WO2008128463A1

WO2008128463A1 - Method and device for collecting charging information in point-to-point application

Info

Publication number: WO2008128463A1
Application number: PCT/CN2008/070732
Authority: WO
Inventors: Hongguang Guan
Original assignee: Huawei Technologies Co., Ltd.
Priority date: 2007-04-18
Filing date: 2008-04-16
Publication date: 2008-10-30
Also published as: CN101039197A

Abstract

A method, device and system for collecting charging information in point-to-point application in communication field, which collect charging information reliably in P2P system, are provided. A content providing side in the P2P system sends the charging information of the content provided to a content requesting side to the content requesting side; the content requesting side confirms the received charging information, signs on the charging information if there is no error, and sends it to the content providing side; the content providing side confirms the charging information signed by the content requesting side, signs thereon after confirming without any error, and reports the charging information signed by two sides to the charging information collecting side.

Description

Method and device for collecting billing information in peer-to-peer applications

The present invention relates to the field of communications, and in particular, to a method and apparatus for collecting charging information in a peer-to-peer application. Background technique

In recent years, Peer-to-Peer (P2P) has quickly become one of the hot topics of concern to the computer community. P2P is a distributed network. Participants in the network share some of the resources they have, including processing power, storage capacity, network connectivity, printers, etc. These shared resources need to be provided by the network to provide services and content, without being able to be Other peer nodes (PEers) access directly. Participants in a P2P network are both resource (service and content) providers (Servers) and resources (services and content) consumers (Clients).

With the development of P2P technology, its application scope is more and more extensive, especially in the field of streaming media, such as PPLive, Coolstreaming and other P2P-based streaming media software, using nodes as both a client and a server. During the process of receiving the program, the programs that have been received are simultaneously sent to other nodes, thereby reducing the burden on the traditional streaming server and improving the scalability of the system.

At present, the streaming media software based on P2P technology is basically free, so the collection of billing data is not considered in these systems, including the information of the data provided by the resource provider and the information of the resources received by the resource consumer. With the increasing management of P2P technology and the need for commercial operations, it is necessary to collect the billing data of the nodes. There are two reasons for collecting the billing data of a node: one is because the consumer of the resource needs to be charged, or the billing data is counted; the second is because the P2P technology is based on the client node, and each node is When acquiring resources (such as receiving data), it also needs to provide resources to other nodes (that is, send data). At present, many P2P users only receive data and do not send data out. This is the so-called Free Riding problem, which will cause The instability of the P2P system can lead to a vicious circle. In order to solve this problem, it is necessary to reward the resource provider accordingly, which makes it necessary to collect the data provided by the resource provider. Information. This will ensure a virtuous circle of P2P systems and lay the foundation for a manageable P2P system.

However, due to the characteristics of the P2P technology, the service can be performed between two devices, and the intermediate device can be used for interaction, so that the original circuit switching mode based strategy for collecting charging data in the server is no longer applicable. At present, the billing data collection methods that can be used for the P2P system are as follows: The method for collecting data by the service provider is as follows: After the resource consumer is authenticated by the billing management center, the resource provider establishes a connection with the resource provider. The resource provider then provides resources to the resource consumer while reporting the billing data to the billing management center (ie, the billing information collection device). Finally, the billing management center forwards the billing data to the billing storage center.

The credibility of the billing data collected by this method cannot be guaranteed. Because in the P2P system, both the provider and the consumer of the resource are responsible for the client node, the provider may modify the billing data to get more rewards. In addition, in the process of the provider reporting the charging data to the charging management center, the charging data is easily intercepted and modified, resulting in inaccurate charging data. In the above two cases, the billing management center cannot verify the correctness of the collected billing data, so that the reliability of the collected billing data cannot be guaranteed.

In addition, since the number of nodes in the conventional system is relatively small and the security between the nodes is relatively high, the charging data of the conventional system is safe in the process of transmitting in the nodes arranged by the operator. In a P2P network, almost every node participates in the statistics and reporting of charging data. Therefore, the security of charging data transmission is also a problem that cannot be ignored. Summary of the invention

Embodiments of the present invention provide a method and device for collecting charging information in a peer-to-peer application, which can reliably collect charging information in a P2P system.

Embodiments of the present invention provide a method for collecting charging information in a peer-to-peer application, including the following steps:

The content provider sends the charging information of the content provided by the content requesting party to the content requesting party, and requests the content requesting party to sign the charging information after confirming the correctness; The received charging information signed by the content requester is reported to the charging information collector.

An embodiment of the present invention further provides a content providing device, including: a request confirmation unit, configured to send charging information of content provided for a content requesting device to the content requesting device, requesting the content requesting device to perform charging Sign the information after confirmation of the information;

a receiving unit, configured to receive, from the content requesting device, the billing information signed by the content requesting device;

The reporting unit is configured to report the charging information signed by the content requesting device to the charging information collecting device.

Embodiments of the present invention also provide a method for collecting charging information in a peer-to-peer application, including the following steps:

The content requesting device confirms the charging information from the content providing device, and if the confirmation is correct, signs the charging information, and transmits the signed charging information to the content providing device.

The embodiment of the present invention further provides a content requesting device, including: a second confirming unit, configured to confirm charging information from the content providing device, and sign the charging information if the confirmation is correct;

And a sending unit, configured to send the charging information signed by the second confirming unit to the content providing device.

Compared with the prior art, the embodiment of the present invention has the beneficial effects that: by providing the content requesting device with the billing information to be reported by the content providing device, and the content requesting device confirms the two-way supervision manner, the billing information collection can be ensured and reported. The billing information of the device is not changed by the content providing device. By signing the confirmed billing information by the content requesting device, it is possible to effectively prevent the billing information after the confirmation from being changed by the intermediate device or the content providing device during the transmission process, thereby ensuring the effectiveness of the two-way supervision. DRAWINGS

1 is a side for collecting charging information in a P2P application according to a first embodiment of the present invention. Method flow chart;

2 is a system configuration diagram for collecting billing information in a P2P application according to a third embodiment of the present invention. detailed description

A first embodiment of the present invention relates to a method of collecting charging information in a P2P application. The present embodiment is directed to the fact that the service can be directly performed between the two devices in the P2P technology, and the content interaction can be performed without the intermediate device, and the impact of the feature on the reliability of the charging information is performed, and the targeted operation is performed to enable the collection. The reliability of the incoming billing information is guaranteed.

The main reason why the reliability of the billing information is not guaranteed is: Since the content (or data) is generated on the content providing device in the P2P application, the billing information of the content is also reported by the content providing device, so the lack of supervision, The reported billing information lacks credibility. Moreover, in the process of reporting the charging information to the charging information collecting device, there is a risk of being changed, and it is also impossible to ensure that the reported charging information is reliable. The present embodiment performs the following processing for the above points: the charging information to be reported is provided by the content providing device, and the charging information to be reported is sent to the content requesting device for confirmation, so as to prevent the content providing device from providing inaccurate information. The charging information, after the content requesting device confirms the error, signs the charging information with its private key and returns it to the content providing device. By signing, the content providing device or the intermediate device of the transmission can be prevented from changing the confirmed information. The content providing device reconfirms the charging information signed by the content requesting device, and prevents the content requesting device from changing the charging information privately. If the confirmation is correct, the content requesting device is signed by the content providing device. The accounting information is signed and reported to the charging information collection device. Therefore, the charging information is prevented from being changed by the intermediate device during the reporting process, or the other intermediate device impersonates the incorrect charging information. It can be seen that the two-way monitoring method for reporting the charging information and the content requesting device confirmation information by the content providing device ensures that the charging information reported to the charging information collecting device is accurate and reliable. The content requesting device in the embodiment of the present invention may be a content consuming device.

It should be noted that, in this embodiment, each content requesting device and content are required to be The device must generate a public-private key pair of the asymmetric key, and then send the public key information to the charging information collecting device in a trusted manner.

In the first embodiment of the present invention, a specific process for collecting charging information in a P2P application is as shown in FIG. 1 , and includes the following steps:

Step 101: The content requesting device and the content providing device perform mutual authentication to ensure the legality of the opposite party. The specific authentication process can be implemented by the X.509 mechanism. After mutual authentication, the content requesting device and the content providing device know each other's public key information.

Step 102: The content providing device starts to send resources (ie, content) to the content requesting device. Step 103: The content providing device sends charging start data to the content requesting device. Step 104: After receiving the charging start data, the content requesting device performs confirmation, and after the confirmation is correct, signs the charging start data by using the private key of the content requesting device, and sends the charging start data to the content providing device.

In this step, by providing the charging information to be reported (ie, the charging start data) and the content requesting device to perform the two-way supervision mode, the charging information reported to the charging information collecting device is not obtained. Content provided by the device changed. By signing the charging information by the content requesting device, the clarified charging information can be effectively prevented from being changed by the intermediate device or the content providing device during the transmission process, thereby ensuring the effectiveness of the two-way supervision.

Step 105: The content providing device parses the billing start data signed by the content requesting device by using the public key of the content requesting device, and verifies the correctness. If the verification is correct, the private key of the content providing device is used to sign the content requesting device. The billing start data is signed and then reported to the billing information collecting device.

In this step, by reconfirming the charging start data signed by the content requesting device, the charging start data can be prevented from being modified by the content requesting device, and further ensuring that the charging information is further prevented from being intermediate in the reporting process. The device changes, or other intermediate devices impersonate the incorrect billing information, and ensures that the billing information obtained by the billing information collection device is safe and reliable. And according to the signatures of both parties, the charging information collecting device can determine that the charging data it receives is mutually recognized and is authentic. Also in this step, if After the content providing device does not receive the charging start data signed by the content requesting device, that is, the content requesting device rejects the signature, the content providing device may stop transmitting the resource. It should be noted that the content providing device uses the public key of the content requesting device to parse the charging start data signed by the content requesting device, and the step of verifying the correctness is optional.

Step 106: After a period of time, the content providing device sends the intermediate charging data to the content requesting device.

Steps 106 to 108 are similar to the above steps 103 to 105, and will not be described again.

Step 109: After ending the sending of the resource, the content providing device sends the charging end data to the content requesting device.

Steps 109 through 111 are similar to steps 103 through 105 above.

After receiving the foregoing charging data, the charging information collecting device may parse the charging data by using the public key of the content providing device and the content requesting device, and save the parsed charging data, or generate a corresponding bill file. .

In this embodiment, the collection of the billing data is completed on the premise that the content providing device and the content requesting device mutually authenticate. For content providing devices, providing billing data can add value to them, such as increasing their credit scores or levels; for content requesting devices, it is necessary to confirm the content consumed to avoid being mistakenly billed. The billing data is collected by the two parties separately, but is reported by the content providing device, and the billing data collected by the content requesting device is used as the basis for the review.

In this embodiment, the basis of the credibility of the collected charging data is that the content providing device and the content requesting device are contradictory to the stereoscopic, and if the charging data is inaccurate, the interests of one of the parties may be impaired. If the billing data is collected too much, it affects the benefit of the content requesting device, so that the content requesting device pays more fees; if the billing data is collected too little, the benefit of the content providing device is affected, which affects the content. Request the points for the device. Therefore, mutual supervision is required to ensure that the reported billing information is correct. In addition, before the charging information is transmitted between the devices, the corresponding device uses the private key to sign the charging information, and even if the intermediate device receives the charging information, the charging information cannot be modified, thereby making the accounting information The security of the fee information during the transmission process is guaranteed. It can be seen that under the protection of these two mechanisms, the difficulty of maliciously modifying the billing data is greatly increased, which provides a guarantee for the reliability of the billing data.

A second embodiment of the present invention relates to a method for collecting charging information in a P2P application. On the basis of the first embodiment, a sequence number or a timestamp is added to the charging information, and the charging information collecting device may be used. The validity of the received charging information is verified by the serial number or the timestamp, so that the content providing device or other intermediate device can be prevented from using the previous charging information for the replay attack, thereby further ensuring the collected charging. The reliability of the information.

A third embodiment of the present invention relates to a system for collecting billing information in a P2P application. As shown in FIG. 2, the content includes a content requesting device 10, a content providing device 20, and a billing information collecting device 30.

The content providing device 20 includes: a request confirmation unit 21, configured to send charging information of the content provided for the content requesting device 10 to the content requesting device 10, requesting the content requesting device 10 to sign the charging information; The unit 22 is configured to receive the charging information signed by the content requesting device 10 from the content requesting device 10, and the reporting unit 23 is configured to report the charging information signed by the content requesting device 10 to the charging information collecting device 30.

The content requesting device 10 includes: a second confirming unit 11 configured to confirm the charging information from the content providing device 20, and sign the charging information if the confirmation is correct; the sending unit 12 is configured to use the second confirmation The billing information signed by the unit 11 is sent to the content providing device 20. The billing information reported to the billing information collecting device 30 is accurate and reliable by the two-way monitoring mode in which the content providing device 20 reports the billing information and the content requesting device 10 confirms the information. The charging of the charging information by the content requesting device 10 can effectively prevent the charging information from being changed by the intermediate device or the content providing device 20 during the transmission process, thereby ensuring the effectiveness of the two-way supervision.

The content providing device 20 further includes: a first confirming unit 24, configured to confirm, by the receiving unit 22, the charging information signed by the content requesting device 10, and if the confirmation is correct, sign the content requesting device 10 again. The charging information is signed; the reporting unit 23 uploads the charging information signed by the first confirming unit 24 and the content requesting device 10. It is reported to the billing information collecting device 30. By confirming the billing information signed by the content requesting device 10 by the content providing device 20, the malicious content requesting device 10 can be prevented from changing the billing information, and the reliability of the reported billing information can be ensured. Content providing device

The signature is performed after the acknowledgment of the reported charging information, which prevents the accounting information from being changed by the intermediate device during the reporting process, or the other intermediate device advertises the incorrect accounting information, ensuring that the charging information collecting device 30 obtains The billing information is safe and reliable.

The foregoing charging information may further include a serial number or a timestamp, and the charging information collecting device may verify the validity of the charging information by using the serial number or time stamp, and effectively prevent the content providing device or other intermediate device from utilizing The billing information is used for replay attacks.

The content providing device and the content requesting device in this embodiment each include a unit that generates an asymmetric key in advance, and the first authentication unit and the second authentication unit sign the charging information by the private key therein, the content providing device and the content request. The device may send the public key to the charging information collecting device, so that the charging information collecting device parses the received charging information according to the public key, and the application technology of the asymmetric key is mature in the prior art. The security is good, and the process of reporting the billing information is safe and reliable.

In summary, in an embodiment of the present invention, the content providing device in the peer-to-peer system transmits charging information of the content provided for the content requesting device to the content requesting device; the content requesting device charges the received data. The information is confirmed. If the confirmation is correct, the charging information is signed and sent to the content providing device. The content providing device reports the charging information signed by the content requesting device to the charging information collecting device. The billing information reported to the billing information collecting device is not changed by the content providing device by the two-way monitoring mode in which the content providing device provides the billing information to be reported and the content requesting device to confirm. By signing the confirmed billing information by the content requesting device, the billing information after the confirmation can be effectively prevented from being changed by the intermediate device or the content providing device during the transmission process, thereby ensuring the effectiveness of the two-way supervision.

The content providing device signs the charging information signed by the content requesting device, and reports the charging information signed by the content providing device and the content requesting device to the charging information collecting device. The two-way signature can further prevent the charging information from being changed by the intermediate device during the reporting process, or other intermediate devices impersonating the incorrect accounting information. The charging information obtained by the charging information collection device is safe and reliable.

Before signing the charging information signed by the content requesting device, the content providing device first confirms the charging information signed by the content requesting device, and then performs the charging information signed by the content requesting device when the confirmation is correct. Signature, thereby preventing the content requesting device from changing the charging information, and further ensuring the reliability of the reported charging information.

The charging information includes a serial number or a timestamp, and the charging information collecting device verifies the validity of the charging information by using the serial number or the time stamp, and can effectively prevent the content providing device or other intermediate device from utilizing the previous charging information. Perform a replay attack.

The content providing device and the content requesting device generate an asymmetric key in advance, sign the charging information through the private key, and send the public key to the charging information collecting device, so that the charging information collecting device receives the public key according to the public key. The charging information is parsed. The application technology of the asymmetric key is mature and secure in the prior art, so that the charging information collecting device can conveniently obtain secure and reliable charging information.

Through the description of the above embodiments, those skilled in the art can clearly understand that the present invention can be implemented by means of software plus a necessary general hardware platform, and of course, can also be through hardware, but in many cases, the former is a better implementation. the way. Based on such understanding, the technical solution of the present invention, which is essential or contributes to the prior art, may be embodied in the form of a software product stored in a storage medium, including a plurality of instructions for making a A computer device (which may be a personal computer, server, or network device, etc.) performs the methods described in various embodiments of the present invention. The above is only a few specific embodiments of the present invention, but the present invention is not limited thereto, and any changes that can be made by those skilled in the art should fall within the protection scope of the present invention.

The above is only the process and method embodiments of the embodiments of the present invention, and is not intended to limit the embodiments of the present invention. Any modifications, equivalents, improvements, etc., which are made within the spirit and principles of the embodiments of the present invention, are It should be included in the scope of protection of the embodiments of the present invention.

Claims

Rights request

A method for collecting billing information in a peer-to-peer application, comprising the steps of:

The content provider sends the charging information of the content provided by the content requesting party to the content requesting party, and requests the content requesting party to sign the charging information after confirming the correctness; the content provider will receive the received information. The charging information signed by the content requesting party is reported to the charging information collecting party.

The method for collecting charging information in the peer-to-peer application according to claim 1, wherein the step of reporting the charging information to the charging information collecting party by the content provider further comprises the following steps:

The content provider signs the charging information signed by the content requesting party; in the step of the content provider adding the charging information to the charging information collecting party: the content provider will The charging information signed by the content provider and the content requester is reported to the charging information collector.

3. The method for collecting charging information in a peer-to-peer application according to claim 2, wherein the content provider prior to signing the charging information signed by the content requesting party, The charging information signed by the content requester is confirmed, and the charging information signed by the content requesting party is signed again when the confirmation is correct.

4. The method for collecting charging information in a peer-to-peer application according to claim 2, wherein before the step of the content provider signing the charging information signed by the content requesting party, the method further includes the following Steps:

Transmitting, by the content provider, a public-private key pair of the asymmetric key, and transmitting the generated public key to the charging information collector, where the charging information collecting party parses the signature of the content provider ;

In the step of the content provider performing the signature,

The content provider signs the billing information by using the generated private key;

5. The method for collecting charging information in a peer-to-peer application according to claim 4, wherein the content provider enters charging information signed by the content requesting party. Before the step of confirming the line, the following steps are also included:

The content provider obtains a public key of the content requester, and parses the billing information signed by the content requester by using the public key;

In the step of confirming, by the content provider, the charging information signed by the content requesting party,

The content provider confirms the billing information obtained by the parsing.

The method for collecting charging information in a peer-to-peer application according to claim 1, wherein the charging information includes a sequence number and/or a timestamp, and the charging information collecting party passes the serial number. And/or a timestamp verifies the validity of the billing information.

The method for collecting charging information in a peer-to-peer application according to any one of claims 1 to 6, wherein the content provider sends charging information of content provided by the content requesting party to The step of the content requester is performed at one of the following timings or any combination thereof:

At the beginning of providing content to the content requester; or

In the process of providing content to the content requester; or

After stopping providing content to the content requester;

If the content requestor does not sign the billing information, the content provider prohibits providing content to the content requester.

A content providing device, comprising:

a request confirmation unit, configured to send the charging information of the content provided by the content requesting device to the content requesting device, and request the content requesting device to perform signature after confirming that the charging information is correct;

a receiving unit, configured to receive, from the content requesting device, charging information signed by the content requesting device;

The content providing device according to claim 8, further comprising: a first confirming unit, configured to confirm, by the receiving unit, the charging information signed by the content requesting device, if If the confirmation is correct, the device is requested to be signed by the content. Name the billing information for signature;

The reporting unit reports the charging information signed by the first confirmation unit and the content requesting device to the charging information collecting device.

The content providing device according to claim 8, wherein the charging information includes a serial number and/or a time stamp, and is used by the charging information collecting device to verify that the charging information is valid. Sex.

The method for collecting charging information in a peer-to-peer application according to claim 11, wherein before the step of signing the content requesting device, the method further comprises the following steps:

The content requesting device generates a public-private key pair of the asymmetric key, and sends the generated public key to the charging information collecting device, where the charging information collecting device parses the signature of the content providing device ;

In the step of the content requesting device signing,

The content requesting device signs the charging information by using the generated private key.

The method for collecting charging information in a peer-to-peer application according to claim 12, wherein after the step of generating the public-private key pair of the asymmetric key by the content requesting device, the method further comprises the following steps:

The content requesting device transmits the generated public key to the content providing device, and the content providing device parses the charging information signed by the content requesting device.

A content requesting device, comprising:

a second confirming unit, configured to confirm the charging information from the content providing device, and sign the charging information if the confirmation is correct;