DE102014011339A1 - Smart HDMI streaming adapter - Google Patents

Abstract

The invention relates to a video conversion device (1) with an HDMI interface (10) for connection to a display device (100) and to a network interface (20) for connection to a local area network (LAN), wherein the video conversion device (1) comprises a converter (5), which is set up to convert a video stream transported via Ethernet and / or by means of an IP protocol into an HDMI signal, wherein the video conversion device (1) has an authentication unit (30) which is set up, at least two MACs Addresses (21, 211, 221, 411) of two different devices (1, 200, 400) integrated in the local area network (LAN) and to an authentication server located beyond a home router (200) outside the local area network (LAN) ( 300). The invention further relates to an authentication server and a method for checking the authorization of a video conversion device (1) for receiving a video stream.

Description

The invention relates to an HDMI streaming adapter.

In the prior art exist streaming adapter such. For example, the Google Chromecast ^® , which is plugged into the HDMI port of a TV and then via WiFi from the Internet or the local network receives a video stream and outputs via the HDMI interface to the TV.

The WO 2009/073830 A1 shows an Ethernet-to-HDMI client plugged into the HDMI port of a TV and powered by Power Over Ethernet (PoE). It is a gaming client for online games.

A disadvantage of the prior art is z. B. the safety of the described systems. The object of the present invention is to improve the disadvantages of the prior art. The object is solved by the independent claims. Advantageous developments are defined in the subclaims.

In particular, the object is achieved by a video conversion device having an HDMI interface for connection to a display device and having a network interface for connection to a local area network, the video conversion device having a conversion device which is set up via Ethernet and / or by means of an IP network. Protocol to convert video stream into an HDMI signal, the video conversion device has an authentication unit which is adapted to read at least two MAC addresses of two different, integrated in the local network devices and to an outside of a homerout outside the local network authentication server send.

This makes it possible to ensure that the video conversion device is only authenticated if it is integrated in a specific network environment, which can thus be checked according to the invention by the existence of a specific further device or its MAC address. This is particularly in an embodiment of the video conversion device as z. B. mobile stick very beneficial, because this may be used in different network environments, but this may not be provided for licensing reasons of the video under certain circumstances. It is also possible to prevent or make it difficult for a device to be stolen if an unauthorized person uses the video conversion device if he is not in the intended network environment.

The display device is z. B. a TV with HDMI interface.

The network interface is preferably an Ethernet interface. It preferably has an RJ45 or Cat5 / 6/7 socket.

The HDMI interface preferably has an HDMI socket.

The home router is preferably a so-called. Customer Premises Equipment (CPE), z. B. a Fritz! Box ^® or in general a router, which also has a dial-up module (eg DSL modem) for connection to the Internet. It preferably has two network interfaces (internal, external), each with a MAC address.

The converter has z. B. decoder software and / or hardware, and with this the video stream received over the network is converted into an HDMI signal.

The video stream is z. B. an IP TV stream or z. B. Stream from a streaming portal such. B. YouTube ^® . It is Z. An MPEG stream, inter alia inter-coded frames.

The authentication unit is z. B. an electronic processing unit on which a program is executed, which reads out the MAC addresses and forwards. The authentication unit is z. B. set the read MAC addresses using the Address Resolution Protocol (ARP) to determine what z. For example, the Unix program arp is implemented in the authentication unit which reads out the ARP cache. The authentication unit thus reads z. For example, by means of arp, at least two MAC addresses (eg, one's own, i.e. the one of the video conversion device, as well as one of another device connected in the LAN) and forwards these at least two MAC addresses.

The authentication server is z. B. a server in the data center of a stream provider, the z. B. is connected to the home router via the Internet.

Preferably, the MAC address of the video conversion device and the internal or external MAC address of the homerouter are read out and forwarded or the video conversion device is set up accordingly. This makes it possible to check whether the video conversion device is used in a network environment that hangs on a particular Internet connection. In this way, z. B. even an authentication depending on the Internet provider take place, for. B. are only users of a telecom Internet connection authorized for use. For example, the Internet provider provides the MAC address of the access device to the authentication server in advance for authentication purposes. The MAC address of the video converter has also been previously stored in the authentication server - e.g. For example, the MAC address was registered prior to the sale of the video converter.

Preferably, the video conversion device is integrated in a powerline adapter or housed with this in a common housing communicating with another powerline adapter and it is the MAC address of the video conversion device and that of the other powerline adapter read and forwarded or is Set up video conversion device accordingly. In this way it can be ensured that use is only possible if the complete powerline adapter set - which z. B. provided by the authentication service provider or stream provider - is connected to the local network. In addition, as already described, the internal or external MAC address of the home router is particularly preferably read out and forwarded, or the video conversion device is set up accordingly, so that a combination of three addresses is used for the authentication overall, which results in even higher security.

In a further embodiment of the video conversion device according to the invention, the authentication unit is set up to perform a registration operation of the video conversion device on the authentication server by sending an IP message to the authentication server so that the authentication server obtains an external IP address of the home router through the IP message of the video conversion device receives.

This allows the authentication server to be notified that there is a video conversion device connected via the external IP address of the homerouter and ready to receive a video stream. This information can then be used (as will be described later in connection with the authentication method according to the invention) to implement a further security level. For example, the external IP address of a remote control device (eg a smartphone or tablet), which from the point of view of the authentication server has already successfully authenticated against the authentication server (for example insofar as a user of a stream subscription has at least its user name and password and / or certificate), compared with the external IP address obtained from the IP message of the video conversion device: if these are identical, the remote control device and the video conversion device are in the same network environment behind the homerouter what z. B. can be made as a (further) condition for successful authentication. Preferably, the video conversion device is adapted to receive a link to a video source from the remote control device and to open this link, so that - in the presence of authorization or authentication - a video stream can be received by the video conversion device - this is done, for. B. by DLNA.

In a further embodiment of the video conversion device according to the invention, the video conversion device has a network monitoring device which is set up to send one or more network quality parameters to a server located outside the local network, e.g. B. the authentication server to forward.

As a result, in particular a quick error analysis is possible. Thus, in case of error messages (or even routinely), the network quality of the local network can be checked by service workers or analysis programs of a stream or service provider and possibly. Errors can be corrected faster. A network quality parameter is z. A QoS parameter.

In a further embodiment of the video conversion device according to the invention, the video conversion device has a device for checking digital rights granted in the context of a DRM system.

This can add a level of security at the decoder level. Preferably, one or more DRM systems are implemented, e.g. One or more of the following DRM systems:
Actino DRM Server; Adobe Digital Editions; Adobe Protected Streaming; CoreMedia DRM; DMD Secure; Fair play; OMA DRM 1.0 and 2.0; RealNetworks helix; SDC AG - SDC DRM; Sun DReaM; VCAS Verimatrix Content Authority System; Microsoft Windows Media Digital Rights Management Version 10; Microsoft Play Ready.

In a further embodiment of the video conversion device according to the invention, the video conversion device has a powerline adapter which is integrated together with the conversion device in a device housing and the video conversion device has a common power supply for the powerline adapter and the converter.

In this way, on the one hand cabling (network cable, PoE network cable, power cable) and multiple device boxes or special components such as a PoE feed device can be omitted. The connection is easier overall. This is very important, especially in the field of IP television, because the corresponding user group often does not have the technical skills or the patience required to put different devices together with different cables. In addition, there is no need for a dedicated network connection (eg, a cat socket or a cable) at the location of the television, but a normal power outlet suffices.

In addition, this ensures greater security is achieved. While z. B. in the Chromecast ^® a WiFi connection is required, which is per se safety-critical and expensive to configure, according to the invention no Wi-Fi configuration is necessary and the video conversion device is protected against direct attacks via radio. In addition, this achieves a better data throughput. While a WiFi connection - especially in the case of many parallel WiFi networks - only allows relatively low data throughput, a powerline connection allows comparatively higher and more stable bandwidths.

The device housing is preferably a plug housing for a 220 V (or 110 V) socket. As a result, no mains voltage cable is required but only an HDMI cable from the video converter to the display device.

The video stream is thus received via the powerline adapter and the network interface. The network interface is preferably part of the powerline adapter or vice versa and / or the network interface and the powerline adapter are interconnected.

Under a powerline adapter is preferably a modulator / demodulator device understood in which the present in a household / building electrical lines with z. B. 230 V voltage to 50 or 60 Hz in addition to the transmission of data.

Under a common power supply is preferably understood that the converter and the powerline adapter (preferably also other components of the video conversion device) are supplied via a common power plug directly to the power required for operation. Particularly preferred is understood to mean that a common (switching) power supply is present, which supplies the converter and the powerline adapter with power.

In a further embodiment of the video conversion device according to the invention, the video conversion device is set up to send control signals to the display device by means of an IR transmitter.

This allows display devices by the video conversion device universal and with high compatibility to z. B. old TVs are controlled. For example, the volume can be varied.

In a further embodiment of the video conversion device according to the invention, the video conversion device is set up to switch the display device to an external input channel (eg video in or the corresponding program slot) when the video conversion device is activated.

This allows a very comfortable operation for the user. Switching is preferably carried out via a control signal, which is transmitted via the HDMI interface to the display device (this is then also possible for variants without IR transmitter). This is particularly preferably done via a control signal, which is forwarded to the display device by means of the IR transmitter.

The object is further achieved, in particular, by an authentication server which is connected to a home router via a data network, wherein an authentication program is executed on the authentication server, which is a method according to the invention for checking the authorization of a video conversion device for receiving a video stream, preferably according to one of the claims Claims 9 or 10, performs.

The video conversion device is preferably a video conversion device according to the invention.

• – Empfangen mindestens zweier MAC-Adressen von der Videokonvertierungsvorrichtung, wobei die MAC-Adressen verschiedenen, in dem lokalen Netzwerk eingebundenen Geräten zugeordnet sind;
• – Vergleichen dieser MAC-Adressen mit in einer Datenbank gespeicherten MAC-Adressen-Kombinationen;
• – Feststellen eines Vorliegens der Berechtigung nur dann, wenn zumindest die mindestens zwei MAC-Adressen eine Kombination bilden, welche identisch zu einer der gespeicherten MAC-Adressen-Kombinationen ist.

The object is further achieved, in particular, by a method for checking the authorization of a video conversion device for receiving a video stream, wherein the video conversion device is integrated in a local network and communicates with an authentication server via a homerouter,
and wherein the steps are performed by the authentication server:

• Receiving at least two MAC addresses from the video converting device, the MAC addresses being associated with different devices incorporated in the local network;
• Comparing these MAC addresses with MAC address combinations stored in a database;
• - Determining a presence of the authorization only if at least the at least two MAC addresses form a combination which is identical to one of the stored MAC address combinations.

The video conversion device is preferably a video conversion device according to the invention.

• – Auslesen einer externen IP-Adresse des Homerouters aus einer von der Videokonvertierungsvorrichtung an den Authentifizierungsserver gesendeten IP-Nachricht;
• – Vergleichen der externen IP-Adresse mit einer IP-Quelladresse einer IP-Nachricht eines bei dem Authentifizierungsserver angemeldeten Fernsteuergeräts;

wobei das Feststellen des Vorliegens der Berechtigung weiterhin nur dann erfolgt, wenn weiterhin die externe IP-Adresse und die IP-Quelladresse identisch sind.In a further method according to the invention, the following additional steps are carried out:

• - reading an external IP address of the home router from an IP message sent by the video converter to the authentication server;
• Comparing the external IP address with an IP source address of an IP message of a remote control device registered with the authentication server;

wherein the determination of the authorization continues to be made only if the external IP address and the IP source address are still identical.

As a result, authentication can be limited to the case where the remote control device and the video converting device are connected to the Internet via the same external IP address.

The remote control device is preferably a smartphone or tablet computer. The user is z. B. by entering user name and password and / or a certificate logged on the authentication server.

The invention will now be further illustrated by way of example with reference to the drawings. Hereby show:

1 a video conversion device according to the invention and an authentication server according to the invention,

2 Based on 1 a more specific embodiment of the video conversion device and the authentication server.

1 shows a video conversion device according to the invention 1 and an authentication server according to the invention 300 , The video conversion device 1 has an HDMI interface 10 for connection to a display device 100 on and a network interface 20 for connection to a local area network LAN. The video conversion device 1 has a converting device 5 which is set up to convert a video stream transported via Ethernet and / or by means of an IP protocol into an HDMI signal. The device 1 is about a homerouter 200 with the authentication server 300 connected. Preferably, the homerouter 200 two network interfaces 210 . 220 (internal, external) with one MAC address each 211 . 221 on. The device 1 has an authentication unit 30 which is set up, at least two MAC addresses, eg. For example, the MAC address 21 the device 1 itself and / or the internal MAC address 211 of the homerouter 200 and / or the external MAC address 221 of the homerouter 200 ie two different devices integrated in the local network LAN 1 . 200 and to the far side of a homerouter 200 authentication server outside the local network LAN 300 to send.

• – Empfangen mindestens zweier MAC-Adressen 21, 211, 221 von der Videokonvertierungsvorrichtung 1, wobei die MAC-Adressen 21, 211, 221 verschiedenen, in dem lokalen Netzwerks LAN eingebundenen Geräten 1, 200 zugeordnet sind;
• – Vergleichen dieser MAC-Adressen 21, 211 mit in einer Datenbank gespeicherten MAC-Adressen-Kombinationen; Feststellen eines Vorliegens der Berechtigung nur dann, wenn zumindest die mindestens zwei MAC-Adressen 21, 211, 221 eine Kombination bilden, welche identisch zu einer der gespeicherten MAC-Adressen-Kombinationen ist.

To verify the authorization of the video converter 1 To receive a video stream, the following steps are performed by the authentication server 300 carried out:

• - Receive at least two MAC addresses 21 . 211 . 221 from the video conversion device 1 , where the MAC addresses 21 . 211 . 221 various devices integrated in the local LAN network 1 . 200 assigned;
• - Compare these MAC addresses 21 . 211 with MAC address combinations stored in a database; Determining an existence of the authorization only if at least the at least two MAC addresses 21 . 211 . 221 form a combination which is identical to one of the stored MAC address combinations.

2 shows building up 1 a more specific embodiment of the video conversion device 1 and the authentication server 300 , An HDMI cable is the device 1 with the display device 100 connected. The device 1 has an IR transmitter 50 on the device 1 infected. A remote control device 500 , here a smartphone, is over the internet 600 in the authentication server 300 logged. The remote control device is preferably in the LAN (dash-dotted connection of device 500 to home server 200 ). The remote control device is preferred 500 set up a DLNA scan 60 perform and the device 1 is set up to respond to this scan. The device 1 is set up a link to a stream source from the remote control device 500 to receive and this - if successful authentication - to open. The video conversion device 1 has here a network monitoring device, which is set up, one or more network quality parameters to the authentication server 300 to forward. The converting device 5 is together with a powerline adapter 40 integrated in a device housing and the video conversion device 1 has a common power supply for the powerline adapter 40 and the converter 5 on. Another powerline adapter 400 with MAC address 411 is at the other end of the house line 450 (220 V) plugged into another outlet and with the home router 200 connected. The device 1 sends z. B. also the MAC address 411 with to the server 300 , The authentication server 300 is still with a data center 700 connected, which z. B. provides the video stream.

• – Auslesen der externen IP-Adresse des Homerouters 200 aus der von der Videokonvertierungsvorrichtung 1 an den Authentifizierungsserver 300 gesendeten IP-Nachricht;
• – Vergleichen der externen IP-Adresse mit einer IP-Quelladresse einer IP-Nachricht eines bei dem Authentifizierungsserver 300 angemeldeten Fernsteuergeräts 500;

wobei das Feststellen des Vorliegens der Berechtigung weiterhin nur dann erfolgt, wenn weiterhin die externe IP-Adresse und die IP-Quelladresse identisch sind.The authentication unit 30 the video conversion device 1 is set up, a registration process of the video conversion device 1 at the authentication server 300 perform an IP message to the authentication server 300 is sent, so the authentication server 300 an external IP address of the homerouter 200 through the IP message of the video conversion device 1 receives. On the authentication server 300 then the following steps are carried out:

• - Read the external IP address of the homerouter 200 from that of the video conversion device 1 to the authentication server 300 sent IP message;
• Compare the external IP address with an IP source address of an IP message of one at the authentication server 300 registered remote control device 500 ;

wherein the determination of the authorization continues to be made only if the external IP address and the IP source address are still identical.

The video conversion device 1 is further set up by way of example, by means of an IR transmitter 50 Control signals to the display device 100 to send. The IR transmitter is z. B. by USB on the device 1 connected. When activating the video conversion device 1 the display device is switched to the external input channel via the IR transmitter 50 connected.

With this invention, a video converting device, an authentication server and a method for checking the authorization of a video converting device for receiving a video stream has been presented, by means of which it is possible not only a MAC address but a combination of multiple MAC addresses, most preferably a MAC Address of the CPE to use for authentication. By using multiple MAC addresses, it can be ensured for the first time that the video conversion device is located in a specific network environment. Further preferred features have been presented, which u. a. to increase safety and user-friendliness.

LIST OF REFERENCE NUMBERS

1

Video conversion device

5

converting means

10

HDMI interface

20

Network Interface

21

MAC address of the video converter

30

authentication unit

40

Powerline adapter of the video conversion device

50

IR transmitter

60

DLNA scan

100

display device

200

Home router

210

internal network interface

220

external network interface

211, 221

MAC address of the homerouter

300

authentication server

400

Powerline adapters

411

MAC address of the powerline adapter 400

450

House power line

500

Remote control device

600

Internet

700

Data Center

LAN

Local network

QUOTES INCLUDE IN THE DESCRIPTION

This list of the documents listed by the applicant has been generated automatically and is included solely for the better information of the reader. The list is not part of the German patent or utility model application. The DPMA assumes no liability for any errors or omissions.

Cited patent literature

• WO 2009/073830 A1 [0003]

Claims (10)

Video conversion device ( 1 ), with an HDMI interface ( 10 ) for connection to a display device ( 100 ) and with a network interface ( 20 ) for connection to a local area network (LAN), the video conversion device ( 1 ) a converting device ( 5 ), which is set up to convert a video stream transported via Ethernet and / or by means of an IP protocol into an HDMI signal, characterized in that the video conversion device ( 1 ) an authentication unit ( 30 ), which is set up, at least two MAC addresses ( 21 . 211 . 221 . 411 ) of two different devices integrated in the local area network (LAN) ( 1 . 200 . 400 ) and to one beyond a homerouter ( 200 ) Authentication server located outside the local area network (LAN) ( 300 ) to send. Video conversion device ( 1 ) according to claim 1, wherein the authentication unit ( 30 ), a logon process of the video conversion device ( 1 ) at the authentication server ( 300 ) by sending an IP message to the authentication server ( 300 ), so that the authentication server ( 300 ) an external IP address of the home router ( 200 ) by the IP message of the video conversion device ( 1 ) receives. Video conversion device ( 1 ) according to one of the preceding claims, wherein the video conversion device ( 1 ) has a network monitoring device that is configured to send one or more network quality parameters to a server remote from the local area network (LAN), e.g. For example, the authentication server ( 300 ), to forward. Video conversion device ( 1 ) according to one of the preceding claims, wherein the video conversion device ( 1 ) has a facility for verifying digital rights granted under a DRM system. Video conversion device ( 1 ) according to one of the preceding claims, wherein the video conversion device ( 1 ) a powerline adapter ( 40 ), which together with the converter ( 5 ) is integrated in a device housing and wherein the video conversion device ( 1 ) a common power supply for the powerline adapter ( 40 ) and the converting device ( 50 ) having. Video conversion device ( 1 ) according to one of the preceding claims, wherein the video conversion device ( 1 ) is set up by means of an IR transmitter ( 50 ) Control signals to the display device ( 100 ) to send. Video conversion device ( 1 ) according to one of the preceding claims, wherein the video conversion device ( 1 ) when activating the video conversion device ( 1 ) the display device ( 100 ) to an external input channel. Authentication server ( 300 ), which via a data network ( 600 ) with a homerouter ( 200 ), characterized in that on the authentication server ( 300 ) an authentication program is executed, which is a method according to the invention for checking the authorization of a video conversion device ( 1 ) for receiving a video stream, preferably according to one of claims 9 or 10, performs. Method for checking the authorization of a video conversion device ( 1 ) for receiving a video stream, wherein the video converting device ( 1 ) in a local network (LAN) and via a home router ( 200 ) with an authentication server ( 300 ), characterized in that the following steps are performed by the authentication server ( 300 ): - receiving at least two MAC addresses ( 21 . 211 . 221 . 411 ) from the video conversion device ( 1 ), where the MAC addresses ( 21 . 211 . 221 . 411 ) various devices integrated in the local area network (LAN) ( 1 . 200 . 400 ) assigned; - Compare these MAC addresses ( 21 . 211 . 221 . 411 ) with MAC address combinations stored in a database; Determining a presence of the authorization only if at least the at least two MAC addresses ( 21 . 211 . 221 . 411 ) form a combination which is identical to one of the stored MAC address combinations. Method according to claim 9, wherein the following steps are performed: - reading an external IP address of the home router ( 200 ) from one of the video conversion device ( 1 ) to the authentication server ( 300 ) sent IP message; Compare the external IP address with an IP source address of an IP message of an authentication server ( 300 ) registered remote control device ( 500 ); wherein the determination of the authorization continues to be made only if the external IP address and the IP source address are still identical.

Images