JP5735228B2 - Content distribution system, home gateway, mobile terminal - Google Patents

Description

  The present invention relates to a content distribution system, a home gateway, and a mobile terminal used therefor.

  Content distribution technology for storing content on a home server and viewing the content on the home server using a media player software of a content player or a personal computer connected via a LAN at home has become widespread. Representative examples of such content distribution technology include DLNA that defines a protocol for connecting a server and a player and a format of a moving image or music content as a standard. As long as the product conforms to the DLNA standard, content can be viewed even if players and servers from different manufacturers are connected.

  DLNA is basically a technology limited to home networks, but with the widespread use of DLNA devices, there is an increasing demand to connect DLNA devices existing in different home networks to share content. For example, UPnP (Universal Plug and Play) Remote Access standardizes technical specifications for connecting DLNA devices between home networks. By installing a function that supports the UPnP Remote Access standard in the home gateways that exist in both connected home networks, the DLNA protocol is relayed between the home gateways to discover each other's DLNA device in the other home network. Or control.

  For example, it is possible to view content existing on a content server at home at a friend's house or with a friend at a hotel. In such a scene, there is a possibility that the content at home, which is not desired to be seen by others, can be viewed. Alternatively, even when the content itself is encrypted and can be viewed only by an authenticated device, the title name may be displayed in the content list.

  Patent Document 1 below discloses that access control is performed at a home gateway of a home gateway content transmission destination that transmits only a content list permitted to be shared to the DMC based on a preset rule.

  Patent Document 2 below discloses that when a home gateway relays a DLNA message, the sharing of only specific content is permitted by rewriting the content of the message.

  In order to cope with the above problem, for example, by using the technology disclosed in Patent Document 1 and Patent Document 2, it is necessary to restrict access to specific content in the home network based on a preset rule. Thus, unintentional viewing of content can be prevented. For example, viewing of content belonging to a specific genre can be restricted, or viewing can be permitted only on a specific device. Similarly, it may be assumed that viewing restrictions are applied in advance in each content server.

  Note that the outline of UPnP Remote Access is described in Non-Patent Document 1.

Japanese Patent Laid-Open No. 2008-98706 JP 2009-188726 A

UPnP specification RemoteAccessArchitecture: 1 (http://www.upnp.org/specs/ra/UPnP-ra-RAArchitecture-v1.pdf)

  However, content taken with a home video camera, in particular, when additional information such as genre or performer is not attached, or even when added, depending on the person to be shown using that information. It is expected that changing access restrictions will often be difficult. If the other party to be shared can be identified in advance, it is possible to set whether to allow access for each content according to the other party to be shared, but the setting work takes time as the number of contents increases. In short, it may feel annoying to the user.

  There are cases where it is impossible to predict the usage scene or the partner to share in advance. For example, when actually viewing, it is assumed that the user wants to limit viewing of adult content because he / she watches with a child under 18 years old. For terminals that allow content viewing, it may be difficult to set the IP address and name of the terminal in advance by the sharing partner.

Also, depending on the content, there may be a case where it is desired to allow viewing only in a specific section, but the above prior art cannot cope with it.
It is an object of the present invention to eliminate the need for prior settings such as access restrictions.

  According to an aspect of the present invention, the gateway device has a gateway function for distributing content held by a content server on a first home network to a terminal on a second home network different from the first home network. A first home gateway of a first network, wherein the first network and the second network are connected to the Internet and connected to a second home gateway on the second home network. A request from a terminal having the characteristics of a terminal on the second home network that permits distribution of the content from the content server set by the mobile terminal authenticated by the device authentication management unit of the first home gateway Content list or content list First home gateway, characterized in that from the content server streams have access transmission control unit for performing access control to permit delivery to the terminal is provided. The access transparency control unit can distribute content only in response to a request from a terminal permitted to access. The terminal characteristic is, for example, an IP address.

  The period during which the content list and the content stream are distributed to the terminal is preferably a period during which communication with the mobile terminal is possible.

  In addition, the access transparency control unit stores the setting of the characteristics of the terminals that are permitted to be distributed by the mobile terminal, and after the period for permitting the distribution to the terminals is over, the characteristics of the terminals that are permitted to distribute again. When there is a content list and content acquisition request from the terminal having the above, it is preferable to permit distribution.

  Further, during the period of distributing the content list or content stream to the terminal, the portable terminal transmits a stream distribution start request from the operation unit to the content server, and then issues a stop request. It may be a period until transmission. By restricting the content distribution during other periods, the content distribution period can be set as intended.

  During the period in which the content list and the content stream are distributed to the terminal, the time stamp and the reproduction time included in the content stream distributed to the second terminal are monitored, and until the time when the content is distributed to the end. It is also good. The characteristics of the terminal permitting the distribution may be acquired from the terminal by the mobile terminal communicating with the terminal via the second home gateway.

  Alternatively, the characteristics of the terminal permitting the distribution may be acquired by communicating from the terminal via short-range wireless communication using a short-range communication function held by the mobile terminal.

  The access transparency control unit preferably returns a rejection response to a content list or content stream acquisition request from a terminal other than the mobile terminal and the terminal.

  Further, the present invention includes the first function including a gateway function for distributing content held by a content server on the first home network to a terminal on a second home network different from the first home network. A first home gateway of the network, wherein the first network and the second network are connected to the Internet, connected to a second home gateway on the second home network, and On the second home network from the content server, a list of content or a stream of content that is set by the mobile terminal authenticated by the device authentication management unit of one home gateway and that permits content distribution from the content server Delivery to your device A first home gateway, characterized in that it comprises an access transmission control unit that performs access control for variable.

  The access transparency control unit can distribute only the content for which access is permitted. By operating the mobile terminal as if it were a remote control, only the content permitted to be distributed can be displayed on the terminal.

  In response to a content list acquisition request from the terminal, it is preferable that only the content permitted to be distributed is returned in the list. As a result, the name of the content that the user does not want to show can be prevented from being displayed in the content list. In addition, it is possible to prevent unnecessary requests from being sent by removing content that is not permitted from the list.

It has a function of accepting the setting of the start time and end time of the content permitted to be distributed from the portable terminal,
It is preferable to permit distribution of the section between the start time and the end time.

  In response to the content acquisition request from the terminal, a Heart Beat packet is sent to the terminal and the content server during a period in which the content server distributes other than the section between the start time and the end time. You may make it transmit. Here, it is preferable that the content permitted to be distributed is acquired by communicating from the terminal via the second home network.

  The content permitted to be distributed may be acquired by communicating from the terminal via short-range wireless communication. A rejection response may be returned in response to an acquisition request for a stream of content other than the content permitted to be distributed from the terminal.

Further, the present invention includes the first function including a gateway function for distributing content held by a content server on the first home network to a terminal on a second home network different from the first home network. A first home gateway of the network; a second home gateway on a second home network connected to the first home gateway via the Internet; and the first home gateway connected to the second home gateway And a mobile terminal authenticated by the device authentication management unit of
The first home gateway responds to a request from a terminal having the characteristics of a terminal on the second home network that permits distribution of the content from the content server set by the mobile terminal. A content distribution system comprising: an access transparency control unit that performs access control that permits distribution of a list or a stream of content from the content server to the terminal.

  Further, the present invention includes the first function including a gateway function for distributing content held by a content server on the first home network to a terminal on a second home network different from the first home network. A first home gateway of the network; a second home gateway on a second home network connected to the first home gateway via the Internet; and the first home gateway connected to the second home gateway A mobile terminal authenticated by the device authentication management unit, wherein the first home gateway is a list of content that is set by the mobile terminal and that permits distribution of content from the content server or content The content server of the stream A content distribution system characterized by having an access transmission control unit for performing access control to be distributed to the terminal on the second home network.

  You may make it display the list | wrist of the content delivered to the said terminal, or the stream of content also on the display part of the said portable terminal. The user can perform content access control while viewing the content display.

  Moreover, the present invention may be a portable terminal in the content distribution system described above, and may include an access permission setting unit that sets access permission in the access transparency control unit. Or it is a portable terminal in the content delivery system as described above, and the control function of the second home gateway may be provided in the portable terminal. By having the control function, the first home gateway can be directly accessed without going through the second home gateway. The discovery function can be performed by short-range communication or the like.

  According to the present invention, it is not necessary to set in advance access restrictions and the like, and it is possible to reproduce content by selecting a terminal or content that allows viewing. Only a specific part of the moving image and the audio content can be selected to allow viewing.

It is a figure which shows the example of 1 structure of the content delivery system by embodiment of this invention. It is a functional block diagram which shows the outline | summary of UPnP Remote Access. It is a figure which shows the communication sequence of the content delivery system by the 1st Embodiment of this invention. It is a figure which shows the communication sequence in the case of confirming the reply destination of a content list. It is a figure which shows the communication sequence in the case of confirming the reply destination of a stream. It is a figure which shows the communication sequence at the time of a shared viewing end. It is a functional block diagram which shows one structural example of the content delivery system by embodiment of this invention. It is a flowchart figure of the access control with respect to a transmission source. It is a flowchart figure of the access control with respect to a reply destination. It is a communication sequence diagram of the content delivery system by the 2nd Embodiment of this invention. It is a flowchart figure of access control with respect to a content. It is a communication sequence figure in the case of confirming a terminal and content. It is a flowchart figure of access control with respect to a terminal and content. It is a communication sequence diagram in the case of using RTSP. It is a figure which shows the example of a reproduction area selection screen. It is a communication sequence diagram in the case of permitting reproduction of only a part of content. It is a figure which shows the system configuration example of the content delivery system by the 7th Embodiment of this invention. It is a functional block diagram of the content delivery system by the 7th Embodiment of this invention. It is a communication sequence diagram of the 7th Embodiment of this invention.

[First Embodiment]
Hereinafter, a multimedia content distribution system according to a first embodiment of the present invention will be described with reference to the drawings. FIG. 1 is a diagram showing an example of a configuration in which content is shared between two homes using a multimedia content distribution system, and a function corresponding to Remote Access standardized by UPnP is used as a home gateway. It is a block diagram when installing and sharing a DLNA-compatible device between two homes such as a home and a friend's home. Note that the home 101 and the visited friend's house 104 are in an environment where they can be connected through the Internet line L2.

  The home 101 is provided with a home gateway 103 for sharing the Internet connection with devices on the home network. The home gateway 103 has at least two network interfaces on the WAN side and the LAN side, the WAN side is connected to the Internet line L2, and the personal computer 102 is connected to the LAN side via the line L1. . The personal computer 102 has a server function for providing content to a media player on the home network.

  A home gateway 105 is installed in the friend's house 104. Similarly, the WAN side is connected to the Internet line L2, and the LAN side is connected to the home network. A television 106 and a television 108 having a function capable of reproducing the content of the content server via the network are installed in the bedroom and the living room, respectively, and are connected to the home gateway 105 via the LAN lines L3 and L5, respectively. It is assumed that

  The portable terminal 107 is owned by the user at home 101 and is connected to the home gateway 105 via the LAN line L4. L4 is a general wireless connection such as Wi-Fi, for example.

  Next, an outline of UPnP Remote Access will be described. Details of UPnP Remote Access are described in Non-Patent Document 1 above.

  The configuration example of UPnP Remote Access shown in FIG. 2 includes a home gateway 202 on the home network 1 side and a home network 2 side between the two home networks of the home network 1 and the home network 2. Typical configuration when communication is performed between a UPnP device (Control Point and Device) 201 on the home network 1 side and a UPnP device (Control Point and Device) 208 on the home network 2 side by connecting the home gateway 205 of the home network 205. It is an example. The home gateway 202 on the home network 1 side and the home gateway 205 on the home network 2 side are respectively configured by two functional elements, Discovery Agents 203 and 206, and Transport Agents 204 and 207, respectively.

  The Transport Agents 204 and 207 establish a VPN session using an encrypted communication protocol such as IPSec. When the home network 1 and the home network 2 are virtually connected, peer-to-peer communication is possible between UPnP devices on both home networks.

  UPnP uses a multicast communication protocol called SSDP (Simple Service Discovery Protocol) to perform communication such as discovery of devices, confirmation of survival, and detachment from the network. However, in general, in a VPN connection environment, a multicast packet may be discarded by a router on the route. The Discovery Agent 203 collects SSDP multicast packets flowing on the home network 1 within a certain period, packages them into one or a plurality of packets, and transmits each packet to the Discovery Agent 206 by unicast communication. The Discovery Agent 206 returns the received unicast packet to a multicast packet and flows it into the home network 2. By using such a mechanism, SSDP communication is possible in the VPN environment.

  Corresponding to FIG. 1, each terminal 102, 106, 107, 108 has functions (201 and 208) of UPnP Device and Control Point. Home gateway 103 and home gateway 105 correspond to home gateway 202 and home gateway 205, respectively.

  Next, a communication sequence in the multimedia content distribution system according to the present embodiment will be described with reference to the communication sequence diagrams of FIGS. 3 to 6 and the functional block diagram of FIG. The personal computer 102 shown in FIG. 1 functions as a content server and is equipped with a DLNA DMS function, and is represented as a DMS 102 in FIGS. The home gateway 103 in FIG. 1 is represented by HGW (1) 103 in FIGS. The home gateway 105 in FIG. 1 is represented by HGW (2) 105 in FIGS. The television 106 in FIG. 1 is assumed to have a DLNA DMP function, and is represented as the DMP 106 in FIGS. The portable terminal 107 in FIG. 1 is assumed to be equipped with the function of the DMC 718 of DLNA as shown in FIG. 7, and is represented as DMC 107 in FIGS. The television 108 in FIG. 1 is assumed to be equipped with the function of the DLNA DMR 108a, and in FIG. 3 to FIG.

  A case where the content of the DMS 102 is viewed on the DMR 108a will be described. As shown in FIG. 7, the HGW (2) 105 has a LAN side I / F 701 and a WAN side I / F 702. The LAN side I / F 701 is connected to a home network, and the WAN side I / F is connected to the Internet directly or through a modem device or the like. Although omitted in FIG. 7, a modem function may be incorporated and a function of connecting to an Internet provider using a protocol such as PPPoE may be used. Similarly, the HGW (1) 103 also has a LAN side I / F 716 and a WAN side I / F 708.

  The HGW (1) 103 and the HGW (2) 105 are assumed to correspond to the above-mentioned UPnP Remote Access, and the functions are provided by the DLNA synchronization control units 713 and 706 in FIG. 7, respectively. As described above, the DLNA synchronization control units 713 and 706 convert the UPnP multicast packet transmitted from the LAN side into a unicast packet, relay it between the home gateways, return to the multicast again, and return to the other home. It works to flow through the network.

  The HGW (1) 103 and the HGW (2) 105 are equipped with Web servers 709 and 703, respectively, and provide an HTML page for setting the UPnP Remote Access function from the outside. The user of the DMC uses a Web browser to connect to the Remote Access function setting page of the HGW 2 and issues a session connection instruction indicated by P300 in FIG.

  The HGW (1) 103 and the HGW (2) 105 function as general broadband routers, and according to various routing policies set in advance, the routing control units 704 and 710 in FIG. Routes flowing packets. The setting of various functions of the broadband router is also provided by the above-described Web server.

  In order to perform UPnP Remote Access communication between home gateways, it is first necessary to acquire an IP address assigned to the WAN side of the home gateway to be connected by some method. In the present embodiment, the method described in the following non-patent document [2] is used as means for starting a session with a connection destination. Briefly describing this method, in the method of Non-Patent Document [2], a unique SIP address is assigned to each of HGW (1) 103 and HGW (2) 105, and a SIP session is established between home gateways. As a result, the use of the Remote Access function is started. The session control unit 715 of the HGW (1) 103 and the session control unit 707 of the HGW (2) 105 function as a SIP client.

The DMC user inputs the SIP address of the HGW (1) 103 on the Remote Access function setting page, and presses the connection button or the like as a trigger to trigger the HGW (1) 103 and the HGW (2) 105 session control unit 715. In step 707, the SIP session indicated by P301 in FIG. 3 is established. Although omitted in FIG. 3, a plurality of sequences such as a SIP INVITE message and a response to the SIP INVITE message are included.
Non-Patent Document [2]: ETSI TISPAN Technical Standard ETSI TS 185 010 V2.1.1

  In order to use the UPnP Remote Access function, it is not essential to manage the session by SIP or the like. In order to start the VPN session of P302 in FIG. It only has to be able to acquire the address. For example, instead of establishing the SIP session of P301, the IP address of the HGW 1 may be acquired using dynamic DNS.

  In P301 of FIG. 3, since the HGW (1) 103 and the HGW (2) 105 can acquire each other's IP address, the VPN is continuously used between the home gateways using a protocol such as IPSec in P302. Establish a session. In order to establish and control a VPN session, the HGW (1) 103 and the HGW (2) 105 have VPN control units 712 and 705 in FIG. 7, respectively.

  When the VPN is established, the above-described UPnP Remote Access mechanism makes it possible to discover DLNA devices in other home networks between the two home networks. P303 and P305 in FIG. 3 indicate SSDP multicast communication, and P304 indicates SSDP synchronization processing by unicast communication. With these sequences, the DMS 102 can be discovered from the DMC 107.

  Similarly, the DMS 102 can be discovered from the DMP 106 by P306, P307, and P308.

  The DMC 107 finds the DMR 108a under the control of the HGW (2) 105 through the exchange of SSD of P309.

  Next, a mechanism in which the HGW (1) 103 controls access to DLNA unicast communication will be described. The HGW (1) 103 allows all DLNA unicast communication from the WAN side to the LAN side direction, but the unicast communication from the LAN side direction to the WAN side direction is a response to a request from a terminal to which access is permitted. It shall pass only. The access control function is provided by the DLNA transparency control unit 714 of FIG.

  A processing sequence of the DLNA transmission control unit 714 will be described with reference to a flowchart of FIG. The DLNA transmission control unit 714 acquires one packet that has passed through the routing control unit 710 in step S001. In step S002, it is determined by examining the packet header whether the packet acquired in step S001 is a packet from the WAN side to the LAN side or a packet from the LAN side to the WAN side. If the packet is directed from the LAN side toward the WAN side (No), the process proceeds to step S003, flows directly to the WAN side, returns to step S001, and acquires the next packet.

  If the packet is in the direction from the WAN side to the LAN side in step S002 (Yes), it is determined in step S004 whether the IP address of the transmission source is from a terminal permitted to access, as in step S002. Check the packet header to determine. If the terminal is permitted (Yes), the process proceeds to step S006, the corresponding packet is sent to the LAN side, and the process returns to step S001 to acquire the next packet.

  If the IP address of the transmission source is not permitted (No), the packet header or data portion is analyzed in the process of step S005 to determine whether the packet is a unicast packet related to DLNA. Whether it is a DLNA command, for example, whether the string “dlna.org” is included after POST in the packet, or whether the User-Agent is “UPnP / 1.0 DLNADOC / 1.00” It can be judged by. Whether or not the content acquisition request is based on HTTP GET for the DMS can be determined by whether or not the character string “contentFeatures.dlna.org” is included in the message. Alternatively, the IP address of the DMS on the LAN side may be acquired in advance by analyzing the SSDP packet, and it may be determined whether the request packet is for the IP address. It is assumed that the packet to be analyzed is previously decrypted from encryption by IPSec or the like by the VPN control unit 712 in FIG.

  If it is determined that the packet is a DLNA related packet (Yes), the packet is discarded in step S007. If it is determined that the packet is not a DLNA-related packet (No), the process proceeds to step S006 and is directly sent to the LAN side. Returning to step S001, the next packet is acquired and the same processing is repeated.

  It is assumed that the HGW (1) 103 provides a function that can change the setting of a terminal having the above-described characteristic of permitting access only from an authenticated terminal. As an authentication method, for example, in the home network on the LAN side of the HGW 1, an authentication user name and password are set via a setting Web page, and when accessing from the WAN side, those user name and password are set. There is a method of authenticating by inputting. In the process of P310 in FIG. 3, the user name and password are exchanged, and the DMC 107 is authenticated. After the device authentication, the HGW (1) 103 permits the above access control setting change to the IP address of the DMC 107. The above-described terminal authentication function is provided by the device authentication management unit 711 in FIG.

  The device authentication management unit 711 notifies the DLNA transparency control unit 714 of the IP address of the authenticated device, whereby access permission to the DMC 107 is set. As described above, after the device authentication is executed, the HGW (1) 103 permits the DMC 107 to perform unicast communication with the DLNA device on the LAN side.

  Next, the user activates the DMC application of the mobile terminal, accesses the DMS 102, and obtains a list of contents. In P 311 of FIG. 3, the DMC 107 issues a DLNA Browse command to the DMS 102. When the Browse command passes, the HGW (1) 103 checks whether it is a command issued from the IP address permitted to access in the process indicated by P312. Since access to the DMC 107 is permitted, the Browse command is directly transferred to the DMS as indicated by P313.

  The DMS that has received the Browse command returns a content list to the DMC 107 as shown in the sequence of P314. The DMC 107 analyzes the received content list, configures a list screen, and displays it on the DMC application.

  Next, the user selects content to be played back by the DMR 108a from the content list displayed by the DMC application. In order for the DMR 108a to play the content of the DMS 102, the HGW (1) 103 needs to permit DLNA unicast communication with the DMR 108a. At P315 in FIG. 3, the DMC 107 notifies the IP address of the DMR 108a using, for example, an HTTP POST command, and performs setting to permit access. In this specification, such an attribute for specifying a terminal such as an IP address is referred to as “terminal characteristic”. Assume that the DMC 107 has acquired the IP address of the DMR in advance in the sequence of P309. The access permission setting information is generated by the access permission setting unit 719 in FIG. 7, transmitted to the HGW (1) 103, and set in the DLNA transparency control unit 714 in FIG. In addition to the DMC 107, the DLNA transparency control unit 714 stores an access permission setting for the DMR 108a.

  Subsequently, the DMC 107 notifies the URL of the content acquired from the content list to the DMR 108a according to the DLNA protocol in the sequence of P316 in FIG. 3 in conjunction with the selection of the content, and issues a playback start command such as Play. To do.

  In the present embodiment, it is assumed that the designated content is distributed by HTTP streaming. The DMR 108a makes a content acquisition request to the DMS 102 in the sequence of P317 using the HTTP protocol.

  When a content acquisition request issued from the DMR 108a passes, the HGW (1) 103 checks whether it is an acquisition request from a terminal having an IP address permitted to access in the process indicated by P318. Since the access permission is set for the DMR 108 a in the process of P 315, the content acquisition request is transferred to the DMS 102 as indicated by P 319.

  The DMS 102 that has received the content acquisition request returns a content stream to the DMR 108a as a response, as shown in the sequence of P320. The DMR 108a receives the content stream and reproduces the content using the installed AV player function.

  On the other hand, the television 106 shown in FIG. 1 has a DMP function, and detects the presence of the DMS 102 when a session between home gateways is established and the UPnP Remote Access function is enabled. Can do. In the sequence of FIG. 3, the sequence of P306 to P308 is shown.

  Therefore, the DMP 106 can issue a content list acquisition request to the DMS 102. However, when the Browse command indicated by P321 in FIG. 3 passes through the HGW (1) 103, as shown by P322, whether the transmission source of the DLNA command is from a terminal that is permitted to access or not. Get a check. Since the DMC 107 does not set access permission for the DMP 106, the Browse command is discarded by the HGW (1) 103 and is not transferred to the DMS 102. Instead, the HGW (1) 103 generates and returns an error message (rejection response) to the DMP 106 at P323.

  As described above, it is possible to prevent the content list held by the DMS 102 from being displayed on a terminal that is not permitted to access a remote home network. The HGW (1) 103 may not execute the error return of P323, and the DMP 106 may wait for the timeout of the Browse command.

  Further, when the user knows the URL of the content of the DMS 102 by any method, there is a possibility that the user inputs the URL directly into the media player of the DMP 106 and tries to reproduce the content. Even in this case, as indicated by P324 to P326 in FIG. 3, the content acquisition request from the DMP is discarded by the HGW (1) 103 and the content cannot be reproduced, as in the process for the Browse command. . The HGW (1) 103 may not execute the error return of P326, and the DMP 106 may wait for the timeout of the content acquisition request.

  In the above example, it is determined whether the request message transmitted from the DMC 107 and the DMP 106 to the DMS 102 is to be transferred to the DMS 102 depending on whether the request is a request from a terminal that the home gateway interrupts and is permitted to access. . Instead, or at the same time, it may be determined whether the home gateway interrupts and transfers the response message returned from the DMS 102 to the DMC 107 and the DMP 106.

  The sequence in that case is shown in FIGS. In FIG. 4, the Browse command from the DMC 107 to the DMS 102 is transferred as it is as in P3110. The DMS 102 returns the content list in P3120, but checks whether the HGW (1) 103 is a reply to the terminal permitted in P3130. Since the DMC 107 is permitted, the content list is returned to the DMC 107 as indicated by P3140.

  On the other hand, the Browse command from the DMP 106, which is an unauthorized terminal, is transferred to the DMS 102 as in P3210, but the P3215 that is the response of the content list is transferred to the DMP 106 by the HGW 1 by the processing of P3220. Discard without. The HGW (1) 103 returns an error to the DMP 106 in P3230.

  Similarly, FIG. 5 shows an example in which the home gateway returns a stream only to an authorized terminal for the content stream reception processing. In FIG. 5, the content acquisition request command from the DMR 108a to the DMS 102 is transferred as it is as in P3170. The DMS 102 returns the content stream in P3180, and confirms whether the HGW (1) 103 is a reply to the terminal permitted in P3130. Since the DMR 108a is permitted, the content stream is returned to the DMR 108a as indicated by P3190.

  On the other hand, the content acquisition request command from the DMP 106, which is an unauthorized terminal, is transferred to the DMS 102 as in P3240. However, the PGW 3245, which is the response of the content stream, is transmitted by the HGW 1 through the P3250 destination confirmation process. Discard without transferring to DMP 106. The HGW (1) 103 returns an error to the DMP 106 in P3260.

  FIG. 9 shows a flowchart when the response message is analyzed by the DLNA transmission control unit 714 in FIG. The process shown in FIG. 9 is basically the same as the process shown in FIG. 8, but the process shown in FIG. 9 is determined in step S104 based on whether the destination IP address in the packet header is a permitted terminal. . In step S105, it is determined whether or not a DLNA-related character string similar to that in step S005 in FIG. 8 is included in the packet. By analyzing the correspondence with the HTTP command from the WAN side to the LAN side, if it is a response to a request from an authorized terminal, it may be returned to the WAN side.

  Next, a sequence for ending content viewing on a remote home network using UPnP Remote Access will be described with reference to FIG. The user connects to the setting page of the HGW (2) 105 from the Web browser of the DMC 107 in the same manner as when the connection of UPnP Remote Access is started, and performs setting for terminating the connection between the home networks. The sequence is shown in P330 of FIG.

  In order to end the SIP session, the HGW (2) 105 transmits a SIP BYE command to the HGW (1) 103 in the sequence of P331. The HGW (1) 103 that has received the BYE command cancels the access permission setting in the process of P332. Subsequently, the VPN session is terminated in the sequence of P333. After that, the HGW (1) 103 returns an OK message in P334 as a response to P331. The series of operations described above do not necessarily have to be performed in this order, and it is only necessary that the access permission setting is canceled in conjunction with the end of the SIP and VPN sessions.

  In addition, as a countermeasure when the user forgets the termination operation, access permission is granted when no command is transmitted for a certain period of time after the command for HGW1 is transmitted last while the content stream distribution is stopped. It is also possible to cancel the setting of.

[Second Embodiment]
In the first embodiment, by performing access control on the terminal, it is assumed that the content list cannot be acquired and the content cannot be reproduced except for the authorized terminal. In the second embodiment, a method of permitting list acquisition and reproduction of specific content by performing access control for each content in addition to access control for a terminal will be described.

  In the first embodiment, the television 108 in FIG. 1 functions as the DMR 108a. However, in the present embodiment, it is assumed that the TV 108 functions as the DMP (108b). FIG. 10 shows the sequence. The process until the DMC 107 shown in the sequence of P416 acquires the content list of the DMS in the remote home network is basically the same as in the first embodiment, and the description from P400 to P416 is omitted. Only the sequence in which the DMP 108b detects 102 DMSs by SSDP is different.

  The user of the DMC displays the acquired content list with the application of the portable terminal. Among them, the content permitted to be played back by DMP is selected. A plurality of contents may be selected simultaneously from the contents list. When the content is selected, information for specifying the content, such as the URL information of the content, is transmitted from the access permission setting unit 719 in FIG. 7 to the HGW (1) 103 using the HTTP protocol in the sequence of P417. And set in the DLNA transmission control unit 714. The access permission setting information may be transmitted every time content is selected, or may be transmitted all at once when a plurality of contents are selected. Similarly, it is also possible to transmit an instruction for releasing permission to reproduce content. Further, it is assumed that the HGW (1) 103 discards all accesses from terminals other than the DMC that has been device-authenticated in P310 until permission for content reproduction is set. The content information notified to the HGW (1) 103 is stored in the DLNA transparency control unit 714 in FIG. 7 and used for access control.

  The access control process of the DLNA transparency control unit 714 will be described with reference to the sequence diagram of FIG. 10 and the flowchart of FIG. A content list acquisition request is issued from the DMP 108b to the DMS 102 in P418. The DLNA transmission control unit 714 acquires a content list acquisition request packet from the routing control unit 710 in step S301 of FIG. In step S302, the packet header and the like are analyzed to determine the direction. Since the packet is in the direction from the WAN side to the LAN side, the process proceeds to S305, where it is determined whether or not the content list request is not permitted by an HTTP GET message including the URL of the unauthorized content. The Since the packet is not applicable, the process proceeds to step S307 and is directly sent to the LAN side.

  As described above, the content list acquisition request is received by the DMS in the sequence of P418 in FIG. 10, and is returned in the direction of the HGW 1 in P419. In the sequence of P420, the DLNA transmission control unit 714 of the HGW 1 performs a process of returning only the permitted content list.

  In step S301 in FIG. 11, a response message including the content list is acquired. In step S302, the direction is determined. Since the direction is from the LAN side to the WAN side, the process proceeds to step S303. In step S303, it is determined by analyzing the contents of the packet whether or not the packet is a response message regarding the operation of a content list such as DLNA Browse or Search. Since the packet is a response of Browse, the process proceeds to step S304. If it is determined that the packet is irrelevant (No), the process proceeds to step S308 and is transmitted to the WAN side as it is.

  In step S304, content that is not permitted to be accessed is deleted from the content list. For the packet containing only the content list for which access is permitted, the process proceeds to step S308 and is returned to the WAN-side DMP 108b, as indicated by P421.

  Since it is also assumed that a request for content acquisition other than the list operation is transmitted, it may be determined whether or not it is a content acquisition request for which access is not permitted at the same time in the process of step S303. If it is determined that the packet is not permitted, the packet is discarded in step S304.

  The user selects a specific content from the content list displayed on the DMP 108b and tries to reproduce it. In the sequence of P422, a content acquisition request is transmitted to the DMS 102 using the HTTP protocol. When the packet passes, the DLNA transmission control unit 714 of the HGW (1) 103 determines whether or not it is an acquisition request for content permitted to be accessed in the process indicated by P423. In FIG. 11, after step S301 and step S302, it is determined whether or not the URL of the content included in the packet is permitted in step S305. Since the content is permitted (No), the process proceeds to step S307 and is transferred to the DMS as shown in the sequence of P424. The DMS returns a content stream to the DMP as a response.

  On the other hand, it is assumed that the URL of content that is not permitted to be accessed is directly input by the DMP 106 and playback is attempted. When the content acquisition request in P426 of FIG. 10 passes through the HGW (1) 103, it is determined whether or not it is a permitted content acquisition request by DLNA transparency control in the sequence indicated by P427. Through step S301 and step S302 of FIG. 11, it is determined in step S305 that the URL of the content included in the packet is not permitted, the process proceeds to step S306, and the packet is discarded.

  It is assumed that the analysis target packet is previously decrypted by the VPN control unit 712 in FIG. 7 from encryption by IPSec or the like. In addition to controlling access to content, terminals that are permitted to access may be limited.

  The communication sequence in FIG. 12 follows the same sequence up to P416 in FIG. 11. In P4170, in addition to the information on the content permitted to be played, information such as the IP address for specifying the terminal permitted to play is added. Notice. FIG. 12 shows a case where reproduction is permitted only to the DMP 108b. The DMC 107 needs to acquire the IP address of the DMP 108b in advance. For example, the DMC 107 displays and checks the IP address on the DMP function setting screen, and the user inputs and sets the IP address in the DMC 107 application. A method is conceivable. In the case of having the function of the DMR 108a as well, as in the first embodiment, the DMC 107 discovers the DMP 108b using the UPnP SSDP protocol, displays a list of device names using the DMC 107 application, When the user selects a terminal to which access is permitted, the IP address of the selected device can be embedded in the message P4170. It is assumed that the IP address notified to the HGW (1) 103 is stored in the DLNA transparency control unit 714 and used for access control.

  Processing of the DLNA transmission control unit 714 of the HGW 1 of P4181 in response to the content list acquisition request (Browse) of P4180 will be described with reference to the flowchart of FIG. In step S401, the packet is acquired. In step S402, the packet is determined to be from the WAN side to the LAN side (No), and the process proceeds to step S406. In step S406, it is determined whether or not the source IP address included in the packet header is that of the permitted terminal. Since P4180 is from the permitted DMP 108b, the process proceeds to step S408, where it is determined in the same manner as in the above example (No), the process proceeds to step S410, and is transferred to the DMS 102 as shown in the sequence of P4182. The The processing of P4200 for the content list returned by the DMP 108b is processed in the same manner as the above-described access permission determination for the content, and the content list is returned to the DMP 108b.

  On the other hand, the content list acquisition request P4260 from the terminal (DMP 106) to which access is not permitted is sent from the terminal that is not permitted in step S406 of FIG. 13 in the process of the DLNA transparency control unit 714 in the sequence of P4270. It is determined as a request (No), and the packet is discarded in step S407.

  Similarly, for content acquisition requests, access control can be performed by analyzing whether the source IP address is from an authorized terminal.

[Third Embodiment]
Next, as a third embodiment, a case where access restriction settings are controlled in conjunction with content reproduction control will be described. A case where RTSP is used as a content reproduction control protocol will be described with reference to the sequence diagram of FIG. The processing up to P315 in FIG. 14 is the same as in the first embodiment.

  When the user selects content on the application of the DMC 107 and performs an operation such as pressing a play button, the URL of the content to be played is specified from the DMC 107 to the DMR 108a using the UPnP protocol in P716. At this time, it is notified that the RTSP protocol is used at the same time. The DMR 108a transmits an RTSP SETUP command to the DMS 102 in P717. Similar to the above-described embodiment, the SETUP command is confirmed in P718 by the DLNA transparency control unit 714 of the HGW (1) 103 whether it is issued from an authorized source. Specifically, the packet header is analyzed, and if the source IP address is a permitted terminal, the packet is transferred to the LAN side. If the packet content does not include the description of DLNA or RTSP protocol, it may be determined that the packet is irrelevant to content viewing and flow to the LAN as it is.

  The DMS that has received the SETUP command returns an OK response to the DMR in P720. At this time, only the response to the authorized terminal may be transferred by the HGW (1) 103 as in the above-described embodiment. The DMR 108a that has received the response from the DMS 102 returns OK to the DMC 107 in P721 as a response to the request in P716.

  Subsequently, the DMC 107 issues a UPnP Play command indicated by P722 to the DMR 108a. The DMR 108a issues an RTSP PLAY command in a sequence indicated by P723 using information such as the URL of the content specified by the UPnP Play command. In P724, as in the SETUP command, it is confirmed that access from the transmission source terminal is permitted. In P725, the access is transferred to the DMS 102. In P726, an OK response is returned from the DMS 102 to the DMR 108a, and the DMR 108a returns an OK response to the DMC 107 as a response to P722 in P727. In parallel, the content is stream-distributed from the DMS 102 to the DMR 108a at P728.

  When stopping the reproduction of the content, the user presses a stop button on the application of the DMC 107. A UPnP Stop command is transmitted from the DMC 107 to the DMR 108a as shown in the sequence of P732. The DMR 108a that has received the Stop command transmits an RTSP TEARDOWN command to the DMS 102 in the process of P733.

  Similar to the other RTSP commands described above, the HGW (1) 103 confirms that access is permitted at P734, and transfers the TEARDOWN command to the DMS 102 at P735. The DMS 102 returns an OK response in P736.

  The DLNA transmission control unit 714 of the HGW 1 analyzes the content of the RTSP packet to confirm that the OK response is returned from the DMS in response to the TEARDWON command in the sequence of P737, and the IP addresses between the terminals match. And that the sequence number is compatible. When it is confirmed that the access has been normally completed, the setting of the terminal that permits the access held at this point is canceled. Thereafter, the response is transferred to the DMR 108a in P738, and the DMR 108a returns OK to the DMC 107 in P739 as a response to P732. This completes the viewing sequence. When replaying the content again, it is assumed that the setting of the terminal that permits the replay of P315 is performed again.

  Although omitted in FIG. 14, in general, when RTSP is used, a PAUSE command for stopping the reproduction of content is transmitted immediately before the TEARDOWN command.

  Even when HTTP is used for the streaming protocol, the HGW 1 analyzes and acquires the size and time length of the content included in the content acquisition request packet, the content stream header, etc., and the number of bytes of content transmitted from the DMS Alternatively, the setting of access permission may be canceled when it is determined that the stream has been transmitted to the end by monitoring the time stamp of the stream.

[Fourth Embodiment]
As a fourth embodiment, a case will be described in which reproduction of only a specific section in a moving image is permitted. In FIG. 1, first, a content list of the server 102 is displayed on the mobile terminal 107. The mobile terminal 107 functions as a DLNA DMP and can reproduce a moving image selected from the content list. When the content is selected, the mobile terminal 107 displays a screen having a user interface as shown in FIG.

  A screen frame 301 in FIG. 15 is displayed on the display of the mobile terminal. In the area 302, the title name of the selected content is displayed. The user can move the focus by operating the cursor key of the portable terminal, and can select each of the Start button 303, the End button 304, and the Register button 305. When a button corresponding to “OK” on the portable terminal is pressed and the Start button 303 is selected, the button is highlighted as shown in the figure, and the focus moves to 307. When a playback button assigned to a specific button of the portable terminal is pressed, the playback of the content is started and the content is displayed on the screen 306.

  At this time, in the sequence diagram of FIG. 16, the RTSP SETUP process of P817 to P820 and the RTSP PLAY process of P823 to P825 are executed from the portable terminal (DMP) 107, and the content stream is distributed from the DMS 102 as in P827. Is done. Note that the sequence up to acquiring the content list of P314 is the same as the sequence up to P314 in FIG.

  Similarly to the above-described embodiment, each command transmitted from the mobile terminal to the DMS is issued from a terminal (DMP) that is permitted to access when passing through the HGW (1) 103. Shall be confirmed. Similar to the above-described embodiment, it may be confirmed whether the response from the DMS 102 is a response to a permitted terminal.

  While watching the playback screen, the user presses a button corresponding to “determine” on the mobile terminal in a scene where playback on the television is permitted. Then, for example, the start time is displayed at a position below the progress bar 307 of the playback time. In the example of the start time shown in FIG. 15, “00: 41′15” is displayed. Content playback is paused.

  When the start time is determined, the button focus moves to the End button 304. When the playback button on the portable terminal is pressed, the playback of the content resumes, and the area from the start position of the progress bar 307 is highlighted. When the user presses a button corresponding to “determine” on the mobile terminal in a scene where the playback on the television is to be ended, the end position is determined and the end time is displayed below the progress bar 307 as shown in the figure. . In the example of FIG. 15, “01: 15′23” is displayed. The content is paused and the button focus moves to the Register button 305.

  When the “determine” button of the portable terminal is pressed, RTSP PAUSE command processing indicated by P828 to P831 is executed in the sequence of FIG. In response to the response from the DMS 102 in P831, the suspension time is returned, and the time is displayed on the progress bar 307. The processes from P823 to P831 are repeated until the start time and the end time are determined.

  When the user selects the Register button 305, the start position and the end position at which reproduction on the set television is permitted are transmitted to the HGW (1) 103 in the sequence of P832 in FIG. For example, the start time and end time expressed in the NPT format are followed by tags with appropriate names such as “Start-time: 00:41:15” and “End-time: 01:15:23”, respectively. In the described format, it is sent on the HTTP POST command. The setting information is generated by the access permission setting unit 719 in FIG. 7 and transmitted to the home gateway, and the DLNA transmission control unit 714 stores the start time and end time for permitting reproduction.

  When it is desired to limit the terminals that are permitted to reproduce, information such as an IP address for identifying the terminals that are permitted is transmitted to the home gateway in the sequence of P315. In the process of P832, information on terminals permitted in accordance with the start time and end time may be transmitted at the same time. Moreover, the setting of the terminal which permits access may be omitted, and the range of the start time and end time set above may be viewable on all terminals below HGW (2) 105. However, in this case, it is assumed that the content cannot be viewed from a device other than the portable terminal (DMP) 107 that has been previously set with permission until the start time and end time are set.

  Description will be made regarding a case where a reproduction permitted range is viewed on the television (DMP) 106 in FIG. In the sequence diagram of FIG. 16, when the DMP 106 selects content permitted to be accessed and performs a playback start operation, a PLAY command is transmitted following the RTSP SETUP command, as indicated by P833 to P838. Although not shown in the sequence diagram, it is assumed that the DMP 106 acquires a content list from the DMS 102 and performs a reproduction start operation on the content selected by the user from the list, as in the above-described embodiment.

  In RTSP, the playback start time and end time can be included in the PLAY request. If you want to start playback from the middle of the content and play it back to the end, only the start time should be included. The DLNA transmission control unit 714 of the HGW (1) 103 checks the playback start time and end time included in the PLAY command in the process of P836 of FIG. In the example of FIG. 16, the range in which playback is permitted is 00: 41′15 to 01: 15′23. If the requested start time is not within this range, the start time included in the PLAY command is set. Rewrite to the start time when playback is permitted and send. For example, when the reproduction start is requested from the beginning of the content from the DMP, the requested start time “0” is rewritten to 00:41:15 and transmitted to the DMS 102 in the sequence of P837.

  The DMS 102 starts sending the content from the position where the reproduction start is permitted. The HGW (1) 103 monitors the time stamp included in the stream sent from the DMS 102, and when the time stamp exceeds the permitted end time, the forward processing to the DMP 106 is stopped.

  As the time stamp, when the content is in the MPEG2-TS format with time stamp, the reproduction position can be detected by measuring the time stamp of 4 bytes before the TS packet. If only the elapsed time can be detected from the time stamp included in the elementary stream of the content, the elapsed time from the reproduction start position can be measured to determine whether the end position is exceeded. Alternatively, the playback time may be measured by the free-running clock of the HGW (1) 103. In this case, when double-speed playback is performed, the playback position of the content can be detected by integrating the double-speed value notified by the PLAY command and the elapsed time.

  The playback start position may not be corrected by the HGW (1) 103, only the playback position of the stream may be detected, and the stream outside the permitted playback range may not be transferred. In that case, if the RTSP Heart Beat packet is not periodically exchanged between the DMS 102 and the DMP 106, the DMS may stop transmission of the stream. In preparation for such a case, it is assumed that the HGW (1) 103 transmits a Heart Beat packet instead of the DMP.

  As described above, only a specific range of content can be permitted to be reproduced from the portable terminal and can be reproduced on the television. In the present embodiment, RTSP is taken as an example of the communication protocol, but even when HTTP streaming is used, the range of playback is similarly limited by the time stamp of the stream, or the byte position of the content specified by the Range header It is possible to limit the playback range by designating the playback start time and end time from the relative positions of the content and the total number of bytes of the content.

[Fifth Embodiment]
The fifth embodiment replaces only the part of the access permission setting release timing (FIG. 6) in the first and second embodiments, which will be described below.

  The timing for releasing the access permission setting may be the timing at which the mobile terminal 107 in FIG. 1 leaves the LAN network of the HGW (2) 105. In UPnP, it is necessary to respond to SSDP to confirm whether or not a terminal exists periodically. The DLNA transmission control unit 714 in FIG. 7 monitors whether the DMC 107 and the DLNA device under the HGW (1) 103 continue the presence confirmation response, and when the response of the DMC 107 stops, the DMC 107 It is assumed that the access permission for the other terminal set from the DMC 107 is canceled.

[Sixth Embodiment]
As shown in the sixth embodiment, configurations described below can be added to all the first to fifth embodiments.

  In general, in a VPN connection environment, since a private IP address is assigned to each terminal, the IP address may be different for each session. Therefore, when the access permission is controlled by the IP address of the DLNA device, the setting needs to be executed every time.

  However, after the DMC discovers the DLNA device under HGW2, the name of the device that may be notified by SSDP, the serial number, etc. are stored in the memory in association with the access permission setting information. If you find the same device again, you can recall the setting from memory and use the same setting.

  There is a possibility that a device with the same name exists when connected to another home network. For example, the home gateway name (friendlyName) acquired by UPnP, the WAN IP address, DNS name, etc. Management may be performed for each home network.

[Seventh Embodiment]
The seventh embodiment will be described in comparison with the second embodiment.
As another embodiment, as shown in FIG. 17, the mobile terminal 107 is not connected to the LAN side of the HGW (2) 105, but directly via the mobile line such as 3G, so that the WAN side of the HGW (1) 103 is directly connected. It can also be set as the structure connected to.

  FIG. 18 is a block diagram mainly showing the portable terminal 107 in FIG. It is assumed that the portable terminal 107 is connected to a 3G line or a public wireless LAN through the communication IF 717 and can use the Internet. The HGW (1) 103 and the HGW (2) 105 are assumed to have the same configuration as the configuration example of FIG.

  The mobile terminal 107 has functions common to the HGW (1) 103 and the HGW (2) 105, such as the routing control unit 720, the VPN control unit 721, the DLNA synchronization control unit 722, and the session control unit 723, so that the HGW (1 ) 103, communication such as discovery and control of DLNA devices is possible between the DMC function 718 on the portable terminal and the DLNA devices on the LAN side of the HGW (1).

  FIG. 19 is a diagram illustrating a sequence example in the present embodiment, and corresponds to FIG. In P901, the portable terminal (DMC) 107 and the HGW (1) 103 communicate directly without going through the HGW (2) 105, and establish a SIP session. Subsequently, VPN connection is performed at P902. Between the DMS 102 and the DMC 107, the DLNA synchronization control unit 722 of both devices executes a synchronization process based on the UPnP Remote Access mechanism of P904, and both devices can be discovered.

  By exchanging authentication information such as a user name and a password set in advance between the portable terminal (DMC) 107 and the HGW (1) 103 in the sequence of P905, as in the above embodiment, From the DMC of the portable terminal, it is possible to control DLNA devices below HGW1 and change the setting of access control of HGW1 (device authentication).

  Similar to the above-described embodiment (FIG. 10), in the sequence indicated by P401 to P411, establishment of a SIP session and a VPN session and synchronization processing of DLNA device discovery are performed between HGW1 and HGW2. Note that the communication path between the DMC 107 and the HGW (1) 103 and the communication path between the HGW (2) 105 and the HGW (1) 103 are different. This depends on the timing at which the connection start instruction is executed on the path.

  Similar to the above embodiment, a content list acquisition request is issued from the DMC 107 in P913, and it is confirmed whether or not the request is from a terminal permitted to access in P914, and then transferred to the DMS 102 in P915. In P916, the content list is returned from the DMS 102 to the DMC 107.

  The user selects a terminal that is permitted to be played back by the DMP 108b from the acquired content list. The DMC 107 acquires information for specifying a device such as a DMP IP address and a DLNA device name in the P905 sequence, and sets a terminal and a content permitted to be played in the P917 sequence in the HGW 1 in 103. . The access permission setting unit 719 in FIG. 18 transmits the access permission setting information to the DLNA transparency control unit 714 in FIG. 7 in the same format as in the above embodiment.

  In this embodiment, since the DMC 107 is not connected to the home network on the LAN side of the HGW (1) 103, it acquires information such as the IP address of the DMP 108b using the DLNA device discovery mechanism. Can not do it. In this embodiment, it is assumed that communication by short-range communication such as Bluetooth is possible with connection L6 between portable terminal 107 and television 108 in FIG. In recent years, portable terminals having a communication function based on Bluetooth have been widely used, and televisions that perform remote control using Bluetooth have been commercialized.

  The TV control unit 725 on the mobile terminal in FIG. 18 transmits the file describing the IP address or the like in the sequence of P905 in FIG. 19 from the DMP 108b through the Bluetooth I / F 724 according to the Bluetooth OPP or FTP profile. get. The file to be acquired uses, for example, a file format in which the IP address of the TV is described as “IP Address: 192.168.0.3” and the device name of UPnP is described as “UPnP friendlyName: Living DMP TV”. Alternatively, UPnP Device Description described in XML format may be acquired. The file exchange may be encrypted and transmitted / received.

  Subsequently, in the sequence of P917, information such as the IP address and terminal name of the DMP 108b and the content of the content permitted to be accessed as information for identifying the terminal permitted to access from the access permission setting unit 719 of FIG. A file describing the URL is transmitted to the HGW (1) 103 and set in the HGW (1) 103 DLNA transparency control unit 714 in FIG. When filtering by the terminal is not performed, only the content URL may be notified. In that case, the IP address acquisition process in the device authentication of P905 is not essential.

  As in the above embodiment, when there is a content list acquisition request from the DMP 108b, only the content permitted by the HGW (1) 103 is left in the list and transferred to the DMP 108b as shown in the sequence of P418 to P421. To do. When there is an authorized content acquisition request from the DMP 108b, it is determined as an access request to the authorized content from the authorized terminal 108, as shown in the sequence of P422 to P425, and content playback is performed. Is allowed.

  On the other hand, when there is a content acquisition request from the DMP 106 for which access permission is not set, the access request is returned as an error in the HGW (1) 103 as shown in the sequence of P426 to P428. Alternatively, it may be discarded without returning an error. Similar to the above embodiment, a content list acquisition request is also returned with an error. When filtering by the terminal is not performed, only the permitted content list is returned in the same manner as the response to the DMP 108b.

  Also, using the Bluetooth communication function between the DMC 107 and the DMP 108b, the DMC 107 can notify the DMP 108b of the content URL to instruct the start of playback, and can instruct playback control such as stopping playback. Also good.

  As described above, the specific embodiment has been described, but the functional block diagrams shown in FIG. 7 and FIG. 18 show a logical module configuration, and when actually mounted on a terminal, It is not limited to the configuration shown in the figure. For example, you may implement as a terminal which integrates the function with which the portable terminal 107 is equipped, and the function of DMP and DMR. It can be assumed to be implemented as a home server having both functions of a home gateway and a DMS. The provision of functions not shown in the drawing is not particularly limited.

  In this embodiment, the DLNA is used as a protocol for sharing content. However, the present invention can be applied to any protocol that can perform content list acquisition and playback control. It is not limited. The UPnP Remote Access for relaying device discovery between home networks may be any protocol that can realize the same thing.

  The present invention can be installed and used in a home gateway for sharing an Internet connection, a home server such as an HDD recorder or NAS, and a personal portable terminal such as a mobile phone.

L1 ... Communication path between home home server and home gateway L2 ... Communication path between home home gateway and visited home gateway via the Internet L3 ... Communication path L4 between visited home gateway and bedroom TV ... Communication path L5 between home gateway at home or home and mobile terminal L5 ... Communication path L6 between home gateway at home and living room TV ... Communication path 101 between home TV and mobile terminal at home ... Home 102 ... DMS function Home server PC
103, 105 ... Home gateway 104 ... Destination 106 ... TV with DMP function
107: Mobile terminal 108a having a DMC function ... TV having a DMR function
108b ... TV with DMP function
201, 208 ... UPnP Control Point or UPnP Device
202, 205 ... Home gateway 203, 206 ... Discovery Agent of UPnP Remote Access
204, 207 ... UPnP Remote Access Transport Agent
301 ... Screen frame 302 ... Content title display field 303 ... Start position selection button 304 ... End position selection button 305 ... Registration button 306 ... Content display frame 307 ... Progress bar 701, 716 ... LAN side I / F of home gateway
702, 708 ... WAN side I / F of home gateway
703, 709 ... Web server function 704, 710, 720 ... Routing control unit 705, 712, 721 ... VPN control unit 706, 714, 722 ... DLNA synchronization control unit 707, 715, 723 ... Session control unit 711 ... Device authentication management unit 714 ... DLNA transmission control unit 717 ... Communication I / F of portable terminal
718 ... DMC function 719 ... Access permission setting unit 724 ... Bluetooth I / F
725 ... TV control unit

Claims (5)

A first of the first home network having a gateway function for delivering content held by a content server on the first home network to a terminal on a second home network different from the first home network A home gateway,
The first home network and the second home network are connected to the Internet,
Which is connected to the second home gateway on the second home network, the first mobile terminal before it is authenticated by the device authentication management unit of the home gateway, the first to the second home gateway To get the IP address of your home gateway
When there is a mobile terminal that is not connected to the second home gateway and is authenticated by the device authentication management unit of the first home gateway, the first home gateway is connected to the second home gateway. Between each other, obtain each other's IP address, connect to the second home gateway, and permit distribution of the content from the content server by the portable terminal authenticated by the device authentication management unit of the first home gateway By setting the characteristics of the terminal to perform, it is possible to establish a session between the first home gateway and the second home gateway, and to discover devices in other home networks . set by the authenticated portable terminal by the device authentication management unit of the first home gateway In response to a request from a terminal having the characteristics of a terminal on the second home network that permits distribution of the content from the content server, a list of contents or a stream of content is distributed from the content server to the terminal. It has an access transparency control part that performs access control to allow,
The period for delivering the content list and the content stream to the terminal is a period in which communication with the mobile terminal authenticated by the device authentication management unit of the first home gateway is possible. 1 home gateway. The characteristics of the terminal that permits the distribution are as follows:
2. The first home gateway according to claim 1, wherein the portable terminal acquires from the terminal by communicating with the terminal via the second home gateway. 3. The characteristics of the terminal that permits the distribution are as follows:
Using the near field communication function held by the mobile terminal,
The first home gateway according to claim 1, wherein the first home gateway is obtained by communicating from the terminal via short-range wireless communication. The access transparency control unit
2. The first home gateway according to claim 1, wherein a rejection response is returned in response to an acquisition request for a list of contents or a stream of contents from a terminal other than the mobile terminal and the terminal. A first of the first home network having a gateway function for delivering content held by a content server on the first home network to a terminal on a second home network different from the first home network A home gateway,
A second home gateway on a second home network connected to the first home gateway via the Internet;
A portable terminal connected to the second home gateway and authenticated by the device authentication management unit of the first home gateway;
The first home gateway is connected to a second home gateway on the second home network, and the portable terminal before being authenticated by the device authentication management unit of the first home gateway is the second home gateway. Prompt the home gateway to obtain the IP address of the first home gateway;
When there is a mobile terminal that is not connected to the second home gateway and is authenticated by the device authentication management unit of the first home gateway, the first home gateway is connected to the second home gateway. Between each other, obtain each other's IP address, connect to the second home gateway, and permit distribution of the content from the content server by the portable terminal authenticated by the device authentication management unit of the first home gateway By setting the characteristics of the terminal to perform, it is possible to establish a session between the first home gateway and the second home gateway, and to discover devices in other home networks . set by the authenticated portable terminal by the device authentication management unit of the first home gateway In response to a request from a terminal having characteristics of a terminal on the second home network that permits distribution of the content from the content server, distribution of a list of contents or a stream of content from the content server to the terminal An access transparency control unit that performs access control to allow
The period during which the content list and the content stream are distributed to the terminal is a period in which communication with the mobile terminal authenticated by the device authentication management unit of the first home gateway is possible. Distribution system.

Images