KR100973355B1 - Method for transmitting information based on Multicasting, Multicast server and computer readable record-medium on which program for executing method thereof - Google Patents

Abstract

According to an aspect of the present invention, a multicast-based information transmission method is disclosed. Multicast-based information transmission method according to an embodiment of the present invention comprises the steps of classifying the multicast information into sub-multicast information based on one or more working groups; Allocating a multicast address for each sub multicast information; Authenticating a task and a role of the user by using the user authentication information received from the terminal; And selecting all or part of the sub multicast information according to the authenticated task and the role, wherein the selected sub multicast information is multicasted to the terminal through the multicast address. According to the present invention, there is an advantage that the information transmission on the network is efficient and secure by using multicast and task and role-based access control.

Access control, multicast information, multicast address, emergency medical environment

Description

Method for transmitting information based on Multicasting, Multicast server and computer readable record-medium on which program for executing method

The present invention relates to a multicast-based information transmission method, and more particularly, to implement a multicast-based information transmission method, a multicast server, and a method for delivering only necessary information to an authenticated user using the multicast method. It relates to a recording medium on which a program is recorded.

Today, the necessity of multicast communication is increasing due to the development of internet communication technology and the increasing demand for multimedia by consumers. Multicast, a data transmission technology that transmits data, video, and audio only to specific groups of users, uses unicast, which transmits packets to a single host (destination) using the existing connection-oriented TCP / IP protocol. It requires a different transmission technology than broadcast, which uses UDP to transmit datagrams to all hosts connected to a subnet.

Multicast information (message or packet data) is transmitted from the source to the destination through the network, where routers set up routes for multicast, and each router on the path replicates the multicast packet to the next router or Send to the destination host.

However, a multicast technique which aims at transmitting such identically duplicated packets to multiple destinations has a disadvantage in that it is vulnerable to security. In addition, multicast technology can be a waste of communication resources depending on the operation.

Therefore, there is a need for a technique that can efficiently use the communication resources, while safely transmitting multicast data only to authorized groups.

Accordingly, the present invention has been made to solve the above-mentioned problems, and an object of the present invention is to propose a multicast-based information transmission method which is efficient and secure in transmitting information of a network using multicast.

Another object of the present invention is to propose a multicast-based information transmission method for realizing information protection between tasks by assigning a multicast address for each task group.

In addition, another object of the present invention is to propose a multicast-based information transmission method for selectively transmitting only information required by a user by transmitting information classified for each work group according to tasks and roles of an authenticated user.

According to an aspect of the present invention, a multicast-based information transmission method is disclosed.

Multicast-based information transmission method according to an embodiment of the present invention comprises the steps of classifying the multicast information as sub-multicast information based on one or more working groups; Allocating a multicast address for each of the sub multicast information; Authenticating a task and a role of the user by using the user authentication information received from the terminal; And selecting all or part of the sub multicast information according to the authenticated task and role, wherein the selected sub multicast information is multicasted to the terminal through the multicast address.

The multicast method may further include: receiving basic information about an information subject from an information providing terminal connected to the multicast server before classifying the sub multicast information; And extracting additional information according to the received basic information from the storage area of the sub multicast. And generating multicast information using the basic information and the additional information.

The basic information may include one or more of patient identification information and patient state information, and the additional information may include one or more of patient history information, information necessary for treatment of a patient, and rules related to the treatment. Can be.

In the multicast method, after the step of assigning the multicast address, transmitting a briefing message including message identification information and patient initial information to the at least one terminal, wherein the patient initial information is patient identification information and health status information. And one or more of a history record; The method may further include receiving a received message including the user authentication information in response to the briefing message.

The classifying into the sub-multicast information may be based on a work group related to a treatment required by the patient.

The multicast method further includes, after the step of selecting all or part of the sub multicast information, transmitting an acknowledgment message including the multicast address assigned to the selected sub multicast information to the terminal. The terminal may transmit a group join message for subscribing to a multicast group corresponding to the received multicast address, and receive the sub multicast information through the subscribed multicast group.

The acknowledgment message may include cookie information generated using a random number generated by the terminal, and the terminal may verify the integrity of the acknowledgment message using the cookie information.

The multicast method includes distributing a group key and a terminal included in a multicast group corresponding to the received multicast address; And encrypting the selected multicast information, and transmitting the encrypted multicast information to the terminal using the multicast address, wherein the terminal receives the received multicast information using the group key. It may be characterized by decoding.

The multicast method may further include updating the group key when a new terminal joins the multicast group or the existing terminal leaves the multicast group.

According to one aspect of the invention, a multicast server is disclosed.

Multicast server according to an embodiment of the present invention comprises a multicast information management unit for classifying the multicast information into sub-multicast information based on one or more working groups; An address allocator for allocating a multicast address for each of the sub multicast information; And an authenticator configured to authenticate a task and a role of the user by using the user authentication information received from the terminal, and select all or a part of the sub multicast information according to the authenticated task and the role. The multicast information is multicasted to the terminal through the multicast address.

The multicast server further includes a communication unit for receiving basic information about an information target from an information providing terminal connected to the multicast server, wherein the multicast information management unit is configured to receive the received basic information from the storage area of the sub multicast. The additional information may be extracted, and multicast information may be generated using the basic information and the additional information.

The basic information may include patient identification information and patient state information, and the additional information may include one or more of medical history information, information necessary for treatment of a patient, and rules related to the treatment.

The multicast server sends a briefing message including message identification information and patient initial information to the one or more terminals, wherein the patient initial information includes one or more of patient identification information, health status information and medical history records; The apparatus may further include a communication unit configured to receive a reception message including the user authentication information in response to a briefing message.

The multicast information management unit may be based on a working group related to treatment required by the patient.

The multicast server further includes a multicast group manager for transmitting an acknowledgment message including the multicast address allocated to the selected sub multicast information to the terminal, wherein the terminal corresponds to the received multicast address. A group join message for joining a cast group may be transmitted, and the sub multicast information may be received through the subscribed multicast group.

The acknowledgment message may include cookie information generated using a random number generated by the terminal, and the terminal may verify the integrity of the acknowledgment message using the cookie information.

The multicast server distributes a group key with a terminal included in a multicast group corresponding to the received multicast address, encrypts the selected multicast information, and encrypts the encrypted multicast address to the terminal using the multicast address. The apparatus may further include a group key manager which transmits multicast information, wherein the terminal decodes the received multicast information by using the group key.

The group key manager may update the group key when a new terminal joins the multicast group or the existing terminal leaves the multicast group.

According to still another aspect of the present invention, a recording medium having a program recorded thereon executing a multicast-based information transmission method is disclosed.

According to another embodiment of the present invention, a recording medium on which a program for executing a multicast-based information transmission method is recorded includes: classifying the multicast information into sub-multicast information based on a work group; Allocating a multicast address for each of the sub multicast information; Authenticating a task and a role of the user by using the user authentication information received from the terminal; And selecting all or part of the sub multicast information according to the authenticated task and role, wherein the selected sub multicast information is multicasted to the terminal through the multicast address. A program for executing the cast-based information transmission method is recorded.

Therefore, the present invention has the effect of efficient and high security of network information transmission using multicast.

The present invention also has the effect of realizing information protection between tasks by assigning a multicast address for each task group.

In addition, the present invention has the effect of selectively transmitting only the information required by the user by transmitting the information classified by the work group according to the task and role of the authenticated user.

As the invention allows for various changes and numerous embodiments, particular embodiments will be illustrated in the drawings and described in detail in the written description. However, this is not intended to limit the present invention to specific embodiments, it should be understood to include all modifications, equivalents, and substitutes included in the spirit and scope of the present invention.

Terms including ordinal numbers, such as second and first, may be used to describe various components, but the components are not limited by the terms. The terms are used only for the purpose of distinguishing one component from another. For example, without departing from the scope of the present invention, the second component may be referred to as the first component, and similarly, the first component may also be referred to as the second component. And / or < / RTI > includes any combination of a plurality of related listed items or any of a plurality of related listed items.

When a component is referred to as being "connected" or "connected" to another component, it may be directly connected to or connected to that other component, but it may be understood that other components may be present in between. Should be. On the other hand, when a component is said to be "directly connected" or "directly connected" to another component, it should be understood that there is no other component in between.

The terminology used herein is for the purpose of describing particular example embodiments only and is not intended to be limiting of the present invention. Singular expressions include plural expressions unless the context clearly indicates otherwise. In this application, the terms "comprise" or "have" are intended to indicate that there is a feature, number, step, operation, component, part, or combination thereof described in the specification, and one or more other features. It is to be understood that the present invention does not exclude the possibility of the presence or the addition of numbers, steps, operations, components, components, or a combination thereof.

Unless defined otherwise, all terms used herein, including technical or scientific terms, have the same meaning as commonly understood by one of ordinary skill in the art. Terms such as those defined in the commonly used dictionaries should be construed as having meanings consistent with the meanings in the context of the related art, and, unless expressly defined in this application, are construed in ideal or excessively formal meanings. It doesn't work.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings, and the same or corresponding components will be denoted by the same reference numerals regardless of the reference numerals and redundant description thereof will be omitted.

In the present invention, the multicast server multicasts the multicast information to the terminal. In detail, the multicast server classifies the multicast information based on the working group. The multicast server multicasts the classified multicast information (hereinafter referred to as sub-multicast information) to terminals authenticated to perform the corresponding task.

Therefore, the multicast server allows access to the multicast information of the terminal according to tasks and roles. That is, the multicast server provides the multicast information only to the terminals allowed to access according to tasks and roles.

Hereinafter, in the present specification, it will be described as a representative example that the multicast information is patient information required in an emergency medical environment.

However, the present invention is not limited thereto, and it is obvious to those skilled in the art in view of the technical spirit of the present invention that the present invention may include all cases of providing information in a multicast manner according to tasks and roles in all environments requiring access control of the information. Do.

According to an embodiment of the present invention, the multicast information of the present invention may be patient information. For example, suppose an emergency patient is being transported to an hospital in an ambulance. The emergency care personnel of the ambulance may transmit information such as patient identification information to a central server (multicast server in the present invention) through a predetermined terminal. The transmitted patient information may be transmitted to the medical personnel through the central server.

At this time, the information transmitted to the medical personnel is required to be transmitted only the necessary information according to the operation (surgical surgery, injection, medical treatment, etc.) and the role (doctor, nurse, physical therapist, etc.) of the medical personnel. have. Therefore, the present invention is intended to allow medical personnel to access only necessary information according to tasks and roles.

Hereinafter, a multicast system for multicast based information transmission will be described in detail with reference to FIG. 1.

1 is a system diagram illustrating a configuration of a multicast system for multicast based information transmission according to an embodiment of the present invention.

Referring to FIG. 1, a multicast system for multicast-based information transmission includes an information providing terminal 110, a multicast server 120, a transmission network 130, and one or more terminals (eg, first and first terminals). 2, the terminal included in the multicast group, and the terminal hereinafter referred to as '140' will be described as an example).

In the present invention, the terminal (information providing terminal 110 or terminal 140) receives or transmits a message or information through a communication network. In addition, the terminal may use wireless data through a wireless call and a voice call function for performing a typical voice call with another mobile communication terminal or a landline telephone through a mobile communication network. For example, the terminal may be a personal digital assistant (PDA), a cellular phone, a personal communication service (PCS) phone, a WCDMA phone, a CDMA-2000 phone, and a mobile broadband and system (MBS) phone.

In addition, the terminal may be a personal computer (PC), a hand-held PC, a notebook PC, or the like, which communicates with other wired / wireless communication networks such as an internet network as well as a mobile communication network.

In the present invention, the information providing terminal 110 provides basic information to the multicast server. Here, the information subject may be a patient who is being transferred to a hospital in an emergency situation. Here, the basic information is basic information about the information subject. The basic information is basic information for generating multicast information, which is input to the information providing terminal 110 and transmitted to the multicast server 120. For example, the basic information may include patient identification information (resident registration number, name, etc.) and patient status information (including patient imaging image information, vital sign, X-ray image information, etc.) in an emergency medical environment. In this case, the information providing terminal 110 may transmit basic information through a communication network (not shown) including a mobile communication network, a wired and wireless Internet network, and the like.

The multicast server 120 transmits the multicast information to the terminal 140 (hereinafter described with reference to FIG. 1).

Here, the multicast information may include additional information in addition to the basic information. In more detail, the multicast server 120 may merge the basic information and the additional information to generate the multicast information. In addition, the multicast server 120 may transmit the generated multicast information to the terminal 140.

For example, the multicast information may include patient identification information as basic information, patient information including information for treatment of a patient (injection, MRI imaging, etc.), patient history information, and the like as additional information.

In detail, the multicast server 120 may generate additional multicast information by merging additional information with the above-described basic information. Here, the additional information is necessary information in addition to the basic information, for example, the patient's medical history information (such as the previous medical history of the patient, specific matters such as allergic drugs of the patient), information necessary for the treatment of the patient ( Necessary surgical information, necessary drug information, etc.) and rules related to the treatment (laws, internal regulations, etc.).

The multicast server 120 classifies the generated multicast information based on the above-described task or role, and allocates a multicast address for each classified multicast information (hereinafter, referred to as sub multicast information). For example, the multicast server 120 may classify the multicast information based on the task to be performed on the patient.

Thereafter, the multicast server 120 authenticates the terminal 140. At this time, the authentication of the user authenticates the terminal 140 by using the user's role (doctor, nurse, etc.) and operations that the user can perform (thoracic surgery, orthopedic surgery, injection, etc.).

The multicast server 120 selects sub multicast information necessary for the authenticated user according to the authenticated result, that is, according to the role of the user and the tasks that the user can perform. The multicast server 120 transmits the selected sub multicast information to the terminal 140 of the corresponding authenticated user. At this time, the multicast server 120 transmits the sub multicast information to the terminal 140 through the multicast address assigned to the sub multicast information.

In the present invention, the transmission network 130 shows a multicast IP network as a representative example, but may include any network capable of multicast such as a wireless communication network. Referring to the transport network 130 of FIG. 1, links and physical protocols below IP include a general local area network (LAN), an asynchronous transfer mode local area network (ATM), an ATM over a local area network over asymmetric digital subscriber (ADSL). Line), and these lower layers support the IP-multicast scheme.

In the present invention, the terminal 140 may be a terminal possessed by all medical personnel such as doctors, nurses, hospital staff, and physical therapists. Each terminal 140 includes authentication information of a terminal user. Here, the authentication information may include information about the role (doctor or nurse) and the operation (surgical surgery, medical treatment, etc.) of the user.

Therefore, the terminal 140 is authenticated from the multicast server 120 using the stored authentication information. Thereafter, the terminal 140 receives a multicast address from the multicast server 140. The terminal 140 receives corresponding sub multicast information through the multicast address.

One or more terminals 140 may form a multicast group. The same multicast group is a group of one or more terminals 140 and has the same multicast address.

For example, the first multicast group 141 may include only the terminal 140 of the user performing the pseudo role. As another example, the second multicast group 142 may include only the terminal 140 of the user serving as a nurse. Although not shown in FIG. 1, the third multicast group may be configured to include all the medical personnel's terminals 140.

Of course, one terminal 140 may be included in a plurality of groups. For example, the user's terminal 140 performing a pseudo role may belong to the first multicast group 141 described above and may be included in a third multicast group (medical party multicast group) at the same time.

Up to now, a multicast system for multicast based information transmission according to an embodiment of the present invention has been described with reference to FIG. 1. Hereinafter, a method of joining a multicast group will be described in detail with reference to FIG. 2.

2 is a flowchart illustrating a method of joining a multicast group according to an embodiment of the present invention.

The multicast server 120 transmits multicast information to the terminal 140. At this time, the terminal must join the multicast group to receive the multicast information. Hereinafter, referring to FIG. 2, a process in which a terminal joins a multicast group will be described in detail. As described above, the case where the emergency patient-related information (sub-multicast information) in the emergency medical environment is transmitted to the terminal (terminal 140) of the medical personnel will be described as an example.

In step S201, the multicast server 120 receives the basic information from the information providing terminal 110. Herein, the information providing terminal 110 may be a terminal capable of acquiring basic information and may be a terminal of an emergency care agent. In addition, the basic information may include patient identification information (resident registration number, name, etc.) and patient status information (including patient photographed image information, vital signs, X-ray image information, etc.).

In addition, the terminal 140 may be a medical personnel terminal. For example, it may be a terminal of a doctor or a nurse.

Subsequently, in step S202, the multicast server 120 transmits a briefing message to the terminal 140. Here, the briefing message includes message identification information and patient initial information. The patient initial information is initial information of a patient who is in an emergency state or being transferred to an ambulance, and may include patient identification information, health status information, and medical history record information.

Here, the message identification information is identification information of the briefing message. The identification information is needed later to know which briefing message the multicast server 120 responds to when receiving the response of the briefing message from the terminal 140.

On the other hand, in step S203, the multicast server 120 merges the additional information with the received basic information to generate the multicast information. Here, the additional information is stored in the storage area by a predetermined method of the multicast server 120.

In detail, the multicast server 120 may extract additional information stored in the storage area according to the basic information received from the information providing terminal 110. Thereafter, the multicast server 120 may generate multicast information using basic information and additional information.

Here, the basic information includes the patient's identification information (resident registration number, name, etc.) and patient state information (including patient photographed image information, vital signs, X-ray image information, etc.) as described above. The additional information may include information such as medical history information about the patient, information necessary for the treatment of the patient, and rules related to the treatment (including laws or bylaws).

Subsequently, in step S204, the multicast server 120 classifies the multicast information generated in step S203 based on one or more working groups. Here, the working group may be a classification group of tasks necessary for the treatment of the patient.

In detail, the multicast server 120 transmits the multicast information to a task group such as "thoracic surgery operation", "orthopedic surgery operation", "placement injection", "shooting X-ray", and "view history". Can be classified (hereinafter, referred to as classified multicast information).

For example, suppose an emergency patient needs a surgical operation due to a car accident. The multicast server 120 receives patient identification information (name or resident registration number), photographs of patients, vital information, and the like (basic information described above) from the information providing terminal 110. At this time, the multicast server 120 generates multicast information by merging additional information such as medical history information (a drug having an allergic reaction or drug being taken) and the like with the received basic information. Specifically, the additional information is stored in the storage area of the multicast server 120. Therefore, the multicast server 120 may read the stored additional information according to the basic information received from the information providing terminal 110. The multicast server 120 generates multicast information using basic information and additional information. In addition, the multicast server 120 may determine that the patient needs a working group of “surgical surgery” and “emergency room treatment”. Here, a task group is a collection of one or more tasks. For example, a workgroup may be a collection of tasks that must be performed according to one patient condition. Alternatively, the working group may refer to only the first task required by the patient.

In detail, the multicast server 120 may use predetermined criteria in classifying the multicast information. Here, the predetermined criterion is a criterion regarding tasks to be performed on the patient according to the condition of the patient. For example, the predetermined criterion may be that a patient complaining of pain such as abdominal pain requires an operation of "painkiller prescription".

The multicast server 120 may classify and divide the multicast information into information required for a corresponding working group according to the determination.

As such, the multicast server 120 divides the generated multicast information into information required for each working group and classifies the multicast information into one or more sub-multicast information.

Subsequently, in step S205, the multicast server 120 allocates a multicast address for each sub-multicast information classified in step S204. Here, the multicast address may be arbitrarily set according to IPv6 or selected using a multicast address pool.

On the other hand, in step S206, the terminal 140 may display the briefing message received in step S202. If the user sees the displayed briefing message and is concerned or can handle it, the user may respond by pressing a predetermined button or the like to perform an input for responding to the received briefing message.

The terminal 140 does not respond to the briefing message when there is no input from the user or an input indicating that the terminal does not respond. Alternatively, in this case, the terminal 140 may transmit a reject message for the briefing message to the multicast server 120 (not shown).

Subsequently, in step S207, the terminal 140 may randomly generate a random number when an input for response from the user is performed in step S203. The terminal 140 generates a received message including the generated random number and authentication information of the user.

Here, the authentication information includes information about the user's work and role. For example, when the user is a doctor or a nurse, the authentication information may include information indicating that the user may perform a doctor role or a nurse role. In addition, the authentication information may include information about a task (such as thoracic surgery, orthopedic surgery or medical treatment) that the user can perform.

Subsequently, in step S208, the terminal 140 transmits the received message generated in step S207 to the multicast server 120.

Subsequently, in step S209, the multicast server 120 uses the authentication information included in the received message transmitted in step S208 to check the user's work and role. For example, the multicast server 120 may determine whether the user who sent the received message is a doctor, a nurse, or a physical therapist. Alternatively, the multicast server 120 may check a possible operation such as a surgical operation or a medical examination of the user.)

Subsequently, in step S210, the multicast server 120 selects sub-multicast information to be transmitted based on the user's task and role identified in step S209.

In detail, the multicast server 120 may use information about a work group that each role can perform. For example, suppose that the multicast server 120 confirms that "a thoracic surgery operation" and "prescription" are performed by a user in a doctor role. In this case, the multicast server 120 selects the sub-multicast information classified into a work group ("surgery", etc.) for the role and the task identified by the user.

In addition, in step S211, the multicast server 120 generates a cookie using a random number included in the received message sent in step S208. For example, the multicast server 120 may generate a cookie in the form of "random || user ID". Where "||" The symbol means joint. The multicast server 120 is not limited to the example described above, and may generate various types of cookies including all types including a random number received in step S208.

Then, in step S212 and step S213, the multicast server 120 generates an acknowledgment message containing the multicast address and the cookie. The multicast server 120 transmits the generated approval message to the terminal 140.

Here, the cookie includes a random number generated by the terminal 140 as described above. The multicast server 120 transmits the generated cookie to the terminal 140, so that an attacker, such as a hacker, reuses a replay attack in which the terminal 140 reuses the received message (step S208) lawfully generated by the terminal 140. You can prevent it.

Here, the multicast address is a multicast address assigned to the sub multicast information selected in step S210.

In consideration of the user's tasks and roles, the multicast server 120 uses the authentication information received from the terminal to refer to the user's tasks and roles so that the user can receive the corresponding submulticast information. May be transmitted to the corresponding terminal. Here, the multicast address is generated for each working group as described above.

In step S214, the terminal 140 joins the multicast group corresponding to the multicast address included in the acknowledgment message sent in step S213.

Thereafter, the terminal 140 may receive the sub multicast information through the multicast address corresponding to the subscribed multicast group. This will be described in more detail with reference to FIG. 3.

So far, a method of joining a multicast group according to an embodiment of the present invention has been described with reference to FIG. 2.

2, in the method of subscribing to a multicast group according to an embodiment of the present invention, in step S208, the multicast server 120 generates the multicast information and sub-cast information (step S204). After the allocation of the multicast address (step S205), the reception message is generated from the terminal (step S208).

However, according to another exemplary embodiment of the present invention, a series of processes after step S204 may be performed according to a received message received from the terminal to the multicast server 120 in step S208. In this case, it is apparent to those skilled in the art in view of the technical spirit of the present invention that the sub-multicast information can be generated based on the work group according to the information of the terminal included in the received message received in step S204.

Hereinafter, for convenience of understanding and explanation of the present invention, the present invention will be described using the embodiment consistent with the above-described embodiment (that is, the embodiment in which step S208 is performed after step S205).

Hereinafter, a method of distributing and updating a group key of a multicast group will be described in detail with reference to FIG. 3.

3 is a flowchart illustrating a method for distributing and updating a group key of a multicast group according to an embodiment of the present invention.

Referring to FIG. 3, the terminal 140 joins a multicast group and receives a group key of the group from the multicast server. The terminal 140 may receive the sub multicast information encrypted using the multicast address of the corresponding multicast group, and finally obtain the sub multicast information by decrypting the received sub multicast information.

In step S310, the terminal 140 joins the multicast group by using the received multicast address.

In detail, the terminal 140 transmits a multicast group join message including a multicast address to a neighboring multicast router. The multicast router receiving the multicast group join message may store the multicast address and the terminal 140 address information as a list. Subsequently, information transmitted to the multicast address (ie, information transmitted from the multicast server to the terminal) may be transmitted to the terminal 140.

Such multicast group management may use IGMP (Internet Group Management Protocol), MBONE (multicast backbone), MLD (Multicast Listener Discovery) protocol, or the like.

Subsequently, in step S320, the multicast server 120 and the terminal 140 may share the group key of the corresponding multicast group.

For example, the multicast server 120 may share the group key with the terminal 140 using a Group Key Management Protocol (GKMP). In detail, when the multicast server 120 receives the multicast group join message (see step S310) from the terminal 140, the multicast server 120 checks whether the terminal 140 is authorized. If the multicast server 120 confirms that the terminal 140 has a legitimate authority, the multicast server 120 transmits a group key to the corresponding terminal 140.

At this time, the process of distributing the above-described group key may be performed using a separate key distribution center (KDC) in addition to the multicast server 120. However, in the present specification, it is described as being performed by the multicast server 120 for convenience of understanding and description of the present invention, but is not limited thereto.

Subsequently, in step S330, the multicast server 120 encrypts the sub multicast information. In this case, the encryption may be performed using the corresponding group key for each multicast group.

Subsequently, in step S340, the multicast server 120 transmits the sub-multicast information encrypted in step S330 to the terminal 140. At this time, the multicast server 120 transmits using the multicast address.

For example, suppose that a terminal 140 joined to a multicast group transmits a message requesting sub-multicast information to a multicast router. In this case, the message for requesting the sub multicast information includes a multicast address (see step S212 in FIG. 2) distributed to the corresponding terminal 140. The multicast router transmits a message requesting sub-multicast information to the multicast server 120 using the multicast address directly or through another router.

The multicast server 120 transmits the encrypted sub multicast information in response to the message for requesting the received sub multicast information. The transmitted sub multicast information is transmitted to the terminal 140 through the transmission network 130 (including the multicast router).

In this case, the multicast router may store and store path information of the transmission network 130 (or the multicast tree) to which the terminal 140 subscribed to the multicast group belongs.

Subsequently, in step S350, the terminal 140 decrypts the received encrypted sub multicast information using the group key of the corresponding multicast group.

Therefore, the user can obtain the decoded sub multicast information. Here, the sub-multicast information is the information necessary for the role of the user and the tasks that can be performed in the role as described above.

The terminal 140 may withdraw from the multicast group when all the necessary sub-multicast information is received, that is, when no further information is received in the emergency medical environment (for example, when the patient completes the treatment).

Hereinafter, the multicast group leaving of the terminal 140 will be described in detail.

In operation S360, the terminal 140 may transmit a multicast group leave message to be removed from the multicast group to the multicast server 120 or a corresponding router (only the transmission of the multicast server 120 to the multicast server 120 is illustrated. ). Subsequently, the sub multicast information is not transmitted to the corresponding terminal 140. That is, the multicast server 120 or the router receiving the multicast group leaving message group leaving message does not transmit the information transmitted through the multicast address to the terminal 140.

Subsequently, in step S370, the multicast server 120 updates the group key of the multicast group having the terminal 140 withdrawn.

In detail, the multicast server 120 may redistribute the group key with the terminal 140 (except the terminal 140 to be withdrawn) joined to the multicast group. Here, the redistributed group key is different from the previously shared group key.

Therefore, even if the terminal 140 withdrawn from the multicast group receives the sub multicast information, the received sub multicast information cannot be decoded.

The redistribution (update) process of the group key may be performed even when the new terminal 140 is subscribed. This is to prevent a newly subscribed terminal from a multicast group from viewing sub-multicast information before joining.

The method of distributing and updating a group key of a multicast group according to an embodiment of the present invention has been described with reference to FIG. 3. Hereinafter, the configuration of the multicast server 120 will be described in detail with reference to FIG. 4.

4 is a block diagram illustrating a configuration of a multicast server 120 according to an embodiment of the present invention.

Referring to FIG. 4, the multicast server 120 includes a communication unit 410, a multicast information management unit 420, an address assignment unit 430, an authentication unit 440, a multicast group management unit 450, and a group key management unit. 460 and the storage 470 may be included.

The communication unit 410 may transmit and receive various messages such as a briefing message, a received message, and an acknowledgment message, and sub-multicast information. In addition, the communication unit 410 may transmit and receive signals and data with all external devices other than the multicast server 120.

The multicast information manager 420 classifies the multicast information into sub multicast information based on the work group. Here, the working group may be a classification group classifying the work related to the treatment necessary for the patient.

In detail, the multicast information manager 420 may generate additional multicast information by merging additional information with basic information received from the information providing terminal 110.

Here, the multicast information manager 420 may extract the patient history information as additional information from the storage unit 470 (described later) according to the patient identification information included in the basic information. In addition, the multicast information manager 420 may extract, as additional information, information about a medical action required for the patient from the storage 470 (described later) according to the patient's state information included in the basic information. Therefore, according to an embodiment of the present invention, the multicast information manager 420 may extract additional information from the storage 470 according to the basic information received from the information provider terminal. The multicast information manager 420 may generate multicast information using basic information and additional information.

Here, the basic information may include patient identification information and patient state information, and the additional information may include medical history information of the patient and information necessary for treatment of the patient.

The multicast information manager 420 may read information about a work group from a storage area. In addition, the multicast information manager 420 may determine a task required for the patient and select a task group including the necessary task.

Thereafter, the multicast information manager 420 classifies the generated multicast information into information necessary for a selected working group to generate sub-multicast information.

In addition, the multicast information manager 420 may generate a briefing message and transmit the briefing message to the terminal 140 of all medical personnel through the communication unit 410. Here, the briefing message includes message identification information and patient initial information, and the patient initial information is initial information of a patient in an emergency state or being transferred to an ambulance, and may include patient identification information, health status information, and medical history records. Is as described above.

The address allocator 430 allocates a multicast address for each generated sub multicast information. Here, as described above, the multicast address may be arbitrarily set according to IPv6 or selected from a predetermined address pool.

The authenticator 440 authenticates a user's tasks and roles by using user authentication information included in a received message received from the terminal, and selects all or part of the sub multicast information according to the authenticated tasks and roles.

Here, the received message is a message received in response to the briefing message from the terminal 140. The received message contains authentication information about the user's tasks and roles.

The multicast group manager 450 generates an acknowledgment message including the multicast address. The multicast group manager 450 transmits the generated approval message to the terminal 140. Here, the multicast address is a multicast address assigned to the selected sub multicast information.

Here, the approval message may further include cookie information. In addition, the cookie information may be generated using the random number received from the terminal 140 as described above.

In response, the terminal 140 may transmit a multicast group join message and join the multicast group. Thereafter, the sub-multicast information can be received through the multicast address of the subscribed multicast group.

The group key manager 460 shares the group key with the terminal 140 subscribed to the multicast group. In detail, the group key manager 460 distributes the group key to share the same group key between the terminal 140 and the multicast server 120 subscribed to the multicast group.

In addition, the group key manager 460 may encrypt the sub-multicast information to be transmitted using the distributed group key.

Accordingly, the terminal 140 may decrypt the encrypted sub multicast information using the shared group key.

In addition, the group key manager 460 may redistribute the group keys between the terminals 140. In detail, when the new terminal 140 joins the multicast group or the existing terminal 140 leaves the group key manager 460, the group key management unit 460 is a group shared with all the terminals 140 joined to the multicast group. You can update the key.

This is because the newly joined terminal 140 of the multicast group should not be able to access the information transmitted before the subscription. In addition, because the terminal 140 that has left the multicast group should not be able to access the information transmitted after the withdrawal.

The storage unit 470 stores matching information of tasks and roles. In addition, the storage unit 470 may store a multicast address pool. In addition, the storage unit 470 stores input / output data when the ROM (ROM), which stores a predetermined program controlling the overall operation of the multicast server 120, and the overall control of the multicast server 120 is performed. RAM may be configured to store various data to be processed.

In addition, the storage unit 470 may store the history of the information provision in a predetermined method. For example, medical history information about the patient (ie, the previous medical history of the patient, specific details such as the allergic drug of the patient, etc.) may be stored. In this case, as described above, the multicast information manager 420 may extract medical history information of the corresponding patient from the storage using the identification information of the patient included in the basic information.

In addition, the storage unit 470 may further include information on medical actions necessary according to the patient's condition. For example, the medical device may further include information on medical care necessary according to the name of the patient, the name of the injury, and other information about the body. In this case, as described above, the multicast information management unit 420 reads information about the medical behavior required by the patient from the storage unit as additional information from the storage unit 470 by using the patient state information included in the basic information. I can ship it.

In the present specification, the multicast server 120 is each functional unit (communication unit 410, multicast information management unit 420, address allocating unit 430, authentication unit 440, multicast group management unit 450 , The group key manager 460 and the storage 470 are represented separately. However, this is for convenience of description and may be implemented in one circuit (micro circuit as one logic unit).

The invention can also be embodied as computer readable code on a computer readable recording medium. The computer-readable recording medium includes all kinds of recording devices in which data that can be read by a computer system is stored.

For example, the computer-readable recording medium may include a ROM, a RAM, a CD-ROM, a magnetic tape, a floppy disk, an optical data storage device, and the like.

It may also include the implementation in the form of a carrier wave (for example, transmission over the Internet).

The computer readable recording medium can also be distributed over network coupled computer systems so that the computer readable code is stored and executed in a distributed fashion.

And functional programs, codes and code segments for implementing the present invention can be easily inferred by programmers in the art to which the present invention belongs.

Although the above has been described with reference to a preferred embodiment of the present invention, those skilled in the art to which the present invention pertains without departing from the spirit and scope of the present invention as set forth in the claims below It will be appreciated that modifications and changes can be made.

1 is a system diagram for explaining the configuration of a multicast system for multicast-based information transmission according to an embodiment of the present invention.

2 is a flowchart illustrating a method of joining a multicast group according to an embodiment of the present invention.

3 is a flowchart illustrating a method for distributing and updating a group key of a multicast group according to an embodiment of the present invention.

4 is a block diagram illustrating a configuration of a multicast server according to an embodiment of the present invention.

<Description of the symbols for the main parts of the drawings>

110: information providing terminal 120: multicast server

130: transmission network 140: terminal

141: first multicast group 142: second multicast group

410: communication unit 420: multicast information management unit

430: address assignment unit 440: authentication unit

450: multicast group management unit 460: group key management unit

470: storage unit

Claims (19)

A method for transmitting information from a multicast server to a terminal connected to the multicast server based on a multicast method, Classifying the multicast information into sub-multicast information based on a working group; Allocating a multicast address for each of the sub multicast information; Authenticating a task and a role of the user by using the user authentication information received from the terminal; And Selecting all or part of the sub multicast information according to the authenticated task and role, The selected sub multicast information is multicasted to the terminal through the multicast address, Distributing a group key and a terminal included in a multicast group corresponding to the received multicast address; And Encrypting the selected multicast information and transmitting the encrypted multicast information to the terminal using the multicast address, And the terminal decodes the received multicast information using the group key. The method of claim 1, Before classifying into the sub multicast information, Receiving basic information about an information subject from an information providing terminal connected to the multicast server; And Extracting additional information according to the received basic information from the storage area of the sub multicast; And And generating multicast information by using the basic information and the additional information. The method of claim 2, The basic information includes at least one of patient identification information and patient status information, and the additional information includes at least one of medical history information, information necessary for treatment of a patient, and rules related to the treatment. Multicast-based information transmission method. The method of claim 1, After allocating the multicast address, Transmitting a briefing message including message identification information and patient initial information to one or more terminals, wherein the patient initial information comprises one or more of patient identification information, health status information and medical history records; And And receiving a received message including the user authentication information in response to the briefing message. The method of claim 1, The classifying into the sub multicast information may include: A method for transmitting information based on a multicast, characterized in that based on a working group on treatment required by a patient. The method of claim 1, After selecting all or part of the sub-multicast information, The method may further include transmitting an acknowledgment message including the multicast address allocated to the selected sub multicast information to the terminal. The terminal transmits a group join message for joining a multicast group corresponding to the received multicast address, and receives the sub multicast information through the subscribed multicast group. How to send information. The method of claim 6, The approval message is, It includes cookie information generated by using the random number generated by the terminal, The terminal uses the cookie information to verify the integrity of the approval message, characterized in that the multicast-based information transmission method. delete The method of claim 1, And updating the group key when a new terminal joins the multicast group or when an existing terminal leaves the multicast group. In the multicast server for multicasting information to the terminal, A multicast information management unit classifying the multicast information into sub multicast information based on one or more working groups; An address allocator for allocating a multicast address for each of the sub multicast information; And An authentication unit for authenticating a user's task and role using the user authentication information received from the terminal, and selecting all or part of the sub-multicast information according to the authenticated task and role, The selected sub multicast information is multicasted to the terminal through the multicast address, Distributing a group key with a terminal included in the multicast group corresponding to the received multicast address, encrypting the selected multicast information, and transmitting the encrypted multicast information to the terminal using the multicast address. Further comprising a group key management unit, The terminal decrypts the received multicast information using the group key. The method of claim 10, Further comprising a communication unit for receiving basic information about the information target from the information providing terminal connected to the multicast server, The multicast information manager extracts additional information according to the received basic information from the storage area of the sub multicast, and generates multicast information using the basic information and the additional information. . The method of claim 11, The basic information includes patient identification information and patient status information, and the additional information includes one or more of patient history information, information necessary for treatment of a patient, and rules related to the treatment. The method of claim 10, Sending a briefing message including message identification information and patient initial information to the one or more terminals, wherein the patient initial information comprises one or more of patient identification information, health status information and medical history records; And a communication unit configured to receive a received message including the user authentication information in response to the briefing message. The method of claim 10, The multicast information management unit, Multicast server, characterized in that based on the working group on the treatment required by the patient. The method of claim 10, A multicast group management unit for transmitting a grant message including a multicast address allocated to the selected sub-multicast information to the terminal, The terminal transmits a group join message for joining a multicast group corresponding to the received multicast address, and receives the sub multicast information through the subscribed multicast group. The method of claim 15, The approval message is, It includes cookie information generated by using the random number generated by the terminal, The terminal checks the integrity of the approval message using the cookie information. delete The method of claim 10, The group key management unit, And updating the group key when a new terminal joins the multicast group or when an existing terminal leaves the multicast group. A recording medium readable by an electronic device on which a program comprising typed instructions for executing a method of transmitting information based on a multicast is provided. Classifying the multicast information into sub-multicast information based on a working group; Allocating a multicast address for each of the sub multicast information; Authenticating a task and a role of the user by using the user authentication information received from the terminal; And Selecting all or part of the sub multicast information according to the authenticated task and role, The selected sub multicast information is multicasted to the terminal through the multicast address, Distributing a group key and a terminal included in a multicast group corresponding to the received multicast address; And Encrypting the selected multicast information and transmitting the encrypted multicast information to the terminal using the multicast address, And the terminal decodes the received multicast information using the group key.

Images