CN105578208A - IPTV video encryption transmission system - Google Patents
IPTV video encryption transmission system Download PDFInfo
- Publication number
- CN105578208A CN105578208A CN201510748002.3A CN201510748002A CN105578208A CN 105578208 A CN105578208 A CN 105578208A CN 201510748002 A CN201510748002 A CN 201510748002A CN 105578208 A CN105578208 A CN 105578208A
- Authority
- CN
- China
- Prior art keywords
- hardware
- video
- server
- software
- encryption
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/20—Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
- H04N21/23—Processing of content or additional data; Elementary server operations; Server middleware
- H04N21/234—Processing of video elementary streams, e.g. splicing of video streams, manipulating MPEG-4 scene graphs
- H04N21/2347—Processing of video elementary streams, e.g. splicing of video streams, manipulating MPEG-4 scene graphs involving video stream encryption
Abstract
The invention provides an IPTV hardware encryption transmission broadcast control system for the features of large video data volume transmitted on an IPTV network and high requirements for real-time performance and continuity. The system is formed by a scrambling machine (002), a conditional access system (CAS) server (003), a subscriber management system (SMS) server (004), a program storage video server (005), a general clear stream IPTV set top box (006) and a USB video hardware decryption disc (007). The video stream is subjected to real-time encryption and decryption processing through special hardware equipment in the whole transmission process; the encrypted real-time or non-real-time large-data-volume videos are transmitted on the internet; and the system is specially provided with the scrambling machine (002) for carrying out encryption and decryption on the video stream through hardware and the USB video hardware decryption disc (007), utilizes the standard DVB transport stream (TS) as a system transmission basic data format, and supports various standard video formats, including MPEG1, MPEG2, H264 and H265 and the like, as well as data transmission protocols of UDP, HTTP and HLS and the like.
Description
Technical field
This project relates to the Internet digital video and the field such as network security transmission, copyright protection.
Background technology
In recent years along with the develop rapidly of the Internet, internet television also rapidly prosperity get up.Internet television can provide high-quality video frequency program, user can very freely select video frequency program on wideband IP network, realize the substantive interaction of media provider and media consumer's, for network Development business and program offers provide wide emerging market.But IPTV also exists very strong robber's chain, not easily charges, is easy to be intercepted and captured problems such as seeing at present.Steal chain and refer to the content that service provider oneself does not provide service, other gainful end-user interface (as advertisement) is walked around by technological means, the service content of other service provider is directly provided to end user on the website of oneself, gains browsing and clicking rate of end user by cheating.Beneficiary does not provide resource or provides little resource, and real service provider can not get income.Due to content transmission is clear stream, and video content is easy to be intercepted and captured see, the fail safe of transmission of video greatly reduces.Video flowing is encrypted transmission by this project, fundamentally thoroughly solves above problem.
Summary of the invention
The video data volume of transmission over networks is very large, and real-time, continuity require high.Therefore conventional file encryption mode is inapplicable when passing video.Video data is transmitted by clear stream now substantially.Because data volume is relatively little, file encryption is completed by the equipment of the U shield of software or the very low ancillary hardware such as similar bank of process operational capability substantially.The IPTV video stream data amount that multiple programs broadcasts simultaneously is very huge, can not be processed by the processing method of above-mentioned process file and disposal ability completely.In this project, video flowing is carry out real-time encrypt and decrypt process by special hardware device in whole transmitting procedure, the video of the real-time or non real-time big data quantity of Transmission Encryption on the internet, core architecture devises the scrambling machine (002) and USB vision hardware deciphering dish (007) that use hardware video flowing to be encrypted to deciphering, a whole set of video-encryption of this Project design transmission IPTV broadcast control system, this cover system is encrypted video flowing, what ensure to transmit on the internet in transmitting procedure is encrypted video stream, like this, even if can not be in sight after being intercepted and captured.This system ensure that the normal of IPTV Broadcast Control function.
This system special emphasis devises the scrambling machine (002) and USB vision hardware deciphering dish (007) that use hardware video flowing to be encrypted to deciphering.Whole system is made up of scrambling machine (002), condition receiving system (CAS) server (003), Subscriber Management System (SMS) server (004), program storage video server (005), general clear stream IPTV set top box (006), USB vision hardware deciphering dish (007).Wherein general clear stream IP Set Top Box (006), USB vision hardware deciphering dish (007) constitute user side (008).Within the system, Reinforced turf enciphering and deciphering algorithm is privately owned, and Reinforced turf enciphering and deciphering algorithm is for different user ID identifiers, different programs, and the different time periods, different key is not identical.Each scrambling machine (002) and each USB vision hardware deciphering dish (007) have unique ID identifier, and this contributes to the fail safe of raising system.The basic data form of system transfers is the dvb transport stream (TS stream) of standard, be called underlying transport carrier bag, no matter the video frequency program of various standard such as MPEG1, MPEG2, H264, H265 etc. or UDP, HTTP, HLS Data Transport Protocol file are all first packaged into underlying transport carrier bag, and then encrypted transmission, therefore support the transmission of all videos form or UDP, HTTP, HLS file format.
Operation principle and the data flow of this system are as follows: clear stream video frequency program is exported by program storage video server (005), enter scrambling machine (002) scrambling.Video frequency program after scrambling is directly sent on the Internet.Condition receiving system (CAS) server (003) is in charge of scrambling machine (002).The generation of key and to the scrambling of data all in the outside that scrambling machine inside completes, sensitive data does not appear at scrambling machine, ensure that the fail safe of system.The database purchase of Subscriber Management System (SMS) server (004) also manages whole user data, is responsible for opening an account of user, cancellation, the type service of purchase, term of validity management etc. subscriber management function.It provides enough information by frequent and condition receiving system (CAS) server (003) communication.After encrypted video flows through the Internet arrival user side (008), the double secret key video flowing after user side (008) needs basis synchronous carries out scramble process, solves the clear stream of corresponding video frequency program, gives set top box decodes and plays.User side (008) is by general clear stream IPTV set top box (006), form for this systematic difference program (APP) and USB vision hardware deciphering dish (007).This system can better commercialization to adopt universal set-top box (STB) ensure that, for this systematic difference program of support that different set-top box platforms such as Android platform needs installation different.USB vision hardware deciphering dish (007) is core, IPTV set top box (006) exports encrypted video stream to USB vision hardware deciphering dish (007), and USB vision hardware deciphering dish (007) is decrypted scramble process according to the synchronisation key convection current of self-management.Clear stream after deciphering is exported to IPTV set top box (006) by USB interface, and this Set Top Box is carried out decoding to clear stream and is exported.Another Main Function of USB vision hardware deciphering dish (007) is the different key generating, manage, synchronously use this user for different user.Communication and key synchronization is carried out by Subscriber Management System (SMS) server (004) of USB port and Set Top Box and head end.Secret generating management and descrambling function all complete in USB vision hardware deciphering dish (007) inside, occur on the system bus without any sensitive data.Scrambling machine (002) inside includes secret generating and synchronizing function module and scrambling module, and these two functional modules all complete in scrambling machine inside.
The fail safe of system is as follows: the use of USB vision hardware deciphering dish (007) ensure that rear end is hardware decryption, corresponding front end scrambling machine (002) is also hardware encipher, hardware ensure that cryptographic algorithm is high strength, is difficult to by Brute Force, ensure that fail safe.The design of this encrypting and deciphering system reaches the rank of advanced security, same section of enciphered data, and the key used during each USB vision hardware deciphering dish (007) deciphering is different, effectively prevent key and is shared.Each USB vision hardware deciphering dish (007) has a unique coding.After program is encrypted, programme content on server just do not steal the meaning of chain, and it is also useless to steal, and domestic consumer does not see at all, USB vision hardware deciphering dish (007) of rear end must be held, and use the deciphering application software of this system to be just likely decrypted video data.
Data-handling capacity is as follows: the speed of an encrypting module deal with data in this system in front end scrambling machine (002) can reach 500Mbit/s, can multiple encrypting module superposition.During the deciphering of rear end USB vision hardware deciphering dish (007), the speed of deal with data can reach 40Mbit/s.Real-time live broadcast data can be encrypted, as long as total bandwidth does not reach the upper limit, the programme televised live sum of simultaneously encryption almost can there is no the upper limit.For programme televised live, the Data Transport Protocol of current support has the agreements such as UDP, HTTP, HLS, data format is the transport stream (TS stream) of the DVB of standard, and do not limit for the compression standard of audio/video program, MPEG1, MPEG2, H264, H265 etc. support.The non real-time file for program request can be encrypted, non-real-time file is taked to the mode of " preliminary treatment ", " pre-encrypt ", data format in file is the transport stream (TS stream) of the DVB of standard, compression standard for audio/video program does not limit, and MPEG1, MPEG2, H264, H265 etc. support.
Data management and subscriber management function as follows: encryption and decryption can be divided into different product bags and set meal bag to different programs, convenient manage by different prices.User management is very flexible, because each USB vision hardware deciphering dish (007) has a unique coding, front-end server is just easy to manage user, by the decryption of video software of front-end server and rear end, independent user can be carried out " opening mandate " and " close and authorize ".Can certainly " opening mandate ", " pass mandate " in batches.Open an account very convenient, import batch by files in batch and open an account, also allow each user's separate Login website to open an account, also support that Quick Response Code scanning is opened an account.Supplement with money and continue to pay dues easily, support that each user's separate Login website continues to pay dues, also support that scanning Quick Response Code continues to pay dues, also support to send short messages to continue to pay dues.
The portability of front and back end: the encryption server of native system supports the agreements such as UDP, HTTP, HLS of standard, current most of front end system can be accessed easily, when embedding this scrambling machine (002) in systems in which, front end system needs to do transplanting work hardly, only need revise port numbers just passable.The transplanting workload of the deciphering application software in the Set Top Box of native system is also very little, only need add a small amount of prompting menu and partial function module youngster, finely tune.
Accompanying drawing explanation
Fig. 1 is IPTV video-encryption transmission system block diagram.
Embodiment
Program storage video server (005): the commercial video server buying or rent standard.General clear stream IP Set Top Box (006): adopt the commercial set-top boxes hardware and software platform of general clear stream of can decoding as clear stream IPTV set top box (006), this project provides application programming interfaces, develop jointly with set-top box design person the application software supporting native system, the software of exploitation is installed on the set-top box.Subscriber Management System (SMS) server (004): the hardware of this server adopts normal business server, and the database in software adopts normal business database software.Oneself develop Subscriber Management System (SMS) application software, software is installed and is run on the server, this software simulating subscriber management functions such as opening an account of user, cancellation, type service, video frequency program bag kind, term of validity management.Condition receiving system (CAS) server (003): the hardware of this server adopts normal business server, oneself develops condition receiving system application software.This software is installed and is run on the server, the functions such as the mandate of user of this software simulating, anti-mandate, charge, fingerprint, transmission instruction, bulletin.Scrambling machine (002): hardware is made up of server and encryption scrambling module two parts.The hardware of server adopts normal business server.Encryption scrambling module R & D design voluntarily, this module has been come by one piece of hardware board employing pci bus inserting server internal, this board employs powerful chip to complete encryption scrambling.This chip internal has powerful CPU and performs the powerful hardware co-processor of enciphering and deciphering algorithm.Develop the encryption scrambling software run on this chip in this project for the hardware resource of this chip, under the support of this software powerful hardware co-processor of CPU and execution enciphering and deciphering algorithm in powerful sheet, complete the functions such as the encryption scrambling of scrambling machine (002), the generation of key and management.In the burned chip of encryption scrambling software, on chip, the writing mechanism of software program itself has function of keeping secret, and after write, software can only run at chip internal, can not read, this ensure that the fail safe of scrambling machine (002).Multiple encryption scrambling module overlaying function supported by scrambling machine, and both a station server can support that plurality of plates card stack added.USB vision hardware deciphering dish (007): completed by the device of an outward appearance as USB memory disc, this device inside employs powerful chip to complete deciphering and descrambling function.This chip internal has powerful CPU and performs the powerful hardware co-processor of enciphering and deciphering algorithm.Develop the deciphering and descrambling software run on this chip in this project for the hardware resource of this chip, this software in powerful sheet CPU and perform enciphering and deciphering algorithm powerful hardware co-processor hardware supports under complete the functions such as deciphering and descrambling, the generation of key, management are synchronous, storage, customer identification number management.In the burned chip of deciphering and descrambling software, on chip, the writing mechanism of software program itself has function of keeping secret, and after write, software can only run at chip internal, can not read, all sensitive datas all run at chip internal, this ensure that the fail safe of USB vision hardware deciphering dish (007).
Claims (7)
1. an IPTV video-encryption transmission system, it is characterized in that, video flowing is carry out real-time encrypt and decrypt process by special hardware device in whole transmitting procedure, the video of the real-time or non real-time big data quantity of Transmission Encryption on the internet, core architecture devises the scrambling machine (002) and USB vision hardware deciphering dish (007) that use hardware video flowing to be encrypted to deciphering, whole system is by scrambling machine (002), condition receiving system (CAS) server (003), Subscriber Management System (SMS) server (004), program storage video server (005) forms.
2. a kind of IPTV video-encryption transmission system according to claim 1, it is characterized in that, scrambling machine (002) is privately owned with the Reinforced turf enciphering and deciphering algorithm of USB vision hardware deciphering dish (007), and Reinforced turf enciphering and deciphering algorithm is for different user ID identifiers, different programs, the different time periods, different key is not identical, and each scrambling machine (002) and each USB vision hardware deciphering dish (007) have unique ID identifier.
3. a kind of IPTV video-encryption transmission system according to claim 1, it is characterized in that, the basic data form of system transfers is the dvb transport stream (TS stream) of standard, be called underlying transport carrier bag, no matter the video frequency program of various standard such as MPEG1, MPEG2, H264, H265 etc. or UDP, HTTP, HLS Data Transport Protocol file are all first packaged into underlying transport carrier bag, and then encrypted transmission, therefore support the transmission of all videos form or UDP, HTTP, HLS file format.
4. a kind of IPTV video-encryption transmission system according to claim 1, it is characterized in that, adopt the commercial set-top boxes hardware and software platform of general clear stream of can decoding as clear stream IPTV set top box (006), this project provides application programming interfaces, the application software supporting native system is developed jointly with set-top box design person, the software of exploitation is installed on the set-top box, USB vision hardware deciphering dish (007) receives the encryption stream of input, then exports clear stream to clear stream IPTV set top box (006).
5. a kind of IPTV video-encryption transmission system according to claim 1, it is characterized in that, the hardware of Subscriber Management System (SMS) server (004) and condition receiving system (CAS) server (003) adopts normal business server, database in software adopts normal business database software, oneself develop Subscriber Management System (SMS) application software, software is installed and is run on the server, this software simulating the opening an account of user, cancellation, type service, video frequency program bag kind, the subscriber management functions such as term of validity management, oneself develop condition receiving system (CAS) application software, this software is installed and is run on the server, the mandate of user of this software simulating, anti-mandate, charge, fingerprint, send instruction, the functions such as bulletin.
6. a kind of IPTV video-encryption transmission system according to claim 1, it is characterized in that, the hardware of scrambling machine (002) is made up of server and encryption scrambling module two parts, the hardware of server adopts normal business server, encryption scrambling module R & D design voluntarily, this module has been come by one piece of hardware board employing pci bus inserting server internal, this board employs powerful chip to complete encryption scrambling, this chip internal has powerful CPU and performs the powerful hardware co-processor of enciphering and deciphering algorithm, develop the encryption scrambling software run on this chip for the hardware resource of this chip in this project, this software completes the encryption scrambling of scrambling machine (002) under the support of hardware, the functions such as the generation of key and management, in the burned chip of encryption scrambling software, maintain secrecy and can not read.
7. a kind of IPTV video-encryption transmission system according to claim 1, it is characterized in that, USB vision hardware deciphering dish (007) is completed by the device of an outward appearance as USB memory disc, this chip internal has powerful CPU and performs the powerful hardware co-processor of enciphering and deciphering algorithm, develop the deciphering and descrambling software run on this chip for the hardware resource of this chip in this project, deciphering and descrambling is completed under the support of this software hardware in powerful sheet, the generation of key, management is synchronous, store, the functions such as customer identification number management, in the burned chip of deciphering and descrambling software, maintain secrecy and can not read.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510748002.3A CN105578208A (en) | 2015-11-06 | 2015-11-06 | IPTV video encryption transmission system |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510748002.3A CN105578208A (en) | 2015-11-06 | 2015-11-06 | IPTV video encryption transmission system |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN105578208A true CN105578208A (en) | 2016-05-11 |
Family
ID=55887803
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201510748002.3A Pending CN105578208A (en) | 2015-11-06 | 2015-11-06 | IPTV video encryption transmission system |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN105578208A (en) |
Cited By (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN106331751A (en) * | 2016-08-31 | 2017-01-11 | 广州易方信息科技有限公司 | Online encrypted slice video playing method based on iOS operating system |
| CN108235062A (en) * | 2017-12-28 | 2018-06-29 | 北京歌华有线电视网络股份有限公司 | A kind of system and method for playing out internet video introducing cable television network |
| CN115065843A (en) * | 2022-07-22 | 2022-09-16 | 广州万协通信息技术有限公司 | Video encryption and decryption processing method and system under security authentication |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1668101A (en) * | 2004-03-10 | 2005-09-14 | 浙江大学 | A conditional reception system merging Internet and cable television network environments |
| US20080123844A1 (en) * | 2005-09-28 | 2008-05-29 | Chao Sun | Method for realizing preview of iptv programs, an encryption apparatus, a right center system and a user terminal |
| CN101299814A (en) * | 2008-06-11 | 2008-11-05 | 中国科学院计算技术研究所 | System and method for protection of digital electric image and sound video copyright |
| CN101843109A (en) * | 2007-11-01 | 2010-09-22 | Lg电子株式会社 | The method of deal with data and IPTV receiving equipment |
| CN102340702A (en) * | 2010-07-23 | 2012-02-01 | 航天信息股份有限公司 | IPTV (Internet protocol television) network playing system and rights management and descrambling method based on USB (Universal serial bus) Key |
-
2015
- 2015-11-06 CN CN201510748002.3A patent/CN105578208A/en active Pending
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1668101A (en) * | 2004-03-10 | 2005-09-14 | 浙江大学 | A conditional reception system merging Internet and cable television network environments |
| US20080123844A1 (en) * | 2005-09-28 | 2008-05-29 | Chao Sun | Method for realizing preview of iptv programs, an encryption apparatus, a right center system and a user terminal |
| CN101843109A (en) * | 2007-11-01 | 2010-09-22 | Lg电子株式会社 | The method of deal with data and IPTV receiving equipment |
| CN101299814A (en) * | 2008-06-11 | 2008-11-05 | 中国科学院计算技术研究所 | System and method for protection of digital electric image and sound video copyright |
| CN102340702A (en) * | 2010-07-23 | 2012-02-01 | 航天信息股份有限公司 | IPTV (Internet protocol television) network playing system and rights management and descrambling method based on USB (Universal serial bus) Key |
Cited By (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN106331751A (en) * | 2016-08-31 | 2017-01-11 | 广州易方信息科技有限公司 | Online encrypted slice video playing method based on iOS operating system |
| CN106331751B (en) * | 2016-08-31 | 2019-05-31 | 广州易方信息科技股份有限公司 | A kind of online encrypted slice video broadcasting method based on iOS operating system |
| CN108235062A (en) * | 2017-12-28 | 2018-06-29 | 北京歌华有线电视网络股份有限公司 | A kind of system and method for playing out internet video introducing cable television network |
| CN108235062B (en) * | 2017-12-28 | 2022-04-12 | 北京歌华有线电视网络股份有限公司 | System and method for introducing Internet video into cable television network for playing |
| CN115065843A (en) * | 2022-07-22 | 2022-09-16 | 广州万协通信息技术有限公司 | Video encryption and decryption processing method and system under security authentication |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| JP5665843B2 (en) | Methods for upgrading content encryption | |
| CN101719910B (en) | Terminal equipment for realizing content protection and transmission method thereof | |
| CN101453624B (en) | Playing on demand system for video | |
| US9479825B2 (en) | Terminal based on conditional access technology | |
| CN101459826B (en) | Copyright protection method for video play-on-demand system | |
| US20040068659A1 (en) | Method for secure distribution of digital data representing a multimedia content | |
| JP2002123496A (en) | Device and method for receiving contents, storage medium and server | |
| CN102202233B (en) | Video push method, system and terminal equipment | |
| CN101350918B (en) | Method for protecting copyright of video content | |
| CN100401769C (en) | Method for enciphering and deciphering living-broadcasting flow-medium data | |
| MXPA04000571A (en) | System for receiving broadcast digital data comprising a master digital terminal, and at least one slave digital terminal. | |
| CN105491409A (en) | Enhancement CA system in digital television system | |
| CN102340702B (en) | IPTV (Internet protocol television) network playing system and rights management and descrambling method based on USB (Universal serial bus) Key | |
| US9544276B2 (en) | Method for transmitting and receiving a multimedia content | |
| CN105578208A (en) | IPTV video encryption transmission system | |
| CN103237011B (en) | Digital content encryption transmission method and server end | |
| CN105407366B (en) | A kind of internet video and data file hardware encryption transmission system | |
| CN101145932B (en) | A realization method and system for program stream secret key in mobile multi-media broadcast service | |
| US10477151B2 (en) | Method and apparatus for supporting multiple broadcasters independently using a single conditional access system | |
| CN106559682B (en) | A kind of method and device of DTV finger water-print protection | |
| CN101442660B (en) | System for receiving download type digital television condition and dynamic download method thereof | |
| TW201203991A (en) | Protection method, decrypting method, recording medium and terminal for this protection method | |
| WO2008031292A1 (en) | Encrypting method for hard disk in set top box of cable television system | |
| CN101583013B (en) | Method of real-time downloading CAS core algorithm | |
| CN103988513A (en) | Method, cryptographic system and security module for descrambling content packets of a digital transport stream |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20160511 |
|
| RJ01 | Rejection of invention patent application after publication |