KR20110047846A - System and method for providing video conference using conditional access system - Google Patents

Abstract

PURPOSE: A video conference service system and method thereof are provided to supply a video conference service by using a conditional access system in an IPTV(Internet Protocol Television) broadcasting service. CONSTITUTION: A video conference service system(200) allocates a channel for a video conference service, integrates video information data that is received from a user terminal, and transmits information through the allocated channel. A conditional access system(220) offers a control key corresponding to the allocated channel to a plurality of user terminals.

Description

System and method for video conferencing service using reception restriction system {SYSTEM AND METHOD FOR PROVIDING VIDEO CONFERENCE USING CONDITIONAL ACCESS SYSTEM}

The present invention relates to a video conferencing service system and method using a reception restriction system, and more particularly, to a system and method for providing a video conferencing service through strong security between subscribers using a reception restriction system in an Internet Protocol Television (IPTV) broadcasting service. It is about.

With the spread of the Internet and the development of digital broadcasting technology, the use of two-way broadcasting service (hereinafter referred to as IPTV broadcasting service) provided by using a high-speed internet network is increasing.

Two-way broadcasting service is a service that provides information service, video contents, and broadcasting to two-way broadcasting receivers (eg, IPTV, DMB receivers, set-top boxes, etc.) using high-speed Internet. Various contents and additional services provided by the Internet such as home banking, online games, and MP3 can be provided.

Meanwhile, the two-way broadcast service mainly adopts a conditional access system (CAS), which is a download security solution for selectively providing contents to subscribers. Restriction System (CAS) is a system that provides paid information only to authorized subscribers, and is a key solution for paid broadcasters such as satellite broadcasting and cable broadcasting and terrestrial broadcasting companies that are currently set free but are likely to be paid.

The general reception restriction system (hereinafter referred to as CAS) is as follows.

When contents such as video, audio, and data are supplied from program providers (PPs), information about the contents is also supplied, and the work on PPV, NVOD, IPPV, relay channel, etc. is scheduled and scheduled through the information. The information and the CW (Control Word) information from the scrambling unit is linked to generate an ECM and an Entitlement Management Message (EMM) encrypted by the CAS.

An Entitlement Control Message (ECM) is an entitlement control message used for content protection. The ECM generator receives program information and package information from a broadcast schedule generator to generate an ECM. The EMM is an entitlement management message used for subscriber authentication, and the EMM generator generates the EMM by receiving subscriber information and purchase information from the subscriber management system.

The ECM and EMM generated as described above are delivered to the multiplexer, and the video / audio is multiplexed with the compressed stream and sent to the receiver of the home. Authentication and filtering are performed, and the information is used to provide video / audio to the user.

In order to provide a video conference using a two-way broadcast service, a key is distributed to subscribers like a public key method through a subscriber-to-end communication method that is conventionally used in a video telephone. To encrypt and decrypt.

However, if a predetermined key is distributed to a plurality of subscribers for video conferencing communication between subscribers, there is a problem that a security vulnerability such as eavesdropping or theft due to key leakage occurs. In particular, the security problem is very important because it is widely used in the case of video conferencing communication.

To this end, an additional introduction of a new system is required to provide a video conference service in an IPTV broadcasting service, but there are many difficulties due to problems such as system interworking and cost.

An embodiment of the present invention provides a system and method for providing a video conferencing service through strong security between subscribers using a reception restriction system in an IPTV broadcasting service.

As a technical means for achieving the above-described technical problem, the first aspect of the present invention, the image information received from the user terminals connected to the assigned channel, and assigns a channel for a video conferencing service to a plurality of user terminals A broadcast service system for integrating data and transmitting the same to the user terminals and a reception limiting system for providing a control key corresponding to the assigned channel to the plurality of user terminals, wherein the control key comprises: each of the user terminals; It is possible to provide a video conferencing service system which is used to scrambling image information data photographed by the user.

In addition, a second aspect of the present invention, a message processing unit for receiving an encrypted control key from the reception restriction system, and decrypting the encrypted control key; An image information data generation unit which scrambles the image information data photographed by the image processing apparatus using the decoded control key and transmits the scrambled image information data to the IPTV broadcasting service system; And a descrambler configured to descramble integrated image information data received from the IPTV broadcasting service system using the decrypted control key, wherein the encrypted control key and the descrambled integrated image information data are used to provide a video conferencing service. The control key may be provided through a separate broadcast channel, and the control key corresponds to the set broadcast channel, and may provide a user terminal for transmitting and receiving data to and from the IPTV broadcast service system and the reception restriction system.

In addition, a third aspect of the present invention provides a method of providing a video conferencing channel comprising: allocating a video conferencing channel for the video conferencing service; Incorporating image information data received from each user terminal through the channel; Generating a control key for decrypting the integrated image information data corresponding to the assigned channel; And providing the integrated image information data and the control key to the user terminal through the channel, wherein the image information data is encrypted using the control key in the user terminal. A video conference service method of a system that provides a video conference service may be provided.

According to one of the problem solving means of the present invention described above, by providing a separate video conferencing channel to a user terminal to use video conferencing, it is possible to expect the effect of using a smooth video conferencing service.

In addition, according to one of the other problem solving means of the present invention, by using the existing reception restriction system to encrypt the data of the control key provided to each user terminal participating in the video conference to decrypt the video information data and at the same time In order to protect the image information data, it is possible to expect the effect to be used more safely.

DETAILED DESCRIPTION Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings so that those skilled in the art may easily implement the present invention. The present invention may, however, be embodied in many different forms and should not be construed as limited to the embodiments set forth herein. In the drawings, parts irrelevant to the description are omitted in order to clearly describe the present invention, and like reference numerals designate like parts throughout the specification.

Throughout the specification, when a part is said to "include" a certain component, it means that it can further include other components, without excluding other components unless specifically stated otherwise.

Hereinafter, the overall configuration of the video conference service system 200 according to an embodiment of the present invention will be described.

1 is an overall configuration diagram of a video conferencing service system 200 according to an embodiment of the present invention.

As shown in FIG. 1, the video conferencing service system 200 according to an exemplary embodiment of the present invention generally includes an IPTV broadcasting service system 210 and a conditional access system (CAS) 220. Then, data is transmitted and received with the plurality of user terminals 100 through a network.

The IPTV broadcast service system 210 includes an IPTV broadcast provider 211, a video conference information processor 212, a control key manager 213, and a channel allocator 214.

The IPTV broadcast providing unit 211 performs a function of receiving an IPTV broadcast from a broadcast provider and providing it to the plurality of user terminals 100. Here, the broadcaster plays a role in producing, editing, and changing broadcast content and providing the broadcast content to the IPTV broadcast provider 211. The broadcaster may include a program provider (PP), a terrestrial wave or a content provider (CP). In addition, broadcast content provided by a broadcaster may include existing broadcast content and rich content on the Internet.

At this time, the IPTV broadcasting provider 211 provides access information for video conference access together with the broadcast content.

Here, the IPTV broadcast provider 211 includes a headend device that manages broadcast content for an IPTV broadcast service. The headend device receives and manages broadcast content from a broadcaster and distributes content to the user terminal 100 to provide broadcast / recording / playback services. The broadcast content may include additional information related to broadcast data in addition to broadcast data and an electronic program guide (EPG) for the additional information.

The video conference information processing unit 212 performs a channel management for video conferencing between the plurality of user terminals 100 and a video information data processing function between the user terminals 100.

In detail, the video conferencing information processing unit 212 requests a channel allocation from the user terminal 100 to the channel allocating unit 214 to allocate the video conference channel based on the video conferencing channel generation request information, and assigns the request by the request. The video conference channel to the user terminal 100. In this case, the video conferencing information processing unit 212 may request access to one or more user terminals 100 selected by the subscriber for video conferencing between the plurality of user terminals to participate in the video conferencing channel.

In addition, the video conference information processing unit 212 descrambles the scrambled image information data received from the user terminal 100 using a control key (CW) stored in the control key management unit 213 and descrambles the descrambled image information data. The image information data can be provided to the scrambling unit 221 which will be described later.

At this time, the video conferencing information processing unit 212 descrambles the video information data received from the one or more user terminals 100 by using a control key, and then integrates the video information data to generate the integrated video information data including the subscriber-specific video information data. The generated data may be provided to the scrambling unit 221 which will be described later. Furthermore, the integrated image information data may be generated as one image data, and may be provided through a channel allocated to each user terminal 100 after being rescrambled by the scrambling unit 221 using the control key.

In addition, the video conferencing information processing unit 212 may provide the user terminal 100 with content preset by the administrator until the video data is received from the user terminals 100. In this case, the set content may be advertisement content.

In addition, the video conferencing information processing unit 212 acquires the information of subscribers connected to the video conference channel from the subscriber management system managing the IPTV broadcasting service subscriber information, and includes the acquired subscriber information and information on the channel. Information can be provided to the reception restriction system. In this case, the acquired subscriber information includes subscriber identification information and user terminal information, and the user terminal information includes a media access control address (MAC) address or an internet protocol (IP) address.

The channel allocator 214 receives a channel assignment request from the video conferencing information processing unit 212 and allocates one channel among preset video conferencing channels, and provides the allocated video conferencing channel to the video conferencing information processing unit 212. Do it.

The control key manager 213 stores a control key received from the reception restriction system 220 and provides the stored control key to the video conference information processor 212.

The IPTV broadcasting service system 210 provides a video conferencing service to the user terminals 100 in addition to the IPTV broadcasting contents, thereby making it easier for subscribers to use the video conferencing service, and various additional services such as advertisements and medical services. Has the advantage of being widely available.

Next, the reception restriction system 220 according to an embodiment of the present invention will be described in detail with reference to FIG. 1.

The reception restriction system 220 includes a scrambling unit 221, an ECM generator 222, an EMM generator 223, a control key generator 224, and a controller 225.

The scrambling unit 221 receives image information data from the IPTV broadcasting service system 210 and scrambles the received image information data using a control key. The scrambling unit 221 may receive integrated image information data incorporating image information data received from the user terminal 100 from the IPTV broadcasting service system 210 and scramble the received integrated image information data. At this time, the scrambling unit 221 may scramble the image information data according to an algorithm such as AES (Advanced Encryption Standard), CSA (Common Scramling Algorithm).

The image information data scrambled by the scrambling unit 221 may be transmitted to the user terminal 100 through the network together with the ECM generated by the ECM generation unit 222.

Meanwhile, in an embodiment of the present invention, the scrambling unit 221 has been described as being included in the reception restriction system 220, but is not limited thereto. The scrambling unit 221 may be included in the IPTV broadcasting service system 210 or other systems.

The ECM generator 222 generates an ECM including information obtained by encrypting the control key generated by the control key generator 224 as a service key for a video conference service.

The ECM generation unit 222 generates an ECM including information obtained by encrypting the control key with the service key, thereby restricting only the authorized subscriber to use the video conference service. That is, the control key cannot be decrypted except for the authorized subscriber, so that only the authorized subscriber can use the image information data.

The EMM generating unit 223 generates an EMM including information obtained by encrypting a service key with a master key (hereinafter, also referred to as a “unique key”) of each subscriber, and stores the generated EMM for each user. It serves to transmit to the terminal 100. At this time, the EMM generator 223 encrypts the service key with the master key of each subscriber matching the user terminal information connected to the channel. Here, it is assumed that the master key is synchronized and stored in each user terminal 100 and the EMM generator 223. In this case, the master key may include a key value or subscriber ID information registered in advance by the subscriber.

The control key generation unit 224 generates a control key for scrambled image information data received from the IPTV broadcasting service system 210. The control key generation unit 224 provides the generated control key to the scrambling unit 221, the ECM generation unit 222, and the IPTV broadcasting service system 210.

In one embodiment of the present invention, the control key generation unit 224 generates only one control key, but periodically generates a new control key under the control of the control unit 225, or with an even (even) and an odd (odd) key. You can update it repeatedly.

The controller 225 controls the functions of the units 221, 222, 223, and 225 to manage the data flow in the reception restriction system 220. In particular, the controller 225 may control to generate the control key periodically according to the setting of the administrator, or control to repeatedly update with two control keys of even and odd numbers. Here, in the case of controlling to generate the control key periodically, the controller 225 considers the encoding time and the encryption time of the image information data of each user terminal 100 and updates the updated control key to the user terminal 100. The control key generation unit 224 may be controlled to provide the respective information in advance. In addition, the controller 225 may receive and manage video conference channel information from the IPTV broadcasting service system 210, and control the ECM generator 222 and the EMM generator 223 based on the video conference channel information. .

In the present specification, the reception restriction system 220 is described as a system that exists separately outside the IPTV broadcasting service system 210, but some or all of the reception restriction system 220 may be included in the IPTV broadcasting service system 210.

Such a video conferencing service system according to an embodiment of the present invention has an advantage of providing a smooth video conferencing service by providing a separate video conferencing channel to a user terminal to use video conferencing. In addition, by using a control key provided to each user terminal participating in a video conference using the existing reception restriction system to encrypt the data as well as to decrypt the video information data, the video information data can be protected more securely. There are advantages to it.

Hereinafter, a detailed configuration of the user terminal 100 according to an embodiment of the present invention will be described with reference to FIG. 2.

2 is a detailed configuration diagram of the user terminal 100 according to an embodiment of the present invention.

As shown in FIG. 2, the user terminal 100 according to an exemplary embodiment of the present invention may include an EMM processing unit 110, an ECM processing unit 120, a descrambling unit 130, and an image information data generating unit 140. Include.

First, the user terminal 100 is an apparatus for using an Internet broadcasting service, and includes a cam (IP STB), a computer, a notebook computer, or a personal portable terminal connected to a user's TV. An image processing apparatus capable of generating image information, such as a CAM), may be included, or any one terminal accessible to the image processing apparatus may be used.

The EMM processor 110 receives the EMM from the reception restriction system 220 shown in FIG. 1, and decrypts the service key included in the received EMM into a master key stored in advance.

The ECM processing unit 120 receives the ECM from the reception restriction system 220, and decrypts the control key included in the ECM with the service key decrypted by the EMM processing unit 110. The ECM processor 120 provides the decoded control key to the descrambling unit 130 and the image information data generating unit 140.

Meanwhile, the ECM processing unit 120 may include a buffer for temporarily storing the control key. First, when the reception restriction system 220 periodically changes the control key, the ECM processing unit 120 may use a buffer to synchronize the control key with the scrambled image information data.

The descrambling unit 130 descrambles the scrambled image information data received from the reception restriction system 220 by using the control key extracted by the ECM processing unit 120.

The image information data generator 140 scrambles the image information received from the image processing apparatus using a control key. At this time, the image information data generation unit 140 scrambles the image information with the control key extracted by the ECM processing unit 120 to generate scrambled image information data.

The image information data generation unit 140 provides the generated image information data to the video conference service providing system 200.

Hereinafter, a video conferencing service method using a reception restriction system according to an embodiment of the present invention will be described with reference to FIG. 3.

3 is a data flow diagram illustrating a video conferencing service method according to an embodiment of the present invention.

As shown in FIG. 3, the IPTV broadcasting service system 210 according to an embodiment of the present invention receives a video conference channel generation request information, allocates a channel for a video conference, and performs a video conference service through the assigned channel. To provide.

First, when receiving the video conference channel generation request received from the user terminal 100, the IPTV broadcasting service system 210 allocates a channel for video conference (S100).

Thereafter, the IPTV broadcasting service system 210 transmits the video conference channel information and the image data to the reception restriction system 220 (S102 and S104). In this case, the image information data provided by the IPTV broadcasting system 210 after allocating a channel may include contents arbitrarily set by an administrator.

Thereafter, the reception restriction system 220 scrambles the image information data with the control key (S106), and encrypts the control key with the service key (S108).

In addition, the reception restriction system 220 encrypts the service key for the video conferencing service with the master key of each subscriber matching the subscriber information included in the received video conferencing channel information (S110).

In addition, the reception restriction system 220 includes the encrypted service key in the EMM and transmits the encrypted service key to each user terminal 100 participating in the video conferencing service (S112).

In this case, each of the user terminals 100 receives an EMM from the reception restriction system 220 and extracts a service key from the received EMM using a master key stored in advance (S114).

Thereafter, the reception restriction system 220 transmits the ECM including the scrambled image information data and the encrypted control key to the user terminal 100 (S116).

The user terminal 100 receives image information data scrambled with the ECM from the reception restriction system 220 through the network, and extracts a control key from the ECM using the extracted service key (S118).

The user terminal 100 descrambles the scrambled image information data with a control key (S120), and provides the user with descrambled image information data (S122).

Thereafter, the user terminal 100 scrambles the image information data received from the image processing apparatus with the control key (S124), and transmits the scrambled image information data to the IPTV broadcasting service system (S126).

The IPTV broadcasting service system 210 receives scrambled image information data from the user terminal 100, and descrambles the received image information data with a control key (S128). In addition, the IPTV broadcasting service system 210 integrates image information data received from the user terminals 100 connected to the channel (S128) and transmits the image information data to the user terminals 100 through the reception restriction system 220. .

At this time, the IPTV broadcasting service system 210 descrambles the image information data received from the one or more user terminals 100 with the control keys, and combines them to generate the integrated image information data including the image information data for each subscriber. can do.

Then, part or all of steps S104 to S128 are repeated to provide the user terminals with a video conference service through strong security between subscribers.

The IPTV broadcasting service system 210 integrates the image information data received from the plurality of user terminals 100 and provides the image information data to the reception restriction system 220, thereby real-time image information data between the user terminals connected to the channel. There is an advantage to enabling batch sharing.

One embodiment of the present invention can also be implemented in the form of a recording medium containing instructions executable by a computer, such as a program module executed by the computer. Computer readable media can be any available media that can be accessed by a computer and includes both volatile and nonvolatile media, removable and non-removable media. In addition, computer readable media may include both computer storage media and communication media. Computer storage media includes both volatile and nonvolatile, removable and non-removable media implemented in any method or technology for storage of information such as computer readable instructions, data structures, program modules or other data. Communication media typically includes computer readable instructions, data structures, program modules, or other data in a modulated data signal such as a carrier wave, or other transmission mechanism, and includes any information delivery media.

The foregoing description of the present invention is intended for illustration, and it will be understood by those skilled in the art that the present invention may be easily modified in other specific forms without changing the technical spirit or essential features of the present invention. will be. It is therefore to be understood that the above-described embodiments are illustrative in all aspects and not restrictive. For example, each component described as a single type may be implemented in a distributed manner, and similarly, components described as distributed may be implemented in a combined form.

The scope of the present invention is shown by the following claims rather than the above description, and all changes or modifications derived from the meaning and scope of the claims and their equivalents should be construed as being included in the scope of the present invention. do.

1 is an overall configuration diagram of a video conferencing service system 200 according to an embodiment of the present invention.

2 is a detailed configuration diagram of a user terminal 100 according to an embodiment of the present invention.

3 is a data flow diagram illustrating a video conferencing service method according to an embodiment of the present invention.

Claims (11)

In the system for providing a video conference service, A broadcast service system for allocating a channel for a video conferencing service and integrating and transmitting video information data received from at least one user terminal connected to the allocated channel through the allocated channel; A reception restriction system for providing a plurality of user terminals with a control key corresponding to the assigned channel. Video conferencing service system comprising a. The method of claim 1, The broadcast service system, Receive the scrambled image information data from the user terminal, descramble the received image information data using the control key, integrate the descrambled image information data into one image data And generate and scramble the integrated video information data. The method of claim 1, The broadcast service system, A channel allocator for allocating a channel for the video conference service; And Video conferencing information processing unit for integrating video information data received from the user terminal Video conferencing service system comprising a. The method of claim 1, The reception restriction system, A control key generation unit generating the control key and providing the generated control key to the broadcast service system; An ECM generator for generating an Entitlement Control Message (ECM) including the control key and providing the same to the user terminals; And An EMM generation unit for generating an Entitlement Management Message (EMM) and providing the EMMs to the user terminals by using unique keys matched to the user terminals; Video conferencing service system comprising a. The method of claim 4, wherein The control key generation unit, And periodically updating the control key and previously transmitting the updated control key for each user terminal in consideration of an encoding time and an encryption time of the image information data in the user terminal. A user terminal for transmitting and receiving data with an IPTV broadcasting service system and a reception restriction system, A message processor which receives an encrypted control key from the reception restriction system and decrypts the encrypted control key; An image information data generation unit which scrambles the image information data photographed by the image processing apparatus using the decoded control key and transmits the scrambled image information data to the IPTV broadcasting service system; And A descrambling unit for descrambling integrated image information data received from the IPTV broadcasting service system using the decoded control key. Including, The encrypted control key and the integrated video information data are received through a separate broadcast channel set for a video conference service, and the control key corresponds to the set broadcast channel. The method of claim 6, The integrated image information data is generated by descrambling the scrambled image information data in the IPTV broadcasting service system, combining the descrambled image information data, and scrambled using the control key. . The method of claim 7, wherein The message processing unit, If the reception restriction system periodically changes the control key, And a buffer for synchronizing the control key with the scrambled image information data. In a video conference service method of a system for providing a video conference service between a plurality of user terminals, Assigning a video conference channel for the video conference service; Incorporating image information data received from each user terminal through the channel; Generating a control key for decrypting the integrated image information data corresponding to the assigned channel; And Providing the integrated image information data and the control key to the user terminal through the channel. Video conferencing service method comprising a. The method of claim 9, Integrating the image information data, Descrambled scrambled image information data received from each of the user terminals with the control key. Combining the descrambled image information data into one image data; And Scrambling the combined image information data with the control key Including; And video information data received from the user terminal is encrypted using the control key in the user terminal. The method of claim 9, The generating of the control key may include generating a new control key at a predetermined time interval.

Images