KR20040094098A - Method and appratus for authentication - Google Patents

Abstract

PURPOSE: A certification method and a device thereof are provided to perform certification without supporting all certification methods if contents are obtained from Internet servers using the different certification methods through the contents recorded in a disk. CONSTITUTION: A reader(11) reads data from the disk by control of a controller(13) and provides the data to a buffer(12). The buffer buffers the data. The controller is equipped with a presentation engine(15). The presentation engine transmits ID information to a server by connecting to the server through the Internet and executing a program code received from the server, receives the requested contents from the server if the certification is successful, and plays the requested contents. If the certification is unsuccessful, a message informing a failure is received from the server and is displayed to a displayer(14). The presentation engine extracts the information including a disk sort and a contents form from the disk, and transmits the information to the server by executing the program code.

Description

Authentication method and device therefor {Method and appratus for authentication}

The present invention relates to a reproduction device for reproducing interactive content produced using a markup language, wherein the reproduction device retrieves or reads interactive content from the Internet or a disc.

Content identification information recorded on a conventional disk or present in a server of the Internet is not defined. Therefore, conventionally, the playback apparatus directly identifies the contents and authenticates that the disc is genuine. That is, in the case of content recorded on a CD, titles are identified by the track playing time and the number of tracks. In the case of DVD-VIDEO, the titles are identified by the number of titles, the number of chapters, and the playback time of the title. It was identified by the number of albums, the number of groups, the number of tracks, and the track playing time. In addition, only after the server has been authenticated, the content can be retrieved from the server.

However, according to the conventional authentication method, there is an inconvenience in that the playback apparatus has to find a new identification information every time the format of the content is changed and to embed a method for authenticating the disc based on this. Furthermore, different companies (eg, CDDB, etc.) that provide the content have different ways of identifying the content, and it is virtually impossible for the playback apparatus to support all of them.

The same is true when the content exists on a server of the Internet. In order to download predetermined content from a plurality of servers employing different authentication methods, the playback apparatus must support the authentication methods for all servers.

Accordingly, a technical problem to be solved by the present invention is to obtain a predetermined content from an Internet server employing a plurality of different authentication methods through a content recorded on the disc in a reproducing apparatus for obtaining predetermined content from a disc and the Internet. In this case, the present invention provides a method, a server, and a playback device that enable authentication to be performed without supporting all of the authentication methods.

1 is a schematic diagram for explaining the present invention,

2 is a block diagram of a playback device 1 according to the present invention;

3 is a reference diagram for explaining the authentication according to a preferred embodiment of the present invention in relation to the screen of the display 14,

4 is a flowchart illustrating an authentication method according to a preferred embodiment of the present invention.

According to the present invention, (a) transmitting a program code for executing authentication in response to a request for content that requires authentication from a playback device; (b) the program code is executed in the playback device and sent Receiving identification information for authentication to perform authentication; And (c) if the result of the authentication is successful, transmitting the requested content to the playback device, and if not, transmitting a message indicating the failure to the playback device.

The step (a) preferably includes transmitting an authentication markup document as the program code, and particularly, the step of transmitting the program code using an HTTP 401 error code.

In addition, the technical problem is (a) by executing the program code received from the server, transmitting the identification information for authentication to the server; And (c) if the authentication is successful, receiving the requested content from the server, and if the authentication is failed, receiving a message from the server informing of the failure.

Preferably, the step (a) includes executing the program code and extracting predetermined information including the type of the disc and the type of the content recorded on the disc from the disc and transmitting the predetermined information to the server.

On the other hand, according to another field of the present invention, the technical problem is a reader for reading data from the disk under the control of the controller to provide a buffer; A buffer for buffering data; And accessing the server via the Internet and executing the program code received from the server, thereby transmitting identification information for authentication to the server, if authentication is successful, receiving and playing the requested content from the server, and failing if authentication is failed. It is also achieved by a playback device comprising a controller incorporating a presentation engine that receives a message informing the user from the server and displays the message on the display.

Preferably, the presentation engine executes the program code, extracts predetermined information including the type of the disc and the type of the content recorded on the disc from the disc, and transmits the predetermined information to the server. It is particularly desirable to support APIs for running UP documents.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a schematic diagram for explaining the present invention.

Referring to FIG. 1, the playback device 1 requests a predetermined content to the server 2 through a GET request based on the HTTP protocol RFC2616 (1). If the playback device 1 has not received the required authentication, the server 2 sends an authentication markup document for authentication to the playback device 1 with a 401 error of the HTTP protocol (2). The reproduction device 1 executes the received authentication markup document. The authentication markup document is a kind of program installed and executed in the playback device 1 to perform the authentication process. In this embodiment, the authentication markup document has JAVAScript code for authentication. When the authentication markup document is executed, as a result, identification information necessary for authentication is generated, and the generated identification information is transmitted to the server 2 through the GET request (③). The server 2 confirms the received identification information, performs authentication, and sends the authentication result back to the reproduction device 1 (④).

In the process ①, the following HTTP header is transmitted from the playback device 1 to the server 2.

GET /propriatematerial.cgi HTTP / 1.0

Date: Fri, 20 Sep 1996 08:20:58 GMT

Connection: Keep-Alive

User-Agent: ENAV 1.0 (SDP-100)

In the process ②, the following HTTP header and authentication markup document are transmitted from the server 2 to the playback device 1. In this case, the cookie may be used to include a server authentication request number. This is to prevent the reproduction device 1 from emulating as if it is authenticated.

HTTP / 1.0 401 Unauthorized

Date: Fri, 20 Sep 1996 08:20:58 GMT

Server: ENAV 1.0 (NCSA / 1.5.2)

Last-modified: Fri, 20 Sep 1996 08:17:58 GMT

Content-type: text / xml + html

Content-length: 200

Set-Cookie: server_req = "12345098761234509876"; Version = "1"; Path = "/"

The certification markup document is as follows.

<html> <head> <title> Authentication is required </ title> </ head> <body> <object data = ”dvd: //video_ts/video_ts.ifo” id = ”player” /> <script src = ” cookieutil.js ”language =” Javascript ”/> <script language =” Javascript ”/> seed = 100123; setCookie (“ hashKey ”, player.getHashKey (seed)); setCookie (“ authoringtype ”, player.authotingType); setCookie (“Disctype”, player.discType); location.href = “propriatematerial.cgi”; </ script> </ body> </ html>

In the process ③, the following HTTP headers are transmitted from the playback device 1 to the server 2.

GET / propriatematerial.cgi HTTP / 1.0

Date: Fri, 20 Sep 1996 08:20:58 GMT

Connection: Keep-Alive

User-Agent :: ENAV 1.0 (SDP-100)

Cookie: $ Version = "1";

server_req = "12345098761234509876"; $ Path = "/";

hashkey = "123AB1234"; $ Path = "/"

disctype = "1"; $ Path = "/"

In the process (4), the following HTTP header and markup document indicating authentication success or authentication failure are transmitted from the server 2 to the reproduction device 1 together. At this time, the server 2 may use a cookie in the HTTP header to insert an access identifier for authenticating authentication on the next access and transmit it to the playback device 1.

HTTP / 1.0 200 Forbidden

Date: Fri, 20 Sep 1996 08:20:58 GMT

Server: ENAV 1.0 (NCSA / 1.5.2)

Last-modified: Fri, 20 Sep 1996 08:17:58 GMT

Content-type: text / xml + html

Content-length: 83

Set-Cookie: server_req = "12345098761234509876"; Version = "1"; Path = "/"

Here is the markup document indicating the failure:

<html> <head> <title> Access denied </ title> </ head> <body> The access is denied because of using illegal disc. </ body> </ html>

Here is the markup document that indicates success.

<html> <head> <title> Access accepted </ title> </ head> <body> The access is accepted because of using legal disc. </ body> </ html>

As described above, the present invention is characterized in that the authentication markup document for authentication only, not for output on the screen, is transmitted from the server 2 to the reproduction device 1. When using the HTTP protocol, it is preferable to use the 401 error code.

2 is a block diagram of a playback device 1 according to the present invention.

Referring to FIG. 2, the playback device 1 includes a reader 11, a buffer 12, a controller 13, and a displayer 14. The presentation engine 15 is built in the controller 13. The presentation engine 15 connects to the server 2 and executes an authentication markup document obtained from the server 2 to perform authentication according to the present invention. In other words, the presentation engine 15 is an analysis engine for analyzing markup documents and script programs contained therein, and is a browser that connects to the Internet and fetches predetermined content from the server 2.

The reader 11 reads the contents recorded on the disk under the control of the controller 13 and provides them to the buffer 12. The buffer 12 buffers the content provided from the reader 11 or transmitted from the server 2 by the presentation engine 15. Displayer 14 displays a message indicating authentication success or authentication failure.

On the other hand, the presentation engine 15 supports the following API for executing the authentication markup document. The API is used to extract identification information for authentication from disk.

1. [obj] .discType

1) Content:

Know the disk type.

2) Return Value:

0 = Compact Disc

1 = DVD-ROM

2 = DVD-R

3 = DVD-RAM

4 = DVD-RW

5 = DVD + RW

2. [obj] .authoringType

1) Content:

Know the authored form.

2) Return Value:

0 = CDDA

1 = DVD-Video

2 = DVD-Audio

3. [obj] .getHashKey (seed)

1) Content:

Depending on the seed and the type of disk, information is read from the disk.

2) Parameters:

seed: CDDA-per track time combination in TTHHMMSSFF format and partial values within the frame

DVD-Video-32-bit logical sector number and part of the sector to read

DVD-Audio-32-bit logical sector number and part of the sector to read

3) Return Value:

Value extracted from the indicated position

CDDA-partial value within a frame

DVD-Video-Partial value of data of sector extracted from logical sector number

DVD-Audio-Partial value of data of sector extracted from logical sector number

3 is a reference diagram for explaining the authentication according to the preferred embodiment of the present invention in relation to the screen of the display 14.

Referring to FIG. 3, a user views a predetermined content recorded on a disc using the playback device 1 (①), or views a predetermined content taken from the Internet (②) and is displayed on the screen of the display 14. If you press the button (③) to view other content requiring authentication, the authentication markup document for authentication according to the present invention is transmitted from the Internet to the reproduction device 1 (④), and the transferred authentication markup document is reproduced. Identification information for authentication, which is executed in the device 1, is transferred back to the Internet to perform authentication. If the authentication is successful, the desired content is provided from the Internet and displayed on the screen (⑤). If the authentication fails, a message indicating the authentication failure is displayed on the screen (⑥).

Referring to the authentication method according to a preferred embodiment of the present invention based on the configuration as described above are as follows.

4 is a flowchart illustrating an authentication method according to a preferred embodiment of the present invention.

Referring to FIG. 4, the markup document designated as the start document is read (step 401), executed and displayed on the screen, and the user interacts with the user through the displayed markup document (step 402). During the mutual operation, if the user requests the display of other content (step 403), if the content is recorded on the disc, it is read from the disc (step 404). If the requested content is stored in the Internet, the content is requested to the server 2 (step 405). If authentication is necessary for access, the server 2 sends the authentication markup document to the playback device 1 (step 406), and the playback device 1 executes the server without displaying the authentication markup document on the screen. Authentication is requested in (2) (step 407). If the authentication fails (step 408), the playback device 1 displays a message indicating the authentication failure on the screen (step 409). If authentication is successful (step 408), the server 2 sends the content to the playback device 1, the playback device 1 plays the received content (step 410).

In the case of content that is accessible without authentication, the server 2 does not send the authentication markup document, but immediately sends the requested content. Accordingly, the playback device 1 plays back the content sent from the server 2 (step 410).

In addition, the above-mentioned authentication method can be created by a computer program. Codes and code segments constituting the program can be easily inferred by a computer programmer in the art. The program is also stored in a computer readable media, which is read and executed by a computer to implement the authentication method. The information storage medium includes a magnetic recording medium, an optical recording medium, and a carrier wave medium.

As described above, according to the present invention, each time a disc of a new format is produced and the content of a new format is developed, it is not necessary to support a method for disc authentication of a new type required by the content provider, but only according to the type of the disc. By adding only the function of reading the data recorded on the disc, the playback apparatus can access and authenticate various servers requiring various authentication methods and receive predetermined contents without supporting various authentication methods.

Thus, the user can determine whether the disk used by the user is illegal or legal. In addition, the content provider may increase the value of the content by providing the content only to authenticated users.

Claims (8)

(a) transmitting program code for executing authentication in response to a request for content requiring authentication from a playback device; (b) receiving identification information for authentication, which is executed by the program code being executed in the reproduction device, and performing authentication; And (c) if the authentication result is successful, transmitting the requested content to the playback device; and if the failure is successful, sending a message indicating the failure to the playback device. The method of claim 1, Step (a) is And transmitting an authentication markup document as said program code. The method of claim 1, Step (a) is Transmitting the program code using an HTTP 401 error code. (a) transmitting the identification information for authentication to the server by executing the program code received from the server; And (c) if the authentication is successful, receiving the requested content from the server, and if the authentication is failed, receiving a message indicating the failure from the server. The method of claim 4, wherein Step (a) is Executing the program code, extracting predetermined information including a type of a disc and a type of content recorded on the disc and transmitting the predetermined information from the disc to the server. A reader that reads data from the disk and provides it to the buffer under the control of the controller; A buffer for buffering data; And By accessing the server through the Internet and executing the program code received from the server, the identification information for authentication is transmitted to the server, and if authentication is successful, the requested content is received from the server and played back. And a controller incorporating a presentation engine that receives an informing message from the server and displays the message on a display. The method of claim 6, The presentation engine And executing the program code, extracting predetermined information including the type of the disc and the type of the content recorded on the disc from the disc and transmitting the predetermined information to the server. The method of claim 6, The presentation engine And an API for executing an authentication markup document as the program code.