KR100951046B1 - Download server apparatus for transmitting secure micro client software using data carousel protocol and method for transmitting and receiving secure micro client software - Google Patents

Abstract

The present invention relates to a download server apparatus for transmitting a secure micro client image and a method for transmitting / receiving the same. A download server apparatus and its transmission / reception method.

Carousel, Download Server, SM Client, Secure Micro Client, Download Information Initiation (DII) Message, Download Server Initiation (DSI) Message

Description

DOWNLOAD SERVER APPARATUS FOR TRANSMITTING SECURE MICRO CLIENT SOFTWARE USING DATA CAROUSEL PROTOCOL AND METHOD FOR TRANSMITTING AND RECEIVING SECURE MICRO CLIENT SOFTWARE}

The present invention relates to a download server device for transmitting a secure micro client image and a method of transmitting / receiving the same. Specifically, when a defect or an update is required in the secure micro client image, the secure micro client image can be quickly transmitted. A download server apparatus and its transmission / reception method.

The present invention is derived from the research conducted as part of the IT growth engine technology development project of the Ministry of Information and Communication and the Ministry of Information and Telecommunications Research and Development (Task Management No .: 2007-S-007-01, Task Name: Downloadable CA System).

Conditional Access System (CAS) is a system that inserts a password into a broadcast program and grants the right to watch a paid broadcast program only to subscribers who are allowed to watch. Digital cable broadcasting currently uses a cable card in the form of a smart card or a PCMCIA card in order to provide a paid broadcasting service, depending on the implementation of CA (Conditional Access) application. However, in the conventional CA system, the secure micro client image (or CAS client image) is distributed off line via a smart card or a PCMCIA card, thereby re-issuing the card in the event of a defect in the CA system. It takes a certain time to quickly cope with the defect is difficult, there is a problem that additional costs due to the reissue of the card.

To overcome these drawbacks, the development of downloadable conditional access system (DCAS) technology based on a two-way cable communication network has become an issue. DCAS technology does not provide a paid broadcasting service by installing a secure micro client image selected from a smart card or a PCMCIA card as in the prior art, but instead installs the secure micro client image in a set-top box. A security module capable of easily updating the secure micro client image in a situation such as a defect of the secure micro client image or a version update of the secure micro client image through the bidirectional cable communication network. to be. In this DCAS technology, since multiple CA systems can be processed in a single security module chip, a cable operator can select a CAS company without being dependent on a specific CAS solution. Promote the development of forms of services.

However, when a problem such as a defect or an update of the secure micro client image occurs on a subscriber terminal, the subscriber can download the secure micro client image more quickly in response to the defect or the update to watch a pay broadcasting service. There is a need.

The present invention is a download capable of quickly updating a defect or an update on a secure micro client image to be mounted on the subscriber terminal device in a cable network transmitting a secure micro client image to a subscriber terminal device using a data carousel protocol. A server device and a method of transmitting / receiving the secure micro client image are provided.

In addition, the present invention, the download server device detects the change and / or addition of the secure micro client, and updates the module information for the download data block to the download information indication message and / or including the updated module information By generating a download server start message to control the rapid download of the subscriber station.

In order to achieve the above object and to solve the problems of the prior art, the present invention provides a download server device for transmitting a secure micro client image to a subscriber station using a data carousel protocol, the change of the secure micro client image or An object update detector for detecting whether to add; A download data block generation unit generating a download data block from a data carousel module corresponding to the secure micro client image; And a download server initiation message generation unit for generating a download information indication message or a download server initiation message including information on the download data block, wherein the download server initiation message generation unit is configured to change or change the object update detection unit. When detecting whether the addition, the download server device characterized in that for updating the module information for the download data block.

According to an aspect of the present invention, a method for transmitting a secure micro client image in a download server device, the method comprising: detecting whether the secure micro client image is changed or added; Generating a download data block from a data carousel module corresponding to the secure micro client image; And generating a download server start message including a download information indication message including information on the generated download data block and information on a group of the download information indication message. A transmission method is provided.

According to another aspect of the present invention, in a method for receiving a secure micro client image at a subscriber terminal device, the DSM-CC section received from a download server device through a transport stream decoder is analyzed, and Determining a message type of a DS-CM section; If the message type is a download information indication message or a download server start message, determining whether to update the secure micro client image by analyzing header information of the download information indication message or the download server start message; And receiving a download data block having a change or addition of the secure micro client image as a result of the determination of whether or not the update is made.

According to the present invention, in the cable network that transmits a secure micro client image to a subscriber terminal device using a data carousel protocol, a quick update is possible on a defect or an update of the secure micro client image to be mounted on the subscriber terminal device. A download server device and a method for transmitting / receiving the secure micro client image are provided.

In addition, according to the present invention, the download server device detects whether the secure micro client has been changed and / or added, updates the module information for the download data block, and includes a download information indication message including the updated module information; Alternatively, a download server start message may be generated to control rapid download of the subscriber station device.

Hereinafter, a download server apparatus for transmitting a secure micro client image using the data carousel protocol and a transmission / reception method thereof will be described in detail with reference to the accompanying drawings. In describing the present invention, when it is determined that detailed descriptions of related known functions or configurations may unnecessarily obscure the subject matter of the present invention, the detailed description thereof will be omitted. Terminology used herein is a term used to properly express a preferred embodiment of the present invention, which may vary according to a user, an operator's intention, or a custom in the field to which the present invention belongs. Therefore, the definitions of the terms should be made based on the contents throughout the specification.

The term 'CAS host' or 'DCAS host' of the present invention refers to a subscriber station device.

In addition, a communication mechanism regarding protocols and procedures for messages transmitted and received between the certification authority, the authentication server, and the security module of the present invention is defined as a DCAS protocol.

In addition, the 'Secure Micro Client Image' or 'Secure Micro Client Software Image' of the present invention is a concept including a CAS client image, a DRM client image, and an ASD client image.

1 is a conceptual diagram illustrating a process of forming a secure micro client image into a download data block applicable to a data carousel protocol by the download server device according to the present invention.

One of the main functions of the DCAS protocol is to be able to transmit multiple secure micro client images within the same session, and when the session is disconnected, a new session is used to ensure the confidentiality of messages sent and received between the download server device and the subscriber station device. Create a key. The session key encrypts the secure micro client image stored in the download server with the session key to confidentially transmit the secure micro client image to the authenticated subscriber. The download server apparatus of the present invention may transmit the secure micro client image in an encrypted state to the subscriber station using the data carousel protocol.

 Referring to FIG. 1, the download server apparatus may include a secure micro client image present in the form of objects 111, 112, 113, and 114 stored in a file storage unit of a headend system according to a data carousel protocol. Module 120). The object may be composed of objects for the first CAS client software image 111, the DRM client software image 112, the ASD client software image 113, and the second CAS client software image 114.

In addition, the download server device is a module consisting of the objects (111, 112, 113, 114) is 64Kb, the download data block (DDB, Download Data Block) (DDB) so as not to exceed the maximum 4Kb in the form of the MS-CMS section (131, 132, 133, and 134, and generates a download server start message (DSI, DownloadServerInitiate) 150 and a download information indication message (DII, DownloadInfoIndication) 140 to control the divided download data block. , Download data block (131, 132, 133, 134), the download server start message 150, and the download information indication message 140 to the subscriber terminal device. In this case, the download server start message 150 may be generated by referring to transaction identification information (transaction_id) from a program map table (PMT. Program Map Table), and the download information indication message 140 may be a download server start message ( 140).

2 is a conceptual diagram illustrating a method of transmitting a download data block using a data carousel protocol according to an embodiment of the present invention.

Referring to FIG. 2, the data carousel protocol transmission method applied to the present invention includes a download server start message 210, a download information indication message 220, and download data blocks 230, 240, 250, and 260. It is a method of transmitting repeatedly repeatedly. When the download data blocks 230, 240, 250, and 260 are transmitted to the subscriber station through the data carousel protocol, information about each of the download data blocks 230, 240, 250, and 260 is transmitted to the subscriber station. In order to provide to the device, the download server device of the present invention generates a download information message 220, the download information message 220 includes information about the download data block. In addition, when the number of download data blocks is too large to be included in one group or when multiple groups are used to provide management convenience, the download data blocks may be included in several download information indication messages 220. It is organized separately and there are several groups. In order to inform the subscriber terminal device of the information on each group, the download server device of the present invention generates a download server start message 210 containing information on the download information indication message 220. A method for transmitting to the subscriber terminal device by a download server start message 210, a download information indication message 220, and download data blocks 230, 240, 250, and 260, and a method for receiving at the subscriber terminal device. Will be described later.

Figure 3 shows a downloadable CA system including a download server device according to an embodiment of the present invention.

Referring to FIG. 3, the downloadable CA system of the present invention includes a headend system 310 including a download server apparatus 400, a DCAS host 320, and a certification authority 330. . The security module 321 of the DCAS host 320 utilizes a third certification authority 330, not a cable operator, to manage the authentication server 311 of the head-end system 310 and information required for authentication, and a set-top DCAS secure micro client images to protect advanced video and media technologies in boxes (STBs), set-top devices (STDs), or other consumer premise equipment (CPE) 340, including mobile or portable devices. Supply to host 320.

The certification authority 320 performs stable communication with the authentication server 311 of the headend system 310 and provides information necessary for authentication. The authentication server 311 transmits the information for generating the session key, which is received from the certification authority 330, to the security module 309 via the cable modem termination system (CMTS) 312. do. All key information generated in the mutual authentication process is managed by the key management server 314, and after the mutual authentication is normally completed, the secure micro client image is secured through the download server device 400 and the CMTS 312 through the security module 321. Is sent to.

Accordingly, the security module 321 that downloads (or updates) the secure micro client image may provide a pay broadcasting service to the subscriber through the subscriber terminal device 340 by obtaining a viewing permission for the scrambled and transmitted broadcast signal. have.

The communication mechanism related to the protocol and procedure for messages transmitted and received between the certification authority 330, the authentication server 311, and the security module 321 is defined as a DCAS protocol, and is based on the DCAS protocol. ), Security for messages transmitted and received between the authentication server 311 and the security module 321, and mutual authentication between them is performed.

The download server device 400 transmits the secure micro client image to the subscriber station device 340 using the data carousel protocol, and detects whether the secure micro client image is changed and / or added to the download data block. Update module information, and generate a download information indication message and / or a download server start message including the updated module information. Through the download information indication message and / or the download server start message, the subscriber terminal device 340 provides a quick download of the secure micro client image. The download server device 400 of the present invention will be described in detail with reference to FIG. 4.

FIG. 4 is a block diagram illustrating a configuration of a download server apparatus for transmitting a secure micro client image to a subscriber station using a data carousel protocol according to an embodiment of the present invention.

Referring to FIG. 4, the download server apparatus 400 of the present invention includes an object update detector 401, a download data block generator 403, and a download server start message generator 405.

The object update detector 401 detects whether the secure micro client image is changed and / or added. The secure micro client image includes a CAS client image, a DRM client image, or an ASD client image.

The download data block generation unit 403 generates a download data block from a data carousel module corresponding to the secure micro client image.

The download server start message generation unit 405 includes a download information indication message including information about the download data block generated by the download data block generation unit 403 and a group of the download information indication message group. Generates a download server start message. That is, the download server start message generating unit 405 updates the module information for the download data block when the object update detecting unit 401 detects whether the change is made and / or the addition, and the updated module Generate the download information indication message and / or the download server start message including the information.

The module information includes module version information and transaction identification information included in a header portion (dsmccMessageHeader) of the download information indication message and / or the download server start message corresponding to the identification information (moduleid) of the download data block. (transaction_id) or transaction identification field value (transaction_id) information of an associated tag descriptor (association_tag_descriptor) of PMT (PMT, Program Map Table). The module information may further include module version field value information of the download data block.

In detail, the download server start message generator 405 may change the secure micro client image based on the basic bit part and the critical bit part of the private data byte field included in the download indication message. Or reflects the addition. The basic bit unit distinguishes the download data block and the download cancel message, and the important bit unit distinguishes the addition and / or change of the download data block.

That is, the download server device 400 does not update the session key when the session key is updated from the authentication server 430. When one of the secure micro client images (one of the CAS Client image, the DRM Client image, or the AD Client image) is changed, the download server start message generator 405 is driven and the download data block to which the secure micro client image belongs. Module version information and transaction identification information (transaction_id) of the header information (dsmccMessageHeader) of the download information indication message and / or the download server start message corresponding to the identification information (moduleid) of the ID, and a related tag of the PM table. The transaction identification field value (transaction_id) of the descriptor (association_tag_descriptor) is simultaneously updated to the same value. In addition, the module version field value of all download data block messages corresponding to the identification information (moduleid) to which the secure micro client image belongs is also a module of the updated download information indication message and / or the download server start message. Update to the same value as the version information (moduleVersion). If the session key is not updated and the contents of the secure micro client image are not changed, the same download server start message and download information as previously transmitted through the periodic repetition process as described in FIG. The indication message and the download data block message are transmitted to the subscriber station.

The download information indication message including the updated module information by detecting whether the secure micro client has been changed and / or added through the download server device 400 of the present invention and updating the module information on the download data block. And / or generate a download server start message to control rapid download of the subscriber terminal device.

In addition, the download server start message generation unit 405 generates program specific information (PSI) corresponding to the transaction identification information (transaction_id) included in the download information indication message and / or the download server start message. The program characteristic information PSI is transmitted to the PS eye table generation system 450. The program characteristic information (PSI) includes configuration information on a transport stream condensed to a subscriber station device. In order to demultiplex data included in the transport stream by type, a packet identifier corresponding to each data ( It specifies a special data format that carries a list of PIDs. In addition, a table that defines such a data format is a PS eye table.

The download server apparatus 400 of the present invention may further include a DS-CC section builder 407, a transport stream generator 409, an object generator 411, and a module generator 413. .

The MS-CSI section builder 407 generates a MS-CSI section from the download information indication message and / or the download server start message or the download data block. The transport stream generation unit 409 generates the DS-CC section as transport stream data, and transmits the generated transport stream data to the cable modem termination system 470. The object generator 411 reads the secure micro client image from the file storage unit 412 in which the secure micro client image is stored, and generates an object corresponding to the secure micro client image. The module generator 413 receives the object from the object generator 411, generates the object as the data carousel module, and generates the data carousel module as a download data block generator 403 and / or the The download server start message is transmitted to the generation unit 405.

The subscriber station device receiving the transport stream from the download server device 400 of the present invention analyzes the DS-CC section received from the download server device 400 to determine the message type of the MS-CM section. And, if the message type is the download information indication message and / or the download server start message, analyze the header information of the download information indication message and / or the download server start message to update the secure micro client image. Judge. That is, the subscriber station receives a download data block for changing and / or adding the secure micro client image as a result of the determination of the update.

FIG. 5 illustrates a table relation for describing decoding for transmitting a secure micro client image in a download server device and acquiring the secure micro client image performed at a subscriber terminal device according to an embodiment of the present invention. Referring to FIG. 5, the relationship diagram for decoding according to the present invention includes a PMT 510, a download server start message 520, a download information indication message 530, and a download data block message 540. The relationship is shown.

The subscriber station acquires a PMT 510 to obtain a secure micro client image transmitted through a transport stream (eg, MPEG2-TS), interprets an associated tag descriptor (association_tag_descriptor), A download server start message 520 and a download information indication message 530 corresponding to the PM 510 are obtained. Confirm the identification information (Moduleid) and the module version information (ModuleVersion) of the obtained download server start message 520 and the download information indication message 530, and the download server start message 520 and the download information indication message (530) ) Is interpreted as a download data block message 540 or a DownloadCancel message 550 corresponding to.

The download cancel message 550 is a download cancel information for the same value as the block information corresponding to the download data block message previously transmitted by the download server device when any one of the secure micro client images is deleted from the subscriber terminal device. It is transmitted to the subscriber terminal device including.

6A and 6B illustrate an example for controlling an update of a secure micro client image through a download information indication message in a download server device according to an embodiment of the present invention.

6A and 6B, suppose that the types of initial download data blocks transmitted to the subscriber station apparatus in FIG. 6 are DDB # 1 611, DDB # 2 612, and DDB # 3 613. The private data byte field 640 of the download information indication message before the terminal device interprets the download data block message is shown in FIG. 6B.

The private data byte field included in the download information indication message includes a basic bit portion 641 and a significant bit portion 642. The basic bit portion 641 includes a download data block message and a download cancel message. The significant bit unit 642 distinguishes between adding and / or changing the download data block.

Specifically, the private data byte field has a meaning in units of bits, and 4 bits of the basic bit unit 641 of the total 8 bytes indicate block information of a download data block or a download cancel message constituting the module. Block Number). The upper two bits of the four bits of the significant bit portion 642 of the eight bytes of the private data byte field are values for distinguishing a download data block or a download cancel message. If the value of the upper two bits is "01", it means a download data block message, and if "02", it means a download cancel message.

In addition, the lower 2 bits of the 4 bits of the significant bit unit 642 are values indicating that the download data block message or the download cancel message has been added, changed, or deleted. If the value is "00", the value is "01". The case means added case, and the case of "02" means changed case.

In more detail, assuming that DDB # 2 622 is changed in the download server apparatus of FIG. 6A, DDB # 3 623 is deleted, and DDB # 4 624 is added, the download information indication message The private data byte field 640 is represented as in FIG. 6B.

In this case, the subscriber station apparatus does not need to analyze a download information indication message and then analyzes the download data block message or the download cancel message if it is not changed, that is, a previously received download data block message or a download cancel message. By not analyzing the, it can reduce the time required to download the secure micro client image.

7 is a flowchart illustrating a process of transmitting a secure micro client image performed by the download server apparatus according to an embodiment of the present invention.

Referring to FIG. 7, first, the object update detection unit detects whether a secure micro client image is changed and / or added (step S710).

Thereafter, the download data block generation unit generates a download data block from the data carousel module corresponding to the secure micro client image (step S720).

Thereafter, the download server start message generation unit generates a download information indication message including information on the generated download data block and a download server start message including information about a group of the download information indication message. And, if the change and / or the addition is detected, update the module information for the download data block and send the download information indication message and / or the download server start message including the updated module information. To generate (step S730). The module information includes module version information and transaction identification information included in a header portion (dsmccMessageHeader) of the download information indication message and / or the download server start message corresponding to the identification information (moduleid) of the download data block. (transaction_id) or transaction identification field value (transaction_id) information of an associated tag descriptor (association_tag_descriptor) of PMT (PMT, Program Map Table). As described above, the module information may further include module version field value information of the download data block.

Thereafter, the DS-CM section builder generates a MS-CM section from the download information indication message and / or the download server start message or the download data block (step S740). After the CC section is generated as transport stream data, the generated transport stream data is transmitted to the subscriber station through the cable modem termination system (step S750). A method of downloading a secure micro client image performed by the subscriber station device receiving the transport stream data will be described with reference to FIG. 8.

8 is a flowchart illustrating a method of receiving a secure micro client image in a subscriber station device according to an embodiment of the present invention.

Referring to FIG. 8, first, a subscriber station apparatus analyzes a DS-CC section received from a download server apparatus through a transport stream decoder and determines a message type of the DS-CC section (step S810). ).

Subsequently, when the message type is a download information indication message and / or a download server start message (step S820), header information of the download information indication message and / or the download server start message is analyzed (step ( In operation S840, it is determined whether the secure micro client image is updated.

As a result of the determination of whether or not to update, a download data block having a change and / or addition of the secure micro client image is received, and as a result of the determination of whether or not to update (S850), the change of the secure micro client image If so, the block information of the download data block stored in the subscriber terminal device is analyzed and updated with the changed block information (step S860).

On the other hand, when the result of the determination of the update (step S850), when the secure micro client image is added, the block information of the download data block added to the subscriber terminal device is stored (step S870).

In addition, when it is determined whether the update is performed (step S850), when the secure micro client image is deleted, the block information corresponding to the download cancel message is analyzed, and the block information of the download data block stored in the subscriber terminal device is analyzed. Delete (step S880).

9 is a flowchart illustrating an example of receiving a secure micro client image in a subscriber station device according to the present invention.

Referring to FIG. 9, a subscriber station apparatus receiving a MPEG2-TS type secure micro client image transmitted through an in-band channel of a cable network operates an MPEG2-TS decoder (step S901), and the MPEG2 terminal. -Analyze the DS-CC section data included in the payload of TS (step S702). In this case, the download server start message, the download information indication message, the download data block message, or the download cancel message is distinguished according to the table identification information (table_id) of the DS-CM section (step S703). For example, if the table identification information (table_id_) of the DS-CM section is '0x3B', the download server start message, the download information indication message, or the download cancel message, and the download data block is '0x3C'. Otherwise, the processing of the DSMCC descriptor or the private data byte processing of the DSMCC_Section is performed (steps S904 and S905).

Thereafter, the subscriber station apparatus analyzes header information of the download server start message and / or download information indication message in step S906 (step S906), and transaction identification information (transaction_id) or module version information (ModuleVersion) It is determined whether it has been updated (step S907).

If the determination result (step S907) is updated, the process goes through a more detailed process, and if the determination result (step S907) is not updated, as described in FIG. The transport stream data transmitted is repeatedly received (step S908).

As a result of the determination (step S907), if the update is made, the field defined in the private data byte of the download information indication message is analyzed. That is, as described above with reference to FIGS. 6A and 6B, the value of the lower two bytes of the four significant bit portions of the private data byte field is '00' (step S907), and the upper two of the four significant bit portions are bytes. If the value of the byte is '01' (step S911), the download data block message is not interpreted (step S912).

On the other hand, the value of the lower two bytes of the four significant bits of the private data byte field is '00' (step S907), and the value of the upper two bytes of the four significant bits of the significant bit portion is '01'. If not (step S911), the analysis on the download cancel message is not performed (step S913).

On the other hand, if the value of the lower two bytes of the four significant bit portions of the private data byte field is '01' (step S917), and the value of the upper two bytes of the four significant bit portions is '01'. (Step S918), the download data block message is analyzed and added to the memory of the subscriber station device (Step S714).

On the other hand, the value of the lower two bytes of the four significant bits of the private data byte field is '01' (step S917), and the value of the upper two bytes of the four significant bits of the significant bit portion is '01'. If not (step S918), the download data block message is analyzed and the block information corresponding to the download data block message is read from the memory of the subscriber station device and updated to the updated download data block message (step S918). (S915)).

In addition, when the value of the lower 2 bytes of the 4 significant bit portions of the private data byte field is '02' (step S919), the block information corresponding to the download cancel message is stored in the memory of the subscriber station apparatus. It is read out from and deleted (step S920).

If the value of the lower two bytes of the four significant bit portions of the private data byte field is not '01' or '02', an exception processing is performed (step S921). Thereafter, after going through the above-described step S912, step S913, step S914, or step S915, it is checked whether data to be processed exists in the private data byte field of the download information indication message (step ( S916)) If there is more data to be processed, the analysis is again performed on the upper two bytes of the four significant bits of the private data byte of the download information indication message (step S707).

A method of transmitting a secure micro client image performed by a download server device and a method of receiving a secure micro client image performed by a subscriber terminal device according to the present invention is implemented in the form of program instructions that can be executed by various computer means, thereby enabling computer readable. Can be recorded on the medium. The computer readable medium may include program instructions, data files, data structures, etc. alone or in combination. Program instructions recorded on the media may be those specially designed and constructed for the purposes of the present invention, or they may be of the kind well-known and available to those having skill in the computer software arts. Examples of computer-readable recording media include magnetic media such as hard disks, floppy disks and magnetic tape, optical media such as CD-ROMs, DVDs, and magnetic disks such as floppy disks. Magneto-optical media, and hardware devices specifically configured to store and execute program instructions, such as ROM, RAM, flash memory, and the like. The medium may be a transmission medium such as an optical or metal line, a wave guide, or the like, including a carrier wave for transmitting a signal designating a program command, a data structure, or the like. Examples of program instructions include not only machine code generated by a compiler, but also high-level language code that can be executed by a computer using an interpreter or the like. The hardware device described above may be configured to operate as one or more software layers to perform the operations of the present invention, and vice versa.

As described above, the present invention has been described by way of limited embodiments and drawings, but the present invention is not limited to the above-described embodiments, which can be variously modified and modified by those skilled in the art to which the present invention pertains. Modifications are possible. Accordingly, the spirit of the present invention should be understood only by the claims set forth below, and all equivalent or equivalent modifications thereof will belong to the scope of the present invention.

1 is a conceptual diagram illustrating a process of forming a secure micro client image into a download data block applicable to a data carousel protocol by the download server device according to the present invention.

2 is a conceptual diagram illustrating a method of transmitting a download data block using a data carousel protocol according to an embodiment of the present invention.

Figure 3 shows a downloadable CA system including a download server device according to an embodiment of the present invention.

FIG. 4 is a block diagram illustrating a configuration of a download server apparatus for transmitting a secure micro client image to a subscriber station using a data carousel protocol according to an embodiment of the present invention.

FIG. 5 illustrates a table relation for describing decoding for transmitting a secure micro client image in a download server device and acquiring the secure micro client image performed at a subscriber terminal device according to an embodiment of the present invention.

6A and 6B illustrate an example for controlling an update of a secure micro client image through a download information indication message in a download server device according to an embodiment of the present invention.

7 is a flowchart illustrating a process of transmitting a secure micro client image performed by the download server apparatus according to an embodiment of the present invention.

8 is a flowchart illustrating a method of receiving a secure micro client image in a subscriber station device according to an embodiment of the present invention.

9 is a flowchart illustrating an example of receiving a secure micro client image in a subscriber station device according to the present invention.

Claims (21)

A download server apparatus for transmitting a secure micro client image to a subscriber station using a data carousel protocol. An object update detector for detecting whether the secure micro client image has been changed or added; A download data block generation unit generating a download data block from a data carousel module corresponding to the secure micro client image; And Download server start message generation unit for generating a download information indication message or a download server start message including the information on the download data block Including, The download server start message generating unit When the object update detection unit detects the change or the addition, it updates the module information for the download data block, The download server start message generating unit Reflect the change or addition based on the basic bit portion and the critical bit portion of the private data byte field included in the download information indication message, wherein the basic bit portion distinguishes the download data block and the download cancel message. And the significant bit unit distinguishes the addition or change of the download data block. The method of claim 1, The download information indication message or the download server start message comprises the updated module information. The method of claim 1, The download server device DSM-CC section builder to generate a DSM-CC section from the download information indication message, the download server start message, or the download data block The download server device further comprises. The method of claim 3, The download server device A transport stream generator for generating the DS-CC section as transport stream data and transmitting the generated transport stream data to a cable modem end system. The download server device further comprises. The method of claim 1, The download server device An object generator configured to read the secure micro client image from a file storage unit in which the secure micro client image is stored, and to generate an object corresponding to the secure micro client image; And A module generator for receiving the object from the object generator, generating the object as the data carousel module, and transmitting the data carousel module to the download data block generator or the download server start message generator. The download server device further comprises. The method of claim 1, The secure micro client image includes a CAS client image, a DRM client image, or an ASD client image. The method of claim 1, The module information may include module version information included in a header of the download information indication message or the download server start message corresponding to the identification information of the download data block. The method of claim 7, wherein The module information may further include transaction identification field value information of a related tag descriptor of PMT. The method of claim 1, And said module information includes module version field value information of said download data block. The method of claim 1, The download server start message generating unit A download server for generating program characteristic information (PSI) corresponding to the transaction identification information included in the download information indication message or the download server start message and transmitting the program characteristic information to a PS-eye table generation system; Device. delete delete The method of claim 1, The subscriber station device Analyzes the DSM-CC section received from the download server device to determine the message type of the DS-CC section, When the message type is the download information indication message or the download server start message, it is determined whether to update the secure micro client image by analyzing header information of the download information message or the download server start message. Download server device. The method of claim 13, The subscriber station device And a download data block for changing or adding the secure micro client image as a result of the determination of the update. In the method of transmitting a secure micro client image from a download server device, Detecting whether the secure micro client image is changed or added; Generating a download data block from a data carousel module corresponding to the secure micro client image; And Generating a download server start message including a download information indication message including information on the generated download data block and a group of the download information indication message group; Including, The step of generating the download server start message, Reflect the change or addition based on the basic bit portion and the significant bit portion of the private data byte field included in the download information indication message, wherein the basic bit addition distinguishes the download data block and the download cancel message. And adding the significant bit to distinguish whether the download data block is added or changed. Client image transmission method comprising a. The method of claim 15, The step of generating a download server start message that includes a download information indication message and the group of the download information indication message, When the change is detected or whether the addition is detected, updating module information on the download data block and generating the download information indication message or the download server start message including the updated module information. Client image transmission method comprising a. The method of claim 15, The step of generating a download data block from the data carousel module corresponding to the secure micro client image Generating from the download information indication message or the download server start message or the download data block into a DS-CSI section; And Generating the DS-CC section as transport stream data and transmitting the generated transport stream data to a subscriber station device through a cable modem termination system; Client image transmission method comprising a. In the method for receiving a secure micro client image in a subscriber station device, Analyzing a DSM-CC section received from the download server device through a transport stream decoder, and determining a message type of the DS-CC section; If the message type is a download information indication message or a download server start message, determining whether to update the secure micro client image by analyzing header information of the download information indication message or the download server start message; And Receiving a download data block having a change or addition of the secure micro client image as a result of the determination of the update; Including, If the secure micro client image is deleted as a result of the determination of the update, analyzing block information corresponding to the download cancel message and deleting block information of the download data block stored in the subscriber terminal device; Client image receiving method further comprises. The method of claim 18, As a result of the determination of whether to update, the step of receiving a download data block having a change or addition of the secure micro client image, Analyzing the block information of the download data block stored in the subscriber terminal device and updating the changed block information when there is a change of the secure micro client image. Client image receiving method comprising a. The method of claim 18, The download server start message, Reflects whether the secure micro client image is changed or whether the secure micro client image is added based on the basic bit portion and the critical bit portion of the private data byte field included in the download information message, wherein the basic bit addition is performed. And classifying a download data block and a download cancel message, or separately adding the significant bit or adding or changing the download data block. The method of claim 18, As a result of the determination of whether to update, the step of receiving a download data block having a change or addition of the secure micro client image, Storing block information of the download data block added to the subscriber station when the secure micro client image is added as a result of the determination of whether to update; Client image receiving method comprising a.

Images