WO2007112650A1

WO2007112650A1 - System, method and bm-sc for mbms service

Info

Publication number: WO2007112650A1
Application number: PCT/CN2007/000760
Authority: WO
Inventors: Shile Wang
Original assignee: Huawei Technologies Co., Ltd.
Priority date: 2006-03-30
Filing date: 2007-03-09
Publication date: 2007-10-11
Also published as: CN101047956A; CN101047956B

Abstract

A method, a system and BM-SC for MBMS service. The method includes: Users subscribe for a MBMS service; BM-SC gets the subscribers' information, and provides the user key to the users' terminals that have subscribed the MBMS service; the BM-SC encrypts the MBMS data and broadcasts it; the users' terminals use the user key to decrypt the MBMS data received. The corresponding means includes: Charging center, which receives the subscribers' information and sends it to BM-SC; BM-SC, which provides the user key to current subscribers according to the subscribers' information, and then encrypts and broadcasts the MBMS data; Users' terminals, which receive the user key and the data, use the user key to decrypt the data. The BM-SC includes: the subscribers' information getting unit, key creating unit and key distributing unit.

Description

2007/000760

-1- Multicast Broadcasting Service System, Method and Broadcast Multicast Service Center This application is filed on March 30, 2006 and submitted to the China Patent Office, application number 200610066373.4, and the invention name is "a multimedia broadcasting service system and method. The priority of the Chinese Patent Application, the entire contents of which is incorporated herein by reference.

Technical field

The present invention relates to multimedia broadcast multicast technologies, and in particular, to a multimedia broadcast service system, method, and broadcast multicast service center.

Background technique

Referring to FIG. 1 , in the mobile network, to support Multimedia Broadcast Multicast Service (MBMS), a Broadcast Multicast Service Center (BM-SC) is added. And, a GPRS Support Node (GGSN, Gateway GPRS Support Node), a Serving GPRS Support Node (SGSN), a 3G Radio Access Network (UTRAN, UMTS Terrestrial Radio Access Network), and a User Equipment (UE, User Equipment) ) Also add the corresponding function.

The boundary of the MBMS bearer service is a Gmb and Gi reference point, respectively providing a service of a control plane and a user plane. By processing the control plane signaling (Gmb) reference point, the GGSN and the BM-SC perform related signaling interactions: establishment and release of the MBMS bearer context; notifying the GGSN about the start and stop of the MBMS session, and the network service quality of the service (QoS, Quality of Service) parameters, etc.

The BM-SC is the core of the MBMS system, and implements the provision and control of the MBMS service, and implements access control and charging for the mobile terminal in the multicast service. Specifically, the BM-SC is an entry of a Content Provider (CP) for authorizing and initiating MBMS bearer services in the mobile network, and scheduling and transmitting MBMS content. Its functions include: (1) authentication, authorization, and accounting for third-party content providers; (2) providing MBMS transmission-related parameter configuration functions, such as: QoS, multicast broadcast area, initiation and termination of MBMS transmission resources, etc.; (3) receiving and transmitting MBMS content from a CP/SP (Service Provider), scheduling MBMS session transmission and notifying the user, retransmission of the session, etc.; (4) service statement, including media description, session description, such as multicast service Identification, address, delivery time, etc. Referring to FIG. 2 together, the BM-SC includes: a member management unit, a session and transmission unit, a proxy and forwarding unit, a service announcement unit, and a security unit.

The member management unit is mainly used for managing the subscription relationship of the service user, authenticating the service used by the user, and providing the subscription relationship data to other units for use.

The session and transmission unit mainly performs scheduling of the MBMS session and is capable of scheduling retransmission of the MBMS session. In order to enable the UE to distinguish the retransmission of the MBMS session, the session and transmission unit puts a session identifier for each MBMS session, and the Temporary Mobile Group Identity (TMGI) is assigned by the session and transmission unit. Each transmission of the MBMS session and subsequent retransmissions are identified by a common MBMS session identifier (2-30ctets), passed through the content to the application layer, and simultaneously in MBMS in a short format (ie the smallest important octet) The session start request message is sent to the radio network controller (RNC, the Radio Network Controller, the session and the transmission unit provides transmission-related parameters, such as QoS, MBMS monthly service area, to the GGSN; and may also apply for or release the MBMS bearer resource and use Broadcast data transmission; can also apply favorable fault tolerance mechanisms, such as the use of dedicated MBMS encoding or forward error correction mechanism to ensure the integrity of the transmitted data. Session and transmission unit needs to be external (such as: streaming media, multimedia short messages, etc.) The data input unit performs access authentication and can obtain output content data.

The proxy and transport unit are intermediate devices that send data to the GGSN by the session and transport unit, and can be divided into proxy units (such as: Gmb) and transport units (manage multicast load). That is, the proxy and transport unit are the proxy for Gmb reference point signaling between the GGSN and other BM-SC units (member management units, sessions, and transport units). When the BM-SC unit handling different MBMS services is provided by different physical network elements, the proxy and transmission unit provide signaling routing functions, which are transparent to the GGSN. The proxy and transport unit can generate a charging record for the CP/SP, and the CP/SP name is provided to the proxy and transport unit by session start signaling via the Gmb interface.

The service announcement unit provides a service delivery function for the multicast and broadcast MBMS user service, and can provide the UE with the media description of the MBMS service to be advertised (eg, audio and video format and encoding, etc.) through the media description, and can be described as a UE by using the session. Provides session descriptions (such as multicast service identification, addressing, play time, etc.) for the MBMS service to be published. The business announcement unit utilizes the protocol specified by the Internet Engineering Task Force (IETF) Send media and session descriptions.

The transmission of the service announcement is triggered by the BM-SC, but can be sent by other external components. For example, the MBMS user service is announced through MBMS bearer capability, WAP PUSH, Uniform Resource Location (URL), SMS (Peer-to-Peer Short Message), and SMS cell broadcast.

The security unit is mainly used to ensure the integrity and confidentiality of MBMS broadcast data. Security features include the distribution of MBMS keys and the authentication capabilities of end users.

In the prior art, when the MBMS broadcast service user activates (Activation) and de-activates the service, it only needs to be completed by the UE, and the whole process does not interact with the network, nor is it on the SGSN, the GGSN, and the UE. Create the context of the communication (MBMS UE Contexts ). Therefore, the BM-SC can only output CDRs based on the start of the session and the end of the session, the amount of data sent, the name of the CP/SP, etc., and submit the CDRs to the operating billing system to charge the CP/SP.

That is to say, in the MBMS protocol, only the proposal for charging the CP/SP is given for the broadcast service, and there are no schemes and suggestions for charging the user. However, considering actual business operations, if only CP/SP is charged, the content range of the MBMS service will be limited to promotional or advertising content. This is because, for mobile TV, horse racing, stock market analysis and other content that is attractive to users, if the operator cannot charge users through the MBMS broadcast service, it will restrict the promotion of such content by operators. Therefore, the MBMS broadcast service cannot perform authentication and accounting for users and cannot meet the service promotion and operation requirements of operators.

It can be seen that since the user's access and content transmission are not effectively controlled during the broadcast process, and the reasonable charging is performed, some services cannot be smoothly performed, thereby causing system resources. waste.

Summary of the invention

The technical problem to be solved by the embodiments of the present invention is to provide a multimedia broadcast service system, method, and broadcast multicast service center, so as to solve the problem that the current technology cannot effectively control user access and content transmission.

Therefore, the technical solution for solving the technical problem in the embodiment of the present invention is: providing a multimedia broadcast Method, including the steps:

The user subscribes to the multimedia broadcast service;

The broadcast multicast service center obtains user subscription information; and provides a decryption key to the terminal of the user currently subscribed to the broadcast service;

The broadcast multicast service center encrypts and broadcasts the broadcast data stream;

The user terminal decrypts the received broadcast data stream using the aforementioned decryption key.

Correspondingly, the embodiment of the present invention further provides a multimedia broadcast service system, including: an operation charging system, configured to receive subscription information of a user and send the information to a broadcast multicast service center; and a broadcast multicast service center, configured to The user's subscription information, providing a decryption key to the user terminal currently subscribed to the broadcast service, and encrypting the broadcast data stream for broadcasting;

The user terminal is configured to receive the decryption key and the broadcast data stream, and decrypt the broadcast data stream by using the received decryption key.

In addition, the embodiment of the present invention further provides a broadcast multicast service center, including:

An obtaining unit, configured to obtain user subscription information of a current subscription broadcast service;

a key generation unit, configured to generate a key according to the user subscription information and a key generation policy of the broadcast service;

a key distribution unit, configured to send the key to a user terminal that has subscribed to the broadcast service according to a key distribution policy of the broadcast service;

And an encryption unit, configured to encrypt and broadcast the broadcast data stream by using the key.

Compared with the prior art, the beneficial effects of the embodiments of the present invention are: The system and the method according to the embodiment of the present invention make full use of the subscription data of the user to subscribe to the multimedia broadcast service, and provide the key to the terminal of the user who currently subscribes to the broadcast service, and The broadcasted multimedia data stream is encrypted such that only the user who has subscribed to the broadcast service can decrypt the encrypted broadcast data stream, and the unordered user cannot decrypt the encrypted broadcast data stream because the key is not obtained. Thereby, the restriction on the unsubscribed user is realized, and the access of the user and the transmission of the content are effectively controlled, so that the operator can promote various contents and make full use of system resources.

DRAWINGS

1 is a schematic diagram of a mobile network supporting MBMS services in the prior art; Figure 2 is a block diagram showing the structure of the BM-SC shown in Figure 1;

3 is a structural block diagram of an MBMS system according to an embodiment of the present invention;

4 is a flowchart of a multimedia broadcasting method according to an embodiment of the present invention;

FIG. 5 is a structural block diagram of a multimedia broadcast system according to an embodiment of the present invention; FIG.

FIG. 6 is a structural block diagram of a broadcast multicast service center according to an embodiment of the present invention.

detailed description

Considering that the MBMS protocol includes the related protocol 3GPP TS 33.246 for providing security control for the multicast service, the embodiment of the present invention is based on the broadcast service system architecture in the MBMS protocol, and combines the security control function of the multicast service in the protocol, by enhancing the BM-SC. The User Management function cooperates with the operation billing system to complete the control and billing functions for the MBMS broadcast service.

Please refer to FIG. 3 , which is a structural block diagram of an MBMS system according to an embodiment of the present invention. The MBMS system includes: a broadcast multicast service center (BM-SC) 300, a content management platform (CMS) 310, a streaming media system 320, a database 330, an operation billing system 340, a bill collection system 350, and a unified network management system 360. Short message center/cell broadcast 370, Push proxy gateway 380, gateway GPRS support node (GGSN) 390 and user equipment (UE) 400. The Broadcast Multicast Service Center (BM-SC) 300 is connected to each of the systems. among them

The Content Management Platform (CMS) 310 is used for programming and content management of MBMS broadcasts, including management of content such as streaming media, downloads, and multimedia messages. For streaming media content, the content management platform 310 simultaneously notifies the streaming media system 320 that the streaming media system 320 delivers the media stream on time.

The database 330 is used to store system data required by the BM-SC 300, user subscription relationship data, and broadcast service related data.

The operational billing system 340 performs user management, service ordering, and billing functions. When the user subscribes to the MBMS service, the operation billing system 340 notifies the BM-SC 300 through the SMAP interface (company internal interface). The BM-SC 300 is also notified via the SMAP protocol when the user changes the number, cancels the account, or changes the order relationship.

The bill collection system 350 collects a service service usage record (CDR, Call Detail Record) from the BM-SC 300 for billing or statistics to the operation billing system 340.

The streaming media system 320 plays a unicast stream to the BM-SC 300 according to the program list, or accepts The BM-SC 300 requests and delivers the specified content stream.

The unified network management system 360 performs network management on the BM-SC 300, and sends configuration data and the like. The short message center/cell broadcast 370 delivers a service announcement through a short message or a cell broadcast. The Push Proxy Gateway (PPG) 380 issues a service announcement through Wap Push.

The BM-SC 300 functions as an MBMS service management and control center, and receives a Packet Service Subsystem (RPS, Real-time Transport Protocol) stream, and converts the unicast stream into a broadcast stream. The GGSN 390 is connected to the content management platform 310 and the operating billing system 340 to complete management functions such as service users, service content, and user service subscription; and simultaneously completes connection with the Push Proxy Gateway 380, the Short Message Center/Cell Broadcast 370, and the like. The service announcement function; and the delivery of the service key through the HTTP/MIKEY directly with the UE 400. In order to facilitate the operation and maintenance of the system, the BM-SC also needs to establish an interface with the unified network management system 360 and accept the management of the unified network management system 360.

In addition, the service announcement can be delivered in a manner other than short message, WAP PUSH, and MBMS bearer, which may increase the interface between the BM-SC 300 and the corresponding external components. For the input content, the BM-SC 300 can also obtain the MMS content by connecting to the MMS (MMS) with the MM7 interface.

See Table 1 for the interface between the BM-SC and the peripheral functional entities in the MBMS system.

Interface between BM-SC and peripheral functional entities

Interface number Interface protocol Communication mode Interface description

(1) Internal protocol TCP (transport and content management platform interface, content management platform needs to inform content-related parameters or program list when managing internal control protocol) /IP (interconnect BM-SC

Network protocol)

(2) SQLAPI (internal TCP/IP interface with the database, using SQLAPI reduction, system logarithm) According to the library dependency, Oracle, DB2 can be supported at the same time.

Database system such as Informix

(3) SMAP (internal protocol) TCP/IP interfaces with the operating billing system for functions such as service ordering, cancel ordering, account cancellation, number change, and service authentication.

(4) FTP (File Transfer Protocol TCP/IP and CDR collection system interface, CDR collection system will BM-SC discussion) CDRs are taken to the operation billing system

(5) RTP (Real-time transmission co-TCP/IP interface with streaming media system, accepting the order issued by the streaming media system 60 7

When the multimedia broadcast system in the embodiment of the present invention is in operation, the operating billing system 340 receives the subscription information of the user and sends the subscription information to the BM-SC 300, and implements charging for the user according to the subscription information; the BM-SC 300 The user who has subscribed to the broadcast service issues a decryption key, encrypts the broadcast data stream, and broadcasts it;

The UE 400 receives the decryption key and the broadcast data stream and decrypts the broadcast data stream using the decryption key.

The user can subscribe to the MBMS service through the operation billing system 340 in the business hall, or subscribe to the MBMS service through the user website Portal (the Provisioning interface provided by the operation billing system to the Portal). The operational billing system 340 will synchronize the order data to the BM-SC 300.

The canceling order process is similar to the ordering process. When the order cancellation is successful, the BM-SC 300 updates the service key (MSK, MBMS Service Key) on the UE 400 to cancel the user's usage rights.

User account / change number, operation billing system 340 informs BM-SC 300 to complete the account cancellation and renumbering.

The key processed by the BM-SC 300 includes the MBMS User Key (MUK, MBMS User)

Key), MBMS service key MSK and MBMS Transport Key (MTK, MBMS Traffic Key). The MSK is used to encrypt the MTK when transmitting the MTK, and the MTK is used to encrypt the transmitted media stream. In addition, the MSK is also a group key, and all users share a group of MSK keys. The number of MSKs is determined according to the number of users of the broadcast service, and the specific number can be configured (recommended value 128); the MTK is a group key. , all users share a set of MTK keys, each wide The specific MTK ID specified in the broadcast service stream.

The BM-SC 300 periodically distributes the MSK to the UE 400 that subscribes to the MBMS broadcast service according to the MSK distribution policy, and saves the data to the system database 330.

When the UE 400 applies for or initiates the MSK update, the BM-SC 300 can correctly deliver the MSK to the UE according to the user subscription relationship data saved in the database 330.

The BM-SC 300 can encrypt and deliver the delivered media stream using the MTK.

For the prepaid or postpaid user, the operating billing system 340 completes the monthly billing and deduction function according to the subscription relationship of the MBMS broadcast service of the user, and the operating billing system 340 needs to notify the BM-SC 300 when the user monthly fee is failed. Cancel the subscription relationship and terminate the user's usage rights.

Referring to the 3GPP TS 33.246 protocol, the UE 400 applies for a MUK to the Bootstrapping Server Function (BSF) before saving the message to the UE 630 or before receiving the MSK update message of the BM-SC 300. In the terminal interface UICC (not shown), the save mode needs to notify the BM-SC 300.

The UE 400 may initiate a request for the MSK to the BM-SC 300 when the MSK expires or no MSK according to the 3GPP TS 33.246 protocol, and decrypt the returned MSK data using the MUK decryption, and generate an MBMS request key (MRK, MBMS Request Key) when requested. . The MSK update request that is actively sent by the BM-SC 300 can also be handled correctly according to the protocol.

The MRK is used for authentication when the UE 400 applies for the MSK to the BM-SC 300, and the MRK can derive the MUK as a parameter.

The UE 400 may also wait for the BM-SC 300 to initiate an MTK update when the MTK expires or no MTK according to the 3GPP TS 33.246 protocol, and use the MSK to decrypt the MTK encrypted data to obtain the MTK.

The UE 400 can correctly process the encrypted MBMS broadcast service data delivered by the BM-SC 300 using the MTK.

Please refer to FIG. 4, which is a flowchart of a multimedia broadcasting method according to an embodiment of the present invention. The method includes:

Step S410, the user subscribes to the MBMS broadcast service; Step S420, the BM-SC acquires user subscription information; and sends a decryption key to the user terminal that has subscribed to the broadcast service;

The key is an MBMS service key (MSK, MBMS Service Key) „ Step S430, the BM-SC encrypts the broadcast data stream and broadcasts;

Among them, the encryption of the broadcast data stream uses the MBMS transport key (MTK, MBMS Traffic)

Key) implementation. In addition, the broadcast data stream also includes MTK's Multimedia Internet Key Management (MIKEY) packets encrypted with MSK.

Step S440, the user terminal decrypts the received broadcast data stream by using the foregoing decryption key.

The decryption comprises the user terminal using the obtained MSK, decrypting the received MTK data, obtaining the MTK, and decrypting the broadcast data stream by using the MTK.

In addition, the operating billing system charges the subscribers for subscription based on the subscriber subscription information.

In order to facilitate the understanding of the present invention, the multimedia broadcasting method of the present invention will be described in detail below with reference to specific embodiments.

First, the user subscribes to the MBMS broadcast service to the operating billing system.

Users can order MBMS broadcast services at the front desk of the business hall or through the operator portal (Portal). Specifically, the user can subscribe to the MBMS service through the operating billing system in the business hall, or subscribe to the MBMS service through the Portal (provided by the operating billing system to provide the Provisioning interface to the Portal).

The operating billing system then sends the order data to the BM-S (:.

The operating billing system generates order information based on the user's ordering process, synchronizes the user's ordering information to the BM-SC, and notifies the ordering service or order relationship update.

Then, the BM-SC delivers the MBMS service key to the UE of the user who has subscribed to the broadcast service according to the user subscription relationship data.

The MBMS service key is used to encrypt the MTK during the MBMS transport key delivery process. The MTK is used to encrypt service data when the service data is delivered.

Since the UE of the user who has subscribed to the broadcast service obtains the MSK, the BM-SC encrypted broadcast data stream can be decrypted, and the unordered user cannot decrypt the BM-SC encrypted broadcast data stream because the MSK is not obtained. , thereby achieving restrictions on unsubscribed users.

In addition, it should be noted that, when the MSK is sent to the UE, if there is no MBMS user key (MUK, MBMS User Key) on the UE, the UE applies for the MUK according to the 3GPP TS 33.246 protocol, and saves it to the terminal interface (UICC) or UE.

The MUK is used to encrypt point-to-point MSK data between the BM-SC and the UE. In addition, in order to enhance the control of the user receiving the broadcast service, the BM-SC may also periodically update the MSK to the UE. Moreover, if the UE finds that no MSK or MSK is expired when receiving the encrypted broadcast service announcement, the UE may apply to the BM-SC for application or update.

On the basis of realizing effective control to the user, the operating billing system can charge the user's MBMS broadcast service fee according to the user's subscription information.

It should be noted that, in consideration of the existing MBMS protocol, for the broadcast service, the user does not notify the network when going online and offline, and the service network element BM-SC cannot obtain the service information used by the user. Therefore, in the case that the BM-SC cannot obtain the detailed usage information of the user, the operating billing system provides a periodic charging function for the user, such as a monthly billing method.

For users who have failed to cancel the subscription or the monthly fee, the BM-SC updates the user status and sends an invalid MSK to the UE to terminate the user's use. If the delivery fails, the original MSK validity period expires. Also, the BM-SC periodically cleans up invalid user subscription data to the historical library.

Please refer to FIG. 5, which is a structural block diagram of a multimedia broadcast system according to an embodiment of the present invention. The method includes: an operation billing system 340, a broadcast multicast service center 300, and a user terminal ³⁹ 0. The operating billing system 340 is configured to receive the subscription information of the user and send it to the broadcast multicast service center 300. The broadcast multicast service center 300 is configured to: subscribe the user of the broadcast service according to the subscription information of the user. The terminal provides a decryption key, and encrypts the broadcast data stream according to the decryption key for broadcasting; that is, the user sends the decryption key of the MSK to the user terminal 390 that currently subscribes to the broadcast service, encrypts the MTK with the MSK, and encrypts with the MTK. Broadcast after the data stream is broadcast; The terminal 390 is configured to receive the decryption key and the broadcast data stream, and decrypt the broadcast data stream by using the received decryption key, that is, to receive the decryption key and the broadcast data stream, and use the MSK The decryption key decrypts the MTK information and decrypts the broadcast data stream using the decryption key of the MTK.

The operational billing system 340 includes a subscriber order information processing unit 341 and a subscriber billing unit

The BM-SC 300 includes a key generation unit 310, a key distribution unit 320, and an encryption unit 330.

The user order information processing unit 341 is configured to receive data from the user, synchronize the information to the BM-SC 300 when the user subscribes/cancels the broadcast service, and notify the BM-SC 300 to complete the sale when the user cancels/renames the account. The user and the number change process, and notify the BM-SC 300 to cancel the subscription relationship when the user fee is failed, and terminate the user's use right.

The user billing unit 342 is connected to the user order information processing unit 341, and is configured to complete the billing and deduction function according to the subscription relationship of the MBMS broadcast service of the user.

The key generation unit 310 is configured to generate a key according to a key generation policy of the broadcast service. The key generation strategy of 3GPP TS 33.246 is mainly used for multicast. Different from broadcast, the number of users of a single multicast service may not have a large number of broadcast service users, and different MSKs may be generated for each user. The MTK is under MBMS. At the time of transmission, the amount of data of the corresponding MIKEY request packet is also within an acceptable range.

For the broadcast service, the number of users is limited only by the network capacity. If each user has an independent MSK, because the MTK is sent with MSK encryption, when the MTK is intercepted and sent by the MBMS, the amount of data will follow. The number of users varies, and when the amount of users is large, it may cause intermittent interruptions in the business playback process. Therefore, the key generation strategy of the broadcast service is that the BM-SC 300 hashes the users according to the user number, and one group of users uses the same MSK. The number of user groups can be configured.

The key distribution unit 320 is connected to the key generation unit 310 and the user terminal ³ 90 respectively, and is configured to send a key to the terminal of the user who has subscribed to the broadcast service according to the key distribution policy of the broadcast service.

The key distribution strategy of the broadcast service includes: MUK is updated as a key associated with the user as required by the agreement.

The MSK can be updated once a week (configurable for the update period), hashed by user number, and the same group of users using the same MSK. The users are evenly distributed to the update period, and the busy hours are configured in the system, and the MSK update is sent in the idle time to reduce the impact on the network.

The MTK is updated every hour, and the MIK packet of the MTK encrypted by the MSK is delivered in the broadcast stream. The MTK is repeatedly distributed before and during the delivery of the media content. The delivery period can be several seconds or even minutes, and the specific time can be configured.

The encryption unit 330 is configured to encrypt and broadcast the broadcast data stream by using the key. The encryption of the broadcast data stream is implemented by using MTK. In addition, the broadcast data stream further includes a MIKEY data packet of the MTK encrypted by the MSK, but is not limited to the disclosed manner, and may be other encryption methods.

For the user to cancel the subscription or the system fails to be ordered, the BM-SC initiates an MSK update request to the UE, and updates the MSK on the UE to an illegal value, and cancels the user's usage right.

For the MSK, when the user subscribes to the service and does not receive the valid key within the specified time, the terminal can initiate an MSK application or update request to the BM-SC to obtain or update the MSK when the user goes online to use the service.

Referring to FIG. 6, a structural block diagram of a broadcast multicast service center according to an embodiment of the present invention includes: an obtaining unit 61, a key generating unit 62, and a key distributing unit 63. The obtaining unit 61 is configured to acquire user subscription information of the current subscription broadcast service. The process of obtaining at least includes the following: when the user subscribes/cancels the broadcast service through the front desk of the business hall or through the operator portal website. The operation billing system synchronizes the information to the broadcast multicast service center; when the user cancels the account/rename through the front desk of the business hall or through the operator portal, the operation billing system notifies the broadcast multicast service center to complete the account cancellation/change No. Processing; When the user fee is failed, the operating billing system notifies the broadcast multicast service center to cancel the subscription relationship and terminate the user's usage rights. The key generating unit 62 is configured to generate a key according to the user ordering information and a key generation policy of the broadcast service; wherein the key generation policy is mainly used for multicast, and the broadcast service is different from the broadcast. The number of users may not have a large number of broadcast service users, and each user may generate a different MSK. When the MTK is delivered by MBMS, the amount of data of the corresponding MIKEY request packet may also be Accepted within the scope. The key distribution unit 63 is configured to send the key to a user terminal that has subscribed to the broadcast service according to a key distribution policy of the broadcast service. That is to say, according to the key associated with the user, it is updated or distributed according to the requirements of the agreement. For example, it can be updated once a week (updateable period configurable), hashed by user number, and the same group of users use the same MSK. The users are evenly distributed to the update period, and the busy hours are configured in the system, and the MSK update is sent in the idle time to reduce the impact on the network. The encryption unit 64 is configured to encrypt and broadcast the broadcast data stream by using the key. The encryption of the broadcast data stream is implemented by using MTK. In addition, the broadcast data stream further includes a MIKEY data packet of the MTK encrypted by the MSK, but is not limited to the disclosed manner, and may be other encryption methods.

The specific functions and functions of the units in this embodiment are described in the above implementation process, and will not be described again.

In summary, the embodiment of the present invention can provide a function for authenticating and charging a user for an MBMS broadcast service. For mobile TV, horse racing, stock market analysis and other user-friendly content, operators can operate through MBMS broadcast services, which can make full use of network resources and increase the application scenarios of MBMS broadcast services, which is conducive to the use and promotion of MBMS broadcast services. .

The above description is only a preferred embodiment of the present invention, and it should be noted that those skilled in the art can also make several improvements and retouchings without departing from the principles of the present invention. It should be considered as the scope of protection of the present invention.

Claims

Rights request

A multimedia broadcasting method, comprising the steps of:

The user subscribes to the multimedia broadcast service;

The broadcast multicast service center obtains user subscription information, and provides a decryption key to the user terminal that currently subscribes to the broadcast service;

The user terminal decrypts the received broadcast data stream using the decryption key.

The multimedia broadcasting method according to claim 1, wherein the method further comprises: operating the charging system to charge the user of the subscribed broadcast service in the user subscription information.

The multimedia broadcast method according to claim 2, wherein the obtaining, by the broadcast multicast service center, the user subscription information comprises:

When the user subscribes/cancels the broadcast service, the operation billing system synchronizes the information to the broadcast multicast service center;

When the user cancels/renames the account, the operating billing system notifies the broadcast multicast service center to complete the account cancellation/revision process; and/or

When the user fee is failed, the operating billing system notifies the broadcast multicast service center to cancel the subscription relationship and terminate the user's usage rights.

The multimedia broadcast method according to any one of claims 1 to 3, wherein the providing a decryption key to a user terminal that currently subscribes to the broadcast service includes:

The broadcast multicast service center delivers the service key MSK of the decryption key to the user terminal that has subscribed to the broadcast service according to the user subscription information; or

When receiving the encrypted broadcast service announcement, the user terminal initiates an application or update to the broadcast multicast service center if it finds that there is no MSK or MSK expired.

The multimedia broadcast method according to claim 4, wherein the broadcast multicast service center encrypts the broadcast data stream to encrypt the service data when the service data is transmitted by using the transport key MTK, and the broadcast data stream It also includes multimedia Internet Key Management Protocol data packets using MTK encrypted by MSK.

The multimedia broadcasting method according to claim 5, wherein the user ends Decrypting the received broadcast data stream by using the foregoing decryption key comprises: the user terminal decrypting the received MTK encrypted data by using the obtained MSK, obtaining the MTK, and decrypting the broadcast data stream by using the MTK.

The multimedia broadcast method according to claim 4, wherein, when the user terminal receives the decryption key MSK, if the MSK is encrypted by the user key MUK, and the user terminal does not have the user key MUK, The MUK is applied by the user terminal, and saved to the terminal interface or the user terminal, and the MSK is used to decrypt the returned MSK encrypted data to obtain the MSK.

The multimedia broadcast method according to claim 7, wherein the method further comprises: for a user who cancels the subscription or the fee collection failure, the broadcast multicast service center updates the user status, and delivers the invalid MSK to the user terminal. , terminate user use; if the delivery fails, it will retry until the original MSK validity period expires.

9. The multimedia broadcasting method according to claim 7, wherein all users share a group of MSKs, and the number of users sharing the MSK is determined by the number of users of the broadcasting service.

The multimedia broadcasting method according to claim 8, wherein the method further comprises: the broadcast multicast service center hashes the users according to the user number, and the group of users uses the same MS:.

A multimedia broadcast service system, comprising:

An operation billing system, configured to receive subscription information of the user and send the information to the broadcast multicast service center; the broadcast multicast service center is configured to provide a decryption key to the user terminal that currently subscribes to the broadcast service according to the subscription information of the user, And encrypting the broadcast data stream and broadcasting;

The multimedia broadcast service system according to claim 11, wherein the operating billing system comprises:

The user subscription information processing unit is configured to receive data from the user, synchronize the information to the broadcast multicast service center when the user subscribes/cancels the broadcast service, and notify the broadcast multicast service center to complete the account cancellation when the user cancels/renames the account/ Change the number processing; and notify the broadcast multicast service center to cancel the subscription relationship when the user fee fails, and terminate the user's usage rights.

13. The multimedia broadcast service system according to claim 12, wherein: The operating billing system also includes:

The user billing unit is connected to the user order information processing unit, and is configured to complete the billing and accounting function according to the subscription relationship of the user's broadcast service.

The multimedia broadcast service system according to claim 12, wherein the broadcast multicast service center comprises:

a key generation unit, configured to generate a key according to a key generation policy of the broadcast service; a key distribution unit, which is respectively connected to the key generation unit and the user terminal, and configured to subscribe to the subscribed broadcast service according to a key distribution policy of the broadcast service User terminal sends the key;

15. A broadcast multicast service center, comprising: