JP4038733B2 - Digital broadcast receiver - Google Patents

Description

  The present invention relates to a digital broadcast receiving apparatus that receives a digital broadcast such as a digital satellite broadcast or a terrestrial digital broadcast and outputs a video signal or an audio signal to an image receiving apparatus or a recording apparatus.

  In the digital broadcast receiving device, various functions such as the function of purchasing pay broadcast and releasing the scrambling of pay broadcast, the function of connecting to a communication network, and the function of performing bidirectional communication with a TV program via the network Is provided.

  In addition, in order to realize the above-described functions in the digital broadcast receiving apparatus, for example, a user's individual registration ID (identification information) or a user's individual has registered in order to identify a pay broadcast purchaser to a broadcasting company. Private information such as a communication network connection ID and password, and a user ID for two-way communication is recorded.

In relation to such a digital broadcast receiving apparatus, there are techniques disclosed in the following patent documents 1 to 5 as conventional techniques useful when the broadcast receiving apparatus is used by a plurality of users and conventional techniques related to security. It was. Japanese Patent Application Laid-Open No. 2004-151561 describes a technique that allows only an administrator user to change the setting of viewing restriction data for each user. Patent Document 2 describes a technology that enables a super user who is an administrator to manage information such as viewing time and viewing fee of each user. Japanese Patent Application Laid-Open No. 2003-228561 discloses a technique in which viewer authentication is performed so that viewing restriction settings can only be changed by a terminal administrator. Patent Document 4 describes a technique in which provisional user information is stored in a broadcast receiving apparatus, and true user information is stored on the management station side. Patent Document 5 describes a technique for preventing unauthorized copying by using device-specific information for video scramble cancellation.
JP 2004-260447 A Japanese Patent Laid-Open No. 2001-203951 JP 2001-145033 A JP 2004-112777 A JP 2003-204505 A

  As described above, the present inventors use a digital broadcast receiving apparatus in which personal information or private information is recorded, for example, by a plurality of users, or installed in an exhibition or party venue. We thought that there would be a desire to appropriately protect personal information and private information in the device when it was operated by a third party.

  As a similar situation, there was a case where a personal computer was displayed at a storefront, but when displaying a personal computer, the user logged in to the computer at a lower usage level so that the customer could not change the settings. It was common to display only simple applications that can be used. However, in such a situation, the customer can log off from the computer, so if one customer logs off, other customers will not be able to use the application. There was a problem.

  The object of the present invention is to enable the personal information and private information stored therein to be properly protected and usable even when used by a plurality of users or operated by a third party. The main function is to provide a digital broadcast receiver that can be provided to third parties.

  In order to achieve the above object, according to the present invention, in a digital broadcast receiving apparatus that demodulates a digital broadcast signal and outputs a video signal and an audio signal, which of the plurality of functions the apparatus has is permitted to use. User registration means for performing user registration by associating the usage level representing each user with identification information, user authentication means for performing user authentication, and control means for operating the apparatus in a personal authentication mode or an all-user common mode. And the control means, when in the personal authentication mode, permits use of a function corresponding to the use level registered in association with the identification information of the user when the user authentication is performed by the user authentication means. On the other hand, in the common mode for all users, permission to use the function at the specified usage level is given and registered at the specified usage level. The configuration is such that the cancellation of the all-user common mode is permitted when the authenticated user is authenticated, and the cancellation of the all-user common mode is not accepted when the registered user is authenticated at other usage levels. did.

  According to such means, for example, when using between a plurality of specific users, by setting the personal authentication mode and assigning the usage level to each user, for example, a less knowledgeable user sets the wrong receiver. It can be used at a usage level suitable for each user. In addition, when an unspecified third party operates, only a specific function can be used in the common mode for all users, and necessary protection of personal information and private information can be achieved.

  In addition, when all users are in the common mode, only registered users of a predetermined usage level can cancel this mode, so that a third party has canceled it before and no functions can be used. Does not occur.

  Specifically, the usage levels may include a hierarchical usage level that hierarchically indicates which functions can be used, and an individually designated usage level that can individually set the usable functions. .

  With this configuration, it is possible to easily set the association of the usage level according to the hierarchical usage level when performing user registration, and when setting a special usage level, the desired setting can be set according to the individually designated usage level. Can be done.

  More specifically, the control means may be configured to permit the transition to the common mode for all users when user authentication is performed at a predetermined use level in the personal authentication mode.

  With this configuration, the number of users who can shift to the all-user common mode is limited, and it is possible to reduce the inconvenience of shifting to the all-user common mode by mistake.

  Preferably, the control means accepts user authentication by the user authentication means and authenticates the user at a predetermined use level when an item indicating cancellation of the mode common to all users is selected from the menu display. In this case, it may be configured to cancel the common mode for all users and shift to the personal authentication mode.

  With this configuration, by selecting the cancellation item from the menu display in this way, the processing for canceling the all-user common mode is started, for example, the third-party common mode such as a third party is started. It is less likely that a person who cannot be released will try the release process, and the operation of the device is wasted due to the process that cannot be executed, or the third party is interested in the process that cannot be executed. Inconvenience can be reduced.

  Desirably, as the predetermined usage level that can be shifted to and released from the common mode for all users, the most usable function is the highest among the usage levels that hierarchically indicate which functions can be used. A higher usage level should be applied.

  This makes it possible to shift to and release the common mode for all users only at the highest usage level, and it is convenient because the common mode for all users can be managed by a small number of people.

  As described above, according to the present invention, when a single device is used by a plurality of users or in a situation where an operation is performed by an unspecified third party, a plurality of users can be used in the personal authentication mode. The effect of being able to protect personal information and private information stored in the device as appropriate by allowing them to be used at a set usage level or allowing all users to use at a specified usage level in the common mode for all users. is there. Specifically, there is an effect that it is possible to avoid inconveniences such as important settings being changed by a less knowledgeable user or a third party and personal information or private information being viewed or changed.

  In addition, since the configuration is such that predetermined user authentication is required when canceling the common mode for all users, the common mode for all users is canceled by an unspecified third party and nothing can be used. There is an effect that can be avoided.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

  FIG. 1 is a block diagram showing a configuration of a digital broadcast receiving apparatus according to the present embodiment.

  The digital broadcast receiver 1 according to this embodiment receives satellite broadcast or terrestrial digital broadcast signals and outputs video signals and audio signals to a television receiver or a recording device. As shown in FIG. 1, the digital broadcast receiving apparatus 1 includes, for example, a digital broadcast tuner 10 that is connected to an antenna ANT and selectively receives a digital broadcast signal of a designated broadcast channel, and a digital that demodulates the digital broadcast signal. Broadcast demodulator 11, TS (Transport Stream) decoder 12 that decodes additional information including video data, audio data, program information and control data from the demodulated stream signal, and outputs the video signal by decoding the video data A video decoder 13, an audio decoder 14 that decodes sound data and outputs an audio signal, an IC card reader 15 that reads information of an IC card in which a user ID (identification information) registered in a broadcasting station is recorded, and the like A fingerprint sensor 16 as a user authentication means for reading a fingerprint for user authentication, A communication module 17 connected to a communication network via a line, a microcontroller 20 as a control means for performing overall control of the apparatus, and a RAM (Random Access Memory) that provides a working memory space to the microcontroller 20 21, a non-volatile memory 22 in which a control program and control data are stored, a plurality of operation buttons and a remote control light receiving unit 23 a are provided, an operation panel 23 that accepts an instruction operation by a user from the outside, and a plurality of operation buttons are provided. The remote control 24 is configured to receive an instruction operation by the user. The RAM 21 and the nonvolatile memory 22 may be integrated with the microcontroller 20. Of these components, the microcontroller 20 executes a control program stored in the nonvolatile memory 22 to constitute a user registration unit.

  In the digital broadcast receiving apparatus 1 of this embodiment, as functions related to program viewing, switching of channel numbers of 1ch to 12ch, viewing of a program table from the previous day to the next day, reception reservation, program genre search, “000” to Channel switching with three-digit numbers up to “999”, information display of back program while viewing program, channel scan to search for receivable broadcast channels, setting / canceling viewing restricted program, PPV (Pay per View) program There are two-way communication for purchasing and viewing programs.

  Various functions for handling personal information and private information include IC card information browsing, residential area setting, zip code setting, menu display favorite setting, initialization of user data, connection ID necessary for network connection, There are provider settings such as passwords and communication settings such as LAN addresses and dial-up destinations.

  Further, in the digital broadcast receiving apparatus 1 of this embodiment, the operation of the personal authentication mode that enables the user to use the apparatus 1 at the usage level associated with the user by performing personal authentication, and all the users are designated. Although it is possible to operate in the common mode for all users that enables the device 1 to be used at the usage level, the functions relating to each of these operational modes include addition and deletion of registered users, setting of custom usage levels, and personal use. There is a function for switching between the authentication mode and the common mode for all users.

  Here, first, each usage level will be described. As the usage level, first to fifth usage levels (hierarchical usage levels) that hierarchically indicate which of a plurality of functions of the device 1 can be used, and available functions are individually provided. A custom usage level that can be specified (individually specified usage level) is provided.

  The first usage level (LV1: a registered user with this setting is referred to as an LV1 user) is a level at which all functions can be used. However, when a plurality of LV1 users are registered, the setting of other LV1 users cannot be changed. The LV 1 can be used for customization of the device 1, in addition to detailed settings and management of the device 1, user settings and management, management of private information and personal information, as well as customization of the usage level and initialization of the device 1. Suitable for setting to.

  The second usage level (LV2) is a level at which all functions related to program viewing can be used. In other words, the various setting functions including the private information described above, addition / deletion of user registration, setting of the custom usage level, and mode switching functions are disabled, and other functions are enabled. The LV 2 is suitable for setting a user who does not want to see personal information or private information, although the device 1 can be finely set.

  The third usage level (LV3) is a level at which program viewing that does not require setting changes and program viewing that does not require personal information or private information can be used. In other words, in addition to those that cannot be used in LV2, changes in various settings made by pressing menu buttons such as channel scan and viewing restriction setting / cancellation, purchase of PPV, and two-way communication are disabled, etc. These functions are enabled. Since LV3 can use the same function as a general analog television without considering difficult function settings, it is suitable for setting a user who wants to enjoy watching a program but does not know the settings.

  The fourth usage level (LV4) is a level at which only functions related to simple program viewing can be used. In other words, broadcast channels can be switched and volume adjustments can be made with channel numbers of 1ch to 12ch, but in addition to those that cannot be used with LV3, reception reservation, genre search, program table browsing, 3-digit numbers Cannot switch channels or display back program information.

  The fifth usage level (LV5) is a level at which all functions cannot be used. LV5 is suitable for setting to a user who prohibits the use of the device 1 in order to prevent unintentional use by a third party, to continue program output of the same channel in the common mode for all users, and so on. ing.

  The custom usage level (LVX) is a level at which each of the above functions can be individually specified to be usable or unusable. For example, the content is LV4 by default, and individual functions can be used from that state. It can be set by selecting disabled or not. LVX settings are only allowed for LV1 users. This LVX is suitable for setting a user who wants to customize and use the function of the device 1 to be used.

  These first to fifth usage levels and custom usage levels can be set as one usage level for a plurality of users, as shown in an explanatory diagram of how to allocate usage levels in FIG. It is also possible to create a plurality of patterns for the custom usage level and set a custom usage level of a different pattern for each of a plurality of users.

  Next, the operation of the digital broadcast receiving apparatus 1 of this embodiment will be described.

  First, operations related to user registration will be described. When the digital broadcast receiving apparatus 1 is turned on in the factory-shipped state or the initialized state, first, the registration process for the LV1 user is started. In this registration process, a display indicating “LV1 user registration” on the display connected to the apparatus 1 and a display for instructing the fingerprint sensor 16 to place a finger are performed. Then, when the user places a finger on the fingerprint sensor 16, fingerprint information is input, and this information is recorded in the nonvolatile memory 22 as LV1 user registration information. Here, a user name may be input using the remote controller 24 or the like, and this user name may be included in the registration information as user identification information. When no name is input, index information such as a serial number may be added to the registration information as user identification information for each user. Note that authentication information such as fingerprint information may be used as user identification information, and only this information and information related to the usage level may be used as user registration information.

  When a new user is registered after the LV1 user is registered, the “add user registration” item is selected from the menu display while the LV1 user has received user authentication during the personal authentication mode. Thus, the new user registration process is started. When the new user registration process is started, a new user is registered by placing a finger on the fingerprint sensor 16, selecting a usage level to be assigned to the user, inputting a user name, and the like. Such registration information is recorded in the nonvolatile memory 22.

  The process of editing and deleting a registered user is started by selecting the “Edit / Delete User Registration” item from the menu display with the LV1 user receiving user authentication during the personal authentication mode. The When this processing is started, the information of all registered users is displayed in a list on the display, so that any registered user can be selected by operating the remote controller or the like, and the usage level can be changed or the user can be deleted. . Here, the registered information cannot be changed or deleted for the user registered in LV1.

  The registration information of all users including the LV1 user can be deleted by performing the initialization process of the device 1, but the initialization process can be executed by the LV1 user selecting items hierarchically from the menu display. It is like that. In addition, before the initialization process is executed, a confirmation display is made a plurality of times on the display, and attention is urged so as not to delete all registered user information by mistake.

  Next, the operation in the personal authentication mode will be described. This personal authentication mode is a convenient mode when a plurality of specific users want to use the apparatus 1 at different usage levels, or when an administrator wants to restrict the use of other users.

  When the power is turned on, the digital broadcast receiving apparatus 1 is activated in the personal authentication mode. If the power supply is cut off in the common mode for all users, it may be started in the same state as immediately before the power is turned off at the next power-on.

  In a state where no user authentication is received in the personal authentication mode, for example, the apparatus is in a state of LV5 in which no operation is accepted. Here, when the registered user places a finger on the fingerprint sensor 16, the fingerprint is read and user authentication processing is executed. When the user authentication is performed, the apparatus 1 is ready for use at the usage level associated with the registered user.

  When the registered user who has received authentication ends use of the apparatus 1, user authentication can be canceled by placing a finger on the fingerprint sensor 16 again. When the user authentication is canceled, the apparatus 1 is again brought into the LV 5 state in which no operation is accepted.

  Next, the operation in the common mode for all users will be described. This all-user common mode is set so that all users always use the same setting even when the apparatus 1 is installed in a public place and operated by an unspecified user, or even when a plurality of specified users use it. It is convenient to use in any case.

  To switch to the common mode for all users, select the “Move to common mode for all users” item from the menu display when the LV1 user is authenticated in the personal authentication mode. It is executed by specifying the usage level in the mode. The usage level in the common mode for all users may be set in advance.

  When shifting to the common mode for all users, only the functions at the specified usage level can be used, and the registered user shifts to the usage level associated with the user through authentication processing as in the personal authentication mode. Can no longer do.

  Regarding the cancellation of the common mode for all users, an item “cancellation of the common mode for all users” is added to the menu display, and the cancellation process can be started by selecting this item. When the canceling process is started, a display requesting user authentication is made, so that the registered user puts his finger on the fingerprint sensor 16 and is authenticated. If this registered user is an LV1 user, the all-user common mode is canceled and the personal authentication mode is entered. However, if the registered user is not the LV1 user, the all-user common mode is continued without being canceled.

  Hereinafter, control processing of the digital broadcast receiving apparatus 1 that realizes the above-described operation will be described based on the flowcharts of FIGS.

  FIG. 2 shows a flowchart of the main control process of the digital broadcast receiver 1 executed by the microcontroller 20.

  When the power is turned on or when the user authentication is turned off, the main control processing is on standby. Then, after waiting for a predetermined time, the process proceeds to step S1 where the input signal from the fingerprint sensor 16 is confirmed to confirm whether the fingerprint has been detected. As a result, if there is no detection, the process returns to step S1 again to repeat this process, but if a fingerprint is detected, the process proceeds to step S2.

  In step S2, after performing user authentication by collating the fingerprint detected by the fingerprint sensor 16, a subroutine process for setting a usage level corresponding to the user is performed, and the process proceeds to step S3.

  In step S3, it is confirmed whether there is an input from the remote controller 24 or the operation panel 23. If there is no input, the process returns to step S3 again to repeat this process.

  In step S4, it is determined whether or not the execution of the operation content input in step S3 is permitted by checking with the set usage level. If there is permission, the process proceeds to step S5 and a command corresponding to the operation content is issued. The command is issued and the command is executed. If there is no permission, the process proceeds to step S6, and a non-permission message is displayed on the display. Then, the process proceeds to step S7.

  In step S7, the input signal from the fingerprint sensor 16 is confirmed to determine whether or not an operation for cutting user authentication has been performed. Here, if the user puts his finger on the fingerprint sensor 16 and the user's fingerprint is detected, it is determined that the authentication is OFF, and the process shifts to a standby state. The process returns to step S1 again, but the user's fingerprint is detected. If not, the process returns to step S3, and the process of accepting the operation input is repeated again.

  FIG. 3 shows a flowchart of the user usage level confirmation process executed in step S2 of FIG.

  When the process proceeds to the user usage level confirmation process in step S2 in FIG. 2, first, in step S10, it is confirmed whether the user authenticated by the fingerprint input is a registered user. If not registered, the process proceeds to step S11. If so, the process proceeds to step S12.

  As a result, when the process proceeds to step S11, it is confirmed whether or not the usage level of the unregistered user is set. If the usage level is set, the usage level information is acquired and the setting is set in step S13. If not, the process proceeds to step S25.

  On the other hand, if it is a registered user in step S10, information on the usage level registered corresponding to this user is acquired, and the process proceeds to step S13.

  When the process proceeds to step S13, the process proceeds to a process (steps S19 to S25) for reading the setting information of the usage level corresponding to the user by the determination process of steps S13 to S18, and in any of the processes of steps S19 to S25. The setting information of the corresponding usage level is read, and this subroutine processing is terminated. Then, the process returns to the main control process.

  If the use level of the unregistered user is not set in the confirmation process in step S11 and the process proceeds to step S25, the fifth use level setting information is read, this subroutine process is terminated, and the main control process is entered. Return.

  FIG. 4 shows a flowchart of the user registration process executed when a menu operation for user registration is performed in the command issue process (step S35) of the main control process.

  This user registration process is started when the LV1 user selects the “user registration” item from the menu display in the main control process of FIG. When this process is started, first, in step S31, a process is performed to ask the user whether or not an unregistered user is set. If the answer is YES after waiting for a reply process from the user, the process proceeds to step S32. If the answer is NO, the process proceeds to step S33. The reply processing here is performed by the user selecting a YES or NO block while viewing the display screen by operating the arrow keys and the enter key of the remote controller.

  As a result, when the process proceeds to step S32 in response to YES, after performing the process of setting the usage level of the unregistered user in this step, the user registration process is terminated and the process returns to the main control process. Here, the setting process of the usage level is realized by, for example, displaying a display asking the usage level of the unregistered user on the display screen, and allowing the user to specify the usage level using an arrow key, a numeric key, and a determination key. The set information is stored in a predetermined area of the nonvolatile memory 22.

  On the other hand, if the result of the determination processing in step S31 is NO, the process proceeds to step S33 with a reply of NO, and the process of obtaining and inputting the fingerprint of the user registered in the step is performed, and the process proceeds to step S34. The LV1 user who has started the user registration process causes the user to register here to input a fingerprint via the fingerprint sensor 16.

  In step S34, processing for obtaining information on the usage level to be registered corresponding to the user who has input the fingerprint and causing the user to specify the usage level is performed, and the process proceeds to step S35. Here, the LV1 user selects the usage level of the new user from the first to fifth usage levels or the custom usage level by operating the remote controller or the like.

  In step S35, it is determined whether or not the custom usage level “LVX” is specified in step S34. If the custom usage level “LVX” is not determined, the process proceeds to step S36, and the personal authentication information (fingerprint) input in step S33. The registered user is set based on the information) and the usage level information specified in step S34, and this setting information is stored in a predetermined area of the nonvolatile memory 22. Then, the user registration process is terminated and the process returns to the main control process.

  On the other hand, when the custom use level “LVX” is designated in step S35, the process proceeds to step S37, and each function item for which use permission or disapproval is set from the first use level to the fifth use level is set to 1. When the process of asking the user whether to add permission or non-permission is performed, and when the user selects addition, additional processing is performed in step S38 and the process proceeds to step S39, and the user does not select addition. , The process proceeds to step S39 as it is.

  In step S39, it is confirmed whether or not the function item to be added is final. If it is final, the process proceeds to step S40. If not, the process returns to step S37.

  That is, by repeating the steps S37 to S39, the setting of each function permitted or prohibited from the first usage level to the fifth usage level can be added individually based on the setting contents of the fourth usage level.

  When the process is finalized in step S39 and the process proceeds to step S40, personal authentication information (fingerprint information) and usage level information are associated with each other and stored in a predetermined area of the nonvolatile memory 22 to complete user registration. . Then, the user registration process is terminated and the process returns to the main control process.

  As described above, according to the digital broadcast receiving device 1 of this embodiment, for example, when a specific plurality of users use the device, the personal authentication mode is used. It is possible to set an appropriate usage level for each user, such as making it possible to perform operations and disabling detailed operations for users with little knowledge, etc., so that incorrect operations are not performed.

  In addition, when an unspecified third party operates, all users can use the common mode so that everyone can use only specific functions, and personal information stored in the device or Appropriate protection of private information can be achieved. In addition, when the mode is set to the common mode for all users, only the LV1 user can cancel this mode. Therefore, the common mode has been canceled by a third party before, for example, user logoff in a personal computer. It is possible to prevent the inconvenience that no function can be used as in the state after the operation.

  The present invention is not limited to the above-described embodiment, and various modifications can be made. For example, in the above-described embodiment, an example in which fingerprint authentication is applied as a means for performing personal authentication has been described. In addition, personal authentication and authentication disconnection operations are performed by voiceprint authentication, or personal identification information is recorded. The user may be allowed to perform personal authentication and authentication disconnection by inserting or removing the memory card. In addition, details and the like shown in the embodiment, such as the number of hierarchies of use levels and the contents of functions permitted at each use level, can be changed as appropriate without departing from the spirit of the invention.

It is a block diagram which shows the structure of the digital broadcast receiver of embodiment of this invention. It is a flowchart which shows the procedure of the main control process performed by the microcontroller of FIG. It is a flowchart which shows the process sequence of the user use level confirmation subroutine of FIG. It is a flowchart which shows the process sequence of the user registration process performed when the menu operation of user registration is made. It is a figure which shows an example of how to allocate a usage level.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Digital broadcast receiver 10 Digital broadcast tuner 11 Digital broadcast demodulation part 12 TS decoder 13 Video decoder 14 Audio decoder 15 IC card reader 16 Fingerprint sensor 17 Communication module 20 Microcontroller 21 RAM
22 Nonvolatile memory 23 Operation panel 24 Remote control

Claims (1)

In a digital broadcast receiver that demodulates a digital broadcast signal and outputs a video signal and an audio signal,
User registration means for performing registration in association with the identification information of each user, the usage level that hierarchically represents which of the plurality of functions the device has permission to use;
User authentication means for performing user authentication;
Control means for operating the apparatus in a personal authentication mode or a mode common to all users,
The control means includes
In the personal authentication mode, when user authentication is performed by the user authentication means, permission to use a function corresponding to the use level associated with the identification information of the user is given, and the function that can be used is the most. When user authentication is performed at the highest usage level that has been set a lot, while allowing the transition to the common mode for all users,
In the all-user common mode, permission to use the function at the designated use level is given, and when the item for canceling the all-user common mode is selected from the menu display, the user authentication unit performs the top-level operation. When user authentication is performed at the usage level, all user common mode is canceled and the personal authentication mode is entered. On the other hand, when user authentication is performed at a usage level other than the highest level, cancellation of all user common mode is not accepted. A digital broadcast receiver characterized by the above.

Images