KR20110087022A - Bidirectional data broadcasting device, digital broadcast receiver and security authenticating method thereof - Google Patents

Abstract

PURPOSE: A security authentication method for transmitting a security authentication program to a receiving terminal is provided to implement security authentication with various security authentication servers. CONSTITUTION: If a user requests the execution of an application, a ubiquitous server transfers an execution command of the application to a security server(S6010,S6020). The ubiquitous server encodes a user information input screen(S6030). The ubiquitous server transfers the user information of a receiving terminal to a user authentication management server(S6050). If the user is authenticated, the security server implements the application(S6060).

Description

Bidirectional data broadcasting device, digital broadcast receiver and security authenticating method

The present invention relates to a two-way data broadcast equipment, a digital broadcast receiver, and a user authentication method thereof, and more particularly, to provide a compatibility between networks when providing a service having a different communication protocol, and to perform user authentication. A digital broadcast receiver and a user authentication method thereof.

With the development of digital technology, television, which is a representative home appliance, is being digitized, and services and contents provided through separate networks are being converged.

T-Commerce, a method of electronic commerce that has recently emerged, refers to a technology capable of purchasing and consuming various contents and products using a television as a medium.

According to the prior art, the T-commerce provided content requested from a user through a single network such as a cable network, a broadcast network, and the like. The contents provided at this time are various, such as shopping and banking. However, in case of providing contents through a single network, the contents and additional data related to the contents need to be transmitted separately using different protocols, so the service process is complicated, and an open market such as an internet shopping mall is not an online shopping mall. There is a problem that free shopping and purchase of contents are difficult due to limited shopping at.

The present invention is to solve the problems of the prior art, to provide a user authentication method to use a variety of electronic commerce when providing a service using a different protocol.

In accordance with an aspect of the present invention, there is provided a security authentication method for a two-way data broadcasting device, comprising: receiving a security authentication program execution command from a receiving terminal; Transmitting the security authentication program execution command to a security authentication server; Receiving the security authentication program from the security authentication server; Encoding and transmitting the security authentication program to the receiving terminal; Receiving user authentication information from the receiving terminal and transmitting the received user authentication information to the security authentication server; Receiving a security authentication result from the security authentication server; And encoding and transmitting the security authentication result to the receiving terminal.

In addition, the bidirectional data broadcasting apparatus according to an embodiment of the present invention, receives a security authentication program execution command from a receiving terminal, transmits the security authentication program execution command to a security authentication server, the security authentication from the security authentication server Receiving unit for receiving a program, and transmitting to the receiving terminal; And an encoder for encoding the security authentication program, wherein the transceiver receives and transmits user authentication information from the receiving terminal to the security authentication server, and receives a security authentication result from the security authentication server and transmits the result to the receiving terminal. The encoder encodes the received security authentication result.

In addition, the security authentication method of the digital broadcast receiver according to an embodiment of the present invention, the step of receiving a security authentication program execution command; Transmitting a security authentication program execution command to a bidirectional data broadcasting device; Receiving a security authentication program from the interactive data broadcasting device; Decoding and displaying the received security authentication program; Receiving user authentication information and transmitting the received user authentication information to the interactive data broadcasting device; Receiving a security authentication result from the bidirectional data broadcasting device; Decoding and outputting the security authentication result.

In addition, the digital broadcast receiver according to an embodiment of the present invention, the event processing unit for receiving a security authentication program execution command; Transmitting and receiving unit for transmitting the security authentication program execution command to the two-way data broadcasting equipment, and receives the security authentication program from the two-way data broadcasting equipment; And a flexible browser configured to decode and display the received security authentication program, wherein the event processor receives user authentication information and transmits the user authentication information to the bidirectional data broadcasting device through the transceiver. Receiving a result, the flexible browser is characterized in that for decoding and outputting the result of the security authentication.

The bidirectional data broadcasting apparatus of the present invention encodes a security authentication program and transmits the security authentication program to the receiving terminal, thereby enabling the receiving terminal to secure security with various security authentication servers even when the communication protocol is different.

Therefore, the receiving terminal has an effect of conveniently using a variety of pay services using different communication protocols.

1 is a block diagram illustrating a configuration of a tee-commerce system in a ubiquitous environment according to an embodiment of the present invention.
2 is a diagram illustrating a receiving terminal according to an embodiment of the present invention.
3 is a block diagram illustrating a configuration of a tee-commerce system in a ubiquitous environment according to another embodiment of the present invention.
4 is a block diagram showing the configuration of a security server according to an embodiment of the present invention.
5 is a diagram illustrating an electronic payment method in the tee-commerce system according to an embodiment of the present invention.
FIG. 6 is a diagram illustrating an electronic payment method in a tee-commerce system according to another embodiment of the present invention.
7 is a diagram illustrating a content encoding method of a ubiquitous server according to an embodiment of the present invention.
8 is a diagram illustrating an embodiment of encoding a response information to be changed as a method of encoding a content of a ubiquitous server according to an embodiment of the present invention.
FIG. 9 is a diagram illustrating an example of encoding a response information of a fixed region as a method of encoding a content of a ubiquitous server according to an embodiment of the present invention.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings and the contents described in the accompanying drawings, but the present invention is not limited or limited to the embodiments.

As used herein, terms used in the present invention are selected from general terms that are widely used in the present invention while taking into account the functions of the present invention, but these may vary depending on the intention or custom of a person skilled in the art or the emergence of new technologies. In addition, in certain cases, there is a term arbitrarily selected by the applicant, and in this case, the meaning will be described in the corresponding description of the invention. Therefore, it is intended that the terminology used herein should be interpreted based on the meaning of the term rather than on the name of the term, and on the entire contents of the specification.

1 is a block diagram illustrating a configuration of a tee-commerce system in a ubiquitous environment according to an embodiment of the present invention.

In FIG. 1, the tee-commerce system includes a content server (1010), a broadcast headend unit (H / E) 1020, a ubiquitous server (UBS SVR; 1030), a ubiquitous manager (UBS Manager) 1040, and user authentication management. At least one receiving terminal 1060 including a server (SMS) 1050 and a flexible browser.

In FIG. 1, although the ubiquitous server 1030 and the ubiquitous manager 1040 are separately shown, the ubiquitous server 1030 may include a ubiquitous manager 1040, and such a ubiquitous server 1030 may be referred to as an interactive data broadcasting device. It may be.

The ubiquitous server 1030 encodes content for providing an interactive service according to a digital broadcasting environment and transmits the content to a digital broadcasting network so that the ubiquitous server 1030 can be driven by a flexible browser of the receiving terminal 1060. In addition, in conjunction with the user authentication management server and other systems of the digital broadcasting system, additional data such as personalization information for the receiving terminal is encoded and transmitted according to the digital broadcasting environment.

The ubiquitous server 1030 encodes web data received through an encoder into data in units of frames according to broadcast standards of various broadcasters. The ubiquitous server 1030 may analyze an image of a screen in frame units, that is, a frame technique of a video, and may encode and transmit additional information (eg, coordinate information, etc.) of the image together with the image of the screen. Ubiquitous server 1030 may include an encoder 1050 that performs this encoding operation. In addition, the ubiquitous server 1030 may further include a transceiver 1040 which communicates with the content server 1010, the broadcast headend unit 1020, the user authentication management server 1050, and the at least one receiving terminal 1060. Can be.

The ubiquitous manager 1060 performs a monitoring function for efficient content transmission according to the network use of digital broadcasting. In addition, for efficient response of the ubiquitous server, session management of the receiving terminal can be performed.

The user authentication management server 1030 may process the information of the subscriber management system of the digital cable broadcasting system for the corresponding service by interworking with the ubiquitous server 1060 when the paid content is included among the interactive services provided through the ubiquitous system. Can be.

The broadcast headend unit (H / E) 1020 generates, compresses and multiplexes audio / video and various digital information in a digital broadcasting system and transmits the digital broadcasting bandwidth.

Receiving terminal 1070 is a broadcast receiver refers to the receiving equipment related to the broadcast communication system, such as a personal computer, PCTV, Set-Top Box, mobile phone, PVR or DVR, DMB, including a TV, and any particular system and It is not limited to hardware components. Hereinafter, the receiving terminal may be referred to as a digital broadcast receiver as needed.

The flexible browser included in the receiving terminal 1070 is an application having a life cycle of a form that is always executed in the receiving terminal 1070 to communicate with the ubiquitous server and the ubiquitous manager to request a bidirectional service and to receive and execute the bidirectional service.

Since the receiving terminal receives and processes data including various objects received from a web server in units of frames of an image, the processing speed is remarkably improved, and the image is changed by dividing a section into an image format when transmitting and receiving data in units of frames. Since data can be transmitted only in the interval, the bandwidth usage efficiency can be increased. In addition, even when communication overload occurs due to an increase in bandwidth usage, the display may be prevented from being cut off.

2 is a diagram illustrating a receiving terminal according to an embodiment of the present invention.

In FIG. 2, the receiving terminal of the tee-commerce system includes an event processor 2010, a transceiver 2020, and a flexible browser 2030, and the flexible browser 2030 includes a state manager 2040 and a protocol manager 2050. And a security authentication processing unit 2060.

The event processor 2010 receives an input event of an interface device that receives a user input signal from an user through an input means such as a remote controller. It is mainly a middleware and H / W based processing part in the receiving terminal. The flexible browser 2030 receives a signal input from the event processor 2010 and performs an input operation.

The transceiver 2020 is a part for receiving and processing external input signals such as user input signals and broadcast signals.

The flexible browser 2030 delivers the corresponding attribute information to the ubiquitous server based on the media attribute information received according to the medium or the network, and receives appropriate content information to express it. The flexible browser may decode and process content information received from the UBS server, and may further include a decoder.

The state manager 2040 manages operations such as execution / end of the received content service. It is in charge of processing such as program organization information of the event processing unit 2010 and a screen change of the content itself. Depending on the configuration of the service, it is possible to manage the list of each content and the entry path.

The protocol manager 2050 is a component that delivers a request to a ubiquitous server or protocolizes and transmits additional information generated at a receiving terminal. In addition, the data for the protocol transmitted from the remote broadcasting server may be analyzed and output on the screen of the receiving terminal, or may be induced to the viewer.

The security authentication processing unit 2060 may drive an electronic payment program that can perform a commerce service, and as an embodiment, a payment gate module of PG may be used. In addition, the security authentication processing unit 2060 may receive a security authentication program for various user authentication programs, electronic payment programs, email programs, and the like from the ubiquitous server to perform a process for security authentication.

3 is a block diagram illustrating a configuration of a tee-commerce system in a ubiquitous environment according to another embodiment of the present invention.

In FIG. 3, the tee-commerce system includes a content server, a broadcast headend unit, a ubiquitous server, a ubiquitous manager, a user authentication management server, at least one receiving terminal including a flexible browser, and a security server 3010. Description of the remaining components except for the security server 3010 is as described above with reference to FIG.

The security server may store encrypted financial information and authentication information of the user, and the configuration of the security server will be described later with reference to FIG. 4.

4 is a block diagram showing the configuration of a security server according to an embodiment of the present invention.

In FIG. 4, the security server includes a controller 4010, a storage 4020, and an application execution unit 4020.

The controller 4010 may execute a security authentication program by receiving an authentication request signal from the ubiquitous server when the user performs user authentication for proceeding with a purchase.

In the storage unit 4020, information necessary for security authentication, such as financial information and personal information of the user, may be encrypted and stored.

The application execution unit 4030 may be loaded with a security authentication application such as a PG application required for the T-commerce system and an e-mail application requiring security such as user authentication.

Hereinafter, as a method of performing security authentication in a tee-commerce system, an electronic payment method and a user authentication method will be described with reference to the accompanying drawings.

The above-described user authentication management server and security server are embodiments of a server that performs security authentication used to provide payment, e-mail, and various other services for electronic commerce in a communication environment, which may be referred to as a security authentication server hereinafter. .

5 is a diagram illustrating an electronic payment method in the tee-commerce system according to an embodiment of the present invention.

When the user inputs a service or product purchase request to the receiving terminal, the receiving terminal may request the request to the ubiquitous server (S5010). With reference to FIG. 5, the user's request will explain the product purchase request as an example.

The ubiquitous server parses the purchase information of the product purchase page received from an external server or CP (Content Provider), encodes it, and transmits the encoded information to the flexible browser of the receiving terminal (S5020). The ubiquitous server detects whether payment related information exists in the product purchase page, and if payment related information is found, encodes the purchase related information to the receiving terminal, and when the user executes payment on the encoded page, the electronic payment program is executed. Can be executed.

When the user proceeds to purchase (S5030), the receiving terminal executes the electronic payment program required for purchasing the product (S5040), and as an embodiment, the electronic payment program may be an electronic payment module of PG.

When the user inputs the payment information after the electronic payment program is executed (S5050), the input payment information is transmitted to the ubiquitous server through the flexible browser, and the ubiquitous server transmits the payment information to the user authentication management server (S5060).

The user authentication management server performs user authentication through the received payment information (S5070), and if the user is authenticated as a result of the authentication, executes a product purchase using the electronic payment program (S5080). If the authentication is not an authenticated user or the authentication is not properly performed, the process may return to the step of inputting user information.

When proceeding to purchase a product, the ubiquitous server may deliver the authenticated payment information to the CP (S5090). When the purchase of the product is completed according to the authenticated payment information, the ubiquitous server receives the payment completion page from the CP, encodes the received payment completion page, and transmits the received payment page to the receiving terminal (S5100).

FIG. 6 is a diagram illustrating an electronic payment method in a tee-commerce system according to another embodiment of the present invention.

When the user requests the execution of the application to the ubiquitous server through the receiving terminal (S6010), the ubiquitous server may transmit the execution command of the application to the security server (S6020). In this case, the application program may include an electronic payment program, an e-mail program (eg, Outlook) that requires security authentication, a private program (eg, a computer remote control program, and the like).

When the application program execution command is transmitted to the security server, the security server executes a user information input program and transmits it to the ubiquitous server, and the ubiquitous server encodes the received user information input screen and transmits it to the receiving terminal (S6030).

When the user inputs user information (S6040), the ubiquitous server transmits the user information received from the receiving terminal to the user authentication management server (S6050). The user authentication management server may determine whether the user who wants to execute the current application program is an authenticated user based on the received user information (S6060).

In the case of an authenticated user, the application server is executed in the security server, and the ubiquitous server may encode the execution screen and transmit the encoded application screen to the receiving terminal (S6070).

The aforementioned electronic payment program, e-mail program, computer remote control program, and application of a security server are various applications that perform various authentications required for electronic commerce or require user authentication in a communication environment. May be referred to as a program.

As described above, the ubiquitous server encodes an application program, such as a user information input program and a security authentication application, received from the security server and transmits the encoded application program to the receiving terminal. At this time, the ubiquitous server performs encoding so that the application program cannot be processed or the processing of the application program is delayed according to the receiving terminal and the transmission / reception protocol.

Hereinafter, an encoding method of a ubiquitous server will be described.

When the A / V (Audio / Video) linked service is configured for content encoding, a content encoding method using an alpha value for reducing network usage is possible.

In the media where other service applications are displayed while the video areas of IPTV, DMB, and A / V are displayed, an alpha value that sets the transparency of the graphic source to perform redundant display processing on the A / V video area and the service application area. Can be processed. Normally, an alpha value is added to the RGB value of a graphic source to convey four Int signals. However, in most cases, the alpha value is fixed in one medium. By using this feature, it is possible to set the alpha value at the client, pass only RGB value of graphic source to network, and reduce 1/4 of network usage by not sending alpha value.

In order to implement this, when a service terminal requests service content when A / V is provided, a specific value is also requested and an alpha value is transmitted. It is possible to configure a method of transmitting an alpha value together when requesting a specific value.

7 is a diagram illustrating a content encoding method of a ubiquitous server according to an embodiment of the present invention.

In FIG. 7, an area defined by the border 125 displays a screen of service content. The service content is composed of a UI (User Interface) displayed translucently on the A / V. If the ubiquitous server delivers the alpha value that handles the translucency when encoding the content, the alpha value should be specified for the RGB pixel for the area according to the UI screen composition. However, since the alpha value is usually specified in the overall service configuration, the alpha value can be defined and used in the flexible browser and the content itself.

On the other hand, as an encoding method for the changed response information, The screen and the elements can be divided by a specified number to retransmit the changed area.

Although the data to be transmitted may be compressed and transmitted, most receiving terminals support low-end hardware, so it is necessary to restore the received compressed file to provide a service. At this time, since the time taken to restore may interfere with the service, a compression method that is easy to decode such as non length compression may be preferable instead of an excessive compression method.

Partial data that can be retransmitted includes images, text, and compiled class files that each service can additionally use.

8 is a diagram illustrating an embodiment of encoding a response information to be changed as a method of encoding a content of a ubiquitous server according to an embodiment of the present invention.

That is, in the example of FIG. 8, retransmission is performed only for regions 1-2 and 2-2 where information is changed.

In addition, the component that is fixed and the part that operates on a predictable schedule does not continuously transmit the changed part in the server, but the component that changes the part after the client receives it by transmitting the component including the changed part. Can be processed, and thus the efficiency of the network can be increased.

FIG. 9 is a diagram illustrating an example of encoding a response information of a fixed region as a method of encoding a content of a ubiquitous server according to an embodiment of the present invention.

The example shown in FIG. 9 is to schedule a change of a specific area of the web content, for example, the flash advertisement area 126, transmit each component in its entirety, and then reconfigure and schedule the display at the receiving terminal. .

On the other hand, as an example of a method of encoding response information for a fixed area, in the case of a service having a static screen configuration in an embodiment of a broadcast medium, an entire background screen called a background may be Iframed and transmitted. The background Iframe is encoded in advance and ready for transmission.

The advantage of using Iframe is that hardware decoding is displayed and can reduce CPU processing load. In addition, when the resolution of 720x480 is encoded, 800 KB of screen information is usually obtained. When converted to Iframe, it is reduced to 50KB, so that the compression effect of the transmission contents can be obtained.

By encoding and transmitting frame by frame, the content decoding and screen processing of the receiving device is greatly reduced, so that the system efficiency of the receiving device is significantly increased, and in particular, the processing time can be greatly reduced in the case of a screen such as a URL used on the Internet. have. In addition, even when a delay occurs in the transmission and reception process, since the screen is received in units of frames, no blank of the screen occurs, and thus the screen can be output without interruption. In addition, since image information in frame units and coordinate information generated during encoding are transmitted, only the changed portion of the image information may be retransmitted according to the coordinate information, or a user input input to a specific coordinate portion may be received.

That is, the background of the service screen is transmitted, and the information to be changed displayed on the background is displayed. In this case, the information may be text, compiled application data, or the like.

When the ubiquitous server receives the security authentication program from the security authentication server, the ubiquitous server may transmit the security authentication program encoded in units of frames by the above-described encoding scheme without transmitting the security authentication program to the receiving terminal. In this case, the ubiquitous server may encode and transmit coordinate information about the frame-based image and the frame-based image and the security authentication information about the security authentication program.

The digital broadcast receiver may decode the encoded security authentication program through the flexible browser and display it on the screen. The digital broadcast receiver displays an image in units of decoded frames on the screen, arranges images using the decoded coordinate information, converts and displays received images, or receives user input through an image portion of a specific coordinate. Can be. In addition, the digital broadcast receiver may execute the decoded security authentication program or process the security authentication information received from the user through a security authentication processing unit included in the flexible browser.

By encoding the security authentication program in the above-described manner and transmitting it to the receiving terminal, the ubiquitous server of the present invention enables security authentication with various security authentication servers at the receiving terminal even when the communication protocols are different.

Therefore, there is an effect that the receiving terminal can conveniently use various paid services using different communication protocols.

1010: content server 1020: broadcast headend unit
1030: Ubiquitous Server 1040: Ubiquitous Manager
1050: user authentication management server 1060: receiving terminal

Claims (16)

Receiving a security authentication program execution command from a receiving terminal;
Transmitting the security authentication program execution command to a security authentication server;
Receiving the security authentication program from the security authentication server;
Encoding and transmitting the security authentication program to the receiving terminal;
Receiving user authentication information from the receiving terminal and transmitting the received user authentication information to the security authentication server;
Receiving a security authentication result from the security authentication server; And
And encoding and transmitting the security authentication result to the receiving terminal. The method of claim 1,
The security authentication program includes at least one of an electronic payment program, an email program, a computer remote control program, and a user authentication program. The method of claim 1,
The encoding is characterized in that for encoding the screen displayed on the receiving terminal in units of frames, and generating coordinate information for the screen in units of frames, security authentication method of the interactive data broadcasting equipment. The method of claim 1,
The encoding is alpha when the security authentication program, the user information input screen and the security authentication result are composed of a semi-transparent UI (User Interface), and the transparency of the graphic source is set to the RGB pixel for the corresponding area according to the UI screen configuration. A security authentication method for a two-way data broadcasting device, characterized in that the value is specified. A transceiver for receiving a security authentication program execution command from a receiving terminal, transmitting the security authentication program execution command to a security authentication server, receiving the security authentication program from the security authentication server, and transmitting the received security authentication program to a receiving terminal; And
An encoder for encoding said secure authentication program,
The transmitting and receiving unit receives the user authentication information from the receiving terminal and transmits to the security authentication server, receives a security authentication result from the security authentication server and transmits to the receiving terminal,
And the encoder encodes the received security authentication result. The method of claim 5, wherein
The security authentication program includes at least one of an electronic payment program, an email program, a computer remote control program, and a user authentication program. The method of claim 5, wherein
The encoder is characterized in that for encoding the screen displayed on the receiving terminal in units of frames, and generates coordinate information for the screen in units of frames, bidirectional data broadcasting equipment. The method of claim 5, wherein
The encoder, when the security authentication program, the user information input screen and the security authentication result is composed of a semi-transparent UI (User Interface), the alpha to set the transparency of the graphic source to the RGB pixel for the area according to the UI screen configuration A bidirectional data broadcast equipment, characterized in that for specifying a value. Receiving a security authentication program execution command;
Transmitting a security authentication program execution command to a bidirectional data broadcasting device;
Receiving a security authentication program from the interactive data broadcasting device;
Decoding and displaying the received security authentication program;
Receiving user authentication information and transmitting the received user authentication information to the interactive data broadcasting device;
Receiving a security authentication result from the bidirectional data broadcasting device;
Decoding and displaying the security authentication result and outputting the security authentication result. The method of claim 9,
The security authentication program comprises at least one of an electronic payment program, an e-mail program, a computer remote control program, and a user authentication program. The method of claim 9,
The decoding is a method for authenticating a security of a digital broadcast receiver, characterized in that for decoding a screen received on a frame-by-frame basis, the coordinate information on the screen in the frame unit is interpreted and mapped to the screen. The method of claim 9,
Decoding and displaying the received security authentication program,
And performing a security authentication by executing the received security authentication program. An event processing unit receiving a security authentication program execution command;
Transmitting and receiving unit for transmitting the security authentication program execution command to the two-way data broadcasting equipment, and receives the security authentication program from the two-way data broadcasting equipment;
It includes a flexible browser for decoding and displaying the received security authentication program,
The event processor receives user authentication information and transmits the received authentication information to the bidirectional data broadcasting device through the transceiver.
The transceiver receives a security authentication result from the data broadcasting device,
And the flexible browser decodes and outputs the security authentication result. The method of claim 13,
The security authentication program comprises at least one of an electronic payment program, an email program, a computer remote control program, and a user authentication program. The method of claim 13,
The decoder decodes a screen received in units of frames, and analyzes and maps coordinate information on the screen in units of frames, and digital mapping receivers. The method of claim 13,
The flexible browser,
And a security authentication processing unit that executes the received security authentication program to perform security authentication.

Images