KR100407603B1 - Assurance and security System for window media server through web server assurance - Google Patents

Abstract

The present invention provides an authentication and security system for a Windows media server operating a website that provides a video service, which is a viewing service for movie and real-time broadcasting, wherein the first login process is performed on the website by a user ID and a password. 1After performing the login process, the user extracts the user information consisting of the user's ID, the requested video name, and the IP address of the computer required to receive the video service, and transmits the user information to the media server 25 below. A web server 20 for transmitting a URL of a requested video to a computer of a corresponding user requesting a service; The user information consisting of the user's ID, the requested video name, and the IP address of the computer transmitted from the web server 20 is temporarily stored in the real-time authentication list information DB, and the operating system of the computer of the user who requested the video service. A media server that receives the IP address information extracted and transmitted automatically by the user, and checks whether the same IP address exists by matching the input computer IP address information and the authentication list information DB with the inputted server ( 25); And a broker 26 for stopping the provision of the media service under the control of the media server 25 when it is determined that the illegal viewing is performed, wherein the media server 25 is provided from the web server 20. Only the URL information is passed and media data is transmitted.

Accordingly, there is an effect that can block illegal viewing of movies and real-time broadcasting provided for a fee by an internet operator, and significantly increase the processing performance of media data.

Description

{Assurance and security System for window media server through web server assurance}

The present invention relates to internet security, and more particularly, to an authentication and security system of a Windows media server through server authentication that can block illegal viewing of paid media and significantly increase the processing performance of data. .

In general, the security management of most web services is poorly vulnerable to hacking, so the login process for viewing various contents provided by web service providers is exposed to swapping. SSL is introduced in consideration of the situation where a user's computer is completely exposed to hacking or Trojan-type hacking tools, but it is also insecure in that passwords or personal information can be intercepted by I / O when connected to the Internet. Since the certificate method is also installed and used on the user's computer, current Internet users are limited in receiving the same web service in different regions in different environments. IDs or passwords are poorly managed by users who need to secure various accounts to access various contents, and as a result, attempts to access a plurality of channels further reduce security.

As a specific example, a service provider currently providing a movie and a real-time broadcast on the Internet configures a system as shown in FIG. 1.

In this system configuration, most operators use Windows Media Server, which is a free software service provided by Microsoft (Microsoft). However, this software is inherently weak in security, and has low reliability for supporting important functions related to sales such as membership management and access control.

While companies with firewalls and security technologies are working to develop authentication security technologies for media operators, the protection is largely disabled for users who are a bit familiar with the Internet. In other words, when the URL is disclosed or the URL + user ID is disclosed, the conventional media server security technology is difficult to block illegal viewing at all.

Usually, media service providers have about 500,000 to 1.5 million members. In relational databases with such a large amount of information, a time delay of about 1 to 2 seconds is required, and when there are many concurrent users, a time delay may occur up to 10 seconds depending on hardware or communication specifications. In particular, this time delay causes an idle state of network communication, which leads to a significant performance degradation of the media server. In general, the media service provider is connected with 1000 concurrent users per day and 2000 concurrent users at night. If the media server goes down due to the degradation of the performance of the media server, the media service provider will be fatally damaged.

Accordingly, the present invention provides an authentication and security system for a Windows media server through web server authentication that can block illegal viewing of movies and real-time broadcasts that are provided for a fee by an internet operator and significantly increase the processing performance of media data. It is for that purpose.

1 is a general system configuration diagram for an Internet service;

2 is a schematic system configuration diagram in which a conventional security solution is performed;

3 is a flowchart illustrating an authentication and security process according to FIG. 2;

4 is a schematic structural diagram of a system in which a solution according to the present invention is performed;

5 is a flowchart showing the authentication and security process according to FIG.

Explanation of symbols on the main parts of the drawings

10: Web server (traditional) 15: Media server (traditional)

20: Web server (invention) 25: Media server (invention)

26: Broker

In order to achieve the above object, the present invention provides an authentication and security system for a Windows media server that operates a website that provides a video service in which a movie and a real-time broadcast are viewing services. After performing the login process and performing the first login process, the user extracts the user information consisting of the user ID, the requested video name, and the IP address of the computer required to receive the video service, and transmits it to the media server below. A web server for transmitting the URL of the video to the computer of the user who requested the video service at the same time; User information consisting of the user's ID transmitted from the web server, the requested video name, and the IP address of the computer is temporarily stored in the real-time authentication list information DB, and automatically extracted by the operating system of the user's computer that requested the video service. A media server that receives the transmitted IP address information, checks whether the same IP address exists by matching the input IP address information of the corresponding user computer and the authentication list information DB, and determines whether illegal access is made; And a broker for stopping the provision of the media service under the control of the media server if it is found that the illegal viewing is illegal.

In this way, the present invention does not require a process of encrypting and decrypting user information in a web server and a media server, and performs an illegal process because the authentication process is performed using a computer IP address of a corresponding user requesting a video service. It can be completely blocked, the processing logic is simpler than the conventional authentication and security method, and the CPU resources of the media server can be used smoothly.

Hereinafter, the cause of the conventional problem will be described in detail with reference to FIGS. 2 and 3, and then a preferred embodiment according to the present invention will be described in detail with reference to FIGS. 4 and 5.

FIG. 2 is a schematic system configuration diagram in which a conventional security solution is performed, and FIG. 3 is a flowchart illustrating an authentication and security process according to FIG. 2.

The conventional technology requests a media service by encrypting a user ID and a password through a user authentication process in a web server. In the decryption / encryption method, the web server 10 undergoes an encryption process of the user ID and password, sends the encrypted information to the user computer, and then the user computer resends it to the media server for service request. The server 15 receives the encrypted user ID and password and decodes it. If the decrypted user ID and password are registered users in the user database of the web server 10, and if the registered ID provides a normal media service.

At this time, the mms information (URL information, encrypted user ID, encrypted password) that the user computer should transfer from the web server 10 to the media server for the media service request is as follows and always remain in the hacking or computer. It may be exposed to other users by reading cache data.

mms: //211.172.194.105/movid.asf? id +% $ 12 * ": ps =" 4h * ^ (# "

When an illegal user requests a media service using mms information obtained by hacking or reading cache data, the existing method loses the validity of authentication. In other words, the user ID and password used by hackers are determined to be valid users when they are verified in the user database after being decrypted.

Therefore, as shown in FIG. 3, when an unauthenticated user copies the encrypted text including the exposed URL information, the encrypted user ID, and the password into a web browser, the media server 15 is regarded as a normal request. And illegal video viewing.

In addition to the problems of illegal video viewing by the illegal users described above, the media server 15 stores a database and a media service in which user IDs and passwords of members subscribed to a website providing a viewing service for Internet movies and real-time broadcasting. The authentication process is performed by matching the user ID and password requesting the request. If the website is a portal space that stores a large amount of user information during the authentication process, a large amount of information retrieval is required. There is a time delay of 3 to 10 seconds, which consumes a large amount of CPU resources of the web server and the media server, resulting in fatal performance degradation for the web server and the media server.

4 is a schematic configuration diagram of a system in which a solution according to the present invention is performed, and FIG. 5 is a flowchart illustrating an authentication and security process according to FIG. 4.

In Fig. 4, the system of the present invention has the same identity as that of the prior art in that the web server 20 and the media server 25 are the main axes. Web server 20 is a catalog service (information service) for the content, content search, content information registration, change, deletion, content evaluation using the user's feedback to the customer to service the built content on the Internet, In addition to functions such as commerce service, customer management, and content provider management of content, the ID of users requesting the movie or real-time broadcasting service, the requested video file name, and the IP address of the computer. And extracting the user information and transmitting the extracted user information to the media server 25 and transmitting the URL (Uniform Resource Locator) of the requested video to the user's computer.

Media server 25 is typically a movie transmitted from the web server 20 with functions such as content library construction, content storage, modification, deletion, library structure change, GUI configuration when downloading content, streaming services for multimedia components, etc. And after the user information consisting of the ID of the user requesting the viewing service of the real-time broadcast, the requested video name and the IP address (IP address) of the computer is temporarily stored in the real-time authentication list information DB (not shown), DB of the user's computer IP address information and authentication list information inputted by receiving IP address information automatically extracted and transmitted by the operating system (OS; Operating System) of the user's computer requesting the movie and real-time broadcasting viewing service. It checks whether the same IP address exists by matching with. Here, the personal information of users requesting the viewing service of the movie and the real-time broadcasting temporarily stored in the real-time authentication list information DB may be several seconds to use the CPU resources smoothly without delay in performing the authentication process in the media server 25. Or programmed to be automatically deleted within minutes. The various functions described above may be performed using a separate content server.

The broker 26 shown in the media server 25 is a server that controls window media, and synchronizes information with a database server, a streaming server, a content control server, and the like in the media server 25 to request a viewing service of a movie and a real-time broadcast. If the user is an illegal user, the media server 25 controls to stop providing the media service. Here, the database server stores the content, the streaming server streams the multimedia data, and the content control server builds the content library to manage the content.

In general, in the current Internet situation, in order for a user to receive a movie and live broadcast viewing service, a user ID and password of a user registered as a member of a website (portal site) that provides a movie and live broadcast viewing service as described above is first provided. After performing the first login process to authenticate by matching the stored large database with the corresponding user ID and password, the web server encrypts the user's ID and password when the user requests the movie and live broadcast to be serviced. The user computer automatically transfers this information to the media server, and the media server decrypts the transmitted user's ID and password, and then stores a large amount of ID and password for the users registered as members on the website. Databench and decrypted its use The service can be used only by repeating the ID and password of the ID and password again to perform authentication. Therefore, the user has to go through the complicated login process to contact the necessary information. This is a waste of resources and network resources. This problem occurs because the Internet movie service usually requires 1,000-2000 users to simultaneously authenticate, which causes the complicated login process as described above to be repeated. Serious problems will arise.

On the other hand, when a user who logs in to the system (website) of the present invention requests a video service such as watching a movie or a real time broadcast, the web server 20 requests the ID of the user who requested the video service, the requested video file name, and the corresponding computer. Extract the user information consisting of the IP address and transmit it to the media server 25 and at the same time transmit the URL of the video to the user computer. At this time, since the web server 20 transmits the user information transmitted to the media server 25 without encryption, the media server 25 transmits the user information (user ID, requested video file name, IP address of the corresponding computer). After the temporary storage in the real-time authentication list information DB without decrypting), the user's computer IP input by receiving the IP address information automatically extracted and transmitted by the operating system of the user's computer requesting the video service. The authentication process is performed by checking whether the same IP address exists by matching the address information and authentication list information DB. That is, the media server 25 receives the corresponding user information requested for the video service from the web server 20 and the corresponding computer, and compares and analyzes the user information, and immediately logs in without the process of decrypting the user information in the media server 25. If only the validity of the user information transmitted from the web server 20 requesting the video service can be quickly checked whether the illegal viewing. For example, if an illegal user wants to receive a service without going through a web server login or online payment process using a URL of a video extracted by reading mms information remaining on a user's computer, the real-time authentication list of the media server 25 is provided. User IP not stored in the information DB can be quickly checked whether illegal viewing. In the case of the illegal viewing, the broker 26 stops providing the media service under the control of the media server 25.

On the authentication script of the web server 20, an ASP (Active Server Page) is provided to enable a feedback service to exchange opinions with a user, and MySql is adopted so as not to put a load on its own media server 25.

Referring to the flowchart of FIG. 5, login is divided into an authentication processing step by the web server 20 and an authentication processing step by the media server 25. In the former step, if it is determined that the ID is valid when logging in, the selection of the video is allowed. In the latter step, the media server 25 temporarily stores the user information consisting of the ID of the user who requested the video service transmitted from the web server 20, the requested video file name, and the IP address of the computer in the real-time authentication list information DB. Then, if the same IP address exists by receiving and matching IP address information automatically extracted and transmitted by the operating system of the user's computer requesting the video service, the user information transmitted from the web server 20 is valid. Proceed with the media service. At this time, when attempting illegal viewing using the URL stolen by the media server 25 without going through the web server 20, that is, when there is no matching IP address, the broker 26 is controlled by the media server 25. ) Stops providing media services.

When a request is received from an unauthorized user, it is automatically blacklisted and denied access from this IP. The blacklist is released over time so that the web server 20 can confirm this in advance.

As described above, when a user who logs in to the system (website) requests a video service such as watching a movie or a real time broadcast, the media server 25 requests an ID of the user who requested the video service transmitted from the web server 20. After temporary storage in the authentication list information DB without decrypting the user information consisting of the requested video file name and the IP address of the computer, it is automatically extracted and transmitted by the operating system of the computer of the user who requested the video service. The authentication process is performed by checking whether the same IP address exists by matching the computer IP address information and the authentication list information DB of the corresponding user inputted with the IP address information, wherein the amount of user information temporarily stored in the authentication list information DB is Among members who have subscribed to the website (portal site), Since only the user information of members who exist in the time zone (time zones between seconds and minutes) that users who receive URLs are simultaneously connected to is temporarily stored (approximately tens to hundreds of user information volume), it is temporarily stored in the authentication list information DB. The matching time between the user information and the IP address transmitted from the user's computer is processed in real time so that the user can hardly feel it, and because the amount of data of the temporarily stored user information is extremely small, the CPU provided in the media server 25 is provided. You can use resources smoothly. It can be processed so quickly that you can hardly feel it.

Therefore, according to the system of the present invention, it is possible to determine whether or not illegal viewing by searching only the information of users who requested the video service transmitted from the web server 20 to the media server 25, and there is no delay in login. As a result, the CPU resources of the media server 25 can be smoothly used.

In addition, even if the URL of the video is exposed by illegal hacking, a media request from a user not authorized by the web server is rejected, so illegal viewing is blocked.

In addition, since there is no decryption process of the user information in the media server 25, the resource usage of the media server 25 can be minimized, which does not significantly affect performance.

Internet movies and live broadcasts are downloaded from the streaming player and run as a plug-in for a multimedia browser. When viewing media from multiple IPs, viewer applications are not compatible with each other, which can interfere with the use of non-streaming and streaming information. . In order to prevent this, the media server 25 of the present invention also includes a predetermined integrated viewer application. For example, a database is constructed by receiving and processing non-streaming information, receiving streaming information on a media program, and playing in real time, while receiving non-streaming information related to the media program from the database and playing in real time along with streaming information. do.

On the other hand, it is changing to a transmission environment through a new transmission medium such as a wireless communication network, a high-speed information communication network, and the reliability of the transmission is rapidly increasing. As a result of applying the technical concept of the present invention, various and prompt services are required. Can meet customer needs

According to the above configuration and operation, the present invention has the effect of blocking illegal viewing of movies and real-time broadcasting provided for a fee by an internet operator, and significantly increasing the processing performance of media data.

It is apparent to those skilled in the art that the present invention is not limited to the described embodiments, and that various modifications and variations can be made without departing from the spirit and scope of the present invention. Therefore, such modifications or variations will have to belong to the claims of the present invention.

Claims (2)

In the authentication and security system of the Windows media server operating a website that provides a video service that is a movie and real-time broadcasting service, After performing the first login process and performing the first login process by the user ID and password on the website, the user consists of the user's ID, the requested video name, and the IP address of the computer. A web server 20 which extracts user information and transmits the URL to the media server 25 and transmits the URL of the requested video to the computer of the user who requested the video service; The user information consisting of the ID of the user transmitted from the web server 20, the requested video name and the IP address of the computer is temporarily stored in the real-time authentication list information DB, and the operation of the computer of the user who requested the constant video service A media server that receives IP address information extracted and transmitted automatically by the system and checks whether the same IP address exists by matching the user's computer IP address information and the authentication list information DB inputted with the inputted user's computer IP address information. 25; And And a broker (26) which stops the provision of the media service under the control of the media server (25) if it is found to be illegal viewing. delete