is
System.
A kind of method that digital media server limitation accesses, including：The request that Digital Media control point is sent is accessed
Information is parsed, and the request access information comprises at least directory information；Believe when including key in the request access information
During breath, extract the key information and verified；After the key information is verified, digital media server is by described in
Directory content corresponding to directory information in request access information maps to the Digital Media control point.
Further, when including key information in the request access information, the request access information includes successively
Directory information, blank character and key information, it is described to extract the key information and include the step of checking：
Extract the key information after the blank character；
By the key information extracted compared with preset key information, when the preset key information and extraction
When the key information gone out is consistent, the key information is verified.
Further, the blank character is spcial character.
Further, directory content corresponding to the directory information in the request access information is mapped into the digital matchmaker
The step of body control point, includes：
Extract the directory information before the blank character;
Directory content corresponding to the directory information extracted is mapped into the Digital Media control point.
Further, when not including key information in the request access information, the Digital Media control point is obtained
MAC Address, and by the MAC Address got compared with preset MAC Address, when the preset MAC Address is with obtaining
When the MAC got is consistent, the mac-address authentication is by by mesh corresponding to the directory information in the request access information
Content map is recorded to the Digital Media control point.
The invention also discloses a kind of digital media server, including：
Resolution unit, the request access information suitable for being sent to Digital Media control point parse, and the request accesses
Information comprises at least directory information；
Authentication unit, suitable for when including key information in the request access information, extracting the key information and going forward side by side
Row checking；
Transmitting element, suitable for after the key information is verified, the request is accessed letter by digital media server
Directory content corresponding to directory information in breath maps to the Digital Media control point.
Further, the request access information includes directory information, blank character and key information successively, and the checking is single
Member includes：
Extraction unit, suitable for the key information after the extraction blank character；
Comparing unit, suitable for by the key information extracted compared with preset key information, when described preset
When key information is consistent with the key information extracted, the key information is verified.
Further, the digital media server also includes MAC managers, and the MAC managers are suitable to ask when described
Ask when not including key information in access information, the MAC Address at the Digital Media control point is obtained, when the Digital Media control
The mac-address authentication of point is made by rear, directory content corresponding to the directory information in the request access information is mapped into institute
State Digital Media control point.
Present invention also offers a kind of digital media service system, including digital media server provided by the invention and number
Word media control point, the Digital Media control point are suitable to send request access information to the digital media server.
Compared with prior art, the present invention combines key and MAC Address sets access rights, safer, flexible.
Brief description of the drawings
Fig. 1 is the schematic flow sheet of the embodiment one for the method that digital media server limitation of the present invention accesses；
Fig. 2 is the schematic flow sheet of the embodiment two for the method that digital media server limitation of the present invention accesses.
Embodiment
In order that relevant technical staff in the field more fully understands technical scheme, below in conjunction with of the invention real
The accompanying drawing of mode is applied, the technical scheme in embodiment of the present invention is clearly and completely described, it is clear that described reality
Apply mode only a part of embodiment of the present invention, rather than whole embodiments.
As shown in figure 1, a kind of method that digital media server limitation accesses, including following steps.
Step S101, analysis request access information.
Specifically, the request access information sent to Digital Media control point parses, and the request access information is extremely
Include directory information less.The directory information refers to that Digital Media control point requires to access the ID of catalogue.
In a particular embodiment, the request access information can also include directory information, blank character and key letter successively
Breath.If request access information includes blank character, the request access information includes key information, sends the request access information
Digital Media control point for key digital media control point can be inputted；If request access information does not include blank character, send out
The Digital Media control point for giving the request access information is the ordinary numbers media control point that can not input key.
The blank character is spcial character, and the spcial character refers to other words outside numerical character and alphabetic character
Symbol, such as Greek character（α, β, γ, δ etc.）, tab（┍, ┏, ├, ┞ etc.）, mathematic sign（≠, ⊥, ∥ etc.）, Russion letter
（ч, л, п etc.）Deng.
Certainly, the blank character can also need to carry out other settings, the above-mentioned explanation on blank character according to user
It is only for example, this should not be limited the scope of the invention.
Step S102, judges whether the request access information includes key information；
When including key information in the request access information, perform step S103 and extract the key information and carry out
Checking.
The step of checking, includes：Extract the key information after the blank character, by the key information extracted with
Preset key information is compared, described close when the preset key information is consistent with the key information extracted
Key Information Authentication passes through.
In a particular application, multiple preset key informations can be set according to being actually needed, when the request accesses letter
Key information in breath for one of them the multiple preset key information when, that is, show that the key information is verified；
When the key information does not match with the multiple preset key information, it is logical to show that the key information is not verified
Cross, then ask whether this key being added in preset key, it is digital if allowing this key being added in preset key
The key is added in preset key and corresponding content is mapped into Digital Media control point by media server, if do not permitted
Perhaps, then terminate.
After being verified, step S104 is performed by content map to Digital Media control point.
Specifically, after the key information is verified, the catalogue letter before digital media server extraction blank character
Breath, the Digital Media control point is mapped to by directory content corresponding to the directory information extracted.
Directory content corresponding to the directory information is only a mapping of actual file, only comprising filename, class
Type, size, URL etc..Controlled that is, above-mentioned directory content is only mapped to the Digital Media by digital media server
Point, not data corresponding to directory information described in actual transmissions to the Digital Media control point.
For example, catalogue ID corresponding to the directory information that Digital Media control point is sent is XXX.X, three are included under catalogue ID
Individual subdirectory information, corresponding data are respectively under three subdirectory informations：Voice data, image data and text data.
After so execution of step S104, the essential information of three subdirectories is only mapped to digital matchmaker by the digital media server
Body control point, voice data, image data and text data corresponding to three subdirectories are not sent to Digital Media control
Point processed.
Fig. 2 shows the schematic flow sheet for the embodiment of the method two that digital media server limitation of the present invention accesses.With reference to
Fig. 2, compared with embodiment one, it is in place of the difference of embodiment two：Methods described also includes：Step S105 and step S106.
Step S105 is acquisition MAC Address and verifies MAC Address.Specifically, when asking not including key in access information
During information, then the Digital Media control point for sending the request access information is the ordinary numbers media control that can not input key
Point, digital media server obtains the MAC Address at the Digital Media control point, and will obtain MAC Address with preset MAC
Location is compared.
When preset MAC Address is consistent with the MAC Address at Digital Media control point, the mac-address authentication passes through；
When the MAC Address of preset MAC Address and Digital Media control point is inconsistent, the mac-address authentication is not by inquiring then
Whether this MAC Address is added in preset MAC Address, if allowing this MAC Address to be added in preset MAC Address, counted
This MAC Address is added in preset MAC Address and corresponding content is mapped into Digital Media control point by word media server, such as
Fruit does not allow, and terminates
Step S106 is by content map to Digital Media control point.
Specifically, when the mac-address authentication by after, corresponding directory content is mapped to institute by digital media server
State Digital Media control point.
In the present embodiment, step S101 refers to the corresponding steps in embodiment one to step S104, will not be repeated here.
Present invention also offers a kind of digital media server, including：
Resolution unit, the request access information suitable for being sent to Digital Media control point parse, and the request accesses
Information comprises at least directory information；
Authentication unit, suitable for when including key information in the request access information, extracting the key information and testing
Card, the authentication unit further comprise extraction unit and comparing unit, the extraction unit be suitable to extract the blank character it
Key information afterwards, the key information that the comparing unit is suitable to extract is compared with preset information, when described preset
Key information it is consistent with the key information extracted when, the key information is verified；
Transmitting element, suitable for after the key information is verified, the request is accessed letter by digital media server
Directory content corresponding to directory information in breath maps to the Digital Media control point.
Another embodiment of digital media server, including resolution unit, authentication unit and transmitting element, are also wrapped in addition
MAC managers are included, the MAC managers are suitable to, when not including key information in the request access information, obtain the number
The MAC Address at word media control point, when the Digital Media control point mac-address authentication by after, by it is described request access
Directory content corresponding to directory information in information maps to the Digital Media control point.
The present invention also provides a kind of digital media service system, including Digital Media control point and above-mentioned digital media service
Device, the Digital Media control point extend key entry module, are accessed suitable for sending request to the digital media server
Information.Digital Media control point in digital media service system of the present invention can send the request including key information and access letter
Breath to the digital media server, the digital media server is verified to the key information, after being verified
Corresponding directory content is mapped into the Digital Media control point, detailed process refers to foregoing teachings, will not be repeated here.
It should be noted that the Digital Media control point can also access the common Digital Media clothes for not setting key authority
Business device, step include：
Empty key is inputted, i.e., the request access information that described Digital Media control point is sent to digital media server is only wrapped
Containing directory information；
Mac-address authentication of the ordinary numbers media server to the Digital Media control point is by rear, by access information
Directory content corresponding to middle directory information maps to the Digital Media control point.
Specifically, digital media service system provided by the invention includes following several access types：
The first, the Digital Media control point for extending key entry module accesses the Digital Media clothes for setting key authority
Business device：Verify in the key for the Digital Media control point input for extending key entry module, be verified and may have access to；
Second, the Digital Media control point for extending key entry module accesses the common digital matchmaker for not setting key authority
Body server：Digital Media control point inputs empty key, i.e., its request access information sent only includes directory information, digital matchmaker
The MAC Address at Digital Media control point described in body server authentication, can be accessed after being verified；
The third, the Digital Media of setting key authority is accessed without the ordinary numbers media control point of key entry module
Server：Digital media server is provided with MAC managers, and digital media server obtains ordinary numbers media control point
MAC Address simultaneously verifies MAC Address, is verified and just may have access to；
Only express the several embodiments of the present invention above, its describe it is more specific and in detail, but can not therefore and
It is interpreted as the limitation to the scope of the claims of the present invention.It should be pointed out that for the person of ordinary skill of the art, do not taking off
On the premise of present inventive concept, various modifications and improvements can be made, these belong to protection scope of the present invention.Cause
This, the protection domain of patent of the present invention should be determined by the appended claims.
Claims (7)
1. a kind of method that digital media server limitation accesses, it is characterised in that including：
The request access information sent to Digital Media control point parses, and the request access information is believed including at least catalogue
Breath；
When including key information in the request access information, extract the key information and verified；
After the key information is verified, digital media server is corresponding by the directory information in the request access information
Directory content map to the Digital Media control point；
When including key information in the request access information, the request access information includes successively：Directory information, interval
Symbol and key information；It is described to extract the key information and include the step of checking：
Extract the key information after the blank character；
By the key information extracted compared with preset key information, when the preset key information and extract
When key information is consistent, the key information is verified.
2. the method that digital media server according to claim 1 limitation accesses, it is characterised in that the blank character is
Spcial character.
3. the method that digital media server limitation according to claim 1 accesses, it is characterised in that visit the request
Ask that the step of directory content corresponding to the directory information in information maps to the Digital Media control point includes：
Extract the directory information before the blank character；
Directory content corresponding to the directory information extracted is mapped into the Digital Media control point.
4. the method that digital media server limitation according to claim 1 accesses, it is characterised in that also include：Work as institute
State in request access information when not including key information, obtain the MAC Address at the Digital Media control point, and will get
MAC Address is described when the preset MAC Address is consistent with the MAC got compared with preset MAC Address
Mac-address authentication by directory content corresponding to the directory information in the request access information by mapping to the digital matchmaker
Body control point.
A kind of 5. digital media server, it is characterised in that including：
Resolution unit, the request access information suitable for being sent to Digital Media control point parse, the request access information
Including at least directory information；
Authentication unit, suitable for when including key information in the request access information, extracting the key information and being tested
Card；
Transmitting element, suitable for after the key information is verified, digital media server is by the request access information
Directory information corresponding to directory content map to the Digital Media control point；
The request access information includes directory information, blank character and key information successively, and the authentication unit includes：
Extraction unit, suitable for the key information after the extraction blank character；
Comparing unit, suitable for by the key information extracted compared with preset key information, when the preset key
When information is consistent with the key information extracted, the key information is verified.
6. digital media server according to claim 5, it is characterised in that also including MAC managers, the MAC pipes
Reason device is suitable to the MAC Address for when not including key information in the request access information, obtaining the Digital Media control point,
When the Digital Media control point mac-address authentication by after, by it is described request access information in directory information corresponding to
Directory content maps to the Digital Media control point.
A kind of 7. digital media service system, it is characterised in that including the digital media server described in claim 5 or 6 and
Digital Media control point, the Digital Media control point are suitable to send request access information to the digital media server.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201310400966.XA CN104426888B (en) | 2013-09-05 | 2013-09-05 | Method, server and the system that a kind of digital media server limitation accesses |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201310400966.XA CN104426888B (en) | 2013-09-05 | 2013-09-05 | Method, server and the system that a kind of digital media server limitation accesses |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN104426888A CN104426888A (en) | 2015-03-18 |
| CN104426888B true CN104426888B (en) | 2017-11-28 |
Family
ID=52974834
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201310400966.XA Active CN104426888B (en) | 2013-09-05 | 2013-09-05 | Method, server and the system that a kind of digital media server limitation accesses |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN104426888B (en) |
Families Citing this family (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN105978914B (en) * | 2016-07-18 | 2019-05-21 | 北京小米移动软件有限公司 | Web access method and device |
| CN117668920B (en) * | 2024-02-02 | 2024-05-03 | 杭州高特电子设备股份有限公司 | Secure access method, system, equipment and medium based on internal energy storage system |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| KR20080043925A (en) * | 2006-11-15 | 2008-05-20 | 엘지전자 주식회사 | Method for controlling access for file |
| CN102340496A (en) * | 2010-07-28 | 2012-02-01 | 鸿富锦精密工业（深圳）有限公司 | Digital media controller and method for sharing inter-network media contents by utilizing same |
| CN102882830A (en) * | 2011-07-11 | 2013-01-16 | 华为终端有限公司 | Media resource access control method and equipment |
| CN102891836A (en) * | 2011-07-22 | 2013-01-23 | 中兴通讯股份有限公司 | UPnP (Universal Plug And Play) access control method, server and client |
-
2013
- 2013-09-05 CN CN201310400966.XA patent/CN104426888B/en active Active
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| KR20080043925A (en) * | 2006-11-15 | 2008-05-20 | 엘지전자 주식회사 | Method for controlling access for file |
| CN102340496A (en) * | 2010-07-28 | 2012-02-01 | 鸿富锦精密工业（深圳）有限公司 | Digital media controller and method for sharing inter-network media contents by utilizing same |
| CN102882830A (en) * | 2011-07-11 | 2013-01-16 | 华为终端有限公司 | Media resource access control method and equipment |
| CN102891836A (en) * | 2011-07-22 | 2013-01-23 | 中兴通讯股份有限公司 | UPnP (Universal Plug And Play) access control method, server and client |
Also Published As
| Publication number | Publication date |
|---|---|
| CN104426888A (en) | 2015-03-18 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN103249045B (en) | A kind of methods, devices and systems of identification | |
| CN103501304B (en) | method and device for controlling unauthorized access of web system | |
| JP5826399B2 (en) | Method and apparatus for controlling contents of digital living network alliance | |
| CN101163161B (en) | United resource localizer address filtering method and intermediate transmission equipment | |
| CN105592046B (en) | A kind of authentication-exempt access method and device | |
| CN106354634A (en) | Interface testing method and device | |
| CN104683736A (en) | Method and system for acquiring network video | |
| CN104144167B (en) | User login authentication method of open intelligent gateway platform | |
| CN105812321B (en) | A kind of Network File System and processing method based on subscriber information management file resource | |
| CN104025544A (en) | Sensitive information leakage prevention system, sensitive information leakage prevention method, and computer-readable recording medium | |
| JP5905961B2 (en) | Authority control method and apparatus for digital living network alliance | |
| Saint-Andre | Internationalized resource identifiers (IRIs) and uniform resource identifiers (URIs) for the extensible messaging and presence protocol (XMPP) | |
| CN103178969B (en) | A kind of service authentication method and system | |
| CN104426888B (en) | Method, server and the system that a kind of digital media server limitation accesses | |
| CN107566329A (en) | A kind of access control method and device | |
| CN105991679B (en) | A kind of implementation method and device of network sharing | |
| CN103067389B (en) | High safety file transfer method based on short website | |
| CN105049546B (en) | A kind of Dynamic Host Configuration Protocol server is the method and device of client distribution IP address | |
| CN108156092A (en) | message transmission control method and device | |
| CN107295006A (en) | Authentication-exempt accesses URL method and system | |
| CN106302479A (en) | A kind of single-point logging method for multi-service internet site and system | |
| CN1592221B (en) | Method for realizing network access control | |
| US20160028856A1 (en) | Method, system and apparatus for providing services across networks | |
| CN102984163B (en) | Control the method and system of multiple host access networks of same IP address | |
| RU2009144604A (en) | METHOD FOR MANAGING ACCESS TO INFORMATION RESOURCES OF COMPUTER NETWORKS OF DIFFERENT PRIVACY LEVELS AND DEVICE IMPLEMENTING IT |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant | ||
| TR01 | Transfer of patent right |
Effective date of registration: 20201120 Address after: 221700 4-1-110-shop, Nanyuan new town, Fengxian County, Xuzhou City, Jiangsu Province Patentee after: Song Yixiao Address before: 201616 Shanghai city Songjiang District Guangfulin Road No. 4855, No. 20 in the territory Patentee before: Phicomm (Shanghai) Co.,Ltd. |
|
| TR01 | Transfer of patent right |