KR20060117605A - Media information access authority management method for home network - Google Patents

Abstract

A method for managing information access authority in a home network is provided to classify various media contents by each directory in data storage space and manage the classified media contents, and restrictively set access authority of the media contents according to users in the each directory, thereby facilitating access authority establishment of desired media contents and enabling individual information security for data which does not desire the thing which other users get access to. A method for managing information access authority in a home network comprises the following steps of: classifying media contents of a storage device(90) by plural directories in a control application(50) registered as an owner of media contents among plural control applications(50,60); and restrictively establishing authority of users who have access to the media contents by the plural directories in which the media contents are classified.

Description

MEDIA INFORMATION ACCESS AUTHORITY MANAGEMENT METHOD FOR HOME NETWORK}

1 is a diagram illustrating a configuration of a general UPnP AV network;

2 is a diagram illustrating a configuration of a UPnP AV network for implementing an information access authority management method according to the present invention;

3 is a diagram illustrating a state of setting access rights for each user for media content managed by a media server according to an exemplary embodiment of the present invention;

4 is a view showing the access authority setting state in the directory structure classified for each user according to the present invention,

FIG. 5 is a diagram illustrating a user-specific access authority setting state in a directory structure classified as shown in FIG. 4;

FIG. 6 is a diagram illustrating an example of confirming a user's identity when accessing a directory managing media content using HTTP;

7 is a diagram illustrating an example of setting an access structure file to restrict access to directories classified by users when using a web server according to the present invention;

8 is a diagram illustrating a setting input state of a password for access using HTTP for each user according to the present invention.

<Description of the symbols for the main parts of the drawings>

50, 60: control point (CP), 70: media server,

80: Media Renderer.

The present invention relates to a method of managing information access rights in a home network, and more particularly, to restrict access rights per user to media content managed by a media server in a UPnP (Universal Plug and Play) home network. The present invention relates to a method of managing information access rights in a home network for setting and managing.

In general, in order to perform a presentation on desired media content by performing a stream service using standard networking technologies such as IP and HTTP while storing and managing various media content materials on a local network. UPnP AV network technology has been proposed.

In such a UPnP AV network, a device existing in the network is automatically discovered and modeled as an action and a state variable for the service of the device, and used by a control point (CP) or another device. To make that service available.

That is, FIG. 1 is a diagram illustrating a configuration of a general UPnP AV network. The UPnP AV network according to FIG. 1 includes control points 10 and 20 for controlling each device and devices for providing various services. Points (CP) 10 and 20 are designed to find, control, and receive events through the providing interface.

The control points 10 and 20 may be mounted together in UPnP devices (for example, personal computers (PCs) or PDAs) that perform different services as one application, and separately in a plurality of devices in the home. It can be mounted.

In addition, the UPnP network holds various contents such as a media server 30 that provides various media data, a media renderer 40 that reproduces media data, media data in a home network, and the like. An external storage device 45 is included. The media server 30 and the media renderer 40 are controlled by respective control points 10 and 20, and media from the media server 30 is stored. Media Streaming is based on various known transport protocols.

The media server 30 stores information on media files held by the server and information on media files held by the external storage device 45 through a content directory service (CDS). Each of the control points 10 and 20 can be viewed, and the information about the media file includes information such as the name of the media file, format, file size, presentation time, uniform resource location (URL), file type, and the like. It includes.

On the other hand, in such a UPnP AV network, a protocol different from UPnP (for example, IEEE1394 or HTTP GET) can be used as a transport protocol for media content. In this method, the media renderer 40 for presenting the media content material plays a role of controlling the flow of the media content material.

In such a UPnP AV network, a streaming service of media content managed through a content directory service (CDS) of the media server 30 is used. The UPnP AV network uses a protocol of the CIFS (Common Internet File System) and an HTTP service. have.

In the UPnP AV network, the UPnP AV standard does not include the contents of access control of media content data. Therefore, there is no function to restrict access rights of media content data for each user. The protection function for media content materials is weak.

In recent years, the CIFS service allows users to restrict access to media content by setting access rights for each user. In order to enable media streaming services to the media renderer, the media content can be accessed through the HTTP protocol. To enable access to the data, the user with HTTP access rights should be given the right to read the media content, and other users with accounts on the media server will be able to access the media content data through the CIFS service. .

However, in the case of setting access rights per user through the CIFS service, it is possible to prevent users who do not have an account on the media server from accessing the media content data through HTTP. All the media content managed by the media server can be accessed without restriction using CIFS service, so that the access rights of individual media content can be restricted or other users can be restricted according to the specific category of media content. There is a problem that it is impossible to do.

Accordingly, an object of the present invention is to solve the above problems, and an object thereof is to provide a method for managing access to information in a home network, which enables a user to restrict access to individual media content data in a UPnP AV network. .

Another object of the present invention is to provide a method of managing information access rights in a home network, which allows media content managed by a media server to be classified for each user directory and restricts accessible users for each classified directory.

In order to achieve the above object, according to the present invention, in a method of serving media content of a storage device by control by a plurality of control applications connected to a network, among the plurality of control applications, the user is registered as an owner of the media content. In the controlled application, the media content of the storage device is classified into a plurality of directories, and setting the authority of a user who can access the media content by a plurality of directories in which the media content is classified. It provides a method of managing information access authority in a home network.

Hereinafter, the present invention configured as described above will be described in detail with reference to the accompanying drawings.

That is, FIG. 2 is a diagram illustrating a configuration of a UPnP AV network for implementing the information access right management method according to the present invention.

As shown in FIG. 2, the UPnP AV network for implementing the method of the present invention manages various media data through a plurality of control points 50 and 60 for controlling a device and a content directory service (CDS). A media server 70 providing a streaming service of media data, a media renderer 80 for playing media data, and a media renderer 80 through the media server 70 having various media data in a network of a home. It consists of an external storage device 90 that provides media data.

Among the plurality of control points 50 and 60, a specific control point 50 is registered as an owner of various media data of the external storage device 90 managed by the media server 70, and is assigned to each media data. Set access rights for other users.

In addition, the control point 60 which is not registered as an owner among the plurality of control points 50 and 60 is prohibited from access using the CIFS service, and the media server 70 and the media renderer 80 use HTTP. Ensure access is prohibited.

In the external storage device 90, a plurality of directories are classified so that access rights for various media data can be set, so that only the owner of the media data can be accessed, and access using CIFS service is impossible. However, separate directories should be set up so that only limited access is available to group users and users with accounts.

The media server 70 manages directory-specific classification information for media data of the external storage device 90 through a content directory service (CDS).

As illustrated in FIG. 3, a directory managing media data is classified into a directory A and a directory B, and access to HTTP A and access to CIFS are prohibited from the directory A, but the owner of the media data is prohibited. By setting only limited access, only the owner has read / write / execute authority to the media data, and even the group user whose group authority is set is prohibited.

In addition, to allow the owner of the media data to access the directory B, and to allow other users to access through HTTP, access to the user or group authority specified by the web server, while using the CIFS service Do not allow access.

That is, for Directory B, only the owner of various media data has the right to read / write / execute media data, give access to individual users who have an account on the web server, and media data for users designated as a group. Have read / execute permissions for.

In the permission setting state of the directory structure illustrated in FIG. 4, the owners, groups, and accesses of directories A (/ home / <user> / <directory A>) and directories B (/ home / <user> / <directory A>) are accessed. The degree of approval of the authority will be specified.

In FIG. 5, an aspect of the personal directory illustrated in the table of FIG. 4 is illustrated. An example of the structure and the authority of the directory is set.

In FIG. 6, although the media data in Directory B is not accessible to other users using CIFS, access using HTTP is possible, thereby preventing unauthorized access through the URL of each media data. The process of verifying the user's identity is shown.

In FIG. 6, a process of inputting a user name and a password when accessing a URL of specific media data of a web server through HTTP is performed. A user having an account for the directory B may have a user name and a password. By inputting the desired media data can be accessed.

Meanwhile, FIG. 7 exemplarily illustrates a state in which an access structure file (access.conf) is set to restrict access to a directory in which access authority is set when using an Apache web server.

In addition, FIG. 8 illustrates a process of setting a password for allowing a specific user to access a specific directory through HTTP, and a password file for the user is generated by the password setting process as illustrated in FIG.

In the state where the media data of the external storage device 90 managed by the media server 70 is managed by dividing the directory data into the directory A and the directory B, another user who is allowed to access the media data managed in the directory A is HTTP. To make it accessible through, move the media data from Directory A to Directory B, but move the media data from Directory B to Directory A if you do not want HTTP access to specific media data in Directory B. .

In this case, even though each media data is managed separately by the directory A and the directory B, each media data is actually stored in one partition of the hard disk constituting the external storage device 90, and between the two directories. Moving the media data does not physically move the media data to other hard disks or partitions, but to modify only the information for designating a file in a table of the file system so that the media data can be moved between directories.

In the meantime, when the media data is moved between the directory A and the directory B, the media server 70 transfers the movement information of the media data from the external storage device 90 to the media server 70. It is possible to register the movement information of the media data in the Content Directory Service (CDS), and the control point can know the movement of the media data of each media data through the Content Directory Service (CDS) of the media server 70. Will be.

On the other hand, the present invention is not limited to the above-described typical preferred embodiments, but can be carried out in various ways without departing from the gist of the present invention, various modifications, alterations, substitutions or additions are common in the art Those who have knowledge will easily understand. If the implementation by such improvement, change, replacement or addition falls within the scope of the appended claims, the technical idea should also be regarded as belonging to the present invention.

As described above, according to the present invention, it is possible to classify and manage various media contents provided by the HTTP and CIFS protocols in the data storage space for each directory in the UPnP AV network, and to control the access rights of the media contents for each directory. As it can be set in a limited way, it is possible to easily set the access rights of the desired media content material, it has the effect that the individual information security for the material that does not want to access other users.

Claims (4)

A method of serving media content of a storage device by control by a plurality of control applications connected to a network, the method comprising: A first step of classifying media contents of the storage device into a plurality of directories in a control application registered as an owner of the media contents among a plurality of control applications; And a second step of restricting a user's right to access the media content for each of the plurality of directories in which the media content is classified. The method of claim 1, In the first step, the plurality of directories includes a directory accessible only by a control application registered as an owner and a directory for ensuring that only a group user or a user whose account is registered has access rights. How to manage information access rights in. The method of claim 1, In the second step, the authority is set so that access to the media content stored in the plurality of directories is prohibited using CIFS (Common Internet File System) service, and the authority is set to allow access using the HTTP protocol. How to manage information access rights on your home network. The method according to claim 1 or 2, In the second step, at least one directory in the plurality of directories is set such that only a control application registered as an owner has access rights. The other directory, the user registered as an owner, a user having a group authority, the individual is registered, the authority is set to allow access to the media content, characterized in that the access rights management method in the home network.

Images