JP2000183964A - Data receiver and data receiving method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To secure security without changing hardware on the transmitting and receiving sides by generating second identification information intrinsic to the receiving side to be replaced with first identification information inherent to the receiving side, transmitting the second identification information to a transmitting means via a second transmission line together with a transfer request and extracting only data corresponding to the second identification information of each received data at a terminal means. SOLUTION: A ground channel 4 and the Internet are applied as the second transmission line to connect a client personal computer 3 with a service provider. In this case, an IEEE 1394 interface 24 is provided in a reception port connected with the client personal computer 3 in a receiver. An inherent node unique ID for terminal identification which is allocated to the IEEE 1394 interface when utilization of the Internet service is started is transmitted to the service provider on the transmitting side via the ground channel 4 and the Internet successively.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a data receiving apparatus and a data receiving method, and is preferably applied to, for example, a data receiving apparatus and a data receiving method for receiving various data of an Internet service via digital satellite broadcasting. It is something.

[0002]

2. Description of the Related Art Recently, an Internet system using digital satellite broadcasting has been considered. In this case, FIG.
In the satellite Internet system 1 shown in FIG. 1, when a user uses an Internet service, first, a client personal computer (Person
al Computer) 3 transmits identification data unique to the client partner computer 3 to an ISDN (Integrated) before transmitting a transfer request for service information (for example, a WWW (World Wide Web) browser) desired by the user.
Services Digital Network) and the like to a service provider 6 via a ground line 4 and the Internet 5.

A service provider 6 can use a service ID that can be used as authentication confirmation information only when the client partner computer 3 authenticates that the client partner computer 3 is a contract object based on identification data given from the client partner computer 3. (Identification) is transmitted to the client partner computer 3 via the Internet 5 and the ground line 4.

[0004] Clanant partner computer 3
Is an IRD (Integrat) connected via the receiving board 7.
ed Reciever Decoder) 8 is controlled to select the channel specified by the service ID, and a service information transfer request represented by the service ID is transmitted to the service provider 6 via the ground line 4 and the Internet 5. I do.

[0005] The service provider 6 reads out video data representing service information corresponding to the given transfer request from a server (not shown), and reads the video data through an IP (Internet P-net).
rotocol) is added to the data portion of the packet, and the IP address and MAC (Media Access Control) of the client partner computer 3 based on the identification data described above.
trol: medium access control) address is added to the header of the IP packet.

[0006] Here, the IP address is a network address in a network layer when an IP packet is transmitted and received.
The MAC address is a unique address composed of an address and a host address, and the MAC address is a LAN (Local Area Net).
work) is a unique physical address used to identify a terminal connected to the work.

[0007] As shown in FIG. 6, the service provider 6 assigns an IP address (FIG. 6A) assigned to each IP packet (FIG. 6A) by 4 [bytes] in the header portion.
The lower 3 bytes of (B)) are directly mapped to the lower 3 bytes, and the service ID is mapped to the upper 3 bytes, thereby generating a total of 6 bytes of unique MAC addresses. (FIG. 6 (C)). Incidentally, the IP packet is represented as a packet format as shown in FIG. 7, for example.

[0008] Subsequently, the service provider 6, for example,
As shown in FIG. 8, each data packet is converted into a plurality of TS (Transport Stream) packets for each IP packet (FIG. 8A) by using a data compression encoding method such as the PEG2 (Moving Picture Experts Group Phase 2) method. As a result, a transport stream formed by multiplexing each TS packet is generated (FIG. 8B).

Thereafter, the service provider 6 transmits the transport stream as a digital broadcast signal from the antenna 6A to the communication satellite (CS: Communications Satellite).
e) The digital broadcast signal is received by the IRD 8 via the antenna 10 in the receiving device 2 while transmitting via the 9.

[0010] The IRD 8 converts a digital broadcast signal of a channel designated at the time of authentication by the service provider 6 into, for example, QPSK (Quadrature Phase Sif).
t Keying) After demodulation by the demodulation method, it is extracted as a transport stream. Subsequently, the IRD 8 separates the extracted transport stream to obtain a plurality of TS packets, and then generates the original IP packets according to a procedure reverse to the order in which the respective TS packets were generated.

[0011] Thereafter, the client partner computer 3 sends the MA added to each of the plurality of IP packets.
By comparing the C address with a MAC address stored in a ROM (not shown) in the receiving board 7 in advance, only the matched IP packet is extracted as an IP packet addressed to itself (hereinafter, this is referred to as filtering). ). Thus client partner computer 3
Is configured to graphically display video data representing service information added to the data portion of the obtained IP packet on a screen of a display unit (not shown).

Thus, the satellite Internet system 1
Then, uploading for transmitting a transfer request from the receiving device 2 to the service provider 6 is performed via the ground line 4 and the Internet 5, while downloading for transmitting service information from the service provider 6 to the receiving device 2 is performed via the communication satellite 9. By doing so, it is possible to realize a satellite Internet system capable of performing service information at a much higher speed than the conventional Internet system using only a terrestrial line.

[0013]

However, in recent years, the IE
EE (Institute of Electrical and Electronics Engi
Neers) A large-capacity serial interface called 1394 is widely used as an interface for connection between digital consumer devices such as a VTR and a personal computer.
It is conceivable that the four interfaces are mounted on a receiving board in a receiving device in the satellite Internet system described above.

However, the receiving board equipped with the IEEE 1394 interface does not have a unique MAC address for terminal identification on the receiving side according to the standard. Therefore, in order for the service provider to specify the destination when transmitting to a specific client partner computer, the client partner computer must perform filtering based only on the IP address added to the header portion of the IP packet. did not become.

However, since filtering based on an IP address is performed by software processing by a client partner computer, when another client partner computer is connected to the same LAN, the other client partner computer does not perform the filtering. Can also obtain the filtered IP packet, and as a result, there is a problem that it is difficult to secure the security of a specific client partner computer.

The present invention has been made in view of the above points, and it is an object of the present invention to propose a data receiving apparatus and a data receiving method which can secure security without changing hardware on a transmitting side as well as a receiving side. Things.

[0017]

According to the present invention, there is provided a data receiving apparatus for receiving a plurality of data transmitted from a transmitting means via a first transmission path in response to a transfer request. An identification information generating unit configured to generate second identification information unique to the receiving side by replacing the identification information with first identification information unique to the receiving side set according to a predetermined format; Terminal means for transmitting the second identification information to the transmission means via the second transmission path together with the transfer request, wherein the terminal means transmits the second identification information to the transmission means via the second transmission path.
Only the data corresponding to the identification information is extracted.

As a result, even when the first identification information set according to the predetermined format is replaced with the second identification information, each data transmitted from the transmission means via the first transmission path is transmitted to the terminal means. Can be given reliably.

Further, according to the present invention, in a data receiving method for receiving a plurality of data transmitted from a transmitting side via a first transmission path in response to a transfer request, a method specific to a receiving side set according to a predetermined format is provided. After the second identification information unique to the receiving side is generated by replacing the first identification information with the first identification information, the second identification information is transmitted to the transmitting side via the second transmission path together with the transfer request. Thereafter, of the received data, only data corresponding to the second identification information is extracted.

As a result, even when the first identification information set in accordance with the predetermined format is replaced with the second identification information, each data transmitted from the transmission side via the first transmission path is reliably received. Can be given to the side.

[0021]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS An embodiment of the present invention will be described below in detail with reference to the drawings.

(1) Configuration of Satellite Internet System According to the Present Embodiment In FIG. 1 in which parts corresponding to those in FIG. 5 are assigned the same reference numerals, reference numeral 20 denotes the satellite Internet system according to the present embodiment as a whole. The configuration is the same as that of the satellite Internet system 1 described above, except that the configurations of the client partner computer 22 and the receiving boat 23 in the device 21 are different.

In this embodiment, the receiving board 23 is equipped with an IEEE 1394 interface 24 (FIG. 2), and the IRD 8 and the client partner computer 2 are connected via the IEEE 1394 interface 24.
The two are connected.

(2) Configuration of Receiving Apparatus Actually, the receiving apparatus 21 is configured as shown in FIG. 2, and the client partner computer 22 starts to use the Internet service based on a command given by the user. The CPU 30 reads the working program stored in the main memory 33 by controlling the memory cache controller 32 A via the host bus 31, and temporarily reads the working program from the cache memory 3.
4, the data is read out at high speed in accordance with the processing speed of the CPU 30.

The CPU 30 controls the IEEE board in the receiving board 23
ROM built into E1394 interface 24
After reading identification data including a unique ID for terminal identification called a NODE unique ID (not shown),
IEEE1394-PCI (Peripheral Component Int
erconnect) Bridge 35, PCI bus 36, IDE
(Integrated Drive Electronics) Controller 37
A: The data is sent to a terminal adapter (TA) 39 via the serial port 38.

The terminal adapter 39 performs predetermined modulation / demodulation processing on the identification data, and then transmits the data to the service provider 6 via the ground line 4 as a digital communication network and the Internet 5 (FIG. 1).

Subsequently, in the service provider 6 shown in FIG. 1, when the client partner computer 22 is authenticated as a contract object based on the identification data, the client partner computer 22 transmits the service supplied from the service provider 6. The ID is received by the serial port 38 via the Internet 5, the ground line 4, and the terminal adapter 39.

The CPU 30 stores the service ID obtained through the serial port 38 into a PCI-ISA (Industrial
Standard Architecture), and sends the service ID to the receiving port 23 via the bridge 37B and the PCI bus 36, and also transmits the service ID to the PCI-ISA bridge 37B,
The data is transmitted to the CPU 30 via the bus 36, the CPU-PCI bridge 32B, and the host bus 31.

The CPU 30 sends a channel designation command based on the service ID to the IEEE1
The data is sent to the front end unit 41 via the 394 interface 24 and the descrambler 40 in the IRD 8.

The front end unit 41 selects a transponder mounted on the communication satellite 9 (FIG. 1) based on the channel designation command, and tunes to a designated channel among a plurality of channels assigned to the transponder. I do.

The CPU 30 sends a service information transfer request represented by the given service ID to the service provider 6 via the ground line 4 and the Internet 5 (FIG. 1).

The service provider 6 shown in FIG. 1 reads video data representing service information corresponding to a given transfer request from a server (not shown), adds the read data to a data portion of an IP packet, and I of the client partner computer 22 based on the identified identification data
The P address and the NODE unique ID are added to the header of the IP packet.

In this case, the service provider 6
The DE unique ID is recognized as a conventional MAC address and is added directly to the header of the IP packet. That is, I
The P packet is represented, for example, as a packet format as shown in FIG. 3, and when compared with the conventional packet format shown in FIG. 7, "MAX_address_1 to MAX_address_1"
8 ”has been replaced with“ NODE_unique_1-8 ”.

Subsequently, the server provider 6 executes the MPEG2
Each IP packet is converted into a plurality of TS packets by using a data compression coding method such as a coding method, thereby generating a transport stream obtained by multiplexing the TS packets.

Thereafter, the server provider 6 transmits the transport stream as a digital broadcast signal from the antenna 6A via the communication satellite 9, while the receiving device 2
At 1, the digital broadcast signal is received by the front end 42 in the IRD 8 via the antenna 10.

The front end unit 41 demodulates the digital broadcast signal of the channel specified at the time of authentication by the service provider 6 by, for example, the QPSK demodulation method, and then extracts it as a transport stream.

Subsequently, the descrambler 40 separates the extracted transport stream to obtain a plurality of TS packets, and then generates original IP packets in the reverse order of the order in which the respective TS packets were generated.

Thereafter, the CPU 30 determines the NODE unique ID added to each of the plurality of IP packets,
N previously stored in a ROM (not shown) in the IEEE 1394 interface 24 of the receiving board 23
By comparing with the ODE unique ID, the matching I
After filtering only the P packet as the IP packet addressed to itself, each obtained IP packet is transmitted to the IDE controller 37A via the PCI bus 36.

The IDE controller 37A has a CPU 30
Each IP packet filtered according to the control of the hard disk drive (HDD: Hard Disc Drive)
) 43.

The VGA (Video Graphics Array) controller 44 reads an IP packet containing service information desired by the user from the hard disk drive 43 under the control of the CPU 30 and reads this IP packet from the PCI-IS.
Monitor 4 via A-bridge 37B and PCI bus 36
4, video data representing service information added to the data portion of the IP packet is graphically displayed on the screen of the monitor 44.

Incidentally, the PCI-ISA bridge 37B is
It is connected to an ISA bus 45 as an expansion bus, and various circuits connected to the ISA bus 45 are interconnected with a PCI bus 36.

The IDE controller 37A has a CPU
An input unit (not shown), such as a keyboard or a mouse, connected to the PCI bus 36 is controlled in accordance with the control of the control unit 30. When the user operates the input unit, the input unit responds to the operation. Various operations are performed.

Further, an IC card reader (not shown) is connected to the IC card interface 46 in the IRD 8, and the above-described client is determined based on the IC card ID assigned to the IC card loaded in the IRD 8. IRD is the same as when the partner computer 22 is authenticated.
8 can be authenticated.

(3) Software Configuration of CPU Actually, the CPU 30 in the client partner computer 22 is configured by software as shown in FIG.

First, when transmitting identification data unique to the client partner computer 22 from the client partner computer 22 to the service provider 6, the NODE unique ID generated in the satellite Internet application 50 is transmitted to the TC.
P / IP (Transmisson Control Protocol / InternetPro
tcol) After setting a protocol so as to connect devices between transmission and reception and applications between them via the protocol stack 51, the obtained identification data is used for PPP (Poin).
One-to-one interconnection is performed via a t-to-Point Protocol (52), and the connection is transmitted to the service provider 6 via the terminal adapter 39, the ground line 4 and the Internet 5 in that order.

Second, when the service partner 6 authenticates that the client partner computer 22 is the subject of the contract, the service ID and the service ID transmitted from the service provider 6 via the Internet 5, the ground line 4 and the terminal adapter 39 in that order are obtained. The IP address is
It is provided to the source address operation module 53 via the PPP 52. The source address operation module 53
By replacing the P address with another different IP address, the service provider 6 sends the service information via the communication satellite 9 without returning the service information to the ground line 4 again.

Subsequently, the replaced IP address and service ID are given to the satellite Internet application 50 via the TCP / IP protocol stack 51, and the service ID is sent from the application program.
After the channel selection command based on
PI (Application Programming Interface) 54, interface module 55 and miniport drive 5
6 to the receiving board 23. Thus, the channel selection command is transmitted to the IRD8 via the receiving board 23.
, The corresponding channel is tuned.

Third, when the client partner computer 22 sends a service information transfer request to the service provider 6, the WWW browser application 57 sends the service information transfer request desired by the user to the source address operation module 53. Are transmitted to the service provider 6 via the TCP / IP protocol stack 51, the PPP 52, the terminal adapter 39, the terrestrial line 4 and the Internet 5 together with the IP address replaced in the above.

Fourth, when sending service information in response to a transfer request from the service provider 6 to the client partner computer 22, the service provider 6
Transmits video data representing service information together with the NODE unique ID as an IP packet via the communication satellite 9 in a predetermined transmission method. As a result, the I
In the RD8, each received IP packet is received in the receiving board 2 in a real-time transmission mode called an isochronous mode.
3 given.

Subsequently, each IP packet obtained via the receiving board 23 is given to the interface module 55 and the miniport driver 56, and the NODE unique ID added to each IP packet is stored in the receiving board 23. A predetermined table I stored in a ROM (not shown) built in the IEEE1394 interface 24
After extracting only the IP packet addressed to itself by filtering based on whether it matches the NODE unique ID in D, and then extracting this through the source address operation module 53, the TCP / IP protocol stack 51
Given to.

In the TCP / IP protocol stack 51, after a predetermined protocol setting process is performed for each IP packet, a WWW browser application 57 is executed.
, The video data added to the data portion of each IP packet is converted into graphic data according to a predetermined display program and displayed on a monitor.

(4) Operation and Effect According to the Present Embodiment In the above configuration, in the receiving apparatus 20, an IEEE 1394 interface 24 is provided in a receiving board 23 connected to the client partner computer 22, and the Internet service is used. At the start, IEEE
The unique NODE unique ID for terminal identification assigned to the 1394 interface 24 is transmitted to the service provider 6 on the transmitting side via the ground line 4 and the Internet 5 in sequence.

Only when the service provider 6 authenticates that the client partner computer 22 is contracted, the service ID and the I
The P address is supplied via the Internet 5 and the ground line 4 sequentially.

Thus, the client partner computer 22 tunes the IRD 8 so as to select a channel corresponding to the service ID,
After replacing the IP address for the communication satellite 9, the IP address is transmitted to the service provider 6 via the ground line 4 and the Internet 5 together with a transfer request for desired service information.

The service provider 6 generates video data representing service information corresponding to the transfer request as an IP packet together with the above-mentioned replaced IP address, and then generates the IP packet using a predetermined transmission method. To the client partner computer 22 via the.

In this way, the client partner computer 22 extracts only the IP packets of the already designated channel from the obtained IP packets, records them on the hard disk drive 42, and monitors them if necessary. Graphically displayed at 44.

As described above, in the receiving apparatus 21, I
Even when the receiving board 23 equipped with the EEE1394 interface 24 is used, a unique N for terminal identification is used.
Since the ODE unique ID has the same function as the conventional MAC address, service information transmitted from the service provider 6 via the communication satellite 9 can be reliably provided to the client partner computer 22 to be contracted. As a result, security of the client partner computer 22 can be ensured.

According to the above-described configuration, when the receiving device 21 uses the receiving board 23 equipped with the IEEE1394 interface 24, the client partner computer 22 sends a request for transferring desired service information to the client partner computer 22. Is supplied to the transmitting-side service provider 6 via the terrestrial line 4 together with the unique identification information of the communication satellite 9 even when the identification information set according to a predetermined format is replaced. Service information transmitted through the client partner computer 22 to be contracted can be reliably provided,
Thus, the receiving apparatus 21 that can ensure security without changing the hardware of the transmitting side as well as the receiving side
Can be realized.

(5) Other Embodiments In the above embodiment, the NODE unique ID obtained from the receiving board 23 is transmitted to the service provider 6 via the ground line 4 and the Internet 5 together with the transfer request. Although the case where the client partner computer 22 configured as shown in FIG. 2 is applied as the terminal means has been described, the present invention is not limited to this.
In short, the receiving board 23 of the data received by the IRD 8
As long as only the data corresponding to the identification information obtained from the above can be extracted, various other configurations may be applied as the terminal means.

In the above-described embodiment, the service provider 6 serves as a transmitting means for transmitting a plurality of data to the receiving device 21 via the communication satellite 9 in response to a transfer request.
Is described, but the present invention is not limited to this. In other words, if a plurality of data corresponding to a transfer request from the receiving device 21 can be supplied to the receiving device 21, the transmitting means may be any other device. Various configurations may be widely applied.

Further, in the above-described embodiment, the CPU 30 in the client personal computer 22 is used as the identification information generating means, and the IEEE 30 in the receiving board 23 is used.
Although the description has been given of the case where the NODE unique ID as the unique second identification information is assigned to the 1394 interface 24, the present invention is not limited to this. In other words, if the client personal computer 22 can be specified, As the means for generating the second identification information, various other configurations may be widely applied.

Further, in the above-described embodiment, the ground line 4 is used as the second transmission path connecting the client partner computer 22 and the service provider 6.
And the case where the Internet 5 is applied. However, the present invention is not limited to this. In other words, as long as the client partner computer 22 can transmit the identification information and the transfer request to the service provider 6, various other methods can be used. A transmission path may be applied.

Further, in the above-described embodiment, the case where the satellite Internet system 20 according to the present invention is applied to digital CS broadcasting using the communication satellite 9 as the first transmission path has been described. Not limited,
The present invention can be widely applied to various broadcasting such as digital BS (Broadcast Satellite) broadcasting, digital terrestrial broadcasting, and CATV (Cable Television) broadcasting.

Further, in the above-described embodiment, the case where the data receiving apparatus of the present invention is applied to the receiving apparatus 21 of the satellite Internet system 20 has been described. However, the present invention is not limited to this, and it is essentially a predetermined format. The present invention can be applied to various other data receiving devices as long as the receiving device can reliably receive each data from the transmitting side even if the identification information set according to the above is replaced.

[0065]

As described above, according to the present invention, in a data receiving apparatus for receiving a plurality of data transmitted from a transmitting means via a first transmission path in response to a transfer request, a data receiving apparatus is set according to a predetermined format. The first unique to the receiver
Even if the identification information is replaced with the second identification information unique to the receiving side, each data transmitted from the transmission means via the first transmission path is reliably given to the terminal means. It is possible to realize a data receiving apparatus capable of ensuring security without changing hardware on the transmitting side as well as the receiving side.

Further, according to the present invention, in a data receiving method for receiving a plurality of data transmitted from a transmitting side via a first transmission path in response to a transfer request, a receiving side set according to a predetermined format is provided. Even when the unique first identification information is replaced with the second identification information unique to the reception side, each data transmitted from the transmission side via the first transmission path is reliably given to the reception side. By doing so, it is possible to realize a data receiving method capable of ensuring security without changing hardware on the transmitting side as well as the receiving side.

[Brief description of the drawings]

FIG. 1 is a schematic diagram illustrating a configuration of a satellite Internet system according to an embodiment.

FIG. 2 is a block diagram showing an internal configuration of the receiving device shown in FIG.

FIG. 3 is a table showing a format of an IP packet according to the embodiment;

FIG. 4 is a CP in a client partner computer.
It is a block diagram with which description of the application about U is provided.

FIG. 5 is a schematic diagram illustrating a configuration of a conventional satellite Internet system.

FIG. 6 is a schematic diagram for explaining generation of a MAC address;

FIG. 7 is a schematic diagram used for describing generation of a TS packet.

FIG. 8 is a table showing a format of a conventional IP packet.

[Explanation of symbols]

1,20 ... Satellite internet system, 2,21 ...
... Receiving device, 3 ... Client partner computer, 4 ... Terrestrial line, 5 ... Internet, 6 ... Service provider, 6A, 10 ... Antenna, 7, 23
...... Reception board, 8 ... IRD, 9 ... Communication satellite, 24
.... IEEE 1394 interface, 30 CP
U, 35 ... IEEE 1394-PCI bridge, 39
…… Terminal adapter, 40 …… Descrambler, 4
1. Front end unit 42 Hard disk drive 43 VGA controller 44 Monitor

 ────────────────────────────────────────────────── ─── Continuation of the front page (72) Inventor Hiromitsu Baba 6-7-35 Kita-Shinagawa, Shinagawa-ku, Tokyo Sony Corporation (72) Inventor Yoko Matsuura 6-35-35 Kita-Shinagawa, Shinagawa-ku, Tokyo Sony (72) Inventor Yoshiharu Takeda 6-35 Kita-Shinagawa, Shinagawa-ku, Tokyo Sony F-term (reference) 5K030 GA15 HA08 HC04 JL02

Claims (4)

[Claims] 1. A data receiving apparatus for receiving a plurality of data transmitted from a transmitting means via a first transmission path in response to a transfer request, comprising: In place of the identification information, a second
Identification information generation means for generating the identification information of the above, and terminal means for transmitting the second identification information generated by the identification information generation means to the transmission means via a second transmission path together with the transfer request; A data receiving apparatus, wherein the terminal unit extracts only the data corresponding to the second identification information from the data received via the first transmission path. 2. The terminal unit transmits the transfer request to the transmission unit only when the terminal device obtains authentication confirmation information from the transmission unit via the second transmission path based on the second identification information. The data receiving apparatus according to claim 1, wherein 3. A data receiving method for receiving a plurality of data transmitted from a transmitting side via a first transmission path in response to a transfer request, wherein the first data is a first data specific to the receiving side set according to a predetermined format. In place of the identification information, a second
A second step of transmitting the second identification information together with the transfer request to the transmission side via a second transmission path, and a step of generating the identification information of the received data. A third step of extracting only the data corresponding to the second identification information. 4. The method according to claim 3, wherein in the third step, based on the second identification information,
4. The data receiving method according to claim 3, wherein the transfer request is transmitted to the transmission side only when the authentication confirmation information is obtained via the transmission path.