KR101445256B1 - System for preventing illegal utilization of broadcasting contents in iptv broadcasting service and method thereof - Google Patents

Abstract

There is provided a system and method for preventing unauthorized use of broadcast contents in an IPTV broadcast service that generates and provides a lower-level encrypted data stream that can be easily decoded and reproduced even in low-end wireless communication terminals.

A system for preventing unauthorized use of broadcast contents in an IPTV broadcast service includes a stream server for receiving broadcast contents from a broadcasting company and generating an encrypted data stream of a first specification and an encrypted data stream of a second specification, And a wireless network server for receiving the encrypted data stream of the second specification and providing the encrypted data stream to the wireless communication terminal.

IPTV, content, illegal, encryption, decryption, data, stream

Description

BACKGROUND OF THE INVENTION 1. Field of the Invention [0001] The present invention relates to a system and a method for preventing unauthorized use of broadcasting contents in an IPTV broadcasting service,

The present invention relates to a system and method for preventing unauthorized use of broadcast contents in an IPTV broadcasting service, and more particularly, to a system and method for preventing illegal use of broadcast contents in an IPTV broadcasting service, To a system and method for preventing unauthorized use of broadcast contents in an IPTV broadcast service.

With the spread of the Internet and the development of digital broadcasting technology, the use of the two-way broadcasting service provided using the high-speed Internet network is increasing.

The bidirectional broadcasting service is a service for providing an information service, a moving picture content and a broadcasting to a bidirectional broadcasting receiver (for example, IPTV (Internet Protocol Television), a DMB receiver, a set-top box, etc.) Movies, movies, home shopping, home banking, online games, MP3, and other services provided by the Internet.

Particularly, in the IPTV broadcasting service, there are many types of services that can store broadcast contents in user terminals such as various PCs, PMPs, mobile phones, etc. or store them in the central storage, there was.

In order to solve such a problem, IPTV broadcasting service encrypts broadcasting contents using a content protection solution such as Digital Rights Management (DRM) or Conditional Access System (CAS) .

However, conventionally, since a stream server encrypts and multicasts broadcast contents, anyone who can access the network can view the broadcast contents, and unauthorized copying of broadcast contents stored in the system can be illegally distributed there was.

In order to solve such a problem, a technique of multicasting encrypted contents in a stream server has been proposed.

However, the conventional method uses a method of encrypting all the stream data. In this case, since the amount of encrypted data is large, special hardware is used to decrypt the encrypted data, or a terminal equipped with a high-performance CPU is required. There is a problem that it is difficult to apply to a mobile device having a low CPU performance.

Meanwhile, in order to provide broadcasting contents to a wireless communication terminal of a user who is permitted to view broadcasting contents in an IPTV broadcasting service, the broadcasting contents must be converted into a low-level encrypted data stream that can be used even in low- There is a problem in that it can not provide IPTV broadcasting service in which wireless is integrated.

One embodiment of the present invention provides a system and method for preventing unauthorized use of broadcast contents that can prevent unauthorized use of broadcast contents in an IPTV broadcast service.

In addition, an embodiment of the present invention provides a content illegal use prevention system and a content illegal use prevention system which are capable of generating and decrypting a low-latency encrypted data stream usable in a low- .

Accordingly, the present invention provides a system and method for preventing unauthorized use of broadcast contents by encrypting only a part of data without encrypting all data using the characteristics of the MPEG-2 TS format.

According to an aspect of the present invention, there is provided a system for preventing unauthorized use of broadcast contents in an IPTV broadcast service, the system comprising: A stream server for generating an encrypted data stream of the first specification, a stream server for generating an encrypted data stream of the second specification, a wired network server for receiving the encrypted data stream of the first specification and providing the encrypted data stream to a wired subscriber terminal, And a wireless network server for providing the encrypted data stream to the wireless communication terminal, wherein the encrypted data stream of the second specification is generated in the process of generating the encrypted data stream of the first specification do.

According to a second aspect of the present invention, there is provided a method for preventing unauthorized use of broadcast content in an IPTV broadcast service, the method comprising: receiving broadcast content from a broadcast provider; The first specification data stream and the second specification data stream; providing the encapsulated data stream of the first specification to a wireline subscriber terminal; and transmitting the encrypted data stream of the second specification to a wireless To the communication terminal, wherein the encrypted data stream of the second specification is generated in the process of generating the encrypted data stream of the first specification.

According to a third aspect of the present invention, there is provided a user terminal for reproducing an encrypted data stream, the user terminal receiving the encrypted data stream, extracting an I frame, decoding the extracted I frame, A first buffer unit for reassembling the data stream decoded only by the I frame, a stream decoding unit for decoding the decoded data stream, and a display unit for displaying the decoded data stream on the content reproduction screen, Terminal.

According to one aspect of the present invention, there is provided an IPTV broadcasting service system in which a low-density encrypted data stream is efficiently decoded and utilized even in a low-end terminal environment having a low-performance CPU, Can be implemented.

According to another aspect of the present invention, an encrypted data stream of a low-grade available for use in a wireless communication terminal of a user permitted to view broadcast contents is used for illegal use of broadcast contents, A broadcasting service system can be implemented.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings, which will be readily apparent to those skilled in the art. The present invention may, however, be embodied in many different forms and should not be construed as limited to the embodiments set forth herein. In order to clearly illustrate the present invention, parts not related to the description are omitted, and similar parts are denoted by like reference characters throughout the specification.

Throughout the specification, when a part is referred to as being "connected" to another part, it includes not only "directly connected" but also "electrically connected" with another part in between . Also, when an element is referred to as "comprising ", it means that it can include other elements as well, without excluding other elements unless specifically stated otherwise.

Hereinafter, the present invention will be described in detail with reference to the drawings.

1 is a schematic block diagram of a general IPTV broadcasting service system.

Referring to FIG. 1, an IPTV broadcasting system includes a broadcasting company 1000, a headend system 2000, a network 3000, and a user terminal 4000.

The head end system 2000 includes a baseband system 2010, a compression multiplexing system 2020, a CAS 2030, a back office system 2040, a monitoring system 2050, A Media Management Core (MOC) 2060, a subscriber management system 2070, a data broadcasting system 2080, an EPG (Electronic Program Guide) system 2090, and a return path server system 2100.

The broadcasting company 1000 is responsible for producing, editing, and modifying broadcasting contents and providing them to the head end system 2000. Broadcasting company 1000 may include a program provider (PP), terrestrial or content provider (CP). In addition, the broadcasting contents provided by the broadcasting company 1000 may include existing broadcasting contents and rich contents on the Internet.

The head-end system 2000 receives and manages broadcast content from the broadcasting company 1000 and distributes the content to the user terminal 4000 to provide a broadcasting / recording / playback service. The received broadcast content may include related additional information and an EPG for the additional information.

The headend system 2000 transmits EPG information (PSIP / PSI / PSTN) including broadcast video and audio signals, data for data broadcasting, and program recommendation service menu via a subscriber aggregation device, a subscriber switch, and the like via a router supporting a multicast routing protocol. SI information) can be multicasted to a plurality of subscribers' IP set-top boxes.

The baseband system 2010 receives an MPEG2 broadcast signal or an analog broadcast signal from a terrestrial wave from an external program provider PP and converts the received source broadcast signal into an SDI And distributes broadcasting video and audio signals of a plurality of broadcasting channels (for example, 100 channels) through a routine switcher. The broadcasting video and audio signals are distributed to a subtitle generator CG and an automatic program controller APC (Signal editing and processing) to the compression multiplexing system 2020 by inserting at least one of an advertisement, a logo, and a caption into the broadcast video and audio signal.

The SDI (Serial Digital Interface) signal is, for example, a digital signal standard having a transmission rate of 270 Mbps, and a composite digital image and four channels of digital audio signals may be mixed.

The baseband system 2010 basically includes a receiving device (for example, a DS-3 terminal, a Yagi antenna, a tuner for receiving an analog broadcast signal in an IRD) receiving a broadcasting signal such as a program provider (PP) A frame synchronizer for converting and correcting the source signal received from the receiving device into an SDI signal and synchronizing the frames, and connecting / concentrating all the broadcasting signal channels for operation management A signal distributor such as an A / V router, and a character generator for editing and processing a signal by inserting advertisements, logos, and subtitles into the SDI signal.

The compression multiplexing system 2020 multiplexes broadcast video and audio signals (Video and Audio) received from the baseband system 2010 into A / V encoders ) To compress an SDI (Serial Digital Interface) video signal to H.264, compress the audio signal to MPEG-2 AAC to generate an MPEG-2 TS (Transport Stream) -2 TS signal, data for broadcasting and EPG information (PSIP / PSI / SI information) generated by a data encoder and a PSI / SI generator (PSI / SI Generator) are multiplexed, When a reception restriction technique is used, the MPEG-2 TS signal is input to a scrambler to be encrypted, and finally, IP packetization is performed to transmit a TS (Transport Stream) broadcast signal.

Optionally, a receive restriction system 2030 can also be used to prevent illegal viewing and piracy of program recommendation content.

The reception restriction system 2030 encrypts the real-time channel and performs pre-encryption of the VOD contents, and controls the viewing right so that the channel and contents can be used only for the authenticated user. A digital rights management (DRM) method may be used in place of the reception restriction system 2030 in order to prevent illegal copying of IPTV contents.

The back office system 2040 is a provisioning system and provides a billing function for using IPTV program service for each subscriber.

The monitoring system 2050 is a control system, and can monitor reception failure, subtitle confirmation, and the like by monitoring transmission failure of an A / V broadcasting signal for IPTV broadcasting and downlink of an IPTV head end system.

The media management system 2060 manages various business process information (program organization information, material information, contract information, product information, and the like) for operating the broadcasting service. The media management system 2060 integrally manages the information flow through the organic combination with each system at the center of the broadcasting center.

The media management system 2060 manages broadcast program information, content and media management information, contract information of the program provider (PP), contract information of the content provider (CP), and product information, And can act as a coordinator for integrated management of information flow through organic combination.

In addition, the media management system 2060 is capable of real-time broadcasting and VOD (Video Broadcasting) in terms of contract management, media and content meta data management, EPG information acquisition / Provides marketing management and reporting of marketing activities such as settlement with CP / CA and propensity to subscribers, analysis management, channel management, agent management, VOD catalog creation management and various merchandise management. Side video broadcast monitoring, video server transmission management, VOD subscriber authentication, recording / management of transmission result for settlement with CP / CA, and data synchronization with each linked subsystem.

The subscriber management system 2070 provides member registration and termination for the IPTV service, and member information management function.

The data broadcasting system 2080 authorizes, verifies, prepares, and transmits the data for data broadcasting.

The data broadcasting system 2080 includes a data agent manager for managing data encoding, a PSI / SI generator for generating program specific information / SI (Service Information) A data server / data encoder for encoding data broadcasting data into broadcast video and audio signals, a multiplexer manager (multiplexer / multiplexer) for managing the multiplexing function of data in the broadcast video and audio signals, Manager), and a scheduler UI (Scheduler UI).

In addition, the data broadcasting system 2080 may convert A / V data provided from an A / V server into an A / V encoder according to a terrestrial ACAP (Data Acquisition Protocol) And compresses the compressed video and audio signals by an authoring tool into a data server / data encoder and program specific information / service information (PSI / SI) ) Multiplexed by a multiplexer together with data for broadcasting and EPG information (PSIP / SI information) generated by a generator, so as to encode and transmit broadcasting program data and related information from the collection and storage of data broadcasting programs .

The EPG system 2090 includes an EPG server and provides an electronic program guide (EPG) service to the user terminal 4000.

The return path server system 2100 processes bi-directional data by a data provider (DP) and provides an online bill transfer from the user terminal 4000, a utilization / billing interlocking process of bidirectional data, , And bidirectional data for the program recommendation service, and transmits the corresponding response data to the user terminal 4000 through unicasting.

The network 3000 receives broadcasting contents from the head end system 2000 and transmits the received broadcasting contents to the user terminal 4000. [ The network 3000 includes a backbone network and an access network. The access network includes Ethernet, xDSL (ADSL, VDSL), HFC (Hybrid Fiber Coaxial Ca), FTTC Curb, and FTTH (Fiber To The Home) structures.

The user terminal 4000 is an apparatus for using an Internet broadcasting service, and generally includes an IPTV, a set top box (STB), and a remote controller. The IPTV outputs the broadcast contents received from the head end system 2000 and delivers the user response signal received through the remote controller to the head end system 2000 through the return channel of the set top box.

The user terminal may use either a TV having an IP STB or an IP STB connected to a user's TV, a computer, a notebook, or a personal portable terminal.

The IP set-top box includes a hardware layer composed of STB hardware such as a CPU, a media processor, a flash RAM, and an Ethernet module, a system software layer including system software such as a device driver and an operating system, a Java Virtual Machine (JVM) MPEG2, MPEG4, MPEG7, H.264, WMV-1, MPEG2, MPEG4, MPEG2, and MPEG-4 are equipped with a conditional access system (CAS) module and a digital rights management (DRM) interface module and a streaming protocol (RTP, RTSP) 9, etc., and an application program layer (EPG) for selecting an IPTV service channel. At this time, the subscriber's IP set-top box may be assigned an IPv4 address or an IPv6 address.

Hereinafter, a system and method for preventing unauthorized use of broadcast contents in an IPTV broadcast service according to an embodiment of the present invention will be described with reference to FIG. 2 to FIG.

2 is a diagram illustrating a connection relationship of an illegal use prevention system of broadcast contents according to an exemplary embodiment of the present invention.

2, a network configuration of a system for preventing illegal use of broadcasting contents according to an exemplary embodiment of the present invention includes a stream server 100, a wired network server 200, a wireless network server 300, a plurality of subscriber terminals 400 and a plurality of wireless communication terminals 500.

The stream server 100 receives broadcast content from a broadcasting company and converts it into a high-grade encrypted data stream and a low-grade encrypted data stream, thereby allowing the subscriber station 400 and the wireless communication terminal 500 ) To provide streaming services.

Here, a high-quality encrypted data is a video stream in which general encryption technology, that is, an I frame, a B frame, and a P frame of a moving picture are all encrypted, so that encryption and decryption can be smoothly performed in a high- Lt; / RTI > On the other hand, a lower-level encrypted data stream is a lower-level encrypted video stream that only encrypts an I frame of a moving image, and is an encrypted data stream that can be smoothly transmitted and received and decoded even in a low-speed communication environment and a low-end terminal environment. In particular, each of the lower-level encrypted data streams is transmitted over a channel for a lower-speed data stream to which a smaller bandwidth is allocated.

The wired network server 200 receives the high-density encrypted data stream and the low-density encrypted data stream from the stream server 100 and transmits the encrypted data stream to the subscriber terminal 400. The high-grade encrypted data stream and the low-grade encrypted date stream can be transmitted to a plurality of subscriber terminals 400 in a multicast manner, for example.

The wireless network server 300 receives the low-density encrypted data stream from the stream server 100 and transmits the stream to the wireless communication terminal 500. The low-level encrypted data stream can be transmitted, for example, to a plurality of wireless communication terminals 500 in a multicast manner.

The subscriber terminal 400 decodes the high-level encrypted data stream and the low-level encrypted data stream received from the wired network server 200 and displays the decrypted data stream on the content playback screen. That is, when the high-quality encrypted data stream is received from the wired network server 200, the subscriber station 400 decodes all of the I frame, the B frame, and the P frame of the data stream and displays it on the content playback screen, When an encrypted data stream of a lower level is received from the server 200, only the I frame of the data stream is decrypted and displayed on the content playback screen. At this time, the content playback screen is a screen on which broadcast content is played back.

The subscriber terminal 400 includes, for example, a set-top box (STB), a personal computer, a notebook, a kiosk, a low-end wireless terminal, and the like.

Since the subscriber station 400 receives and decrypts the encrypted low-density data stream generated by the stream server 100, it can easily decode and display the video content using a low-end CPU.

The wireless communication terminal 500 decrypts a low-level encrypted data stream received from the wireless network server 300 and displays the decrypted data stream on a content playback screen. That is, the wireless communication terminal 500 decodes only the I frame of the lower-level encrypted data stream received from the wireless network server 300 and displays it on the content playback screen.

The wireless communication terminal 500 is a wireless communication terminal of a user permitted to reproduce broadcast contents, and includes, for example, a mobile phone capable of wireless communication, a PDA, an Ultra Mobile PC (UMPC), a tablet PC .

Since the wireless communication terminal 500 can receive and decode the encrypted data stream of the low-end generated by the stream server 100, it is possible to easily decode and display the video content using the low-end CPU.

Therefore, not only can the low-density encrypted data stream generated in the stream server 100 be decrypted and displayed in the subscriber terminal 400 of the user who is permitted to use the broadcast content, It is possible to easily decode and display even the low-grade wireless communication terminal 500 permitted to use the broadcast contents, thereby realizing a more efficient IPTV broadcast service system.

3 is a detailed configuration diagram of a stream server according to an embodiment of the present invention.

3, a stream server 100 according to an exemplary embodiment of the present invention includes an encryption unit 110, a first TS buffer unit 120, and a multicasting stream transmission unit 130, 110 includes a UDP packet receiving unit 111, a TS packet extracting unit 112, a TS packet parsing unit 113, an encryption determining unit 114, a second TS buffering unit 115, and a TS packet encrypting unit 116 .

The encryption unit 110 encrypts the digital broadcasting contents received from the broadcasting company and provides the digital broadcasting contents to the first TS buffer unit 120. That is, the encryption unit 110 encrypts all of the I frame, the B frame, and the P frame in order to convert the digital broadcasting contents received from the broadcasting company into a high-quality encrypted data stream, Only I frames can be encrypted.

The UDP packet receiving unit 111 receives the broadcast content provided as a User Datagram Protocol (UDP) packet from the broadcasting company, and transmits the received broadcast content to the TS packet extracting unit 112.

The TS packet extracting unit 112 extracts a TS packet from the received UDP packet and transmits it to the TS packet parsing unit 113.

The TS packet parsing unit 113 analyzes the extracted TS packet into an I frame, a B frame, and a P frame, and transmits the analyzed TS packet to the encryption determination unit 114.

The encryption determination unit 114 determines whether or not the TS packet analyzed as the I frame, the B frame, and the P frame is encrypted, and transmits the TS packet to the second TS buffer unit 116 when the TS packet is encrypted, And transmits it to the TS packet encryption unit 115.

The TS packet encryption unit 115 encrypts the unencrypted TS packet transmitted from the encryption determination unit 114, and transmits the encrypted TS packet to the second TS buffer unit 116. That is, the TS packet encrypting unit 115 encrypts all of the I frame, the B frame, and the P frame of the TS packet for the generation of the high-quality encrypted date stream or extracts only the I frame for generation of the low- Encrypt.

The second TS buffer unit 116 stores the encrypted TS packet transmitted from the encryption determination unit 114.

The first TS buffer unit 120 receives the high-data-encrypted data stream and the low-data-encrypted data stream from the encryption unit 110 and decrypts the decrypted data stream to be decrypted by the subscriber station 400 and the wireless communication terminal 500, respectively And transmits the data stream to the multicasting stream transmitting unit 230. [

The multicasting stream transmitter 130 transmits the low-level encrypted data stream to the subscriber station 400 and the wireless communication terminal 500 for use in the wireless communication terminal 500. The multicasting stream transmission unit 130 transmits the high-density encrypted data stream and the low-density encrypted data stream to the subscriber station 400 so as to be used in the subscriber station 400. [

At this time, the high-definition encrypted data stream can be decrypted and displayed as moving picture contents in the subscriber station 400, and the encrypted data stream in low level is decoded as moving picture contents in the user terminal 400 and the wireless communication terminal 500 Can be displayed.

The subscriber station 400 may decode the mosaic EPG screen including a plurality of moving pictures to a low load, and then transmit the decoded moving picture data to the subscriber station 400. In this case, So that it can be reproduced and displayed.

In addition, the low-latency encrypted data stream generated by the stream server 100 is used not only for decrypting the EPG screen in the subscriber terminal 400, but also in the wireless communication terminal 500 of the user, It is possible to realize a more efficient IPTV broadcasting service system.

4 is a detailed configuration diagram of a wireless communication terminal that facilitates decryption of a low-level encrypted data stream according to an embodiment of the present invention.

4, a wireless communication terminal 500 according to an exemplary embodiment of the present invention includes an encryption analysis unit 510, a buffer 520, a stream decoding unit 530, and a display unit 540, The analyzing unit 510 includes a UDP packet receiving unit 511, a TS packet extracting unit 512, a TS packet parsing unit 513, an encryption determining unit 514, a TS packet encryption analyzing unit 515, and a buffer 516 .

The encryption analysis unit 510 receives the low-level encrypted data stream generated by the stream server 100 from the wireless network server 300, decrypts only the I frame of the data stream, and transmits the decrypted data stream to the first buffer unit 520 .

The UDP packet receiving unit 511 receives the lower-level encrypted data stream generated by the stream server 100 as a UDP (User Datagram Protocol) packet and transmits it to the TS packet extracting unit 512.

The TS packet extractor 512 extracts a TS packet from the UDP packet received from the UDP packet receiver 511 and transmits the extracted TS packet to the TS packet parser 513.

The TS packet parser 513 interprets the TS packet extracted from the TS packet extracting unit 512 as an I frame, a B frame, and a P frame, and transmits the TS packet to the encryption deciding unit 514. [

The encryption determination unit 514 determines whether or not the TS packet has been encrypted for the I frame of the TS packet analyzed by the TS packet parser 513. If the encryption is successful, the encryption determination unit 514 transmits the encrypted TS packet to the TS packet encryption unit 515, To the second buffer 516.

The TS packet encryption / decompression unit 515 decrypts only the I frame of the encrypted TS packet received from the encryption decryption unit 514 and transmits it to the second buffer 516.

The second buffer 516 stores the TS packet decoded only for the I frame.

The first buffer 520 reassembles TS packets decoded only by the I frame from the encryption analysis unit 510, and transmits the TS packets to the stream decoding unit 530.

The stream decoding unit 530 decompresses the TS packet stream received from the first buffer 520 and transmits the uncompressed TS packet stream to the display unit 540. That is, the stream decoding unit 530 decodes the low-level decoded data stream so as to be decoded and reproduced in the low-end wireless communication terminal 500, and transmits the decoded data stream to the display unit 540.

The display unit 540 displays the lower-level decoded data stream received from the stream decoding unit 530 on the content reproduction screen.

As described above, the wireless communication terminal 500 according to an embodiment of the present invention can decode the broadcast content and the moving picture mosaic EPG using the low-latency encrypted data stream and display the content on the content playback screen.

5 is a flowchart illustrating a method for preventing unauthorized use of broadcast contents according to an exemplary embodiment of the present invention.

In step S11, the stream server 100 receives the digital broadcasting contents from the broadcasting company, and then proceeds to step S12 to encrypt the received broadcasting contents.

In step S13, the stream server 100 encrypts all of the I frame, the B frame, and the P frame of the broadcast content to generate a high-quality encrypted data stream. Then, the flow proceeds to step S14, To generate a lower-level encrypted data stream.

In step S15, the stream server 100 receives a request for transmission of broadcast content from the subscriber terminal 400 of the user permitted to view the broadcast content, and then proceeds to step S16 to transmit the high- Or transmits the low-level encrypted data stream to the wired network server 200.

In step S17, the wired network server 200 transmits to the subscriber terminal 400 the high-grade encrypted data stream or the low-grade encrypted data stream received from the stream server 100. [

In step S18, the subscriber station 400 decodes the high-grade encrypted data stream or the low-advanced encrypted data stream received from the wired network server 200, and then proceeds to step S19 to transmit the decoded data stream In real time on the content playback screen as broadcast content.

In step S20, the stream server 100 receives a request for transmission of broadcast content from the wireless communication terminal 450 of the user permitted to view the broadcast content, and then proceeds to step S21 to transmit the low- And transmits the stream to the wireless network server 300.

In step S22, the wireless network server 300 transmits the low-level encrypted data stream received from the stream server 100 to the wireless communication terminal 500. [

In step S23, the wireless communication terminal 500 decrypts the lower-level encrypted data stream received from the wireless network server 300, and then proceeds to step S24 to reproduce the decrypted data stream as broadcast content Displays in real time on the screen.

6 is a flowchart illustrating a method of generating an encrypted data stream for preventing unauthorized use of broadcast contents according to an exemplary embodiment of the present invention.

In step S31, the stream server 100 receives digital broadcast contents provided as a UDP (User Datagram Protocol) packet from a broadcasting company.

In step S32, the stream server 100 extracts a TS packet from the UDP packet received from the broadcasting company, and then proceeds to step S33 to analyze the extracted TS packet into an I frame, a B frame, and a P frame.

In step S34, the stream server 100 determines whether or not each frame of the TS packet is encrypted. If not, the flow advances to step S35 to encrypt the unencrypted TS packet. At this time, the stream server 100 may encrypt the I frame, the B frame, and the P frame of the unencrypted TS packet to generate a highly encrypted data stream, or encrypt only the I frame to generate a low- have.

FIG. 7 is a flowchart illustrating a method for decoding a low-level encrypted data stream in a wireless communication terminal according to an exemplary embodiment of the present invention.

In step S41, the wireless communication terminal 500 receives the lower-level encrypted data stream generated by the stream server 100 from the wireless network server 300 as a UDP (User Datagram Protocol) packet.

In step S42, the wireless communication terminal 500 extracts a TS packet from a UDP (User Datagram Protocol) packet received from the wireless network server 300, and then proceeds to step S43 to transmit the extracted TS packet to the I frame , B frame and P frame.

In step S44, the wireless communication terminal 500 determines whether or not the I frame of the analyzed TS packet is encrypted. If the TS packet is encrypted, the wireless communication terminal 500 proceeds to step S45 to extract only the I frame of the TS packet, do.

In step S46, the wireless communication terminal 500 reassembles and decodes the TS packet decoded only for the I frame, and then proceeds to step S47 to display the lower-level decoded data stream on the content playback screen.

As described above, since the wireless communication terminal 500 according to the embodiment of the present invention receives the encrypted data stream of low-level and decodes only the I frame, the wireless communication terminal 500 can reproduce the broadcast content using a low- Can be reproduced. Also, the wireless communication terminal 500 may decode the video mosaic EPG screen using the low-latency encrypted data stream and display the decoded video mosaic EPG screen on the content playback screen.

One embodiment of the present invention may also be embodied in the form of a recording medium including instructions executable by a computer, such as program modules, being executed by a computer. Computer readable media can be any available media that can be accessed by a computer and includes both volatile and nonvolatile media, removable and non-removable media.

It will be understood by those skilled in the art that the foregoing description of the present invention is for illustrative purposes only and that those of ordinary skill in the art can readily understand that various changes and modifications may be made without departing from the spirit or essential characteristics of the present invention. will be. It is therefore to be understood that the above-described embodiments are illustrative in all aspects and not restrictive. For example, each component described as a single entity may be distributed and implemented, and components described as being distributed may also be implemented in a combined form.

The scope of the present invention is defined by the appended claims rather than the detailed description and all changes or modifications derived from the meaning and scope of the claims and their equivalents are to be construed as being included within the scope of the present invention do.

1 is a schematic block diagram of a general IPTV broadcasting service system.

2 is a diagram illustrating a connection relationship of an illegal use prevention system of broadcast contents according to an exemplary embodiment of the present invention.

3 is a detailed configuration diagram of a stream server according to an embodiment of the present invention.

4 is a detailed configuration diagram of a wireless communication terminal that facilitates decryption of a low-level encrypted data stream according to an embodiment of the present invention.

5 is a flowchart illustrating a method for preventing unauthorized use of broadcast contents according to an exemplary embodiment of the present invention.

6 is a flowchart illustrating a method of generating an encrypted data stream for preventing unauthorized use of broadcast contents according to an exemplary embodiment of the present invention.

FIG. 7 is a flowchart illustrating a method for decoding a low-level encrypted data stream in a wireless communication terminal according to an exemplary embodiment of the present invention.

Claims (12)

A system for preventing unauthorized use of broadcast contents in an IPTV broadcast service, A stream server for receiving broadcast contents from a broadcasting company and generating an encrypted data stream of the first specification and an encrypted data stream of the second specification, A wired network server for receiving the encrypted data stream of the first specification and providing the encrypted data stream to a wired subscriber terminal, And a wireless network server for receiving the encrypted data stream of the second specification and providing the encrypted data stream to the wireless communication terminal, And the encrypted data stream of the second specification is generated in the process of generating the encrypted data stream of the first specification. The method according to claim 1, Wherein the encryption of the second specification encrypts only the I frame of the broadcast content. 3. The method of claim 2, Wherein the stream server comprises: an encryption unit for receiving digital broadcasting data from a broadcasting company and encrypting the digital broadcasting data with the encrypted data stream of the first specification and the encrypted data stream of the second specification; A first TS buffer unit for reordering the encrypted data stream of the first specification and the encrypted data stream of the second specification into TS (Transport Stream) packets, A multicasting stream transmission unit for transmitting an encrypted data stream of the first specification read from the TS packet and an encrypted data stream of the second specification on a multicasting channel, The system comprising: The method of claim 3, The encryption unit, A UDP packet receiving unit for receiving broadcast contents provided as UDP (User Datagram Protocol) packets from a broadcasting company, A TS packet extracting unit for extracting a TS packet from the received UDP packet, A TS packet parser for analyzing the extracted TS packet into an I frame, a B frame, and a P frame, An encryption deciding unit for deciding whether or not the TS packets analyzed as the I frame, the B frame, and the P frame are encrypted for each frame, A TS packet encryption unit for encrypting the unencrypted TS packet; A second TS buffer unit for storing the encrypted TS packets; The system comprising: 5. The method of claim 4, Wherein the encryption determination unit transmits the TS packet to the second TS buffer unit when the TS packet is encrypted and transmits the TS packet to the TS packet encryption unit if the TS packet is not encrypted. The method according to claim 1, The wired network server receives the encrypted data stream of the first specification and provides it to a wired subscriber terminal, The encrypted data stream of the first specification provided to the subscriber terminal is decrypted in the subscriber terminal and displayed on the content reproduction screen, and the encrypted data stream of the second specification provided to the subscriber terminal is decrypted in the subscriber terminal, (EPG) screen, wherein the broadcast content is displayed in an EPG screen. A method for preventing unauthorized use of broadcast contents in an IPTV broadcast service, Receiving broadcasting contents from a broadcasting company, Encrypting the received broadcast content with a data stream of a first specification and a data stream of a second specification, Providing an encrypted data stream of the first specification to a wired subscriber terminal; and Providing the encrypted data stream of the second specification to the user's wireless communication terminal , ≪ / RTI & Wherein the encrypted data stream of the second specification is generated during the generation of the encrypted data stream of the first specification. 8. The method of claim 7, Wherein the step of encrypting the broadcast content comprises: Extracting a TS packet from a UDP packet received from the broadcasting company, Analyzing the extracted TS packet as an I frame, a B frame, and a P frame to determine whether the TS packet is encrypted for each frame; and Encrypting the TS packet in which the TS packet is not encrypted The method comprising the steps of: 8. The method of claim 7, Wherein the encryption of the second specification encrypts only the I frame of the broadcast content. A user terminal for reproducing an encrypted data stream, An encryption analyzer for receiving the encrypted data stream to extract an I frame and decrypting the extracted I frame, A first buffer unit for reassembling the data stream decoded only by the I frame, A stream decoding unit decoding the decoded data stream; A display unit for displaying the decoded data stream on a content reproduction screen, , ≪ / RTI & The encryption / A UDP packet receiver for receiving the encrypted data stream generated by the stream server as UDP (User Datagram Protocol) A TS packet extracting unit for extracting a TS packet from the received UDP packet, A TS packet parser for analyzing the extracted TS packet into an I frame, a B frame, and a P frame, An encryption determination unit for determining whether to encrypt an I frame of the TS packet, A TS packet encryption / decryption unit for decrypting only the I frame of the encrypted TS packet; A second buffer for storing a TS packet decoded only by the I frame And a user terminal. delete 11. The method of claim 10, Wherein the encryption determination unit transmits the TS packet to the TS packet encryption / decompression unit when the I frame of the TS packet is encrypted, and transmits the I frame to the second buffer if the TS packet is not encrypted.

Images