KR101383378B1 - Mobile iptv service system using downloadable conditional access system and method thereof - Google Patents

Abstract

An object of the present invention is to provide a service suitable for a mobile environment by applying a download reception restriction system that performs user authentication through software download to service an IPTV using a limited reception system serviced in a conventional wired environment in a mobile environment. . In addition, after registering the user terminal to move the service between wired and wireless, there is no need to request a third trust authority for a procedure for authenticating the user terminal. Therefore, it is more effective in terms of service access time, message delivery, and cost than the algorithm for service authentication. The present invention receives a user authentication request from a third trust authority that is in charge of user authentication, a content server that stores and provides a plurality of contents, and a mobile terminal, and transmits the user authentication request to a third trust authority, and responds to the user authentication request with a third trust authority. Generate a mobile license and an encryption key based on the user authentication information received from the trust authority and transmit it to the user terminal, receive the content request and the mobile license from the mobile terminal to authenticate the mobile terminal through the mobile license, the content request And a service provider for transmitting the encrypted content encrypted from the content server in response to the content request to the server, and a download receiving system code generated based on the content request to the mobile terminal. .

Description

MOBILE IPTV SERVICE SYSTEM USING DOWNLOADABLE CONDITIONAL ACCESS SYSTEM AND METHOD THEREOF

The present invention relates to a system and a method for providing a service in charge of user authentication and security in an Internet Protocol Television (IPTV) service in a mobile environment.

As the internet speeds up and the population of the Internet grows, the demand for Internet broadcasting to provide Onesource Multi Service is increasing. Among the various Internet-based broadcasting services, Internet Protocol Television (IPTV) is the most prominent.

IPTV refers to a service that provides an information service, video content, and real-time broadcasting to a television receiver using high-speed Internet. It's a type of digital convergence in terms of the convergence of the Internet and television. IPTV is no different from general cable or satellite broadcasting in that it provides broadcasting contents such as video, but it has the added interactivity that allows viewers to watch only the programs they want to watch at a convenient time. It is a great feature.

In recent years, IPTV attracts a lot of consumers and attracts many subscribers. The development of IPTV is attempting to provide a service in a wireless network away from the existing service through a wired network of a service provider, which is called IPTV 2.0, or in other words, Mobile IPTV.

The emergence of mobile IPTV has increased the demand for the provision of existing IPTV services through the personal mobile terminals of many service users, and also the introduction of mobile terminals that can be used by various users such as smartphones and tablet PCs. Efforts to provide services in various terminals are actively researching mobile IPTV.

Mobile IPTV service has different requirements from existing IPTV service. The five requirements of the current network-based mobile IPTV introduced by the Korea Information and Communication Technology Association are as follows. First, new scalable video coding is required for the mobile environment with existing IPTV contents in high definition. Secondly, it is necessary to consider the terminal requirements according to the characteristics of the radio / mobile terminal, which includes a multi interface requirement and can be utilized in a plurality of wireless networks. Third, the terminal and the network should be able to communicate smoothly. Fourth, quality of experience and quality of service should be guaranteed. Fifth, it must meet the requirements for security vulnerabilities in wireless networks.

Among the various requirements of mobile IPTV, there are many limitations in applying the security technology of IPTV, which has been serviced in the existing wired network, to mobile IPTV service. One of the IPTV security systems that can be applied to a mobile environment having a different structure from a wired environment is a downloadable conditional access system (DCAS).

The download reception system has been developed to solve the problems of the high cost and inefficient coping ability of the conventional hardware conditional access system (CAS). The download limit system is a system that has evolved the existing fixed smart card type CAS into a software download type for efficient viewer management.

Many algorithms exist for user mobile terminal authentication, such as Kerberos, Wireless Transport Layer Security (WTLS) in connection with the download restriction system. However, the mechanisms for user authentication in the above mobile environment are complicated in the process of authenticating the mobile terminal, which increases user access time and is inefficient in terms of cost and convenience.

The present invention has been devised to solve the above problems, and provides an apparatus and method for performing authentication and service of an IPTV in a mobile environment by solving a problem of a conventional reception restriction system (CAS) using a download reception restriction system. It is.

The present invention provides a mobile IPTV service system that provides a service in a user mobile environment by applying a DCS to solve the problem of IPTV service using a conventional CA system in a mobile environment and its How to deal with it.

The mobile IPTV service system using the download reception restriction system according to the present invention includes a third trust authority that is in charge of a user authentication procedure, a content server that stores and provides a plurality of contents, and a user trust request from a mobile terminal. And generate a mobile license and an encryption key based on the user authentication information received from the third-party trust authority in response to the user authentication request to the user terminal, and receive the content request and the mobile permit from the mobile terminal. Authorization to authenticate the mobile terminal, transmit the content request to the content server, and encrypt the content received from the content server in response to the content request, and the download restriction system code generated based on the content request. Above all It includes a service provider transmitting to a terminal.

The mobile IPTV service method using the download reception restriction system according to the present invention is as follows. The service provider receives a user authentication request from the mobile terminal. In response to the user authentication request, the service provider transmits the mobile permission and the encryption key generated based on the user authentication information received through the third trusted authority to the mobile terminal. The service provider receives the mobile permit along with the content request from the mobile terminal. After the service provider authenticates the mobile terminal on the basis of the received mobile license, the service provider transmits the download restriction system code and the encrypted content generated based on the mobile license to the mobile terminal in response to the content request.

The mobile IPTV service using the download reception restriction system according to the present invention allows to provide a more secure service in a mobile environment in consideration of the conventional problems. In addition, after registering the user terminal to move the service between wired and wireless, there is no need to request a trusted third party (TTP) for a procedure for authenticating the user terminal separately. Therefore, it is more effective in terms of service access time, message delivery, and cost than the existing algorithm for service authentication, and can provide user convenience.

This method, which can be used to link existing wired IPTV and mobile IPTV known as IPTV 2.0, is expected to be a competitive solution due to the growth of smart media market such as Google TV, Apple TV, iPhone and iPad.

1 is a block diagram showing an embodiment of a mobile IPTV service system using a download reception restriction system.
2 is a block diagram illustrating a download reception system according to an embodiment of a mobile IPTV service system using a download reception system.
3 is a flowchart illustrating a mobile IPTV service method using a download reception restriction system according to an exemplary embodiment.
4 is a flowchart illustrating a user authentication process of a mobile IPTV service method using a download reception restriction system according to an embodiment.
5 is a flowchart illustrating a content providing process of a mobile IPTV service method using a download receiving system according to an embodiment.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings. The terms used in this specification are terms selected in consideration of functions in the embodiments, and the meaning of the terms may vary depending on the user, the intention or custom of the operator, and the like. Therefore, the meaning of the terms used in the following embodiments is defined according to the definition when specifically defined in this specification, and unless otherwise defined, it should be interpreted in a sense generally recognized by those skilled in the art.

The present invention provides an Internet protocol television (IPTV) that performs authentication through a trusted third party (TTP) using a downloadable conditional access system (DCAS) in a mobile environment. It deals with the system and the method of providing the service.

1 is a block diagram showing an embodiment of a mobile IPTV service system using a download reception restriction system.

2 is a block diagram illustrating a service provider according to an embodiment of a mobile IPTV service system using a download reception restriction system.

1 and 2, a mobile IPTV service system using a download reception restriction system according to the present invention includes a service provider 101, a third trust authority 102, and a content server 103. 101 includes a download reception system unit 1011, a service manager 1012 and a streaming server 1013.

The third trust authority 102 is a third certification authority for authenticating a user together with the download receiving system 1010 of the service provider 101. The third trust authority 102 performs user authentication according to a user authentication request received from the service provider 101, and transmits user authentication information based on the authentication to the system for receiving a download restriction system 1011 again. . In general, all personal information for accessing the server is stored on the server, which is a disadvantage in security. However, in the case of authenticating through the third trust authority 102, higher security can be expected because it uses a method of entrusting important personal information to the third trust authority 102, not the service providing server.

The content server 103 stores a plurality of contents. When the system provider 101 requests content, the content server 103 transmits the selected content to the system provider 101 according to the request.

2, the service provider 101 includes a download reception system 1010, a service manager 1012, and a streaming server 1013.

The download restriction system unit 1011 performs user authentication with the third trust authority 102. First, a user authentication request received from an unregistered mobile terminal is transmitted to the third trust authority 102, and a mobile authorization and encryption key are generated based on the user authentication information received in response. And it receives the content request and the mobile license from the registered mobile terminal and generates a download reception restriction code based on the mobile license and transmits to the mobile terminal. Then, the content request received from the mobile terminal 104 is transmitted to the service manager 1012.

The download reception system 1011 generates and uses a software code called a download reception system code when the user accesses a service. It is a system that can reduce effectively. In addition, it is possible to operate the service provision through the network securely by using the system for receiving a download restriction, and to prevent illegal users and hacking. In addition, the module can be changed by software download through the network, which has the advantage of flexibility and easy configuration.

The service manager 1012 manages and monitors communication between the mobile terminal 104 and the service provider 101. It searches for the content server 103 based on the content request received from the download receiving system and transmits the content request to the content server 103. The service manager 1012 is used for multicast session control and monitoring, and manages a connection between all users and content. Manage all media servers when delivery of the requested content needs to be delivered to the mobile terminal 104.

The streaming server 1013 encrypts the content received from the content server 103 in response to the content request received from the service manager 1012 and provides the mobile terminal 104 with a streaming service that provides the encrypted content in real time. It plays a role.

The service provider 101 receives a user authentication request or a content request from the mobile terminal 104.

Upon receiving the user authentication request from the mobile terminal 104, the service provider 101 sends it to the third trust authority. In response to the user authentication request, the mobile terminal generates a mobile license and an encryption key based on the user authentication information received from the third trusted authority, and transmits the generated mobile authentication certificate and the encryption key to the user terminal 104.

Upon receiving the content request and the mobile permit from the registered mobile terminal 104 through the authentication process, the service provider 101 generates a downloadable conditional access system code based on the mobile permit. The service provider 101 also sends a content request to the content server 103. Encrypts the content received from the content server 103 in response to the content request to generate the encrypted content, and transmits the encrypted content and the download control system code to the mobile terminal 104. .

The mobile license received from the service provider 101 to the mobile terminal 104 is stored in the mobile terminal 104 and when the mobile terminal 104 accesses the service provider 101 to request content, the mobile terminal with the content request is requested. And sent to 104 to authenticate the mobile terminal 104 and to generate a system for receiving download restrictions.

The encryption key is received from the service provider 101 through a user authentication process and stored in the mobile terminal 104, and decrypts the encrypted content received from the service provider 101 together with the download restriction system code. .

The download restriction system code is received from the mobile terminal 104 and generated by the service provider 101 and transmitted to the mobile terminal 104. The newly generated download limit system code plays a role of interpreting the encrypted content together with the encryption key stored in the mobile terminal 104 to increase the security in the content providing process.

If the encryption key is stored in the mobile terminal 104 through the authentication process, it is subsequently used to interpret the received encrypted content. However, when the download restriction system code is continuously generated and newly requested, the system code is transmitted to the mobile terminal 104. In other words, the same encryption key is always used to decrypt different encrypted content, but the system for downloading restriction is always different. Therefore, the content security is further increased.

3 is a flowchart illustrating a mobile IPTV service method using a download reception restriction system according to an exemplary embodiment.

A mobile IPTV service method using a download reception restriction system according to an embodiment is as follows. The service provider receives a user authentication request from the mobile terminal (301). In response to the user authentication request, the service provider transmits the mobile permission and the encryption key generated based on the user authentication information received through the third trusted authority to the mobile terminal (302). The service provider receives the mobile license with the content request from the mobile terminal (303). After the service provider authenticates the mobile terminal on the basis of the received mobile license, in response to the content request, the service provider transmits the downloaded reception restriction system code and the encrypted content generated based on the mobile license to the mobile terminal (304). Includes two courses.

The service method described above is largely divided into two steps, a user authentication process (301, 302) for registering a mobile terminal to receive a service through an unauthenticated mobile terminal, and a content providing process (303, 304) for providing a service to a user through an authenticated mobile terminal. It can be divided into processes.

4 is a flowchart illustrating a user authentication process of a mobile IPTV service method using a download reception restriction system according to an exemplary embodiment.

Referring to FIG. 4, in a user authentication process of a mobile IPTV service method using a download reception restriction system according to an embodiment, a service provider first receives a user authentication request from a mobile terminal. The service provider then sends the received user authentication request to the third trust authority. Upon receiving the user authentication request from the service provider, the third trust authority performs user authentication and transmits the user authentication information to the service provider accordingly. The service provider generates a mobile license and an encryption key based on the user authentication information received from the third trusted authority and transmits the generated mobile license to the mobile terminal. The mobile terminal receives and stores the mobile license and encryption key from the service provider.

When a user requests a user authentication through a mobile terminal, the download reception system part of the service provider receives the user authentication request and is stored in the user authentication request and the download reception system part in a third-party trusted authority for the authentication process. Send the information. The third trust authority performs authentication and registers the mobile terminal according to a user authentication request received from the download reception system. Then, the user authentication information according to the authentication and registration is transmitted again to the system for limiting download reception.

The download reception restriction system unit stores the user authentication information received from the third trust authority, generates a mobile permit and an encryption key, and transmits the generated user authentication information to the mobile terminal. The mobile terminal stores the received mobile permit and encryption key.

The mobile license is used to authenticate the mobile terminal when the mobile terminal connects to the service provider and requests a service, thereby providing a suitable service to the user according to the authentication result.

The above-described user authentication process is executed only when the user transmits a user authentication request. In the content request process, the user's authentication is authenticated through the mobile permission letter received from the mobile terminal by the system for limiting download reception of the service provider. That is, it is effective in terms of service access time, message delivery, cost, and user convenience since it is not necessary to request a third trusted authority for authenticating the mobile terminal after performing the authentication process.

5 is a flowchart illustrating a content providing process of a mobile IPTV service method using a download receiving system according to an embodiment.

Referring to FIG. 5, a content providing process of a mobile IPTV service method using a download reception restriction system according to an embodiment is as follows. First, the service provider receives a content request and a mobile license from the mobile terminal. The service provider then performs user authentication via the received mobile authorization. The service provider generates a download receiving system code according to the authentication result and transmits it to the mobile terminal. The service provider sends the content request to the content server based on the user request. The content server sends the selected content to the service provider based on the content request received from the service provider. The service provider encrypts the content received from the content server and transmits it to the mobile terminal. The mobile terminal decrypts the encrypted content received from the service provider using an encryption key and a system for restricting download reception.

When the user requests the content through the mobile terminal, the download reception restriction system unit of the service provider receives the content request and the mobile permit and performs the authentication process of the mobile terminal. The authentication process is performed based on the user's information and the user's authentication information stored in the mobile license and the download reception system portion received from the mobile terminal. Through this, it is checked whether the mobile terminal subscribes to the corresponding service. If it is possible to provide the service, the download reception system system generates a download reception system code based on the stored user authentication information and the content request and transmits it to the mobile terminal. The download reception system unit transmits the content request received from the mobile terminal and the stored user information to the service management unit of the service provider.

The service manager retrieves the content suitable for the user stored in the content server based on the received content request and the user information and makes a content request to the content server. The content server transmits the retrieved content to the streaming server of the service provider according to the content request received from the service manager.

The streaming server performs a process of encrypting the content received from the content server. The encryption process can prevent unauthorized users from accessing content and using services through hacking. The streaming server transmits the encrypted content to the mobile terminal. The method of transmission is transmitted via streaming technology. Streaming technology is a technology that enables data to be transmitted and implemented in real time on the Internet, and enables real-time playback of content.

The mobile terminal decrypts and plays the encrypted content received from the streaming server. In order to decrypt the encrypted content, an encryption key stored in the mobile terminal and a system for restricting download reception are used. As described above, the encryption key is received from the download receiving system during the user authentication process through the third trusted authority and stored in the mobile terminal, and the download receiving system code is authenticated through the mobile license during the content request process. After receiving it from the download reception system unit is stored in the mobile terminal.

Although the present invention has been described in detail with reference to the above preferred embodiments, the present invention is not limited to the above embodiments, and various modifications may be made by those skilled in the art within the scope of the technical idea of the present invention. Do.

The mobile IPTV service system using the download reception restriction system according to the present invention is an essential technology for the mobile IPTV service. It can also be used for mobile authentication for user terminals such as smartphones and tablet PCs, which are increasing rapidly in recent years. In addition, the user mobile terminal is much lower in performance than the set-top box (STB) for providing an existing IPTV service, which has the effect of reducing the cost and time of authentication compared to other authentication schemes, thus efficiently saving resources of the user mobile terminal. Will contribute to the use. In addition, the present technology is a next generation IT technology applied to various smart services such as a smart home environment.

101: service provider
1011: download reception system section
1012: service management department
1013: streaming server
102: Third Trusted Authority
103: content server
104: mobile terminal

Claims (20)

A mobile IPTV service system for providing an IPTV service to a mobile terminal,
A third trust authority for authenticating a user according to the received user authentication request and transmitting user authentication information; And
A content server that stores a plurality of contents and transmits the selected contents based on the received content request; And
The mobile terminal receives the user authentication request from the mobile terminal and transmits the user authentication request to the third trust authority, and generates a mobile permit and an encryption key based on the user authentication information received from the third trust authority in response to the user authentication request. The mobile terminal, receiving the content request and the mobile permit from the mobile terminal, authenticating the mobile terminal through the mobile license, transmitting the content request to the content server, and responding to the content request. And a service provider for transmitting the encrypted content encrypted from the content server received from the content server and a download reception system code generated based on the content request to the mobile terminal.
The mobile permit is used for authentication of the mobile terminal;
The encryption key and the download reception system code is used for decrypting the encrypted content in the mobile terminal, Mobile IPTV service system using a download reception system (DCAS). The method according to claim 1,
The service provider is a mobile IPTV service system using a download reception restriction system, characterized in that for performing the user authentication through the mobile license stored in the mobile terminal. The method according to claim 1,
The service provider
The user authentication request received from the mobile terminal is transmitted to the third trust authority, the mobile license, the encryption key and the download restriction code is generated and transmitted to the mobile terminal, and the received from the mobile terminal A download reception restriction system unit for authenticating the mobile terminal through a mobile license and transmitting the content request received from the mobile terminal; And
A service manager for monitoring and managing communication between the mobile terminal and the service provider, searching for the content server based on the content request received from the download restriction system, and transmitting the content request to the content server; And
And a streaming server that encrypts the content received from the content server in response to the content request and provides the encrypted content to the mobile terminal in real time. As a mobile IPTV service method for providing an IPTV service to a mobile terminal,
Receiving a user authentication request from the mobile terminal;
Transmitting a mobile license and an encryption key generated based on user authentication information received through a third trusted authority to the mobile terminal in response to the user authentication request;
Receiving a content request and a mobile permit from the mobile terminal;
After authenticating the mobile terminal based on the received mobile license, transmitting, to the mobile terminal, a download reception system code and encrypted content generated based on the mobile license in response to the content request;
Mobile IPTV service method using a download reception restriction system comprising a. 5. The method of claim 4,
And storing, by the mobile terminal, the received mobile permit and the received encryption key. 5. The method of claim 4,
And analyzing, by the mobile terminal, the received encrypted content using the encryption key and the download receiving system code. 5. The method of claim 4,
And the user authentication information is transmitted from the third trust authority in response to the user authentication request. In the method for the server to provide content to the mobile terminal,
Generating a mobile license and an encryption key;
Transmitting the mobile license and the encryption key to the mobile terminal;
Receiving a mobile permit and a content request from the mobile terminal;
Generating a download reception system code based on the mobile license;
Transmitting the download restriction system code to the mobile terminal; And
Transmitting the encrypted content corresponding to the content request to the mobile terminal;
Lt; / RTI >
And the encrypted content is interpreted by the encryption key and the download restriction system code. 9. The method of claim 8,
The encrypted content is transmitted to the mobile terminal as Internet Protocol Television (IPTV) content,
And the server is an IPTV server. 9. The method of claim 8,
And the encrypted content is transmitted to the mobile terminal via real time streaming. 9. The method of claim 8,
Receiving a user authentication request from the mobile terminal;
Sending the user authentication request to a third trust authority; And
Receiving user authentication information as a response to the user authentication from the third trusted authority
Further comprising:
The mobile license and the encryption key is generated based on the user authentication information. delete 9. The method of claim 8,
Sending the content request to a content server;
Receiving content corresponding to the content request from the content server; And
Generating the encrypted content by encrypting the content
Further comprising, content providing method. delete 9. The method of claim 8,
Receiving the mobile license and content request, generating the download restriction system code, transmitting the download restriction system code to the mobile terminal and transmitting the encrypted content to the mobile terminal A method of providing content, performed for each of a plurality of content requests. 16. The method of claim 15,
Correspond to both the plurality of different download restriction system codes corresponding to each of the plurality of encrypted contents and the plurality of encrypted contents to interpret the plurality of encrypted contents corresponding to each of the plurality of content requests. Wherein the single encryption key is used. Generate a mobile license and an encryption key, transmit the mobile license and the encryption key to a mobile terminal, receive a mobile license and content request from the mobile terminal, and generate a system for receiving unrestricted download based on the mobile license A download reception system for transmitting a download reception system code to the mobile terminal; And
Streaming server for transmitting the encrypted content corresponding to the content request to the mobile terminal
Lt; / RTI >
And the encrypted content is interpreted by the encryption key and the download restriction system code. 18. The method of claim 17,
The download reception limit system unit receives a user authentication request from the mobile terminal, transmits the user authentication request to an authentication server, and receives user authentication information as a response to the user authentication from the authentication server,
The mobile license and the encryption key are generated based on the user authentication information. 18. The method of claim 17,
Service management unit for transmitting the content request to the content server
Further comprising:
The streaming server receives the content corresponding to the content request from the content server and generates the encrypted content by encrypting the content. 18. The method of claim 17,
The download reception system unit receives the mobile license and content request for each of a plurality of content requests, generates the download reception system code, and transmits the download reception system code to the mobile terminal.
The streaming server sends the encrypted content to the terminal for each of the plurality of content requests.

Images