KR20080066126A - Home server and method for performing authentication procedure thereof - Google Patents

Abstract

A home server and an authentication procedure performing method are provided to enhance the security function relating to the home network and to offer the convenience relating to the management of devices. A group managing member(110) classifies the plural devices into at least two groups previously set and generates and stores the node identifiers including identifiers relating to the groups and identifiers of devices. A generating member(120) generates the device authentication information by means of each node identifier and the property of each device. A control member(130) performs the authentication about the device within at least two groups by means of node identifiers and the device authentication information. The generating member generates the device authentication information by the exclusive logical sum calculation through the hash calculation value of the CEA-2027 file relating to the corresponding device, the node identifier and a secret key.

Description

Home server and method for performing authentication procedure

1 is a block diagram illustrating a configuration of a home server according to an exemplary embodiment.

2 is a block diagram showing the configuration of a home network based on the XHT protocol.

3 is a diagram illustrating an embodiment of classifying a group based on a location of a device.

4 is a block diagram showing a tree structure of a node identifier assigned to each device.

5 is a diagram illustrating an exclusive-OR operation for generating device authentication information.

6 is a block diagram illustrating a configuration of a home server according to another embodiment of the present invention.

FIG. 7 is a diagram illustrating a device list displayed on a display unit of a home server according to FIG. 6.

8 is a flowchart illustrating a method of performing an authentication procedure of a home server according to an embodiment of the present invention.

Explanation of symbols on the main parts of the drawing

110, 610: group management unit 120, 620: generation unit

130, 630: control unit 640: display unit

The present invention relates to a home server and a method for performing an authentication procedure thereof, and more particularly, to a home server for managing / authenticating a device constituting an XHT network for each group and a method for performing the authentication procedure thereof.

The XHT network is a network system using the XHT communication method. The XHT communication method is an IEEE 1394 cable capable of stably delivering a large number of high definition (HD) signals and an Internet protocol, a communication standard mainly used in the Internet. It is a technology that can control multiple digital TVs as well as video and audio devices connected to digital TVs using IP over 1394 protocol using IP).

IEEE 1394, a new serial interface standard standardized by the Institute of Electrical and Electronics Engineers (IEEE), was initially developed by Apple Computer Company under the name FireWire to replace the Small Computer System Interface (SCSI). In 1995, the IEEE formally adopted the standard. IEEE 1394 is developed as an interface for connecting not only computer peripherals but also home appliances such as video cameras, audio products, televisions, and video cassette recorders (VCRs) to personal computers (PCs). Data transfer rates are 100MB, 200MB, Three types of 400MB are prescribed.

Using this XHT communication method, a digital broadcast receiver is provided only in the DTV in the living room, and the digital TV receiver in the living room can be used to watch digital broadcasts even if the DTV is not equipped with a receiver. The same applies to a case where a DVD player, a home theater, a camcorder, and the like are connected only to a DTV in a living room. By connecting the DTV and the Internet, users can use various contents such as movies, music, games, and education with a simple remote control operation. In addition, the devices in the XHT network will include an embedded web server for performing XHT communication.

Embedded web server is a web server installed in a small network device, and its function is simpler than a general web server. Unlike a web server developed for general purpose computers such as personal computers and workstations, the software is designed to be mounted on small network devices with poor performance. It allows a web browser to connect to the embedded system to read the web document and connect to the network system to check the current status of the device and the network and to send control commands. That is, a network administrator having a mobile computer connected to the Internet enables management of a network device or a network connected thereto anytime, anywhere.

The IEEE 1394-based XHT network is convenient to use, but when the network environment is complicated, it contains the problems of the 1394 protocol. When moving from wired to wireless environment, such as wireless LAN, data security and access control such as wireless LAN are included. It has a vulnerability. In the current IEEE 1394 based protocol, since there is no authentication function for a device, the authentication function for a device is necessary when the network environment becomes complicated.

However, the IEEE 1394-based protocol has problems such as bus reset of the entire network and network disconnection due to the addition of each device in a chain form. In addition, since there is no authentication function of the internal network for the home network, there is a security problem when connecting to the home network from the outside.

The present invention is to solve the above-described problems, an object of the present invention is to manage / authenticate the devices constituting the XHT home network by group to improve the security function for the home network, and to provide the convenience of device management home It provides a server and a method of performing the authentication procedure.

According to an embodiment of the present invention for achieving the above object, a home server for performing the authentication procedure for the plurality of devices in a home network connecting a plurality of devices based on the XHT protocol, the plurality of devices Classify the device into at least two groups, and generate and store a node identifier including an identifier for the group and an identifier of each device, and device authentication information by using the node identifier and each device characteristic. And a generating unit for generating and a control unit for authenticating the devices in the at least two groups by using the node identifier and the device authentication information.

Preferably, the generation unit may generate the device authentication information by performing an exclusive OR operation on a hash operation of the CEA-2027 file for the corresponding device, the node identifier, and the secret key.

More preferably, the controller generates authentication information using a hashed value and a device identifier of the CEA-2027 file information of each device belonging to the same group, the node identifier of the corresponding device, and the device authentication information. Authentication may be performed by comparing the generated authentication information with the authentication information received from the corresponding device.

The display apparatus may further include a display unit configured to display a list of devices connected to the home server, wherein the controller may control the display unit to display the device items that succeed in the authentication in a corresponding group.

Also preferably, when the bus reset occurs in the home network, the controller may control the bus reset to occur only in a group to which the device that causes the bus reset belongs.

On the other hand, according to an embodiment of the present invention, in the home network for connecting a plurality of devices based on the XHT protocol authentication method of the home server performing the authentication procedure for the plurality of devices, (a) the Classifying a plurality of devices into at least two preset groups, (b) generating and storing a node identifier comprising an identifier for the group and an identifier of each device, (c) an identifier of each device, and Generating device authentication information using each device characteristic; and (d) authenticating a device in the at least two groups using the node identifier and the device authentication information.

Preferably, in the step (c), the device authentication information may be generated by performing an exclusive OR operation on the hash operation of the CEA-2027 file for the corresponding device, the node identifier, and the secret key.

More preferably, the step (d) may include authentication information using a hashed value and a device identifier of the CEA-2027 file information of each device belonging to the same group, the node identifier of the corresponding device, and the device authentication information. The authentication may be performed by comparing the generated authentication information with the authentication information received from the corresponding device.

Also preferably, when a bus reset occurs in the home network, the method may further include performing a bus reset only to a group to which the device that causes the bus reset belongs.

Hereinafter, with reference to the accompanying drawings will be described in detail with respect to the present invention.

1 is a block diagram illustrating a configuration of a home server according to an exemplary embodiment. According to FIG. 1, the home server 100 includes a group manager 110, a generator 120, and a controller 130.

The home server 100 may be implemented as a digital TV among devices constituting a home network based on the XHT protocol.

2 is a block diagram showing the configuration of a home network based on the XHT protocol.

DTV-centric XHT (eXpandable Home Theater) solution is based on the high bandwidth 1394 network to apply the Internet's web server and HTML web page functionality. The user may control the connected device with one remote controller 210 while watching the UI provided by the DTV 220.

Each of the XHT devices 220 to 240 may have a web server and a web page, and are connected to a DTV providing a UI to a user, and display a menu for controlling each device. The user may control the UI of the DTV using the remote controller 210, and the UI may control the corresponding device through a unique icon representing each device.

In addition, by providing a hot plug & play function between the devices 220 to 240, the user can easily connect and use the device. After mutual recognition is completed, newly connected device requests IP assignment from DHCP or HNCP server (DTV or other device) that assigns IP address in the home network and gets its own IP. When a device receiving an IP address receives a web page transmission request from a device providing a user UI such as a DTV, the device transmits its own web page, and a rendering device such as DTV displays the web page of the device to the user. The web page is composed of a web page in the form of an icon or a menu for controlling the device. In this case, the user selects the UI of the corresponding device in the DTV with the remote control to select the control of the device, and this command is transmitted to the corresponding device through the IEEE 1394 to provide a service desired by the user.

Specifically, each device 220 to 240 has its own web page and protocol for transmitting it (HTTP, TCP / IP, 1394 stack) and protocol for IP allocation service (DHCP / HNCP). In addition, AV / C is included to control audio / video functions, and CEA-2027 is commonly used to express device characteristics and functions.

The group manager 110 classifies and manages devices constituting the XHT home network into at least two groups. The classification criteria may be the location, function, etc. of the device. That is, devices in a specific space such as a room or a living room are managed as a group. It is possible to manage devices that perform similar functions in groups. It also plays a role in generating and storing a node identifier including an identifier for a group to which each device belongs and an identifier of each device.

3 is a diagram illustrating an embodiment of classifying a group based on a location of a device.

According to FIG. 3, devices constituting a home network may be classified and managed as a removable group 310, a room 1 group 320, a room 2 group 330, and a room 3 group 340.

The group manager 110 assigns the group identifiers R1 and the device identifiers r0, r1, and r2 to the devices 311 to 313 belonging to the removable group 310, respectively, and manages them in the form of node identifiers NR1r0, NR1r1, and NR1r2. can do. In addition, in the case of the devices 321 and 322 belonging to the Room 1 group 320, the group identifiers R2 and the device identifiers r0 and r1 may be allocated, and the devices 331 and 332 belonging to the Room 2 group 330 may be assigned. The group identifier R3 and the device identifiers r0 and r1 may be assigned to the device identifiers R4 and the device identifiers r0, r1 and r2 in the case of the devices 341 to 343 belonging to the Room 3 group 340. Here, the devices having the device identifier r0, that is, the devices connected to the DTV serving as the home server 100 may serve as a subset node for each group.

In addition, according to the function of each device, it may be classified into a living group, an AV group (audio / video group), a PC group (personal group), and the like. The living group includes a refrigerator, a washing machine, an air conditioner, a microwave oven, and the like, and the AV group includes a digital TV, a digital video disc (DVD), a VCD, etc., and the PC group may include a PC and a video telephone.

4 is a block diagram showing a tree structure of a node identifier assigned to each device. According to FIG. 4, the subset nodes 421 to 423 are connected to the root node 410, and the device nodes 431 to 436 belonging to each group are connected to each subset node.

The generation unit 120 performs dynamics of generating device authentication information using an identifier of each device and each device characteristic.

The generation unit 120 may generate the device authentication information by performing an exclusive OR operation on the hashed value, the device identifier, and the secret key of the CEA-2027 file for the corresponding device. Here, the secret key may be a unique number added to the device by the manufacturer who manufactures the device.

A hash algorithm is a type of cryptographic algorithm that allows one-way functions to compute function values through variables, that is, to find f (x) for a given x, but at f (x) = 0 To find a very difficult function. One-way functions are a key concept in public key cryptography. While not a protocol per se, one-way functions are the basis for most secure protocol implementations, especially digital signature protocols. Hash algorithm, therefore, is becoming an essential technology for cryptographic systems along with symmetric key cryptography and public key cryptography. The hash algorithm is a function that converts an input value of arbitrary finite length into an output value of fixed size. This output value is called a hash value, or message digest.

The generation unit 120 uses an exclusive logical sum using a hash value, a node identifier, and a secret key assigned to each device for the CEA-2027 file information indicating the function and characteristics of each device, that is, device manufacturer, type, and function. Device authentication information can be generated by performing an (exclusive OR) operation.

5 is a diagram illustrating an exclusive-OR operation for generating device authentication information.

According to FIG. 5, the generation unit 120 may include a node identifier 510 of the device 0 stored in the group manager 110, a hash value 520 of the CEA-2027 file information of the device 0, and a device 0 from the controller 130. The device authentication information for the device 0 may be generated by performing an exclusive OR operation with the secret key 530 assigned to. Equation 1 expresses an operation performed by the generation unit 120 as an expression.

Device authentication information = (Node ID) XOR (H [2027]) XOR (Secret key)

Here, Node ID is a node identifier for each device, H [2027] is a hash value for CEA-2027 file information for each device, and Secret key is a secret key assigned to each device.

The controller 130 uses the node identifier stored in the group manager 110 and the device authentication information generated by the generator 120. Authentication can be performed for the device.

In detail, the controller 130 may generate authentication information using a hashed value of the CEA-2027 file information of each device belonging to the same group, a device identifier, a node identifier of the corresponding device, and device authentication information of the corresponding device. In addition, authentication may be performed by comparing the generated authentication information with the authentication information received from the corresponding device.

In addition, when the bus reset occurs in the home network, the controller 130 may control the bus reset to occur only in the group to which the device that causes the bus reset belongs.

6 is a block diagram illustrating a configuration of a home server according to another embodiment of the present invention. According to FIG. 6, the home server 600 includes a group manager 610, a generator 620, a controller 630, and a display 640. Detailed descriptions of components overlapping with those of the exemplary embodiment illustrated in FIG. 1 among the components illustrated in FIG. 6 will be omitted.

The display unit 640 displays a list of devices connected to the home server 600.

The controller 630 controls the display unit 640 to display the device items that have been successfully authenticated in the corresponding group.

FIG. 7 is a diagram illustrating a device list displayed on a display unit of a home server according to FIG. 6.

According to FIG. 7, DTV 1 and PVR 1 are included in the Room 1 group 710 and PVR 2 and NTU are included in the Room 2 group 720 among the device list 700 displayed on the display unit 640 of the home server 600. 1, PC, Printer are displayed in the Room 3 group 730, and MP3 and PDA are displayed in the Removable group 740.

8 is a flowchart illustrating a method of performing a device authentication procedure of a home server according to an embodiment of the present invention. According to the method of performing an authentication procedure according to FIG. 8, first, a plurality of devices are classified into at least two preset groups (S810). A node identifier including an identifier for each group and an identifier of each device is generated and stored (S820). Subsequently, device authentication information is generated using an identifier of each device and each device characteristic (S830). Thereafter, authentication of devices in at least two groups is performed using the node identifier and the device authentication information (S840).

In detail, in operation S830, the device authentication information may be generated by performing an exclusive OR operation on the hashed value, the node identifier, and the secret key of the CEA-2027 file for the corresponding device.

Specifically, in step S840, authentication information is obtained using a hashed value of the CEA-2027 file information of each device belonging to the same group, a device identifier, a node identifier of the corresponding device, and device authentication information of the corresponding device generated in step S830. The authentication information may be generated by comparing the generated authentication information with the authentication information received from the corresponding device.

As described above, according to the present invention, only the authenticated device is allowed to access the home network, thereby improving the security function for the home network. In addition, it provides convenience of device management through group authentication according to the location and function of the device. In addition, it is possible to solve the security vulnerability of data exposure and access control that occur while going to the wired and wireless IEEE 1394 environment, it is possible to facilitate the user.

In addition, although the preferred embodiment of the present invention has been shown and described above, the present invention is not limited to the above-described specific embodiment, the technical field to which the invention belongs without departing from the spirit of the invention claimed in the claims. Of course, various modifications can be made by those skilled in the art, and these modifications should not be individually understood from the technical spirit or the prospect of the present invention.

Claims (9)

A home server performing an authentication procedure for a plurality of devices in a home network connecting a plurality of devices based on an XHT protocol, A group manager configured to classify the plurality of devices into at least two groups, and to generate and store a node identifier including an identifier for the group and an identifier of each device; A generation unit generating device authentication information using the node identifiers and the device characteristics; And, And a control unit configured to authenticate the devices in the at least two groups by using the node identifier and the device authentication information. The method of claim 1, The generation unit, And generating the device authentication information by performing an exclusive OR operation on the hashed value of the CEA-2027 file for the corresponding device, the node identifier, and the secret key. The method of claim 2, The control unit, Authentication information is generated by hashing the CEA-2027 file information of each device belonging to the same group, the device identifier, the node identifier of the corresponding device, and the device authentication information, and received from the generated authentication information and the corresponding device. Home server, characterized in that to perform authentication by comparing the authentication information. The method of claim 1, And a display unit for displaying a list of devices connected to the home server. The control unit, And controlling the display unit to display the successful device item in the corresponding group. The method according to any one of claims 1 to 4, The control unit, When a bus reset occurs in the home network, the home server of claim 1, wherein only the group to which the device that causes the bus reset belongs controls the bus reset. In the home network for connecting a plurality of devices based on the XHT protocol authentication method of the home server performing the authentication process for the plurality of devices, (a) classifying the plurality of devices into at least two preset groups; (b) generating and storing a node identifier comprising an identifier for the group and an identifier of each device; (c) generating device authentication information using an identifier of each device and each device characteristic; And, and (d) authenticating the devices in the at least two groups by using the node identifier and the device authentication information. The method of claim 6, Step (c) is, And generating the device authentication information by performing an exclusive OR operation on the hashed value of the CEA-2027 file for the corresponding device, the node identifier, and the secret key. The method of claim 7, wherein In step (d), Authentication information is generated by hashing the CEA-2027 file information of each device belonging to the same group, the device identifier, the node identifier of the corresponding device, and the device authentication information, and received from the generated authentication information and the corresponding device. Method for performing an authentication procedure characterized in that the authentication is performed by comparing the authentication information. The method according to any one of claims 6 to 8, If a bus reset occurs in the home network, performing a bus reset only on a group to which the device that causes the bus reset belongs.

Images