WO2009039692A1

WO2009039692A1 - A method and system for encrypting a program stream key in the mobile multimedia broadcast service

Info

Publication number: WO2009039692A1
Application number: PCT/CN2007/003574
Authority: WO
Inventors: Fengjun Li; Ye Wang; Ning Hu
Original assignee: Zte Corporation
Priority date: 2007-09-26
Filing date: 2007-12-13
Publication date: 2009-04-02
Also published as: CN101146209B; CN101146209A

Abstract

A method and system for encrypting a program stream key in the mobile multimedia broadcast service. The method includes: a multimedia broadcast platform sends a program stream key to a service platform via the connection between the platforms, the service platform judges and encrypts the program stream key using different program stream key encryption manner according to the particular mobile network of a service object, the service platform sends the encrypted program stream key to the multimedia broadcast platform via the connection between the platforms again. The system uses the method. By using the different program stream key encryption manner after the service platform judges the different service object, the method and system make the operators of the different mobile network only need to construct a set of a mobile phone TV service platform and the multimedia broadcast platform to provide the mobile phone TV service to the user of the different mobile network. The construction cost is reduced and the system maintenance is favorable.

Description

Method and system for encrypting program stream key in mobile multimedia broadcast service

Technical field

The present invention relates to the field of mobile multimedia broadcast services, and in particular, to a method and system for encrypting program stream keys in a mobile multimedia broadcast service.

Background technique

At present, mobile multimedia broadcasting services, such as mobile TV services, are increasingly valued by many operators because they are not limited by bandwidth, and have been considered as the focus of future business development. The so-called mobile multimedia broadcasting service refers to transmitting digital audio and video content to a mobile terminal having an operating system and a video function in a broadcast form, and realizing management and accounting for services and users by using a two-way channel of the mobile network. Key management is an important part of the mobile multimedia broadcast service. When the user of the mobile terminal prepares to watch the TV program, it will receive the encrypted program stream key and the program stream encrypted by the program stream key. The mobile terminal can parse the program stream key by using the obtained service key, and then the mobile terminal decrypts the encrypted program stream by using the program stream key, so that the multimedia video content can be viewed, and thus, the program stream key can be seen. Encryption technology is indispensable for key management.

The prior art patent application No. CN200610078904, Chinese patent application "Mobile TV broadcast control system and broadcast network and broadcast method", discloses a method for encrypting program stream key of service platform, namely: mobile TV service After receiving the program stream key sent by the multimedia broadcast platform, the platform encrypts the program stream key with the service key, and then the mobile TV service platform returns the encrypted program stream key to the multimedia broadcast platform. The inadequacy of the Chinese patent application CN200610078904 is that some mobile operators may operate multiple mobile networks at the same time, such as the 3GPP system network and the 3GPP2 system network, and in different mobile networks, the program stream key is encrypted with the service key. The way is different. Therefore, in order to solve this problem, mobile operators need to build multiple sets of mobile TV service platforms for different mobile networks, which increases the cost of operators to a certain extent, and is not conducive to unified management and maintenance of mobile TV services.

In summary, the technology of program stream key encryption in the existing mobile multimedia broadcast service obviously has inconvenience and defects in practical use, so it is necessary to improve. Summary of the invention

In view of the above drawbacks, an object of the present invention is to provide a method and system for encrypting a program stream key in a mobile multimedia broadcast service, which simultaneously supports program stream key encryption of a plurality of mobile networks, thereby reducing system construction cost. And is conducive to the management and maintenance of the system.

In order to achieve the above object, the present invention provides a method for encrypting a program stream key in a mobile multimedia broadcast service, which is used in a system including a service platform and a multimedia broadcast platform, and the method includes:

A. The multimedia broadcast platform sends the program stream key to the service platform through the inter-platform connection;

B. The service platform determines which mobile network user the service object is, and encrypts the program stream key according to different service objects by using different program stream key encryption methods;

c. The service platform sends the encrypted program stream key to the multimedia broadcast platform through the inter-platform connection.

According to the method of the present invention, the mobile network comprises a 3GPP system network and/or a 3GPP2 system network.

According to the method of the present invention, the 3GPP system network includes: a GSM network, a GPRS network,

WCDMA network, TD-SCDMA network.

According to the method of the present invention, the 3GPP2 system network comprises: a CDMA2000 network. According to the method of the present invention, the step A includes: the multimedia broadcast platform transmitting a program stream key encryption request message to the service platform, where the request message includes a program stream key and a program stream identifier.

According to the method of the present invention, the step B includes: the service platform obtaining a service key according to the program stream identifier. According to the method of the present invention, the step B includes: when the service platform determines that the service object is a 3GPP system network user, the service stream key is encrypted by using the service key, and the service object is determined to be a 3GPP2 network user. Next, the program stream key is encrypted using a short-term key.

According to the method of the present invention, the step B includes: the short-term key is generated by a service key and a random number generated spontaneously by a service platform. According to the method of the present invention, the step C includes: the service platform generating a program stream key response message is sent to the multimedia broadcast platform, and the response message includes an encrypted program stream key and a program stream key identifier.

According to the method of the present invention, the service platform is a mobile TV service platform.

The present invention also provides a system for encrypting a program stream key in a mobile multimedia broadcast service, comprising a service platform and a multimedia broadcast platform, wherein the system performs program stream key encryption: the multimedia broadcast platform sends a program stream key to the a service platform; the service platform determines and encrypts the program stream key by using a different program stream key encryption method according to a specific mobile network of the monthly service object; the service platform sends the encrypted program stream key to the service platform The multimedia broadcast platform. According to the system of the present invention, the service platform includes a '. timer module, a program stream key management module, and a program stream encryption module; the multimedia broadcast platform includes: a program stream key processing module and a program stream information management module. The timer module is configured to send a process start message to the program stream key management module, where the message includes program stream identification information; and a program stream key management module: configured to generate a program by receiving the timer module program stream identification information a stream key, and sending a program stream key encryption request message to the program stream key processing module, where the request message includes a program stream key and program stream identification information; and a program stream key processing module: used to stream the program stream information management module Requesting program stream information, the request message includes program stream identification information, and determining, according to the service object identification information, if the service object is a 3GPP system network user, encrypting the program stream key in a 3GPP system network encryption manner; The object is a 3GPP2 system network user, then the 3GPP2 system network plus Embodiment of the keys are encrypted program stream, and sends the encrypted program stream to the program stream key key management module;

The program stream information management module is configured to receive the program stream identification information sent by the program stream key processing module, and return the service key and the service key identification information corresponding to the program stream to the program stream key processing module according to the program stream identification information. And the service object identifier information, where the service object identifier information is used to indicate whether the service object is a 3GPP system network user or a 3GPP2 system network user. Compared with the prior art, the system and method of the present invention determine that the service objects are different through the service platform, and the program stream key encryption of different mobile networks can be implemented by using different program stream key encryption methods, thereby facilitating simultaneous operation of different mobile networks. The operator only needs to build a mobile TV service platform and multimedia broadcast platform to provide mobile TV services for users of different mobile networks, which reduces construction costs and facilitates system maintenance. DRAWINGS

1 is a system architecture diagram of throttle key encryption in a mobile multimedia broadcast service according to a first embodiment of the present invention.

2 is a system architecture diagram of program stream key encryption in a mobile multimedia broadcast service according to a preferred embodiment of the first embodiment of the present invention.

Fig. 3 is a flow chart showing the method of encrypting a program stream key in the mobile multimedia broadcast service according to the first embodiment of the present invention.

4 is a system architecture diagram of program stream key encryption in a mobile multimedia broadcast service according to a second embodiment of the present invention;

Figure 5 is a flow chart showing the method of buffer key encryption in the mobile multimedia broadcast service according to the second embodiment of the present invention. detailed description

The present invention will be further described in detail below with reference to the accompanying drawings and embodiments. It is understood that the specific embodiments described herein are merely illustrative of the invention and are not intended to limit the invention.

Referring to FIG. 1 and FIG. 2, a system architecture diagram of a program stream key encryption in a mobile multimedia broadcast service according to a first embodiment of the present invention is shown. The mobile multimedia broadcast system 100 mainly includes a service platform 10 and a multimedia broadcast platform 20. The service platform 10 is connected to the N types of mobile networks 40, and provides the key encryption management functions of the multimedia broadcast service to the N types of mobile network users 48 through the N types of mobile networks 40. In this embodiment, the mobile network user 48 corresponds to the mobile network 40 and is a service object of the service platform 10 and the multimedia broadcast platform. In other words, the encrypted program stream is dense. The mobile network user is referred to as the service object of the encrypted program stream key.

The mobile network 40 includes a 3GPP system network 41 and/or a 3GPP2 system network 42, which includes but is not limited to GSM, GPRS, WCDMA, TD-SCDMA networks, and the 3GPP2 system network 42 includes, but is not limited to, a CDMA2000 network.

The multimedia broadcasting platform 20 is mainly used for providing broadcast television program content and related management information. In the present invention, the multimedia broadcast platform 20 is configured to transmit a program stream key encryption request message to the service platform 10, where the request message includes at least a program stream key, and obtains a program stream key encryption response message from the service platform 10, The response message includes at least the encrypted program stream key.

The service platform 10, generally provided by the mobile operator, is used to provide multimedia broadcast services for users of various mobile networks operated by it, such as key management functions of mobile TV services. In the present invention, the service platform 10 is mainly used to receive the program stream key transmitted by the multimedia broadcast platform 20, and according to different service objects, that is, the mobile network user 48 adopts different mobile networks 40, and uses different encryption methods to stream program streams. The key is encrypted and the encrypted program stream key is fed back to the multimedia broadcast platform 20.

In a preferred embodiment, the service platform 10, when determining that the service object is a 3GPP system network 41 user, encrypts the program stream key by using the program stream key encryption method of the 3GPP system network 41, that is, using the program. The flow corresponds to the service key encrypted program stream key stored in the service platform 10; if the service object is the 3GPP2 system network 42 user, the program stream key encryption method of the 3GPP2 system network 42 is used to stream the program stream. The key is encrypted, that is, the service stream key is generated by using the service key stored in the service platform 10 and a random number corresponding to the program stream to generate a short-term key (SK, Short-term Key); and then to the multimedia broadcast platform. 20 Returning the response message of the program stream key encryption, the response message includes at least the encrypted program stream key, thereby implementing the single service platform 10 to simultaneously support the program stream key encryption of the 3GPP system network 41 and the 3GPP2 system network 42.

FIG. 3 is a flowchart of a method for encrypting a program stream key in a mobile multimedia broadcast service according to a first embodiment of the present invention. The method is implemented by the system 100 shown in FIG. 1, and the steps include the following steps:

Step S301, the multimedia broadcast platform 20 sends the program stream key to the service platform 10; In a preferred implementation, step S301 includes: The multimedia broadcast platform 20 transmits a program stream key encrypted request message to the service platform 10 (such as a mobile TV service platform), and the request message includes at least a program stream key.

Step S302: The service platform 10 determines, according to which mobile network user the service object is 48, and encrypts the program stream key according to different service objects using different program stream key encryption methods;

In a preferred implementation, step S302 includes: after receiving the request message of the multimedia broadcast platform 20, the service platform determines which mobile network user the service object is:

When the service object is a user of the 3GPP system network 41, the program stream key is encrypted by the program stream key encryption method of the 3GPP system network 41, that is, the service confidentiality stored in the service platform 10 corresponding to the program stream is used. Key encryption program stream key encryption program stream key;

When the service object is a 3GPP2 system network 42 user, the program stream key is encrypted by the program stream key encryption method of the 3GPP2 system network 42, that is, the service stored in the service platform 10 corresponding to the program stream is used. a key (short-term key) encrypted throttle key generated by a key and a random number;

Step S303: The service platform 10 sends the encrypted program stream key to the multimedia broadcast platform 20.

In a preferred implementation, the step S303 includes: the service platform 10 returns a response message of the program stream key encryption to the multimedia broadcast platform 20, where the response message includes at least the encrypted program stream key and the program stream key identifier. The program stream key identifies a program stream key for use by the mobile network user 48 to identify the encryption.

FIG. 4 is a system architecture diagram of a program stream key encryption in a mobile multimedia broadcast service according to a second embodiment of the present invention. The mobile multimedia broadcast system 100 mainly includes a service platform 10 and a multimedia broadcast platform 20, and the service platform 10 and N kinds of mobile networks 40 are connected, and provide multimedia broadcast services to mobile network users 48 (based on mobile networks, classified as 3GPP system mobile network users and 3GPP2 system mobile network users) through N mobile networks 40 (refer to FIG. 1). The key encryption management function, in the second embodiment, the mobile network user 48 is also a service object that accepts the program stream key encryption of the service platform 10 based on one of the N types of mobile networks. The mobile network 40 includes a 3GPP system network 41 and/or a 3GPP2 system network 42, including but not limited to GSM, GPRS, WCDMA, TD-SCDMA networks, including but not limited to CDMA2000 networks.

The service platform 10 is mainly used for providing multimedia broadcasting services for users of various mobile networks, such as a key management function of the mobile TV service, including a program stream key processing module 104 and a program stream information management module 105.

The multimedia broadcast platform 20 is mainly used for providing broadcast television program content and related management information, and includes a timer module 101, a program stream key management module 102, and a program stream encryption module 103.

The timer module 101 is mainly used as a trigger starting point for the program stream key transmission management process, and can trigger the process through various conditions, for example, when a certain time arrives;

The program stream key management module 102: configured to generate a program stream key by itself, and send a request message to the program stream key processing module 104 to request encryption of the program stream key, and accept the program stream from the service platform 10. The response information of the ECM format of the key encryption request message, wherein the response message includes an encrypted program stream key, a program stream key identifier, and other decryption information, wherein the request message includes a program stream key and a program stream identifier.

The program stream encryption module 103: encrypts the program stream content by using the program stream key according to a certain encryption algorithm, and sends the ECM format information, the encrypted program stream, and other parameters required for broadcast transmission to the mobile network user 48;

The program stream key processing module 104: generates a short-term key suitable for the service object to be a 3GPP2 system network according to the service key corresponding to the program stream and a random number, so as to perform program stream key encryption for the 3GPP2 system network user; The service key corresponding to the program stream is used to encrypt the program stream key for the 3GPP system network user; the program stream related information may be obtained from the program stream information management module 102 according to the program stream identifier, for example, the service corresponding to the program stream. Key, service key identifier, and service object identification information;

The program stream information management module 105 is mainly used to provide program stream related information for other modules, such as: a service key corresponding to the program stream, a service key identifier, and a service object identifier information, such as whether the service object is a 3GPP system network user or a 3GPP2 system. Network users, etc.

In this embodiment, the mobile network user 48 acts as an encryption through a terminal, such as a mobile terminal. The decoding playback terminal of the post-program stream decrypts the received program stream according to the 3GPP and/or 3GPP2 specifications, and performs decoding and decoding. The specific decoding and playback is easy for those skilled in the art to think about, and it is no longer a rumor.

Figure 5 is a flow chart showing a method for encrypting a program stream key in a mobile multimedia broadcast service according to a second embodiment of the present invention.

Step 201: The timer module 101 determines the timing time to send a process start message to the program stream key management module 102, where the message includes program stream identification information, and the program stream key management module 102 feeds back the process to the timer module 101. Start a message response;

Step 202: The program stream key management module 102 generates a program stream key by itself, and sends a program stream key encryption request message to the program stream key processing module 104. The request message includes a program stream key and program stream identification information.

Step 203: The program stream key processing module 104 requests the program stream information management module 105 to request program stream information, where the request message includes program stream identification information;

Step 204: The program stream information management module 105 returns the service key, the service key identification information, and the service object identification information corresponding to the program stream to the program stream key processing module 104 according to the program stream identification information, where the service object identification information is used. To indicate whether the service object is a 3GPP system network user or a 3GPP2 system network user;

Step 205: The program stream key processing module 104 determines, according to the service object identifier information, if the service object is a 3GPP system network user, encrypts the program stream key in a 3GPP system network encryption manner; if the service object is a 3GPP2 system network The user encrypts the program stream key in a 3GPP2 system network encryption manner.

In a preferred embodiment, when the service object is a 3GPP system network user, the program stream key processing module 104 encrypts the program stream key by using the MI EY specification with the service key as a parameter; when the service object is a 3GPP2 system network user The program stream key processing module 104 uses the service key and a self-generated random number to generate a short-term key using the F3 algorithm specified by 3GPP2, and encrypts the node 11 stream key using a short-term key, and the encryption algorithm The AES algorithm can be used.

Step 206: The program stream key processing module 104 determines that if the service object is a 3GPP system network user, the encrypted program stream key and the decryption information are used as an acknowledgment in the ECM format. The information is sent to the program stream key management module 102. If the service object is a 3GPP2 system network user, the encrypted program stream key, the service key identifier, and the random number are sent to the program stream key management by using the ECM format as a response message. Module 102.

Step 207: The program stream key management module 102 forwards the response message to the program stream encryption module.

103;

Step 208: The stream encryption module 103 encrypts the program stream information by using the program stream key, and sends the ECM format information, the encrypted program stream, and the broadcast related parameters to the mobile network user 48 in a broadcast manner, and the mobile network user passes the terminal. , such as a mobile terminal, for decryption playback.

Compared with the prior art, the system and method of the present invention determine that the service objects are different through the service platform, and the program stream key encryption of different mobile networks can be implemented by using different program stream key encryption methods, thereby facilitating simultaneous operation of different mobile networks. Operators only need to build a set of service platforms and multimedia broadcast platforms to provide mobile multimedia broadcast services (such as mobile TV services) to users of different mobile networks, reducing the construction cost and facilitating system maintenance.

It is a matter of course that the invention may be embodied in various other forms and modifications without departing from the spirit and scope of the invention.

Claims

Claim

A method for encrypting a program stream key in a mobile multimedia broadcast service, characterized in that it comprises the following steps:

A. The multimedia broadcast platform sends the program stream key to the service platform;

B. The service platform determines and encrypts the program stream key by using a different program stream key encryption manner according to a specific mobile network of the JI service object;

C. The service platform sends the encrypted program stream key to the multimedia broadcast platform.

2. The method of claim 1 wherein the mobile network comprises: a 3GPP system network and/or a 3GFP2 system network.

3. The method according to claim 2, wherein the 3GPP system network comprises at least one of: a GSM network, a GPRS network, a WCDMA network, and a TD-SCDMA network.

4. The method of claim 2, wherein the system network comprises at least: a CDMA2000 network.

The method according to claim 2, wherein the step A includes: the multimedia broadcast platform sends a program stream key encryption request message to the service platform, where the request message includes the program stream key and the program Stream ID.

The method according to claim 5, wherein the step B comprises: the service platform obtaining the service key according to the throttle identifier.

The method according to claim 5, wherein the step Β comprises: the service platform obtaining, according to the program stream identifier, a service key corresponding to the program stream and corresponding to the program stream identifier according to the program stream identifier The service object identification information is used to indicate different service objects.

The method according to claim 6 or 7, wherein the step Β comprises: when the service platform determines that the service object is a 3GPP system network user, encrypting the program stream key by using a service key, When the service object is judged to be a 3GPP2 system network user, short-term density is adopted. The key encrypts the program stream key.

9. The method of claim 8, wherein the step B comprises: the short-term key being generated by a service key corresponding to the program stream and a random number generated spontaneously by a service platform.

The method according to claim 1, wherein the step C includes: the service platform generates a program stream key response message and sends the message to the multimedia broadcast platform, where the response message includes the encrypted program stream key and the program. Stream key identifier.

The method according to claim 1, wherein the service platform is a mobile phone TV service platform.

12. A system for encrypting a program stream key in a mobile multimedia broadcast service, comprising a service platform and a multimedia broadcast platform, wherein the system performs program stream key encryption in such a manner that: the multimedia broadcast platform sends a program stream key to The service platform determines that the program stream key is encrypted according to a specific program flow key encryption method according to a specific mobile network of the service object; the service platform sends the encrypted program stream key to the service platform The multimedia broadcast platform.

The system of claim 12, wherein the service platform comprises: a timer module, a program stream key management module, and a program stream encryption module; the multimedia broadcast platform includes: a program stream key a processing module and a program stream information management module, wherein: a timer module: configured to send a process start message to the program stream key management module, wherein the message package includes "program stream identification information; and the program stream key management module: for accepting The timer module program stream identification information generates a program stream key, and sends a program stream key encryption request message to the program stream key processing module, where the request message includes the program stream key and the program stream identification information; the program stream key processing module And the program stream information management module is configured to request program stream information, where the request message includes program stream identification information, and is determined according to the service object identifier information. If the service object is a 3GPP system network user, the 3GPP system network encryption method is used. The program stream key is encrypted; if the service object is a 3GPP2 system network user, then 3GPP2 network architecture of the encryption key is encrypted program stream, and sends the encrypted key to said program stream a program stream key management module; a program stream information management module: configured to receive program stream identification information sent by the program stream key processing module, and return a business secret corresponding to the program stream to the program stream key processing module according to the program stream identification information Key and service key identification information and service object identification information, and the service object identification information is used to indicate whether the service object is a 3GPP system network user or a 3GPP2 system network user.

A method for encrypting a program stream key in a mobile multimedia broadcast service, wherein the method is applied to a 3GPP system network user and/or a 3GPP2 system network user, the method comprising the following steps:

A. The multimedia broadcast platform sends the program stream key and the program stream identifier to the service platform; B. The service platform obtains the service key according to the program stream identifier, and if the service object is a 3GPP system network user, the service platform uses the service key The program stream key is encrypted. If the service object is a 3GPP2 system network user, the program stream key needs to be encrypted by using a short-term key.

The method according to claim 14, wherein: the step C comprises: generating, by the service platform, a program stream key identifier and a program stream key message, and sending the message to the multimedia broadcast level

16. The method of claim 15 wherein: said program stream key message includes at least said encrypted program stream key.

The method according to claim 14, wherein: the step B comprises: the service platform obtaining a service object identifier from the inside thereof according to the program stream identifier, where the service object identifier indicates the encrypted program streamline Which network user is used for the key, that is, whether the service object is a 3GPP system network user or a 3GPP2 system network user.

The method according to any one of claims 14-17, wherein the step B includes: the short-term key passes a service key corresponding to the program stream and a random number generated spontaneously by a service platform. generate.