KR20190126573A - Method for preventing copying of a multimedia device through an authentication server - Google Patents

Abstract

Disclosed are a method and system for preventing copying of a multimedia device through an authentication server. The embodiment provides a method of using an authentication server for copy protection of an over the top (OTT) multimedia device including a set top box. In the embodiment, when an OTT multimedia device accesses an authentication server, the authentication server issues a random token and transmits authentication data to the OTT multimedia device. Then, it is determined whether the token sent from the OTT multimedia device to the authentication server is normal or abnormal. In addition, by allowing the remote control of an untrusted OTT multimedia device, it is possible to monitor and manage the multimedia device that duplicates a genuine OTT multimedia device through the authentication server.

Description

METHOD FOR PREVENTING COPYING OF A MULTIMEDIA DEVICE THROUGH AN AUTHENTICATION SERVER}

The present invention relates to a method and a system for copy protection of a multimedia device such as a set-top box, and more particularly, to a method and system for determining whether a multimedia device is duplicated by performing security data and token value authentication of a multimedia device through an authentication server.

Unless otherwise indicated herein, the contents described in this section are not prior art to the claims of this application, and inclusion in this section is not admitted to be prior art.

A set top box is a receiver for digital satellite broadcasting. It is named after a box installed on a television. A set-top box can be used to receive digital television broadcasts on analog television, but it is also essential to realize interactive television or video on demand (VOD). There are two types of set-top boxes, external and internal. The external set-top box can be connected to a regular television and can be connected to the Internet. You can watch digital video with excellent image quality on a regular television. Recently, various products with interfaces that can simultaneously use data communication services have been developed. In recent years, set-top boxes have evolved into multimedia devices that implement various functions such as allowing all TV channels to be viewed on smartphones without a TV reception function such as DMB.

Conventionally, multimedia devices that transmit satellites, cables, terrestrial waves, etc. to prevent illegal copying of hardware add an encryption chip on the hardware circuit. The conventional multimedia device checks whether there is no problem when the encryption chip and the CPU of the multimedia device exchange encryption data with each other during booting or runtime. If there is a problem, the multimedia device stops or reboots.

 However, in the related art, an encryption chip of a multimedia device may be hacked, and an encryption device may be hacked so that the multimedia device containing the hacked encryption chip may be duplicated. In addition, when the multimedia device is duplicated, unique identification information of the device including the security module ID may be copied together. For this reason, the conventional multimedia device security method using the encryption chip is easy to reduce the reliability of the security system, and the piracy of the multimedia device occurs more frequently.

1. Korean Patent Publication No. 10-2011-0010701 (2011.02.07) 2. Korean Patent Publication No. 10-2008-0076159 (2008.08.04)

The embodiment provides a method of using an authentication server for copy protection of an over the top (OTT) multimedia device including a set top box. In the embodiment, when the OTT multimedia device accesses the authentication server, the authentication server issues a random token and transmits the authentication data to the OTT multimedia device. Then, it is determined whether the token sent from the OTT multimedia device to the authentication server is normal or abnormal. In addition, by allowing the remote control of the untrusted OTT multimedia device, it is possible to monitor and manage the multimedia device that duplicates the genuine OTT multimedia device through the authentication server.

Multimedia device copy protection method of the security system using the authentication server according to an embodiment (A) multimedia data OTP (one time programmable) the security data including the serial number (chip serial), chip ID (Chip ID) in the multimedia device Storing in memory; (B) transmitting a cipher value encrypting the security data stored in the OTP memory to the authentication server in the multimedia device; (C) the authentication server decrypting the cipher value to check whether the security data included in the cipher value is pre-registered data; (D) issuing an authentication token in the authentication server when the security data is data registered in the authentication server; (E) storing the secure data and the authentication token in the database in the authentication server, encrypting the secure data and the authentication token of the successful multimedia device, and transmitting the encrypted data to the multimedia device; And (F) decrypting and storing the security data and the authentication token received from the authentication server. It includes.

The copy protection method of the multimedia device through the authentication server encrypts the security data of the multimedia device including the serial number and the chip ID, and issues an authentication token to determine whether the multimedia device is illegally copied, through wired or wireless communication such as the Internet. Activation of the multimedia device can be performed.

By performing the activation of the device by wired or wireless communication between the authentication server and the multimedia device, it is possible to perform the authentication of the device faster and more accurately than the authentication method using a conventional encryption chip, and improve the reliability of the security system.

The effects of the embodiments are not limited to the above effects, and it should be understood to include all the effects deduced from the configuration of the invention described in the detailed description of the embodiments or the claims.

1 is a block diagram of a copy protection system of a multimedia device using an authentication server according to an embodiment
2 is a diagram illustrating a data processing block of the multimedia apparatus 100 according to an embodiment.
3 is a diagram illustrating a data processing block of the authentication server 200 according to an embodiment.
4 is a signal flowchart of a multimedia device copy protection system according to an embodiment.
5 is a view showing a comparison process between the issued token value and the received token value according to an embodiment

Advantages and features of the present invention, and methods for achieving them will be apparent with reference to the embodiments described below in detail in conjunction with the accompanying drawings. However, the present invention is not limited to the embodiments disclosed below, but may be implemented in various forms, and only the embodiments of the present invention make the disclosure of the present invention complete and the general knowledge in the technical field to which the present invention belongs. It is provided to fully convey the scope of the invention to those skilled in the art, and the present invention is defined only by the scope of the claims. Like reference numerals refer to like elements throughout.

In describing the embodiments of the present disclosure, when it is determined that a detailed description of a known function or configuration may unnecessarily obscure the subject matter of the present disclosure, the detailed description thereof will be omitted. Terms to be described below are terms defined in consideration of functions in the embodiments of the present invention, and may vary according to intentions or customs of users or operators. Therefore, the definition should be made based on the contents throughout the specification.

1 is a block diagram of a copy protection system of a multimedia device through an authentication server according to an embodiment.

Referring to FIG. 1, a copy protection system of a multimedia device through an authentication server according to an embodiment may include a multimedia device 100 including a set-top box, an authentication server 200, and a display device 300. .

The multimedia apparatus 100 is generally placed on a television set having a home communication terminal function necessary to use a next generation interactive multimedia communication service (so-called interactive television) such as video on demand (VOD), image home shopping, and network game. One. In general, the multimedia apparatus 100 may be connected to a television monitor or the like in a home by connecting to a network such as an interactive television or a video transmission service of a telephone company (eg, a video dial tone provided by a local telephone company). A set top box, which is one of the multimedia devices, communicates with a video server installed in a telephone company or a CATV station, and has a function of receiving and converting video signals as a basic function. In addition, various standards such as having a telephone interface or a connection interface with a PC are also being examined so that data communication services such as telephone and PC communication can be simultaneously used.

The display apparatus 300 is an apparatus for transmitting broadcasts from a base station connected to the multimedia apparatus 100 such as a TV, a computer, a tablet, and the like, and is an electronic device having a communication and transmission function.

The authentication server 200 is a server that provides an authentication function for copy protection of the OTT multimedia device 100. In an embodiment, the authentication server issues a random token and transmits authentication data to the multimedia device 100 to determine whether the token sent from the multimedia device 100 to the authentication server is normal or abnormal. If it is determined that the untrusted multimedia device, the authentication server 200 remotely controls the multimedia device, so that the multimedia device that duplicates the OTT multimedia device can be monitored and managed through the authentication server.

2 is a diagram illustrating a data processing block of the multimedia apparatus 100 according to the embodiment.

Referring to FIG. 2, the multimedia apparatus 100 may include an OTP memory 110, an encryption unit 130, and a decryption unit 150.

The OTP memory 110 stores security data including a serial number and a chip ID in a multimedia device in a one time programmable (OTP) memory of a multimedia device.

The encryption unit 130 encrypts the security data stored in the OTP memory to generate a cipher value, and transmits the generated cipher value to the authentication server 200.

The authentication server 200 decrypts the cipher value to check whether the security data included in the cipher value is pre-registered data, and if the security data is data registered in the authentication server, the authentication server issues an authentication token. The authentication server stores the security data and the authentication token in a database, encrypts the security data and the authentication token of the successful multimedia device, and transmits the encrypted data to the multimedia device 100.

The decryption unit 150 of the multimedia apparatus 100 decrypts and stores the security data and the authentication token received from the authentication server.

3 is a diagram illustrating a data processing block of the authentication server 200 according to an embodiment.

Referring to FIG. 3, the authentication server 200 may include a token comparator 210, a token issuer 230, and a determiner 250.

The token comparison unit 210 compares the received token value with the previously issued token value after receiving the security data and the token value. In the embodiment, when the previously issued token value and the received token value are different, the authentication failure value and the new token value are transmitted to the multimedia device 100, and when the multimedia device 100 receives the authentication failure value, the operation is stopped or rebooted. Can be.

The token issuing unit 230 issues a new token and updates the new token in the authentication server database.

If the previously issued token value and the received token value are different, the determination unit 250 transmits the authentication failure value and the new token value to the multimedia device, and updates the authentication failure count in the database. Thereafter, the determination unit 250 determines that the multimedia device whose authentication failure count is greater than or equal to the set value is a duplicate.

A feature of the multimedia device used in the multimedia device copy protection system according to the embodiment is that it can function properly only through the Internet. Therefore, the copy protection system of the multimedia device using the authentication server according to the embodiment enables the product to be authenticated using the wired / wireless communication network, thereby preventing the illegal copying of the multimedia device more strongly.

 4 is a signal flowchart of a multimedia device copy protection system according to an embodiment.

 In step S10, the multimedia device stores secure data including a serial number and a chip ID in the multimedia device 100 in a one time programmable (OTP) memory. In an embodiment, security data including mac, serial number, and chip id may be stored in an OTP memory area of the central control unit of the multimedia device in a production step of the OTT multimedia device. In the embodiment, the mac, sn, and chip id of the multimedia device thus produced are collected and registered in the authentication server database. The mac, sn, and chip id of each OTT multimedia device are managed in the database as unique data.

In step S20, the multimedia device transmits the encryption value encrypting the security data stored in the OTP memory to the authentication server. In the embodiment, the OTT STB attempts to connect to the authentication server while booting, and encrypts the security data including the mac, sn, and chip id of the multimedia device and transmits the encrypted data to the authentication server 200.

In operation S30, the authentication server 200 decrypts the encryption value. In operation S40, the authentication server 200 confirms whether the security data included in the encryption value is pre-registered data. Specifically, the authentication server decrypts the security data and checks whether mac, sn, and chip id constituting the security data are registered in the server. In the case of the registered value, the authentication server 200 issues a random token, stores the corresponding token along with the registered mac, sn, and chip id in the database, encrypts the authentication success value and the issued token and sends the encrypted token to the multimedia device. The multimedia device 100 solves the value received from the authentication server and stores the authentication token in a memory area of the multimedia device 100. If the security data is not registered data, in step S42, the authentication server 200 determines the corresponding multimedia device as a copy device, and transmits an authentication failure value and then controls the multimedia device such as rebooting or stopping in step S44.

If the security data is data registered in the authentication server 200, in step S50, the authentication server issues an authentication token.

The authentication server stores the security data and the authentication token in the database, and in step S60, the authentication token and the security data are encrypted. Normally certified OTT multimedia devices have a token value. In this case, mac, sn, chip id, and token values are encrypted when connecting to the authentication server and transmitted to the authentication server.

In step S70, the security data and the authentication token of the successful multimedia device are encrypted and transmitted to the multimedia device.

In step S80, the multimedia device decrypts and stores the security data and the authentication token received from the authentication server. In an embodiment, step S80 encrypts the security data and the token value of the multimedia device and transmits the encrypted data to the authentication server, and the authentication server 200 receiving the security data and the token value compares the previously issued token value with the received token value. do. The authentication server 200 compares the token value previously issued and the currently received token value based on the received security data such as mac, sn, chip id, and checks whether the same. Thereafter, the authentication server issues a new token and updates the new token in the authentication server 200 database. If the token is the same, the authentication success value and the new token are transmitted to the multimedia apparatus 100. In other cases, the authentication failure value and the new token are transmitted to the multimedia apparatus 100, and the authentication failure count is updated in the database. The multimedia device 100 solves the value received from the authentication server and updates the token in the memory area of the multimedia device. When the authentication failure value is received, the multimedia device stops working.

In step S90, the authentication token and the security data are encrypted in the multimedia device. In step S100, the encrypted authentication token and the security data are transmitted to the security server 200. In step S110, receiving the authentication token and the security data encrypted by the security server compares the issued token value and the received token value.

5 is a diagram illustrating a process of comparing issued token values and received token values according to an embodiment.

 In step S111, it is determined whether the previously issued token value and the received token value are the same. If the token value is the same, in step S115, the authentication success value and the new token are transmitted to the multimedia device.

If the token value is different, the authentication server issues a new token in step S112, and updates the new token in the authentication server database in step S114. In step S114, the multimedia device having an authentication failure count equal to or greater than a set value is determined as a duplicate. Thereafter, upon receiving the authentication failure value from the multimedia device, the operation of the multimedia device is stopped. Using the embodiment, it is easy to check on the authentication server when the multimedia device which is copied in bulk with the information of the already produced genuine multimedia device is distributed in the market. Both genuine and duplicate multimedia devices connect to the authentication server and receive a new token from the authentication server. However, because the authentication server creates a new token each time a multimedia device is connected, the final token in the DB of the authentication server exists only in one multimedia device. Therefore, it can be seen that the authentication failure count is greatly increased in the database of security data such as mac, sn, and chip id corresponding to the duplicated multimedia device. Even in the case of one-to-one replication, the authentication failure count will not increase very much in a short time as above, but it can be seen to increase steadily.

If there are no duplicates of the multimedia device, the authentication failure count will be zero. OTT multimedia device is prepared to execute special function by classifying data received after connecting to authentication server.

Therefore, when the STB with mac, sn, and chip id determined to be a cloned product connects to the authentication server, it can execute special functions such as clearing the software of the multimedia device completely. In this case, however, genuine products cannot be distinguished from genuine products, and genuine products cannot avoid special functions.

The embodiment provides a method of using an authentication server for copy protection of an over the top (OTT) multimedia device including a set top box. In the embodiment, when the OTT multimedia device accesses the authentication server, the authentication server issues a random token and transmits the authentication data to the OTT multimedia device. Then, it is determined whether the token sent from the OTT multimedia device to the authentication server is normal or abnormal. In addition, by allowing the remote control of the untrusted OTT multimedia device, it is possible to monitor and manage the multimedia device that duplicates the genuine OTT multimedia device through the authentication server.

In addition, the copy protection method of the multimedia device through the authentication server encrypts the security data of the multimedia device, including the serial number and chip ID, and issues authentication tokens to determine whether the multimedia device is illegally copied, wired or wireless communication such as the Internet. Through the activation of the multimedia device can be performed.

By performing the activation of the device by wired or wireless communication between the authentication server and the multimedia device, it is possible to perform the authentication of the device faster and more accurately than the authentication method using a conventional encryption chip, and improve the reliability of the security system.

The disclosed contents are only examples, and various changes can be made by those skilled in the art without departing from the scope of the claims claimed in the claims, and therefore, the protection scope of the disclosed contents may be It is not limited to an Example.

100: multimedia device
200: security server

Claims (6)

In the copy protection method of the multimedia device of the security system using the authentication server,
(A) storing the secure data including a serial number and a chip ID in the multimedia device in the multimedia device one time programmable (OTP) memory;
(B) transmitting, at the multimedia device, a cipher value encrypting security data stored in the OTP memory to an authentication server;
(C) the authentication server decrypting a cipher value to check whether the security data included in the cipher value is pre-registered data;
(D) issuing an authentication token in the authentication server when the security data is data registered in the authentication server;
(E) storing the secure data and the authentication token in the database in the authentication server, encrypting the secure data and the authentication token of the successful multimedia device, and transmitting the encrypted data to the multimedia device; And
(F) decrypting and storing the security data and the authentication token received from the authentication server; Multimedia device copy protection method comprising a.
The method of claim 1, further comprising: (F) decrypting and storing the security data and the authentication token received from the authentication server; Is
Encrypting the security data and the token value of the multimedia device and transmitting the encrypted data to the authentication server;
Receiving the secure data and the token value, comparing the received token value with a previously issued token value; Multimedia device copy protection method comprising a.
The method of claim 2, wherein the authentication server receiving the security data and the token value comprises: comparing the token value previously issued and the received token value; Is
If the previously issued token value and the received token value are different, the authentication server issues a new token and updates the new token in the authentication server database; And
If the token value is the same, transmitting the authentication success value and the new token to the multimedia device; Multimedia device copy protection method comprising a.
4. The method of claim 3, wherein the authentication server comprises: issuing a new token and updating the new token in the authentication server database; Is
If the previously issued token value and the received token value are different, transmitting an authentication failure value and a new token value to the multimedia device; And
Updating the authentication failure count in the database; Multimedia device copy protection method comprising a.
5. The method of claim 4, further comprising: updating the authentication failure count in a database; Is
Determining a multimedia device having an authentication failure count equal to or greater than a set value as a duplicate; Multimedia device copy protection method comprising a.
The method of claim 4, further comprising: transmitting an authentication failure value and a new token value to the multimedia device when the previously issued token value and the received token value are different from each other; Is
The multimedia device copy protection method, characterized in that to stop the operation upon receiving the authentication failure value in the multimedia device.

Images